Enterasys C2K122-24 Specifikace

SecureStack C3Stackable SwitchesConfiguration GuideFirmware Version 1.00.xxP/N 9034313-02

viii reset...

set boot system3-42 Basic Configurationset boot systemUsethiscommandtosetthefirmwareimagetheswitchloadsatstartup.Syntaxset boot system fi

Starting and Configuring TelnetSecureStack C3 Configuration Guide 3-43Starting and Configuring TelnetPurposeToenableordisableTelnet,andtostart

set telnet3-44 Basic Configurationset telnetUsethiscommandtoenableordisableTelnetonthe switch.Syntaxset telnet {enable | disable} [inbound |

Managing Switch Configuration and FilesSecureStack C3 Configuration Guide 3-45Managing Switch Configuration and FilesConfiguration Persistence ModeThe

show snmp persistmode3-46 Basic Configurationshow snmp persistmodeUsethiscommandtodisplaytheconfigurationpersistencemodesetting.Bydefault,

save configSecureStack C3 Configuration Guide 3-47ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosettheconfigurationpersistencemo

show config3-48 Basic ConfigurationC3(su)->dir Images:==================================================================Filename: C3-series_02

configureSecureStack C3 Configuration Guide 3-49UsageTheseparatefacilitiesthatcanbedisplayedbythiscommandareidentifiedinthedisplayofth

copy3-50 Basic ConfigurationExampleThisexampleshowshowtoexecutethe“Jan1_2004.cfg”configurationfile:C3(su)->configure configs/Jan1_2004.cf

show tftp settingsSecureStack C3 Configuration Guide 3-51ModeSwitchcommand,read‐write.UsageUsetheshowconfigcommandasdescribedonpage3‐48to

ixshow port trap...4-2

clear tftp timeout3-52 Basic ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplesetsthetimeoutperiodto4secon

clear tftp retrySecureStack C3 Configuration Guide 3-53ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplesetstheretrycount

Configuring CDP3-54 Basic ConfigurationConfiguring CDPPurposeToreviewandconfiguretheEnterasysCDPdiscoveryprotocol.Thisprotocolisusedtodi

show cdpSecureStack C3 Configuration Guide 3-55CDP Hold Time :180CDP Authentication Code :00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

set cdp state3-56 Basic Configurationset cdp stateUsethiscommandtoenableordisabletheCDPdiscoveryprotocolononeormoreports.Syntaxset cdp

set cdp intervalSecureStack C3 Configuration Guide 3-57ModeSwitchcommand,read‐write.UsageTheauthenticationcodevaluedeterminesaswitch’sCDPdom

set cdp hold-time3-58 Basic Configurationset cdp hold-timeUsethiscommandtosettheholdtimevalueforCDPdiscoveryprotocolconfigurationmessage

show neighborsSecureStack C3 Configuration Guide 3-59show neighborsThiscommanddisplaysNeighborDiscoveryinformationforeithertheCDPorCiscoDP

Configuring Cisco Discovery Protocol3-60 Basic ConfigurationConfiguring Cisco Discovery ProtocolPurposeToreviewandconfiguretheCiscodiscoverypro

show ciscodp port infoSecureStack C3 Configuration Guide 3-61Device ID : 001188554A60Last Change : WED NOV 08 13:19:56 2006Table 3‐5providesanexpla

x Chapter 5: SNMP ConfigurationSNMP Configuration Summary ...

set ciscodp status3-62 Basic Configurationset ciscodp statusUsethiscommandtoenableordisabletheCiscodiscoveryprotocolgloballyontheswitch.

set ciscodp timerSecureStack C3 Configuration Guide 3-63set ciscodp timerUsethiscommandtosetthenumberofsecondsbetweenCiscodiscoveryprotoco

set ciscodp port3-64 Basic Configurationset ciscodp portUsethiscommandtosetthestatus,voiceVLAN,extendedtrustmode,andCoSpriorityforuntr

clear ciscodpSecureStack C3 Configuration Guide 3-65•ACiscoDPportstateoftrustedoruntrustedonlyaffectstaggedtraffictransmittedbythedevi

clear ciscodp3-66 Basic ConfigurationDefaultsIfnoparametersareentered,allCiscoDPparametersareresettothedefaultsgloballyandforallport

Clearing and Closing the CLISecureStack C3 Configuration Guide 3-67Clearing and Closing the CLIPurposeToclearthe CLIscreenortocloseyourCLIse

exit3-68 Basic Configurationexit UseeitherofthesecommandstoleaveaCLIsession.SyntaxexitParametersNone.DefaultsNone.ModeSwitchcommand,read‐on

Resetting the SwitchSecureStack C3 Configuration Guide 3-69Resetting the SwitchPurposeToresetoneormoreswitches,andtocleartheuser‐definedcon

clear config3-70 Basic ConfigurationReloading switch 1.This switch is manager of the stack.STACK: detach 3 unitsclear configUsethiscommandtoclear

Using and Configuring WebViewSecureStack C3 Configuration Guide 3-71Using and Configuring WebViewPurposeBydefault,WebView(TheEnterasysNetworksem

xishow snmp notify... 5-36s

set webview3-72 Basic Configurationset webviewUsethiscommandtoenableordisableWebViewontheswitch.Syntaxset webview {enable | disable}Paramete

set sslSecureStack C3 Configuration Guide 3-73set sslUsethiscommandtoenableordisabletheuseofWebViewoverSSLport443.Bydefault,SSLisdi

set ssl3-74 Basic Configuration

SecureStack C3 Configuration Guide 4-14Port ConfigurationThischapterdescribesthePortConfigurationsetofcommandsandhowtousethem.Port Config

Reviewing Port Status4-2 Port ConfigurationPortnumbercanbe:1–48fortheC3G124‐48andC3G124‐48P1–24fortheC3G124‐24,C3G134‐24PThehighestv

show portSecureStack C3 Configuration Guide 4-3show portUsethiscommandtodisplaywhetherornotoneormoreportsareenabledforswitching.Syntaxs

show port status4-4 Port Configurationshow port statusUsethiscommandtodisplayoperatingandadminstatus,speed,duplexmodeandporttypeforone

show port countersSecureStack C3 Configuration Guide 4-5show port countersUsethiscommandtodisplayportcounterstatisticsdetailingtrafficthroug

Disabling / Enabling and Naming Ports4-6 Port ConfigurationThisexampleshowshowtodisplayallfe.3.1portcounterstatisticsrelatedtotrafficthr

set port disableSecureStack C3 Configuration Guide 4-7set port disableUsethiscommandtoadministrativelydisableoneormoreports.Whenthiscomman

xii set spantree spanguard...6-25cle

set port enable4-8 Port Configurationset port enableUsethiscommandtoadministrativelyenableoneormoreports.Syntaxset port enable port-stringPa

set port aliasSecureStack C3 Configuration Guide 4-9set port aliasUsethiscommandtoassignanaliasnametoaport.Syntaxset port alias port-string

show port speed4-10 Port Configurationshow port speedUsethiscommandtodisplaythedefaultspeedsettingononeormoreports.Syntaxshow port speed

show port duplexSecureStack C3 Configuration Guide 4-11ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetfe.3.3toaportspeedof1

Enabling / Disabling Jumbo Frame Support4-12 Port ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetFastE

show port jumboSecureStack C3 Configuration Guide 4-13ExampleThisexampleshowshowtodisplaythestatusofjumboframesupportforge.1.1:C3(su)-&g

set port jumbo4-14 Port Configurationset port jumbo Usethiscommandtoenableordisablejumboframesupportononeormoreports.Syntaxset port jumb

Setting Auto-Negotiation and Advertised AbilitySecureStack C3 Configuration Guide 4-15Setting Auto-Negotiation and Advertised AbilityPurposeToreview,

set port negotiation4-16 Port ConfigurationExampleThisexampleshowshowtodisplayauto‐negotiationstatusfor1‐GigabitEthernetport14inunit 3:C

set port advertiseSecureStack C3 Configuration Guide 4-17ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplayadvertisementstatusf

xiiiConfiguring the VLAN Egress List ...

clear port advertise4-18 Port ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoconfigureport1toadvertise1000BASE‐Tfu

Setting Flow ControlSecureStack C3 Configuration Guide 4-19Setting Flow ControlPurposeToreview,enableordisableportflowcontrol.Flowcontrolis

set flowcontrol4-20 Port Configurationset flowcontrolUsethiscommandtoenableordisableflowcontrol.Syntaxset flowcontrol {enable | disable}Parame

Setting Port Link Traps and Link Flap DetectionSecureStack C3 Configuration Guide 4-21clear linkflap action 4-27set linkflap threshold 4-28set linkfla

show port trap4-22 Port Configurationshow port trapUsethiscommandtodisplaywhethertheportisenabledforgeneratinganSNMPtrapmessageifits

show linkflapSecureStack C3 Configuration Guide 4-23ExampleThefollowingexampledisablessendingtraponFastEthernetport1onunit3.C3(su)->se

show linkflap4-24 Port ConfigurationUsageThelinkflapdefaultconditionsareshowninthefollowingtable.ExamplesThisexampleshowshowtodisplayt

set linkflap globalstateSecureStack C3 Configuration Guide 4-25Thisexampleshowshowtodisplaythelinkflapmetricstable:C3(rw)->show linkflap

set linkflap portstate4-26 Port Configurationset linkflap portstateUsethiscommandtoenableordisablelinkflapmonitoringononeormoreports.Syn

set linkflap actionSecureStack C3 Configuration Guide 4-27set linkflap actionUsethiscommandtosetreactionstoalinkflapviolation.Syntaxset lin

xiv Chapter 9: Port Priority ConfigurationPort Priority Configuration Summary ...

set linkflap threshold4-28 Port ConfigurationModeSwitchmode,read‐write.ExampleThisexampleshowshowtoclearthelinkflapviolationactiononport

clear linkflap downSecureStack C3 Configuration Guide 4-29ModeSwitchmode,read‐write.ExampleThisexampleshowshowtosetthelinkflapdowntimeonp

Configuring Broadcast Suppression4-30 Port ConfigurationDefaultsIfport‐stringisnotspecified,settingsand/orstatisticswillbeclearedonallpor

set port broadcastSecureStack C3 Configuration Guide 4-31ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythebroadcastsuppress

clear port broadcast4-32 Port ConfigurationParametersDefaultsNone.Mode Switchcommand,read‐write.port‐string Selecttheportsforwhichtoclearbro

Port MirroringSecureStack C3 Configuration Guide 4-33ExampleThisexampleclearsthebroadcastthresholdlimitto14881ppsforports1through5:C3(su

Port Mirroring4-34 Port Configuration•Allportsonthepathfromthesou r ceporttotheremotedestinationmustbemembersofthemirrorVLAN.•Ons

show port mirroringSecureStack C3 Configuration Guide 4-35show port mirroringUsethiscommandtodisplaythesourceandtargetportsformirroring,an

set port mirroring4-36 Port Configurationset port mirroringUsethiscommandtocreateanewmirroringrelationshiportoenableordisableanexisting

clear port mirroringSecureStack C3 Configuration Guide 4-37clear port mirroringUsethiscommandtoclearaportmirroringrelationship.Syntaxclear po

xvChapter 11: Logging and Network ManagementConfiguring System Logging ...

clear mirror vlan4-38 Port ConfigurationExampleThefollowingexampleassignsaVLANformirroringtrafficandthenshowstheconfiguredportmirroring

Link Aggregation Control Protocol (LACP)SecureStack C3 Configuration Guide 4-39themdynamically.SincetheprotocolisbasedontheIEEE802.3adspeci

Link Aggregation Control Protocol (LACP)4-40 Port ConfigurationSecureStack C3 Usage ConsiderationsInnormalusage(andtypicalimplementations)there

show lacpSecureStack C3 Configuration Guide 4-41•ThereisnoavailableaggregatorfortwoormoreportswiththesameLAGID.Thiscanhappenifthere

show lacp4-42 Port ConfigurationParametersDefaultsIfport‐stringisnotspecified,linkaggregationinformationforallLAGswillbedisplayed.ModeSwi

set lacpSecureStack C3 Configuration Guide 4-43set lacpUsethiscommandtodisableorenabletheLinkAggregationControlProtocol(LACP)onthe devi

set lacp asyspri4-44 Port Configurationset lacp asyspriUsethiscommandtosettheLACPsystempriority.Syntaxset lacp asyspri valueParametersDefault

clear lacpSecureStack C3 Configuration Guide 4-45UsageLACPwillusethisvaluetoformanoperkey.Onlyunderlyingphysicalportswithoperkeysmatc

set lacp static4-46 Port Configurationset lacp staticUsethiscommandtodisableorenablestaticlinkaggregation,ortoassignoneormoreunderlyin

set lacp singleportlagSecureStack C3 Configuration Guide 4-47DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoremovefe.1.

xvi clear sntp poll-timeout ...11-33

clear lacp singleportlag4-48 Port Configurationclear lacp singleportlagUsethiscommandtoresetthesingleportLAGfunctionbacktothedefaultstat

show port lacpSecureStack C3 Configuration Guide 4-49• E=Expired• F=Defaulted• D=Distributing(txenabled)• C=Collecting(rxenabled)• S=Sy

set port lacp4-50 Port Configurationset port lacpUsethiscommandtosetlinkaggregationparametersfor oneormoreports.Thesesettingswilldeter

set port lacpSecureStack C3 Configuration Guide 4-51DefaultsAtleastoneparametermustbeenteredperport‐string.Ifenableordisablearenotspecif

clear port lacp4-52 Port Configurationclear port lacpUsethiscommandtoclearlinkaggregationsettingsforoneormoreports.Syntaxclear port lacp p

Configuring Protected PortsSecureStack C3 Configuration Guide 4-53Configuring Protected PortsTheProtectedPortfeatureisusedtopreventportsfrom

set port protected4-54 Port Configurationset port protectedUsethiscommandtospecifyaporttobeprotectedandassigntheporttoagroupofprotec

clear port protectedSecureStack C3 Configuration Guide 4-55ExampleThisexampleshowshowtodisplayinformationaboutallprotectedports:C3(ro)->s

set port protected name4-56 Port Configurationset port protected nameUsethiscommandtoassignanametoaprotectedportgroupid.Syntaxset port pro

clear port protected nameSecureStack C3 Configuration Guide 4-57clear port protected nameUsethiscommandtoclearthenameofaprotectedgroup.Synta

xviiChapter 13: Configuring DHCP ServerDHCP Overview ...

clear port protected name4-58 Port Configuration

SecureStack C3 Configuration Guide 5-15SNMP ConfigurationThischapterdescribestheSimpleNetworkManagementProtocol(SNMP)setofcommandsandhow

SNMP Configuration Summary5-2 SNMP Configuration•SNMPnetworkmanagementapplications,suchasEnterasysNetworks’NetSightAtlas,whichcommunicatew

SNMP Configuration SummarySecureStack C3 Configuration Guide 5-3Using SNMP Contexts to Access Specific MIBs Bydefault,whenoperatingfromtheswitch

Reviewing SNMP Statistics5-4 SNMP ConfigurationReviewing SNMP StatisticsPurposeToreviewSNMPstatistics.Commands ThecommandsusedtoreviewSNMPst

show snmp countersSecureStack C3 Configuration Guide 5-5show snmp countersUsethiscommandtodisplaySNMPtrafficcountervalues.Syntaxshow snmp coun

show snmp counters5-6 SNMP ConfigurationsnmpOutTraps = 0 snmpSilentDrops = 0 snmpProxyDrops = 0

show snmp countersSecureStack C3 Configuration Guide 5-7snmpInGetResponses Number of SNMP Get-Response PDUs accepted and processed by the SNMP protoco

Configuring SNMP Users, Groups, and Communities5-8 SNMP ConfigurationConfiguring SNMP Users, Groups, and CommunitiesPurposeToreviewandconfigureSNM

show snmp userSecureStack C3 Configuration Guide 5-9show snmp userUsethiscommandtodisplayinformationaboutSNMPusers.Thesearepeopleregistere

xviii Chapter 14: Preparing for Router ModePre-Routing Configuration Tasks ...

set snmp user5-10 SNMP Configurationset snmp userUsethiscommandtocreateanewSNMPv3user.Syntaxset snmp user user [remote remoteid] [authenticati

clear snmp userSecureStack C3 Configuration Guide 5-11clear snmp userUsethiscommandtoremoveauserfromtheSNMPv3security‐modellist.Syntaxclea

set snmp group5-12 SNMP ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaySNMPgroupinformation:C3(su)->show snm

clear snmp groupSecureStack C3 Configuration Guide 5-13ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateanSNMPgroupcalled“an

set snmp community5-14 SNMP ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplayinformationabouttheSNMP“public”co

clear snmp communitySecureStack C3 Configuration Guide 5-15ExampleThisexampleshowshowtosetanSNMPcommunitynamecalled“vip”C3(su)->set snmp

Configuring SNMP Access Rights5-16 SNMP ConfigurationConfiguring SNMP Access RightsPurposeToreviewandconfigureSNMPaccessrights,assigningviewin

show snmp accessSecureStack C3 Configuration Guide 5-17Ifvolatile,nonvolatileorread‐onlyarenotspecified,allentriesofallstoragetypeswill

set snmp access5-18 SNMP Configurationset snmp accessUsethiscommandtosetanSNMPaccessconfiguration.Syntaxset snmp access groupname security-mo

clear snmp accessSecureStack C3 Configuration Guide 5-19clear snmp accessUsethiscommandtocleartheSNMPaccessentryofaspecificgroup,includin

xixip rip authentication-key... 16-6i

Configuring SNMP MIB Views5-20 SNMP ConfigurationConfiguring SNMP MIB ViewsPurposeToreviewandconfigureSNMPMIBviews.SNMPviewsmapSNMPobjects

show snmp viewSecureStack C3 Configuration Guide 5-21Storage type = nonVolatile Row status = active

show snmp context5-22 SNMP Configurationshow snmp contextUsethiscommandtodisplaythecontextlistconfigurationforSNMP’sview‐basedaccesscontr

set snmp viewSecureStack C3 Configuration Guide 5-23set snmp viewUsethiscommandtosetaMIBconfigurationforSNMPv3view‐basedaccess(VACM).Synta

clear snmp view5-24 SNMP Configurationclear snmp viewUsethiscommandtodeleteanSNMPv3MIBview.Syntaxclear snmp view viewname subtreeParametersDef

Configuring SNMP Target ParametersSecureStack C3 Configuration Guide 5-25Configuring SNMP Target ParametersPurposeToreviewandconfigureSNMPtarget

show snmp targetparams5-26 SNMP ConfigurationStorage type = nonVolatile Row status = active

set snmp targetparamsSecureStack C3 Configuration Guide 5-27set snmp targetparamsUsethiscommandtosetSNMPtargetparameters,anamedsetofsecuri

clear snmp targetparams5-28 SNMP Configurationclear snmp targetparamsUsethiscommandtocleartheSNMPtargetparameterconfiguration.Syntaxclear snm

Configuring SNMP Target AddressesSecureStack C3 Configuration Guide 5-29Configuring SNMP Target Addresses PurposeToreviewandconfigureSNMPtargeta

xx Configuring VRRP ...

set snmp targetaddr5-30 SNMP ConfigurationParameters = v2cParamsStorage type = nonVolatileRow status = activeTabl

clear snmp targetaddrSecureStack C3 Configuration Guide 5-31DefaultsIfnotspecified,udpportwillbesetto162.Ifnotspecified,maskwillbesetto

clear snmp targetaddr5-32 SNMP ConfigurationExampleThisexampleshowshowtoclearSN MPtargetaddressentry“tr”:C3(su)->clear snmp targetaddr tr

Configuring SNMP Notification ParametersSecureStack C3 Configuration Guide 5-33Configuring SNMP Notification ParametersAbout SNMP Notify FiltersProfil

show newaddrtrap5-34 SNMP Configurationshow newaddrtrapUsethiscommandtodisplaytheglobalandport‐specificstatusoftheSNMPnewMACaddressest

set newaddrtrapSecureStack C3 Configuration Guide 5-35set newaddrtrapUsethiscommandtoenableordisableSNMPtrap messaging,globallyorononeor

show snmp notify5-36 SNMP Configurationshow snmp notifyUsethiscommandtodisplaytheSNMPnotifyconfiguration,whichdetermineswhichmanagementta

set snmp notifySecureStack C3 Configuration Guide 5-37set snmp notifyUsethiscommandtosettheSNMPnotifyconfiguration.Thiscreatesanentryint

clear snmp notify5-38 SNMP Configurationclear snmp notifyUsethiscommandtoclearanSNMPnotifyconfiguration.Syntaxclear snmp notify notify Paramet

set snmp notifyfilterSecureStack C3 Configuration Guide 5-39ExampleThisexampleshowshowtodisplaySNMPnotifyfilterinformation.Inthiscase,the

xxiipv6 enable ...18

clear snmp notifyfilter5-40 SNMP Configurationclear snmp notifyfilterUsethiscommandtodeleteanSNMPnotifyfilterconfiguration.Syntaxclear snmp n

set snmp notifyprofileSecureStack C3 Configuration Guide 5-41ExampleThisexampleshowshowtodisplaySNMPnotifyinformationfortheprofilenamed“a

clear snmp notifyprofile5-42 SNMP Configurationclear snmp notifyprofileUsethiscommandtodeleteanSNMPnotifyprofileconfiguration.Syntaxclear snm

Creating a Basic SNMP Trap ConfigurationSecureStack C3 Configuration Guide 5-43Creating a Basic SNMP Trap ConfigurationTrapsarenotificationmessages

Creating a Basic SNMP Trap Configuration5-44 SNMP ConfigurationThistrapnotificationwillbesentwiththecommunitynamemgmttotheworkstation192

SecureStack C3 Configuration Guide 6-16Spanning Tree ConfigurationThischapterdescribestheSpanningTreeConfigurationsetofcommandsandhowtous

Spanning Tree Configuration Summary6-2 Spanning Tree Configurationonlyiftheforwardinglinkgoesdown.MSTPassignseachVLANpresentonthenetwork

Reviewing and Setting Spanning Tree Bridge ParametersSecureStack C3 Configuration Guide 6-3Reviewing and Setting Spanning Tree Bridge ParametersPurpos

Reviewing and Setting Spanning Tree Bridge Parameters6-4 Spanning Tree Configurationclear spantree fwddelay 6-20show spantree backuproot 6-21set spa

show spantree statsSecureStack C3 Configuration Guide 6-5show spantree statsUsethiscommandtodisplaySpanningTreeinformationforoneormoreport

xxii Chapter 20: OSPFv3 ConfigurationOverview ...

show spantree stats6-6 Spanning Tree ConfigurationTable 6-1 show spantree Output DetailsOutput What It Displays...Spanning tree instance Spanning Tree

set spantreeSecureStack C3 Configuration Guide 6-7set spantreeUsethiscommandtogloballyenableordisabletheSpanningTreeprotocolontheswitch.

set spantree version6-8 Spanning Tree Configurationset spantree versionUsethiscommandtosettheversionoftheSpanningTreeprotocoltoMSTP(Mult

show spantree bpdu-forwardingSecureStack C3 Configuration Guide 6-9ExampleThisexampleshowshowtoresettheSpanningTreeversion:C3(su)->clear s

show spantree bridgeprioritymode6-10 Spanning Tree ConfigurationExampleThisexampleshowshowtoenableBPDUforwarding:C3(rw)-> set spantree bpdu-

clear spantree bridgeprioritymodeSecureStack C3 Configuration Guide 6-11UsageThemodeaffectstherangeofpriorityvaluesusedtodeterminewhichdev

set spantree msti6-12 Spanning Tree ConfigurationExampleThisexampleshowshowtodisplayalistofMSTinstances.Inthiscase,SID2hasbeenconfig

show spantree mstmapSecureStack C3 Configuration Guide 6-13ExampleThisexampleshowshowtodeleteallMSTinst ances:C3(su)->clear spantree msti

clear spantree mstmap6-14 Spanning Tree ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtomapFID3toSID2:C3(su)->se

show spantree mstcfgidSecureStack C3 Configuration Guide 6-15ExampleThisexampleshowshowtodisplaytheSIDsmappedtoVLAN1.Inthiscase,SIDs2,

xxiiishow ipv6 ospf interface ... 20-41s

set spantree mstcfgid6-16 Spanning Tree Configurationset spantree mstcfgidUsethiscommandtosettheMSTconfigurationnameand/orrevisionlevel.Syn

set spantree prioritySecureStack C3 Configuration Guide 6-17set spantree priorityUsethiscommandtosetthedevice’sSpanningTreepriority.Syntaxse

set spantree hello6-18 Spanning Tree ConfigurationExampleThisexampleshowshowtoresetthebridgepriorityonSID1:C3(su)->clear spantree priori

set spantree maxageSecureStack C3 Configuration Guide 6-19set spantree maxageUsethiscommandtosetthebridgemaximumagingtime.Syntaxset spantree

set spantree fwddelay6-20 Spanning Tree ConfigurationExampleThisexampleshowshowtogloballyresetthemaximumagingtime:C3(su)->clear spantree

show spantree backuprootSecureStack C3 Configuration Guide 6-21ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtogloballyresetthebrid

clear spantree backuproot6-22 Spanning Tree ConfigurationModeSwitchcommand,read‐write.UsageTheSpanningTreebackuprootfunctionisdisabledbydef

set spantree tctrapsuppressSecureStack C3 Configuration Guide 6-23DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplay

clear spantree tctrapsuppress6-24 Spanning Tree Configurationclear spantree tctrapsuppressUsethiscommandtoclearthestatusoftopologychangetrap

show spantree spanguardSecureStack C3 Configuration Guide 6-25show spantree spanguardUsethiscommandtodisplaythestatusoftheSpanningTreespan

xxiv set multiauth precedence ... 21-38cl

clear spantree spanguard6-26 Spanning Tree Configurationspanguardtimeout(“setspantreespanguardtimeout”onpage 6‐27)haspassedsincethelastseen

set spantree spanguardtimeoutSecureStack C3 Configuration Guide 6-27ExampleThisexampleshowshowtodisplaythespanguardtimeoutsetting:C3(su)->

show spantree spanguardlock6-28 Spanning Tree ConfigurationExampleThisexampleshowshowtoresetthespanguardtimeoutto300seconds:C3(rw)->cle

show spantree spanguardtrapenableSecureStack C3 Configuration Guide 6-29ExampleThisexampleshowshowtounlockportge.1.16:C3(rw)->clear spantree

clear spantree spanguardtrapenable6-30 Spanning Tree Configurationclear spantree spanguardtrapenableUsethiscommandtoresettheSpanningTreespang

set spantree legacypathcostSecureStack C3 Configuration Guide 6-31set spantree legacypathcostUsethiscommandtoenableordisablelegacy(802.1D)pat

Reviewing and Setting Spanning Tree Port Parameters6-32 Spanning Tree ConfigurationReviewing and Setting Spanning Tree Port ParametersPurposeTodispla

set spantree portadminSecureStack C3 Configuration Guide 6-33set spantree portadminUsethiscommandtodisableorenabletheSpanningTreealgorithmo

show spantree portadmin6-34 Spanning Tree Configurationshow spantree portadminUsethiscommandtodisplaythestatusoftheSpanningTreealgorithmon

set spantree portpriSecureStack C3 Configuration Guide 6-35ExampleThisexampleshowshowtodisplaytheportpriorityforfe.2.7:C3(su)->show spant

xxvConfiguring Access Lists ...

show spantree adminpathcost6-36 Spanning Tree ConfigurationDefaultsIfsidisnotspecified,portprioritywillbesetforSpanningTree0.ModeSwitchc

set spantree adminpathcostSecureStack C3 Configuration Guide 6-37set spantree adminpathcostUsethiscommandtosettheadministrativepathcostonap

show spantree adminedge6-38 Spanning Tree ConfigurationExampleThisexampleshowshowtoresettheadminpathcostto0forfe.3.2onSID1:C3(su)->

clear spantree adminedgeSecureStack C3 Configuration Guide 6-39ModeSwitchcommand,read‐write.UsageThedefaultbehavioroftheedgeportadministrativ

clear spantree adminedge6-40 Spanning Tree Configuration

SecureStack C3 Configuration Guide 7-17802.1Q VLAN ConfigurationThischapterdescribestheSecureStackC3system’scapabilitiestoimplement802.1Qvi

VLAN Configuration Summary7-2 802.1Q VLAN ConfigurationIftheSecureStackC3deviceistobeconfiguredformultipleVLANs,itmaybedesirabletocon

Viewing VLANsSecureStack C3 Configuration Guide 7-3Viewing VLANs PurposeTodisplayalistofVLANscurrentlyconfiguredonthedevice,todetermineho

show vlan7-4 802.1Q VLAN ConfigurationC3(su)->show vlan 1 VLAN: 1 NAME: DEFAULT VLAN VLAN Type: DefaultEgress Ports fe.1.1-10, ge.2.1-4,

Creating and Naming Static VLANsSecureStack C3 Configuration Guide 7-5Creating and Naming Static VLANsPurposeTocreateanewstaticVLAN,ortoenable

xxvi 11-3 Mnemonic Values for Logging Applications... 11-811-4 sho

set vlan name7-6 802.1Q VLAN ConfigurationExamplesThisexampleshowshowtocreateVLAN3:C3(su)->set vlan create 3Thisexampleshowshowtodisabl

clear vlan nameSecureStack C3 Configuration Guide 7-7ExampleThisexampleshowshowtoremoveastaticVLAN9fromthedevice’sVLANlist:C3(su)->cl

Assigning Port VLAN IDs (PVIDs) and Ingress Filtering7-8 802.1Q VLAN ConfigurationAssigning Port VLAN IDs (PVIDs) and Ingress FilteringPurposeToassig

set port vlanSecureStack C3 Configuration Guide 7-9fe.2.3 is set to 1 fe.2.4 is set to 1 fe.2.5 is set to 1 fe.2.6 is set to 1 set port vlanUsethisc

clear port vlan7-10 802.1Q VLAN Configurationclear port vlanUsethiscommandtoresetaport’s802.1QportVLANID(PVID)tothehostVLANID1.Syntax

set port ingress filterSecureStack C3 Configuration Guide 7-11C3(su)->show port ingress-filter fe.1.10-15 Port State

show port discard7-12 802.1Q VLAN Configurationshow port discardUsethiscommandtodisplaytheframediscardmodeforoneormoreports.Portscanbe

set port discardSecureStack C3 Configuration Guide 7-13set port discardUsethiscommandtosettheframediscardmodeononeormoreports.Syntaxset

Configuring the VLAN Egress List7-14 802.1Q VLAN ConfigurationConfiguring the VLAN Egress ListPurposeToassignorremoveportsontheegresslistofa

show port egressSecureStack C3 Configuration Guide 7-15show port egressUsethiscommandtodisplaytheVLANmembershipforoneormoreports.Syntaxsho

SecureStack C3 Configuration Guide xxviiAbout This GuideWelcometotheEnterasysNetworksSecureStackC3ConfigurationGuide.Thismanualexplainshow

set vlan egress7-16 802.1Q VLAN ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowsyouhowtosetfe.1.3toforbiddenforVLAN6:C3

clear vlan egressSecureStack C3 Configuration Guide 7-17ThisexampleshowshowtoallowFastEthernetport2inunit1totransmitVLAN7framesasun

show vlan dynamicegress7-18 802.1Q VLAN Configurationshow vlan dynamicegressUsethiscommandtodisplaythestatusofdynamicegress(enabledordisab

set vlan dynamicegressSecureStack C3 Configuration Guide 7-19set vlan dynamicegressUsethiscommandtoadministrativelysetthedynamicegressstatus

Setting the Host VLAN7-20 802.1Q VLAN ConfigurationSetting the Host VLANPurposeToconfigureahostVLANthatonlyselectdevicesareallowedtoaccess

set host vlanSecureStack C3 Configuration Guide 7-21set host vlanUsethiscommandtoassignhoststatustoaVLAN.Syntaxset host vlan vlan-idParamete

clear host vlan7-22 802.1Q VLAN Configurationclear host vlanUsethiscommandtoresetthehostVLANtothedefaultsettingof1.Syntaxclear host vlan

Enabling/Disabling GVRP (GARP VLAN Registration Protocol)SecureStack C3 Configuration Guide 7-23Enabling/Disabling GVRP (GARP VLAN Registration Protoc

Enabling/Disabling GVRP (GARP VLAN Registration Protocol)7-24 802.1Q VLAN ConfigurationFigure 7-1 Example of VLAN Propagation via GVRPPurpose Todyna

show gvrpSecureStack C3 Configuration Guide 7-25show gvrp UsethiscommandtodisplayGVRPconfigurationinformation.Syntaxshow gvrp [port-string]Para

iNoticeEnterasysNetworksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho

Structure of This Guidexxviii About This Guideduplexmode,auto‐negotiation,flowcontrol,portmirroring,linkaggegationandbroadcastsuppression.C

show garp timer7-26 802.1Q VLAN ConfigurationExampleThisexampleshowshowtodisplayGARPtimerinformationonFastEthernetports1through10inun

set gvrpSecureStack C3 Configuration Guide 7-27set gvrpUsethiscommandtoenableordisableGVRPgloballyonthedeviceorononeormoreports.Synta

set garp timer7-28 802.1Q VLAN ConfigurationExampleThisexampleshowshowtoclearGVRPstatusgloballyonthedevice:C3(su)->clear gvrp set garp t

SecureStack C3 Configuration Guide 8-18Policy Classification ConfigurationThischapterdescribesthePolicyClassificationsetofcommandsandhowto

Configuring Policy Profiles8-2 Policy Classification ConfigurationConfiguring Policy ProfilesPurpose Toreview,create,changeandremoveuserprofile

show policy profileSecureStack C3 Configuration Guide 8-3Untagged Vlans : noneReplace TCI Status : DisableRule Precedence : 1

set policy profile8-4 Policy Classification Configurationset policy profileUsethiscommandtocreateapolicyprofileentry.Syntaxset policy profile

clear policy profileSecureStack C3 Configuration Guide 8-5DefaultsIfoptionalparametersarenotspecified,nonewillbeapplied.ModeSwitchcommand,r

Configuring Classification Rules8-6 Policy Classification ConfigurationConfiguring Classification Rules Purpose Toreview,create,assign,andunassig

show policy ruleSecureStack C3 Configuration Guide 8-7DefaultsIfverboseisnotspecified,summaryinformationwillbedisplayed.ModeSwitchcommand,r

Related DocumentsSecureStack C3 Configuration Guide xxixChapter 21,SecurityConfiguration,describeshowtoconfigure802.1XauthenticationusingEAP

show policy rule8-8 Policy Classification ConfigurationTable 8-2 show policy rule Output DetailsOutput What It Displays...PID Profile index number. As

show policy capabilitySecureStack C3 Configuration Guide 8-9show policy capabilityUsethiscommandtodisplaydetailedpolicyclassificationcapabilit

show policy capability8-10 Policy Classification Configuration|IPX destination socket | | | | | | | | | ||IPX transmission control

set policy ruleSecureStack C3 Configuration Guide 8-11set policy ruleUsethiscommandtoassignincominguntaggedframestoaspecificpolicyprofile

set policy rule8-12 Policy Classification ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.UsageTable 8‐3providesthesetpolicyruledatava

clear policy ruleSecureStack C3 Configuration Guide 8-13ExamplesThisexampleshowshowtouseTable 8‐3toassignaruletopolicyprofile5thatwill

clear policy all-rules8-14 Policy Classification ConfigurationDefaultsWhenapplicable,dataandmaskmustbespecifiedforindividualrulestobeclea

Assigning Ports to Policy ProfilesSecureStack C3 Configuration Guide 8-15Assigning Ports to Policy ProfilesPurpose Toassignandunassignportstopol

clear policy port8-16 Policy Classification Configurationclear policy portUsethiscommandtoremoveapolicyprofilefromoneormoreports.Syntaxcle

Configuring Policy Class of Service (CoS)SecureStack C3 Configuration Guide 8-17Configuring Policy Class of Service (CoS)Using Port-Based or Policy-Ba

Getting Helpxxx About This GuideGetting HelpForadditionalsupportrelatedtothisswitchordocument,contactEnterasysNetworksusingoneofthefol

set cos state8-18 Policy Classification Configurationset cos stateUsethiscommandtoenableordisableClassofService.Syntaxset cos state {enable |

clear cos stateSecureStack C3 Configuration Guide 8-19clear cos stateUsethiscommandtosetCoSstatebacktoitsdefaultsettingofdisabled.Syntaxc

clear cos settings8-20 Policy Classification Configuration•CoSIndexIndexesareuniqueidentifiersforeachCoSsetting.CoSindexes0through7are

show cos settingsSecureStack C3 Configuration Guide 8-21show cos settingsUsethiscommandtodisplayClassofServiceparameters.Syntaxshow cos settin

clear cos all-entries8-22 Policy Classification ConfigurationExampleThisexampleshowshowtocleartheCoSconfigurationforallentriesexceptentri

SecureStack C3 Configuration Guide 9-19Port Priority ConfigurationThischapterdescribesthePortPrioritysetofcommandsandhowtousethem.Port

Configuring Port Priority9-2 Port Priority ConfigurationConfiguring Port Priority PurposeTovieworconfigureportprioritycharacteristicsasfollows

set port prioritySecureStack C3 Configuration Guide 9-3set port priorityUsethiscommandtosetthe802.1D(802.1p)Class‐of‐Servicetransmitpriority

clear port priority9-4 Port Priority Configurationclear port priorityUsethiscommandtoresetthecurrentCoSportprioritysettingto0.Thiswillc

Configuring Priority to Transmit Queue MappingSecureStack C3 Configuration Guide 9-5Configuring Priority to Transmit Queue Mapping PurposeToperformt

SecureStack C3 Configuration Guide 1-11IntroductionThischapterprovidesanoverviewoftheSecureStackC3’suniquefeaturesandfunctionality,anove

set port priority-queue9-6 Port Priority ConfigurationExampleThisexampleshowshowtodisplaypriorityqueueinformationforge.1.1.Inthiscase,fr

clear port priority-queueSecureStack C3 Configuration Guide 9-7ExampleThisexampleshowshowtosetpriority5framesreceivedonge.2.12totransmit

Configuring Quality of Service (QoS)9-8 Port Priority ConfigurationConfiguring Quality of Service (QoS)PurposeEighttransmitqueuesareimplementedin

set port txqSecureStack C3 Configuration Guide 9-9ExampleThisexampleshowshowtodisplaythecurrentalgorithmandtransmitqueueweightsconfigured

clear port txq9-10 Port Priority ConfigurationQueuescanbesetforstrictpriority(SP)orweightedround‐robin(WRR).IfsetforWRRmode,weights

clear port txqSecureStack C3 Configuration Guide 9-11ExampleThisexampleshowshowtocleartransmit queuevaluesonge.1.1:C3(su)->clear port tx

clear port txq9-12 Port Priority Configuration

SecureStack C3 Configuration Guide 10-110IGMP ConfigurationThischapterdescribestheIGMPConfigurationsetofcommandsandhowtousethem.IGMP Ove

Configuring IGMP at Layer 210-2 IGMP ConfigurationAbout MulticastingMulticastingisusedtosupportreal‐timeapplicationssuchasvideoconferenceso

show igmpsnoopingSecureStack C3 Configuration Guide 10-3show igmpsnoopingUsethiscommandtodisplayIGMPsnoopinginformation.Syntaxshow igmpsnoopin

Switch Management Methods1-2 IntroductionSwitch Management MethodsTheSecureStackC3switchcanbemanagedusingthefollowingmethods:•Locallyusing

set igmpsnooping interfacemode10-4 IGMP ConfigurationModeSwitchcommand,read‐write.UsageInorderforIGMPsnoopingtobeenabledononeorallports,

set igmpsnooping groupmembershipintervalSecureStack C3 Configuration Guide 10-5set igmpsnooping groupmembershipintervalUsethiscommandtoconfiguret

set igmpsnooping mcrtrexpiretime10-6 IGMP ConfigurationModeSwitchcommand,read‐write.UsageThisvaluemustbeles sthantheIGMPmaximumresponsetim

set igmpsnooping add-staticSecureStack C3 Configuration Guide 10-7set igmpsnooping add-staticThiscommandcreatesanewstaticIGMPentryoraddsone

show igmpsnooping static10-8 IGMP ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleremovesportge.1.1fromtheentryforthemulticast

show igmpsnooping mfdbSecureStack C3 Configuration Guide 10-9show igmpsnooping mfdbUsethiscommandtodisplaymulticastforwardingdatabase(MFDB)in

clear igmpsnooping10-10 IGMP Configurationclear igmpsnoopingUsethiscommandtoclearallIGMPsnoopingentries.Syntaxclear igmpsnooping ParametersNo

Configuring IGMP on Routing InterfacesSecureStack C3 Configuration Guide 10-11Configuring IGMP on Routing InterfacesPurposeToconfigureIGMPonroutin

ip igmp10-12 IGMP Configurationip igmp UsethiscommandtoenableIGMPontherouter.ThenoformofthiscommanddisablesIGMPontherouter.Syntaxip

ip igmp versionSecureStack C3 Configuration Guide 10-13ip igmp versionUsethiscommandtosettheversionofIGMPrunningontherouter.Thenoformo

Factory Default SettingsSecureStack C3 Configuration Guide 1-3IGMP snooping Disabled. When enabled, query interval is set to 260 seconds and response

show ip igmp groups10-14 IGMP ConfigurationMulticast TTL currently defaults to 1IGMP Version is 2Query Interval is 125 (secs)Query Max Response Time i

ip igmp query-intervalSecureStack C3 Configuration Guide 10-15ip igmp query-intervalUsethiscommandtosettheIGMPqueryintervalonaroutinginter

ip igmp startup-query-interval10-16 IGMP ConfigurationExampleThisexampleshowshowtosettheIGMPquerymaximumresponsetimeintervalto200 (2te

ip igmp last-member-query-intervalSecureStack C3 Configuration Guide 10-17ModeInterfaceconfiguration:C3(su)‐>router(Config‐if(Vlan1))#ExampleThi

ip igmp last-member-query-count10-18 IGMP Configurationip igmp last-member-query-countUsethiscommandtosetthenumberofgroup‐specificqueriessen

ip igmp robustnessSecureStack C3 Configuration Guide 10-19UsageThisvaluedetermineshowmanytimesIGMPmessageswillbesent.Ahighernumberwillm

ip igmp robustness10-20 IGMP Configuration

SecureStack C3 Configuration Guide 11-111Logging and Network ManagementThischapterdescribesswitch‐relatedloggingandnetworkmanagementcommandsa

show logging server11-2 Logging and Network Managementshow logging server UsethiscommandtodisplaytheSyslogconfigurationforaparticularserver

set logging serverSecureStack C3 Configuration Guide 11-3set logging serverUsethiscommandtoconfigureaSyslogserver.Syntaxset logging server inde

Factory Default Settings1-4 IntroductionRADIUS client Disabled. RADIUS last resort action When the client is enabled, set to Challenge.RADIUS retries

clear logging server11-4 Logging and Network ManagementModeSwitchcommand,read‐write.ExampleThiscommandshowshowtoenableaSyslogserverconfigur

set logging defaultSecureStack C3 Configuration Guide 11-5ExampleThiscommandshowshowtodisplaytheSyslogserverdefaultvalues.Foranexplanatio

clear logging default11-6 Logging and Network Managementclear logging defaultUsethiscommandtoresetloggingdefaultvalues.Syntax clear logging def

show logging applicationSecureStack C3 Configuration Guide 11-7show logging applicationUsethiscommandtodisplaytheseveritylevelofSyslogmessag

set logging application11-8 Logging and Network Managementset logging applicationUsethiscommandtosettheseverityleveloflogmessagesforoneor

clear logging applicationSecureStack C3 Configuration Guide 11-9ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosettheseveritylevel

set logging local11-10 Logging and Network ManagementModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythestateofmessageloggi

show logging bufferSecureStack C3 Configuration Guide 11-11ExampleThisexampleshowshowtoclearlocallogging:C3(su)->clear logging localshow log

Monitoring Network Events and Status11-12 Logging and Network ManagementMonitoring Network Events and StatusPurposeTodisplayswitcheventsandcomman

show historySecureStack C3 Configuration Guide 11-13show historyUsethiscommandtodisplaythesize(inlines)ofthehistorybuffer.Syntaxshowhisto

Factory Default SettingsSecureStack C3 Configuration Guide 1-5Table 1-2 Default Settings for Router OperationFeature Default SettingAccess groups (IP

ping11-14 Logging and Network ManagementpingUsethiscommandtosendICMPecho‐requestpacketstoanothernodeonthenetworkfromtheswitchCLI.Syn

show usersSecureStack C3 Configuration Guide 11-15show usersUsethiscommandtodisplayinformationabouttheactiveconsoleportorTelnetsession(s)

disconnect11-16 Logging and Network ManagementExamplesThisexampleshowshowtocloseaTelnetsessiontohost134.141.192.119:C3(su)->disconnect 1

Managing Switch Network Addresses and RoutesSecureStack C3 Configuration Guide 11-17Managing Switch Network Addresses and RoutesPurposeTodisplayord

set arp11-18 Logging and Network ManagementExampleThisexampleshowshowtodisplaytheARPtable:C3(su)->show arp

clear arpSecureStack C3 Configuration Guide 11-19clear arpUsethiscommandtodeleteaspecificentryorallentriesfromtheswitch’sARPtable.Synta

show mac11-20 Logging and Network ManagementDefaultsIfnotspecified,waittimewillbesetto5seconds.Ifnotspecified,first‐ttlwillbesetto1s

show macSecureStack C3 Configuration Guide 11-21ExamplesThisexampleshowshowtodisplayMACaddressinformationforge.3.1:C3(su)->show mac port

show mac agetime11-22 Logging and Network Managementshow mac agetimeUsethiscommandtodisplaythetimeoutperiodforaginglearnedMACentries.Synta

clear mac agetimeSecureStack C3 Configuration Guide 11-23clear mac agetimeUsethiscommandtoresetthetimeoutperiodforaginglearnedMACentriest

Using the Command Line Interface1-6 IntroductionUsing the Command Line InterfaceStarting a CLI SessionConnecting Using the Console Port Connectaterm

show mac algorithm11-24 Logging and Network ManagementExampleThisexamplesetsthehashingalgorithmtomac‐crc32‐upperbits.C3(rw)->set mac algorit

set mac multicastSecureStack C3 Configuration Guide 11-25set mac multicastUsethiscommandtodefinewhatportswithinaVLANamulticastaddresscan

clear mac address11-26 Logging and Network ManagementExampleThisexampleclearsmulticastMACaddress01‐01‐22‐33‐44‐55fromVLAN24.C3(su)->clear

Configuring Simple Network Time Protocol (SNTP)SecureStack C3 Configuration Guide 11-27Configuring Simple Network Time Protocol (SNTP)PurposeToconfig

show sntp11-28 Logging and Network ManagementTimezone: 'EST', offset from UTC is -4 hours and 0 minutesClient Mode: unicastBroadcast Count:

set sntp clientSecureStack C3 Configuration Guide 11-29set sntp clientUsethiscommandtosettheSNTPoperationmode.Syntaxset sntp client {broadcast

set sntp server11-30 Logging and Network Managementset sntp serverUsethiscommandtoaddaserverfromwhichtheSNTPclientwillretrievethecurren

set sntp poll-intervalSecureStack C3 Configuration Guide 11-31set sntp poll-intervalUsethiscommandtosetthepollintervalbetweenSNTPunicastreq

set sntp poll-retry11-32 Logging and Network Managementset sntp poll-retryUsethiscommandtosetthenumberofpollretriestoaunicastSNTPserver.

set sntp poll-timeoutSecureStack C3 Configuration Guide 11-33set sntp poll-timeoutUsethiscommandtosetthepolltimeout(inseconds)foraresponse

Using the Command Line InterfaceSecureStack C3 Configuration Guide 1-7Figure 1-1 SecureStack C3 Startup ScreenConnecting Using TelnetOncetheSecureS

Configuring Node Aliases11-34 Logging and Network ManagementConfiguring Node AliasesPurposeToreview,disable,andre‐enablenode(port)aliasfunctio

set nodealiasSecureStack C3 Configuration Guide 11-35set nodealiasUsethiscommandtoenableordisableanodealiasagentononeormoreports,orse

clear nodealias config11-36 Logging and Network Managementclear nodealias configUsethiscommandtoresetnodealiasstatetoenabledandclearthema

SecureStack C3 Configuration Guide 12-112Configuring RMONThischapterdescribesthecommandsusedtoconfigureRMONonaSecureStackC3switch.RMON Mo

RMON Monitoring Group Functions12-2 Configuring RMONHistory Records periodic statistical samples from a network.Sample period, number of samples and

Statistics Group CommandsSecureStack C3 Configuration Guide 12-3Statistics Group CommandsPurposeTodisplay,configure,andclearRMONstatistics.Comma

show rmon stats12-4 Configuring RMONTable 12‐2providesanexplanationofthecommandoutput.Table 12-2 show rmon stats Output DetailsOutput What It D

set rmon statsSecureStack C3 Configuration Guide 12-5set rmon statsUsethiscommandtoconfigureanRMONstatisticsentry.Syntaxset rmon stats index p

clear rmon stats12-6 Configuring RMONclear rmon statsUsethiscommandtodeleteoneormoreRMONstatisticsentries.Syntaxclear rmon stats {index-list

History Group CommandsSecureStack C3 Configuration Guide 12-7History Group CommandsPurposeTodisplay,configure,andclearRMONhistorypropertiesand

iiEnterasys Networks, Inc.Firmware License AgreementBEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT,CAREFULLY READ THIS LICENSE AGREEMENT.Thisdocume

Using the Command Line Interface1-8 Introduction1. Attheloginprompt,enteroneofthefollowingdefaultusernames:– roforRead‐Onlyaccess.– rwf

set rmon history12-8 Configuring RMONSample 2779 Interval Start: 1 days 0 hours 2 minutes 22 secondsDrop Events = 0 Undersize Pkt

clear rmon historySecureStack C3 Configuration Guide 12-9clear rmon historyUsethiscommandtodeleteoneormoreRMONhistoryentriesorresetoneor

Alarm Group Commands12-10 Configuring RMONAlarm Group CommandsPurposeTodisplay,configure,andclearRMONalarmentriesandproperties.Commandsshow r

set rmon alarm propertiesSecureStack C3 Configuration Guide 12-11set rmon alarm propertiesUsethiscommandtoconfigureanRMONalarmentry,ortocre

set rmon alarm properties12-12 Configuring RMONDefaultsinterval‐3600secondstype‐absolutestartup‐risingrthresh‐0fthresh‐0revent‐0fevent‐

set rmon alarm statusSecureStack C3 Configuration Guide 12-13set rmon alarm statusUsethiscommandtoenableanRMONalarmentry.Analarmisanotifi

clear rmon alarm12-14 Configuring RMONclear rmon alarmUsethiscommandtodeleteanRMONalarmentry.Syntaxclear rmon alarm indexParametersDefaultsNon

Event Group CommandsSecureStack C3 Configuration Guide 12-15Event Group CommandsPurposeTodisplayandclearRMONevents,andtoconfigureRMONeventp

set rmon event properties12-16 Configuring RMONset rmon event propertiesUsethiscommandtoconfigureanRMONevententry,ortocreateaneweventen

set rmon event statusSecureStack C3 Configuration Guide 12-17ExampleThisexampleshowshowtocreateandenableanRMONevententrycalled“STPtopolo

Using the Command Line InterfaceSecureStack C3 Configuration Guide 1-9Writeaccesswillbeabletomodifyallmodifiableparametersinsetandshowco

clear rmon event12-18 Configuring RMONclear rmon eventUsethiscommandtodeleteanRMONevententryandanyassociatedlogentries.Syntaxclear rmon e

Filter Group CommandsSecureStack C3 Configuration Guide 12-19Filter Group CommandsThepacketcaptureandfilterfunctionisdisabledbydefault.When

set rmon channel12-20 Configuring RMONC3(rw)->show rmon channel fe.2.12Port fe.2.12 Channel index= 628 EntryStatus= valid------------------

clear rmon channelSecureStack C3 Configuration Guide 12-21clear rmon channelUsethiscommandtoclearanRMONchannelentry.Syntaxclear rmon channel i

set rmon filter12-22 Configuring RMONDataff ff ff ff ff ff-----------------------------DataMaskff ff ff ff ff ff-----------------------------DataNotMa

clear rmon filterSecureStack C3 Configuration Guide 12-23clear rmon filterUsethiscommandtoclearanRMONfilterentry.Syntaxclear rmon filter {inde

Packet Capture Commands12-24 Configuring RMONPacket Capture CommandsNotethatpacketcapturefilterissamplingonlyanddoesnotguaranteereceipt o

set rmon captureSecureStack C3 Configuration Guide 12-25Owner monitorcaptureEntry= 1 Buff.control= 28062 ------------------------

clear rmon capture12-26 Configuring RMONModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateRMONcaptureentry1to“listen”oncha

SecureStack C3 Configuration Guide 13-113Configuring DHCP ServerThischapterdescribesthecommandstoconfiguretheIPv4DHCPserverfunctionalityon

Using the Command Line Interface1-10 IntroductionFigure 1-5 Scrolling Screen Output Abbreviating and Completing CommandsTheSecureStackC3switchall

DHCP Overview13-2 Configuring DHCP ServerTheamountoftimethataparticularIPaddressisvalidforasystemiscalledaleas e.TheSecureStackC3

Configuring General DHCP Server ParametersSecureStack C3 Configuration Guide 13-3Configuring General DHCP Server ParametersPurposeToconfigureDHCPse

set dhcp bootp13-4 Configuring DHCP ServerExampleThisexampleenablesDHCPserverfunctionality.C3(rw)->set dhcp enableset dhcp bootpUsethiscomma

show dhcp conflictSecureStack C3 Configuration Guide 13-5show dhcp conflict Usethiscommandtodisplayconflictinformation,foroneaddressoralla

set dhcp exclude13-6 Configuring DHCP ServerExamplesThisexampledisablesDHCPconflictlogging.C3(rw)->clear dhcp conflict loggingThisexamplecl

clear dhcp excludeSecureStack C3 Configuration Guide 13-7clear dhcp excludeUsethiscommandtocleartheconfiguredIPaddressesthattheDHCPserver

clear dhcp ping13-8 Configuring DHCP Serverclear dhcp pingUsethiscommandtoresetthenumberofpingpacketssentbytheDHCPserverbacktothedef

clear dhcp bindingSecureStack C3 Configuration Guide 13-9192.0.0.13 00:33:44:56:22:37 infinite Manual192.0.0.14

clear dhcp server statistics13-10 Configuring DHCP ServerMessages Received----------

Configuring IP Address PoolsSecureStack C3 Configuration Guide 13-11Configuring IP Address PoolsManual Pool Configuration Considerations•Thesubnetof

Using the Command Line InterfaceSecureStack C3 Configuration Guide 1-11Ctrl+K Delete all characters after cursor.Ctrl+N Scroll to next command in comm

Configuring IP Address Pools13-12 Configuring DHCP Serverset dhcp pool client-name 13-19clear dhcp pool client-name 13-19set dhcp pool bootfile 13-

set dhcp poolSecureStack C3 Configuration Guide 13-13set dhcp poolUsethiscommandtocreateandassignanametoaDHCPserverpoolofaddresses.Up

set dhcp pool network13-14 Configuring DHCP Serverset dhcp pool networkUsethiscommandtoconfigurethesubnetnumberandmaskforanautomaticDHCP

set dhcp pool hardware-addressSecureStack C3 Configuration Guide 13-15DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampledeletesthenetw

clear dhcp pool hardware-address13-16 Configuring DHCP Serverclear dhcp pool hardware-addressUsethiscommandtoremovethehardwareaddressofaDHCP

clear dhcp pool hostSecureStack C3 Configuration Guide 13-17C3(rw)->set dhcp pool manual1 hardware-address 0001.f401.2710C3(rw)->set dhcp pool m

clear dhcp pool client-identifier13-18 Configuring DHCP ServerUsageTheclientidentifierisformedbyconcatenatingthemediatypeandtheMACaddress

set dhcp pool client-nameSecureStack C3 Configuration Guide 13-19set dhcp pool client-nameUsethiscommandtoassignanametoaDHCPclientwhencrea

set dhcp pool bootfile13-20 Configuring DHCP Serverset dhcp pool bootfileUsethiscommandtospecifyadefaultbootimagefortheDHCPclientswhowil

set dhcp pool next-serverSecureStack C3 Configuration Guide 13-21set dhcp pool next-serverUsethiscommandtospecifythefileserverfromwhichthed

Using the Command Line Interface1-12 Introduction

set dhcp pool lease13-22 Configuring DHCP Serverset dhcp pool leaseUsethiscommandtospecifythedurationoftheleaseforanIPaddressassignedby

set dhcp pool default-routerSecureStack C3 Configuration Guide 13-23ModeSwitchcommand,read‐write.ExampleThisexamplerestoresthedefaultleasedura

clear dhcp pool default-router13-24 Configuring DHCP Serverclear dhcp pool default-routerUsethiscommandtodeletethedefaultroutersconfiguredfor

clear dhcp pool dns-serverSecureStack C3 Configuration Guide 13-25clear dhcp pool dns-serverUsethiscommandtoremovetheDNSserverlistfromthead

clear dhcp pool domain-name13-26 Configuring DHCP Serverclear dhcp pool domain-nameUsethiscommandtoremovethedomainnamefromtheaddresspoolbe

clear dhcp pool netbios-name-serverSecureStack C3 Configuration Guide 13-27clear dhcp pool netbios-name-serverUsethiscommandtoremovetheNetBIOSn

clear dhcp pool netbios-node-type13-28 Configuring DHCP Serverclear dhcp pool netbios-node-typeUsethiscommandtoremovetheNetBIOSnodetypefromt

clear dhcp pool optionSecureStack C3 Configuration Guide 13-29ExamplesThisexampleconfiguresDHCPoption19,whichspecifieswhethertheclientshoul

show dhcp pool configuration13-30 Configuring DHCP Servershow dhcp pool configurationUsethiscommandtodisplayconfigurationinformationforoneor

SecureStack C3 Configuration Guide 14-114Preparing for Router ModeThischapterdescribeshowtopreparetheswitchforrouting.Pre-Routing Configurati

SecureStack C3 Configuration Guide 2-12Configuring Switches in a StackThischapterprovidesinformationaboutconfiguringSecureStackC3switchesina

Pre-Routing Configuration Tasks14-2 Preparing for Router ModeExampleThefollowingexampleshowshowtoconfigureVLAN 1onIPaddress182.127.63.125

Enabling Router Configuration ModesSecureStack C3 Configuration Guide 14-3Enabling Router Configuration ModesTheSecureStackC3CLIprovidesdifferent

Enabling Router Configuration Modes14-4 Preparing for Router Mode

SecureStack C3 Configuration Guide 15-115IP ConfigurationThischapterdescribestheInternetProtocol(IP)configurationsetofcommandsandhowtous

show interface15-2 IP Configurationshow interfaceUsethiscommandtodisplayinformationaboutoneormoreinterfaces(VLANsorloopbacks)configured

interfaceSecureStack C3 Configuration Guide 15-3interfaceUsethiscommandtoconfigureinterfacesforIProuting.Syntaxinterface vlan vlan-id | loopb

show ip interface15-4 IP ConfigurationThisexampleshowshowtoenterconfigurationmodeforloopback1:C3(su)->router#configure C3(su)->router(

ip addressSecureStack C3 Configuration Guide 15-5ip address Usethiscommandtoset,remove,ordisableaprimaryorsecondaryIPaddressforaninter

show running-config15-6 IP ConfigurationExampleThisexamplesetstheIPaddressto192.168.1.1andthenetworkmaskto255.255.255.0forVLAN1:C3(su)

no shutdownSecureStack C3 Configuration Guide 15-7no shutdownUsethiscommandtoenableaninterfaceforIProutingandtoallowtheinterfacetoauto

Installing a New Stackable System of Up to Eight Units2-2 Configuring Switches in a Stack•Theconsoleportonthemanagerswitchremainsactiveforou

Configuring Tunnel Interfaces15-8 IP ConfigurationConfiguring Tunnel InterfacesPurposeThecommandsinthissectiondescribehowtocreate,delete,and

tunnel sourceSecureStack C3 Configuration Guide 15-9Thenoformofthiscommandremovesthetunnelinterfaceandassociatedconfigurationparameters.E

tunnel mode15-10 IP ConfigurationDefaultsNone.ModeRouterinterfaceconfiguration:C3(su)‐>router(Config‐if(Tnnl1))#UsageThenoformofthiscomman

show interface tunnelSecureStack C3 Configuration Guide 15-11show interface tunnelThiscommanddisplaysinformationaboutaconfiguredtunnelinterfac

Reviewing and Configuring the ARP Table15-12 IP ConfigurationReviewing and Configuring the ARP TablePurposeToreviewandconfiguretheroutingARPtab

show ip arpSecureStack C3 Configuration Guide 15-13ExampleThisexampleshowshowtousetheshowiparpcommand:C3(su)->router#show ip arpProtocol

arp15-14 IP ConfigurationarpUsethiscommandtoaddorremovepermanent(static)ARPtableentries.Upto1,000staticARPentriesaresupportedperS

ip proxy-arpSecureStack C3 Configuration Guide 15-15ip proxy-arpUsethiscommandtoenableproxyARPonaninterface.Thenoformofthiscommanddisa

clear arp-cache15-16 IP ConfigurationExampleThisexampleshowshowtosettheARPtimeoutto7200seconds:C3(su)->router(Config)#arp timeout 7200cl

Configuring Broadcast SettingsSecureStack C3 Configuration Guide 15-17Configuring Broadcast SettingsPurposeToconfigureIPbroadcastsettings.Commands

Installing Previously-Configured Systems in a StackSecureStack C3 Configuration Guide 2-3Installing Previously-Configured Systems in a StackIfmember

ip helper-address15-18 IP Configurationip helper-addressUsethiscommandtoenableDHCP/BOOTPrelayandtheforwardingoflocalUDPbroadcastsspecify

Reviewing IP Traffic and Configuring RoutesSecureStack C3 Configuration Guide 15-19Reviewing IP Traffic and Configuring Routes PurposeToreviewIPtra

ip route15-20 IP ConfigurationUsageRoutesaremanagedbytheRTM(RouteTableManager),andarecontainedintheRIB(RouteInformationBase).Thisda

pingSecureStack C3 Configuration Guide 15-21pingUsethiscommandtotestroutingnetworkconnectivitybysendingIPpingrequests.Syntaxping ip-addre

traceroute15-22 IP ConfigurationtracerouteUsethiscommandtodisplayahop‐by‐hoppaththroughanIPnetworkfromthedevicetoaspecificdestinatio

SecureStack C3 Configuration Guide 16-116IPv4 Routing Protocol ConfigurationThischapterdescribestheIPv4RoutingProtocolConfigurationsetofcomm

Configuring RIP16-2 IPv4 Routing Protocol ConfigurationConfiguring RIPPurposeToenableandconfigurethe RoutingInformationProtocol(RIP).RIP Confi

router ripSecureStack C3 Configuration Guide 16-3router ripUsethiscommandtoenableordisableRIPconfigurationmode.Thenoformofthiscommandd

distance16-4 IPv4 Routing Protocol ConfigurationExampleThisexampleshowshowtoenableRIPontheVLAN1interface:C3(su)->router(Config)#interfac

ip rip send versionSecureStack C3 Configuration Guide 16-5ip rip send versionUsethiscommandtosettheRIPversion(s)forupdatepacketstransmitted

Creating a Virtual Switch Configuration2-4 Configuring Switches in a StackCreating a Virtual Switch ConfigurationYoucancreateaconfigurationfora

ip rip authentication-key16-6 IPv4 Routing Protocol ConfigurationModeInterfaceconfiguration:C3(su)‐>router(Config‐if(Vlan1))#DefaultsNone.Exampl

ip rip message-digest-keySecureStack C3 Configuration Guide 16-7ip rip message-digest-key UsethiscommandtoenableordisableaRIPMD5authenticati

no auto-summary16-8 IPv4 Routing Protocol Configurationno auto-summaryUsethiscommandtodisableautomaticroutesummarization.Syntaxno auto-summary

split-horizon poisonSecureStack C3 Configuration Guide 16-9split-horizon poisonUsethiscommandtoenableordisablesplithorizonpoison‐reversemode

receive-interface16-10 IPv4 Routing Protocol ConfigurationUsageThiscommanddoesnotpreventRIPfrommonitoringupdatesontheinterface.ExampleThis

redistributeSecureStack C3 Configuration Guide 16-11redistribute Usethiscommandtoallowroutinginformationdiscoveredthroughnon‐RIPprotocolsto

Configuring OSPF16-12 IPv4 Routing Protocol ConfigurationConfiguring OSPFPurposeToenableandconfigurethe OpenShortestPathFirst(OSPF)routingp

Configuring OSPFSecureStack C3 Configuration Guide 16-13• Define an area as a stub area. “area stub” on page 16-24• Set the cost value for the default

router id16-14 IPv4 Routing Protocol Configurationrouter idUsethiscommandtosettheOSPFrouterIDforthedevice.ThisIPaddressmustbesetmanu

1583compatibilitySecureStack C3 Configuration Guide 16-15ExampleThisexampleshowshowtoenableroutingforOSPFprocess1:C3(su)->router#conf ter

Considerations About Using Clear Config in a StackSecureStack C3 Configuration Guide 2-5Considerations About Using Clear Config in a StackWhenusingt

ip ospf enable16-16 IPv4 Routing Protocol Configurationip ospf enableUsethiscommandtoenableOSPFonaninterface.Thenoformofthiscommanddisa

ip ospf costSecureStack C3 Configuration Guide 16-17ip ospf costUsethiscommandtosetthecostofsendinganOSPFpacketonaninterface.Thenofor

timers spf16-18 IPv4 Routing Protocol ConfigurationUsageThepriorityvalueiscommunicatedbetweenroutersbymeansofhellomessagesandinfluencest

ip ospf retransmit-intervalSecureStack C3 Configuration Guide 16-19ip ospf retransmit-intervalUsethiscommandtosettheamountoftimebetweenretra

ip ospf hello-interval16-20 IPv4 Routing Protocol ConfigurationExampleThisexampleshowshowtosetthetimerequiredtotransmitalinkstateupdate

ip ospf dead-intervalSecureStack C3 Configuration Guide 16-21ip ospf dead-intervalUsethiscommandtosetthenumberofsecondsaroutermustwaitto

ip ospf message digest key md516-22 IPv4 Routing Protocol ConfigurationUsageThispasswordisusedasa“key”thatisinserteddirectlyintotheOSPFh

distance ospfSecureStack C3 Configuration Guide 16-23distance ospfUsethiscommandtoconfiguretheadministrativedistanceforOSPFroutes.Thenofo

area range16-24 IPv4 Routing Protocol Configurationarea rangeUsethiscommandtodefinetherangeofaddressestobeusedbyAreaBorderRouters(ABRs

area default costSecureStack C3 Configuration Guide 16-25ModeRouterconfiguration:C3(su)‐>router(Config‐router)#DefaultsIfno‐summaryisnotspeci

iii4. EXPORTRESTRICTIONS. YouunderstandthatEnterasysanditsAffiliatesaresubjecttoregulationbyagenciesoftheU.S.Government,includingth

Stacking Configuration and Management Commands2-6 Configuring Switches in a StackStacking Configuration and Management CommandsPurposeToreview,indiv

area nssa16-26 IPv4 Routing Protocol Configurationarea nssaUsethiscommandtoconfigureanareaasaNotSoStubbyArea(NSSA).The noformofthis

area virtual-linkSecureStack C3 Configuration Guide 16-27area virtual-linkUsethiscommandtodefineanOSPFvirtuallink,whichrepresentsalogical

redistribute16-28 IPv4 Routing Protocol ConfigurationModeRouterconfiguration:C3(su)‐>router(Config‐router)#ExampleThisexampleshowshowtoconfi

show ip ospfSecureStack C3 Configuration Guide 16-29ExampleThisexampleshowshowtoredistributeRIProutinginformationtonon‐subnettedroutesinO

show ip ospf database16-30 IPv4 Routing Protocol Configurationshow ip ospf databaseUsethiscommandtodisplaytheOSPFlinkstatedatabase.Syntaxsho

show ip ospf databaseSecureStack C3 Configuration Guide 16-318.1.3.0 3.3.3.3 1502 0x80000003 0x27f58.1.4.0 3.3

show ip ospf interface16-32 IPv4 Routing Protocol Configurationshow ip ospf interfaceUsethiscommandtodisplayOSPFinterfacerelatedinformation,i

show ip ospf neighborSecureStack C3 Configuration Guide 16-33show ip ospf neighborUsethiscommandtodisplaythestateofcommunicationbetweenanOS

show ip ospf virtual-links16-34 IPv4 Routing Protocol Configurationshow ip ospf virtual-linksUsethiscommandtodisplayinformationaboutthevirtual

clear ip ospf processSecureStack C3 Configuration Guide 16-35clear ip ospf processUsethiscommandtoresettheOSPFprocess.Thiswillrequireadjace

show switchSecureStack C3 Configuration Guide 2-7show switchUsethiscommandtodisplayinformationaboutoneormoreunitsinthestack.Syntaxshow s

Configuring DVMRP16-36 IPv4 Routing Protocol ConfigurationConfiguring DVMRPPurposeToenableandconfiguretheDistanceVectorMulticastRoutingProtoc

ip dvmrpSecureStack C3 Configuration Guide 16-37ip dvmrp UsethiscommandtoenabletheDVMRPprocess.ThenoformofthiscommanddisablestheDVMRP

ip dvmrp metric16-38 IPv4 Routing Protocol Configurationip dvmrp metricUsethiscommandtoconfigurethemetricassociatedwithasetofdestinations

show ip dvmrpSecureStack C3 Configuration Guide 16-39ExampleThisexampleshowshowtodisplayDVMRPstatusinformation:C3(su)->router#show ip dvmrp

Configuring IRDP16-40 IPv4 Routing Protocol ConfigurationConfiguring IRDPPurposeToenableandconfiguretheICMPRouterDiscoveryProtocol(IRDP)ona

ip irdp maxadvertintervalSecureStack C3 Configuration Guide 16-41ip irdp maxadvertintervalUsethiscommandtosetthemaximumintervalinsecondsbetw

ip irdp holdtime16-42 IPv4 Routing Protocol ConfigurationExampleThisexampleshowshowtosettheminimumIRDPadvertisementintervalto500secondso

ip irdp broadcastSecureStack C3 Configuration Guide 16-43DefaultsNone.ModeInterfaceconfiguration:C3(su)‐>router(Config‐if(Vlan1))#ExampleThisex

show ip irdp16-44 IPv4 Routing Protocol Configurationshow ip irdpUsethiscommandtodisplayIRDPinformation.Syntaxshow ip irdp [vlan vlan-id]Paramet

Configuring VRRPSecureStack C3 Configuration Guide 16-45Configuring VRRPPurposeToenableandconfiguretheVirtualRouterRedundancyProtocol(VRRP).

show switch switchtype2-8 Configuring Switches in a StackDetected Code in Flash 03.01.20Detected Code in Back Image 02.01.37Up Time

router vrrp16-46 IPv4 Routing Protocol Configurationrouter vrrpUsethiscommandtoenableordisableVRRPconfigurationmode.Thenoformofthiscomm

createSecureStack C3 Configuration Guide 16-47create UsethiscommandtocreateaVRRPsession.EachSecureStackC3systemsupportsupto20VRRPsess

address16-48 IPv4 Routing Protocol Configurationaddress UsethiscommandtoconfigureavirtualrouterIPaddress.Thenoformofthiscommandclears

prioritySecureStack C3 Configuration Guide 16-49priorityUsethiscommandtosetapriorityvalueforaVRRProuter.Thenoformofthiscommandclears

advertise-interval16-50 IPv4 Routing Protocol Configurationadvertise-intervalUsethiscommandtosettheintervalinsecondsbetweenVRRPadvertisemen

preemptSecureStack C3 Configuration Guide 16-51preemptUsethiscommandtoenableordisablepreemptmodeonaVRRProuter.Thenoformofthiscommand

enable16-52 IPv4 Routing Protocol ConfigurationenableUsethiscommandtoenableVRRPonaninterface.ThenoformofthiscommanddisablesVRRPonan

show ip vrrpSecureStack C3 Configuration Guide 16-53show ip vrrpUsethiscommandtodisplayVRRProutinginformation.Syntaxshow ip vrrp ParametersNone

Configuring PIM-SM16-54 IPv4 Routing Protocol ConfigurationConfiguring PIM-SMPurposeToenableandconfigureProtocolIndependentMulticastinSparseM

ip pimsmSecureStack C3 Configuration Guide 16-55ip pimsmThiscommandsetsadministrativemodeofPIM‐SMmulticastroutingacrosstheroutertoenabled

show switch stack-portsSecureStack C3 Configuration Guide 2-9ThisexampleshowshowtodisplayswitchtypeinformationaboutSID1:C3(ro)->show swit

ip pimsm enable16-56 IPv4 Routing Protocol Configurationip pimsm enableThiscommandsetstheadministrativemodeofPIM‐SMmulticastroutingonarout

ip pimsm query-intervalSecureStack C3 Configuration Guide 16-57ip pimsm query-intervalThiscommandconfiguresthetransmissionfrequencyofhellomess

show ip pimsm componenttable16-58 IPv4 Routing Protocol ConfigurationPIM-SM INTERFACE STATUS VlanId Interface Mode Protocol State--------- ------

show ip pimsm interfaceSecureStack C3 Configuration Guide 16-59 COMPONENT TABLEComponent Component Component ComponentI

show ip pimsm interface16-60 IPv4 Routing Protocol ConfigurationMode enableHello Interval (secs) 30 secsCBSR Preferen

show ip pimsm neighborSecureStack C3 Configuration Guide 16-61show ip pimsm neighborDisplaytherouter’sPIMneighbors.Syntaxshow ip pimsm neighbor [v

show ip pimsm rp16-62 IPv4 Routing Protocol Configurationshow ip pimsm rpThiscommanddisplaysthePIMinformationforcandidateRendezvousPoints(RP

show ip pimsm rphashSecureStack C3 Configuration Guide 16-63C3(su)->router> show ip pimsm rp candidate CANDIDATE RP TABLEGroup Addre

show ip pimsm staticrp16-64 IPv4 Routing Protocol ConfigurationExampleThisexampleshowshowtodisplayPIMinformation.C3(su)->router# show ip pi

SecureStack C3 Configuration Guide 17-117IPv6 ManagementThischapterdescribestheswitchmodesetofcommandsusedtomanageIPv6.PurposeToenableo

set switch2-10 Configuring Switches in a Stackset switch UsethiscommandtoassignaswitchID,tosetaswitch’spriorityforbecomingthemanagemen

show ipv6 status17-2 IPv6 Managementshow ipv6 statusUsethiscommandtodisplaythestatusoftheIPv6managementfunction.Syntaxshow ipv6 statusParam

set ipv6 addressSecureStack C3 Configuration Guide 17-3IPv6 Administrative Mode: EnabledC3(su)->show ipv6 address Name IPv6 Address

show ipv6 address17-4 IPv6 ManagementC3(su)->show ipv6 address Name IPv6 Address ------------ -----------

clear ipv6 addressSecureStack C3 Configuration Guide 17-5clear ipv6 addressUsethiscommandtoclearIPv6globaladdresses.Syntaxclear ipv6 [address

set ipv6 gateway17-6 IPv6 Managementset ipv6 gatewayUsethiscommandtoconfiguretheIPv6gateway(defa ultrouter)address.Syntaxset ipv6 gateway i

clear ipv6 gatewaySecureStack C3 Configuration Guide 17-7clear ipv6 gatewayUsethiscommandtoclearanIPv6gatewayaddress.Syntaxclear ipv6 gatewayP

show ipv6 netstat17-8 IPv6 ManagementC3(su)->show ipv6 neighbors LastIPv6 A

ping ipv6SecureStack C3 Configuration Guide 17-9ping ipv6UsethiscommandtotestroutingnetworkconnectivitybysendingIPpingrequests.Syntaxping

traceroute ipv617-10 IPv6 Managementtraceroute ipv6Usethiscommandtodiscovertheroutesthatpacketsactuallytakewhentravelingtotheirdestinat

SecureStack C3 Configuration Guide 18-118IPv6 ConfigurationThecommandsinthischapterperformconfigurationofIPv6parametersontheSecureStackC3

set switch descriptionSecureStack C3 Configuration Guide 2-11ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoreplicatethemanagement

Overview18-2 IPv6 ConfigurationautoconfigurationispartofRouterAdvertisementandtheSecureStackC3cansupportbothstatelessandstatefulautoco

General Configuration CommandsSecureStack C3 Configuration Guide 18-3General Configuration CommandsThecommandsforgeneralconfigurationofIPv6para

ipv6 hop-limit18-4 IPv6 Configurationipv6 hop-limitThiscommandsetsthemaximumnumberofIPv6hopsusedinIPv6packetsandrouteradvertisementsge

ipv6 route distanceSecureStack C3 Configuration Guide 18-5DefaultsDefaultpreferenceoradministrativedistanceis1.ModeRouterglobalconfiguration:

ipv6 unicast-routing18-6 IPv6 ConfigurationModeRouterglobalconfiguration:C3(su)‐>router(Config)#UsageThedefaultdistanceisusedwhennodistan

ping ipv6SecureStack C3 Configuration Guide 18-7ping ipv6UsethiscommandtotestroutingnetworkconnectivitybysendingIPpingrequests.Syntaxping

ping ipv6 interface18-8 IPv6 Configurationping ipv6 interfaceUsethiscommandtotestroutingnetworkconnectivitybysendingIPpingrequests.Syntax

traceroute ipv6SecureStack C3 Configuration Guide 18-9traceroute ipv6Usethiscommandtodiscovertheroutesthatpacketsactuallytakewhentraveling

Interface Configuration Commands18-10 IPv6 ConfigurationInterface Configuration CommandsThecommandstoconfigureIPv6interfacesare:ipv6 addressThi

ipv6 enableSecureStack C3 Configuration Guide 18-11ThiscommandalsoenablesIPv6processingontheinterfaceandautomaticallygeneratesalink‐local

set switch member2-12 Configuring Switches in a StackModeSwitchcommand,read‐write.ExampleThisexampleshowshowtomovemanagementfunctionalityfro

ipv6 mtu18-12 IPv6 ConfigurationThenoipv6enablecommanddisablesIPv6routingonaninterface thathasbeenenabledwiththeipv6enablecommand,

ipv6 mtuSecureStack C3 Configuration Guide 18-13ExampleThisexamplesetstheMTUvalueto1500bytes.C3(su)->router(configif(Vlan 1))# ipv6 mtu 150

Neighbor Cache and Neighbor Discovery Commands18-14 IPv6 ConfigurationNeighbor Cache and Neighbor Discovery CommandsTheIPv6NeighborCachefunctions

ipv6 nd dad attemptsSecureStack C3 Configuration Guide 18-15ipv6 nd dad attemptsThiscommandconfiguresthenumberofduplicateaddressdetection(DAD

ipv6 nd ns-interval18-16 IPv6 Configurationipv6 nd ns-intervalThiscommandconfigurestheintervalbetweenNeighborSolicitationssentonaninterface

ipv6 nd managed-config-flagSecureStack C3 Configuration Guide 18-17ModeRouterinterfaceconfiguration:C3(su)‐>router(configif(Vlan1))#UsageThist

ipv6 nd other-config-flag18-18 IPv6 Configurationipv6 nd other-config-flagThiscommandsetsthe“otherstatefulconfiguration”flaginrouteradvertis

ipv6 nd ra-lifetimeSecureStack C3 Configuration Guide 18-19UsageThenoformofthiscommandresetstheintervalvaluetothedefaultof600seconds.Ex

ipv6 nd prefix18-20 IPv6 ConfigurationDefaultsSuppressiondisabled.ModeRouterinterfaceconfiguration:C3(su)‐>router(configif(Vlan1))#UsageBydef

ipv6 nd prefixSecureStack C3 Configuration Guide 18-21Defaults•Valid‐lifetime—604 800• Preferred‐lifetime—2592000• Autoconfig—enabled•On‐link—

clear switch memberSecureStack C3 Configuration Guide 2-13clear switch memberUsethiscommandtoremoveamemberentryfromthestack.Syntaxclear swit

Query Commands18-22 IPv6 ConfigurationQuery CommandsTheshowcommandsthatdisplayIPv6informationare:show ipv6 Thiscommanddisplaysthestatusof

show ipv6 interfaceSecureStack C3 Configuration Guide 18-23show ipv6 interfaceThiscommanddisplaysinformationaboutoneorallconfiguredIPv6inter

show ipv6 neighbors18-24 IPv6 ConfigurationThisexampledisplaysinformationaboutIPv6interfacetunnel1.C3(su)->router>show ipv6 interface tu

show ipv6 routeSecureStack C3 Configuration Guide 18-25 Vlan 6 FE80::2D0:B7FF:FE2C:769E 00:d0:b7:2c:76:9e False Stale

show ipv6 route18-26 IPv6 ConfigurationDefaultsIfnoparametersareentered,informationaboutallactiveIPv6routesisdisplayed.ModeRouterprivileg

show ipv6 route preferencesSecureStack C3 Configuration Guide 18-27show ipv6 route preferencesThiscommandshowsthepreferencevalueassociatedwith

show ipv6 route summary18-28 IPv6 ConfigurationOSPF Inter 10OSPF Ext T1 13OSP

show ipv6 trafficSecureStack C3 Configuration Guide 18-29IPv6 Routing Table Summary - 6 entriesConnected Routes 3Static

show ipv6 traffic18-30 IPv6 ConfigurationExampleThefollowingexampledisplaystheoutputofthiscommand.Table 18‐5describestheoutputfields.C3(s

show ipv6 trafficSecureStack C3 Configuration Guide 18-31ICMPv6 Group Membership Response Messages Transmitted... 8ICMPv6 Group Membership Reduction

clear switch member2-14 Configuring Switches in a Stack

show ipv6 traffic18-32 IPv6 ConfigurationDatagrams Failed To Reassemble Number of failures detected by the IPv6 reassembly algorithm (for whatever re

show ipv6 trafficSecureStack C3 Configuration Guide 18-33ICMPv6 Packets Too Big Messages ReceivedNumber of ICMP Packet Too Big messages received by th

show ipv6 traffic18-34 IPv6 ConfigurationICMPv6 Router Solicit Messages Transmitted Number of ICMP Router Solicitation messages sent by the interface.

clear ipv6 statisticsSecureStack C3 Configuration Guide 18-35clear ipv6 statisticsThiscommandclearsIPv6statisticsforallinterfacesoraspecific

clear ipv6 statistics18-36 IPv6 Configuration

SecureStack C3 Configuration Guide 19-119DHCPv6 ConfigurationThecommandsdescribedinthischapterperformconfigurationoftheDynamicHostConfigur

Global Configuration Commands19-2 DHCPv6 ConfigurationRFC3315alsodescribesDHCPv6RelayAgentinteractions,whichareverymuchlikeDHCPv4RelayA

ipv6 dhcp enableSecureStack C3 Configuration Guide 19-3ipv6 dhcp enable ThiscommandenablesDHCPv6ontherouter.Syntaxipv6 dhcp enableno ipv6 dhcp e

ipv6 dhcp relay-agent-info-remote-id-subopt19-4 DHCPv6 ConfigurationExampleThisexamplesetstheRelayAgentInformat ion Optionvalueto82.C3(su)-&

ipv6 dhcp poolSecureStack C3 Configuration Guide 19-5ModeRouterglobalconfiguration:C3(su)‐>router(Config)#UsageDHCPv6poolsareusedtospecify

SecureStack C3 Configuration Guide 3-13Basic ConfigurationAtstartup,theSecureStackC3switchisconfiguredwithmanydefaultsandstandardfeatures

Address Pool Configuration Commands19-6 DHCPv6 ConfigurationAddress Pool Configuration CommandsPurposeTheseDHCPpoolconfigurationmodecommandsare

dns-serverSecureStack C3 Configuration Guide 19-7dns-serverThiscommandsetstheIPv6DNSserveraddresswhichisprovidedtoDHCP v6clientsbytheD

exit19-8 DHCPv6 ConfigurationDefaultsDefaultvalueofvalidlifeti meofprefix:604,800Defaultvalueofpreferredlifetimeofprefix:2,592,000ModeRo

exitSecureStack C3 Configuration Guide 19-9ModeRouterDHCPv6poolconfigurationmode:C3(su)‐>router(Config‐dhcp6s‐pool)#ExampleThisexampleillust

Interface Configuration Commands19-10 DHCPv6 ConfigurationInterface Configuration CommandsPurposeThesecommandsareusedtoconfigureaninterfaceas

ipv6 dhcp relaySecureStack C3 Configuration Guide 19-11ExampleThisexampleconfiguresroutinginterfaceVLAN7tobeaDHCPv6server,usingtheaddres

ipv6 dhcp relay19-12 DHCPv6 ConfigurationExamplesThisexampleconfiguresinterfaceVLAN8asaDHCPv6relayagentthatrelaysDHCPv6messagestotheD

DHCPv6 Show CommandsSecureStack C3 Configuration Guide 19-13DHCPv6 Show CommandsPurposeThesecommandsareusedtodisplayDHCPv6configurationinforma

show ipv6 dhcp interface19-14 DHCPv6 Configurationshow ipv6 dhcp interfaceThiscommanddisplaysDHCPv6configurationinformationorDHCPv6statistics

show ipv6 dhcp interfaceSecureStack C3 Configuration Guide 19-15ThisexampledisplaystheDHCPv6statisticsforVLAN80.Theoutputfieldsaredescrib

iv10. ENFORCEMENT. YouacknowledgeandagreethatanybreachofSections2,4,or9ofthisAgreementbyYoumaycauseEnterasysirreparabledamagefo

Setting User Accounts and Passwords3-2 Basic ConfigurationSetting User Accounts and PasswordsPurposeTochangetheswitch’sdefaultuserloginandpass

show ipv6 dhcp statistics19-16 DHCPv6 Configurationshow ipv6 dhcp statisticsThiscommanddisplaysIPv6DHCPstatisticsforallinterfaces.Syntaxshow

clear ipv6 dhcp statisticsSecureStack C3 Configuration Guide 19-17clear ipv6 dhcp statisticsThiscommandclearsIPv6DHCPstatistics,eitherallstati

show ipv6 dhcp pool19-18 DHCPv6 Configurationshow ipv6 dhcp pool Thiscommanddisplaysinformationaboutaspecificconfiguredpool.Syntaxshow ipv6 dh

show ipv6 dhcp bindingSecureStack C3 Configuration Guide 19-19show ipv6 dhcp bindingThiscommanddisplaysinformationaboutDHCPv6bindings.Syntaxshow

show ipv6 dhcp binding19-20 DHCPv6 Configuration

SecureStack C3 Configuration Guide 20-120OSPFv3 ConfigurationThecommandsinthischapterperformconfigurationoftheOSPFv3routingprotocolonthe

Overview20-2 OSPFv3 ConfigurationLSAformatsarechanged,andthetype3and4summaryLSAsare renamed“inter‐area‐prefix”and“inter‐area‐router”L

Global OSPFv3 Configuration CommandsSecureStack C3 Configuration Guide 20-3Global OSPFv3 Configuration CommandsPurposeThesecommandsareusedtoconfi

ipv6 router ospf20-4 OSPFv3 Configurationipv6 router ospfThiscommandentersRouterOSPFv3configurationmode.Syntaxipv6 router ospfParametersNone.Def

default-metricSecureStack C3 Configuration Guide 20-5ModeRouterOSPFv3configuration:C3(su)->router(Config-router)#UsageUsethiscommandtogenera

set system loginSecureStack C3 Configuration Guide 3-3Username Access State admin super-us

distance ospf20-6 OSPFv3 Configurationdistance ospfThiscommandsetstheroutepreferencevalueofOSPFv3.Syntaxdistance ospf {intra | inter | type1 |

exit-overflow-intervalSecureStack C3 Configuration Guide 20-7exit-overflow-intervalThiscommandconfigurestheexitoverflowintervalforOSPFv3.Synta

maximum-paths20-8 OSPFv3 ConfigurationUsageWhenthenumberofnon‐defaultAS‐external‐LSAsinarouterʹslink‐statedatabasereachestheexternalLSDB

redistributeSecureStack C3 Configuration Guide 20-9redistributeThiscommandconfigurestheOSPFv3protocoltoallowredistributionofroutesfromthe

Area Configuration Commands20-10 OSPFv3 ConfigurationArea Configuration CommandsPurposeThesecommandsareusedtoconfigureareaparameters.Commandsa

area nssaSecureStack C3 Configuration Guide 20-11ModeRouterOSPFv3configuration:C3(su)->router(Config-router)#UsageUsethiscommandtosettheco

area nssa default-info-originate20-12 OSPFv3 Configurationarea nssa default-info-originateThiscommandconfiguresthemetricvalueandtypeforthede

area nssa no-summarySecureStack C3 Configuration Guide 20-13DefaultsNone.ModeRouterOSPFv3configuration:C3(su)->router(Config-router)#UsageUseth

area nssa translator role20-14 OSPFv3 Configurationarea nssa translator roleThiscommandconfiguresthetranslatorroleoftherouter.Syntaxarea areai

area nssa translator-stab-intvSecureStack C3 Configuration Guide 20-15area nssa translator-stab-intvThiscommandconfiguresthetranslatorstabilityi

clear system login3-4 Basic Configurationclear system loginUsethiscommandtoremovealocalloginuseraccount.Syntaxclear system login usernamePara

area stub20-16 OSPFv3 ConfigurationDefaultsAreaaddressrangesarenotconfiguredbydefault.ModeRouterOSPFv3configuration:C3(su)->router(Config

area stub no-summarySecureStack C3 Configuration Guide 20-17UsageAstubareaischaracterizedbythefactthatASexternalLSAsarenotpropagatedint

area virtual-link20-18 OSPFv3 Configurationarea virtual-linkThiscommandcreatestheOSPFv3virtualinterfac eforthespecifiedareaandneighbor.Syn

area virtual-link hello-intervalSecureStack C3 Configuration Guide 20-19ModeRouterOSPFv3configuration:C3(su)->router(Config-router)#UsageUsethe

area virtual-link retransmit-interval20-20 OSPFv3 Configurationarea virtual-link retransmit-intervalThiscommandconfigurestheretransmitintervalfo

area virtual-link transmit-delaySecureStack C3 Configuration Guide 20-21DefaultsThedefaulttransmitdelayis1second.ModeRouterOSPFv3configuration

Interface Configuration Commands20-22 OSPFv3 ConfigurationInterface Configuration CommandsPurposeThesecommandscanbeusedtoconfigureOSPFv3routi

ipv6 ospf areaidSecureStack C3 Configuration Guide 20-23ExampleThisexampleentersrouterinterfaceconfigurationmodeforVLAN7andthenenablesOSP

ipv6 ospf cost20-24 OSPFv3 Configurationipv6 ospf costThiscommandconfiguresthecostofsendingapacketonanOSPFv3interface.Syntaxipv6 ospf cost

ipv6 ospf hello-intervalSecureStack C3 Configuration Guide 20-25UsageTheOSPFv3deadintervalisthelengthoftimeinsecondsthatarouter’sHellop

set system password lengthSecureStack C3 Configuration Guide 3-5UsageRead‐Writeuserscanchangetheirownpasswords.SuperUsers(Admin)canchangea

ipv6 ospf mtu-ignore20-26 OSPFv3 Configurationipv6 ospf mtu-ignoreThiscommanddisablesOSPFv3maximumtransmissionunit(MTU)mismatchdetection.Synt

ipv6 ospf prioritySecureStack C3 Configuration Guide 20-27ModeRouterinterfaceconfiguration:C3(su)‐>router(configif(Vlan1))#UsageNormally,then

ipv6 ospf retransmit-interval20-28 OSPFv3 Configurationipv6 ospf retransmit-intervalThiscommandconfigurestheOSPFv3retransmitintervalfortherou

ipv6 ospf transmit-delaySecureStack C3 Configuration Guide 20-29UsageThetransmitdelay,specifiedinseconds,setstheestimatednumberofsecondsit

OSPFv3 Show Commands20-30 OSPFv3 ConfigurationOSPFv3 Show CommandsPurposeThesecommandsareusedtodisplayOSPFv3informationandstatistics.Command

show ipv6 ospfSecureStack C3 Configuration Guide 20-31C3(su)->router# show ipv6 ospfRouter ID 2.2.2.2OSPF Adm

show ipv6 ospf area20-32 OSPFv3 Configurationshow ipv6 ospf areaThiscommanddisplaysinformationaboutthespecifiedOSPFv3area.Syntaxshow ipv6 ospf

show ipv6 ospf areaSecureStack C3 Configuration Guide 20-33ModeRouterprivilegedexecution:C3(su)‐>router#ExampleTheoutputfieldsofthisexample

show ipv6 ospf abr20-34 OSPFv3 Configurationshow ipv6 ospf abrThiscommanddisplaysOSPFv3routestoreachareaborderrouters.Syntaxshow ipv6 ospf ab

show ipv6 ospf asbrSecureStack C3 Configuration Guide 20-35show ipv6 ospf asbrThiscommanddisplaysOSPFv3routestoreachASborderrouters.Syntaxsho

set system password aging3-6 Basic Configurationset system password agingUsethiscommandtosetthenumberofdaysuserpasswordswillremainvalidb

show ipv6 ospf database20-36 OSPFv3 Configurationshow ipv6 ospf databaseThiscommanddisplaysinformationaboutthelinkstatedatabasewhenOSPFv3is

show ipv6 ospf databaseSecureStack C3 Configuration Guide 20-37C3(su)->router#show ipv6 ospf 10 database Inter Network States (Area

show ipv6 ospf database20-38 OSPFv3 ConfigurationMetric Type: 2Metric:20IPv6 Prefix: 2301::/64 (None)Table 20-5 Output of the show ipv6 ospf database

show ipv6 ospf database database-summarySecureStack C3 Configuration Guide 20-39show ipv6 ospf database database-summaryThiscommanddisplaysthenumb

show ipv6 ospf database database-summary20-40 OSPFv3 ConfigurationRouter database summaryRouter 4Network

show ipv6 ospf interfaceSecureStack C3 Configuration Guide 20-41show ipv6 ospf interfaceThiscommanddisplaysinformationaboutOSPFv3interfaces.Synt

show ipv6 ospf interface20-42 OSPFv3 ConfigurationIftransit Delay Interval 1Authentication Type Non

show ipv6 ospf interface statsSecureStack C3 Configuration Guide 20-43show ipv6 ospf interface statsThiscommanddisplaysstatisticsforaspecificin

show ipv6 ospf interface stats20-44 OSPFv3 ConfigurationTable 20-8 Output of show ipv6 ospf interface stats Command Output... What it displays...OSPF

show ipv6 ospf neighborSecureStack C3 Configuration Guide 20-45show ipv6 ospf neighborThiscommanddisplaysinformationaboutOSPFv3neighbors.Syntaxs

show system lockoutSecureStack C3 Configuration Guide 3-7show system lockoutUsethiscommandtodisplaysettingsforlockingoutusersafterfailedat

show ipv6 ospf neighbor20-46 OSPFv3 ConfigurationThisexampledisplaystheoutputofthiscommandwhenaneighborisspecified.Table 20‐10onpage 20

show ipv6 ospf rangeSecureStack C3 Configuration Guide 20-47show ipv6 ospf rangeThiscommanddisplaysinformationaboutthearearangesforthespecif

show ipv6 ospf stub table20-48 OSPFv3 Configurationshow ipv6 ospf stub tableThiscommanddisplaystheOSPFv3stubtable,ifOSPFv3isinitializedont

show ipv6 ospf virtual-linkSecureStack C3 Configuration Guide 20-49show ipv6 ospf virtual-linkThiscommanddisplaystheOSPFv3virtualinterfaceinfor

show ipv6 ospf virtual-link20-50 OSPFv3 ConfigurationNeighbor State The state of the neighbor. States are: down, loopback, waiting, point-to-point, d

SecureStack C3 Configuration Guide 21-121Security ConfigurationThischapterdescribestheSecurityConfigurationsetofcommandsandhowtousethem.O

Overview of Security Methods21-2 Security Configuration• 802.1XPortBasedNetworkAccessControlusingEAPOL(ExtensibleAuthenticationProtocol)–p

Overview of Security MethodsSecureStack C3 Configuration Guide 21-3returnsaRADIUSAccess‐AcceptmessagethatincludesaFilter‐IDmatchingapolicy

Configuring RADIUS21-4 Security ConfigurationConfiguring RADIUS PurposeToperformthefollowing:•ReviewtheRADIUSclient/serverconfigurationonthe

show radiusSecureStack C3 Configuration Guide 21-5show radiusUsethiscommandtodisplaythecurrentRADIUSclient/serverconfiguration.show radius [s

set system lockout3-8 Basic Configurationset system lockoutUsethiscommandtosetthenumberoffailedloginattemptsbeforelockingout(disabling)

set radius21-6 Security Configurationset radiusUsethiscommandtoenable,disable,orconfigureRADIUSauthentication.Syntaxset radius {enable | disa

set radiusSecureStack C3 Configuration Guide 21-7Ifrealmisnotspecified,theanyaccessrealmwillbeused.ModeSwitchcommand,read‐write.UsageThe

clear radius21-8 Security Configurationclear radiusUsethiscommandtoclearRADIUSserversettings.Syntaxclear radius [retries] | [timeout] | [serve

show radius accountingSecureStack C3 Configuration Guide 21-9show radius accountingUsethiscommandtodisplaytheRADIUSaccountingconfiguration.Th

set radius accounting21-10 Security Configurationset radius accountingUsethiscommandtoconfigureRADIUSaccounting.Syntaxset radius accounting {[e

clear radius accountingSecureStack C3 Configuration Guide 21-11clear radius accountingUsethiscommandtoclearRADIUSaccountingconfigurationsettin

Configuring 802.1X Authentication21-12 Security ConfigurationConfiguring 802.1X AuthenticationPurposeToreviewandconfigure802.1Xauthenticationfor

show dot1xSecureStack C3 Configuration Guide 21-13show dot1xUsethiscommandtodisplay802.1Xstatus,diagnostics,statistics,andreauthenticationo

show dot1x auth-config21-14 Security ConfigurationThisexampleshowshowtodisplayauthentication statisticsforfe.1.1:C3(su)->show dot1x auth-

show dot1x auth-configSecureStack C3 Configuration Guide 21-15DefaultsIfnoparametersarespecified,all802.1Xsettingswillbedisplayed.Ifport‐st

Setting Basic Switch PropertiesSecureStack C3 Configuration Guide 3-9Setting Basic Switch PropertiesPurpose TodisplayandsetthesystemIPaddressa

set dot1x21-16 Security Configurationset dot1xUsethiscommandtoenableordisable802.1Xauthentication,toreauthenticateoneormoreaccessentiti

set dot1x auth-configSecureStack C3 Configuration Guide 21-17set dot1x auth-configUsethiscommandtoconfigure802.1Xauthentication.Syntaxset dot1x

clear dot1x auth-config21-18 Security ConfigurationExamplesThisexampleshowshowtoenablereauthenticationcontrolonportsfe.1.1‐3:C3(su)->set

show eapolSecureStack C3 Configuration Guide 21-19Thisexampleshowshowtoresetreauthenticationcontroltodisabledonportsfe.1.1‐3:C3(su)->cl

show eapol21-20 Security ConfigurationAuthentication State Current EAPOL authentication state for each port. Possible internal states for the authenti

set eapolSecureStack C3 Configuration Guide 21-21set eapolUsethiscommandtoenableordisableEAPOLport‐baseduserauthenticationwiththeRADIUSs

clear eapol21-22 Security Configurationclear eapolUsethiscommandtogloballycleartheEAPOLauthenticationmode,ortoclearsettingsforoneormo

Configuring MAC AuthenticationSecureStack C3 Configuration Guide 21-23Configuring MAC AuthenticationPurposeToreview,disable,enableandconfigureMA

show macauthentication21-24 Security Configurationshow macauthenticationUsethiscommandtodisplayMACauthenticationinformationforoneormorepor

show macauthentication sessionSecureStack C3 Configuration Guide 21-25show macauthentication sessionUsethiscommandtodisplaytheactiveMACauthent

show ip address3-10 Basic Configurationshow ip addressUsethiscommandtodisplaythesystemIPaddressandsubnetmask.Syntaxshow ip addressParameter

set macauthentication21-26 Security ConfigurationExampleThisexampleshowshowtodisplayMACsessioninformation:C3(su)->show macauthentication se

set macauthentication passwordSecureStack C3 Configuration Guide 21-27set macauthentication passwordUsethiscommandtosetaMACauthenticationpassw

set macauthentication port21-28 Security Configurationset macauthentication portUsethiscommandtoenableordisableoneormoreportsforMACauthen

set macauthentication portquietperiodSecureStack C3 Configuration Guide 21-29ExampleThisexampleshowshowtoforcege.2.1through5toinitialize:C3(

set macauthentication macinitialize21-30 Security ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleresetsthedefaultquitperiodonpo

set macauthentication portreauthenticateSecureStack C3 Configuration Guide 21-31ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenable

set macauthentication reauthperiod21-32 Security ConfigurationExampleThisexampleshowshowtoforcetheMACauthentication sessionforaddress00‐60

clear macauthentication reauthperiodSecureStack C3 Configuration Guide 21-33clear macauthentication reauthperiodUsethiscommandtocleartheMACreau

Configuring Multiple Authentication Methods21-34 Security ConfigurationConfiguring Multiple Authentication MethodsAbout Multiple Authentication TypesW

Configuring Multiple Authentication MethodsSecureStack C3 Configuration Guide 21-35show multiauth port 21-39set multiauth port 21-40clear multiauth

clear ip addressSecureStack C3 Configuration Guide 3-11ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetthesystemIPaddressto10

show multiauth21-36 Security Configurationshow multiauthUsethiscommandtodisplaymultipleauthenticationsystemconfiguration.Syntaxshow multiauthP

set multiauth modeSecureStack C3 Configuration Guide 21-37set multiauth modeUsethiscommandtosetthesystemauthenticationmodetoallowmultiplea

set multiauth precedence21-38 Security ConfigurationExampleThisexampleshowshowtoclearthesystemauthenticationmode:C3(rw)->clear multiauth m

show multiauth portSecureStack C3 Configuration Guide 21-39ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearthemultipleauthenti

set multiauth port21-40 Security Configurationset multiauth portUsethiscommandtosetmultipleauthentication propertiesforoneormoreports.Synt

show multiauth stationSecureStack C3 Configuration Guide 21-41DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearthep

Configuring VLAN Authorization (RFC 3580)21-42 Security ConfigurationConfiguring VLAN Authorization (RFC 3580)PurposePleaseseesection3‐31ofRFC35

set vlanauthorizationSecureStack C3 Configuration Guide 21-43set vlanauthorizationEnableordisabletheuseoftheRADIUSVLANtunnelattributetoput

clear vlanauthorization21-44 Security ConfigurationDefaultsBydefault,administrativeegressissettountagged.ModeSwitchcommand,read‐write.Example

show vlanauthorizationSecureStack C3 Configuration Guide 21-45show vlanauthorizationDisplaystheVLANauthenticationstatusandconfigurationinformat

vContentsAbout This GuideUsing This Guide ...

set ip protocol3-12 Basic ConfigurationExampleThisexampleshowshowtodisplaythemethodusedtoacquireanetworkIPaddress:C3(su)->show ip pro

Configuring MAC Locking21-46 Security ConfigurationConfiguring MAC LockingPurposeToreview,disable,enable,andconfigureMAClocking.Thisfeaturel

show maclockSecureStack C3 Configuration Guide 21-47show maclockUsethiscommandtodisplaythestatusofMAClockingononeormoreports.Syntaxshow

show maclock stations21-48 Security Configurationshow maclock stationsUsethiscommandtodisplayMAClockinginformationaboutendstationsconnected

set maclock enableSecureStack C3 Configuration Guide 21-49set maclock enableUsethiscommandtoenableMAClockingononeormoreports.Syntaxsetmac

set maclock disable21-50 Security Configurationset maclock disableUsethiscommandtodisableMAClockingononeormoreports.Syntaxsetmaclockdisa

clear maclockSecureStack C3 Configuration Guide 21-51ModeSwitchcommand,read‐write.UsageConfiguringoneormoreportsforMAClockingrequiresglobal

set maclock static21-52 Security Configurationset maclock staticUsethiscommandtosetthemaximumnumberofstaticMACaddressesallowedperport.S

set maclock firstarrivalSecureStack C3 Configuration Guide 21-53ExampleThisexampleshowshowtoresetthenumberofallowablestaticMACsonfe.2.3:

clear maclock firstarrival21-54 Security Configurationclear maclock firstarrivalUsethiscommandtoresetthenumberoffirstarrivalMACaddressesal

set maclock trapSecureStack C3 Configuration Guide 21-55ExampleThisexampleshowshowtomoveallcurrentfirstarrivalMACstostaticentriesonport

show system hardwareSecureStack C3 Configuration Guide 3-13ExampleThisexampleshowshowtodisplaysysteminformation:C3(su)->show system

Configuring Port Web Authentication (PWA)21-56 Security ConfigurationConfiguring Port Web Authentication (PWA)About PWAPWAprovidesawayofauthentic

show pwaSecureStack C3 Configuration Guide 21-57show pwaUsethiscommandtodisplayportwebauthenticationinformationforoneormoreports.Syntaxsh

show pwa21-58 Security ConfigurationTable 21-8 show pwa Output Details Output What It Displays...PWA Status Whether or not port web authentication is

set pwaSecureStack C3 Configuration Guide 21-59set pwaUsethiscommandtoenableordisableportwebauthentication.Syntaxset pwa {enable | disable}Pa

set pwa banner21-60 Security Configurationset pwa bannerUsethiscommandtoconfigureastringtobedisplayedasthePWAloginbanner.Syntaxset pwa b

set pwa displaylogoSecureStack C3 Configuration Guide 21-61set pwa displaylogoUsethiscommandtosetthedisplayoptionsfortheEnterasysNetworksl

set pwa protocol21-62 Security Configurationset pwa protocolUsethiscommandtosettheportwebauthenticationprotocol.Syntaxset pwa protocol {chap

clear pwa guestnameSecureStack C3 Configuration Guide 21-63clear pwa guestnameUsethiscommandtoclearthePWAguestusername.Syntaxclear pwa guestn

set pwa gueststatus21-64 Security Configurationset pwa gueststatusUsethiscommandtoenableordisableguestnetworkingforportwebauthentication.

set pwa quietperiodSecureStack C3 Configuration Guide 21-65ExampleThisexampleshowshowtoinitializeportsfe.1.5‐7:C3(su)->set pwa initialize f

show system utilization3-14 Basic ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythesystem’shardwareconfigurat

set pwa portcontrol21-66 Security ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetthePWAmaximumrequeststo3fora

set pwa enhancedmodeSecureStack C3 Configuration Guide 21-67ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplayPWAsessioninforma

Configuring Secure Shell (SSH)21-68 Security ConfigurationConfiguring Secure Shell (SSH)PurposeToreview,enable,disable,andconfiguretheSecureSh

set sshSecureStack C3 Configuration Guide 21-69set sshUsethiscommandtoenable,disableorreinitializeSSHserverontheswitch.Bydefault,theSS

Configuring Access Lists21-70 Security ConfigurationConfiguring Access ListsPurposeToreviewandconfiguresecurityaccesscontrollists(ACLs),which

access-list (standard)SecureStack C3 Configuration Guide 21-71 1: permit icmp host 18.2.32.130 any 2: permit udp host 198.92.32.130 host 171.68.2

access-list (extended)21-72 Security ConfigurationUsageValidaccesslistnumbersforstandardACLsare1to99.ForextendedACLs,validvaluesare10

access-list (extended)SecureStack C3 Configuration Guide 21-73DefaultsIfinsert,replace,ormovearenotspecified,thenewentrywillbeappendedto

ip access-group21-74 Security Configurationip access-group Usethiscommandtoapplyaccessrestrictionstoinboundframesonaninterfacewhenoperat

Index-1IndexNumerics802.1D 6-1802.1p 8-17, 9-1802.1Q 7-1802.1s 6-1802.1w 6-1802.1x 21-6, 21-21AAccess Groups 21-74Access Lists 21-71 to 21-72Addresses

set system enhancedbuffermodeSecureStack C3 Configuration Guide 3-15Storage Utilization:Type Description Size(Kb) Available (Kb

Index-2 Link State Advertisementsdisplaying 16-30retransmit interval 16-19transmit delay 16-19Lockoutset system 3-7Logging 11-1Loginadministratively

Index-3security models and levels 5-2statistics 5-4target addresses 5-29target parameters 5-25trap configuration example 5-43users, groups and communi

Index-4

set time3-16 Basic ConfigurationSyntaxshowtimeParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythe

show summertimeSecureStack C3 Configuration Guide 3-17show summertimeUsethiscommandtodisplaydaylightsavingstimesettings.Syntaxshow summertimeP

set summertime date3-18 Basic Configurationset summertime dateUsethiscommandtoconfigurespecificdatestostartandstopdaylightsavingstime.Th

clear summertimeSecureStack C3 Configuration Guide 3-19DefaultsIfanoffsetisnotspecified,nonewillbeapplied.ModeSwitchcommand,read‐write.Exam

show banner motd3-20 Basic ConfigurationSyntaxset prompt prompt_stringParametersDefaults None.ModeSwitchcommand,read‐write.ExampleThisexampleshows

clear banner motdSecureStack C3 Configuration Guide 3-21SyntaxsetbannermotdmessageParametersDefaults None.ModeSwitchcommand,read‐write.ExampleThi

vi show system lockout ...3-7s

set system name3-22 Basic ConfigurationSyntaxshow versionParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodi

set system nameSecureStack C3 Configuration Guide 3-23ParametersDefaultsIfstringisnotspecified,thesystemnamewillbecleared.ModeSwitchcommand

set system location3-24 Basic Configurationset system locationUsethiscommandtoidentifythelocationofthesystem.Syntaxset system location [strin

set widthSecureStack C3 Configuration Guide 3-25ExampleThisexampleshowshowtosetthesystemcontactstring:C3(su)->set system contact “Joe Smit

show logout3-26 Basic ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosettheterminallengthto5

show consoleSecureStack C3 Configuration Guide 3-27ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetthesyst

set console baud3-28 Basic Configurationset console baudUsethiscommandtosettheconsoleportbaudrate.Syntaxset console baud rate ParametersDefau

Activating Licensed FeaturesSecureStack C3 Configuration Guide 3-29Activating Licensed FeaturesInordertoenabletheC3advancedfeatures,suchasAd

Activating Licensed Features3-30 Basic Configuration4. Enablethelicenseontheswitchmasterunitlast,usingthesetlicensecommand.Adding a New M

set licenseSecureStack C3 Configuration Guide 3-31set licenseUsethiscommandtoactivatetheSecureSt ackC3licensedfeatures.Syntaxset license typ

viiReviewing and Selecting a Boot Firmware Image ... 3-41Purpose

show license3-32 Basic Configurationshow licenseUsethiscommandtodisplaylicensekeyinformationforswitches withactivatedlicenses.Syntaxshow l

clear licenseSecureStack C3 Configuration Guide 3-33clear licenseUsethiscommandtoclearthelicensekeysettings.Ifmultipleswitchesareusedin

Configuring Power over Ethernet (PoE)3-34 Basic ConfigurationConfiguring Power over Ethernet (PoE) Purpose ToreviewandsetPoEparameters,including

show inlinepowerSecureStack C3 Configuration Guide 3-35show inlinepowerUsethiscommandtodisplayswitchPoEproperties.Syntaxshow inlinepowerParamet

set inlinepower trap3-36 Basic ConfigurationExampleThisexampleshowshowtosetthePoEthresholdto50onunit1:C3(su)->set inlinepower threshol

set port inlinepowerSecureStack C3 Configuration Guide 3-37C3(su)->show port inlinepower fe.1.1-6Port Admin Oper Priority Cl

Downloading a New Firmware Image3-38 Basic ConfigurationDownloading a New Firmware ImageYoucanupgradetheoperationalfirmwareintheSecureStackC3

Downloading a New Firmware ImageSecureStack C3 Configuration Guide 3-39Boot Menu Version 01.00.29 05-09-2005Options available1 - Start operational co

Downloading a New Firmware Image3-40 Basic ConfigurationImage Version Length...0x7Image Version Bytes...0x30 0x2e 0x35 0x2e 0x30 0x

Reviewing and Selecting a Boot Firmware ImageSecureStack C3 Configuration Guide 3-41Reviewing and Selecting a Boot Firmware ImagePurpose Todisplayan