N GbEインテリジェントスイッチ(L3)

Transcription

1 N GbE (L3) (ISCLI)

2 Copyright 2007 NEC Corporation NEC NEC Microsoft Windows Windows NT Microsoft Corporation SunOS Solaris Sun Microsystems Cisco Cisco Systems

3 ISCLI IP...9 Telnet... 9 SSH ISCLI ISCLI ISCLI CLI Tab Information Commands System Information commands SNMPv3 Information commands SNMPv3 USM User Table information SNMPv3 View Table information SNMPv3 Access Table information SNMPv3 Group information SNMPv3 Community Table information SNMPv3 Target Address Table information SNMPv3 Target Parameters Table information SNMPv3 Notify Table information SNMPv3 dump System information Show recent syslog messages System user information Layer 2 information FDB information commands Show all FDB information Clearing entries from the FDB Link Aggregation Control Protocol information LACP dump x information Spanning Tree information Rapid Spanning Tree and Multiple Spanning Tree information Common Internal Spanning Tree information Trunk group information VLAN information Layer 3 information Route information Show all IP Route information ARP information Show all ARP entry information ARP address list information OSPF information OSPF general information OSPF interface information OSPF Database information... 40

4 OSPF router codes information Routing Information Protocol RIP Routes information RIP user information IP information IGMP multicast group information IGMP multicast router port information VRRP information p information ACL information RMON information RMON history information RMON alarm information RMON event information Link status information Port information Logiral Port to GEA Port mapping Uplink Failure Detection information Information dump Statistics commands Port Statistics x statistics Bridging statistics Ethernet statistics Interface statistics Internet Protocol (IP) statistics Link statistics Layer 2 statistics FDB statistics LACP statistics Layer 3 statistics IP statistics Route statistics ARP statistics DNS statistics ICMP statistics TCP statistics UDP statistics IGMP Multicast Group statistics OSPF statistics OSPF Global Statistics VRRP statistics RIP statistics GEA Layer 3 statistics GEA Layer 3 statistics Management Processor statistics Packet statistics TCP statistics UDP statistics CPU statistics ACL statistics SNMP statistics NTP statistics Uplink Failure Detection statistics Statistics dump Configuration Commands System configuration System host log configuration Secure Shell Server configuration... 81

5 RADIUS server configuration TACACS+server configuration NTP server configuration System SNMP configuration SNMPv3 configuration User Security Model configuration SNMPv3 View configuration View-based Access Control Model configuration SNMPv3 Group configuration SNMPv3 Community Table configuration SNMPv3 Target Address Table configuration SNMPv3 Target Parameters Table configuration SNMPv3 Notify Table configuration System Access configuration Management Network configuration User Access Control configuration User ID configuration HTTPS Access configuration Port configuration Temporarily disabling a port Port link configuration ACL Port configuration Layer 2 configuration x configuration x Global configuration x Port configuration Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol configuration Common Internal Spanning Tree configuration CIST bridge configuration CIST port configuration Spanning Tree configuration Bridge Spanning Tree configuration Spanning Tree port configuration Fowarding Database configuration Static FDB configuration Trunk configuration Layer 2 IP Trunk Hash configuration Link Aggregation Control Protocol configuration LACP Port configuration VLAN configuration Layer 3 configuration IP interface configuration Default Gateway configuration IP Static Route configuration Address Resolution Protocol configuration IP Forwarding configuration Network Filter configuration Route Map configuration IP Access List configuration Routing Information Protocol configuration RIP Interface configration RIP Router Redistribution configuration Open Shortest Path First configuration OSPF Area Index configuration OSPF Summary Range configuration OSPF Interface configuration OSPF Virtual Link configuration OSPF Host Entry configuration OSPF Route Redistribution configuration OSPF MD5 Key configuration IGMP configuration IGMP snooping configuration IGMP static multicast router configuration IGMP filtering configuration IGMP filter definition

6 IGMP filtering port configuration Domain Name System configuration Bootstrap Protocol Relay configuration Virtual Router Redundancy Protocol configuration VRRP Virtual Router configuration VRRP Virtual Router Priority Tracking configuration VRRP Virtual Router Group configuration VRRP Virtual Router Group Priority Tracking configuration VRRP Interface configuration VRRP Tracking configuration Quality of Service configuration QoS 802.1p configuration Access Control configuration Access Control List configuration ACL Ethernet Filter configuration ACL IP Version 4 Filter configuration ACL TCP/UDP Filter configuration ACL Packet Format configuration ACL Metering configuration ACL Re-mark configuration ACL Re-mark In-Profile configuration Re-mark Update User Priority configuration ACL Re-mark Out-of-Profile configuration ACL Group configuration Remote Monitoring configuration RMON history configuration RMON event configuration RMON alarm configuration Port mirroring Port-based port mirroring Uplink Failure Detection configuration Failure Detection Pair configuration Link to Monitor configuration Link to Disable configuration Configuration Dump Saving the active switch configuration Restoring the active switch configuration Operations Commands Operations-level port options Operations-level port 802.1x optioins Operations-level VRRP options Boot Options Updating the switch software image Downloading new software to the switch Selecting a software image to run Uploading a software image from the switch Selecting a configuration block Resetting the switch Accessing the AOS CLI Maintenance Commands System maintenance Fowarding Database maintenance Debugging options ARP cache maintenance IGMP Snooping maintenance IGMP Mrouter maintenance Technical support dump TFTP/FTP technical support dump put Uuencode flash dump TFTP/FTP system dump put

7 Clearing dump information Panic command Unscheduled system dumps

8 ISCLI GbE (L3) AOS CLI ISCLI Telnet (SSH) SNMP (Simple Network Management Protocol) NEC WebSAM NetvisorPro Web ISCLI ISCLI N GbE (L3) N GbE (L3) N GbE (L3) (AOS) N GbE (L3) Telnet SSH (DB-9) VT-100 ISCLI 8

9 Enter 4. IP Telnet SSH IP DHCP /cfg/sys/dhcp enabled 256 DHCP IP /cfg/sys/dhcp enabled DHCP 256 IP 4 BOOTP 1 BOOTP IP BOOTP MAC BOOTP BOOTP MAC System Information ( Information Commands System Information commands) BOOTP DHCP MAC BOOTP IP Telnet Telnet 4 Telnet IP Telnet ISCLI Telnet Telnet Telnet IP telnet <GbE(L3) IP address> ISCLI 9

10 SSH Telnet SSH SSH SSH SSH Configuration Commands Secure Shell Server configuration 1 SSH/SCP SSH/SCP SSH RSA RSA AES256-CBC AES192-CBC AES128-CBC 3DES-CBC 3DES ARCFOUR RADIUS SSH Linux SSH SecureCRT (VanDyke Technologies, Inc.) Linux OpenSSH_3.9 (FC 3) Linux SCP (FC 3) Windows PuTTY 0.58 (Simon Tatham) SSH SSH SSH SSH 1 2 SSH IP ISCLI SSH ssh IP SSH >> # ssh <user>@<gbe(l3) IP address> SSH "yes" ISCLI 10

11 CLI Web 3 Maintenance Menu Telnet SSH 2 user oper admin user admin admin 5 Telnet SSH idle timeout 1 60 Configuration Commands System configuration ISCLI 11

12 < > bold body text bold Courier text plain Courier text braces { } brackets [ ] italic text vertical line ping <IP address> ping show ip arp configure terminal 1 show portchannel {<1-12> hash information} show portchannel <1-12> show portchannel hash show portchannel information show ip interface [<1-256>] show ip interface show ip interface 1 2 show spanning-tree stp <1-32> show portchannel {<1-12> hash information} show portchannel <1-12> show portchannel hash show portchannel information ISCLI 12

13 ISCLI ISCLI ISCLI ISCLI ISCLI AOS CLI ISCLI Main# boot/mode iscli AOS CLI ISCLI Switch(config)# boot cli-mode aos CLI CLI ISCLI ISCLI 3 User EXEC Priviledged EXEC User EXEC Privileged EXEC Global Configuration ISCLI 3 ISCLI User EXEC Switch> Privileged EXEC Switch# Global configuration Switch(config)# Port configuration Switch(config-if)# VLAN configuration Switch(config-vlan)# exit logout User EXEC enable User EXEC disable ISCLI exit logout Privileged EXEC configure terminal Privileged EXEC end exit Global Configuration interface gigabitethernet <port number> Global Configuration exit Privileged EXEC end Global Configuration vlan <1-4095> Global Configuration exit Privileged EXEC end ISCLI 13

14 3 ISCLI Interface IP configuration Switch(config-ipif)# Global Configuration interface ip <1-256> Global Configuration exit Privileged EXEC end ISCLI help 4? exit 1 copy running-config startup-config exit or quit ping ping <host name> <IP address> [<number of tries>] [<msec delay>] <IP address> IP <number of tries>( ) (1 32) <msec delay>( ) traceroute traceroute <host name> <IP address> [<max-hops>] [<msec delay>] <IP address> IP <max-hops>( ) 1 16 <msec delay>( ) telnet Telnet telnet <host name> <IP address> [<port number>] show history 10 console-log who ISCLI 14

15 CLI Switch(config)# spanning-tree stp 1 bridge hello 2 Switch(config)# sp stp 1 br h 2 Tab Tab Tab 1 ISCLI 15

16 Information Commands ISCLI ISCLI Information 5 Information show sys-info show layer2 information show layer3 information show rmon show interface link show interface information show geaport show ufd show information-dump 2 3 RMON (10 Mb/s 100 Mb/s 1000 Mb/s any) (half full any) (no yes any) (up down) User EXEC VLAN VLAN ID (PVID) VLAN User EXEC GEA UFD (Uplink Failure Detection) Information 10K Information Commands 16

17 System Information commands System Information 6 System Information show snmp-server v3 show sys-info show logging messages show access user SNMPv3 Information commands SNMP v3 MAC IP #1 IP Configuration User EXEC SNMP 3 SNMPv3 SNMPv2 SNMP SNMP SNMP SNMPv3 RFC2271 RFC2276 SNMPv3 Information 7 SNMPv3 Information show snmp-server v3 user show snmp-server v3 view show snmp-server v3 access show snmp-server v3 group show snmp-server v3 community show snmp-server v3 target-address show snmp-server v3 targetparameters show snmp-server v3 notify show snmp-server v3 (USM) MIB SNMPv3 Information Commands 17

18 SNMPv3 USM User Table information SNMPv3 show snmp-server v3 user SNMPv3 (USM) USM ID USM SNMPv3 8 SNMPv3 User Name Protocol SNMPv3 View Table information SNMPv3 show snmp-server v3 view DES MD5 HMAC-SHA View Name Subtree Mask Type iso 1 included v1v2only 1 included v1v2only excluded v1v2only excluded v1v2only excluded MIB MIB SNMPv3 9 SNMPv3 View Name Subtree Mask Type MIB OID MIB Information Commands 18

19 SNMPv3 Access Table information SNMPv3 show snmp-server v3 access Group Name Model Level Match ReadV WriteV NotifyV v1v2grp snmpv1 noauthnopriv exact iso iso v1v2only admingrp usm authpriv exact iso iso iso vacmacess Table (View-based Access Control Model Access Table) Read View Write View Notify View Read View Write View Notify View Read View Read MIB Write View Write MIB Notify View MIB SNMPv3 10 SNMPv3 Group Name Prefix Model Level Match ReadV WriteV NotifyV SNMPv1 SNMPv2 USM noauthnopriv authnopriv auth-priv exact prefix MIB MIB MIB SNMPv3 Group information SNMPv3 show snmp-server v3 group Sec Model User Name Group Name snmpv1 v1v2only v1v2grp usm adminmd5 admingrp usm adminsha admingrp SNMPv3 11 SNMPv3 Sec Model User Name Group Name USM SNMPv1 SNMPv2 SNMPv3 Information Commands 19

20 SNMPv3 Community Table information SNMPv3 show snmp-server v3 community Index Name User Name Tag trap1 public v1v2only v1v2trap SNMP SNMPv3 12 SNMPv3 Index Name User Name (USM) Tag SNMPv3 Target Address Table information SNMPv3 show snmp-server v3 target-address Name Transport Addr Port Taglist Params trap v1v2trap v1v2param SNMP SNMPv3 SNMPv3 13 SNMPv3 Name Transport Addr Port Taglist Params SNMP SNMP UDP SNMP SNMP Information Commands 20

21 SNMPv3 Target Parameters Table information SNMPv3 show snmp-server v3 target-parameters Name MP Model User Name Sec Model Sec Level v1v2param snmpv2c v1v2only snmpv1 noauthnopriv SNMPv3 14 SNMPv3 Name MP Model User Name Sec Model Sec Level SNMP SNMP SNMP SNMP SNMPv3 Notify Table information SNMPv3 show snmp-server v3 notify Name Tag v1v2trap v1v2trap SNMPv3 15 SNMPv3 Field Name Tag SNMP SNMP SNMP Information Commands 21

22 SNMPv3 dump SNMPv3 show snmp-server v3 Engine ID = 80:00:07:50:03:00:0F:6A:F8:EF:00 usmuser Table: User Name Protocol admin NO AUTH, NO PRIVACY adminmd5 HMAC_MD5, DES PRIVACY adminsha HMAC_SHA, DES PRIVACY v1v2only NO AUTH, NO PRIVACY vacmaccess Table: Group Name Prefix Model Level Match ReadV WriteV NotifyV admin usm noauthnopriv exact org org org v1v2grp snmpv1 noauthnopriv exact org org v1v2only admingrp usm authpriv exact org org org vacmviewtreefamily Table: View Name Subtree Mask Type org 1.3 included v1v2only 1.3 included v1v2only excluded v1v2only excluded v1v2only excluded vacmsecuritytogroup Table: Sec Model User Name Group Name snmpv1 v1v2only v1v2grp usm admin admin usm adminsha admingrp snmpcommunity Table: Index Name User Name Tag snmpnotify Table: Name Tag snmptargetaddr Table: Name Transport Addr Port Taglist Params snmptargetparams Table: Name MP Model User Name Sec Model Sec Level Information Commands 22

23 System information show sys-info System Information at 6:56:22 Thu Jan 11, 2006 Time zone: Asia/Tokyo Blade Network Technologies 1Gb Intelligent L3 Switch sysname: syslocation: RackId: NEC01A 6X00125 RackName: Default_Rack_Name EnclosureSerialNumber: NEC01A 6X00125 EnclosureName: Default_Chassis_Name BayNumber: 1 Switch is up 0 days, 14 hours, 56 minutes and 22 seconds. Last boot: 17:25:38 Mon Jan 8, 2006 (software reset) MAC address: 00:10:00:01:00:01 IP (If 1) address: Revision: Switch Serial No: Spare Part No: Software Version (FLASH image2), active configuration. Rack MAC IP Configuration (active backup factory default) Information Commands 23

24 Show recent syslog messages show logging messages Date Time Severity level Message Jul 8 17:25:41 NOTICE system: link up on port 1 Jul 8 17:25:41 NOTICE system: link up on port 8 Jul 8 17:25:41 NOTICE system: link up on port 7 Jul 8 17:25:41 NOTICE system: link up on port 12 Jul 8 17:25:41 NOTICE system: link up on port 11 Jul 8 17:25:41 NOTICE system: link up on port 14 Jul 8 17:25:41 NOTICE system: link up on port 13 Jul 8 17:25:41 NOTICE system: link up on port 16 Jul 8 17:25:41 NOTICE system: link up on port 15 Jul 8 17:25:41 NOTICE system: link up on port 17 Jul 8 17:25:41 NOTICE system: link up on port 20 Jul 8 17:25:41 NOTICE system: link up on port 22 Jul 8 17:25:41 NOTICE system: link up on port 23 Jul 8 17:25:41 NOTICE system: link up on port 21 Jul 8 17:25:42 NOTICE system: link up on port 4 Jul 8 17:25:42 NOTICE system: link up on port 3 Jul 8 17:25:42 NOTICE system: link up on port 6 Jul 8 17:25:42 NOTICE system: link up on port 5 Jul 8 17:25:42 NOTICE system: link up on port 10 Jul 8 17:25:42 NOTICE system: link up on port 9 8 EMERG ALERT CRIT ERR WARNING NOTICE INFO DEBUG System user information show access user User EXEC Usernames: user - enabled oper - disabled admin - Always Enabled Current User ID table: 1: name tech1, ena, cos user, password valid, online 2: name tech2, ena, cos user, password valid, offline 16 user oper admin Information Commands 24

25 16 Current User ID Table User ID Layer 2 information show mac-address-table show lacp information show qos transmit-queue information show dot1x information show spanning-tree <1-128> information show spanning-tree mstp cist information show portchannel information show vlan information show layer2 FDB LACP 802.1p 802.1x STP STP STP CIST CIST VLAN VLAN VLAN VLAN Layer2 information 10K Information Commands 25

26 FDB information commands FDB (Forwarding Database) MAC FDB MAC 8K 18 FDB show mac-address-table address <macaddress> show mac-address-table port <port number> show mac-address-table vlan <1-4095> show mac-address-table state {forward trunk unknown} show mac-address-table 1 MAC MAC MAC xx:xx:xx:xx:xx:xx 08:00:20:12:34:56 xxxxxxxxxxxx FDB VLAN FDB FDB FDB Show all FDB information FDB show mac-address-table MAC address VLAN Port Trnk State :02:01:00:00: TRK 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00: FWD 00:02:01:00:00:0a FWD 00:02:01:00:00:0b FWD 00:02:01:00:00:0c FWD (FWD) (TRK) Trnk (UNK) MAC Clearing entries from the FDB MAC FDB Configuration Commands Static FDB configuration Information Commands 26

27 Link Aggregation Control Protocol information Link Aggregation Control Protocol information 19 LACP show interface gigabitethernet <port number> lacp information show lacp show lacp information LACP aggregator LACP LACP LACP dump LACP show lacp information >> LACP# dump port lacp adminkey operkey selected prio attached trunk aggr off 1 1 n off 2 2 n off 3 3 n off 4 4 n off 5 5 n off 6 6 n off 7 7 n off 8 8 n LACP LACP (active, passive, off) adminkey operkey LACP Information Commands 27

28 802.1x information 802.1x show dot1x information System capability : Authenticator System status : disabled Protocol version : 1 Authenticator Backend Port Auth Mode Auth Status PAE State Auth State force-auth unauthorized initialize initialize 2 force-auth unauthorized initialize initialize 3 force-auth unauthorized initialize initialize 4 force-auth unauthorized initialize initialize 5 force-auth unauthorized initialize initialize 6 force-auth unauthorized initialize initialize 7 force-auth unauthorized initialize initialize 8 force-auth unauthorized initialize initialize 9 force-auth unauthorized initialize initialize 10 force-auth unauthorized initialize initialize 11 force-auth unauthorized initialize initialize 12 force-auth unauthorized initialize initialize 13 force-auth unauthorized initialize initialize 14 force-auth unauthorized initialize initialize 15 force-auth unauthorized initialize initialize 16 force-auth unauthorized initialize initialize *17 force-auth unauthorized initialize initialize *18 force-auth unauthorized initialize initialize 19 force-auth unauthorized initialize initialize 20 force-auth unauthorized initialize initialize *21 force-auth unauthorized initialize initialize 22 force-auth unauthorized initialize initialize *23 force-auth unauthorized initialize initialize *24 force-auth unauthorized initialize initialize * - Port down or disabled IEEE 802.1x x Port Auth Mode Auth Status Authenticator PAE State force-unauth auto force-auth authorized unauthorized Authenticator Port Access Entity initialize disconnected connecting authentication authenticated aborting held forceauth Information Commands 28

29 x Backend Auth State request response success fail timeout idle Spanning Tree information Spanning Tree Protocol (STP) information 21 STP show spanning-tree stp <1-128> show spanning-tree stp <1-128> bridge show spanning-tree <1-128> information show spanning-tree stp <1-128> information STP bridge STP upfast disabled, update Spanning Tree Group 1: On (STP/PVST+) VLANs: 1 Current Root: Path-Cost Port Hello MaxAge FwdDel Aging :02:a5:d1:0f:ed Parameters: Priority Hello MaxAge FwdDel Aging Port Priority Cost FastFwd State Designated Bridge Des Port n FORWARDING * n FORWARDING * n FORWARDING * IEEE 802.1d (STP) RSTP/MSTP Rapid Spanning Tree and Multiple Spanning Tree information STP STP upfast (Uplink Fast) MAC STP Information Commands 29

30 STP 22 STP Current Root Path-Cost Port Priority (bridge) Hello MaxAge FwdDel Aging (16 ) MAC 0 STP BPDU Max Age ( ) MaxAge Forward Delay ( ) FwdDel FDB Aging Time ( ) Priority (port) Cost State Designated bridge Designated port 1 BLOCKING LISTENING LEARNING FORWARDING DISABLED 16 ) MAC ID Information Commands 30

31 Rapid Spanning Tree and Multiple Spanning Tree information RSTP/MSTP show spanning-tree stp <1-128> information upfast disabled, update Spanning Tree Group 1: On (RSTP) VLANs: Current Root: Path-Cost Port Hello MaxAge FwdDel Aging :00:01:00:19: Parameters: Priority Hello MaxAge FwdDel Aging Port Prio Cost State Role Designated Bridge Des Port Type DSB DSB DSB DSB DSB DSB DSB DSB DSB DISC FWD DESG :00:01:00:19: P2P2,Edge FWD DESG :00:01:00:19: P2P IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) RSTP/MSTP RSTP upfast (Uplink Fast) MAC RSTP RSTP MSTP STP 23 RSTP Current Root Path-Cost (16 ) MAC Information Commands 31

32 23 RSTP Port Priority (bridge) Hello MaxAge FwdDel Aging Priority (port) Cost State Role Designated bridge Designated port Type 0 STP BPDU ( ) Max Age ( ) Forward Delay ( ) FDB Aging Time ( ) 1 (0) RSTP/MSTP Discarding (DISC) Learning (LRN) Forwarding (FWD) Disabled (DSB) Designated (DESG) Root (ROOT) Alternate (ALTN) Backup (BKUP) Master (MAST) Unknown (UNK) (16 ) MAC ID AUTO P2P SHARED Information Commands 32

33 Common Internal Spanning Tree information Common Internal Spanning Tree (CIST) show spanning-tree mstp cist information Mstp Digest: 0xac36177f50283cd4b83821d8ab26de62 Common Internal Spanning Tree: VLANs: Current Root: Path-Cost Port MaxAge FwdDel :03:42:fa:3b: CIST Regional Root: Path-Cost :03:42:fa:3b:80 11 Parameters: Priority MaxAge FwdDel Hops Port Prio Cost State Role Designated Bridge Des Port Hello Type FWD DESG :03:42:fa:3b: P2P, Edge FWD DESG :03:42:fa:3b: DSB DSB DSB DSB DSB DSB DSB DSB FWD DESG :03:42:fa:3b: DSB CIST CIST upfast (Uplink Fast) CIST CIST CIST Information Commands 33

34 CIST 24 CIST CIST Root CIST Regional Root Priority (bridge) MaxAge FwdDel Hops Priority (port) Cost State Role Designated Bridge Designated Port Hello Type CIST CIST MSTP Max Age ( ) Forward Delay ( ) 1 (0) Discarding (DISC) Learning (LRN) Forwarding (FWD) Disabled (DSB) Designated (DESG) Root (ROOT) Alternate (ALTN) Backup (BKUP) Master (MAST) Unknown (UNK) (16 ) MAC ID BPDU ( ) AUTO P2P SHARED Trunk group information show portchannel information Trunk group 1, Enabled port state: 17: STG 1 forwarding 18: STG 1 forwarding Information Commands 34

35 VLAN information VLAN information 25 VLAN show vlan show vlan information VLAN STP VLAN VLAN show vlan information VLAN Name Status Ports Default VLAN ena pc03p ena 2 7 pc07f ena 7 11 pc04u ena ena ena ena ena k-1 ena k-3 ena k-4 ena pc07z ena redlan ena ixiatraffic ena bpsports ena Mgmt VLAN ena 19 VLAN VLAN VLAN VLAN VLAN Information Commands 35

36 Layer 3 information show ip route show ip information show ip arp show ip ospf information show interface ip [<1-256>] rip show layer3 information show ip igmp groups show ip vrrp information show layer3 Route information show ip route address <IP address> show ip route gateway <IP address> show ip route type {indirect direct local broa dcast martian multicast} show ip route tag {fixed static addr rip ospf broadcast multicast martia n} show ip route interface <1-256> show ip route User EXEC IP User EXEC (ARP) User EXEC OSPF User EXEC RIP User EXEC IP IP IP VLAN IP IP Enable Inet Imask User EXEC IGMP User EXEC VRRP User EXEC Layer 3 information 10K User EXEC IP User EXEC User EXEC User EXEC User EXEC User EXEC Information Commands 36

37 Show all IP Route information VLAN show ip route UserEXEC Status code: * - best Destination Mask Gateway Type Tag Metr If * direct fixed 211 * local addr 211 * broadcast broadcast 211 * direct fixed 12 * local addr 12 * broadcast broadcast 12 * indirect ospf * indirect static 24 * direct fixed 24 * broadcast broadcast 2 * martian martian * multicast addr Type 28 IP Routing Type information indirect Gateway direct local IP broadcast martian multicast Tag 29 IP Routing Tag information fixed static addr IP 1 rip RIP ospf OSPF broadcast multicast martian Information Commands 37

38 ARP information (ARP) IP MAC VLAN ARP 30 ARP show ip arp find <IP address> show ip arp interface <port number> show ip arp vlan <1-4095> show ip arp show ip arp reply IP ARP User EXEC ARP User EXEC VLAN ARP User EXEC ARP IP MAC VLAN IP User EXEC ARP IP IP MAC VLAN User EXEC Show all ARP entry information ARP show ip arp User EXEC IP address Flags MAC address VLAN Port :50:8b:b2:32:cb :0e:7f:25:89:b P 00:0f:6a:ed:46:00 1 Flags 31 ARP Flags P R U IP ARP MAC ARP address list information ARP show ip arp reply User EXEC IP address IP mask MAC address VLAN Flags :70:cf:03:20:04 P :70:cf:03:20: :70:cf:03:20:05 1 ARP Information Commands 38

39 OSPF information OSPF 32 OSPF show ip ospf general-information OSPF User EXEC show ip ospf area information [<0-2>] User EXEC show ip ospf interface [<1-256>] User EXEC show ip ospf area-virtual-link information User EXEC show ip ospf neighbor User EXEC show ip ospf summary-range <0-2> NSSA User EXEC show ip ospf summary-range-nssa <0-2> NSSA User EXEC show ip ospf routes OSPF User EXEC show ip ospf information OSPF User EXEC OSPF general information OSPF show ip ospf general-information User EXEC OSPF Version 2 Router ID: Started at 1663 and the process uptime is 4626 Area Border Router: yes, AS Boundary Router: no LS types supported are 6 External LSA count 0 External LSA checksum sum 0x0 Number of interfaces in this router is 2 Number of virtual links in this router is 1 16 new lsa received and 34 lsa originated from this router Total number of entries in the LSDB 10 Database checksum sum 0x0 Total neighbors are 1, of which 2 are >=INIT state, 2 are >=EXCH state, 2 are =FULL state Number of areas is 2, of which 3-transit 0-nssa Area Id : Authentication : none Import ASExtern : yes Number of times SPF ran : 8 Area Border Router count : 2 AS Boundary Router count : 0 LSA count : 5 LSA Checksum sum : 0x2237B Summary : no Summary Information Commands 39

40 OSPF interface information OSPF show ip ospf interface [<1-256>] User EXEC Ip Address , Area , Admin Status UP Router ID , State DR, Priority 1 Designated Router (ID) , Ip Address Backup Designated Router (ID) , Ip Address Timer intervals, Hello 10, Dead 40, Wait 1663, Retransmit 5, Transit delay 1 Neighbor count is 1 If Events 4, Authentication type none OSPF Database information OSPF Database information 33 OSPF Database information show ip ospf database advertising-router <router ID> show ip ospf database asbrsummary [advertising-router <router ID> link-state-id <A.B.C.D> self] show ip ospf database databasesummary show ip ospf database external [advertising-router <router ID> link-state-id <A.B.C.D> self] show ip ospf database network [advertising-router <router ID> link-state-id <A.B.C.D> self] show ip ospf database nssa [advertising-router <router ID> link-state-id <A.B.C.D> self] show ip ospf database router [advertising-router <router ID> link-state-id <A.B.C.D> self] show ip ospf database self ID LSDB Link State Advertisement (LSA) User EXEC ASBR LSA a. show ip ospf database asbr-summary advertisingrouter advertiseing router LSA b. show ip ospf database asbr-summary link-state-id link state ID LSA c. show ip ospf database asbr-summary self ASBR LSA d. ASBR LSA User EXEC LSDB a. LSA b. LSA c. LSA LSA d. LSA LSA User EXEC AS-external (type 5) LSA User EXEC network (type 2) LSA User EXEC NSSA (type 7) LSA User EXEC route (type 1) LSA User EXEC LSA User EXEC Information Commands 40

41 33 OSPF Database information show ip ospf database summary [advertising-router <router ID> linkstate-id <A.B.C.D> self] show ip ospf database network summary (type 3) LSA User EXEC LSA User EXEC OSPF router codes information OSPF route show ip ospf routes User EXEC Codes: IA - OSPF inter area, N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 IA /16 via IA /28 via IA /24 via IA /24 via IA /27 via IA /28 via E /32 via E /32 via E /32 via E /32 via E /32 via E /32 via E /32 via E /32 via Information Commands 41

42 Routing Information Protocol Routing Information Protocol (RIP) information 34 RIP information show ip rip routes show ip rip interface [<1-256>] show interface ip [<1-256>]rip RIP User EXEC RIP User EXEC RIP RIP Routes information RIP route show ip rip routes User EXEC >> IP Routing# /info/l3/rip/routes /8 via metric /16 via metric /8 via metric /8 via metric 2 16 RIP RIP user information RIP user show interface ip [<1-256>] rip RIP USER CONFIGURATION : RIP on updat 30 RIP Interface 2 : , enabled version 2, listen enabled, supply enabled, default none poison disabled, trigg enabled, mcast enabled, metric 1 auth none,key none RIP Interface 3 : , enabled version 2, listen enabled, supply enabled, default none poison disabled, trigg enabled, mcast enabled, metric 1 Information Commands 42

43 IP information 3 show layer3 information Interface information: 1: , vlan 1, up Default gateway information: metric strict 1: , up 2: , up IP IP IP IGMP multicast group information IGMP 35 IGMP show ip igmp groups address <IP address> show ip igmp groups vlan <1-4095> show ip igmp groups interface <port number> show ip igmp groups portchannel <1-40> show ip igmp groups IP IGMP User EXEC VLAN IGMP User EXEC IGMP User EXEC IGMP User EXEC User EXEC IGMP multicast router port information IGMP 36 IGMP show ip igmp mrouter vlan <1-4095> show ip igmp mrouter information VLAN User EXEC User EXEC Information Commands 43

44 VRRP information Virtual Router Redundancy Protocol (VRRP) LAN VRRP IP ID 1 IP 1 IP show ip vrrp information VRRP information: 1: vrid 2, , if 1, renter, prio 100, master, server 2: vrid 1, , if 1, renter, prio 100, backup 3: vrid 3, , if 1, renter, prio 100, master, proxy VRRP ID IP Owner IP IP owner Renter owner prio master backup init 255 IP server server proxy proxy IP IP IP IP Information Commands 44

45 802.1p information 802.1p show qos transmit-queue information Current priority to COS queue information: Priority COSq Weight Current port priority information: Port Priority COSq Weight IEEE 802.1p priority to COS queue information p Priority to COS Queue information Priority Cosq Weight 802.1p Class of Service (COS) queue COS queue IEEE 802.1p port priority information p Port Priority information Port Priority Cosq Weight 802.1p Class of Service (COS) queue Information Commands 45

46 ACL information Access Control Lists and Groups 39 ACL information show access-control list <1-762> show access-control group <1-762> show access-control Access Control List show access-control Current ACL information: Filter 1 profile: Ethernet - VID : 1/0xfff Actions : Set COS to 0 Filter 2 profile: Ethernet - VID : 1/0xfff Actions : Permit No ACL groups configured. ACL User EXEC ACL Group User EXEC ACL Access Control List (ACL) information Access Control List ACL ACL Group Information Commands 46

47 RMON information RMON show rmon RMON history information RMON history information show rmon history RMON History group configuration: Index IFOID Interval Rbnum Gbnum RMON history information 40 RMON history information Index IFOID Interval Rbnum Gbnum history MIB OID RMON alarm information RMON show rmon alarm Information Commands 47

48 RMON Alarm group configuration: Index Interval Type rlimit flimit revtidx fevtidx last value abs abs abs abs abs abs abs abs abs abs abs Index OID RMON alarm information 41 RMON alarm information Index Interval Type rlimit flimit revtidx fevtidx Last value OID abs delta MIB OID Information Commands 48

49 RMON event information RMON show rmon event RMON Event group configuration: Index Type Last Sent Description both 0D: 0H: 1M:20S Event_1 2 none 0D: 0H: 0M: 0S Event_2 3 log 0D: 0H: 0M: 0S Event_3 4 trap 0D: 0H: 0M: 0S Event_4 5 both 0D: 0H: 0M: 0S Log and trap event for Link Down 10 both 0D: 0H: 0M: 0S Log and trap event for Link Up 11 both 0D: 0H: 0M: 0S Send log and trap for icmpinmsg 15 both 0D: 0H: 0M: 0S Send log and trap for icmpinechos 100 both 0D: 0H: 0M: 0S Event_100 RMON 42 RMON Index Type Last Sent Description None log trap both Information Commands 49

50 Link status information show interface link User EXEC Port Speed Duplex Flow Ctrl Link TX-----RX any yes yes down any yes yes down full yes yes down full yes yes down any yes yes down any yes yes down any yes yes down full yes yes up full yes yes down full yes yes down any yes yes down any yes yes down any yes yes down any yes yes down any yes yes down any yes yes down full yes yes up full yes yes up full yes yes up full yes yes down full yes yes down full no yes down 23 any any yes yes down 24 any any yes yes down 10Mb/s 100Mb/s 1000Mb/s any half full any no yes any up down Information Commands 50

51 Port information show interface information User EXEC Port Tag RMON PVID NAME VLAN(s) n d 1 Downlink1 1 2 n d 1 Downlink2 1 3 n d 1 Downlink3 1 4 n d 1 Downlink4 1 5 n d 1 Downlink5 1 6 n d 1 Downlink6 1 7 n d 1 Downlink7 1 8 n d 1 Downlink8 1 9 n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Downlink n d 1 Xconnect n d 1 Xconnect n d 4095 Mgmt n d 1 Uplink n d 1 Uplink n d 1 Uplink n d 1 Uplink n d 1 Uplink5 1 VLAN y n RMON e d VLAN ID (PVID) VLAN Information Commands 51

52 Logiral Port to GEA Port mapping GEA show geaport Logical Port GEA Port(0-based) GEA Unit GEA Information Commands 52

53 Uplink Failure Detection information UFD (Uplink Failure Detection) show ufd User EXEC Uplink Failure Detection 1: Enabled LtM status: Down Member STG STG State Link Status port 24 down 1 DISABLED 10 DISABLED * 15 DISABLED * * = STP turned off for this port. LtD status: Auto Disabled Member Link Status port 1 disabled port 2 disabled port 3 disabled port 4 disabled Uplink Failure Detection 2: Disabled Uplink Failure Detection 3: Disabled Uplink Failure Detection 4: Disabled UFD (Uplink Failure Detection) UFD enabled disabled LtM LtM LtD Information dump show information-dump 10K Information Commands 53

54 Statistics commands ISCLI 43 show layer3 counters show snmp-server counters show ntp counters clear ntp show ufd counters show counters 3 SNMP NTP clear NTP User EXEC UFD Port Statistics 44 show interface gigabitethernet <port number> dot1x counters show interface gigabitethernet <port number> bridging-counters show interface gigabitethernet <port number> ethernet-counters show interface gigabitethernet <port number> interface-counters show interface gigabitethernet <port number> ip-counters show interface gigabitethernet <port number> link-counters 802.1x ( dot1 ) ( dot3 ) Statistics commands 54

55 802.1x statistics 802.1x authenticator show interface gigabitethernet <port number> dot1x counters Authenticator Statistics: eapolframesrx = 0 eapolframestx = 0 eapolstartframesrx = 0 eapollogoffframesrx = 0 eapolrespidframesrx = 0 eapolrespframesrx = 0 eapolreqidframestx = 0 eapolreqframestx = 0 invalideapolframesrx = 0 eaplengtherrorframesrx = 0 lasteapolframeversion = 0 lasteapolframesource = 00:00:00:00:00:00 Authenticator Diagnostics: authentersconnecting = 0 autheaplogoffswhileconnecting = 0 authentersauthenticating = 0 authsuccesseswhileauthenticating = 0 authtimeoutswhileauthenticating = 0 authfailwhileauthenticating = 0 authreauthswhileauthenticating = 0 autheapstartswhileauthenticating = 0 autheaplogoffwhileauthenticating = 0 authreauthswhileauthenticated = 0 autheapstartswhileauthenticated = 0 autheaplogoffwhileauthenticated = 0 backendresponses = 0 backendaccesschallenges = 0 backendotherrequeststosupplicant = 0 backendnonnakresponsesfromsupplicant = 0 backendauthsuccesses = 0 backendauthfails = x x Authenticator Diagnostics authentersconnecting autheaplogoffswhileconnecting authentersauthenticating authsuccesseswhile Authenticating authtimeoutswhileauthenticating authfailwhileauthenticating authreauthswhileauthenticating autheapstartswhileauthenticating autheaplogoffwhileauthenticating CONNECTING EAPOL-Logoff CONNECTING DISCONNECTED EAP-Response/Identity CONNECTING AUTHENTICATING AUTHENTICATING AUTHENTICATED AUTHENTICATING ABORTING AUTHENTICATING HELD AUTHENTICATING ABORTING EAPOL-Start AUTHENTICATING ABORTING EAPOL-Logoff AUTHENTICATING ABORTING Statistics commands 55

56 x authreauthswhileauthenticated autheapstartswhileauthenticated autheaplogoffwhileauthenticated backendresponses backendaccesschallenges backendotherrequeststosupplicant backendnonnakresponsesfrom Supplicant backendauthsuccesses backendauthfails AUTHENTICATED CONNECTING EAPOL-Start AUTENTICATED CONNECTING EAPOL-Logoff AUTHENTICATED DISCONNECTED Access-Request AccessChallenge EAP-Request (Identity, Notification, Failure, Success ) EAP-Request EAP-NAK Accept Reject Bridging statistics show interface gigabitethernet <port number> bridging-counters Bridging statistics for port 1: dot1portinframes: dot1portoutframes: dot1portindiscards: 0 dot1tplearnedentrydiscards: 0 dot1stpportforwardtransitions: 0 46 dot1portinframes dot1portoutframes dot1portindiscards dot1tplearnedentrydiscards dot1stpportforwardtransition s FDB FDB FDB Statistics commands 56

57 Ethernet statistics show interface gigabitethernet <port number> ethernet-counters Ethernet statistics for port 1: dot3statsalignmenterrors: 0 dot3statsfcserrors: 0 dot3statssinglecollisionframes: 0 dot3statsmultiplecollisionframes: 0 dot3statslatecollisions: 0 dot3statsexcessivecollisions: 0 dot3statsinternalmactransmiterrors: NA dot3statsframetoolongs: 0 dot3statsinternalmacreceiveerrors: 0 47 dot3statsalignmenterrors dot3statsfcserrors dot3statssinglecollisionframes dot3statsmultiplecollisionframes dot3statslatecollisions dot3statsexcessivecollisions 8 (FCS) MAC (LLC) IEEE LLC 8 (FCS) MAC LLC IEEE LLC ifoutucastpkts ifoutmulticastpkts ifoutbroadcastpkts dot3statsmultiplecollisionframe ifoutucastpkts ifoutmulticastpkts ifoutbroadcastpkts dot3statssinglecollisionframes M 51.2µsec Statistics commands 57

58 47 dot3statsinternalmactransmiterrors dot3statsframetoolongs dot3statsinternalmacreceiveerrors MAC dot3statslatecollisions dot3statsexcessivecollisions dot3statscarriersenseerrors MAC LLC frametoolong IEEE LLC MAC dot3statsframetoolongs dot3statsalignmenterrors dot3statsfcserrors Interface statistics show interface gigabitethernet <port number> interface-counters Interface statistics for port 1: ifhcin Counters ifhcout Counters Octets: UcastPkts: BroadcastPkts: MulticastPkts: 0 0 Discards: 0 0 Errors: Octets IfHCIn UcastPkts IfHCIn BroadcastPkts IfHCIn MulticastPkts IfHCIn Discards IfHCIn Errors IfHCIn Octets IfHCOut UcastPkts IfHCOut BroadcastPkts IfHCOut MulticastPkts IfHCOut Discards IfHCOut Errors IfHCOut Statistics commands 58

59 Internet Protocol (IP) statistics show interface gigabitethernet <port number> ip-counters GEA IP statistics for port 1: ipinreceives : 0 ipinheadererror: 0 ipindiscards : 0 IP 49 IP ipinreceives ipinheadererror ipindiscards IP IP IP IP Link statistics show interface gigabitethernet <port number> link-counters Link statistics for port 1: linkstatechange: 2 50 linkstatechange Statistics commands 59

60 Layer 2 statistics show mac-address-table counters show interface gigabitethernet <port number> lacp counters FDB Link Aggregation Control Protocol (LACP) FDB statistics FDB show mac-address-table counters FDB statistics: current: 91 hiwat: 91 FDB FDB 52 FDB current hiwat FDB FDB LACP statistics Link Aggregation Control Protocol (LACP) show interface gigabitethernet <port number> lacp counters Valid LACPDUs received - 0 Valid Marker PDUs received - 0 Valid Marker Rsp PDUs received - 0 Unknown version/tlv type - 0 Illegal subtype received - 0 LACPDUs transmitted - 0 Marker PDUs transmitted - 0 Marker Rsp PDUs transmitted - 0 Statistics commands 60

61 Layer 3 statistics show ip counters clear ip counters show ip route counters show ip arp counters show ip dns counters show ip icmp counters show ip tcp counters show ip udp counters show ip igmp counters clear ip igmp vlan [<1-4095>] counters show ip ospf counters show ip vrrp counters show ip rip counters show ip gea show layer3 counters IP User EXEC IP IP User EXEC User EXEC ARP User EXEC DNS User EXEC ICMP User EXEC TCP User EXEC UDP clear UDP User EXEC IGMP User EXEC VLAN IGMP Priv EXEC OSPF Priv EXEC (vrrpinadvers) (vrrpoutadvers) (vrrpbadadvers Priv EXEC Routing information Protocol (RIP) Priv EXEC GEA Priv EXEC 3 User EXEC Statistics commands 61

62 IP statistics IP show ip counters User EXEC IP statistics: ipinreceives: ipinhdrerrors: 0 ipinaddrerrors: 905 ipinunknownprotos: 0 ipindiscards: 0 ipindelivers: 4103 ipoutrequests: ipoutdiscards: 0 ipdefaultttl: 255 IP 54 IP ipinreceives ipinhdrerrors ipinaddrerrors ipinunknownprotos ipindiscards ipindelivers ipoutrequests ipoutdiscards ipdefaultttl IP IP IP IP E IP IP IP IP ICMP IP ipforwdatagrams IP IP ipforwdatagrams TTL IP Time-To-Live (TTL) Route statistics show ip route counters User EXEC Route statistics: iproutescur: 7 iprouteshighwater: 7 iproutesmax: iproutescur iproutesmax iprouteshighwater Statistics commands 62

63 ARP statistics ARP show ip arp counters User EXEC ARP statistics: arpentriescur: 2 arpentrieshighwater: 4 ARP 56 ARP arpentriescur arpentrieshighwater ARP ARP ARP ARP DNS statistics DNS show ip dns counters User EXEC DNS statistics: dnsinrequests: 0 dnsoutrequests: 0 dnsbadrequests: 0 DNS 57 DNS dnsinrequests dnsoutrequests dnsbadrequests DNS DNS DNS Statistics commands 63

64 ICMP statistics ICMP show ip icmp counters User EXEC ICMP statistics: icmpinmsgs: icmpinerrors: 1393 icmpindestunreachs: 41 icmpintimeexcds: 0 icmpinparmprobs: 0 icmpinsrcquenchs: 0 icmpinredirects: 0 icmpinechos: 18 icmpinechoreps: icmpintimestamps: 0 icmpintimestampreps: 0 icmpinaddrmasks: 0 icmpinaddrmaskreps: 0 icmpoutmsgs: icmpouterrors: 0 icmpoutdestunreachs: 15 icmpouttimeexcds: 0 icmpoutparmprobs: 0 icmpoutsrcquenchs: 0 icmpoutredirects: 0 icmpoutechos: icmpoutechoreps: 18 icmpouttimestamps: 0 icmpouttimestampreps: 0 icmpoutaddrmasks: 0 icmpoutaddrmaskreps: 0 ICMP 58 ICMP icmpinmsgs icmpinerrors icmpindestunreachs icmpintimeexcds icmpinparmprobs icmpinsrcquenchs icmpinredirects icmpinechos icmpinechoreps icmpintimestamps icmpintimestampreps icmpinaddrmasks icmpinaddrmaskreps icmpoutmsgs icmpouterrors icmpoutdestunreachs icmpouttimeexcds icmpoutparmprobs icmpoutsrcquenchs icmpoutredirects icmpoutechos icmpoutechoreps icmpouttimestamps icmpouttimestampreps icmpoutaddrmasks icmpoutaddrmaskreps ICMP icmpinerrors ICMP ICMP iength ICMP ICMP Destination Unreachable ICMP Time Exceeded ICMP Parameter Problem ICMP Source Quench ICMP Redirect ICMP Echo (request) ICMP Echo Reply ICMP Timestamp (request) ICMP Timestamp reply ICMP Address Mask Request ICMP Address Mask Reply ICMP icmpouterrors ICMP ICMP ICMP Destination Unreachable ICMP Time Exceeded ICMP Parameter Problem ICMP Source Quench ICMP Redirect Redirect ICMP Echo (request) ICMP Echo Reply ICMP Timestamp (request) ICMP Timestamp reply ICMP Address Mask Request ICMP Address Mask Reply Statistics commands 64