NEC N8406-022 - Manual

ISCLI Reference 6 ISCLI Reference Introduction The 1Gb Intelligent L2 Switch is ready to perform basic switching functions right out of the box. Some of the moreadvanced features, however, require some administrative configuration before they can be used effectively. The extensive switching software...

ISCLI Reference 7 To establish a console connection with the switch: 1. Connect the terminal to the console port using the null modem cable. 2. Power on the terminal. 3. Press the Enter key a few times on the terminal to establish the connection. 4. You will be required to enter a password for acces...

ISCLI Reference 8 The supported SSH encryption and authentication methods are listed below. • Server Host Authentication—Client RSA authenticates the switch in the beginning of every connection • Key Exchange—RSA • Encryption: • AES256-CBC • AES192-CBC • AES128-CBC • 3DES-CBC • 3DES • ARCFOUR • User...

ISCLI Reference 9 Table 2 User access levels User account Description and tasks performed User The User has no direct responsibility for switch management. He or she can view all switchstatus information and statistics, but cannot make any configuration changes to the switch.The user account is enab...

ISCLI basics 11 ISCLI basics Introduction The ISCLI is used for viewing switch information and statistics. In addition, the administrator can use the CLI forperforming all levels of switch configuration. This chapter describes the ISCLI Command Modes, and provides a list of commands and shortcuts th...

ISCLI basics 12 Global commands Some basic commands are recognized throughout the ISCLI hierarchy. These commands are useful for obtainingonline Help, navigating through the interface, and saving configuration changes. To get help about a specificcommand, type the command, followed by help . The fol...

ISCLI basics 13 Command line interface shortcuts The following shortcuts allow you to enter commands quickly and easily. Command abbreviation Most commands can be abbreviated by entering the first characters that distinguish the command from the othersin the same mode. For example, consider the foll...

Information Commands 14 Information Commands Introduction You can view configuration information for the switch in the ISCLI. This chapter discusses how to use the ISCLI todisplay switch information. The following table describes general information commands. Table 5 Information commands Command Usa...

Information Commands 15 System Information commands The following table describes the System Information commands. Table 6 System Information commands Command Usage show snmp-server v3 Displays SNMP v3 information.Command mode: All show sys-info Displays system information, including: • System date ...

Information Commands 16 SNMPv3 USM User Table information The following command displays SNMPv3 user information: show snmp-server v3 user Command mode: All The User-based Security Model (USM) in SNMPv3 provides security services such as authentication and privacy ofmessages. This security model mak...

Information Commands 17 The following table describes the SNMPv3 View Table information. Table 9 View Table parameters Field Description View Name Displays the name of the view. Subtree Displays the MIB subtree as an OID string. A view subtree is the set of all MIBobject instances which have a commo...

Information Commands 18 SNMPv3 Group Table information The following command displays SNMPv3 group information: show snmp-server v3 group Command mode: All Sec Model User Name Group Name---------- ----------------------------- -------------------------------snmpv1 v1v2only v1v2grpusm adminmd5 adming...

Information Commands 19 SNMPv3 Target Address Table information The following command displays SNMPv3 target address information: show snmp-server v3 target-address Command mode: All Name Transport Addr Port Taglist Params---------- --------------- ---- ---------- ---------------trap1 47.81.25.66 16...

Information Commands 20 SNMPv3 Notify Table information The following command displays the SNMPv3 Notify Table: show snmp-server v3 notify Command mode: All Name Tag-------------------- --------------------v1v2trap v1v2trap The following table describes the SNMPv3 Notify Table information. Table 15 ...

Information Commands 21 SNMPv3 dump The following command displays SNMPv3 information: show snmp-server v3 Command mode: All Engine ID = 80:00:07:50:03:00:0F:6A:F8:EF:00 usmUser Table:User Name Protocol -------------------------------- --------------------------------admin NO AUTH, NO PRIVACYadminmd...

Information Commands 22 System information The following command displays system information: show sys-info Command mode: All System Information at 6:56:22 Thu Jan 11, 2006 Time zone: Asia/Tokyo Blade Network Technologies 1Gb Intelligent L2 Switch sysName: sysLocation: RackId: NEC01A 6X00125 RackNam...

Information Commands 23 Show recent syslog messages The following command displays system log messages: show logging messages Command mode: All Date Time Severity level Message ---- ---- ----------------- -------Jul 8 17:25:41 NOTICE system: link up on port 1Jul 8 17:25:41 NOTICE system: link up on ...

Information Commands 24 The following table describes the user status information. Table 16 User status Information Field Usage user Displays the status of the user access level. oper Displays the status of the oper (operator) access level. admin Displays the status of the admin (administrator) acce...

Information Commands 25 FDB information commands The forwarding database (FDB) contains information that maps the media access control (MAC) address of eachknown device to the switch port where the device address was learned. The FDB also shows which other portshave seen frames destined for a partic...

Information Commands 26 Spanning Tree information The following command displays Spanning Tree information: show spanning-tree stp <1-32> information Command mode: All ------------------------------------------------------------------ upfast disabled, update 40 --------------------------------...

Information Commands 27 Table 19 STP parameters Parameter Description FwdDel The forward delay parameter specifies, in seconds, the amount of time that a bridge port hasto wait before it changes from learning state to forwarding state. Aging The aging time parameter specifies, in seconds, the amount...

Information Commands 29 Common Internal Spanning Tree information The following command displays Common Internal Spanning Tree (CIST) information: show spanning-tree mstp cist information Command mode: All Mstp Digest: 0xac36177f50283cd4b83821d8ab26de62 Common Internal Spanning Tree: VLANs: 1 3-4094...

Information Commands 31 Trunk group information The following command displays Trunk Group information: show portchannel information Command mode: All Trunk group 1, Enabledport state: 17: STG 1 forwarding 18: STG 1 forwarding When trunk groups are configured, you can view the state of each port in ...

Information Commands 32 Layer 3 information The following table describes basic Layer 3 Information commands. The following sections provide more detailedinformation and commands. Layer 3 functionality is limited in this release. Table 22 Layer 3 information commands Command Usage show ip arp Displa...

Information Commands 33 Show all ARP entry information The following command displays ARP information: show ip arp Command mode: All except User EXEC IP address Flags MAC address VLAN Port --------------- ----- ----------------- ---- ---- 192.168.2.4 00:50:8b:b2:32:cb 1 18 192.168.2.19 00:0e:7f:25:8...

Information Commands 34 IGMP multicast group information The following table describes the commands used to display information about IGMP groups learned by the switch. Table 25 IGMP Multicast Group commands Command Usage show ip igmp groupsaddress <IP address> Displays a single IGMP multicast...

Information Commands 35 The following table describes the RMON History Information parameters. Table 27 RMON History Information Command Usage Index Displays the index number that identifies each history instance. IFOID Displays the MIB Object Identifier. Interval Displays the time interval for each...

Information Commands 36 The following table describes the RMON Alarm Information parameters. Table 28 RMON Alarm Information Command Usage Index Displays the index number that identifies each alarm instance. Interval Displays the time interval over which data is sampled and compared with the rising ...

Information Commands 37 Link status information The following command displays link information: show interface link Command mode: All except User EXEC ------------------------------------------------------------------Port Speed Duplex Flow Ctrl Link---- ----- -------- --TX-----RX-- ------ 1 1000 an...

Information Commands 38 Port information The following command displays port information: show interface information Command mode: All except User EXEC Port Tag RMON PVID NAME VLAN(s)---- --- ---- ---- -------------- ------------------------------- 1 n d 1 Downlink1 1 2 n d 1 Downlink2 1 3 n d 1 Dow...

Information Commands 39 Logical Port to GEA Port mapping The following command displays information about GEA ports: show geaport Command mode: All Logical Port GEA Port(0-based) GEA Unit------------ ----------------- --------- 1 1 0 2 2 0 3 4 0 4 7 0 5 8 0 6 12 0 7 13 0 8 14 0 9 0 0 10 3 0 11 5 0 1...

Information Commands 40 Information dump The following command dumps switch information: show information-dump Command mode: All Use the dump command to dump all switch information available from this switch memory (10K or more, dependingon your configuration). This data is useful for tuning and deb...

Statistics commands 41 Statistics commands Introduction You can view switch performance statistics in the user, operator, and administrator command modes. This chapterdiscusses how to use the ISCLI to display switch statistics. The following table describes general Statistics commands. Table 30 Stat...

Statistics commands 42 Bridging statistics Use the following command to display the bridging statistics of the selected port: show interface gigabitethernet <port number> bridging-counters Command mode: All Bridging statistics for port 1:dot1PortInFrames: 63242584dot1PortOutFrames: 63277826dot...

Statistics commands 44 Table 33 Ethernet statistics for port Statistics Description dot3StatsFrameTooLongs A count of frames received on a particular interface that exceedsthe maximum permitted frame size.The count represented by an instance of this object is incrementedwhen the frameTooLong status ...

Statistics commands 46 Link statistics Use the following command to display the link statistics of the selected port: show interface gigabitethernet <port number> link-counters Command mode: All Link statistics for port 1: linkStateChange: 2 The following table describes the link statistics fo...

Statistics commands 47 Layer 3 statistics The following table describes basic Layer 3 statistics commands. The following sections provide more detailedinformation and commands. Layer 3 functionality is limited in this release. Table 39 Layer 3 Statistics commands Command Usage show ip counters Displ...

Statistics commands 48 Table 40 IP statistics Statistics Description ipInDiscards The number of input IP datagrams for which no problems were encountered toprevent their continued processing, but which were discarded (for example, for lack ofbuffer space).This counter does not include any datagrams ...

Statistics commands 49 DNS statistics show ip dns counters Command mode: All except User EXEC DNS statistics:dnsInRequests: 0 dnsOutRequests: 0dnsBadRequests: 0 The following table describes the Domain Name System (DNS) statistics: Table 42 DNS statistics Statistic Description dnsInRequests The tota...

Statistics commands 50 Table 43 ICMP statistics Statistics Description icmpOutDestUnreachs The number of ICMP Destination Unreachable messages sent. icmpOutTimeExcds The number of ICMP Time Exceeded messages sent. icmpOutParmProbs The number of ICMP Parameter Problem messages sent. icmpOutSrcQuenchs...

Statistics commands 51 Table 44 TCP statistics Statistics Description tcpRetransSegs The total number of segments retransmitted, that is, the number of TCP segmentstransmitted containing one or more previously transmitted octets. tcpInErrs The total number of segments received in error (for example,...

Statistics commands 52 IGMP Multicast Group statistics The following command displays statistics about the use of the IGMP Multicast Groups: show ip igmp counters Command mode: All except User EXEC Enter VLAN number: (1-4095) 1------------------------------------------------------------IGMP Snoop vl...

Statistics commands 54 CPU statistics The following command displays the CPU utilization statistics: show mp cpu Command mode: All except User EXEC CPU utilization:cpuUtil1Second: 8%cpuUtil4Seconds: 9%cpuUtil64Seconds: 8% The following table describes the management port CPU utilization statistics: ...

Statistics commands 56 Table 51 SNMP statistics Statistics Description snmpOutGenErrs The total number of SNMP Protocol Data Units (PDUs), which were generatedby the SNMP protocol entity and for which the value of the error-status field isgenErr. snmpOutGetRequests The total number of SNMP Get-Reque...

Statistics commands 57 The following table describes the NTP statistics: Table 52 NTP statistics Statistics Description Primary Server Requests Sent: The total number of NTP requests the switch sent to the primaryNTP server to synchronize time.Responses Received: The total number of NTP responses re...

Configuration Commands 58 Configuration Commands Introduction The Configuration commands are available only from an administrator login. They include commands forconfiguring every aspect of the switch. Changes can be saved to non-volatile memory (NVRAM). The following table describes the basic Confi...

Configuration Commands 59 Table 55 System Configuration commands Command Usage [no] system notice <1-1024 characters multi-line> <’-‘ toend> Displays login notice immediately before the “Enter password:”prompt. This notice can contain up to 1024 characters and newlines.Command mode: Glob...

Configuration Commands 60 Table 56 Syslog Configuration commands Command Description [no] logging log { <feature> } Displays a list of features for which syslog messages canbe generated. You can choose to enable/disable specificfeatures or enable/disable syslog on all available features.Featur...

Configuration Commands 61 Table 57 SSHD Configuration commands Command Description no ssh scp-enable Disables the SCP apply and save. This is the default for SCP.Command mode: Global configuration ssh enable Enables the SSH server.Command mode: Global configuration no ssh enable Disables the SSH ser...

Configuration Commands 62 TACACS+ server configuration TACACS+ (Terminal Access Controller Access Control System) is an authentication protocol that allows a remoteaccess server to forward a user's logon password to an authentication server to determine whether access can beallowed to a given system...

Configuration Commands 63 IMPORTANT: If TACACS+ is enabled, you must login using TACACS+ authentication when connecting viathe console or Telnet/SSH/HTTP/HTTPS. Backdoor for console is always enabled, so you can connect using notacacs and the administrator password even if the backdoor ( telnet ) or...

Configuration Commands 64 System SNMP configuration The switch software supports SNMP-based network management. In SNMP model of network management, amanagement station (client/manager) accesses a set of variables known as MIBs (Management Information Base)provided by the managed device (agent). If ...

Configuration Commands 65 SNMPv3 configuration SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 Framework bysupporting the following: • a new SNMP message format • security for messages • access control • remote configuration of SNMP parameters For more details on ...

Configuration Commands 66 User Security Model configuration You can make use of a defined set of user identities using this Security Model. An SNMP engine must have theknowledge of applicable attributes of a user. These commands help you create a user security model entry for an authorized user. You...

Configuration Commands 67 SNMPv3 View configuration The following table describes the SNMPv3 View Configuration commands. Table 64 SNMPv3 View Configuration commands Command Description snmp-server view <1-128> name <1-32 characters> Defines the name for a family of view subtrees up to a...

Configuration Commands 68 Table 65 View-based Access Control Configuration commands Command Description show snmp-server access <1-32> Displays the View-based Access Control configuration.Command mode: All SNMPv3 Group configuration The following table describes the SNMPv3 Group Configuration ...

Configuration Commands 69 SNMPv3 Target Address Table configuration These commands allow you to configure an entry of a transport address that transmits SNMP traps. The following table describes the SNMPv3 Target Address Table Configuration commands. Table 68 SNMPv3 Target Address Table Configuratio...

Configuration Commands 70 SNMPv3 Notify Table configuration SNMPv3 uses Notification Originator to send out traps. A notification typically monitors a system for particularevents or conditions, and generates Notification-Class messages based on these events or conditions. The following table describ...

Configuration Commands 71 User Access Control configuration The following table describes the User Access Control commands. Table 73 User Access Control Configuration commands Command Description access user <1-10> Configures the User ID.Command mode: Global configuration access user eject <...

Configuration Commands 72 HTTPS Access configuration The following table describes the HTTPS Access Configuration commands. Table 75 HTTPS Access Configuration commands Command Description [no] access httpsenable Enables or disables BBI access (Web access) using HTTPS. The default value is disabled ...

Configuration Commands 73 Port configuration Use the port configuration commands to configure settings for individual switch ports. NOTE: Port 19 is reserved for switch management. The following table describes the Port Configuration commands. The following sections provide more detailedinformation ...

Configuration Commands 74 Port link configuration Use these commands to set port parameters for the port link. Link commands are described in the following table. Using these commands, you can set port parameters such asspeed, duplex, flow control, and negotiation mode for the port link. The followi...

Configuration Commands 75 Rapid Spanning Tree Protocol / Multiple Spanning Tree Protocolconfiguration The switch supports the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) and IEEE 802.1s Multiple SpanningTree Protocol (MSTP). MSTP allows you to map many VLANs to a small number of spanning tree gr...

Configuration Commands 76 Common Internal Spanning Tree configuration The Common Internal Spanning Tree (CIST) provides compatibility with different MSTP regions and with devicesrunning different Spanning Tree instances. It is equivalent to Spanning Tree Group 0. The following table describes the co...

Configuration Commands 77 CIST port configuration CIST port parameters are used to modify MRST operation on an individual port basis. CIST parameters do notaffect operation of STP/PVST. For each port, CIST is turned on by default. Port parameters include: • Port priority • Port path cost • Port Hell...

Configuration Commands 78 Spanning Tree configuration The switch supports the IEEE 802.1d Spanning Tree Protocol (STP) and Cisco proprietary PVST and PVST+protocols. You can configure up to 31 spanning tree groups on the switch (STG 32 is reserved for switchmanagement). Spanning Tree is turned on by...

Configuration Commands 79 Bridge Spanning Tree configuration Spanning tree bridge parameters can be configured for each Spanning Tree Group. STP bridge parametersinclude: • Bridge priority • Bridge hello time • Bridge maximum age • Forwarding delay • Current bridge configuration The following table ...

Configuration Commands 80 Spanning Tree port configuration By default for STP/PVST+, Spanning tree is turned Off for downlink ports (1-16), and turned On for cross-connectports (17-18), and uplink ports (20-24). By default for RSTP/MSTP, Spanning tree is turned On for all downlinkports (1-16), all c...

Configuration Commands 81 Forwarding Database configuration The following table describes the Forwarding Database Configuration commands. Table 86 FDB Configuration commands Command Description aging < 0-65535 > Configures the aging value for FDB entries. The default value is 300. show mac-add...

Configuration Commands 82 VLAN configuration The commands in this section configure VLAN attributes, change the status of the VLAN, delete the VLAN, andchange the port membership of the VLAN. By default, the VLANs are disabled except VLAN 1, which is always enabled. The switch supports a maximum of1...

Configuration Commands 83 IP interface configuration The switch can be configured with up to 256 IP interfaces. Each IP interface represents the switch on an IP subneton your network. The IP Interface option is disabled by default. Interface 256 is reserved for switch management. The following table...

Configuration Commands 84 Address Resolution Protocol configuration Address Resolution Protocol (ARP) is the TCP/IP protocol that resides within the Internet layer. ARP resolves aphysical address from an IP address. ARP queries machines on the local network for their physical addresses.ARP also main...

Configuration Commands 85 Table 94 IGMP Snooping commands Command Description [no] ip igmp snoop vlan <1-4095> fastleave Enables or disables Fastleave processing. Fastleave allows theswitch to immediately remove a port from the IGMP port list, ifthe host sends a Leave message, and the proper c...

Configuration Commands 86 IGMP filter definition The following table describes the IGMP Filter Definition commands. Table 97 IGMP Filter Definition commands Command Description ip igmp profile <1-16> range <IP multicast address> <IP multicastaddress> Configures the range of IP mult...

Configuration Commands 87 Remote Monitoring configuration Remote Monitoring (RMON) allows you to monitor traffic flowing through the switch. The RMON MIB is described inRFC 1757. The following table describes the RMON Configuration commands. Table 100 RMON commands Command Description show rmon Disp...

Configuration Commands 88 Table 102 RMON Event commands Command Description no rmon event <1-65535> Deletes this event index. Command mode: Global configuration show rmon event Displays the current RMON Event parameters. Command mode: All RMON alarm configuration The Alarm RMON group can track...

Configuration Commands 89 Port mirroring Port Mirroring is used to configure, enable, and disable the monitored port. When enabled, network packets beingsent and/or received on a target port are duplicated and sent to a monitor port. By attaching a network analyzer tothe monitor port, you can collec...

Configuration Commands 90 Failure Detection Pair configuration Use these commands to configure a Failure Detection Pair, which consists of one Link to Monitor (LtM) and oneLink to Disable (LtD). When the switch detects a failure on the LtM, it automatically disables the ports in the LtD. The followi...

Configuration Commands 91 Saving the active switch configuration When the copy running-config tftp command is used, the active configuration commands of the switch will be uploaded to the specified script configuration file on the TFTP server. To start the switch configuration upload, atthe prompt, ...

Operations Commands 92 Operations Commands Introduction Operations-level commands are used for making immediate and temporary changes to switch configuration.Operations commands are used for bringing ports temporarily in and out of service. These commands are availableonly from an administrator and ...

Boot Options 93 Boot Options Introduction You must be logged in to the switch as the administrator to use the Boot Options commands. The Boot Options allow you to perform the following functions: • Select a switch software image to be used when the switch is next reloaded. • Select a configuration b...

Boot Options 94 5. The system prompts you to confirm your request.You should next select a software image to run, as described in the “Selecting a Soft Image to Run” section. 6. If you are loading an image from which you are not currently booted, the system prompts you to change theimage. image2 cur...

Boot Options 95 5. The system then requests confirmation of what you have entered. To have the file uploaded, enter y. image2 currently contains Software Version 1.1.0 Upload will transfer image2 (1889411 bytes) to file "test" on TFTP server 192.1.1.1. Confirm upload operation [y/n]: y Selec...

Maintenance Commands 96 Maintenance Commands Introduction The Maintenance commands are used for debugging purposes, enabling you to generate a technical support dumpof the critical state information in the switch, and to clear entries in the Forwarding Database and the AddressResolution Protocol (AR...

Maintenance Commands 97 Debugging options The Miscellaneous Debug commands display trace buffer information about events that can be helpful inunderstanding switch operation. You can view the following information using Debug commands: • Events traced by the management processor (MP) • Events traced...

Maintenance Commands 98 IGMP Snooping maintenance The following table describes the IGMP Snooping Maintenance commands. Table 116 IGMP Snooping Maintenance commands Command Usage show ip igmp groups address <IP address> Shows a single IGMP Multicast group by IP address. Command mode: All excep...

Maintenance Commands 99 TFTP system dump put Use this command to put (save) the system dump to a TFTP server. NOTE: If the TFTP server is running SunOS or the Solaris operating system, the specified copy flash-dump tftp (or ftp) file must exist prior to executing the copy flash-dump tftp command ( o...

Maintenance Commands 100 Unscheduled system dumps If there is an unscheduled system dump to flash memory, the following message is displayed when you log on tothe switch: Note: A system dump exists in FLASH. The dump was saved at 13:43:22 Wednesday October 30, 2006. Use show flash-dump uuencode to e...

Index 101 Index A abbreviating commands, 14access control, user, 70active configuration block, 59, 97active switch configuration: gtcfg, 93; ptcfg, 92; restoring, 93 Address Resolution Protocol (ARP): address list, 99 Address Resolution Protocol (ARP) Menu, 33 aging: STP information, 28, 29apply com...