Aruba 4100i Switch Series CLI Reference Guide

Brand: Aruba

Model: 4100i Switch Series

Type: CLI Reference Guide

AOS-CX 10.13 Command-Line

Interface Guide

4100i Switch Series

Published: November 2023

Edition: 1

This product includes code licensed under certain open source licenses which require source

compliance. The corresponding source for these components is available upon request. This offer is

valid to anyone in receipt of this information and shall expire three years following the date of the final

distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source

code, please check if the code is available in the HPE Software Center at

https://myenterpriselicense.hpe.com/cwp-ui/software but, if not, send a written request for specific

software version and product for which you want the open source code. Along with the request, please

send a check or money order in the amount of US $10.00 to:

Hewlett Packard Enterprise Company

Attn: General Counsel

WW Corporate Headquarters

1701 E Mossy Oaks Rd Spring, TX 77389

United States of America.

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett

Packard Enterprise products and services are set forth in the express warranty statements

accompanying such products and services. Nothing herein should be construed as constituting an

additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or

omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,

use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer

Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard

Enterprise website.

For more information, see the KM Process Guide. ?>

Acknowledgments

Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under

license.

Contents

Contents 3

About this document 29

Applicable products 29

What's new in this release 29

Latest version available online 31

Command syntax notation conventions 31

About the examples 31

Identifying switch ports and interfaces 32

Introduction to the AOS-CX CLI 33

CLI access 33

Getting CLI help 33

Authority levels 34

Command contexts 35

Operator context (>) 35

Navigating to the operator context (>) 35

Auditor context 35

Manager context (#) 36

Navigating to the manager context (#) 36

Global configuration context (config) 36

Navigating to the config context 37

Other configuration command contexts 37

Support for range contexts 38

Rules for range contexts 40

Command history 40

Command completion 41

Pipe (|) support in show commands 41

Command syntax notation conventions 42

Service OS CLI commands 43

boot 43

cat 44

cd path 44

config-clear 45

cp 46

du 47

erase zeroize 48

exit 49

format 50

identify 51

ls 52

md5sum 53

mkdir 54

mount 55

mv 56

password (svos) 57

pwd 57

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 3

Contents |4

reboot 58

rm 59

rmdir 59

secure-mode 60

sh 62

system serviceos password-prompt 62

umount 63

update 64

version 65

ACL commands 67

ACL application 67

access-list copy 67

access-list ip 71

access-list ipv6 81

access-list log-timer 89

access-list mac 91

access-list resequence 97

access-list reset 100

apply access-list control-plane 103

apply access-list (to interface or LAG) 104

apply access-list (to VLAN) 106

clear access-list hitcounts 108

clear access-list hitcounts control-plane 109

show access-list 109

show access-list control-plane 113

show access-list hitcounts 115

show access-list hitcounts control-plane 118

show capacities 119

show capacities-status 121

ACL and Policy hardware resource commands 125

show resources 125

Alarm commands 130

alarm 130

show alarm 132

ARP commands 135

arp inspection 135

arp inspection trust 135

arp ipv4 mac 136

arp process-grat-arp 137

clear arp 138

debug arp-security 139

ip local-proxy-arp 141

ip proxy-arp 142

ipv6 neighbor mac 143

show arp 144

show arp inspection interface 144

show arp inspection statistics 146

show arp inspection vlan 146

show arp state 147

show arp summary 149

show arp timeout 150

show arp vrf 151

show ipv6 neighbors 152

show ipv6 neighbors state 153

show tech arp-security 154

Aruba Central commands 157

aruba-central 157

aruba-central support-mode 157

configuration-lockout central managed 158

disable 159

enable 160

location-override 161

location-override-alternative 162

show aruba-central 163

show running-config current-context 166

Banner commands 168

banner 168

show banner 169

Boot commands 171

boot set-default 171

boot system 171

show boot-history 173

Cable diagnostic commands 176

diag cable-diagnostic 176

Captive portal (RADIUS) commands 179

aaa authentication port-access captive-portal-profile 179

show port-access captive-portal-profile 180

url 181

url-hash-key 182

CDP commands 185

cdp 185

clear cdp counters 186

clear cdp neighbor-info 186

show cdp 187

show cdp neighbor-info 188

show cdp traffic 189

Checkpoint commands 190

checkpoint auto 190

checkpoint auto confirm 191

checkpoint diff 192

checkpoint post-configuration 193

checkpoint post-configuration timeout 194

checkpoint rename 195

checkpoint rollback 196

copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 196

copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 198

copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 199

copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 199

copy <REMOTE-URL> {running-config | startup-config} 200

copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 202

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 5

Contents |6

copy {running-config | startup-config} <REMOTE-URL> 203

copy {running-config | startup-config} <STORAGE-URL> 205

copy startup-config running-config 206

copy <STORAGE-URL> running-config 206

erase 208

show checkpoint <CHECKPOINT-NAME> 209

show checkpoint <CHECKPOINT-NAME> hash 211

show checkpoint post-configuration 212

show checkpoint 213

show checkpoint date 214

show running-config hash 215

show startup-config hash 216

write memory 217

Classifier policy commands 218

Classifier policy application 218

apply policy (config-if, config-lag-if, config-vlan) 218

apply policy 221

class copy 222

class ip 223

class ipv6 230

class mac 236

class resequence 238

class reset 240

clear policy hitcounts 240

policy 241

policy copy 246

policy resequence 247

policy reset 248

show class 249

show policy 250

Client Insight Commands 255

client-insight enable 255

client-insight on-boarding event logs 255

diag-dump client-insight basic 256

show capacities client-insight-client-limit 258

show capacities-status client-insight-client-limit 259

show events -c client-insight 260

show tech client-insight 262

CLI session commands 265

alias 265

auto-confirm 266

configure terminal 267

disable 268

do 268

enable (manager context) 269

end 270

exit 270

list 271

page 271

Pipe (|) command 272

repeat 273

session-timeout 274

show session-timeout 275

show alias 275

show history 276

CLI user session management commands 278

cli-session 278

Clock commands 281

clock date 281

clock datetime 281

clock time 282

clock timezone 283

show clock 283

CoPP commands 285

Classes of traffic 285

apply copp-policy 285

class 287

clear copp-policy statistics 288

copp-policy 288

default-class 290

reset copp-policy 290

show copp-policy 292

show copp-policy factory-default 293

show copp-policy statistics 295

show tech copp 296

Debug logging commands 298

clear debug buffer 298

debug {all | <MODULE-NAME>} 299

debug db 300

debug destination 302

show debug 304

show debug buffer 305

show debug destination 306

Device fingerprinting commands 307

cdp 307

client device-fingerprint apply-profile 308

client device-fingerprint client-limit 309

client device-fingerprint profile 309

dhcp 310

http user-agent 311

lldp (device fingerprinting) 312

show client device-fingerprint 313

show client device-fingerprint active 315

show client device-fingerprint profile 316

Device profile commands 318

aaa authentication port-access allow-cdp-auth 318

aaa authentication port-access allow-cdp-bpdu 319

aaa authentication port-access allow-cdp-proxy-logoff 320

aaa authentication port-access allow-lldp-bpdu 321

associate cdp-group 323

associate lldp-group 324

associate mac-group 325

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 7

Contents |8

associate role 326

disable 326

enable 327

ignore (for CDP groups) 328

ignore (for LLDP groups) 329

ignore (for MAC groups) 330

mac-group 336

match (for CDP groups) 337

match (for LLDP groups) 338

match (for MAC groups) 340

port-access cdp-group 344

port-access device-profile 345

port-access device-profile mode block-until-profile-applied 346

port-access lldp-group 347

show port-access device-profile 348

DHCP client commands 351

ip dhcp 351

show ip dhcp 352

DHCPv4 relay commands 353

dhcp-relay 353

dhcp-relay hop-count-increment 353

dhcp-relay option 82 354

diag-dump dhcp-relay basic 355

ip bootp-gateway 357

ip helper-address 358

show dhcp-relay 358

show dhcp-relay bootp-gateway 359

show ip helper-address 360

DHCP relay (IPv6) commands 362

dhcpv6-relay 362

dhcpv6-relay option 79 363

ipv6 helper-address 363

show dhcpv6-relay 365

show ipv6 helper-address 365

DHCPv4 snooping commands 367

clear dhcpv4-snooping binding 367

clear dhcpv4-snooping statistics 368

dhcpv4-snooping 368

dhcpv4-snooping (in config-vlan context) 369

dhcpv4-snooping allow-overwrite-binding 370

dhcpv4-snooping authorized-server 371

dhcpv4-snooping event-log client 372

dhcpv4-snooping external-storage 373

dhcpv4-snooping flash-storage 374

dhcpv4-snooping max-bindings 376

dhcpv4-snooping option 82 377

dhcpv4-snooping static-attributes 378

dhcpv4-snooping trust 379

dhcpv4-snooping verify mac 380

show dhcpv4-snooping 381

show dhcpv4-snooping binding 382

show dhcpv4-snooping statistics 384

DHCPv6 snooping commands 385

clear dhcpv6-snooping binding 385

clear dhcpv6-snooping statistics 386

dhcpv6-snooping 386

dhcpv6-snooping (in config-vlan context) 387

dhcpv6-snooping authorized-server 388

dhcpv6-snooping event-log client 389

dhcpv6-snooping external-storage 390

dhcpv6-snooping flash-storage 392

dhcpv6-snooping max-bindings 393

dhcpv6-snooping trust 394

show dhcpv6-snooping 395

show dhcpv6-snooping binding 396

show dhcpv6-snooping statistics 397

DHCP options commands 399

http-proxy 399

DNS client commands 401

ip dns domain-list 401

ip dns domain-name 402

ip dns host 403

ip dns server address 404

show ip dns 405

ERPS Commands 406

clear erps ring <RINGID> instance <ID> 406

clear erps statistics 406

erps ring 407

erps ring <RINGID> <port0|port1> interface 408

erps ring <RINGID> description 409

erps ring <RINGID> guard-interval 410

erps ring <RINGID> hold-off-interval 411

erps ring <RINGID> instance 412

erps ring <RINGID> instance <ID> control-vlan 413

erps ring <RINGID> instance <ID> description 414

erps ring <RINGID> instance <ID> enable 415

erps ring <RINGID> instance <ID> protected-vlans 416

erps ring <RINGID> instance <ID> protection-switch {{manual|force} <PORT0>|<PORT1>} 417

erps ring <RINGID> instance <ID> revertive 419

erps ring <RINGID> instance <ID> role 420

erps ring <RINGID> instance <ID> rpl 421

erps ring <RINGID> meg-level 422

erps ring <RINGID> parent-ring 423

erps ring <RINGID> sub-ring 424

erps ring <RINGID> tcn-propogation 425

erps ring <RINGID> transmission-interval 426

erps ring <RINGID> wtr-interval 427

show erps statistics 428

show erps status 429

show erps summary 432

redistribute local-mac 433

Fault monitor commands 434

(Fault enabling/disabling) 434

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 9

Contents |10

action 435

apply fault-monitor profile 438

fault-monitor profile 439

show fault-monitor profile 440

show interface fault-monitor profile 442

show interface fault-monitor status 443

show running-config 443

threshold 445

Firmware management commands 448

copy {primary | secondary} <REMOTE-URL> 448

copy {primary | secondary} <FIRMWARE-FILENAME> 449

copy primary secondary 450

copy <REMOTE-URL> 450

copy secondary primary 452

copy <STORAGE-URL> 453

copy hot-patch 454

hot-patch 455

show hot-patch 457

HTTPS server commands 459

https-server authentication certificate 459

https-server authentication password 460

https-server max-user-sessions 460

https-server rest access-mode 461

https-server rest firmware-site-distribution 462

https-server session close all 463

https-server session-timeout 464

https-server vrf 465

show https-server 466

show https-server authentication 467

ICMP commands 469

ip icmp redirect 469

ip icmp throttle 469

ip icmp unreachable 470

IGMP commands 472

ip igmp 472

ip igmp apply access-list 473

ip igmp last-member-query-interval 474

ip igmp querier 475

ip igmp querier interval 476

ip igmp querier-wait-time 477

ip igmp querier query-max-response-time 478

ip igmp robustness 479

ip igmp router-alert-check 480

ip igmp static-group 481

ip igmp version 481

ip igmp version strict 482

no ip igmp 483

show ip igmp 484

show ip igmp counters 485

show ip igmp group 486

show ip igmp groups 489

show ip igmp interface 491

show ip igmp interface counters 492

show ip igmp interface group 493

show ip igmp interface groups 494

show ip igmp interface statistics 496

show ip igmp static-groups 497

show ip igmp statistics 498

IGMP snooping commands 500

ip igmp snooping apply access list 500

ip igmp snooping (config mode) 501

ip igmp snooping (interface mode) 502

ip igmp snooping preprogram-starg-flow 504

ip igmp snooping static group 506

ip igmp snooping (vlan mode) 507

show ip igmp snooping 508

In-System Programming commands 512

clear update-log 512

show needed-updates 512

Interface commands 514

allow-unsupported-transceiver 514

default interface 515

description 516

energy-efficient-ethernet 517

flow-control 518

interface 519

interface vlan 520

ip address 521

ip mtu 522

ipv6 address 522

mtu 524

persona 525

rate-interval 527

show allow-unsupported-transceiver 528

show interface 529

show interface dom 534

show interface energy-efficient ethernet 534

show interface flow-control 535

show interface statistics 540

show interface transceiver 543

show interface utilization 546

show ip interface 547

show ip source-interface 548

show ipv6 interface 549

show ipv6 source-interface 551

shutdown 552

speed 552

IP Client Tracker commands 556

client track ip 556

client track ip { enable | disable | auto } 557

client track ip client-limit 558

client track ip update-interval 558

client track ip update-method probe 559

show capacities 560

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 11

Contents |12

show client ip { count | port | vlan } 561

IPv4 source lockdown commands 562

ipv4 source-binding 562

ipv4 source-lockdown 563

ipv4 source-lockdown hardware retry 564

show ipv4 source-binding 564

show ipv4 source-lockdown 565

IPv6 RA commands 569

ipv6 address <global-unicast-address> 569

ipv6 address autoconfig 570

ipv6 address link-local 571

ipv6 nd cache-limit 571

ipv6 nd dad attempts 572

ipv6 nd hop-limit 573

ipv6 nd mtu 574

ipv6 nd ns-interval 574

ipv6 nd prefix 575

ipv6 nd ra dns search-list 577

ipv6 nd ra dns server 578

ipv6 nd ra lifetime 579

ipv6 nd ra managed-config-flag 580

ipv6 nd ra max-interval 581

ipv6 nd ra min-interval 582

ipv6 nd ra other-config-flag 582

ipv6 nd ra reachable-time 583

ipv6 nd ra retrans-timer 584

ipv6 nd route 585

ipv6 nd router-preference 586

ipv6 nd suppress-ra 587

show ipv6 nd global traffic 587

show ipv6 nd interface 588

show ipv6 nd interface prefix 591

show ipv6 nd interface route 592

show ipv6 nd ra dns search-list 593

show ipv6 nd ra dns server 594

IPv6 source lockdown commands 595

ipv6 source-binding 595

ipv6 source-lockdown 596

ipv6 source-lockdown hardware retry 597

show ipv6 source-binding 597

show ipv6 source-lockdown 598

IRDP commands 602

diag-dump irdp basic 602

ip irdp 603

ip irdp holdtime 604

ip irdp maxadvertinterval 604

ip irdp minadvertinterval 605

ip irdp preference 606

show ip irdp 607

Job Scheduler commands 609

job 609

schedule 611

show job 614

show capacities (job, schedule) 617

show running-config (job, schedule) 617

show schedule 619

Key chain commands 622

accept-lifetime 622

key 623

keychain 624

key-string 625

name 626

recv-id 627

send-lifetime 628

send-id 629

show capacities keychain 630

show keychain 631

show running-config keychain 632

L1-100Mbps downshift commands 634

downshift enable 634

show interface 635

show interface downshift-enable 639

show running-config interface 640

LACP and LAG commands 642

description 642

interface lag 643

lacp fallback-static 644

lacp mode 645

lacp port-id 646

lacp port-priority 646

lacp rate 647

lacp system-priority 648

lag 649

show interface 650

show lacp aggregates 652

show lacp configuration 653

show lacp interfaces 653

show lag 657

show running-config interface lag 658

shutdown 659

vlan trunk native 660

LLDP commands 662

clear lldp neighbors 662

clear lldp statistics 662

lldp 663

lldp dot3 664

lldp dot3 eee 665

lldp dot3 mfs 665

lldp holdtime-multiplier 666

lldp management-address vlan 667

lldp management-ipv4-address 668

lldp management-ipv6-address 669

lldp med 670

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 13

Contents |14

lldp med location 671

lldp receive 673

lldp reinit 674

lldp select-tlv 675

lldp timer 676

lldp transmit 678

lldp txdelay 678

lldp trap enable 679

show lldp configuration 681

show lldp local-device 682

show lldp neighbor-info 684

show lldp neighbor-info detail 686

show lldp statistics 689

show lldp tlv 690

Local AAA commands 692

aaa accounting all-mgmt 692

aaa authentication console-login-attempts 694

aaa authentication limit-login-attempts 695

aaa authentication login 696

aaa authentication minimum-password-length 697

aaa authorization commands (local) 698

show aaa accounting 700

show aaa authentication 701

show aaa authorization 702

show authentication locked-out-users 703

show ssh authentication-method 704

show user 704

ssh password-authentication 706

ssh public-key-authentication 706

user authorized-key 707

Log rotation commands 710

logging threshold 710

logrotate maxsize 712

logrotate period 712

logrotate target 713

show logrotate 715

Loop protect commands 716

loop-protect 716

loop-protect action 717

loop-protect re-enable-timer 718

loop-protect transmit-interval 719

loop-protect trap loop-detected 719

loop-protect vlan 720

show loop-protect 721

Loopback commands 725

interface loopback 725

ip address 725

ipv6 address 726

show interface loopback 727

MAC address table commands 729

clear mac-address 729

clear mac address mac move 731

clear mac-address-table 732

mac-address-table age-time 732

show mac-address-table 733

show mac-address-table address 734

show mac-address-table count 735

show mac-address-table dynamic 736

show mac-address-table interface 737

show mac-address-table lockout 738

show mac address table mac move 739

show mac-address-table mac-move 740

show mac-address-table port 742

show mac-address-table static 742

show mac-address-table vlan 743

show mac address table mac move 744

static-mac 745

Mirroring commands 747

clear mirror 747

comment 747

destination interface 749

diagnostic 750

disable 751

enable 751

mirror session 752

show mirror 753

source interface 755

MLD snooping global configuration commands 758

ipv6 mld snooping 758

MLD snooping VLAN configuration commands 759

ipv6 mld snooping 759

ipv6 mld snooping fastlearn 760

ipv6 mld snooping fastleave vlan 760

ipv6 mld snooping forced fastleave vlan 761

ipv6 mld snooping apply access-list 762

ipv6 mld snooping auto vlan 764

ipv6 mld snooping blocked vlan 764

ipv6 mld snooping forward vlan 765

ipv6 mld snooping preprogram-starg-flow 766

ipv6 mld snooping static-group 768

ipv6 mld snooping version 768

MLD snooping show commands 770

show ipv6 mld snooping 770

MLD configuration commands for interface VLAN 774

ipv6 mld 774

ipv6 mld apply access-list 774

no ipv6 mld 776

ipv6 mld querier 776

ipv6 mld querier interval 777

ipv6 mld querier-wait-time 778

ipv6 mld last-member-query-interval 778

ipv6 mld querier query-max-response-time 779

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 15

Contents |16

ipv6 mld robustness 780

ipv6 mld static-group 781

ipv6 mld version 781

ipv6 mld version strict 782

MLD show commands for interface VLAN 784

show ipv6 mld 784

MLD configuration commands for interface 788

ipv6 mld 788

ipv6 mld apply access-list 788

no ipv6 mld 790

ipv6 mld querier 790

ipv6 mld querier interval 791

ipv6 mld last-member-query-interval 792

ipv6 mld querier query-max-response-time 792

ipv6 mld robustness 793

ipv6 mld static-group 794

ipv6 mld version 795

ipv6 mld version strict 795

MSTP commands 797

clear spanning-tree statistics 797

show spanning-tree 797

show spanning-tree detail 799

show spanning-tree inconsistent-ports 800

show spanning-tree mst 801

show spanning-tree mst-config 804

show spanning-tree mst detail 804

show spanning-tree mst <INSTANCE-ID> 808

show spanning-tree mst <INSTANCE-ID> detail 809

show spanning-tree mst interface 810

show spanning-tree summary port 811

show spanning-tree summary root 812

spanning-tree 813

spanning-tree bpdu-filter 814

spanning-tree bpdu-guard 815

spanning-tree bpdu-guard timeout 816

spanning-tree config-name 817

spanning-tree config-revision 818

spanning-tree cost 819

spanning-tree forward-delay 820

spanning-tree hello-time 821

spanning-tree instance cost 822

spanning-tree instance port-priority 823

spanning-tree instance priority 824

spanning-tree instance vlan 825

spanning-tree link-type 826

spanning-tree loop-guard 826

spanning-tree max-age 827

spanning-tree max-hops 828

spanning-tree mode 829

spanning-tree port-priority 831

spanning-tree port-type 832

spanning-tree priority 833

spanning-tree root-guard 834

spanning-tree rpvst-filter 835

spanning-tree rpvst-guard 836

spanning-tree tcn-guard 837

spanning-tree transmit-hold-count 838

spanning-tree trap 838

MVRP commands 841

clear mvrp statistics 841

mvrp 841

mvrp registration 842

mvrp timer 843

show mvrp config 844

show mvrp state 845

show mvrp statistics 846

NTP commands 848

ntp authentication 848

ntp authentication-key 848

ntp disable 850

ntp enable 850

ntp server 851

ntp trusted-key 853

ntp vrf 854

show ntp associations 855

show ntp authentication-keys 856

show ntp servers 857

show ntp statistics 857

show ntp status 858

Ping commands 860

ping 860

ping6 865

PKI commands 869

crypto pki application 869

crypto pki certificate 870

crypto pki ta-profile 871

enroll self-signed 872

enroll terminal 873

import (CA-signed leaf certificate) 874

import (self-signed leaf certificate) 876

key-type 878

ocsp disable-nonce 879

ocsp enforcement-level 880

ocsp url 881

ocsp vrf 882

revocation-check ocsp 883

show crypto pki application 884

show crypto pki certificate 885

show crypto pki ta-profile 887

ta-certificate 889

subject 890

PKI EST commands 892

arbitrary-label 892

arbitrary-label-enrollment 893

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 17

Contents |18

arbitrary-label-reenrollment 894

crypto pki est-profile 895

enroll est-profile 896

reenrollment-lead-time 897

retry-count 898

retry-interval 899

show crypto pki est-profile 900

url 901

username 902

vrf 904

PoE commands 906

lldp dot3 poe 906

lldp med poe 907

power-over-ethernet 907

power-over-ethernet allocate-by 908

power-over-ethernet always-on 910

power-over-ethernet assigned-class 911

power-over-ethernet pre-std-detect 912

power-over-ethernet priority 912

power-over-ethernet quick-poe 913

power-over-ethernet threshold 914

power-over-ethernet trap 915

show lldp local 916

show lldp neighbor 917

show power-over-ethernet 918

Port access 802.1X authentication commands 921

aaa authentication port-access dot1x authenticator 921

aaa authentication port-access dot1x authenticator auth-method 922

aaa authentication port-access dot1x authenticator cached-reauth 923

aaa authentication port-access dot1x authenticator cached-reauth-period 923

aaa authentication port-access dot1x authenticator discovery-period 924

aaa authentication port-access dot1x authenticator eap-tls-fragment 925

aaa authentication port-access dot1x authenticator eapol-timeout 926

aaa authentication port-access dot1x authenticator initial-auth-response-timeout 927

aaa authentication port-access dot1x authenticator max-eapol-requests 928

aaa authentication port-access dot1x authenticator max-retries 929

aaa authentication port-access dot1x authenticator quiet-period 930

aaa authentication port-access dot1x authenticator radius server-group 931

aaa authentication port-access dot1x authenticator reauth 932

aaa authentication port-access dot1x authenticator reauth-period 933

clear dot1x authenticator statistics interface 934

show aaa authentication port-access dot1x authenticator interface client-status 934

show aaa authentication port-access dot1x authenticator interface port-statistics 936

Port access 802.1X supplicant commands 939

aaa authentication port-access dot1x supplicant(global) 939

aaa authentication port-access dot1x supplicant(port) 939

associate policy 940

canned-eap-success 942

clear dot1x supplicant statistics 942

discovery-timeout 944

eap-identity 945

eapol-force-multicast 947

eapol-method 948

eapol-protocol-version 949

eapol-timeout 951

enable 952

enable 953

fail-mode 953

held-period 954

max-retries 956

policy (supplicant) 957

port-access dot1x supplicant restart 958

show aaa authentication port-access dot1x supplicant policy 959

show aaa authentication port-access dot1x supplicant statistics 961

show aaa authentication port-access dot1x supplicant status 963

start-mode 966

Port access cached-critical role commands 968

aaa authentication port-access cached-critical-role (global) 968

aaa authentication port-access cached-critical-role (per interface) 970

port-access clear cached-client 971

show port-access cached-clients 972

show port-access cached-critical-role info 973

Port access general commands 975

aaa authentication port-access allow-lldp-auth 975

aaa authentication port-access allow-cdp-auth 977

aaa authentication port-access auth-mode 977

aaa authentication port-access auth-precedence 979

aaa authentication port-access auth-priority 980

aaa authentication port-access auth-role 981

aaa authentication port-access client-auto-log-off final-authentication-failure 982

aaa authentication port-access client-limit 983

aaa authentication port-access client-limit multi-domain 984

aaa authentication port-access radius-override 985

port-access allow-flood-traffic 986

port-access auto-vlan 987

port-access client-move 988

port-access event-log client 989

port-access fallback-role 990

port-access log-off client 991

port-access onboarding-method precedence 992

port-access onboarding-method concurrent 993

port-access reauthenticate interface 994

show aaa authentication port-access interface client-status 995

show port-access clients 997

show port-access clients detail 1000

show port-access clients onboarding-method 1003

Port access MAC authentication commands 1005

aaa authentication port-access mac-auth 1005

aaa authentication port-access mac-auth addr-format 1006

aaa authentication port-access mac-auth auth-method 1006

aaa authentication port-access mac-auth cached-reauth 1007

aaa authentication port-access mac-auth cached-reauth-period 1008

aaa authentication port-access mac-auth password 1009

aaa authentication port-access mac-auth quiet-period 1010

aaa authentication port-access mac-auth radius server-group 1011

aaa authentication port-access mac-auth reauth 1012

AOS-CX 10.13 Command-Line Interface Guide | (4100i Switch Series) 19

Contents |20

aaa authentication port-access mac-auth reauth-period 1013

clear mac-auth statistics 1014

show aaa authentication port-access mac-auth interface client-status 1014

show aaa authentication port-access mac-auth interface port-statistics 1016

Port access policy commands 1018

port-access policy 1018

port-access policy copy 1022

port-access policy resequence 1023

port-access policy reset 1023

clear port-access policy hitcounts 1025

show port-access policy 1027

show port-access policy hitcounts 1029

Port access role commands 1032

associate policy 1032

auth-mode 1033

cached-reauth-period 1034

client-inactivity timeout 1035

description 1036

device-traffic-class 1036

mtu 1037

poe-allocate-by 1038

poe-priority 1039

port-access role 1040

reauth-period 1040

session timeout 1041

show aaa authentication port-access interface client-status 1042

show port-access role 1043

stp-admin-edge-port 1045

trust-mode 1046

vlan 1047

Port access security violation commands 1050

port-access security violation action 1050

port-access security violation action shutdown auto-recovery 1051

port-access security violation action shutdown recovery-timer 1052

show interface 1053

show port-access aaa violation interface 1053

show port-access port-security violation client-limit-exceeded interface 1055

Port access VLAN group commands 1057

associate-vlan 1057

port-access vlan-group 1058

show running-config port-access vlan-group 1059

Port filtering commands 1060

portfilter 1060

show portfilter 1061

Port security commands 1063

port-access port-security 1063

port-access port-security client-limit 1064

port-access port-security mac-address 1064

show port-access port-security interface client-status 1065

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533

Aruba 4100i Switch Series CLI Reference Guide

Aruba 4100i Switch Series CLI Reference Guide

Aruba 4100i Switch Series CLI Reference Guide

Related papers

Other documents