Enterasys Enterasys SecureStack B2 B2G124-24 Dokumentacja

Enterasys® SecureStack™ B2Stackable SwitchesConfiguration GuideFirmware Version 4.02.xx.xxxx P/N 9034133-15

viii set port inlinepower ...

Resetting the Switch3-48 Basic ConfigurationModeSwitchcommand,read‐only.UsageBydefault,switchtimeoutoccursafter15minutesofuserinactivity,

clear configSecureStack B2 Configuration Guide 3-49ExamplesThisexampleshowshowtoresetthesystem:B2(su)->reset Are you sure you want to reload

Using and Configuring WebView3-50 Basic ConfigurationExampleThisexampleshowshowtoclearconfigurationparameters(includingstackingparameters,i

set webviewSecureStack B2 Configuration Guide 3-51ExampleThisexampleshowshowtodisplayWebViewstatus:B2(rw)->show webviewWebView is Enabled.se

set ssl3-52 Basic ConfigurationExampleThisexampleshowshowtodisplaySSLstatus:B2(rw)->show sslSSL status: Enabledset sslUsethiscommandtoen

show supportSecureStack B2 Configuration Guide 3-53show supportUsethiscommandtodisplayswitchinformationfortroubleshooting.Syntaxshow supportPa

show support3-54 Basic Configuration

SecureStack B2 Configuration Guide 4-14Activating Licensed FeaturesInordertoenabletheB2advancedfeatures,suchasPolicy,youmustpurchaseand

Clearing, Showing, and Applying Licenses4-2 Activating Licensed Features2. Optionally,notetheserialnumbersoftheswitchesinthestack.Youcanu

set licenseSecureStack B2 Configuration Guide 4-3set licenseUsethiscommandtoactivatetheSecureStackB2licensedfeatures.Syntaxset license type

ixReviewing Port Status ...

show license4-4 Activating Licensed Featuresshow licenseUsethiscommandtodisplaylicensekeyinformationfor switcheswithactivatedlicenses.Synt

clear licenseSecureStack B2 Configuration Guide 4-5ExampleThisexampleshowshowtoclearthePolicy licensedfeature:B2(rw)->clear license featur

clear license4-6 Activating Licensed Features

SecureStack B2 Configuration Guide 5-15Configuring System Power and PoEThecommandsinthischapterallowyoutoreviewandsetsystempowerandPoE(

set inlinepower threshold5-2 Configuring System Power and PoEExampleThisexampleshowshowtodisplaysystempowerproperties:B2(su)->show inlinepo

set inlinepower trapSecureStack B2 Configuration Guide 5-3UsageThethresholdisexpressedasapercentageoftheavailablePoEpower.Whenthisthresh

show port inlinepower5-4 Configuring System Power and PoEParametersDefaultsDefaultdetectionmodeisauto.ModeSwitchcommand,read‐write.UsageThiscom

set port inlinepowerSecureStack B2 Configuration Guide 5-5B2(su)->show port inlinepower fe.2.1Port Type Admin Oper Priority Class Pow

set port inlinepower5-6 Configuring System Power and PoE

SecureStack B2 Configuration Guide 6-16Discovery Protocol ConfigurationThischapterdescribeshowtoconfigurediscoveryprotocols.Configuring CDPPurp

x Commands ...

show cdp6-2 Discovery Protocol Configurationshow cdpUsethiscommandtodisplaythestatusoftheCDPdiscoveryprotocolandmessageintervalononeo

set cdp stateSecureStack B2 Configuration Guide 6-3set cdp stateUsethiscommandtoenableordisabletheCDPdiscoveryprotocolononeormoreports.

set cdp auth6-4 Discovery Protocol Configurationset cdp authUsethiscommandtosetaglobalCDPauthenticationcode.Syntaxset cdp auth auth-codeParam

set cdp hold-timeSecureStack B2 Configuration Guide 6-5ExampleThisexampleshowshowtosettheCDPintervalfrequencyto15seconds:B2(su)->set cd

show neighbors6-6 Discovery Protocol ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresettheCDPstatetoauto‐enabled:

Configuring Cisco Discovery ProtocolSecureStack B2 Configuration Guide 6-7Configuring Cisco Discovery ProtocolPurposeToreviewandconfiguretheCisco

show ciscodp port info6-8 Discovery Protocol ConfigurationDevice ID : 001188554A60Last Change : WED NOV 08 13:19:56 2006Table 6‐3providesan explana

set ciscodp statusSecureStack B2 Configuration Guide 6-9set ciscodp statusUsethiscommandtoenableordisabletheCiscodiscoveryprotocolglobally

set ciscodp holdtime6-10 Discovery Protocol ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetth

set ciscodp portSecureStack B2 Configuration Guide 6-11ParametersDefaults•Status:enabled•VoiceVLAN:none•Trustmode:trusted•CoSvalue:0ModeSwitch

xiset snmp user ...8

clear ciscodp6-12 Discovery Protocol Configuration•IftheswitchportisconfiguredtoaCiscoDPtruststateofuntrusted(trustedno),thissetting

Configuring Link Layer Discovery Protocol and LLDP-MEDSecureStack B2 Configuration Guide 6-13ExamplesThisexampleshowshowtoclearalltheCiscoDP

show lldp6-14 Discovery Protocol ConfigurationConfiguration TasksThecommandsincludedinthisimplementationallowyoutoperformthefollowingconfi

show lldp port statusSecureStack B2 Configuration Guide 6-15Syntaxshow lldpParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexamp

show lldp port trap6-16 Discovery Protocol ConfigurationTx-Enabled Ports : fe.1.1-60; fe.2.1-24; fe.3.1-30; fe.4.1-12Rx-Enabled Ports : fe.1

show lldp port location-infoSecureStack B2 Configuration Guide 6-17ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytransmitTLV

show lldp port local-info6-18 Discovery Protocol Configurationshow lldp port local-infoUsethiscommandtodisplaytheloca lsysteminformationstore

show lldp port local-infoSecureStack B2 Configuration Guide 6-19Table 6‐5describestheinformationdisplayedbytheshowlldpportlocal‐infocommand

show lldp port remote-info6-20 Discovery Protocol Configurationshow lldp port remote-infoUsethiscommand todisplaytheremotesysteminformationst

show lldp port remote-infoSecureStack B2 Configuration Guide 6-21ExampleThisexampleshowshowtodisplaytheremotesysteminformationstoredforpor

xii Loop Protect ...

set lldp tx-interval6-22 Discovery Protocol Configurationset lldp tx-intervalUsethiscommandtosetthetime,inseconds,betweensuccessiveLLDPfra

set lldp trap-intervalSecureStack B2 Configuration Guide 6-23set lldp trap-intervalUsethiscommandtosettheminimumintervalbetweenLLDPnotificat

set lldp port status6-24 Discovery Protocol ConfigurationExampleThisexamplesetsthenumberoffaststartLLDPDUstobesentto4.B2(rw)->set lldp

set lldp port med-trapSecureStack B2 Configuration Guide 6-25DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleenablestransmitt ingLLD

set lldp port tx-tlv6-26 Discovery Protocol ConfigurationParametersall AddsalloptionalTLVstotransmittedLLDPDUs.port‐desc PortDescriptionoption

clear lldpSecureStack B2 Configuration Guide 6-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleconfiguresthemanagementaddress,ME

clear lldp port trap6-28 Discovery Protocol ConfigurationSyntaxclear lldp port status port-stringParametersDefaultsNone.ModeSwitchcommand,read‐write

clear lldp port tx-tlvSecureStack B2 Configuration Guide 6-29ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplereturnsportfe

clear lldp port tx-tlv6-30 Discovery Protocol ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampledisablesthemanagementadd

SecureStack B2 Configuration Guide 7-17Port ConfigurationThischapterdescribesthePortConfigurationsetofcommandsandhowtousethem.Port Config

xiiiset spantree portadmin...9-33cle

Port Configuration Summary7-2 Port Configuration•4SFPslots(labeledports21through24orports45through48)thatprovidetheoptionofinstallin

Reviewing Port StatusSecureStack B2 Configuration Guide 7-3Reviewing Port StatusPurposeTodisplayoperatingstatus,duplexmode,speed,porttype,and

show port status7-4 Port Configurationshow port statusUsethiscommandtodisplayoperatingandadminstatus,speed,duplexmodeandporttypeforone

show port countersSecureStack B2 Configuration Guide 7-5show port countersUsethiscommandtodisplayportcounterstatisticsdetailingtrafficthroug

Disabling / Enabling and Naming Ports7-6 Port ConfigurationThisexampleshowshowtodisplayallfe.3.1portcounterstatisticsrelatedtotrafficthr

set port disableSecureStack B2 Configuration Guide 7-7set port disableUsethiscommandtoadministrativelydisableoneormoreports.Whenthiscomman

show port alias7-8 Port Configurationshow port aliasUsethiscommandtodisplaythealias nameforoneormoreports.Syntaxshow port alias [port-stri

set port aliasSecureStack B2 Configuration Guide 7-9ExamplesThisexampleshowshowtoassignthealias“A d m i n ” tofe.3.3:B2(rw)->set port ali

Setting Speed and Duplex Mode7-10 Port ConfigurationSetting Speed and Duplex ModePurposeToreviewandsettheoperationalspeedinMbpsandthedefaul

set port speedSecureStack B2 Configuration Guide 7-11set port speedUsethiscommandtosetthedefaultspeedofoneormoreports.Thissettingonlyt

xiv show port vlan ...

set port duplex7-12 Port ConfigurationExampleThisexampleshowshowtodisplaythedefaultduplexsettingforEtherne tport14inslot 3:B2(su)->s

Enabling / Disabling Jumbo Frame SupportSecureStack B2 Configuration Guide 7-13Enabling / Disabling Jumbo Frame SupportPurposeToreview,enable,andd

set port jumbo7-14 Port Configurationset port jumbo Usethiscommandtoenableordisablejumboframesupportononeormoreports.Syntaxset port jumb

Setting Auto-Negotiation and Advertised AbilitySecureStack B2 Configuration Guide 7-15Setting Auto-Negotiation and Advertised AbilityPurposeToreview,

set port negotiation7-16 Port ConfigurationExampleThisexampleshowshowtodisplayaut o‐negotiationstatusfor1‐GigabitEthernetport14inslot 3:

set port advertiseSecureStack B2 Configuration Guide 7-17ExampleThisexampleshowshowtodisplayadvertisementstatusforGigabitports13and14:B2

clear port advertise7-18 Port ConfigurationExampleThisexampleshowshowtoconfigureport1toadvertise1000BASE‐Tfullduplex:B2(su)->set port

Setting Flow ControlSecureStack B2 Configuration Guide 7-19Setting Flow ControlPurposeToreview,enableordisableportflowcontrol. Flowcontrolis

set flowcontrol7-20 Port ConfigurationDefaults None.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenableflowcontrol:B2(su)->set

Setting Port Link Traps and Link Flap DetectionSecureStack B2 Configuration Guide 7-21Setting Port Link Traps and Link Flap DetectionPurposeTodisable

xvset diffserv policy police action conform ...11-13set diffserv

set port trap7-22 Port ConfigurationDefaultsIfport‐stringisnotspecified,thetrapstatusfor allportswillbedisplayed.ModeSwitchcommand,read

show linkflapSecureStack B2 Configuration Guide 7-23ParametersDefaults•Ifnotspecified,informationaboutalllinkflapdetectionsettingswillbedi

show linkflap7-24 Port ConfigurationExamplesThisexampleshowshowtodisplaytheglobalstatusofthelinktrapdetectionfunction:B2(rw)->show li

set linkflap globalstateSecureStack B2 Configuration Guide 7-25set linkflap globalstateUsethiscommandtogloballyenable ordisablethelinkflapd

set linkflap interval7-26 Port ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenablethelinktrapmonitoringonallpor

clear linkflap actionSecureStack B2 Configuration Guide 7-27DefaultsNone.ModeSwitchmode,read‐write.ExampleThisexampleshowshowtosetthelinkfla

set linkflap downtime7-28 Port ConfigurationParametersDefaultsNone.ModeSwitchmode,read‐write.ExampleThisexampleshowshowtosetthelinkflapthre

clear linkflapSecureStack B2 Configuration Guide 7-29ParametersDefaultsIfport‐stringisnotspecified,allportsdisabledbyalinkflapviolationwi

Configuring Broadcast Suppression7-30 Port ConfigurationConfiguring Broadcast SuppressionPurposeToreviewandsetthebroadcastsuppressionthreshold

set port broadcastSecureStack B2 Configuration Guide 7-31set port broadcastUsethiscommandtosetthebroadcastsuppressionthreshold,inpacketsper

xvi show cos port-type ...12-35

clear port broadcast7-32 Port ConfigurationDefaultsNone.Mode Switchcommand,read‐write.ExampleThisexampleclearsthebroadcastthresholdlimitto14

Port MirroringSecureStack B2 Configuration Guide 7-33Port MirroringTheSecureStackB2deviceallowsyoutomirror(orredirect)thetrafficbeingswit

Port Mirroring7-34 Port Configuration5. EnterMIBoption4(createAndGo)andperformanSNMPSetoperation.6. (Optional)UsetheCLItoverifythepor

show port mirroringSecureStack B2 Configuration Guide 7-35show port mirroringUsethiscommandtodisplaythesourceandtargetportsformirroring,an

clear port mirroring7-36 Port ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageNotethatLAGportsandtheirunderlyingphysica

clear port mirroringSecureStack B2 Configuration Guide 7-37ExampleThisexampleshowshowtoclearportmirroringbetweensourceportfe.1.4andtarget

Link Aggregation Control Protocol (LACP)7-38 Port ConfigurationLink Aggregation Control Protocol (LACP)Usingmultiplelinkssimultaneouslytoincrease

Link Aggregation Control Protocol (LACP)SecureStack B2 Configuration Guide 7-39•Ameansofidentifyingthe setofcapabilitiesassociatedwitheachp

Link Aggregation Control Protocol (LACP)7-40 Port Configurationis,willblockredundantpaths).Forinformationaboutbuildingstaticaggregations, r

show lacpSecureStack B2 Configuration Guide 7-41show lacpUsethiscommandtodisplayinformationaboutoneormoreaggregatorports.Syntaxshow lacp [

xviishow logging default...15-4s

set lacp7-42 Port Configurationset lacpUsethiscommandtodisableorenabletheLinkAggregationControlProtocol(LACP)onthedevice.Syntaxset lacp

set lacp asyspriSecureStack B2 Configuration Guide 7-43set lacp asyspriUsethiscommandtosettheLACPsystempriority.Syntaxset lacp asyspri valueP

clear lacp7-44 Port ConfigurationUsageLACPwillusethisvaluetoformanoperkey.Onlyunderlyingphysicalportswithoperkeysmatchingthoseofth

clear lacp staticSecureStack B2 Configuration Guide 7-45DefaultsIfnotspecified,akeywillbeassignedaccordingtothespecifiedaggregator.Forex

set lacp singleportlag7-46 Port Configurationset lacp singleportlagUsethiscommandtoenableordisabletheformationofsingleportLAGs.Syntaxset

show port lacpSecureStack B2 Configuration Guide 7-47ExampleThisexampleshowshowtoresetthesingleportLAGfunctionbacktodisabled:B2(su)->

set port lacp7-48 Port ConfigurationPort Instance: fe.1.12 ActorPort: 1411 PartnerAdminPort: 1411 Actor

set port lacpSecureStack B2 Configuration Guide 7-49DefaultsAtleastoneparametermustbeenteredperport‐string.Ifenableordisablearenotspecif

clear port lacp7-50 Port ConfigurationModeSwitchcommand,read‐write.UsageLACPcommandsandparametersbeginningwithan“a”(suchasaadminkey)seta

clear port lacpSecureStack B2 Configuration Guide 7-51DefaultsNone.ModeSwitchcommand,read‐write.UsageIfyousetaporttoLACPpassiveusingthecom

xviii show nodealias config ...15-35

Configuring Protected Ports7-52 Port ConfigurationConfiguring Protected PortsTheProtectedPortfeatureisusedtopreventportsfromforwardingtraff

show port protectedSecureStack B2 Configuration Guide 7-53ExampleThisexampleshowshowtoassignportsfe.1.1 throughfe.1.3toprotectedportgroup

set port protected name7-54 Port ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearprotectedportsfe.1.1throughfe.

clear port protected nameSecureStack B2 Configuration Guide 7-55ExampleThisexampleshowshowtoshowthenameofprotectedportgroup1:B2(ro)->s

clear port protected name7-56 Port Configuration

SecureStack B2 Configuration Guide 8-18SNMP ConfigurationThischapterdescribestheSimpleNetworkManagementProtocol(SNMP)setofcommandsandhow

SNMP Configuration Summary8-2 SNMP Configuration•SNMPnetworkmanagementapplications,suchastheEnterasysNetSightapplication,whichcommunicatew

Reviewing SNMP StatisticsSecureStack B2 Configuration Guide 8-3Using SNMP Contexts to Access Specific MIBs Bydefault,whenoperatingfromtheswitch

show snmp engineid8-4 SNMP ConfigurationCommands show snmp engineidUsethiscommandtodisplaytheSNMPlocalengineID.ThisistheSNMPv3engine’s

show snmp countersSecureStack B2 Configuration Guide 8-5show snmp countersUsethiscommandtodisplaySNMPtrafficcountervalues.Syntaxshow snmp coun

xixset dhcp...

show snmp counters8-6 SNMP ConfigurationusmStatsUnknownEngineIDs = 0 usmStatsWrongDigests = 0 usmStatsDecryptionErrors = 0 Table 8‐15

show snmp countersSecureStack B2 Configuration Guide 8-7snmpOutBadValues Number of SNMP PDUs generated by the SNMP protocol entity with the value of t

Configuring SNMP Users, Groups, and Communities8-8 SNMP ConfigurationConfiguring SNMP Users, Groups, and CommunitiesPurposeToreviewandconfigureSNM

set snmp userSecureStack B2 Configuration Guide 8-9Ifuserisnotspecif ied,informationaboutallSNMPuserswillbedisplayed.Ifremoteisnotspec

clear snmp user8-10 SNMP ConfigurationParametersDefaultsIfremoteisnotspecified,theuserwillberegisteredforthelocalSNMPengine.Ifauthentic

show snmp groupSecureStack B2 Configuration Guide 8-11ExampleThisexampleshowshowtoremovetheSNMPusernamed“bill”:B2(su)->clear snmp user bi

set snmp group8-12 SNMP ConfigurationTable 8‐17providesanexplanationofthecommandoutput.set snmp groupUsethiscommandtocreateanSNMPgroup.

show snmp communitySecureStack B2 Configuration Guide 8-13ParametersDefaultsIf not specified, settings related to all security models will be cleared.

set snmp community8-14 SNMP Configurationset snmp communityUsethiscommandtoconfigureanSNMPcommunitygroup.Syntaxset snmp community community [s

Configuring SNMP Access RightsSecureStack B2 Configuration Guide 8-15DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodele

xx DHCP Snooping Commands ... 18

show snmp access8-16 SNMP ConfigurationDefaultsIfgroupnameisnotspecified,accessinformationforallSNMPgroupswillbedisplayed.Ifsecurity‐mod

set snmp accessSecureStack B2 Configuration Guide 8-17set snmp accessUsethiscommandtosetanSNMPaccessconfiguration.Syntaxset snmp access group

clear snmp access8-18 SNMP ConfigurationDefaultsIfsecuritylevelisnotspecified,noauthenticationwillbeapplied.Ifcontextisnotspecified,acc

Configuring SNMP MIB ViewsSecureStack B2 Configuration Guide 8-19ExampleThisexampleshowshowtoclearSNMPversion3accessforthe“mis‐group”via

show snmp context8-20 SNMP ConfigurationExampleThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation:B2(su)->show snmp view

set snmp viewSecureStack B2 Configuration Guide 8-21ModeSwitchcommand,read‐only.UsageAnSNMPcontextisacollectionofmanagementinformationthat

clear snmp view8-22 SNMP Configurationclear snmp viewUsethiscommandtodeleteanSNMPv3MIBview.Syntaxclear snmp view viewname subtreeParametersDef

show snmp targetparamsSecureStack B2 Configuration Guide 8-23ParametersDefaultsIftargetParamsisnotspecified,entriesassociatedwithalltargetpa

set snmp targetparams8-24 SNMP Configurationset snmp targetparamsUsethiscommandtosetSNMPtargetparameters,anamedsetofsecurity/authorization

Configuring SNMP Target AddressesSecureStack B2 Configuration Guide 8-25ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshow

xxiset dot1x...1

set snmp targetaddr8-26 SNMP ConfigurationIfnotspecified,entriesofallstoragetypeswillbedisplayedforatargetaddress.ModeSwitchcommand,re

set snmp targetaddrSecureStack B2 Configuration Guide 8-27ParametersDefaultsIfnotspecified,udpportwillbesetto162.Ifnotspecified,maskwillb

clear snmp targetaddr8-28 SNMP Configurationclear snmp targetaddrUsethiscommandtodeleteanSNMPtargetaddressentry.Syntaxclear snmp targetaddr t

show newaddrtrapSecureStack B2 Configuration Guide 8-29Commands show newaddrtrapUsethiscommandtodisplaytheglobalandport‐specificstatusofthe

set newaddrtrap8-30 SNMP Configurationge.1.1 disabledge.1.2 disabledge.1.3 disabledge.1.4 disabledge.1.5 disabledset newaddrtrapUsethi

set snmp notifySecureStack B2 Configuration Guide 8-31ParametersDefaultsIfanotifynameisnotspecified,allentrieswillbedisplayed.Ifvolatile,

clear snmp notify8-32 SNMP Configurationcommand’stagparametercanbeusedtobindeachentrytoatargetaddressusingthesetsnmptargetaddrcomma

show snmp notifyfilterSecureStack B2 Configuration Guide 8-33ExampleThisexampleshowshowtocleartheSNMPnotifyconfigurationfor“hello”:B2(su)-&

set snmp notifyfilter8-34 SNMP Configurationset snmp notifyfilterUsethiscommandtocreateanSNMPnotifyfilterconfiguration.Thisidentifieswhich

show snmp notifyprofileSecureStack B2 Configuration Guide 8-35ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtod

xxii Configuring MAC Locking ...

set snmp notifyprofile8-36 SNMP ConfigurationRow status = activeset snmp notifyprofileUsethiscommandtocreateanSNMPnotifyfilterprofileco

Creating a Basic SNMP Trap ConfigurationSecureStack B2 Configuration Guide 8-37ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodelete

Creating a Basic SNMP Trap Configuration8-38 SNMP ConfigurationExampleThisexampleshowshowto:• CreateanSNMPcommunitycalledmgmt.• Configurea

SecureStack B2 Configuration Guide 9-19Spanning Tree ConfigurationThischapterdescribestheSpanningTreeConfigurationsetofcommandsandhowtous

Spanning Tree Configuration Summary9-2 Spanning Tree Configurationblockingforalltrafficflowingbetweenthetwoswitches.Theblockinglinksareef

Configuring Spanning Tree Bridge ParametersSecureStack B2 Configuration Guide 9-3learningandthepriorityvectorisworsethanthatalreadyheldbyt

Configuring Spanning Tree Bridge Parameters9-4 Spanning Tree ConfigurationCommands For information about... Refer to page...show spantree stats 9-5se

show spantree statsSecureStack B2 Configuration Guide 9-5show spantree statsUsethiscommandtodisplaySpanningTreeinformationforoneormoreport

show spantree stats9-6 Spanning Tree ConfigurationExampleThisexampleshowshowtodisplaythedevice’sSpanningTreeconfiguration:B2(su)->show sp

set spantreeSecureStack B2 Configuration Guide 9-7set spantreeUsethiscommandtogloballyenable ordisabletheSpanningTreeprotocolontheswitch

xxiii10-1 Example of VLAN Propagation via GVRP... 10-21Tables1-1 De

set spantree version9-8 Spanning Tree ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaySpanningTreeversioninform

show spantree bpdu-forwardingSecureStack B2 Configuration Guide 9-9ParametersNone.DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshow

show spantree bridgeprioritymode9-10 Spanning Tree ConfigurationDefaultsBydefaultBPDUforwardingisdisabled.ModeSwitchcommand,read‐write.UsageThe

clear spantree bridgeprioritymodeSecureStack B2 Configuration Guide 9-11ParametersDefaultsNoneModeSwitchcommand,read‐write.UsageThemodeaffectsthe

show spantree mstilist9-12 Spanning Tree Configurationshow spantree mstilistUsethiscommandtodisplayalistofMultipleSpanningTree(MST)instanc

clear spantree mstiSecureStack B2 Configuration Guide 9-13clear spantree mstiUsethiscommandtodeleteoneormoreMultipleSpanningTreeinstances.S

set spantree mstmap9-14 Spanning Tree Configurationset spantree mstmapUsethiscommandtomaponeormorefilteringdatabaseIDs(FIDs)toaSID.Sinc

show spantree vlanlistSecureStack B2 Configuration Guide 9-15B2(su)->clear spantree mstmap 2show spantree vlanlistUsethiscommandtodisplaytheS

set spantree mstcfgid9-16 Spanning Tree ConfigurationMACaddress)havenotbeenchanged.Forinformationonusingthesetspantreemstcfgidcommandto

set spantree prioritySecureStack B2 Configuration Guide 9-17ExampleThisexampleshowshowtoresettheMSTconfigurationidentifierelementstodefaul

xxiv 19-3 show macauthentication Output Details ... 19-2219-4 s

set spantree hello9-18 Spanning Tree ConfigurationDefaultsIfsidisnotspecified,prioritywillberesetonSpanningTree0.ModeSwitchcommand,read‐

set spantree maxageSecureStack B2 Configuration Guide 9-19ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtogloballyresettheSpanning

set spantree fwddelay9-20 Spanning Tree ConfigurationParametersNone.DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtogloba

clear spantree fwddelaySecureStack B2 Configuration Guide 9-21clear spantree fwddelayUsethiscommandtoresettheSpanningTreeforwarddelaytothe

set spantree backuproot9-22 Spanning Tree Configurationset spantree backuprootUsethiscommandtoenableordisabletheSpanningTreebackuprootfunc

show spantree tctrapsuppressSecureStack B2 Configuration Guide 9-23ExampleThisexampleshowshowtoresetthebackuprootfunctiontodisabledonSID

clear spantree tctrapsuppress9-24 Spanning Tree ConfigurationUsageBydefault,RSTPnon‐edge(bridge)portsthattransitiontoforwardingorblockingc

show spantree spanguardSecureStack B2 Configuration Guide 9-25DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetthep

clear spantree spanguard9-26 Spanning Tree ConfigurationModeSwitchcommand,read‐write.UsageSpanGuardisdesignedtodisable,orlockoutan“edge”po

show spantree spanguardtimeoutSecureStack B2 Configuration Guide 9-27show spantree spanguardtimeoutUsethiscommandtodisplaytheSpanningTreeSpanG

SecureStack B2 Configuration Guide xxvAbout This GuideWelcometotheEnterasys®SecureStack™B2ConfigurationGuide.Thismanualexplainshowtoacces

clear spantree spanguardtimeout9-28 Spanning Tree Configurationclear spantree spanguardtimeoutUsethiscommandtoresettheSpanningTreeSpanGuardti

clear / set spantree spanguardlockSecureStack B2 Configuration Guide 9-29clear / set spantree spanguardlockUseeitherofthesecommandstounlockone

set spantree spanguardtrapenable9-30 Spanning Tree Configurationset spantree spanguardtrapenableUsethiscommandtoenableordisablethesendingofa

show spantree legacypathcostSecureStack B2 Configuration Guide 9-31show spantree legacypathcostUsethiscommandtodisplaythedefaultSpanningTreep

clear spantree legacypathcost9-32 Spanning Tree Configurationclear spantree legacypathcostUsethiscommandtosettheSpanningTreedefaultvaluefor

Configuring Spanning Tree Port ParametersSecureStack B2 Configuration Guide 9-33Configuring Spanning Tree Port ParametersPurposeTodisplayandsetSpa

clear spantree portadmin9-34 Spanning Tree ConfigurationExampleThisexampleshowshowtodisableSpanningTreeonfe.1.5:B2(rw)->set spantree porta

show spantree portpriSecureStack B2 Configuration Guide 9-35ExampleThisexampleshowshowtodisplayportadminstatusforfe.1.1:B2(ro)->show span

clear spantree portpri9-36 Spanning Tree ConfigurationParametersDefaultsIfsidisnotspecified,portprioritywillbesetforSpanningTree0.ModeSwi

show spantree adminpathcostSecureStack B2 Configuration Guide 9-37show spantree adminpathcostUsethiscommandtodisplaytheadminpathcostforapor

Related Documentsxxvi About This GuideChapter 7,PortConfiguration,describeshowtoreviewandconfigureconsoleportsettings,andhowtoenableor

clear spantree adminpathcost9-38 Spanning Tree ConfigurationExampleThisexampleshowshowtosettheadminpathcostto200forfe.3.2onSID1:B2(su)

set spantree adminedgeSecureStack B2 Configuration Guide 9-39ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheedgeportstat

clear spantree adminedge9-40 Spanning Tree ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetf

Configuring Spanning Tree Loop Protect ParametersSecureStack B2 Configuration Guide 9-41Configuring Spanning Tree Loop Protect ParametersPurposeTodis

set spantree lp9-42 Spanning Tree Configurationset spantree lpUsethiscommandtoenableordisabletheLoopProtectfeatureperportandoptionally,

clear spantree lpSecureStack B2 Configuration Guide 9-43DefaultsIfnoport‐stringisspecified,statusisdisplayedforallports.IfnoSIDisspecifi

clear spantree lplock9-44 Spanning Tree ConfigurationParametersDefaultsIfnoport‐stringisspecified,statusisdisplayedforallports.IfnoSIDis

set spantree lpcapablepartnerSecureStack B2 Configuration Guide 9-45set spantree lpcapablepartnerUsethiscommandtospecifyperportwhetherthelink

clear spantree lpcapablepartner9-46 Spanning Tree ConfigurationDefaultsIfnoport‐stringisspecified,LoopProtectcapabilityforlinkpartnersisdi

show spantree lpthresholdSecureStack B2 Configuration Guide 9-47DefaultsNone.Thedefaulteventthresholdis3.ModeSwitchcommand,read‐write.UsageThe

Conventions Used in This GuideSecureStack B2 Configuration Guide xxvii•EnterasysFirmwareFeatureGuides• SecureStackB2InstallationGuide(s)• Secure

set spantree lpwindow9-48 Spanning Tree ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresettheLoopProte

clear spantree lpwindowSecureStack B2 Configuration Guide 9-49ParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshow

show spantree lptrapenable9-50 Spanning Tree ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.UsageLoopProtecttrapsaresentwhenaLoopPr

set spantree disputedbpduthresholdSecureStack B2 Configuration Guide 9-51DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowto

show spantree disputedbpduthreshold9-52 Spanning Tree ConfigurationExampleThisexampleshowshowtosetthedisputedBPDUthresholdvalueto5:B2(rw)-

show spantree nonforwardingreasonSecureStack B2 Configuration Guide 9-53show spantree nonforwardingreasonUsethiscommandtodisplaythereasonforpl

show spantree nonforwardingreason9-54 Spanning Tree Configuration

SecureStack B2 Configuration Guide 10-110802.1Q VLAN ConfigurationThischapterdescribestheSecureStackB2system’scapabilitiestoimplement802.1Q

Viewing VLANs10-2 802.1Q VLAN ConfigurationIftheSecureStackB2deviceistobeconfiguredformultipleVLANs,itmaybedesirabletoconfigureaman

show vlanSecureStack B2 Configuration Guide 10-3Commandshow vlanUsethiscommandtodisplayallinformationrelatedtooneormoreVLANs.Syntaxshow vl

iNoticeEnterasysNetworksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho

Getting Helpxxviii About This GuideBeforecallingEnterasysNetworks,havethefollowinginformationready:•YourEnterasysNetworksservicecontractn

show vlan10-4 802.1Q VLAN ConfigurationTable 10-26 show vlan Output DetailsOutput Field What It Displays...VLAN VLAN ID.NAME Name assigned to the VLAN

Creating and Naming Static VLANsSecureStack B2 Configuration Guide 10-5Creating and Naming Static VLANsPurposeTocreateanewstaticVLAN,ortoenabl

set vlan name10-6 802.1Q VLAN Configurationset vlan nameUsethiscommandtosetorchangetheASCIInameforaneworexistingVLAN.Syntaxset vlan na

clear vlan nameSecureStack B2 Configuration Guide 10-7clear vlan nameUsethiscommandtoremovethenameofaVLANfromtheVLANlist.Syntaxclear vlan

Assigning Port VLAN IDs (PVIDs) and Ingress Filtering10-8 802.1Q VLAN ConfigurationAssigning Port VLAN IDs (PVIDs) and Ingress FilteringPurposeToassi

set port vlanSecureStack B2 Configuration Guide 10-9fe.2.5 is set to 1 fe.2.6 is set to 1 set port vlanUsethiscommandtoconfigurethePVID(portVL

show port ingress filter10-10 802.1Q VLAN ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoresetpo

set port ingress filterSecureStack B2 Configuration Guide 10-11set port ingress filterUsethiscommandtodiscardallframesreceivedwithaVLANIDt

set port discard10-12 802.1Q VLAN ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheframediscardmodeforfe.2.

Configuring the VLAN Egress ListSecureStack B2 Configuration Guide 10-13Configuring the VLAN Egress ListPurposeToassignorremoveportsontheegress

SecureStack B2 Configuration Guide 1-11IntroductionThischapterprovidesanoverviewoftheSecureStackB2’suniquefeaturesandfunctionality,anove

set vlan forbidden10-14 802.1Q VLAN ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowsyouhowtoshowVLANegressinformationfor

set vlan egressSecureStack B2 Configuration Guide 10-15set vlan egressUsethiscommandtoaddportstotheVLANegresslistforthedevice,ortoprev

show vlan dynamicegress10-16 802.1Q VLAN ConfigurationSyntaxclear vlan egress vlan-list port-string [forbidden]ParametersDefaultsIfforbiddenisnots

set vlan dynamicegressSecureStack B2 Configuration Guide 10-17ExampleThisexampleshowshowtodisplaythedynamicegressstatusforVLANs50‐55:B2(rw

Setting the Host VLAN10-18 802.1Q VLAN ConfigurationSetting the Host VLANPurposeToconfigureahostVLANthatonlyselectdevicesareallowedtoacces

clear host vlanSecureStack B2 Configuration Guide 10-19ParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageThehostVLANshouldbeasecureVLA

Enabling/Disabling GVRP (GARP VLAN Registration Protocol)10-20 802.1Q VLAN ConfigurationEnabling/Disabling GVRP (GARP VLAN Registration Protocol)About

Enabling/Disabling GVRP (GARP VLAN Registration Protocol)SecureStack B2 Configuration Guide 10-21Figure 10-1 Example of VLAN Propagation via GVRPPurp

show gvrp10-22 802.1Q VLAN Configurationshow gvrp UsethiscommandtodisplayGVRPconfigurationinformation.Syntaxshow gvrp [port-string]ParametersDe

set gvrpSecureStack B2 Configuration Guide 10-23ExampleThisexampleshowshowtodisplayGARPtimerinformationonports1through10inslot1:B2(su)

Factory Default Settings1-2 Introduction• RemotelyusingWebView™,EnterasysNetworks’embeddedwebserverapplication.TheInstallationGuideforyour

clear gvrp10-24 802.1Q VLAN ConfigurationModeSwitchcommand,read‐write.ExamplesThisexampleshowshowtoenableGVRPgloballyonthedevice:B2(su)-&g

set garp timerSecureStack B2 Configuration Guide 10-25DefaultsNone.ModeSwitchcommand,read‐write.UsageThesettingofthesetimersiscriticalandsho

set garp timer10-26 802.1Q VLAN Configuration

SecureStack B2 Configuration Guide 11-111Differentiated Services ConfigurationThischapterdescribestheDifferentiatedServices(Diffserv)setofcom

Globally Enabling or Disabling Diffserv11-2 Differentiated Services ConfigurationGlobally Enabling or Disabling DiffservPurpose Togloballyenableor

Creating Diffserv Classes and Matching ConditionsSecureStack B2 Configuration Guide 11-3Creating Diffserv Classes and Matching ConditionsPurposeTorev

show diffserv class11-4 Differentiated Services Configurationshow diffserv classUsethiscommandtodisplayinformationaboutDiffservclasses.Syntaxs

set diffserv class deleteSecureStack B2 Configuration Guide 11-5ExampleThisexampleshowshowtocreateaDiffservclasscalled“admin”:B2(rw)->se

set diffserv class match11-6 Differentiated Services ConfigurationParameterseveryclassname Matchesallpacketstoaspecificclass.dstmac|scrmaccl

set diffserv class matchSecureStack B2 Configuration Guide 11-7DefaultsNone.ModeSwitchcommand,read‐write.UsageAnypolicythatisappliedmustbecom

Factory Default SettingsSecureStack B2 Configuration Guide 1-3Link aggregation admin keySet to 32768 for all ports.Link aggregation flow regeneration

set diffserv class rename11-8 Differentiated Services Configuration– DestinationIPaddress(dstip)–VLANID(vlan)Youcannotcreateandaddaclassto

Configuring Diffserv Policies and Assigning ClassesSecureStack B2 Configuration Guide 11-9ExampleThisexampleshowshowtorenametheDiffserv“admin”

set diffserv policy create11-10 Differentiated Services ConfigurationExampleThisexampleshowshowtodisplayasummaryofDiffservpolicyinformation

set diffserv policy classSecureStack B2 Configuration Guide 11-11ModeSwitchcommand,read‐write.UsageInordertodeleteapolicyyoumustfirstremove

set diffserv policy police style simple11-12 Differentiated Services ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisex

set diffserv policy police action conformSecureStack B2 Configuration Guide 11-13set diffserv policy police action conformUsethiscommandtoconfigur

set diffserv policy rename11-14 Differentiated Services ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoset

show diffserv service infoSecureStack B2 Configuration Guide 11-15Commandsshow diffserv service info UsethiscommandtodisplayinformationaboutDif

set diffserv service11-16 Differentiated Services ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtod

DiffServ Configuration ExamplesSecureStack B2 Configuration Guide 11-17DiffServ Configuration Examples Typically,youwouldusetheDiffservcommands

Factory Default Settings1-4 IntroductionSNTP Disabled.Spanning Tree Globally enabled and enabled on all ports.Spanning Tree edge port administrative s

DiffServ Configuration Examples11-18 Differentiated Services Configuration

SecureStack B2 Configuration Guide 12-112Policy Classification ConfigurationThischapterdescribesthePolicyClassificationsetofcommandsandhowt

show policy profile12-2 Policy Classification ConfigurationCommandsshow policy profileUsethiscommandtodisplaypolicyprofileinformation.Syntaxsh

set policy profileSecureStack B2 Configuration Guide 12-3 :IPDest(13),IPFrag(14),UDPSrcPort(15), :UDPD

clear policy profile12-4 Policy Classification ConfigurationParametersDefaultsIfoptionalparametersarenotspecified,nonewillbeapplied.ModeSwitc

clear policy profileSecureStack B2 Configuration Guide 12-5DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodeletepolicy

Configuring Classification Rules12-6 Policy Classification ConfigurationConfiguring Classification Rules PurposeToreview,create,assign,andunassig

show policy ruleSecureStack B2 Configuration Guide 12-7DefaultsIfverboseisnotspecified,summaryinformationwillbedisplayed.ModeSwitchcommand,

show policy capability12-8 Policy Classification Configuration|admin|Port |fe.1.1 |16|fe.1.1 | A|NV| | 1|?||admin|Port

show policy capabilitySecureStack B2 Configuration Guide 12-9ModeSwitchcommand,read‐only.UsageUsethiscommandtodisplaydetailedpolicyclassifica

Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-5Using the Command Line InterfaceStarting a CLI SessionConnecting Using the Conso

set policy rule12-10 Policy Classification Configuration|Ether II packet type | | | X | X | X | X | | | ||LLC DSAP/SSAP/CTRL | |

set policy ruleSecureStack B2 Configuration Guide 12-11DefaultsNone.ModeSwitchcommand,read‐write.profile‐index Specifiesapolicyprofilenumberto

set policy rule12-12 Policy Classification ConfigurationUsageAnadminrulecanbeusedtomapincomingtaggedframestoapolicyrole(profile).There

clear policy ruleSecureStack B2 Configuration Guide 12-13ThisexampleshowshowtouseTable 12‐31toassignaruletopolicyprofile1thatwilldrop

clear policy all-rules12-14 Policy Classification ConfigurationDefaultsWhenapplicable,dataandmaskmustbespecifiedforindividualrulestobecle

Assigning Ports to Policy ProfilesSecureStack B2 Configuration Guide 12-15Assigning Ports to Policy ProfilesPurpose Toassignandunassignportstopo

clear policy port12-16 Policy Classification Configurationclear policy portUsethiscommandtoremoveapolicyprofilefromoneormoreports.Syntaxcl

Configuring Policy Class of Service (CoS)SecureStack B2 Configuration Guide 12-17Configuring Policy Class of Service (CoS)TheSecureStackB2supports

Configuring Policy Class of Service (CoS)12-18 Policy Classification ConfigurationB2(su)->show cos port-config Inbound Rate Limiting Port Configura

Configuring Policy Class of Service (CoS)SecureStack B2 Configuration Guide 12-192.0 2 irl none2.0 3 irl none...2.0

Using the Command Line Interface1-6 IntroductionRefertotheinstructionsincludedwiththeTelnetapplicationfor informationaboutestablishingaT

set cos state12-20 Policy Classification ConfigurationB2(su)->set cos state enableB2(su)->set cos port-resource flood-ctrl 1.0 broadcast rate 5B

show cos stateSecureStack B2 Configuration Guide 12-21ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoenableClassofService:B2(rw)-

set cos settings12-22 Policy Classification ConfigurationExampleThisexampleshowshowtocleartheCoSstatebacktoitsdefaultsettingofdisabled:

clear cos settingsSecureStack B2 Configuration Guide 12-23•IRLReferenceTheCoSIRLreferencefieldisoptional,asratelimitsarenotrequired.The

set cos port-config12-24 Policy Classification ConfigurationDefaultsIfnotspecified,allCoSentrieswillbedisplayed.ModeSwitchcommand,read‐only.

show cos port-configSecureStack B2 Configuration Guide 12-25ModeSwitchcommand,read‐write.UsageCoSportgroupsareidentifiedbygroupnumberandthe

clear cos port-config12-26 Policy Classification ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowsallinboundratelimitingportg

set cos port-resource irlSecureStack B2 Configuration Guide 12-27DefaultsNone.ModeSwitchcommand,read‐write.UsageThedefaultportgroup0.0cannotbe

set cos port-resource flood-ctrl12-28 Policy Classification ConfigurationUsageCoSportresourcesarewhereactualphysicalratelimitersareconfigure

show cos port-resourceSecureStack B2 Configuration Guide 12-29UsageCoSportresourcesarewhereactualphysicalratelimitersareconfigured.Thiscom

Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-7Figure 1-2 Sample CLI Defaults DescriptionCLI Command ModesEachcommanddescrip

clear cos port-resource irl12-30 Policy Classification Configuration----------- -------- ---- ---- ---------- --------------- ------2.0 1

clear cos port-resource flood-ctrlSecureStack B2 Configuration Guide 12-31clear cos port-resource flood-ctrlUsethiscommandtoclearfloodcontrolpo

show cos reference12-32 Policy Classification ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageTheCoSreferencetablemapsthe

clear cos referenceSecureStack B2 Configuration Guide 12-33ParametersDefaultsIfirlisnotspecified,allCoSreferenceinformationisdisplayed.Ifa

show cos unit12-34 Policy Classification ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocleartheCoSinbou

clear cos all-entriesSecureStack B2 Configuration Guide 12-35Port Type Type Unit Maximum Rate Minimum Rate Granularity--------- ---- ---- ----

show cos port-type12-36 Policy Classification ConfigurationDefaultsIfnoparametersarespecified,inboundratelimitingandfloodcontrolinformation

SecureStack B2 Configuration Guide 13-113Port Priority and Rate Limiting ConfigurationThischapterdescribesthePortPriority andRateLimitingset

show port priority13-2 Port Priority and Rate Limiting Configuration•Displaythecurrenttraffic classmapping‐to‐priorityofeachport.•Seteachpor

clear port prioritySecureStack B2 Configuration Guide 13-3Syntaxset port priority port-string priorityParametersDefaultsNone.ModeSwitchcommand,read‐

Using the Command Line Interface1-8 IntroductionDisplaying Scrolling ScreensIftheCLIscreenlengthhasbeensetusingthesetlengthcommandasdesc

Configuring Priority to Transmit Queue Mapping13-4 Port Priority and Rate Limiting ConfigurationExampleThisexampleshowshowtoresetfe.1.11tothe

set port priority-queueSecureStack B2 Configuration Guide 13-5ExampleThisexampleshowshowtodisplaypriorityqueueinformationforfe.1.1.Inthis

clear port priority-queue13-6 Port Priority and Rate Limiting Configurationclear port priority-queueUsethiscommandtoresetportpriorityqueuesett

set port txqSecureStack B2 Configuration Guide 13-7ParametersDefaultsIftheport‐stringisnotspecified,theQoSsettingofallphysicalportswillb

clear port txq13-8 Port Priority and Rate Limiting ConfigurationUsageQueuescanbesetforstrictpriority(SP)orweightedround‐robin(WRR).Ifset

clear port txqSecureStack B2 Configuration Guide 13-9ExampleThisexampleshowshowtocleartransmitqueuevaluesonfe.1.1:B2(su)->clear port txq

Configuring Port Traffic Rate Limiting13-10 Port Priority and Rate Limiting ConfigurationConfiguring Port Traffic Rate LimitingPurposeTolimittherat

show port ratelimitSecureStack B2 Configuration Guide 13-11ExampleThisexampleshowshowtodisplaythecurrentratelimitinginformationforfe.2.1:B

set port ratelimit13-12 Port Priority and Rate Limiting Configurationset port ratelimitUsethiscommandtoconfigurethetrafficratelimitingstatus

clear port ratelimitSecureStack B2 Configuration Guide 13-13clear port ratelimitUsethiscommandtoclearratelimitingparametersforoneormorepor

Using the Command Line InterfaceSecureStack B2 Configuration Guide 1-9Basic Line Editing CommandsTheCLIsupportsEMACs‐likelineeditingcommands.Ta

clear port ratelimit13-14 Port Priority and Rate Limiting Configuration

SecureStack B2 Configuration Guide 14-114IGMP ConfigurationThischapterdescribestheIGMPConfigurationsetofcommandsandhowtousethem.IGMP Ove

Configuring IGMP at Layer 214-2 IGMP Configurationmulticastswitch/routeritpassesthroughtoensurethattrafficisonlypassedtothehoststhatsu

set igmpsnooping adminmodeSecureStack B2 Configuration Guide 14-3thesystem,referto“setigmpsnoopingadminmode”onpage 14‐3.Forinformationonen

set igmpsnooping groupmembershipinterval14-4 IGMP ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageInorderforIGMPsnoopingt

set igmpsnooping maxresponseSecureStack B2 Configuration Guide 14-5ExampleThisexampleshowshowtosettheIGMPgroupmembershipintervalto250seco

set igmpsnooping add-static14-6 IGMP ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.UsageThistimerisforexpiringtheswitchfromthemult

set igmpsnooping remove-staticSecureStack B2 Configuration Guide 14-7set igmpsnooping remove-staticThiscommanddeletesastaticIGMPentryorremoves

show igmpsnooping mfdb14-8 IGMP ConfigurationExampleThisexampledisplaysthestaticIGMPportsforVLAN20.B2(su)->show igmpsnooping static 20----

clear igmpsnoopingSecureStack B2 Configuration Guide 14-9DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearallIGMPs

iiENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENTBEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT,CAREFULLY READ THIS LICENSE AGREEMENT.Thisdocum

Using the Command Line Interface1-10 Introduction

clear igmpsnooping14-10 IGMP Configuration

SecureStack B2 Configuration Guide 15-115Logging and Network ManagementThischapterdescribesswitch‐relatedloggingandnetworkmanagementcommandsa

show logging server15-2 Logging and Network Managementshow logging server UsethiscommandtodisplaytheSyslogconfigurationforaparticularserver

set logging serverSecureStack B2 Configuration Guide 15-3set logging serverUsethiscommandtoconfigureaSyslogserver.Syntaxset logging server inde

clear logging server15-4 Logging and Network ManagementExampleThiscommandshowshowtoenableaSyslogserverconfigurationforindex1,IPaddress1

set logging defaultSecureStack B2 Configuration Guide 15-5ExampleThiscommandshowshowtodisplaytheSyslogserverdefaultvalues.Foranexplanatio

clear logging default15-6 Logging and Network Managementclear logging defaultUsethiscommandtoresetloggingdefaultvalues.Syntax clear logging def

set logging applicationSecureStack B2 Configuration Guide 15-7ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaysystemloggingin

clear logging application15-8 Logging and Network ManagementDefaultsIflevelisnotspecified,nonewillbeapplied.ModeSwitchcommand,read‐write.Exa

show logging localSecureStack B2 Configuration Guide 15-9ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoreset

SecureStack B2 Configuration Guide 2-12Configuring Switches in a StackThischapterprovidesinformationaboutconfiguringSecureStackB2switchesina

clear logging local15-10 Logging and Network ManagementParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThiscommandshowshowtoenablel

show logging bufferSecureStack B2 Configuration Guide 15-11DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowsaportionoftheinfor

Monitoring Network Events and Status15-12 Logging and Network ManagementMonitoring Network Events and StatusPurposeTodisplayswitcheventsandcomman

show historySecureStack B2 Configuration Guide 15-13show historyUsethiscommandtodisplaythesize(inlines)ofthehistorybuffer.Syntaxshow histo

ping15-14 Logging and Network ManagementpingUsethiscommandtosendICMPecho‐requestpacketstoanothernodeonthe networkfromtheswitchCLI.Sy

disconnectSecureStack B2 Configuration Guide 15-15B2(su)->show users Session User Location -------- ----- --------------------------* telnet

show netstat15-16 Logging and Network ManagementExampleThefollowingexampleshowstheoutputofthiscommand.B2(su)->show netstatProt Local Addres

Managing Switch Network Addresses and RoutesSecureStack B2 Configuration Guide 15-17Managing Switch Network Addresses and RoutesPurposeTodisplayord

set arp15-18 Logging and Network ManagementExampleThisexampleshowshowtodisplaytheARPtab le:B2(su)->show arp

clear arpSecureStack B2 Configuration Guide 15-19clear arpUsethiscommandtodeleteaspecificentryorallentriesfromtheswitch’sARPtable.Synta

Installing a New Stackable System of Up to Eight Units2-2 Configuring Switches in a Stack•Theconsoleportonthemanagerswitchremainsactiveforou

show mac15-20 Logging and Network ManagementDefaultsIfnotspecified,waittimewillbesetto5seconds.Ifnotspecified,first‐ttlwillbesetto1s

show mac agetimeSecureStack B2 Configuration Guide 15-21DefaultsIfnoparametersarespecified,allMACaddressesforthedevicewillbedisplayed.Mod

set mac agetime15-22 Logging and Network ManagementDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaytheMACtimeou

set mac algorithmSecureStack B2 Configuration Guide 15-23ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtoresettheMACtimeoutperiodt

clear mac algorithm15-24 Logging and Network ManagementParametersNone.DefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowstheoutput

clear mac addressSecureStack B2 Configuration Guide 15-25ParametersDefaultsIfnoport‐stringisdefined,thecommandwillapplytoallports.ModeSwitc

show mac unreserved-flood15-26 Logging and Network Managementshow mac unreserved-floodUsethiscommandtodisplaythestateofmulticastfloodprotect

Configuring Simple Network Time Protocol (SNTP)SecureStack B2 Configuration Guide 15-27ExampleThisexampleenablesmulticastfloodprotection.B2(su)-&

show sntp15-28 Logging and Network ManagementDefaultsNone.ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaySNTPclientsettings:

set sntp clientSecureStack B2 Configuration Guide 15-29set sntp clientUsethiscommandtosettheSNTPoperationmode.Syntaxset sntp client {broadcast

Installing Previously-Configured Systems in a StackSecureStack B2 Configuration Guide 2-3Installing Previously-Configured Systems in a StackIfmember

set sntp server15-30 Logging and Network ManagementModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocleartheSNTPclient’soperational

set sntp poll-intervalSecureStack B2 Configuration Guide 15-31ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoremovetheserveratIP

set sntp poll-retry15-32 Logging and Network ManagementExampleThisexampleshowshowtocleartheSNTPpollinterval:B2(su)->clear sntp poll-interv

set sntp poll-timeoutSecureStack B2 Configuration Guide 15-33set sntp poll-timeoutUsethiscommandtosetthepolltimeout(inseconds)foraresponse

set timezone15-34 Logging and Network ManagementParametersDefaultsIfyouenteratimezonenamewithoutspecifyinganoffset inhoursandminutes,the

Configuring Node AliasesSecureStack B2 Configuration Guide 15-35Configuring Node AliasesThenodealiasfeatureenablesadministratorstodeterminethe

set nodealias15-36 Logging and Network Management----------- ----------- ------------ ------fe.2.1 16

clear nodealias configSecureStack B2 Configuration Guide 15-37Itʹsimportanttomakesurethatinter‐switchlinksare notlearningnode/aliasinforma

clear nodealias config15-38 Logging and Network Management

SecureStack B2 Configuration Guide 16-116RMON ConfigurationThischapterdescribesthecommandsusedtoconfigureRMONonaSecu reStackB2switch.RMON

Considerations About Using Clear Config in a Stack2-4 Configuring Switches in a StackTocreateavirtualswitchconfigurationinastackenvironment:1

Design Considerations16-2 RMON ConfigurationDesign ConsiderationsTheB2supportsRMONPacketCapture/FilterSamplingthroughboththeCLIandMIBs,bu

Statistics Group CommandsSecureStack B2 Configuration Guide 16-3•RMONPacketCapture/FilterSamplingandPortMirroringcannotbeenabledonthesame

show rmon stats16-4 RMON Configurationshow rmon statsUsethiscommandtodisplayRMONstatisticsmeasuredforoneormoreports.Syntaxshow rmon stats

clear rmon statsSecureStack B2 Configuration Guide 16-5DefaultsIfownerisnotspecified,monitorwillbeapplied.ModeSwitchcommand,read‐write.Examp

History Group Commands16-6 RMON ConfigurationHistory Group CommandsPurposeTodisplay,configure,andclearRMONhistorypropertiesandstatistics.Comm

set rmon historySecureStack B2 Configuration Guide 16-7Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 secondsDrop Events = 0

clear rmon history16-8 RMON ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtodeleteRMONhistoryen

Alarm Group CommandsSecureStack B2 Configuration Guide 16-9Alarm Group CommandsPurposeTodisplay,configure,andclearRMONalarmentriesandproperti

set rmon alarm properties16-10 RMON Configurationset rmon alarm propertiesUsethiscommandtoconfigureanRMONalarmentry,ortocreateanewalarm

set rmon alarm statusSecureStack B2 Configuration Guide 16-11Defaultsinterval‐3600secondstype‐absolutestartup‐risingrthresh‐0fthresh‐0reven

Issues Related to Mixed Type StacksSecureStack B2 Configuration Guide 2-5•Useclearconfigallwhenitisnecessarytoclearallconfigparameters,in

clear rmon alarm16-12 RMON ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageAnRMONalarmentrycanbecreatedusingthiscomma

Event Group CommandsSecureStack B2 Configuration Guide 16-13Event Group CommandsPurposeTodisplayandclearRMONevents,andtoconfigureRMONeventp

set rmon event properties16-14 RMON Configurationset rmon event propertiesUsethiscommandtoconfigureanRMONevententry,ortocreateanewevent

set rmon event statusSecureStack B2 Configuration Guide 16-15ExampleThisexampleshowshowtocreateandenableanRMONevententrycalled“STPtopolo

clear rmon event16-16 RMON ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearRMONevent1:B2(rw)->cle

Filter Group CommandsSecureStack B2 Configuration Guide 16-17Filter Group CommandsThepacketcaptureandfilterfunctionisdisabledbydefault.Only

set rmon channel16-18 RMON ConfigurationExample ThisexampleshowshowtodisplayRMONchannelinformationforfe.2.12:B2(rw)->show rmon channel fe

clear rmon channelSecureStack B2 Configuration Guide 16-19ExampleThisexampleshowshowtocreatean RMONchannelentry:B2(rw)->set rmon channel 5

set rmon filter16-20 RMON ConfigurationB2(rw)->show rmon filterIndex= 55508 Channel Index= 628 EntryStatus= valid--------------------------

clear rmon filterSecureStack B2 Configuration Guide 16-21ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateRMON filter1andapp

show switch2-6 Configuring Switches in a Stackshow switchUsethiscommandtodisplayinformationaboutoneormoreunitsinthestack.Syntaxshow swit

Packet Capture Commands16-22 RMON ConfigurationPacket Capture CommandsNotethatpacketcapturefilterissamplingonlyanddoesnotguaranteereceipt

set rmon captureSecureStack B2 Configuration Guide 16-23Owner monitorcaptureEntry= 1 Buff.control= 28062 ------------------------

clear rmon capture16-24 RMON ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtocreateRMON captureentry1to“listen”on

SecureStack B2 Configuration Guide 17-117DHCP Server ConfigurationThischapterdescribesthecommandstoconfiguretheIPv4DHCPserverfunctionality

DHCP Overview17-2 DHCP Server Configuration•NetBIOSWINSserver(s)andnodename• Bootfile•DHCPoptionsasdefinedbyRFC2132Configuring a DHCP Serv

Configuring General DHCP Server ParametersSecureStack B2 Configuration Guide 17-3Configuring General DHCP Server ParametersPurposeToconfigureDHCPse

set dhcp bootp17-4 DHCP Server ConfigurationExampleThisexampleenablesDHCPserverfunctionality.B2(rw)->set dhcp enableset dhcp bootpUsethiscom

show dhcp conflictSecureStack B2 Configuration Guide 17-5ExampleThisexampleenablesDHCPconflictlogging.B2(rw)->set dhcp conflict loggingshow d

set dhcp exclude17-6 DHCP Server ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExamplesThisexampledisablesDHCPconflictlogging.B2(rw)-

clear dhcp excludeSecureStack B2 Configuration Guide 17-7clear dhcp excludeUsethiscommandtocleartheconfiguredIPaddressesthattheDHCPserver

show switch switchtypeSecureStack B2 Configuration Guide 2-78 Stack Member B2G124-24 B2G124-24 OK 04.02.xxThisexample

clear dhcp ping17-8 DHCP Server Configurationclear dhcp pingUsethiscommandtoresetthenumberofpingpacketssentbytheDHCPserverback tothe

clear dhcp bindingSecureStack B2 Configuration Guide 17-9192.0.0.13 00:33:44:56:22:37 infinite Manual192.0.0.14

clear dhcp server statistics17-10 DHCP Server ConfigurationMessages Received----------

Configuring IP Address PoolsSecureStack B2 Configuration Guide 17-11Configuring IP Address PoolsManual Pool Configuration Considerations•Thesubnetof

set dhcp pool17-12 DHCP Server Configurationset dhcp poolUsethiscommandtocreateandassignanametoaDHCPserverpoolofaddresses.Upto16add

clear dhcp poolSecureStack B2 Configuration Guide 17-13clear dhcp poolUsethiscommandtodeleteaDHCPserverpoolofaddresses.Syntaxclear dhcp poo

clear dhcp pool network17-14 DHCP Server ConfigurationExamplesThisexampleconfigurestheIPsubnet172.20.28.0withaprefixlengthof24fortheaut

clear dhcp pool hardware-addressSecureStack B2 Configuration Guide 17-15DefaultsIfnotypeisspecified,Ethernetisassumed.ModeSwitchcommand,read‐

clear dhcp pool host17-16 DHCP Server ConfigurationDefaultsIfamaskorprefixisnotspecified, theclassA,B,orCnaturalmaskwillbeused.ModeS

clear dhcp pool client-identifierSecureStack B2 Configuration Guide 17-17ParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageTheclientidentif

show switch stack-ports2-8 Configuring Switches in a Stack Mgmt CodeSID Switch Model ID Pref V

set dhcp pool client-name17-18 DHCP Server Configurationset dhcp pool client-nameUsethiscommandtoassignanametoaDHCPclientwhencreatingana

set dhcp pool bootfileSecureStack B2 Configuration Guide 17-19set dhcp pool bootfileUsethiscommandtospecifyadefaultbootimagefortheDHCPclie

set dhcp pool next-server17-20 DHCP Server Configurationset dhcp pool next-serverUsethiscommandtospecifythefileserverfromwhichthedefaultbo

set dhcp pool leaseSecureStack B2 Configuration Guide 17-21set dhcp pool leaseUsethiscommandtospecifythedurationoftheleaseforanIPaddress

set dhcp pool default-router17-22 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexamplerestoresthedefaultleasedurationofo

set dhcp pool dns-serverSecureStack B2 Configuration Guide 17-23ModeSwitchcommand,read‐write.ExampleThisexampleremovesthedefaultrouterfromthe

set dhcp pool domain-name17-24 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleremovestheDNSserverlistfromtheaddres

set dhcp pool netbios-name-serverSecureStack B2 Configuration Guide 17-25ModeSwitchcommand,read‐write.ExampleThisexampleremovesthedomainnamefr

set dhcp pool netbios-node-type17-26 DHCP Server ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleremovestheNetBIOSnameserverlist

set dhcp pool optionSecureStack B2 Configuration Guide 17-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleremovestheNetBIOSnodet

set switchSecureStack B2 Configuration Guide 2-9set switch UsethiscommandtoassignaswitchID,tosetaswitch’spriorityforbecomingthemanagem

clear dhcp pool option17-28 DHCP Server Configurationclear dhcp pool optionUsethiscommandtoremoveaDHCPoptionfromthe addresspoolbeingconfi

show dhcp pool configurationSecureStack B2 Configuration Guide 17-29Network 192.0.0.0 255.255.255.0 Lease Time

show dhcp pool configuration17-30 DHCP Server Configuration

SecureStack B2 Configuration Guide 18-118DHCP Snooping andDynamic ARP InspectionThischapterdescribestwosecurityfeatures:•DHCPsnooping,whichmon

DHCP Snooping Overview18-2 DHCP Snooping and Dynamic ARP InspectionthehardwareforwardsclientmessagesandcopiesservermessagestotheCPUsoDHCP

DHCP Snooping OverviewSecureStack B2 Configuration Guide 18-3switchisrebooting,whentheswitchreceivesaDHCPDISCOVERYorREQUESTmessage,thecl

DHCP Snooping Commands18-4 DHCP Snooping and Dynamic ARP InspectionConfiguration NotesDHCP Server•Whentheswitchisoperatinginswitchmode,thenth

set dhcpsnoopingSecureStack B2 Configuration Guide 18-5set dhcpsnoopingUsethiscommandtoenableordisableDHCPsnoopingglobally.Syntaxset dhcpsnoo

set dhcpsnooping database write-delay18-6 DHCP Snooping and Dynamic ARP InspectionUsageBydefault,DHCPsnoopingisdisabledgloballyandonallVLANs

set dhcpsnooping bindingSecureStack B2 Configuration Guide 18-7DefaultsBydefault,portsareuntrusted.ModeSwitchcommand,read‐write.UsageInorderfo

iiiMoldova,Mongolia,NorthKorea,thePeople’sRepublicofChina,Russia,Tajikistan,Turkmenistan,Ukraine,Uzbekistan,Vietnam,orsuchothercount

set switch description2-10 Configuring Switches in a StackModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoreplicatethemanagementima

set dhcpsnooping verify18-8 DHCP Snooping and Dynamic ARP InspectionUsageWhenenabledgloballyandonVLANs,DHCPsnoopingbuildsitsbindingsdatabas

set dhcpsnooping log-invalidSecureStack B2 Configuration Guide 18-9set dhcpsnooping log-invalidUsethiscommandtoenableordisableloggingofinvali

set dhcpsnooping limit18-10 DHCP Snooping and Dynamic ARP Inspectionset dhcpsnooping limitUsethiscommandtoconfigureratelimitingparametersfori

show dhcpsnoopingSecureStack B2 Configuration Guide 18-11show dhcpsnoopingUsethiscommandtodisplayDHCPsnoopingconfigurationparameters.Syntaxsho

show dhcpsnooping port18-12 DHCP Snooping and Dynamic ARP InspectionDefaultsNone.ModeSwitchcommand,read‐write.UsageThiscommanddisplayswherethed

show dhcpsnooping bindingSecureStack B2 Configuration Guide 18-13show dhcpsnooping bindingUsethiscommandtodisplaythecontentsoftheDHCPsnoopin

clear dhcpsnooping binding18-14 DHCP Snooping and Dynamic ARP InspectionModeSwitchcommand,read‐write.UsageTheDHCPsnoopingapplicationprocessesin

clear dhcpsnooping statisticsSecureStack B2 Configuration Guide 18-15B2(su)->clear dhcpsnooping binding port ge.1.2clear dhcpsnooping statisticsUse

clear dhcpsnooping limit18-16 DHCP Snooping and Dynamic ARP Inspectionclear dhcpsnooping limitUsethiscommandtoresettheratelimitvaluestothed

Dynamic ARP Inspection OverviewSecureStack B2 Configuration Guide 18-17Static MappingsStaticmappingsareusefulwhenhostsconfigurestaticIPaddres

set switch memberSecureStack B2 Configuration Guide 2-11ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtomovemanagementfunctionality

Dynamic ARP Inspection Overview18-18 DHCP Snooping and Dynamic ARP InspectionEligible InterfacesDynamicARPinspectionisenabledperVLAN,effectivel

Dynamic ARP Inspection OverviewSecureStack B2 Configuration Guide 18-19Example Configuration ThefollowingexampleconfiguresDHCPsnoopinganddynami

Dynamic ARP Inspection Commands18-20 DHCP Snooping and Dynamic ARP Inspectionset vlan egress 10 ge.1.2 untaggedset vlan egress 192 ge.1.1 untaggedDHCP

set arpinspection trustSecureStack B2 Configuration Guide 18-21ParametersDefaultsLoggingisdisabledbydefault.ModeSwitchcommand,read‐write.UsageTh

set arpinspection validate18-22 DHCP Snooping and Dynamic ARP InspectionUsageIndividualinterfacesareconfiguredas trustedoruntrusted.Thetrust

set arpinspection limitSecureStack B2 Configuration Guide 18-23ExampleThisexampleaddstheoptionalverificationthatsenderMACaddressesarethesa

set arpinspection filter18-24 DHCP Snooping and Dynamic ARP Inspectionset arpinspection filterUsethiscommandtocreateanARPACLandthentoassign

show arpinspection portsSecureStack B2 Configuration Guide 18-25ParametersDefaultsIfaspecificACLisnotspecified,informationaboutallconfigured

show arpinspection vlan18-26 DHCP Snooping and Dynamic ARP Inspectionshow arpinspection vlanUsethiscommandtodisplaytheARPconfigurationofoneo

clear arpinspection validateSecureStack B2 Configuration Guide 18-27ExamplesThisexampleshowswhatisdisplayedwhennoVLANsarespecified.B2(su)-&g

clear switch member2-12 Configuring Switches in a StackDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoremovetheswitch

clear arpinspection vlan18-28 DHCP Snooping and Dynamic ARP Inspectionclear arpinspection vlanUsethiscommandtodisabledynamicARPinspectiononon

clear arpinspection filterSecureStack B2 Configuration Guide 18-29B2(su)->clear arpinspection vlan 5 loggingB2(su)->show arpinspection vlan 5Sou

clear arpinspection limit18-30 DHCP Snooping and Dynamic ARP InspectionExamplesThisexampleremovesapermitrulefromtheARPACLnamedstaticARP.B2(

clear arpinspection statisticsSecureStack B2 Configuration Guide 18-31clear arpinspection statisticsUsethiscommandtoclearalldynamicARPinspecti

clear arpinspection statistics18-32 DHCP Snooping and Dynamic ARP Inspection

SecureStack B2 Configuration Guide 19-119Authentication and AuthorizationConfigurationThischapterdescribestheauthenticationandauthorizationcomm

Overview of Authentication and Authorization Methods19-2 Authentication and Authorization Configuration• 802.1XPortBasedNetworkAccessControlusin

Configuring RADIUSSecureStack B2 Configuration Guide 19-3EachusercanbeconfiguredintheRADIUSserverdatabasewithaRADIUSFilter‐IDattributet

show radius19-4 Authentication and Authorization ConfigurationCommandsshow radiusUsethiscommandtodisplaythecurrentRADIUSclient/serverconfigur

set radiusSecureStack B2 Configuration Guide 19-5set radiusUsethiscommandtoenable,disable,orconfigureRADIUSauthentication.Syntaxset radius {e

SecureStack B2 Configuration Guide 3-13Basic ConfigurationAtstartup,theSecureStackB2switchisconfiguredwithmanydefaultsandstandardfeatures

set radius19-6 Authentication and Authorization ConfigurationDefaultsIfsecret‐valueisnotspecified,nonewillbeapplied.Ifrealmisnotspecified,

clear radiusSecureStack B2 Configuration Guide 19-7Thisexampleshowshowtoforceanymanagement‐accesstotheswitch(Telnet,web,SSH)toauthentic

set radius accounting19-8 Authentication and Authorization ConfigurationParametersModeSwitchcommand,read‐only.DefaultsIfnoparametersarespecified

clear radius accountingSecureStack B2 Configuration Guide 19-9ModeSwitchcommand,read‐write.DefaultsNone.ExamplesThisexampleshowshowtoenablethe

clear radius accounting19-10 Authentication and Authorization ConfigurationDefaultsNone.ExampleThisexampleshowshowtoresettheRADIUSaccountingt

Configuring 802.1X AuthenticationSecureStack B2 Configuration Guide 19-11Configuring 802.1X AuthenticationPurposeToreviewandconfigure802.1Xauthen

show dot1x19-12 Authentication and Authorization ConfigurationIfport‐stringisnotspecified,informationforallportswillbedisplayed.ModeSwitch

show dot1x auth-configSecureStack B2 Configuration Guide 19-13show dot1x auth-configUsethiscommandtodisplay802.1Xauthenticationconfigurationse

set dot1x19-14 Authentication and Authorization ConfigurationPort : 1 Auth-Config PAE state: Initialize Backend auth st

set dot1x auth-configSecureStack B2 Configuration Guide 19-15set dot1x auth-configUsethiscommandtoconfigure802.1Xauthentication.Syntaxset dot1x

Setting User Accounts and Passwords3-2 Basic ConfigurationSetting User Accounts and PasswordsPurposeTochangetheswitch’sdefaultuserloginandpass

clear dot1x auth-config19-16 Authentication and Authorization ConfigurationExamplesThisexampleshowshowtoenablereauthenticationcontrolonports

show eapolSecureStack B2 Configuration Guide 19-17Thisexampleshowshowtoresetthe802.1Xquietperiodto60secondsonportsfe.1.1‐3:B2(su)->c

show eapol19-18 Authentication and Authorization ConfigurationTable 19-2 show eapol Output DetailsOutput Field What It Displays...Port Port designatio

set eapolSecureStack B2 Configuration Guide 19-19set eapolUsethiscommandtoenableordisableEAPOLport‐baseduserauthenticationwiththe RADIUS

clear eapol19-20 Authentication and Authorization ConfigurationParametersDefaultsIfauth‐modeisnotspecified,allEAPOLsettingswillbecleared.If

Configuring MAC AuthenticationSecureStack B2 Configuration Guide 19-21Configuring MAC AuthenticationPurposeToreview,disable,enableandconfigureMA

show macauthentication19-22 Authentication and Authorization ConfigurationParametersDefaultsIfport‐stringisnotspecified,MACauthenticationinform

show macauthentication sessionSecureStack B2 Configuration Guide 19-23show macauthentication sessionUsethiscommandtodisplaytheactiveMACauthent

set macauthentication19-24 Authentication and Authorization Configurationset macauthenticationUsethiscommandtogloballyenable ordisableMACauth

clear macauthentication passwordSecureStack B2 Configuration Guide 19-25ExampleThisexampleshowshowtosettheMACauthenticationpasswordto“macau

show system loginSecureStack B2 Configuration Guide 3-3show system loginUsethiscommandtodisplayuserloginaccountinformation.Syntaxshow system l

set macauthentication portinitialize19-26 Authentication and Authorization ConfigurationUsageEnablingport(s)forMACauthenticationrequiresglobally

clear macauthentication portquietperiodSecureStack B2 Configuration Guide 19-27DefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamplesetspo

set macauthentication reauthentication19-28 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.DefaultsNone.ExampleThisexam

set macauthentication macreauthenticateSecureStack B2 Configuration Guide 19-29ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexamp

clear macauthentication reauthperiod19-30 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.UsageCha

set macauthentication significant-bitsSecureStack B2 Configuration Guide 19-31set macauthentication significant-bitsUsethiscommandtosetthenumber

clear macauthentication significant-bits19-32 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleresets

Configuring Multiple Authentication MethodsSecureStack B2 Configuration Guide 19-33Configuring Multiple Authentication MethodsAbout Multiple Authentic

show multiauth19-34 Authentication and Authorization Configurationshow multiauthUsethiscommandtodisplaymultipleauthenticationsystemconfigurati

set multiauth modeSecureStack B2 Configuration Guide 19-35set multiauth modeUsethiscommandtosetthesystemauthenticationmodetoallowmultiplea

set system login3-4 Basic Configurationset system loginUsethiscommandtocreateanewuserloginaccount,ortodisableorenableanexistingaccoun

set multiauth precedence19-36 Authentication and Authorization ConfigurationExampleThisexampleshowshowtoclearthesystemauthenticationmode:B2(r

show multiauth portSecureStack B2 Configuration Guide 19-37ExampleThisexampleshowshowtoclearthemultipleauthenticat ionprecedence:B2(rw)->c

clear multiauth port19-38 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExamplesThisexamplesho

show multiauth stationSecureStack B2 Configuration Guide 19-39ModeSwitchcommand,read‐write.ExamplesThisexampleshowshowtocleartheportmultiple

show multiauth idle-timeout19-40 Authentication and Authorization ConfigurationParametersDefaultsIfnooptionsarespecified,multipleauthentication

set multiauth idle-timeoutSecureStack B2 Configuration Guide 19-41ExampleThisexampleshowshowtodisplaytimeoutvaluesforanidlesessionforall

clear multiauth idle-timeout19-42 Authentication and Authorization Configurationclear multiauth idle-timeoutUsethiscommandtoresetthemaximumnumb

set multiauth session-timeoutSecureStack B2 Configuration Guide 19-43ExampleThisexampledisplaysthesessiontimeoutvaluesforallauthenticationme

clear multiauth session-timeout19-44 Authentication and Authorization Configurationclear multiauth session-timeoutUsethiscommandtoresetthemaximu

Configuring VLAN Authorization (RFC 3580)SecureStack B2 Configuration Guide 19-45Configuring VLAN Authorization (RFC 3580)PurposeRFC3580TunnelAttri

set passwordSecureStack B2 Configuration Guide 3-5ParametersDefaultsNone.ModeSwitchcommand,superuser.ExampleThisexampleshowshowtoremovethe“n

set policy maptable response19-46 Authentication and Authorization Configurationmultiauthportcommand(page19‐37)tosetthenumberofRFC3580user

set vlanauthorizationSecureStack B2 Configuration Guide 19-47Whenausersuccessfullyauthenticatestothenetwork,theRADIUSserverreturnsanAcces

set vlanauthorization egress19-48 Authentication and Authorization Configurationset vlanauthorization egressControlsthemodificationofthecurrentV

show vlanauthorizationSecureStack B2 Configuration Guide 19-49ModeSwitchcommand,read‐write.ExampleThisexampleshowhowtoclearVLANauthorization

Configuring MAC Locking19-50 Authentication and Authorization ConfigurationConfiguring MAC LockingThisfeaturelocksaMACaddresstooneormoreport

show maclockSecureStack B2 Configuration Guide 19-51show maclockUsethiscommandtodisplaythestatusofMAClockingononeormoreports.Syntaxshow

show maclock stations19-52 Authentication and Authorization Configurationshow maclock stationsUsethiscommandtodisplayMAClockinginformationabou

set maclock enableSecureStack B2 Configuration Guide 19-53ExampleThisexampleshowshowtodisplayMAClockinginformationfortheendstationsconnec

set maclock disable19-54 Authentication and Authorization ConfigurationMAClockingisdisabledbydefaultatdevicestartup.Configuringoneormorep

clear maclockSecureStack B2 Configuration Guide 19-55DefaultsNone.ModeSwitchcommand,read‐write.UsageConfiguringaportforMAClockingrequiresglob

set system password length3-6 Basic ConfigurationExamplesThisexampleshowshowasuper‐userwouldchangetheRead‐Writepasswordfromthesystemdefa

set maclock static19-56 Authentication and Authorization ConfigurationUsageTheMACaddressthatisclearedwillnolongerbeabletocommunicateonth

set maclock firstarrivalSecureStack B2 Configuration Guide 19-57ParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowto

clear maclock firstarrival19-58 Authentication and Authorization ConfigurationExampleThisexampleshowshowtorestrictMAClockingto6MACaddresses

clear maclock agefirstarrivalSecureStack B2 Configuration Guide 19-59ModeSwitchmode,read‐write.ExampleThisexampleenablesfirstarrivalagingonpo

set maclock trap19-60 Authentication and Authorization ConfigurationModeSwitchcommand,read‐write.UsageIftherearemorefirstarrivalMACsthanthe

Configuring Port Web Authentication (PWA)SecureStack B2 Configuration Guide 19-61Configuring Port Web Authentication (PWA)About PWAPWAprovidesaway

show pwa19-62 Authentication and Authorization Configurationshow pwaUsethiscommandtodisplayportwebauthenticationinformationforoneormorepo

set pwaSecureStack B2 Configuration Guide 19-63set pwaUsethiscommandtoenableordisableportwebauthenticati on.Syntaxset pwa {enable | disable}P

show pwa banner19-64 Authentication and Authorization ConfigurationExampleThisexampleshowshowtoenableportwebauthentication:B2(su)->set pwa

clear pwa bannerSecureStack B2 Configuration Guide 19-65clear pwa bannerUsethiscommandtoresetthePWAloginbanner toablankstring.Syntaxclear

set system password historySecureStack B2 Configuration Guide 3-7ParametersDefaults None.ModeSwitchcommand,superuser.ExampleThisexampleshowshow

set pwa ipaddress19-66 Authentication and Authorization Configurationset pwa ipaddressUsethiscommandtosetthePWAIPaddress.ThisistheIPaddre

set pwa guestnameSecureStack B2 Configuration Guide 19-67set pwa guestnameUsethiscommandtosetaguestusernameforPWAnetworking.PWAwilluset

set pwa guestpassword19-68 Authentication and Authorization Configurationset pwa guestpasswordUsethiscommandtosettheguestuserpasswordforPWA

set pwa initializeSecureStack B2 Configuration Guide 19-69UsagePWAwilluseaguestpasswordandguestusernametograntnetworkaccesswithdefault

set pwa maxrequest19-70 Authentication and Authorization ConfigurationDefaultsIfport‐stringisnotspecified,quietperiodwillbesetforallports.

show pwa sessionSecureStack B2 Configuration Guide 19-71ParametersDefaultsIfport‐stringisnotspecified,PWAwillenabledonallports.ModeSwitchco

set pwa enhancedmode19-72 Authentication and Authorization Configurationset pwa enhancedmodeThiscommandenablesPWAURLredirection.Theswitchinter

Configuring Secure Shell (SSH)SecureStack B2 Configuration Guide 19-73Configuring Secure Shell (SSH)PurposeToreview,enable,disable,andconfiguret

set ssh hostkey19-74 Authentication and Authorization ConfigurationParametersDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowsho

Index -1IndexNumerics802.1D 9-1802.1p 12-17, 13-1802.1Q 10-1802.1s 9-1802.1w 9-1802.1x 19-5, 19-19AAdvertised Ability 7-15Aliasnode 15-35ARPdynamic in

iv13. SEVERABILITY. IntheeventanyprovisionofthisAgreementisfoundtobeinvalid,illegalorunenforceable,thevalidity,legalityandenforcea

set system lockout3-8 Basic ConfigurationParametersNone.DefaultsNone.ModeSwitchcommand,superuser.ExampleThisexampleshowshowtodisplayuserlock

Index - 2 monitoring switch events and status 15-12Node Alias 15-35NVRAMclearing 3-49PPasswordaging 3-6history 3-6, 3-7set new 3-5setting the login 3

Setting Basic Switch PropertiesSecureStack B2 Configuration Guide 3-9UsageOnceauseraccountislockedout,itcanonlybere‐enabledbyasuperuser

show ip address3-10 Basic Configurationshow ip addressUsethiscommandtodisplaythesystemIPaddressandsubnetmask.Syntaxshow ip addressParameter

set ip addressSecureStack B2 Configuration Guide 3-11set ip addressUsethiscommandtosetthesystemIPaddress,subnetmaskanddefaultgateway.Synt

show ip protocol3-12 Basic ConfigurationModeSwitchcommand,read‐write.ExampleThisexampleshowshowtoclearthesystemIPaddress:B2(rw)->clear i

show systemSecureStack B2 Configuration Guide 3-13ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosetthemethodusedtoacquireanet

show system hardware3-14 Basic ConfigurationThefollowingtableprovidesanexplanationofthecommandoutput.show system hardwareUsethiscommandto

show system utilizationSecureStack B2 Configuration Guide 3-15ModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplaythesystem’shard

show system enhancedbuffermode3-16 Basic ConfigurationType Description Size(Kb) Available (Kb)---------------------------------

set system temperatureSecureStack B2 Configuration Guide 3-17switches..Executingthiscommandwillresettheswitch,sothesystempromptsyoutocon

vContentsAbout This GuideUsing This Guide ...

clear system temperature3-18 Basic ConfigurationUsageOntheplatformsthatsupportthisfeature,temperaturesensorsarelocatedinseveraldifferent

show timeSecureStack B2 Configuration Guide 3-19show timeUsethiscommandtodisplaythecurrenttimeofdayinthesystemclock.Syntaxshow timeParame

show summertime3-20 Basic Configurationshow summertimeUsethiscommandtodisplaydaylightsavingstimesettings.Syntaxshow summertimeParametersNone.D

set summertime dateSecureStack B2 Configuration Guide 3-21set summertime dateUsethiscommandtoconfigurespecificdatestostartandstopdaylights

clear summertime3-22 Basic ConfigurationParametersDefaultsIfanoffsetisnotspecified,nonewillbeapplied.ModeSwitchcommand,read‐write.ExampleTh

set promptSecureStack B2 Configuration Guide 3-23set promptUsethiscommandtomodifythecommandprompt.Syntaxset prompt prompt_stringParametersDefau

set banner motd3-24 Basic Configurationset banner motdUsethiscommandtosetthebannermessageofthedaydisplayedatsessionlogin.Syntaxset banne

show versionSecureStack B2 Configuration Guide 3-25ExampleThisexampleshowshowtoclearthemessageofthedaybannertoablankstring:B2(rw)->c

set system name3-26 Basic Configurationset system nameUsethiscommandtoconfigureanameforthesystem.Syntaxset system name [string]ParametersDefa

set system contactSecureStack B2 Configuration Guide 3-27set system contactUsethiscommandtoidentifyacontactpersonforthesystem.Syntaxset syst

vi set system password history ...3-7show

set length3-28 Basic ConfigurationExampleThisexampleshowshowtosettheterminalcolumnsto50:B2(su)->set width 50set lengthUsethiscommandto

set logoutSecureStack B2 Configuration Guide 3-29ExampleThisexampleshowshowtodisplaytheCLIlogoutsetting:B2(su)->show logout Logou

set console baud3-30 Basic ConfigurationModeSwitchcommand,read‐only.ExampleThisexampleshowshowtodisplayallconsolesettings:B2(su)->show co

Downloading a Firmware ImageSecureStack B2 Configuration Guide 3-31–TeraTermProVersion2.3Anyotherterminalapplicationsmayworkbutarenotexpl

Downloading a Firmware Image3-32 Basic Configuration3. Type2.Thefollowingbaudrateselectionscreendisplays:1 - 12002 - 24003 - 48004 - 96005 - 1

Reviewing and Selecting a Boot Firmware ImageSecureStack B2 Configuration Guide 3-33Reverting to a Previous ImageIntheeventthatyouneedtodowngra

show boot system3-34 Basic Configurationshow boot systemUsethiscommandtodisplaythefirmwareimagetheswitchloadsatstartup.Syntaxshow boot sys

Starting and Configuring TelnetSecureStack B2 Configuration Guide 3-35ExampleThisexampleshowshowtosetthebootfirmwareimagefileandresetthe

show telnet3-36 Basic Configurationshow telnetUsethiscommandtodisplaythestatusofTelnetontheswitch.Syntaxshow telnetParametersNone.DefaultsN

telnetSecureStack B2 Configuration Guide 3-37telnetUsethiscommandtostartaTelnetconnectiontoaremotehost.TheSecureStackB2switchallowsa

viiPurpose ...

show snmp persistmode3-38 Basic ConfigurationPurposeTosetandviewthepersistencemodefor CLIconfigurationcommands,manuallysavetherunningco

set snmp persistmodeSecureStack B2 Configuration Guide 3-39saved.Inordertomakeconfigurationchangespersistentwhenthemodeismanual,thesave

dir3-40 Basic ConfigurationDefaultsNone.ModeSwitchcommand,read‐write.ExampleThisexampleshowshowtosavetherunningconfiguration:B2(su)->save

show fileSecureStack B2 Configuration Guide 3-41base_may 22629base_apr 22629base_july

configure3-42 Basic ConfigurationParametersDefaultsBydefault,showconfigwilldisplayallnon‐defaultconfigurationinformationforallfacilities.M

copySecureStack B2 Configuration Guide 3-43ParametersDefaultsIfappendisnotspecified,thecurrentrunningconfigurationwillbereplacedwiththec

delete3-44 Basic Configurationdelete UsethiscommandtoremoveanimageoraCLIconfig urationfilefromtheswitch.Syntaxdelete filenameParametersD

set tftp timeoutSecureStack B2 Configuration Guide 3-45ExampleThisexampleshowstheoutputofthiscommand.B2(ro)->show tftp settings TFTP packet

set tftp retry3-46 Basic ConfigurationExampleThisexampleshowshowtoclearthetimeoutvaluetothedefaultof2seconds.B2(rw)-> clear tftp time

Clearing and Closing the CLISecureStack B2 Configuration Guide 3-47Clearing and Closing the CLIPurposeTocleartheCLIscreenortocloseyourCLIses