Benutzerhandbuch für 3com 3CRUS2475

Inhaltsverzeichnis

• 3Com® Unified Gigabit Wireless PoE Switch 24 Command Reference Guide

  1
• Contents

  3
• Using the CLI

  19
  • Overview

    19
    • CLI Command Modes

      19
    • Introduction

      19
    • User EXEC Mode

      20
    • Privileged EXEC

      20
      • 1 At the prompt enter the enable command and press <Enter>. A password prompt is displayed.

        20
        • 2 Enter the password and press <Enter>. The password is displayed as *. The Privileged EXEC mode prompt is displayed. The Privileged EXEC mode prompt consists of the device host name followed by #.

          20
        • 3 To return from the Privileged EXEC mode to the User EXEC mode, use the disable command.

          20
        • 4 The exit command is used to return from any mode to the previous mode except when returning to the User EXEC mode from the Pri...

          20
    • Global Configuration Mode

      21
      • 1 At the Privileged EXEC mode prompt, enter the configure command and press <Enter>. The Global Configuration mode prompt is displayed. The Global Configuration mode prompt consists of the device host name followed by (config) and #.

        21
        • 2 To return from the Global Configuration mode to the Privileged EXEC mode, the user can use one of the following commands:

          21
    • Interface Configuration and Specific Configuration Modes

      21
  • Starting the CLI

    22
    • 1 Connect the DB9 null-modem or cross over cable to the RS-232 serial port of the device to the RS-232 serial port of the terminal or computer running the terminal emulation application.

      23
      • a Set the data format to 8 data bits, 1 stop bit, and no parity.

        23
      • b Set Flow Control to none.

        23
      • c Under Properties, select VT100 for Emulation mode.

        23
      • d Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that the setting is for Terminal keys (not Windows keys).

        23
      • 2 Enter the following commands to begin the configuration procedure:

        23
      • 3 Configure the device and enter the necessary commands to complete the required tasks.

        23
      • 4 When finished, exit the session with the exit command.

        23
  • Editing Features

    23
    • Entering Commands

      23
      • Table 1: Keyword

        24
      • Table 2: Description

        24
      • To display the history buffer, see “show history”.

        25
        • Table 3: Keyboard Key

          26
        • Table 4: Description

          26
    • Copying and Pasting Text

      27
• AAA Commands

  29
  • aaa authentication login

    29
  • aaa authentication enable

    30
  • login authentication

    32
  • enable authentication

    33
  • ip http authentication

    33
  • ip https authentication

    34
  • show authentication methods

    35
  • password

    37
  • enable password

    37
  • username

    38
• ACL Commands

  41
  • ip access-list

    41
  • permit (ip)

    41
  • deny (IP)

    45
  • mac access-list

    47
  • permit (MAC)

    48
  • deny (MAC)

    49
  • service-acl

    50
  • show access-lists

    51
  • show interfaces access-lists

    52
• Address Table Commands

  55
  • bridge address

    55
  • bridge multicast filtering

    56
  • bridge multicast address

    57
  • bridge multicast forbidden address

    58
  • bridge multicast forward-all

    59
  • bridge multicast forbidden forward-all

    60
  • bridge aging-time

    62
  • clear bridge

    62
  • port security

    63
  • port security mode

    64
  • port security routed secure-address

    65
  • show bridge address-table

    66
  • show bridge address-table static

    67
  • show bridge address-table count

    68
  • show bridge multicast address-table

    70
  • show bridge multicast filtering

    72
  • show ports security

    73
  • show ports security addresses

    74
• Ethernet Configuration Commands

  77
  • interface ethernet

    77
  • interface range ethernet

    77
  • shutdown

    78
  • description

    79
  • speed

    80
  • duplex

    81
  • negotiation

    81
  • flowcontrol

    82
  • mdix

    83
  • clear counters

    84
  • set interface active

    85
  • show interfaces advertise

    85
  • show interfaces configuration

    87
  • show interfaces status

    88
  • show interfaces description

    90
  • show interfaces counters

    91
  • port storm-control include-multicast (GC)

    94
  • port storm-control include-multicast (IC)

    95
  • port storm-control broadcast enable

    96
  • port storm-control broadcast rate

    97
  • show ports storm-control

    97
• Line Commands

  99
  • line

    99
  • speed

    99
  • autobaud

    100
  • exec-timeout

    101
  • history

    102
  • history size

    102
  • terminal history

    103
  • terminal history size

    104
  • show line

    105
• PHY Diagnostics Commands

  107
  • test copper-port tdr

    107
  • show copper-ports tdr

    108
  • show copper-ports cable-length

    109
  • show fiber-ports optical-transceiver

    110
• Port Channel Commands

  113
  • interface port-channel

    113
  • interface range port-channel

    113
  • channel-group

    114
  • show interfaces port-channel

    115
• QoS Commands

  117
  • qos

    117
  • show qos

    118
  • class-map

    118
  • show class-map

    120
  • match

    120
  • policy-map

    121
  • class

    122
  • show policy-map

    123
  • trust cos-dscp

    124
  • set

    125
  • police

    126
  • service-policy

    127
  • qos aggregate-policer

    128
  • show qos aggregate-policer

    129
  • police aggregate

    130
  • wrr-queue cos-map

    131
  • wrr-queue bandwidth

    132
  • priority-queue out num-of-queues

    133
  • traffic-shape

    134
  • rate-limit interface configuration

    135
  • show qos interface

    136
  • qos map policed-dscp

    138
  • qos map dscp-queue

    139
  • qos trust (Global)

    140
  • qos trust (Interface)

    141
  • qos cos

    142
  • qos dscp-mutation

    143
  • qos map dscp-mutation

    143
  • security-suite enable

    144
  • security-suite dos protect

    145
  • security-suite deny martian-addresses

    146
• Clock Commands

  149
  • clock set

    149
  • clock source

    150
  • clock timezone

    150
  • clock summer-time

    151
  • sntp authentication-key

    153
  • sntp authenticate

    154
  • sntp trusted-key

    155
  • sntp client poll timer

    156
  • sntp anycast client enable

    157
  • sntp client enable (Interface)

    157
  • sntp unicast client enable

    158
  • sntp unicast client poll

    159
  • sntp server

    159
  • show clock

    160
  • show sntp configuration

    162
  • show sntp status

    163
• RMON Commands

  167
  • show rmon statistics

    167
  • rmon collection history

    169
  • show rmon collection history

    170
  • show rmon history

    172
    • Oversize

      175
    • The number of packets received during this sampling interval that were longer than 1518 octets (excluding framing bits but including FCS octets) but were otherwise well formed.

      175
    • Fragments

      175
    • The total number of packets received during this sampling interval that were less than 64 octets in length (excluding framing bi...

      175
    • Jabbers

      175
    • The number of packets received during this sampling interval that were longer than 1518 octets (excluding framing bits but inclu...

      175
    • Dropped

      175
    • The total number of events in which packets were dropped by the probe due to lack of resources during this sampling interval. This number is not necessarily the number of packets dropped, it is just the number of times this condition has been detected.

      175
    • Collisions

      175
    • The best estimate of the total number of collisions on this Ethernet segment during this sampling interval.

      175
  • rmon alarm

    175
  • show rmon alarm-table

    177
  • show rmon alarm

    178
  • rmon event

    180
  • show rmon events

    181
  • show rmon log

    182
  • rmon table-size

    183
• IGMP Snooping Commands

  185
  • ip igmp snooping (Global)

    185
  • ip igmp snooping (Interface)

    185
  • ip igmp snooping mrouter learn-pim-dvmrp

    186
  • ip igmp snooping host-time-out

    187
  • ip igmp snooping mrouter-time-out

    188
  • ip igmp snooping leave-time-out

    189
  • show ip igmp snooping mrouter

    189
  • show ip igmp snooping interface

    190
  • show ip igmp snooping groups

    191
• LACP Commands

  193
  • lacp system-priority

    193
  • lacp port-priority

    193
  • lacp timeout

    194
  • show lacp ethernet

    195
  • show lacp port-channel

    198
• Power over Ethernet commands

  201
  • power inline

    201
  • power inline powered-device

    202
  • power inline priority

    202
  • power inline usage-threshold

    203
  • power inline traps enable

    204
  • show power inline

    204
• Spanning-Tree Commands

  209
  • spanning-tree

    209
  • spanning-tree mode

    209
  • spanning-tree forward-time

    210
  • spanning-tree hello-time

    211
  • spanning-tree max-age

    212
  • spanning-tree priority

    213
  • spanning-tree disable

    213
  • spanning-tree cost

    214
  • spanning-tree port-priority

    215
  • spanning-tree portfast

    216
  • spanning-tree link-type

    217
  • spanning-tree pathcost method

    217
  • spanning-tree bpdu

    218
  • clear spanning-tree detected-protocols

    219
  • spanning-tree mst priority

    220
  • spanning-tree mst max-hops

    220
  • spanning-tree mst port-priority

    221
  • spanning-tree mst cost

    222
  • spanning-tree mst configuration

    223
  • instance (mst)

    224
  • name (mst)

    224
  • revision (mst)

    225
  • show (mst)

    226
  • exit (mst)

    227
  • abort (mst)

    227
  • spanning-tree guard root

    228
  • show spanning-tree

    229
• Configuration and Image File Commands

  263
  • copy

    263
  • delete

    266
  • boot system

    267
  • show running-config

    268
  • show startup-config

    268
  • show bootvar

    269
• RADIUS Command

  271
  • radius-server host

    271
  • radius-server key

    272
  • radius-server retransmit

    273
  • radius-server source-ip

    274
  • radius-server timeout

    275
  • radius-server deadtime

    275
  • show radius-servers

    276
• Port Monitor Commands

  279
  • port monitor

    279
  • show ports monitor

    280
• SNMP Commands

  283
  • snmp-server community

    283
  • snmp-server view

    284
  • snmp-server group

    286
  • snmp-server user

    287
  • snmp-server engineID local

    289
  • snmp-server enable traps

    291
  • snmp-server filter

    291
  • snmp-server host

    292
  • snmp-server v3-host

    294
  • snmp-server trap authentication

    295
  • snmp-server contact

    296
  • snmp-server location

    297
  • snmp-server set

    297
  • show snmp

    298
  • show snmp engineid

    300
  • show snmp views

    301
  • show snmp groups

    302
  • show snmp filters

    303
  • show snmp users

    304
• IP Address Commands

  307
  • ip address

    307
  • ip address dhcp

    308
  • ip default-gateway

    309
  • show ip interface

    310
  • arp

    311
  • arp timeout

    312
  • clear arp-cache

    312
  • show arp

    313
  • ip domain-name

    314
  • ip name-server

    315
• Management ACL Commands

  317
  • management access-list

    317
  • permit (Management)

    318
  • deny (Management)

    319
  • management access-class

    320
  • show management access-list

    321
  • show management access-class

    322
• Wireless Rogue AP Commands

  323
  • rogue-detect enable (Radio)

    323
  • rogue-detect rogue-scan-interval

    324
  • wlan rogue-detect rogue-ap

    325
  • clear wlan rogue-ap

    326
  • show wlan rogue-aps configuration

    326
  • show wlan rogue-aps list

    327
  • show wlan rogue-aps neighborhood

    328
• Wireless ESS Commands

  331
  • wlan ess create

    331
  • wlan ess configure

    331
  • ssid

    332
  • open vlan

    333
  • qos

    334
  • load-balancing

    334
  • mac-filtering action

    335
  • mac-filtering list

    336
  • security suite create

    337
  • security suite configure

    339
  • vlan (Security-Suite ESS)

    340
  • timer (Security-Suite ESS)

    341
  • update-gkey-on-lea ve (Security-Suite ESS)

    342
  • wpa2 pre-authentication

    343
  • show wlan ess

    344
  • show wlan ess mac-filtering lists

    347
  • show wlan ess counters

    348
• Wireless AP General Commands

  351
  • clear wlan ap

    351
  • wlan ap active

    352
  • wlan ap key

    352
  • wlan ap config

    353
  • name

    354
  • tunnel priority

    355
  • wan enable

    355
  • interface ethernet

    356
  • vlan allowed

    357
  • vlan native

    358
  • wlan template ap configure

    358
  • set wlan copy

    359
  • show wlan aps

    360
  • show wlan ap interface radio

    364
  • show wlan ap interface ethernet

    365
  • show wlan aps counters

    366
  • show wlan aps discovered

    368
  • show wlan template aps

    369
• SSH Commands

  371
  • ip ssh port

    371
  • ip ssh server

    372
  • crypto key generate dsa

    372
  • crypto key generate rsa

    373
  • ip ssh pubkey-auth

    374
  • crypto key pubkey-chain ssh

    374
  • user-key

    375
  • key-string

    376
  • show ip ssh

    378
  • show crypto key mypubkey

    379
  • show crypto key pubkey-chain ssh

    380
• Web Server Commands

  383
  • ip http server

    383
  • ip http port

    383
  • ip http exec-timeout

    384
  • ip https server

    385
  • ip https port

    385
  • crypto certificate generate

    386
  • crypto certificate request

    388
  • crypto certificate import

    389
  • ip https certificate

    390
  • show crypto certificate mycertificate

    391
  • show ip http

    392
  • show ip https

    393
• TACACS+ Commands

  395
  • tacacs-server host

    395
  • tacacs-server key

    396
  • tacacs-server timeout

    397
  • tacacs-server source-ip

    398
  • show tacacs

    399
    • Syntax

      399
• Syslog Commands

  401
  • logging on

    401
  • logging

    402
  • logging console

    403
  • logging buffered

    403
  • logging buffered size

    404
  • clear logging

    405
  • logging file

    406
  • clear logging file

    406
  • aaa logging

    407
  • file-system logging

    408
  • management logging

    408
  • show logging

    409
  • show logging file

    411
  • show syslog-servers

    413
• Wireless AP BSS Commands

  415
  • bss

    415
  • bss enable

    415
  • advertise-ssid

    416
  • data-rates

    417
• System Management Commands

  419
  • ping

    419
  • traceroute

    421
  • telnet

    424
  • resume

    427
  • reload

    428
  • hostname

    429
  • show users

    429
  • show sessions

    430
  • show system

    431
  • show version

    432
  • service cpu-utilization

    433
  • show cpu utilization

    434
• User Interface Commands

  435
  • enable

    435
  • disable

    436
  • login

    436
  • configure

    437
  • exit (Configuration)

    438
  • exit

    438
  • end

    439
  • help

    439
  • terminal data-dump

    440
  • debug-mode

    441
  • show history

    442
  • show privilege

    443
• GVRP Commands

  445
  • gvrp enable (Global)

    445
  • gvrp enable (Interface)

    446
  • garp timer

    446
  • gvrp vlan-creation-forbid

    448
  • gvrp registration-forbid

    448
  • clear gvrp statistics

    449
  • show gvrp configuration

    450
  • show gvrp statistics

    451
  • show gvrp error-statistics

    452
• VLAN Commands

  455
  • vlan database

    455
  • vlan

    455
  • interface vlan

    456
  • interface range vlan

    457
  • name

    458
  • switchport access vlan

    458
  • switchport trunk allowed vlan

    459
  • switchport trunk native vlan

    460
  • switchport general allowed vlan

    461
  • switchport general pvid

    462
  • switchport general ingress-filtering disable

    463
  • switchport general acceptable-frame-ty pe tagged-only

    463
  • switchport forbidden vlan

    464
  • show vlan

    465
  • show vlan internal usage

    466
  • show interfaces switchport

    467
• 802.1x Commands

  469
  • aaa authentication dot1x

    469
  • dot1x system-auth-contro l

    470
  • dot1x port-control

    470
  • dot1x re-authentication

    471
  • dot1x timeout re-authperiod

    472
  • dot1x re-authenticate

    473
  • dot1x timeout quiet-period

    473
  • dot1x timeout tx-period

    475
  • dot1x max-req

    475
  • dot1x timeout supp-timeout

    476
  • dot1x timeout server-timeout

    477
  • show dot1x

    478
  • show dot1x users

    481
  • show dot1x statistics

    483
  • dot1x auth-not-req

    485
  • dot1x multiple-hosts

    486
  • dot1x single-host-violatio n

    487
  • dot1x guest-vlan

    488
  • dot1x guest-vlan enable

    489
  • show dot1x advanced

    490
• Wireless AP Radio Commands

  493
  • interface radio

    493
  • enable (ap radio)

    494
  • channel

    494
  • power

    496
  • allow traffic

    497
  • preamble

    497
  • rts threshold

    498
  • antenna

    499
  • beacon period

    500
• Wireless WLAN Commands

  501
  • wlan tx-power off

    501
  • wlan country-code

    502
  • wlan tx-power auto enable

    504
  • wlan tx-power auto interval

    505
  • wlan tx-power auto signal-strength

    506
  • wlan tx-power auto signal-loss

    506
  • wlan station idle-timeout

    507
  • clear wlan station

    508
  • show wlan

    509
  • show wlan auto-tx-power

    510
  • show wlan logging configuration

    511
  • show wlan stations

    512
  • show wlan stations counters

    513
• Troubleshooting

  515
  • Problem Management

    515
  • Troubleshooting Solutions

    515