Intel Switch SBCEGBESW10 CLI User Manual

Intel® Blade Server Ethernet Switch  
Modules SBCEGBESW1 and  
SBCEGBESW10 CLI Guide  
A Guide for System Administrators of Intel® Server Products  
Intel Order Number D67145-002  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Safety Information  
Important Safety Instructions  
Read all caution and safety statements in this document before performing any of the  
instructions.  
Wichtige Sicherheitshinweise  
Lesen Sie zunächst sämtliche Warnund Sicherheitshinweise in diesem Dokument, bevor  
Sie eine der Anweisungen ausführen.  
Consignes de sécurité  
Lisez attention toutes les consignes de sécurité et les mises en garde indiquées dans ce  
document avant de suivre toute instruction.  
Instrucciones de seguridad importantes  
Lea todas las declaraciones de seguridad y precaución de este documento antes de realizar  
cualquiera de las instrucciones.  
重要安全指导  
在执行任何指令之前,请阅读本文档中的所有注意事项及安全声明。 和/或  
http://support.intel.com/support/motherboards/server/sb/CS-010770.htm 上的 Intel  
Server Boards and Server Chassis Safety Information(《Intel  
服务器主板与服务器机箱安全信息》)。  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
iii  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Warnings  
Heed safety instructions: Before working with your server product, whether you are  
using this guide or any other resource as a reference, pay close attention to the safety  
instructions. You must adhere to the assembly instructions in this guide to ensure and  
maintain compliance with existing product certifications and approvals. Use only the  
described, regulated components specified in this guide. Use of other products /  
components will void the UL listing and other regulatory approvals of the product and  
will most likely result in noncompliance with product regulations in the region(s) in which  
the product is sold.  
System power on/off: The power button DOES NOT turn off the system AC power. To  
remove power from system, you must unplug the AC power cord from the wall outlet.  
Make sure the AC power cord is unplugged before you open the chassis, add, or remove  
any components.  
Hazardous conditions, devices and cables: Hazardous electrical conditions may be  
present on power, telephone, and communication cables. Turn off the server and  
disconnect the power cord, telecommunications systems, networks, and modems attached  
to the server before opening it. Otherwise, personal injury or equipment damage can  
result.  
Electrostatic discharge (ESD) and ESD protection: ESD can damage disk drives,  
boards, and other parts. We recommend that you perform all procedures in this chapter  
only at an ESD workstation. If one is not available, provide some ESD protection by  
wearing an antistatic wrist strap attached to chassis ground any unpainted metal surface on  
your server when handling parts.  
iv  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Preface  
About this Manual  
Thank you for purchasing and using an Intel® Blade Server Ethernet Switch Module  
SBCEGBESW1 or SBCEGBESW10.  
This manual is written for System Administrators who have knowledge of device  
management through Command Line Interface (CLI) commands.This document provides  
the basic rules for understanding how the commands are presented in this guide. The  
Guide also provides command by command information of all available CLI commands,  
inclusive of the command description, command syntax, any parameters, other relevant  
command information, and a basic example. For the latest version of this manual, see  
http://support.intel.com.  
Manual Organization  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
v
Download from Www.Somanuals.com. All Manuals Search And Download.  
Contents  
Important Safety Instructions ................................................................................................ iii  
Wichtige Sicherheitshinweise ............................................................................................... iii  
Consignes de sécurité .......................................................................................................... iii  
Instrucciones de seguridad importantes ............................................................................... iii  
Warnings ............................................................................................................................... iv  
About this Manual .................................................................................................................. v  
Manual Organization .............................................................................................................. v  
Chapter 1: Using CLI ..................................................................................................1  
Overview ................................................................................................................................1  
Chapter 2: AAA Commands ......................................................................................9  
aaa authentication login .........................................................................................................9  
aaa authentication enable ....................................................................................................10  
login authentication ..............................................................................................................11  
enable authentication ...........................................................................................................12  
ip http authentication ............................................................................................................13  
ip https authentication ..........................................................................................................14  
show authentication methods ..............................................................................................15  
password .............................................................................................................................16  
enable password ..................................................................................................................17  
username .............................................................................................................................18  
Chapter 3: Address Table Commands ...................................................................21  
bridge address .....................................................................................................................21  
bridge multicast filtering .......................................................................................................22  
bridge multicast address ......................................................................................................23  
bridge multicast forbidden address ......................................................................................24  
bridge multicast forward-all ..................................................................................................25  
bridge multicast forbidden forward-all ..................................................................................26  
bridge aging-time .................................................................................................................27  
clear bridge ..........................................................................................................................28  
port security .........................................................................................................................28  
port security mode ...............................................................................................................29  
port security routed secure-address ....................................................................................30  
show bridge address-table ...................................................................................................31  
show bridge address-table static .........................................................................................32  
show bridge address-table count .........................................................................................33  
show bridge multicast address-table ...................................................................................34  
show bridge multicast filtering ..............................................................................................36  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
vii  
Download from Www.Somanuals.com. All Manuals Search And Download.  
show ports security .............................................................................................................. 37  
show ports security addresses ............................................................................................ 38  
Chapter 4: ACL Commands .....................................................................................41  
ip access-list ........................................................................................................................ 41  
permit (ip) ............................................................................................................................ 42  
deny (IP) .............................................................................................................................. 44  
mac access-list .................................................................................................................... 46  
permit (MAC) ....................................................................................................................... 47  
deny (MAC) ......................................................................................................................... 48  
service-acl ........................................................................................................................... 50  
show access-lists ................................................................................................................ 50  
show interfaces access-lists ................................................................................................ 51  
Chapter 5: Clock Commands ...................................................................................53  
clock set .............................................................................................................................. 53  
clock source ........................................................................................................................ 54  
clock timezone ..................................................................................................................... 54  
clock summer-time .............................................................................................................. 55  
sntp authentication-key ....................................................................................................... 57  
sntp authenticate ................................................................................................................. 58  
sntp trusted-key ................................................................................................................... 59  
sntp client poll timer ............................................................................................................. 59  
sntp broadcast client enable ................................................................................................ 60  
sntp anycast client enable ................................................................................................... 61  
sntp client enable (Interface) ............................................................................................... 62  
sntp unicast client enable .................................................................................................... 63  
sntp unicast client poll ......................................................................................................... 63  
sntp server ........................................................................................................................... 64  
show clock ........................................................................................................................... 65  
show sntp configuration ....................................................................................................... 66  
show sntp status .................................................................................................................. 67  
Chapter 6: Configuration and Image File Commands ...........................................69  
copy ..................................................................................................................................... 69  
delete ................................................................................................................................... 71  
boot system ......................................................................................................................... 72  
show running-config ............................................................................................................ 73  
show startup-config ............................................................................................................. 74  
show backup-config ............................................................................................................. 75  
show bootvar ....................................................................................................................... 76  
Chapter 7: Ethernet Configuration Commands .....................................................79  
interface ethernet ................................................................................................................ 79  
interface range ethernet ...................................................................................................... 79  
viii  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
shutdown .............................................................................................................................80  
description ...........................................................................................................................81  
speed ...................................................................................................................................82  
duplex ..................................................................................................................................83  
negotiation ...........................................................................................................................84  
flowcontrol ............................................................................................................................85  
mdix .....................................................................................................................................86  
back-pressure ......................................................................................................................87  
port jumbo-frame .................................................................................................................87  
clear counters ......................................................................................................................88  
set interface active ...............................................................................................................89  
show interfaces advertise ....................................................................................................90  
show interfaces configuration ..............................................................................................91  
show interfaces status .........................................................................................................92  
show interfaces description .................................................................................................93  
show interfaces counters .....................................................................................................94  
show ports jumbo-frame ......................................................................................................97  
port storm-control include-multicast (GC) ............................................................................98  
port storm-control include-multicast (IC) ..............................................................................98  
port storm-control broadcast enable ....................................................................................99  
port storm-control broadcast rate .......................................................................................100  
show ports storm-control ...................................................................................................101  
Chapter 8: GVRP Commands ................................................................................103  
gvrp enable (Global) ..........................................................................................................103  
gvrp enable (Interface) .......................................................................................................103  
garp timer ...........................................................................................................................104  
gvrp vlan-creation-forbid ....................................................................................................105  
gvrp registration-forbid .......................................................................................................106  
clear gvrp statistics ............................................................................................................107  
show gvrp configuration .....................................................................................................108  
show gvrp statistics ............................................................................................................109  
show gvrp error-statistics ...................................................................................................110  
Chapter 9: IGMP Snooping Commands ...............................................................111  
ip igmp snooping (Global) ..................................................................................................111  
ip igmp snooping (Interface) ..............................................................................................111  
ip igmp snooping mrouter learn-pim-dvmrp .......................................................................112  
ip igmp snooping host-time-out ..........................................................................................113  
ip igmp snooping mrouter-time-out ....................................................................................114  
ip igmp snooping leave-time-out ........................................................................................115  
show ip igmp snooping mrouter .........................................................................................116  
show ip igmp snooping interface .......................................................................................117  
show ip igmp snooping groups ..........................................................................................118  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
ix  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Chapter 10: IP Address Commands ......................................................................121  
ip address .......................................................................................................................... 121  
ip address dhcp ................................................................................................................. 122  
ip default-gateway ............................................................................................................. 123  
show ip interface ............................................................................................................... 124  
arp ................................................................................................................................... 125  
arp timeout ........................................................................................................................ 126  
clear arp-cache .................................................................................................................. 127  
show arp ............................................................................................................................ 127  
ip domain-lookup ............................................................................................................... 128  
ip domain-name ................................................................................................................. 129  
ip name-server .................................................................................................................. 130  
ip host ................................................................................................................................ 131  
clear host ........................................................................................................................... 131  
clear host dhcp .................................................................................................................. 132  
show hosts ........................................................................................................................ 133  
Chapter 11: LACP Commands ...............................................................................135  
lacp system-priority ........................................................................................................... 135  
lacp port-priority ................................................................................................................. 135  
lacp timeout ....................................................................................................................... 136  
show lacp ethernet ............................................................................................................ 137  
show lacp port-channel ..................................................................................................... 139  
Chapter 12: Line Commands .................................................................................141  
Line ................................................................................................................................... 141  
show line ........................................................................................................................... 141  
Chapter 13: Management ACL Commands ..........................................................145  
management access-list .................................................................................................... 145  
Chapter 14: PHY Diagnostics Commands ............................................................153  
test copper-port tdr ............................................................................................................ 153  
show copper-ports tdr ........................................................................................................ 154  
show copper-ports cable-length ........................................................................................ 155  
................................................................................................................................... 155  
Chapter 15: Port Channel Commands ..................................................................157  
................................................................................................................................... 157  
interface port-channel ........................................................................................................ 157  
interface range port-channel ............................................................................................. 158  
channel-group ................................................................................................................... 158  
show interfaces port-channel ............................................................................................ 159  
Chapter 16: Port Monitor Commands ...................................................................161  
port monitor vlan-tagging ................................................................................................... 162  
x
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
show ports monitor ............................................................................................................163  
Chapter 17: QoS Commands .................................................................................165  
qos ....................................................................................................................................165  
show qos ............................................................................................................................166  
show qos aggregate-policer ...............................................................................................166  
show qos interface .............................................................................................................167  
show qos map ....................................................................................................................169  
class-map ..........................................................................................................................170  
show class-map .................................................................................................................171  
match .................................................................................................................................172  
policy-map .........................................................................................................................173  
class ...................................................................................................................................174  
show policy-map ................................................................................................................175  
trust cos-dscp ....................................................................................................................176  
set ....................................................................................................................................177  
police .................................................................................................................................178  
service-policy .....................................................................................................................179  
qos aggregate-policer ........................................................................................................180  
show qos aggregate-policer ...............................................................................................181  
police aggregate ................................................................................................................182  
wrr-queue cos-map ............................................................................................................183  
wrr-queue bandwidth .........................................................................................................184  
priority-queue out num-of-queues ......................................................................................185  
traffic-shape .......................................................................................................................186  
show qos interface .............................................................................................................187  
qos wrr-queue threshold ....................................................................................................189  
qos map policed-dscp ........................................................................................................190  
qos map dscp-queue .........................................................................................................191  
qos trust (Global) ...............................................................................................................192  
qos trust (Interface) ............................................................................................................193  
qos cos ..............................................................................................................................194  
qos dscp-mutation .............................................................................................................195  
qos map dscp-mutation .....................................................................................................196  
Chapter 18: RMON Commands .............................................................................199  
show rmon statistics ..........................................................................................................199  
rmon collection history .......................................................................................................201  
show rmon collection history ..............................................................................................202  
show rmon history ..............................................................................................................203  
rmon alarm .........................................................................................................................206  
show rmon alarm-table ......................................................................................................208  
show rmon alarm ...............................................................................................................209  
rmon event .........................................................................................................................210  
show rmon events ..............................................................................................................211  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
xi  
Download from Www.Somanuals.com. All Manuals Search And Download.  
show rmon log ................................................................................................................... 212  
rmon table-size .................................................................................................................. 214  
Chapter 19: RADIUS Commands ...........................................................................215  
radius-server host .............................................................................................................. 215  
radius-server key ............................................................................................................... 216  
radius-server retransmit .................................................................................................... 217  
radius-server source-ip ...................................................................................................... 218  
radius-server timeout ......................................................................................................... 219  
radius-server deadtime ...................................................................................................... 220  
show radius-servers .......................................................................................................... 220  
Chapter 20: Web Server Commands .....................................................................223  
ip http server ...................................................................................................................... 223  
ip http port ......................................................................................................................... 223  
ip http exec-timeout ........................................................................................................... 224  
ip https server .................................................................................................................... 225  
ip https port ........................................................................................................................ 226  
ip https exec-timeout ......................................................................................................... 226  
crypto certificate generate ................................................................................................. 227  
crypto certificate request ................................................................................................... 228  
crypto certificate import ..................................................................................................... 230  
ip https certificate .............................................................................................................. 231  
show crypto certificate mycertificate .................................................................................. 232  
show ip http ....................................................................................................................... 233  
show ip https ..................................................................................................................... 234  
Chapter 21: SNMP Commands ..............................................................................237  
snmp-server community .................................................................................................... 237  
snmp-server view .............................................................................................................. 238  
snmp-server group ............................................................................................................ 239  
snmp-server user .............................................................................................................. 241  
snmp-server engineID local ............................................................................................... 242  
snmp-server enable traps .................................................................................................. 244  
snmp-server filter ............................................................................................................... 245  
snmp-server host ............................................................................................................... 246  
snmp-server v3-host .......................................................................................................... 247  
snmp-server trap authentication ........................................................................................ 248  
snmp-server contact .......................................................................................................... 249  
snmp-server location ......................................................................................................... 250  
snmp-server set ................................................................................................................. 251  
show snmp ........................................................................................................................ 252  
show snmp engineid .......................................................................................................... 253  
show snmp views .............................................................................................................. 254  
show snmp groups ............................................................................................................ 255  
xii  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
show snmp filters ...............................................................................................................256  
show snmp users ...............................................................................................................257  
Chapter 22: Spanning-Tree Commands ...............................................................259  
spanning-tree .....................................................................................................................259  
spanning-tree mode ...........................................................................................................259  
spanning-tree forward-time ................................................................................................260  
spanning-tree max-age ......................................................................................................262  
spanning-tree priority .........................................................................................................263  
spanning-tree disable ........................................................................................................264  
spanning-tree cost .............................................................................................................264  
spanning-tree port-priority ..................................................................................................265  
spanning-tree portfast ........................................................................................................266  
spanning-tree link-type ......................................................................................................267  
spanning-tree pathcost method .........................................................................................268  
spanning-tree bpdu ............................................................................................................269  
clear spanning-tree detected-protocols .............................................................................270  
spanning-tree mst priority ..................................................................................................270  
spanning-tree mst max-hops .............................................................................................271  
spanning-tree mst port-priority ...........................................................................................272  
spanning-tree mst cost ......................................................................................................273  
spanning-tree mst configuration ........................................................................................274  
instance (mst) ....................................................................................................................275  
name (mst) .........................................................................................................................276  
revision (mst) .....................................................................................................................276  
show (mst) .........................................................................................................................277  
exit (mst) ............................................................................................................................278  
abort (mst) .........................................................................................................................279  
spanning-tree guard root ...................................................................................................279  
show spanning-tree ...........................................................................................................280  
Chapter 23: SSH Commands .................................................................................295  
ip ssh port ..........................................................................................................................295  
ip ssh server ......................................................................................................................295  
crypto key generate dsa ....................................................................................................296  
crypto key generate rsa .....................................................................................................297  
ip ssh pubkey-auth .............................................................................................................298  
crypto key pubkey-chain ssh .............................................................................................299  
user-key .............................................................................................................................300  
key-string ...........................................................................................................................301  
show ip ssh ........................................................................................................................302  
show crypto key mypubkey ................................................................................................303  
show crypto key pubkey-chain ssh ....................................................................................304  
Chapter 24: Syslog Commands ............................................................................307  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
xiii  
Download from Www.Somanuals.com. All Manuals Search And Download.  
logging on .......................................................................................................................... 307  
logging ............................................................................................................................... 308  
logging buffered ................................................................................................................. 309  
logging buffered size ......................................................................................................... 310  
clear logging ...................................................................................................................... 310  
logging file ......................................................................................................................... 311  
clear logging file ................................................................................................................ 312  
aaa logging ........................................................................................................................ 313  
file-system logging ............................................................................................................. 313  
management logging ......................................................................................................... 314  
show logging ..................................................................................................................... 315  
show logging file ................................................................................................................ 317  
show syslog-servers .......................................................................................................... 318  
Chapter 25: System Management Commands .....................................................321  
ping ................................................................................................................................... 321  
traceroute .......................................................................................................................... 322  
telnet .................................................................................................................................. 325  
resume .............................................................................................................................. 328  
reload ................................................................................................................................ 328  
hostname ........................................................................................................................... 329  
show users ........................................................................................................................ 330  
show sessions ................................................................................................................... 331  
show system ...................................................................................................................... 332  
show system id .................................................................................................................. 333  
show system flowcontrol ................................................................................................... 334  
show system mode ............................................................................................................ 335  
show version ..................................................................................................................... 335  
service cpu-utilization ........................................................................................................ 336  
show cpu utilization ........................................................................................................... 337  
Chapter 26: TACACS+ Commands .......................................................................339  
tacacs-server host ............................................................................................................. 339  
tacacs-server key .............................................................................................................. 340  
tacacs-server timeout ........................................................................................................ 341  
tacacs-server source-ip ..................................................................................................... 342  
show tacacs ....................................................................................................................... 342  
Chapter 27: User Interface Commands .................................................................345  
enable ................................................................................................................................ 345  
disable ............................................................................................................................... 345  
login ................................................................................................................................... 346  
configure ............................................................................................................................ 347  
exit (Configuration) ............................................................................................................ 348  
exit ................................................................................................................................... 348  
xiv  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
end ....................................................................................................................................349  
help ....................................................................................................................................350  
terminal datadump .............................................................................................................350  
show history .......................................................................................................................351  
show privilege ....................................................................................................................352  
do ....................................................................................................................................353  
Chapter 28: VLAN Commands ..............................................................................355  
vlan database ....................................................................................................................355  
vlan ....................................................................................................................................355  
interface vlan .....................................................................................................................356  
interface range vlan ...........................................................................................................357  
name ..................................................................................................................................358  
switchport protected ...........................................................................................................359  
switchport mode .................................................................................................................360  
switchport access vlan .......................................................................................................360  
switchport trunk allowed vlan .............................................................................................361  
switchport trunk native vlan ...............................................................................................362  
switchport general allowed vlan .........................................................................................363  
switchport general pvid ......................................................................................................364  
switchport general ingress-filtering disable ........................................................................365  
switchport general acceptable-frame-type tagged-only .....................................................366  
switchport forbidden vlan ...................................................................................................366  
ip internal-usage-vlan ........................................................................................................367  
show vlan ...........................................................................................................................368  
show vlan internal usage ...................................................................................................369  
show interfaces switchport .................................................................................................370  
map protocol protocols-group ............................................................................................373  
switchport general map protocols-group vlan ....................................................................374  
map mac macs-group ........................................................................................................375  
switchport general map macs-group vlan ..........................................................................376  
map subnet subnets-group ................................................................................................377  
switchport general map subnets-group vlan ......................................................................377  
show vlan protocols-groups ...............................................................................................378  
show vlan macs-groups .....................................................................................................379  
show vlan subnets-groups .................................................................................................380  
Chapter 29: 802.1x Commands .............................................................................383  
aaa authentication dot1x ....................................................................................................383  
dot1x system-auth-control .................................................................................................384  
dot1x port-control ...............................................................................................................384  
dot1x re-authentication ......................................................................................................386  
dot1x timeout re-authperiod ...............................................................................................386  
dot1x re-authenticate .........................................................................................................387  
dot1x timeout quiet-period .................................................................................................388  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
xv  
Download from Www.Somanuals.com. All Manuals Search And Download.  
dot1x timeout tx-period ...................................................................................................... 389  
dot1x max-req ................................................................................................................... 390  
dot1x timeout supp-timeout ............................................................................................... 391  
dot1x timeout server-timeout ............................................................................................. 392  
show dot1x ........................................................................................................................ 393  
show dot1x users .............................................................................................................. 395  
show dot1x statistics ......................................................................................................... 397  
ADVANCED FEATURES .................................................................................................. 398  
dot1x auth-not-req ............................................................................................................. 398  
dot1x multiple-hosts .......................................................................................................... 399  
dot1x single-host-violation ................................................................................................. 400  
dot1x guest-vlan ................................................................................................................ 401  
dot1x guest-vlan enable .................................................................................................... 402  
show dot1x advanced ........................................................................................................ 403  
Appendix A: Getting Help ......................................................................................405  
World Wide Web ............................................................................................................... 405  
Telephone ......................................................................................................................... 405  
xvi  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
1 Using CLI  
Overview  
This document describes the Command Line Interface (CLI) used to manage the Intel®  
Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10. The  
switches can operate as standalone systems, or can be stacked together in the same  
system.  
Most of the CLI commands are applicable to both switch modules.  
This chapter describes how to start using the CLI and the CLI command editing features.  
CLI Command Modes  
Introduction  
The Command Line Interface (CLI) is divided into different command modes. Each  
command mode has its own set of specific commands. Entering a question mark ? at the  
system prompt (console prompt) displays a list of commands available for that particular  
command mode.  
From each command mode a specific command is used to navigate from one command  
mode to another. The order for mode access is as follows: User EXEC mode, Privileged  
EXEC mode, Global Configuration mode, and Interface Configuration mode.  
When starting a session, the initial mode is the User EXEC mode. Only a limited subset of  
commands are available in User EXEC mode. This task level does not change the  
configuration. To enter the next level, the Privileged EXEC mode, a password is required.  
The Privileged EXEC mode gives access to commands that displays device configuration  
and provides access to the device Configuration mode.  
The Global Configuration mode manages the device configuration on a global level.  
The Interface Configuration mode configures specific interfaces in the device.  
User EXEC Mode  
After logging into the device, the user is automatically in User EXEC command mode  
unless the user is defined as a privileged user. In general, the User EXEC commands allow  
the user to perform basic tests, and list system information.  
The user-level prompt consists of the device host name followed by the angle bracket (>).  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
1
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Using CLI  
The default host name is Console unless it has been changed using the hostname  
Console>  
command in the Global Configuration mode.  
Privileged EXEC Mode  
Privileged access is password protected to prevent unauthorized use because many of the  
Privileged commands set operating system parameters. The password is not displayed on  
the screen and is case sensitive.  
Privileged users enter directly into the Privileged EXEC mode. To enter the Privileged  
EXEC mode from the User EXEC mode, perform the following steps:  
At the prompt enter the enable command and press <Enter>. A password prompt is  
displayed.  
Enter the password and press <Enter>. The password is displayed as *. The Privileged  
EXEC mode prompt is displayed. The Privileged EXEC mode prompt consists of the  
device host name followed by #.  
Console#  
To return from the Privileged EXEC mode to the User EXEC mode, use the disable  
command. The following example illustrates how to access the Privileged EXEC mode  
and return to the User EXEC mode:  
Console> enable  
Enter Password: ******  
Console#  
Console# disable  
Console>  
The exit command is used to return from any mode to the previous mode except when  
returning to the User EXEC mode from the Privileged EXEC mode. For example, the exit  
command is used to return from the Interface Configuration mode to the Global  
Configuration mode.  
Global Configuration Mode  
Global Configuration mode commands apply to features that affect the system as a whole,  
rather than just a specific interface. The configure Privileged EXEC mode command is  
used to enter the Global Configuration mode.  
To enter the Global Configuration mode perform the following steps:  
1. At the Privileged EXEC mode prompt enter the configure command and press  
<Enter>. The Global Configuration mode prompt is displayed. The Global  
2
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
Configuration mode prompt consists of the device host name followed by (config)  
and #.  
2. To return from the Global Configuration mode to the Privileged EXEC mode, the  
user can use one of the following commands:  
exit  
end  
Ctrl+Z  
The following example illustrates how to access the Global Configuration mode and  
return to the Privileged EXEC mode:  
Console#  
Console# configure  
Console(config)# exit  
Console#  
Interface Configuration and Specific Configuration Modes  
Interface Configuration mode commands modify specific interface operations. The  
following are the Interface Configuration modes:  
Line Interface — Contains commands to configure the management connections.  
These include commands such as line timeout settings, etc. The line Global  
Configuration mode command is used to enter the Line Configuration command  
mode.  
VLAN Database — Contains commands to create a VLAN as a whole. The vlan  
database Global Configuration mode command is used to enter the VLAN Database  
Interface Configuration mode.  
Management Access List — Contains commands to define management access-lists.  
The management access-list Global Configuration mode command is used to enter the  
Management Access List Configuration mode.  
Ethernet — Contains commands to manage port configuration. The interface ethernet  
Global Configuration mode command is used to enter the Interface Configuration  
mode to configure an Ethernet type interface.  
Port Channel — Contains commands to configure port-channels, for example,  
assigning ports to a port-channel. Most of these commands are the same as the  
commands in the Ethernet interface mode, and are used to manage the member ports  
as a single entity. The interface port-channel Global Configuration mode command is  
used to enter the Port Channel Interface Configuration mode.  
SSH Public Key-chain — Contains commands to manually specify other device SSH  
public keys. The crypto key pubkey-chain ssh Global Configuration mode command  
is used to enter the SSH Public Key-chain Configuration mode.  
QoS — Contains commands related to service definitions. The qos Global  
Configuration mode command is used to enter the QoS services configuration mode.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
3
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
MAC Access-List — Configures conditions required to allow traffic based on MAC  
addresses. The mac access-list Global Configuration mode command is used to enter  
the MAC access-list configuration mode.  
Starting the CLI  
The device can be managed over a direct connection via a Telnet connection. The device  
is managed by entering command keywords and parameters at the prompt. Using the  
device command-line interface (CLI) is very similar to entering commands on a UNIX  
system.  
If access is via a Telnet connection, ensure that the device has a defined IP address,  
corresponding management access is granted, and the workstation used to access the  
device is connected to the device prior to using CLI commands.  
1. Enter the following commands to begin the configuration procedure:  
Console> enable  
Console# configure  
Console(config)#  
2. Configure the device and enter the necessary commands to complete the required  
tasks.  
3. When finished, exit the session with the exit command.  
When a different user is required to log onto the system, use the login Privileged EXEC  
mode command. This effectively logs off the current user and logs on the new user.  
Editing Features  
Entering Commands  
A CLI command is a series of keywords and arguments. Keywords identify a command,  
and arguments specify configuration parameters. For example, in the command show  
interfaces status ethernet Ext.1, show, interfaces and status are keywords, ethernet is an  
argument that specifies the interface type, and Ext.1 specifies the port.  
To enter commands that require parameters, enter the required parameters after the  
command keyword. For example, to set a password for the administrator, enter:  
Console(config)# username admin password alansmith  
When working with the CLI, the command options are not displayed. The command is not  
selected from a menu, but is manually entered. To see what commands are available in  
each mode or within an Interface Configuration, the CLI does provide a method of  
displaying the available commands, the command syntax requirements and in some  
instances parameters required to complete the command. The standard command to  
request help is ?.  
4
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
There are two instances where help information can be displayed:  
Keyword lookup — The character ? is entered in place of a command. A list of all  
valid commands and corresponding help messages are is displayed.  
Partial keyword lookup — If a command is incomplete and or the character ? is  
entered in place of a parameter. The matched keyword or parameters for this  
command are displayed.  
To assist in using the CLI, there is an assortment of editing features. The following  
features are described:  
Terminal Command Buffer  
Command Completion  
Nomenclature  
Keyboard Shortcuts  
Terminal Command Buffer  
Every time a command is entered in the CLI, it is recorded on an internally managed  
Command History buffer. Commands stored in the buffer are maintained on a First In  
First Out (FIFO) basis. These commands can be recalled, reviewed, modified, and  
reissued. This buffer is not preserved across device resets.  
By default, the history buffer system is enabled, but it can be disabled at any time. For  
information about the command syntax to enable or disable the history buffer, see “show  
There is a standard default number of commands that are stored in the buffer. The standard  
number of 10 commands can be increased to 216. By configuring 0, the effect is the same  
as disabling the history buffer system. For information about the command syntax for  
configuring the command history buffer, see history size.  
To display the history buffer, see “show history”.  
Negating the Effect of Commands  
For many configuration commands, the prefix keyword no can be entered to cancel the  
effect of a command or reset the configuration to the default value. This guide describes  
the negation effect for all applicable commands.  
Command Completion  
If the command entered is incomplete, invalid or has missing or invalid parameters, then  
the appropriate error message is displayed. This assists in entering the correct command.  
By pressing the <Tab> button, an incomplete command is entered. If the characters  
already entered are not enough for the system to identify a single matching command,  
press ? to display the available commands matching the characters already entered.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
5
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
Nomenclature  
When referring to an Ethernet port in a CLI command, the following format is used:  
For an Ethernet port on a standalone device: Ethernet_type port_number  
For an Ethernet port on a stacked device: unit_number/Ethernet_type port number  
The Ethernet type may be Gigabit Ethernet (indicated by “g”).  
For example, g3 stands for Gigabit Ethernet port 3 on a stand-alone device, whereas 1/3  
stands for Gigabit Ethernet port 3 on stacking unit.  
The ports may be described on an individual basis or within a range. Use format port  
number-port number to specify a set of consecutive ports and port number, port number to  
indicates a set of non-consecutive ports. For example, g1-3 stands for Gigabit Ethernet  
ports 1, 2 and 3, and g1,5 stands for Gigabit Ethernet ports 1 and 5.  
Keyboard Shortcuts  
The CLI has a range of keyboard shortcuts to assist in editing the CLI commands. The  
following table describes the CLI shortcuts.  
Keyboard KeyDescription  
The following list provides a description of keyboard shortcuts:  
Up-arrow key — Recalls commands from the history buffer, beginning with the most  
recent command. Repeat the key sequence to recall successively older commands.  
Down-arrow key — Returns the most recent commands from the history buffer after  
recalling commands with the up arrow key. Repeating the key sequence will recall  
successively more recent commands.  
Ctrl+A — Moves the cursor to the beginning of the command line.  
Ctrl+E — Moves the cursor to the end of the command line.  
Ctrl+Z / End — Returns back to the Privileged EXEC mode from any configuration  
mode.  
Backspace key — Deletes one character left to the cursor position.  
6
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
CLI Command Conventions  
When entering commands there are certain command entry standards that apply to all  
commands. The following table describes the command conventions.  
ConventionDescription  
[ ]In a command line, square brackets indicates an optional entry.  
{ }In a command line, curly brackets indicate a selection of compulsory parameters  
separated by the | character. One option must be selected. For example: flowcontrol  
{auto|on|off} means that for the flowcontrol command either auto, on or off must be  
selected.  
Italic fontIndicates a parameter.  
<Enter> Indicates an individual key on the keyboard. For example, <Enter> indicates  
the Enter key.  
Ctrl+F4Any combination keys pressed simultaneously on the keyboard.  
all — When a parameter is required to define a range of ports or parameters and all is  
an option, the default for the command is all when no parameters are defined. For  
example, the command interface range port-channel has the option of either entering a  
range of channels, or selecting all. When the command is entered without a parameter,  
it automatically defaults to all.  
Copying and Pasting Text  
Up to 1000 lines of text (or commands) can be copied and pasted into the device.  
It is the user’s responsibility to ensure that the text copied into the device consists of legal  
commands only.  
This feature is dependent on the baud rate of the device.  
When copying and pasting commands from a configuration file, make sure that the  
following conditions exist:  
A device Configuration mode has been accessed.  
The commands contain no encrypted data, like encrypted passwords or keys. Encrypted  
data cannot be copied and pasted into the device.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
7
Download from Www.Somanuals.com. All Manuals Search And Download.  
Using CLI  
8
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
2 AAA Commands  
aaa authentication login  
The aaa authentication login Global Configuration mode command defines login  
authentication. To restore defaults, use the no form of this command.  
Syntax  
aaa authentication login {default | list-name} method1 [method2...]  
no aaa authentication login {default | list-name}  
Parameters  
default — Uses the listed authentication methods that follow this argument as the  
default list of methods when a user logs in.  
list-name — Character string used to name the list of authentication methods activated  
when a user logs in. (Range: 1-12 characters)  
method1 [method2...] — Specify at least one method from the following list:  
Keyword  
enable  
Description  
Uses the enable password for authentication.  
Uses the line password for authentication.  
Uses the local username database for authentication.  
Uses no authentication.  
line  
local  
none  
radius  
tacacs  
Uses the list of all RADIUS servers for authentication.  
Uses the list of all TACACS+ servers for authentication.  
Default Configuration  
The local user database is checked. This has the same effect as the command aaa  
authentication login list-name local.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
9
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
AAA Commands  
User Guidelines  
The default and optional list names created with the aaa authentication login command  
are used with the login authentication command.  
Create a list by entering the aaa authentication login list-name method command for a  
particular protocol, where list-name is any character string used to name this list. The  
method argument identifies the list of methods that the authentication algorithm tries, in  
the given sequence.  
The additional methods of authentication are used only if the previous method returns an  
error, not if it fails. To ensure that the authentication succeeds even if all methods return  
an error, specify none as the final method in the command line.  
Example  
The following example configures the authentication login.  
Console(config)# aaa authentication login default radius tacacs enable  
line local none  
aaa authentication enable  
The aaa authentication enable Global Configuration mode command defines  
authentication method lists for accessing higher privilege levels. To restore defaults, use  
the no form of this command.  
Syntax  
aaa authentication enable {default | list-name} method1 [method2...]  
no aaa authentication enable {default | list-name}  
Parameters  
default — Uses the listed authentication methods that follow this argument as the  
default list of methods, when using higher privilege levels.  
list-name — Character string used to name the list of authentication methods  
activated, when using access higher privilege levels. (Range: 1-12 characters)  
method1 [method2...] — Specify at least one method from the following list:  
Keyword  
enable  
Description  
Uses the enable password for authentication.  
10  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Keyword  
Description  
line  
Uses the line password for authentication.  
Uses no authentication.  
none  
radius  
Uses the list of all RADIUS servers for authentication. Uses username  
$enabx$., where x is the privilege level.  
tacacs  
Uses the list of all TACACS+ servers for authentication. Uses username  
"$enabx$." where x is the privilege level.  
Default Configuration  
If the default list is not set, only the enable password is checked. This has the same effect  
as the command aaa authentication enable default enable.  
Command Mode  
Global Configuration mode  
User Guidelines  
The default and optional list names created with the aaa authentication enable command  
are used with the enable authentication command.  
The additional methods of authentication are used only if the previous method returns an  
error, not if it fails. To ensure that the authentication succeeds even if all methods return  
an error, specify none as the final method in the command line.  
All aaa authentication enable default requests sent by the device to a RADIUS or  
TACACS+ server include the username $enabx$., where x is the requested privilege level.  
Example  
The following example sets the enable password for authentication when accessing higher  
privilege levels.  
Console(config)# aaa authentication enable default enable  
login authentication  
The login authentication Line Configuration mode command specifies the login  
authentication method list for a remote telnet or console. To restore the default  
configuration specified by the aaa authentication login command, use the no form of this  
command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
11  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Syntax  
login authentication {default | list-name}  
no login authentication  
Parameters  
default — Uses the default list created with the aaa authentication login command.  
list-name — Uses the indicated list created with the aaa authentication login  
command.  
Default Configuration  
Uses the default set with the command aaa authentication login.  
Command Mode  
Line Configuration mode  
User Guidelines  
To change (or rename) an authentication method, use the negate command and create a  
new rule with the new method name.  
Example  
The following example specifies the default authentication method for a console.  
Console(config)# line console  
Console(config-line)# login authentication default  
enable authentication  
The enable authentication Line Configuration mode command specifies the  
authentication method list when accessing a higher privilege level from a remote Telnet or  
console. To restore the default configuration specified by the aaa authentication enable  
command, use the no form of this command.  
Syntax  
enable authentication {default | list-name}  
no enable authentication  
12  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Parameters  
default — Uses the default list created with the aaa authentication enable command.  
list-name — Uses the indicated list created with the aaa authentication enable  
command.  
Default Configuration  
Uses the default set with the aaa authentication enable command.  
Command Mode  
Line Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example specifies the default authentication method when accessing a  
higher privilege level from a Telnet.  
Console(config)# line console  
Console(config-line)# enable authentication default  
ip http authentication  
The ip http authentication Global Configuration mode command specifies  
authentication methods for HTTP server users. To restore the default configuration, use  
the no form of this command.  
Syntax  
ip http authentication method1 [method2...]  
no ip http authentication  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
13  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Parameters  
method1 [method2...] — Specify at least one method from the following list:  
Keyword  
local  
Description  
Uses the local username database for authentication.  
Uses no authentication.  
none  
radius  
tacacs  
Uses the list of all RADIUS servers for authentication.  
Uses the list of all TACACS+ servers for authentication.  
Default Configuration  
The local user database is checked. This has the same effect as the command ip http  
authentication local.  
Command Mode  
Global Configuration mode  
User Guidelines  
The additional methods of authentication are used only if the previous method returns an  
error, not if it fails. To ensure that the authentication succeeds even if all methods return  
an error, specify none as the final method in the command line.  
Example  
The following example configures the HTTP authentication.  
Console(config)# ip http authentication radius tacacs local none  
ip https authentication  
The ip https authentication Global Configuration mode command specifies  
authentication methods for HTTPS server users. To restore the default configuration, use  
the no form of this command.  
Syntax  
ip https authentication method1 [method2...]  
no ip https authentication  
14  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Parameters  
method1 [method2...] — Specify at least one method from the following list:  
Keyword  
local  
Description  
Uses the local username database for authentication.  
Uses no authentication.  
none  
radius  
tacacs  
Uses the list of all RADIUS servers for authentication.  
Uses the list of all TACACS+ servers for authentication.  
Default Configuration  
The local user database is checked. This has the same effect as the command ip https  
authentication local.  
Command Mode  
Global Configuration mode  
User Guidelines  
The additional methods of authentication are used only if the previous method returns an  
error, not if it fails. To ensure that the authentication succeeds even if all methods return  
an error, specify none as the final method in the command line.  
Example  
The following example configures HTTPS authentication.  
Console(config)# ip https authentication radius tacacs local none  
show authentication methods  
The show authentication methods Privileged EXEC mode command displays  
information about the authentication methods.  
Syntax  
show authentication methods  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
15  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the authentication configuration.  
Console# show authentication methods  
login Authentication Method Lists  
---------------------------------  
Default: Local  
Enable Authentication Method Lists  
----------------------------------  
Default: Radius, Enable  
Console_Enable: Enable, None  
Line Login Method List Enable Method List  
-----------------------------------------  
Console Default Default  
Telnet Default Default  
SSH DefaultDefault  
http: Local  
https: Local  
dot1x:  
password  
The password Line Configuration mode command specifies a password on a line. To  
remove the password, use the no form of this command.  
Syntax  
password password [encrypted]  
no password  
16  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Parameters  
password — Password for this level. (Range: 1-159 characters)  
encrypted — Encrypted password to be entered, copied from another device  
configuration.  
Default Configuration  
No password is defined.  
Command Mode  
Line Configuration mode  
User Guidelines  
If a password is defined as encrypted, the required password length is 32 characters.  
Example  
The following example specifies the password called `secret' on a Telnet.  
Console(config)# line console  
Console(config-line)# password secret  
enable password  
The enable password Global Configuration mode command sets a local password to  
control access to user and privilege levels. To remove the password requirement, use the  
no form of this command.  
Syntax  
enable password [level level] password [encrypted]  
no enable password [level level]  
Parameters  
password — Password for this level. (Range: 1-159 characters)  
level — Level for which the password applies. If not specified the level is 15 (Range:  
1-15).  
encrypted — Encrypted password entered, copied from another device configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
17  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Default Configuration  
No enable password is defined.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets a local level 15 password called `secret' to control access to  
user and privilege levels.  
Console(config)# enable password secret level 15  
username  
The username Global Configuration mode command creates a user account in the local  
database. To remove a user name, use the no form of this command.  
Syntax  
username name [password password] [level level] [encrypted]  
no username name  
Parameters  
name — The name of the user. (Range: 1-20 characters)  
password — The authentication password for the user. (Range: 1-159 characters)  
level — The user level (Range: 1-15). If a level is not specified, the level is  
automaically set to 1.  
encrypted — Encrypted password entered, copied from another device configuration.  
Default Configuration  
No user is defined.  
18  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
User account can be created without a password.  
Example  
The following example configures user called bob with password `lee' and user level 15 to  
the system.  
Console(config)# username bob password lee level 15  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
19  
Download from Www.Somanuals.com. All Manuals Search And Download.  
AAA Commands  
20  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
3
Address Table Commands  
bridge address  
The bridge address Interface Configuration (VLAN) mode command adds a MAC-layer  
station source address to the bridge table. To delete the MAC address, use the no form of  
this command.  
Syntax  
bridge address mac-address {ethernet interface | port-channel port-channel-number}  
[permanent | delete-on-reset | delete-on-timeout | secure]  
no bridge address [mac-address]  
Parameters  
mac-address — A valid MAC address.  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number.  
permanent — The address can only be deleted by the no bridge address command.  
delete-on-reset — The address is deleted after reset.  
delete-on-timeout — The address is deleted after "age out" time has expired.  
secure — The address is deleted after the port changes mode to unlock learning (no  
port security command). This parameter is only available when the port is in the  
learning locked mode.  
Default Configuration  
No static addresses are defined. The default mode for an added address is permanent.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
Using the no form of the command without specifying a MAC address deletes all static  
MAC addresses belonging to this VLAN).  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
21  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Address Table Commands  
Example  
The following example adds a permanent static MAC-layer station source address  
3aa2.64b3.a245 on port 1 to the bridge table.  
Console(config)# interface vlan  
2
Console(config-if)# bridge address 3aa2.64b3.a245 ethernet ext.1 permanent  
bridge multicast filtering  
The bridge multicast filtering Global Configuration mode command enables filtering  
multicast addresses. To disable filtering multicast addresses, use the no form of this  
command.  
Syntax  
bridge multicast filtering  
no bridge multicast filtering  
Default Configuration  
Filtering multicast addresses is disabled. All multicast addresses are flooded to all ports.  
Command Mode  
Global Configuration mode  
User Guidelines  
If multicast devices exist on the VLAN, do not change the unregistered multicast  
addresses state to drop on the switch ports.  
If multicast devices exist on the VLAN and IGMP-snooping is not enabled, the bridge  
multicast forward-all command should be used to enable forwarding all multicast packets  
to the multicast switches.  
Example  
In the folowing example, bridge multicast filtering is enabled.  
Console(config)# bridge multicast filtering  
22  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
bridge multicast address  
The bridge multicast address Interface Configuration (VLAN) mode command registers a  
MAC-layer multicast address in the bridge table and statically adds ports to the group. To  
unregister the MAC address, use the no form of this command.  
Syntax  
bridge multicast address {mac-multicast-address | ip-multicast-address}  
bridge multicast address {mac-multicast-address | ip-multicast-address} [add | remove]  
{ethernet interface-list | port-channel port-channel-number-list}  
no bridge multicast address {mac-multicast-address | ip-multicast-address}  
Parameters  
add — Adds ports to the group. If no option is specified, this is the default option.  
remove — Removes ports from the group.  
mac-multicast-address — A valid MAC multicast address.  
ip- multicast-address — A valid IP multicast address.  
interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces;  
a hyphen is used to designate a range of ports.  
port-channel-number-list — Separate nonconsecutive port-channels with a comma  
and no spaces; a hyphen is used to designate a range of ports.  
Default Configuration  
No multicast addresses are defined.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
If the command is executed without add or remove, the command only registers the group  
in the bridge database.  
Static multicast addresses can only be defined on static VLANs.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
23  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Example  
The following example registers the MAC address:  
Console(config)# interface vlan  
8
Console(config-if)# bridge multicast address 01:00:5e:02:02:03  
The following example registers the MAC address and adds ports statically.  
Console(config)# interface vlan  
8
Console(config-if)# bridge multicast address 01:00:5e:02:02:03 add ethernet  
ext.1, ext.2  
bridge multicast forbidden address  
The bridge multicast forbidden address Interface Configuration (VLAN) mode command  
forbids adding a specific multicast address to specific ports. Use the no form of this  
command to restore the default configuration.  
Syntax  
bridge multicast forbidden address {mac-multicast-address | ip-multicast-address} {add |  
remove} {ethernet interface-list | port-channel port-channel-number-list}  
no bridge multicast forbidden address {mac-multicast-address | ip-multicast-address}  
Parameters  
add — Adds ports to the group.  
remove — Removes ports from the group.  
mac-multicast-address — A valid MAC multicast address.  
ip- multicast-address — A valid IP multicast address.  
interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces;  
hyphen is used to designate a range of ports.  
port-channel-number-list — Separate nonconsecutive valid port-channels with a  
comma and no spaces; a hyphen is used to designate a range of port-channels.  
Default Configuration  
No forbidden addresses are defined.  
24  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Command Modes  
Interface Configuration (VLAN) mode  
User Guidelines  
Before defining forbidden ports, the multicast group should be registered.  
Example  
In this example, MAC address 0100.5e02.0203 is forbidden on port 2 within VLAN 8.  
Console(config)# interface vlan  
8
Console(config-if)# bridge multicast address 0100.5e.02.0203  
Console(config-if)# bridge multicast forbidden address 0100.5e02.0203 add ethernet  
ext.2  
bridge multicast forward-all  
The bridge multicast forward-all Interface Configuration (VLAN) mode command  
enables forwarding all multicast packets on a port. To restore the default configuration,  
use the no form of this command.  
Syntax  
bridge multicast forward-all {add | remove} {ethernet interface-list | port-channel port-  
channel-number-list}  
no bridge multicast forward-all  
Parameters  
add — Force forwarding all multicast packets.  
remove — Do not force forwarding all multicast packets.  
interface-list — Separate nonconsecutive Ethernet ports with a comma and no spaces;  
a hyphen is used to designate a range of ports.  
port-channel-number-list — Separates nonconsecutive port-channels with a comma  
and no spaces; a hyphen is used to designate a range of port-channels.  
Default Configuration  
This setting is disabled.  
Command Mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
25  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Interface Configuration (VLAN) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In this example, all multicast packets on port 1 are forwarded.  
Console(config)# interface vlan 2  
Console(config-if)# bridge multicast forward-all add  
ethernet ext.1  
bridge multicast forbidden forward-all  
The bridge multicast forbidden forward-all Interface Configuration (VLAN) mode  
command forbids a port to be a forward-all-multicast port. To restore the default  
configuration, use the no form of this command.  
Syntax  
bridge multicast forbidden forward-all {add | remove} {ethernet interface-list | port-  
channel port-channel-number-list}  
no bridge multicast forbidden forward-all  
Parameters  
add — Forbids forwarding all multicast packets.  
remove — Does not forbid forwarding all multicast packets.  
interface-list — Separates nonconsecutive Ethernet ports with a comma and no  
spaces; a hyphen is used to designate a range of ports.  
port-channel-number-list — Separates nonconsecutive port-channels with a comma  
and no spaces; a hyphen is used to designate a range of port-channels.  
Default Configuration  
This setting is disabled.  
Command Mode  
Interface Configuration (VLAN) mode  
26  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
User Guidelines  
IGMP snooping dynamically discovers multicast device ports. When a multicast device  
port is discovered, all the multicast packets are forwarded to it unconditionally.  
This command prevents a port from becoming a multicast device port.  
Example  
In this example, forwarding all multicast packets to 1 with VLAN 2 is forbidden.  
Console(config)# interface vlan  
2
Console(config-if)# bridge multicast forbidden forward-all add ethernet ext.1  
bridge aging-time  
The bridge aging-time Global Configuration mode command sets the address table aging  
time. To restore the default configuration, use the no form of this command.  
Syntax  
bridge aging-time seconds  
no bridge aging-time  
Parameters  
seconds — Time in seconds. (Range: 10-630 seconds)  
Default Configuration  
The default setting is 300 seconds.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
27  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Example  
In the following example, the bridge aging time is set to 250 seconds.  
Console(config)# bridge aging-time 250  
clear bridge  
The clear bridge Privileged EXEC mode command removes any learned entries from the  
forwarding database.  
Syntax  
clear bridge  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In the following example, the bridge tables are cleared.  
Console# clear bridge  
port security  
The port security Interface Configuration mode command locks the port to block  
unknown traffic and prevent the port from learning new addresses. To restore the default  
configuration, use the no form of this command.  
Syntax  
port security [forward | discard | discard-shutdown] [trap seconds] [max]  
28  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
no port security  
Parameters  
forward — Forwards packets with unlearned source addresses, but does not learn the  
address.  
discard — Discards packets with unlearned source addresses. This is the default if no  
option is indicated.  
discard-shutdown — Discards packets with unlearned source addresses. The port is  
also shut down.  
seconds — Sends SNMP traps and defines the minimum amount of time in seconds  
between consecutive traps. (Range: 1-1000000)Default Configuration  
This setting is disabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In this example, port 1 forwards all packets without learning addresses of packets from  
unknown sources and sends traps every 100 seconds if a packet with an unknown source  
address is received.  
Console(config)# interface ethernet ext.1  
Console(config-if)# port security forward trap 100  
port security mode  
The port security mode Interface Configuration mode command configures the port  
security mode. To restore the default configuration, use the no form of this command.  
Syntax  
port security mode {lock | mac-addresses}  
no port security mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
29  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Parameters  
lock — Saves the current dynamic MAC addresses associated with the port and  
disables learning, relearning and aging.  
mac-addresses — Deletes the current dynamic MAC addresses associated with the  
port and learns up to the maximum number addresses allowed on the port. Relearning  
and aging are enabled.  
Default Configuration  
This setting is disabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In this example, port security mode is set to dynamic for Ethernet interface 1.  
Console(config)# interface ethernet ext.1  
Console(config-if)# port security mode mac-addresses  
port security routed secure-address  
The port security routed secure-address Interface Configuration (Ethernet, port-channel)  
mode command adds a MAC-layer secure address to a routed port. Use the no form of this  
command to delete a MAC address.  
Syntax  
port security routed secure-address mac-address  
no port security routed secure-address mac-address  
Parameters  
mac-address — A valid MAC address.  
30  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Default Configuration  
No addresses are defined.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode. Cannot be configured for a range  
of interfaces (range context).  
User Guidelines  
The command enables adding secure MAC addresses to a routed port in port security  
mode. The command is available when the port is a routed port and in port security mode.  
The address is deleted if the port exits the security mode or is not a routed port.  
Example  
In this example, the MAC-layer address 66:66:66:66:66:66 is added to port 1.  
Console(config)# interface ethernet ext.1  
Console(config-if)# port security routed secure-address 66:66:66:66:66:66  
show bridge address-table  
The show bridge address-table Privileged EXEC mode command displays all entries in  
the bridge-forwarding database.  
Syntax  
show bridge address-table [vlan vlan] [ethernet interface | port-channel port-channel-  
number | address mac address]  
Parameters  
vlan — Specifies a valid VLAN, such as VLAN 1.  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number.  
mac address — A valid MAC address.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
31  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
Internal usage VLANs (VLANs that are automatically allocated on ports with a defined  
Layer 3 interface) are presented in the VLAN column by a port number and not by a  
VLAN ID.  
"Special" MAC addresses that were not statically defined or dynamically learned are  
displayed in the MAC address table. This includes, for example, MAC addresses defined  
in ACLS.  
Example  
In this example, all classes of entries in the bridge-forwarding database are displayed.  
Console# show bridge address-table  
Aging time is 300 sec  
interface  
mac address  
Port  
Type  
---------  
--------------  
00:60:70:4C:73:FF  
00:60:70:8C:73:FF  
00:10:0D:48:37:FF  
----  
-------  
dynamic  
dynamic  
static  
1
5
5
5
1
200  
show bridge address-table static  
The show bridge address-table static Privileged EXEC mode command displays statically  
created entries in the bridge-forwarding database.  
Syntax  
show bridge address-table static [vlan vlan] [ethernet interface | port-channel port-  
channel-number]  
Parameters  
vlan — Specifies a valid VLAN, such as VLAN 1.  
interface — A valid Ethernet port.  
32  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In this example, all static entries in the bridge-forwarding database are displayed.  
Console# show bridge address-table static  
Aging time is 300 sec  
vlan  
----  
1
mac address  
port  
type  
-----------------  
00:60:70:4C:73:FF  
00:60.70.8C.73:FF  
00:10:0D:48:37:FF  
----  
-----------------  
Permanent  
8
8
9
1
delete-on-timeout  
delete-on-reset  
200  
show bridge address-table count  
The show bridge address-table count Privileged EXEC mode command displays the  
number of addresses present in the Forwarding Database.  
Syntax  
show bridge address-table count [vlan vlan] [ethernet interface-number | port-channel  
port-channel-number]  
Parameters  
vlan — Specifies a valid VLAN, such as VLAN 1.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
33  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In this example, the number of addresses present in all VLANs are displayed.  
Console# show bridge address-table count  
Capacity: 8192  
Free: 8083  
Used: 109  
Secure addresses: 2  
Static addresses: 1  
Dynamic addresses: 97  
Internal addresses: 9  
show bridge multicast address-table  
The show bridge multicast address-table Privileged EXEC mode command displays  
multicast MAC address or IP address table information.  
Syntax  
show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip-  
multicast-address] [format ip | format mac]  
34  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Parameters  
vlan-id — Indicates the VLAN ID. This has to be a valid VLAN ID value.  
mac-multicast-address — A valid MAC multicast address.  
ip-multicast-address — A valid IP multicast address.  
format ip / mac — Multicast address format. Can be ip or mac. If the format is  
unspecified, the default is mac.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
A MAC address can be displayed in IP format only if it is in the range of 0100.5e00.0000-  
0100.5e7f.ffff.  
Example  
In this example, multicast MAC address and IP address table information is displayed.  
Console# show bridge multicast address-table  
Vlan  
----  
1
MAC Address  
Type  
Ports  
----------  
1, 2  
--------------  
01:00:5e:02:02:03  
01:00:5e:02:02:08  
00:00:5e:02:02:08  
-------  
static  
static  
dynamic  
19  
1-8  
19  
9-11  
Forbidden ports for multicast addresses:  
Vlan  
----  
1
MAC Address  
Ports  
--------------  
01:00:5e:02:02:03  
01:00:5e:02:02:08  
-----  
8
8
19  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
35  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Console# show bridge multicast address-table format ip  
Vlan  
----  
1
IP/MAC Address  
Type  
Ports  
---------  
1, 2  
-----------------  
224-239.130|2.2.3  
224-239.130|2.2.8  
224-239.130|2.2.8  
------  
static  
static  
dynamic  
19  
1-8  
19  
9-11  
Forbidden ports for multicast addresses:  
Vlan  
----  
1
IP/MAC Address  
Ports  
-----------------  
224-239.130|2.2.3  
224-239.130|2.2.8  
------  
8
8
19  
A multicast MAC address maps to multiple IP addresses as shown above.  
show bridge multicast filtering  
The show bridge multicast filtering Privileged EXEC mode command displays the  
multicast filtering configuration.  
Syntax  
show bridge multicast filtering vlan-id  
Parameters  
vlan-id — Indicates the VLAN ID. This has to be a valid VLAN ID value.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
36  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Example  
In this example, the multicast configuration for VLAN 1 is displayed.  
Console# show bridge multicast filtering  
1
Filtering: Enabled  
VLAN: 1  
Port  
Static  
Status  
---------  
Filter  
Filter  
Filter  
----  
---------  
1
2
3
-
show ports security  
The show ports security Privileged EXEC mode command displays the port-lock status.  
Syntax  
show ports security [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
37  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Example  
In this example, all classes of entries in the port-lock status are displayed:  
Console# show ports security  
Port  
Status  
-------  
Locked  
Learning  
--------  
Dynamic  
Dynamic  
Disabled  
Action  
-------  
Discard  
-
Maximum  
Trap  
Frequency  
----  
-------  
-------  
Enable  
-
---------  
1
2
3
3
100  
-
Unlocked  
Locked  
28  
8
Discard,  
Shutdown  
Disable  
-
The following table describes the fields shown above.  
Field  
Description  
Port  
The port number.  
Status  
The values are: Locked/Unlocked.  
The learning mode.  
Learning  
Action  
Action on violation.  
Maximum  
The maximum number of addresses that can be associated on this port in  
theStatic Learning mode or in the Dynamic Learning mode.  
Trap  
Sends traps in case of a violation.  
Frequency  
The minimum time interval between consecutive traps.  
show ports security addresses  
The show ports security addresses Privileged EXEC mode command displays the current  
dynamic addresses in locked ports.  
Syntax  
show ports security addresses [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number  
Default Configuration  
This command has no default configuration.  
38  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
This example displays dynamic addresses in all currently locked ports.  
Console# show ports security addresses  
Port  
----  
1
Status  
Learning  
--------  
Lock  
Current  
Maximum  
--------  
Disabled  
Disabled  
Enabled  
-------  
-------  
-
-
0
1
1
1
2
Lock  
3
Max-addresses  
4
Port is a member in port-channel ch1  
5
Disabled  
Enabled  
Enabled  
Enabled  
Lock  
-
0
0
0
1
6
Max-addresses  
Max-addresses  
Max-addresses  
10  
50  
128  
ch1  
ch2  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
39  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Address Table Commands  
40  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
4 ACL Commands  
ip access-list  
The ip access-list Global Configuration mode command enables the IP-Access  
Configuration mode and creates Layer 3 ACLs. To delete an ACL, use the no form of this  
command.  
Syntax  
ip access-list name  
no ip access-list name  
Parameters  
name — Specifies the name of the ACL. (Range: 0-32 characters)  
Default Configuration  
The default for all ACLs is deny-all.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows how to create an IP ACL.  
Console(config)# ip access-list ip-acl1  
Console(config-ip-al)#  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
41  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
ACL Commands  
permit (ip)  
The permit IP-Access List Configuration mode command permits traffic if the conditions  
defined in the permit statement match.  
Syntax  
permit {any | protocol} {any | {source source-wildcard}} {any | {destination  
destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence]  
permit-icmp {any | {source source-wildcard}} {any | {destination destination-  
wildcard}} {any | icmp-type} {any | icmp-code} [dscp number | ip-precedence number]  
permit-igmp {any | {source source-wildcard}} {any | {destination destination-  
wildcard}} {any | igmp-type} [dscp number | ip-precedence number]  
permit-tcp {any | {source source-wildcard}} {any | source-port} {any |{destination  
destination-wildcard}} {any | destination-port} [dscp number | ip-precedence  
number] [flags list-of-flags]  
permit-udp {any | {source source-wildcard}} {any | source-port} {any | {destination  
destination-wildcard}} {any | destination-port} [dscp number | ip-precedence number]  
Parameters  
source — Specifies the source IP address of the packet. Specify any to indicate IP  
address 0.0.0.0 and mask 255.255.255.255.  
source-wildcard — Specifies wildcard to be applied to the source IP address. Use 1s  
in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask  
255.255.255.255.  
destination — Specifies the destination IP address of the packet. Specify any to  
indicate IP address 0.0.0.0 and mask 255.255.255.255.  
destination-wildcard — Specifies wildcard to be applied to the destination IP address.  
Use 1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and  
mask 255.255.255.255.  
protocol — Specifies the abbreviated name or number of an IP protocol. (Range: 0-  
255)  
The following table lists the protocols that can be specified:  
IP Protocol  
Abbreviated Name  
Protocol Number  
Internet Control Message Protocol  
Internet Group Management Protocol  
IP in IP (encapsulation) Protocol  
Transmission Control Protocol  
Exterior Gateway Protocol  
icmp  
igmp  
1
2
4
6
8
ipinip  
tcp  
egp  
42  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
IP Protocol  
Interior Gateway Protocol  
Abbreviated Name  
Protocol Number  
igp  
9
User Datagram Protocol  
Host Monitoring Protocol  
Reliable Data Protocol  
udp  
hmp  
rdp  
17  
20  
27  
35  
41  
43  
44  
45  
46  
47  
50  
51  
58  
88  
89  
103  
115  
124  
Inter-Domain Policy Routing Protocol  
Ipv6 protocol  
idpr  
ipv6  
Routing Header for IPv6  
Fragment Header for IPv6  
Inter-Domain Routing Protocol  
Reservation Protocol  
ipv6-route  
ipv6-frag  
idrp  
rsvp  
General Routing Encapsulation  
Encapsulating Security Payload (50)  
Authentication Header  
gre  
esp  
ah  
ICMP for IPv6  
ipv6-icmp  
eigrp  
ospf  
EIGRP routing protocol  
Open Shortest Path Protocol  
Protocol Independent Multicast  
Layer Two Tunneling Protocol  
ISIS over IPv4  
pim  
l2tp  
isis  
(any IP protocol)  
any  
(25504)  
dscp — Indicates matching the dscp number with the packet dscp value.  
ip-precedence — Indicates matching ip-precedence with the packet ip-precedence  
value.  
icmp-type — Specifies an ICMP message type for filtering ICMP packets. Enter a  
value or one of the following values: echo-reply, destination-unreachable, source-  
quench, redirect, alternate-host-address, echo-request, router-advertisement,  
router-solicitation, time-exceeded, parameter-problem, timestamp, timestamp-  
reply, information-request, information-reply, address-mask-request, address-  
mask-reply, traceroute, datagram-conversion-error, mobile-host-redirect, ipv6-  
where-are-you, ipv6-i-am-here, mobile-registration-request, mobile-registration-  
reply, domain-name-request, domain-name-reply, skip and photuris. (Range: 0-  
255)  
icmp-code — Specifies an ICMP message code for filtering ICMP packets. ICMP  
packets that are filtered by ICMP message type can also be filtered by the ICMP  
message code. (Range: 0-255)  
igmp-type — IGMP packets can be filtered by IGMP message type. Enter a number or  
one of the following values: dvmrp, host-query, host-report, pim or trace. (Range:  
0-255)  
destination-port — Specifies the UDP/TCP destination port. (Range: 0-65535)  
source-port — Specifies the UDP/TCP source port. (Range: 0-65535)  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
43  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
list-of-flags — Specifies a list of TCP flags that can be triggered. If a flag is set, it is  
prefixed by “+”.  
If a flag is not set, it is prefixed by “-”. The possible values are: +urg, +ack, +psh,  
+rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and -fin. The flags are concatenated into  
one string. For example: +fin-ack.  
Default Configuration  
No IPv4 ACL is defined.  
Command Mode  
IP-Access List Configuration mode  
User Guidelines  
Use the ip access-list Global Configuration mode command to enable the IP-Access List  
Configuration mode.  
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted.  
After an ACE is added, an implied deny-any-any condition exists at the end of the list  
and those packets that do not match the conditions defined in the permit statement are  
denied.  
Example  
The following example shows how to define a permit statement for an IP ACL.  
Console(config)# ip access-list ip-acl1  
Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any dscp 56  
deny (IP)  
The deny IP-Access List Configuration mode command denies traffic if the conditions  
defined in the deny statement match.  
Syntax  
deny [disable-port] {any | protocol} {any | {source source-wildcard}} {any |  
{destination destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence]  
[in-port port-num | out-port port-num]  
deny-icmp  
deny-igmp  
44  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
deny-tcp  
deny-udp  
Parameters  
disable-port — Specifies that the port is disabled.  
source — Specifies the IP address or host name from which the packet was sent.  
Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255.  
source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s  
in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask  
255.255.255.255.  
destination — Specifies the IP address or host name to which the packet is being sent.  
Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255.  
destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing  
1s in bit positions to be ignored. Specify any to indicate IP address 0.0.0.0 and mask  
255.255.255.255.  
protocol — Specifies the abbreviated name or number of an IP protocol. The  
following table lists protocols that can be specified:  
IP Protocol  
Abbreviated Name  
Protocol Number  
Internet Control Message Protocol  
Internet Group Management Protocol  
IP in IP (encapsulation) Protocol  
Transmission Control Protocol  
Exterior Gateway Protocol  
Interior Gateway Protocol  
User Datagram Protocol  
icmp  
igmp  
ip  
1
2
4
tcp  
6
egp  
igp  
8
9
udp  
hmp  
rdp  
17  
20  
27  
35  
41  
43  
44  
45  
46  
47  
50  
51  
58  
88  
89  
Host Monitoring Protocol  
Reliable Data Protocol  
Inter-Domain Policy Routing Protocol  
Ipv6 protocol  
idpr  
ipv6  
Routing Header for IPv6  
ipv6-route  
ipv6-frag  
idrp  
Fragment Header for IPv6  
Inter-Domain Routing Protocol  
Reservation Protocol  
rsvp  
General Routing Encapsulation  
Encapsulating Security Payload (50)  
Authentication Header  
gre  
esp  
ah  
ICMP for IPv6  
ipv6-icmp  
eigrp  
ospf  
EIGRP routing protocol  
Open Shortest Path Protocol  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
45  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
IP Protocol  
Abbreviated Name  
Protocol Number  
IP-within-IP Encapsulation Protocol  
Protocol Independent Multicast  
Layer Two Tunneling Protocol  
ISIS over IPv4  
ipip  
pim  
l2tp  
isis  
any  
94  
103  
115  
124  
(any IP protocol)  
(25504)  
in-port port-num — (Optional) Specifies the input port of the devise. In case of  
egress classification this port will be devise input port.  
out-port port-num — (Optional) Specifies the output port of the devise.  
dscp — Indicates matching the dscp number with the packet dscp value.  
ip-precedence — Indicates matching ip-precedence with the packet ip-precedence  
value.  
Default Configuration  
This command has no default configuration  
Command Mode  
IP-Access List Configuration mode  
User Guidelines  
Use the ip access-list Global Configuration mode command to enable the IP-Access List  
Configuration mode.  
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted.  
After an ACE is added, an implied deny-any-any condition exists at the end of the list  
and those packets that do not match the defined conditions are denied.  
Example  
The following example shows how to define a permit statement for an IP ACL.  
Console(config)# ip access-list ip-acl1  
Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any  
mac access-list  
The mac access-list Global Configuration mode command enables the MAC-Access List  
Configuration mode and creates Layer 2 ACLs. To delete an ACL, use the no form of this  
command.  
46  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
Syntax  
mac access-list name  
no mac access-list name  
Parameters  
name — Specifies the name of the ACL. (Range: 0-32 characters)  
Default Configuration  
The default for all ACLs is deny all.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows how to create a MAC ACL.  
Console(config)# mac access-list macl-acl1  
Console(config-mac-al)#  
permit (MAC)  
The permit MAC-Access List Configuration mode command defines permit conditions  
of an MAC ACL.  
Syntax  
permit {any | {host source source-wildcard} any | {destination destination-wildcard}}  
[vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type]  
Parameters  
source — Specifies the source MAC address of the packet.  
source-wildcard — Specifies wildcard bits to be applied to the source MAC address.  
Use 1s in bit positions to be ignored.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
47  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
destination — Specifies the MAC address of the host to which the packet is being  
sent.  
destination-wildcard — Specifies wildcard bits to be applied to the destination MAC  
address. Use 1s in bit positions to be ignored.  
vlan-id — Specifies the ID of the packet vlan. (Range: 0-4095)  
cos — Specifies the Class of Service (CoS) for the packet. (Range: 0-7)  
cos-wildcard — Specifies wildcard bits to be applied to the CoS.  
eth-type — Specifies the Ethernet type of the packet .(Range: 0-65535)  
Default Configuration  
No MAC ACL is defined.  
Command Mode  
MAC-Access List Configuration mode  
User Guidelines  
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted.  
After an ACE is added, an implied deny-any-any condition exists at the end of the list  
and those packets that do not match the conditions defined in the permit statement are  
denied.  
If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface.  
Example  
The following example shows how to create a MAC ACL with permit rules.  
Console(config)# mac access-list macl-acl1  
Console(config-mac-al)# permit 6:6:6:6:6:6 0:0:0:0:0:0 any vlan 6  
deny (MAC)  
The deny MAC-Access List Configuration mode command denies traffic if the conditions  
defined in the deny statement match.  
Syntax  
deny [disable-port] {any | {source source-wildcard} {any | {destination destination-  
wildcard}}[vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type]  
48  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
Parameters  
disable-port — Indicates that the port is disabled if the statement is deny.  
source — Specifies the MAC address of the host from which the packet was sent.  
source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s  
in bit positions to be ignored.  
destination — Specifies the MAC address of the host to which the packet is being  
sent.  
destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing  
1s in bit positions to be ignored.  
vlan-id — Specifies the ID of the packet vlan.  
cos — Specifies the packets’s Class of Service (CoS).  
cos-wildcard — Specifies wildcard bits to be applied to the CoS.  
eth-type — Specifies the packet’s Ethernet type.  
Default Configuration  
This command has no default configuration.  
Command Mode  
MAC-Access List Configuration mode  
User Guidelines  
MAC BPDU packets cannot be denied.  
This command defines an Access Control Element (ACE). An ACE can only be removed  
by deleting the ACL, using the no mac access-list Global Configuration mode command.  
Alternatively, the Web-based interface can be used to delete ACEs from an ACL.  
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted.  
After an ACE is added, an implied deny-any-any condition exists at the end of the list  
and those packets that do not match the conditions defined in the permit statement are  
denied.  
If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface.  
Example  
The following example shows how to create a MAC ACL with deny rules on a device.  
Console(config)# mac access-list macl1  
Console (config-mac-acl)# deny 6:6:6:6:6:6:0:0:0:0:0:0 any  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
49  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
service-acl  
The service-acl Interface Configuration mode command applies an ACL to the input  
interface. To detach an ACL from an input interface, use the no form of this command.  
Syntax  
service-acl {input acl-name}  
no service-acl {input}  
Parameters  
acl-name—Specifies the ACL to be applied to the input interface.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface (Ethernet, port-channel) Configuration mode.  
User Guidelines  
In advanced mode, when an ACL is bound to an interface, the port trust mode is set to  
trust 12-13 and not to 12.  
Example  
The following example binds (services) an ACL to VLAN 2.  
Console(config)# interface vlan  
2
Console(config-if)# service-acl input macl1  
show access-lists  
The show access-lists Privileged EXEC mode command displays access control lists  
(ACLs) defined on the device.  
Syntax  
show access-lists [name]  
50  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
Parameters  
name — The name of the ACL.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays access lists defined on a device.  
Console# show access-lists  
IP access list ACL1  
permit ip host 172.30.40.1 any  
permit rsvp host 172.30.8.8 any  
show interfaces access-lists  
The show interfaces access-lists Privileged EXEC mode command displays access lists  
applied on interfaces.  
Syntax  
show interfaces access-lists [ethernet interface | port-channel port-channel-number]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
51  
Download from Www.Somanuals.com. All Manuals Search And Download.  
ACL Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays ACLs applied to the interfaces of a device:  
Console# show interfaces access-lists  
Interface  
Input ACL  
---------  
ACL1  
---------  
1
1
ACL3  
52  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
5 Clock Commands  
clock set  
The clock set Privileged EXEC mode command manually sets the system clock.  
Syntax  
clock set hh:mm:ss day month year  
or  
clock set hh:mm:ss month day year  
Parameters  
hh:mm:ss — Current time in hours (military format), minutes, and seconds. (hh: 0-23,  
mm: 0-59, ss: 0-59)  
day — Current day (by date) in the month. (Range: 1-31)  
month — Current month using the first three letters by name. (Range: Jan, …, Dec)  
year — Current year. (Range: 2000-2097)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the system time to 13:32:00 on March 7th, 2005.  
Console# clock set 13:32:00 7 Mar 2005  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
53  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Clock Commands  
clock source  
The clock source Global Configuration mode command configures an external time  
source for the system clock. Use no form of this command to disable external time source.  
Syntax  
clock source {sntp}  
no clock source  
Parameters  
sntp — SNTP servers  
Default Configuration  
No external clock source  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures an external time source for the system clock.  
Console(config)# clock source sntp  
clock timezone  
The clock timezone Global Configuration mode command sets the time zone for display  
purposes. To set the time to the Coordinated Universal Time (UTC), use the no form of  
this command.  
Syntax  
clock timezone hours-offset [minutes minutes-offset] [zone acronym]  
54  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
no clock timezone  
Parameters  
hours-offset — Hours difference from UTC. (Range: 12 hours to +13 hours)  
minutes-offset — Minutes difference from UTC. (Range: 0-59)  
acronym — The acronym of the time zone. (Range: Up to 4 characters)  
Default Configuration  
Clock set to UTC.  
Command Mode  
Global Configuration mode  
User Guidelines  
The system internally keeps time in UTC, so this command is used only for display  
purposes and when the time is manually set.  
Example  
The following example sets the timezone to 6 hours difference from UTC.  
Console(config)# clock timezone -6 zone CST  
clock summer-time  
The clock summer-time Global Configuration mode command configures the system to  
automatically switch to summer time (daylight saving time). To configure the software not  
to automatically switch to summer time, use the no form of this command.  
Syntax  
clock summer-time recurring {usa | eu | {week day month hh:mm week day month  
hh:mm}} [offset offset] [zone acronym]  
clock summer-time date date month year hh:mm date month year hh:mm [offset offset]  
[zone acronym]  
clock summer-time date month date year hh:mm month date year hh:mm [offset offset]  
[zone acronym]  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
55  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
no clock summer-time recurring  
Parameters  
recurring — Indicates that summer time should start and end on the corresponding  
specified days every year.  
date — Indicates that summer time should start on the first specific date listed in the  
command and end on the second specific date in the command.  
usa — The summer time rules are the United States rules.  
eu — The summer time rules are the European Union rules.  
week — Week of the month. (Range: 1-5, first, last)  
day — Day of the week (Range: first three letters by name, like sun)  
date — Date of the month. (Range:1-31)  
month — Month. (Range: first three letters by name, like Jan)  
year — year - no abbreviation (Range: 2000-2097)  
hh:mm — Time in military format, in hours and minutes. (Range: hh: 0-23, mm:0-59)  
offset — Number of minutes to add during summer time. (Range: 1-1440)  
acronym — The acronym of the time zone to be displayed when summer time is in  
effect. (Range: Up to 4 characters)  
Default Configuration  
Summer time is disabled.  
offset — Default is 60 minutes.  
acronym — If unspecified default to the timezone acronym.  
If the timezone has not been defined, the default is UTC.  
Command Mode  
Global Configuration mode  
User Guidelines  
In both the date and recurring forms of the command, the first part of the command  
specifies when summer time begins, and the second part specifies when it ends. All times  
are relative to the local time zone. The start time is relative to standard time. The end time  
is relative to summer time. If the starting month is chronologically after the ending month,  
the system assumes that you are in the southern hemisphere.  
USA rule for daylight savings time:  
56  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Start: First Sunday in April  
End: Last Sunday in October  
Time: 2 am local time  
EU rule for daylight savings time:  
Start: Last Sunday in March  
End: Last Sunday in October  
Time: 1.00 am (01:00)  
Example  
The following example sets summer time starting on the first Sunday in April at 2 am and  
finishing on the last Sunday in October at 2 am.  
Console(config)# clock summer-time recurring first sun apr 2:00 last sun oct  
2:00  
sntp authentication-key  
The sntp authentication-key Global Configuration mode command defines an  
authentication key for Simple Network Time Protocol (SNTP). To remove the  
authentication key for SNTP, use the no form of this command.  
Syntax  
sntp authentication-key number md5 value  
no sntp authentication-key number  
Parameters  
number — Key number (Range: 1-4294967295)  
value — Key value (Range: 1-8 characters)  
Default Configuration  
No authentication key is defined.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
57  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
User Guidelines  
Multiple keys can be generated.  
Example  
The following example defines the authentication key for SNTP.  
Console(config)# sntp authentication-key  
8
md5 ClkKey  
sntp authenticate  
The sntp authenticate Global Configuration mode command grants authentication for  
received Simple Network Time Protocol (SNTP) traffic from servers. To disable the  
feature, use the no form of this command.  
Syntax  
sntp authenticate  
no sntp authenticate  
Default Configuration  
No authentication  
Command Mode  
Global Configuration mode  
User Guidelines  
The command is relevant for both unicast and broadcast.  
Example  
The following example defines the authentication key for SNTP and grants authentication.  
Console(config)# sntp authentication-key  
Console(config)# sntp trusted-key  
8
md5 ClkKey  
8
58  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
sntp trusted-key  
The sntp trusted-key Global Configuration mode command authenticates the identity of  
a system to which Simple Network Time Protocol (SNTP) will synchronize. To disable  
authentication of the identity of the system, use the no form of this command.  
Syntax  
sntp trusted-key key-number  
no sntp trusted-key key-number  
Parameters  
key-number — Key number of authentication key to be trusted. (Range: 1-  
4294967295)  
Default Configuration  
No keys are trusted.  
Command Mode  
Global Configuration mode  
User Guidelines  
The command is relevant for both received unicast and broadcast.  
If there is at least 1 trusted key, then unauthenticated messages will be ignored.  
Example  
The following example authenticates key 8.  
Console(config)# sntp authentication-key  
Console(config)# sntp trusted-key  
8
md5 ClkKey  
8
sntp client poll timer  
The sntp client poll timer Global Configuration mode command sets the polling time for  
the Simple Network Time Protocol (SNTP) client. To restoreTo restoreTo restore default  
configuration, use the no form of this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
59  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Syntax  
sntp client poll timer seconds  
no sntp client poll timer  
Paramethers  
seconds — Polling interval in seconds. (Range: 60-86400)  
Default Configuration  
Polling interval is 1024 seconds.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the polling time for the SNTP client to 120 seconds.  
Console(config)# sntp client poll timer 120  
sntp broadcast client enable  
The sntp broadcast client enable Global Configuration mode command enables Simple  
Network Time Protocol (SNTP) broadcast clients. To disable SNTP broadcast clients, use  
the no form of this command.  
Syntax  
sntp broadcast client enable  
no sntp broadcast client enable  
Default Configuration  
The SNTP broadcast client is disabled.  
60  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
Use the sntp client enable (Interface) Interface Configuration mode command to enable  
the SNTP client on a specific interface.  
Example  
The following example enables the SNTP broadcast clients.  
Console(config)# sntp broadcast client enable  
sntp anycast client enable  
The sntp anycast client enable Global Configuration mode command enables SNTP  
anycast client. To disable the SNTP anycast client, use the no form of this command.  
Syntax  
sntp anycast client enable  
no sntp anycast client enable  
Default Configuration  
The SNTP anycast client is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Polling time is determined by the sntp client poll timer Global Configuration mode  
command.  
Use the sntp client enable (Interface) Interface Configuration mode command to enable  
the SNTP client on a specific interface.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
61  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Example  
The following example enables SNTP anycast clients.  
console(config)# sntp anycast client enable  
sntp client enable (Interface)  
The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode  
command enables the Simple Network Time Protocol (SNTP) client on an interface. This  
applies to both receive broadcast and anycast updates. To disable the SNTP client, use the  
no form of this command.  
Syntax  
sntp client enable  
no sntp client enable  
Default Configuration  
The SNTP client is disabled on an interface.  
Command Mode  
Interface Configuration (Ethernet, port-channel, VLAN) mode  
User Guidelines  
Use the sntp broadcast client enable Global Configuration mode command to enable  
broadcast clients globally.  
Use the sntp anycast client enable Global Configuration mode command to enable  
anycast clients globally.  
Example  
The following example enables the SNTP client on Ethernet port 3.  
Console(config)# interface ethernet ext.3  
Console(config-if)# sntp client enable  
62  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
sntp unicast client enable  
The sntp unicast client enable Global Configuration mode command enables the device  
to use the Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from  
servers. To disable requesting and accepting SNTP traffic from servers, use the no form of  
this command.  
Syntax  
sntp unicast client enable  
no sntp unicast client enable  
Default Configuration  
The SNTP unicast client is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use the sntp server Global Configuration mode command to define SNTP servers.  
Example  
The following example enables the device to use the Simple Network Time Protocol  
(SNTP) to request and accept SNTP traffic from servers.  
Console(config)# sntp unicast client enable  
sntp unicast client poll  
The sntp unicast client poll Global Configuration mode command enables polling for the  
Simple Network Time Protocol (SNTP) predefined unicast servers. To disable the polling  
for SNTP client, use the no form of this command.  
Syntax  
sntp unicast client poll  
no sntp unicast client poll  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
63  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Default Configuration  
Polling is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Polling time is determined by the sntp client poll timer Global Configuration mode  
command.  
Example  
The following example enables polling for SNTP predefined unicast clients.  
Console(config)# sntp unicast client poll  
sntp server  
The sntp server Global Configuration mode command configures the device to use the  
Simple Network Time Protocol (SNTP) to request and accept SNTP traffic from a  
specified server. To remove a server from the list of SNTP servers, use the no form of this  
command.  
Syntax  
sntp server {ip-address | hostname}[poll] [key keyid]  
no sntp server host  
Parameters  
ip-address — IP address of the server.  
hostname — Hostname of the server. (Range: 1-158 characters)  
poll Enable polling.  
keyid — Authentication key to use when sending packets to this peer. (Range:1-  
4294967295)  
Default Configuration  
No servers are defined.  
64  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
Up to 8 SNTP servers can be defined.  
Use the sntp unicast client enable Global Configuration mode command to enable  
predefined unicast clients globally.  
To enable polling you should also use the sntp unicast client poll Global Configuration  
mode command for global enabling.  
Polling time is determined by the sntp client poll timer Global Configuration mode  
command.  
Example  
The following example configures the device to accept SNTP traffic from the server on  
192.1.1.1.  
Console(config)# sntp server 192.1.1.1  
show clock  
The show clock Privileged EXEC mode command displays the time and date from the  
system clock.  
Syntax  
show clock [detail]  
Parameters  
detail Shows timezone and summertime configuration.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
65  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
User Guidelines  
The symbol that precedes the show clock display indicates the following:  
Symbol  
Description  
*
Time is not authoritative.  
Time is authoritative.  
(blank)  
.
Time is authoritative, but SNTP is not synchronized.  
Example  
The following example displays the time and date from the system clock.  
Console# show clock  
15:29:03 PDT(UTC-7) Jun 17 2005  
Time source is SNTP  
Console# show clock detail  
15:29:03 PDT(UTC-7) Jun 17 2005  
Time source is SNTP  
Time zone:  
Acronym is PST  
Offset is UTC-8  
Summertime:  
Acronym is PDT  
Recurring every year.  
Begins at first Sunday of April at 2:00.  
Ends at last Sunday of October at 2:00.  
Offset is 60 minutes.  
show sntp configuration  
The show sntp configuration Privileged EXEC mode command shows the configuration  
of the Simple Network Time Protocol (SNTP).  
Syntax  
show sntp configuration  
Default Configuration  
This command has no default configuration.  
66  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the current SNTP configuration of the device.  
Console# show sntp configuration  
Polling interval: 1024 seconds  
MD5 Authentication keys: 8, 9  
Authentication is required for synchronization.  
Trusted Keys: 8, 9  
Unicast Clients Polling: Enabled  
Server  
Polling  
-------  
Enabled  
Disabled  
Encryption Key  
--------------  
9
-----------  
176.1.1.8  
176.1.8.179  
Disabled  
Broadcast Clients: Enabled  
Anycast Clients: Enabled  
Broadcast Interfaces: 1, 3  
show sntp status  
The show sntp status Privileged EXEC mode command shows the status of the Simple  
Network Time Protocol (SNTP).  
Syntax  
show sntp status  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
67  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Clock Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows the status of the SNTP.  
Console# show sntp status  
Clock is synchronized, stratum 4, reference is 176.1.1.8, unicast  
Reference time is AFE2525E.70597B34 (00:10:22.438 PDT Jul 5 1993)  
Unicast servers:  
Server  
Status  
Last response  
Offset  
[mSec]  
Delay  
[mSec]  
-----------  
176.1.1.8  
-------  
Up  
----------------------------  
19:58:22.289 PDT Feb 19 2005  
12:17.17.987 PDT Feb 19 2005  
------  
7.33  
------  
117.79  
189.19  
176.1.8.179  
Unknown  
8.98  
Anycast server:  
Server  
Interface  
Status Last response  
Offset  
[mSec]  
------  
7.19  
Delay  
[mSec]  
-----  
---------  
-------  
-----  
Up  
-----------------------------  
176.1.11.8  
VLAN 118  
9:53:21.789 PDT Feb 19 2005  
119.89  
Broadcast:  
Interface  
---------  
13  
IP Address  
---------  
0.0.0.0  
Last response  
----------------------------  
00:00:00.0 Feb 19 2005  
15:15:16.0 LLBG Feb 19 2006  
vlan 1  
16.1.1.200  
68  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
6 Configuration and Image File  
Commands  
copy  
The copy Privileged EXEC mode command copies files from a source to a destination.  
Syntax  
copy source-url destination-url  
Parameters  
source-url — The source file location URL or reserved keyword of the source file to  
be copied.  
(Range: 1-160 characters)  
destination-url — The destination file URL or reserved keyword of the destination  
file.  
(Range: 1-160 characters)  
The following table displays keywords and URL prefixes.  
Keyword  
Source or Destination  
flash:  
Source or destination URL for flash memory. It’s the default in case a URL is  
specified without a prefix.  
running-config  
startup-config  
image  
Represents the current running configuration file.  
Represents the startup configuration file.  
If the source file, represents the active image file. If the destination file,  
represents the non-active image file.  
boot  
Boot file.  
tftp://  
Source or destination URL for a TFTP network server. The syntax for this alias  
is tftp://host/[directory]/filename. The host can be represented by its IP  
address or hostname.  
xmodem:  
Source for the file from a serial connection that uses the Xmodem protocol.  
unit://member/  
image  
Image file on one of the units. To copy from the master to all units, specify * in  
the member field.  
unit://member/  
boot  
Boot file on one of the units. To copy from the master to all units, specify * in  
the member field.  
null:  
Null destination for copies or files. A remote file can be copied to null to  
determine its size.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
69  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Configuration and Image File Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
The location of a file system dictates the format of the source or destination URL.  
The entire copying process may take several minutes and differs from protocol to protocol  
and from network to network.  
*.prv and *.sys files cannot be copied.  
Understanding Invalid Combinations of Source and Destination  
Some invalid combinations of source and destination exist. Specifically, you cannot copy  
if one of the following conditions exist:  
The source file and destination file are the same file.  
xmodem: is the destination file. The source file can be copied to image, boot and null:  
only.  
tftp:// is the source file and destination file on the same copy.  
The following table describes copy characters:  
Character  
Description  
!
.
For network transfers, indicates that the copy process is taking place. Each exclamation  
point indicates successful transfer of ten packets (512 bytes each).  
For network transfers, indicates that the copy process timed out. Generally, many  
periods in a row means that the copy process may fail.  
Copying an Image File from a Server to Flash Memory  
To copy an image file from a server to flash memory, use the copy source-url image  
command.  
Copying a Boot File from a Server to Flash Memory  
To copy a boot file from a server to flash memory, enter the copy source-url boot  
command.  
Copying a Configuration File from a Server to the Running Configuration File  
70  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
To load a configuration file from a network server to the running configuration file of the  
device, enter the copy source-url running-config command. The commands in the loaded  
configuration file are added to those in the running configuration file as if the commands  
were typed in the command-line interface (CLI). Thus, the resulting configuration file is a  
combination of the previous running configuration and the loaded configuration files with  
the loaded configuration file taking precedence.  
Copying a Configuration File from a Server to the Startup Configuration  
To copy a configuration file from a network server to the startup configuration file of the  
device, enter copy source-url startup-config. The startup configuration file is replaced by  
the copied configuration file.  
Storing the Running or Startup Configuration on a Server  
Use the copy running-config destination-url command to copy the current configuration  
file to a network server using TFTP. Use the copy startup-config destination-url  
command to copy the startup configuration file to a network server.  
Saving the Running Configuration to the Startup Configuration  
To copy the running configuration to the startup configuration file, enter the copy  
running-config startup-config command.  
Example  
The following example copies system image file1 from the TFTP server 172.16.101.101  
to a non-active image file.  
Console# copy tftp://172.16.101.101/file1 image  
Accessing file 'file1' on 172.16.101.101...  
Loading file1 from 172.16.101.101:  
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!  
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!  
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! [OK]  
Copy took 0:01:11 [hh:mm:ss]  
delete  
The delete Privileged EXEC mode command deletes a file from a flash memory device.  
Syntax  
delete url  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
71  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Parameters  
url — The location URL or reserved keyword of the file to be deleted. (Range: 1-160  
characters)  
The following table displays keywords and URL prefixes:  
Keyword  
flash:  
Source or Destination  
Source or destination URL for flash memory. It’s the default in case a URL is specified  
without a prefix.  
startup-config  
Represents the startup configuration file.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
*.sys, *.prv, image-1 and image-2 files cannot be deleted.  
Example  
The following example deletes the file called ‘test’ from the flash memory.  
Console# delete flash:test  
Delete flash:test? [confirm]  
boot system  
The boot system Privileged EXEC mode command specifies the system image that the  
device loads at startup.  
Syntax  
boot system {image-1 | image-2}  
Parameters  
image-1 — Specifies image 1 as the system startup image.  
image-2 — Specifies image 2 as the system startup image.  
72  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Default Configuration  
If the unit number is unspecified, the default setting is the master unit number.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
Use the show bootvar command to find out which image is the active image.  
Example  
The following example loads the system image 1 at device startup.  
Console# boot system image-1  
show running-config  
The show running-config Privileged EXEC mode command displays the contents of the  
currently running configuration file.  
Syntax  
show running-config  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
73  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Example  
The following example displays the contents of the running configuration file.  
Console# show running-config  
hostname device  
interface ethernet ext.1  
ip address 176.242.100.100 255.255.255.0  
duplex full  
speed 1000  
interface ethernet ext.2  
ip address 176.243.100.100 255.255.255.0  
duplex full  
speed 1000  
show startup-config  
The show startup-config Privileged EXEC mode command displays the contents of the  
startup configuration file.  
Syntax  
show startup-config  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
74  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Example  
The following example displays the contents of the running configuration file.  
Console# show startup-config  
hostname device  
interface ethernet ext.1  
ip address 176.242.100.100 255.255.255.0  
duplex full  
speed 1000  
interface ethernet ext.2  
ip address 176.243.100.100 255.255.255.0  
duplex full  
speed 1000  
show backup-config  
The show backup-config Privileged EXEC mode command displays the contents of the  
backup configuration file.  
Syntax  
show backup-config  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
75  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Example  
The following example displays the contents of the backup configuration file.  
Console# show backup-config  
software version 1.1  
hostname device  
interface ethernet ext.1  
ip address 176.242.100.100 255.255.255.0  
duplex full  
speed 1000  
interface ethernet ext.2  
ip address 176.243.100.100 255.255.255.0  
duplex full  
speed 1000  
show bootvar  
The show bootvar Privileged EXEC mode command displays the active system image  
file that is loaded by the device at startup.  
Syntax  
show bootvar  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
76  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
Example  
The following example displays the active system image file that is loaded by the device  
at startup.  
Console# show bootvar  
Unit  
----  
1
Active Image  
Selected for next boot  
----------------------  
image-1  
------------  
image-1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
77  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Configuration and Image File Commands  
78  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
7 Ethernet Configuration  
Commands  
interface ethernet  
The interface ethernet Global Configuration mode command enters the interface  
configuration mode to configure an Ethernet type interface.  
Syntax  
interface ethernet interface  
Parameters  
interface — Valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables configuring Ethernet port 8  
Console(config)# interface ethernet ext.8  
interface range ethernet  
The interface range ethernet Global Configuration mode command configures multiple  
Ethernet type interfaces at the same time.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
79  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Ethernet Configuration Commands  
Syntax  
interface range ethernet {port-list | all}  
Parameters  
port-list — List of valid ports. Where more than one port is listed, separate the  
nonconsecutive ports with a comma and no spaces, use a hyphen to designate a range  
of ports and group a list separated by commas in brackets.  
all — All Ethernet ports.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Commands under the interface range context are executed independently on each active  
interface in the range. If the command returns an error on one of the active interfaces, it  
does not stop executing commands on other active interfaces.  
Example  
The following example shows how ports 10 to 12 and 1 to 14 are grouped to receive the  
same command.  
Console(config)# interface range ethernet 10-12,1-14  
Console(config-if)#  
shutdown  
The shutdown Interface Configuration (Ethernet, port-channel) mode command disables  
an interface. To restart a disabled interface, use the no form of this command.  
Syntax  
shutdown  
no shutdown  
80  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Default Configuration  
The interface is enabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example disables Ethernet port 5 operations.  
Console(config)# interface ethernet ext.5  
Console(config-if)# shutdown  
The following example restarts the disabled Ethernet port.  
Console(config)# interface ethernet ext.5  
Console(config-if)# no shutdown  
description  
The description Interface Configuration (Ethernet, port-channel) mode command adds a  
description to an interface. To remove the description, use the no form of this command.  
Syntax  
description string  
no description  
Parameters  
string — Comment or a description of the port to enable the user to remember what is  
attached to the port. (Range: 1-64 characters)  
Default Configuration  
The interface does not have a description.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
81  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example adds a description to Ethernet port 5.  
Console(config)# interface ethernet ext.5  
Console(config-if)# description "RD SW#3"  
speed  
The speed Interface Configuration (Ethernet, port-channel) mode command configures  
the speed of a given Ethernet interface when not using auto-negotiation. To restore the  
default configuration, use the no form of this command.  
Syntax  
speed {10 | 100 | 1000| 10000}  
no speed  
Parameters  
10 — Forces10 Mbps operation.  
100 — Forces 100 Mbps operation.  
1000 — Forces 1000 Mbps operation.  
10000 — Forces 10000 Mbps operation.  
Default Configuration  
Maximum port capability  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
82  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
User Guidelines  
The no speed command in a port-channel context returns each port in the port-channel to  
its maximum capability.  
Example  
The following example configures the speed operation of Ethernet port 5 to 100 Mbps  
operation.  
Console(config)# interface ethernet ext.5  
Console(config-if)# speed 100  
duplex  
The duplex Interface Configuration (Ethernet) mode command configures the full/half  
duplex operation of a given Ethernet interface when not using auto-negotiation. To restore  
the default configuration, use the no form of this command.  
Syntax  
duplex {half | full}  
no duplex  
Parameters  
half — Forces half-duplex operation  
full — Forces full-duplex operation  
Default Configuration  
The interface is set to full duplex.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
When configuring a particular duplex mode on the port operating at 10/100 Mbps, disable  
the auto-negotiation on that port.  
Half duplex mode can be set only for ports operating at 10 Mbps or 100 Mbps.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
83  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Example  
The following example configures the duplex operation of Ethernet port 1 to full duplex  
operation.  
Console(config)# interface ethernet ext.  
Console(config-if)# duplex full  
1
negotiation  
The negotiation Interface Configuration (Ethernet, port-channel) mode command enables  
auto-negotiation operation for the speed and duplex parameters of a given interface. To  
disable auto-negotiation, use the no form of this command.  
Syntax  
negotiation [capability1 [capability2…capability5]]  
no negotiation  
Parameters  
capability — Specifies the capabilities to advertise. (Possible values: 10h, 10f,  
100h,100f, 1000f)  
Default Configuration  
Auto-negotiation is enabled.  
If unspecified, the default setting is to enable all capabilities of the port.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
If capabilities were specified when auto-negotiation was previously entered, not  
specifying capabilities when currently entering auto-negotiation overrides the previous  
configuration and enables all capabilities.  
84  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Example  
The following example enables auto-negotiation on Ethernet port 1.  
Console(config)# interface ethernet ext.  
Console(config-if)# negotiation  
1
flowcontrol  
The flowcontrol Interface Configuration (Ethernet, port-channel) mode command  
configures flow control on a given interface. To disable flow control, use the no form of  
this command.  
Syntax  
flowcontrol {auto | on | off}  
no flowcontrol  
Parameters  
auto — Indicates auto-negotiation  
on — Enables flow control.  
off — Disables flow control.  
Default Configuration  
Flow control is off.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
Negotiation should be enabled for flow control auto.  
Example  
In the following example, flow control is enabled on port 1.  
Console(config)# interface ethernet ext.  
Console(config-if)# flowcontrol on  
1
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
85  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
mdix  
The mdix Interface Configuration (Ethernet) mode command enables cable crossover on  
a given interface. To disable cable crossover, use the no form of this command.  
Syntax  
mdix {on | auto}  
no mdix  
Parameters  
on — Manual mdix is enabled.  
auto — Automatic mdi/mdix is enabled.  
Default Configuration  
The default setting is on.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
Auto: All possibilities to connect a PC with cross or normal cables are supported and are  
automatically detected.  
On: It is possible to connect to a PC only with a normal cable and to connect to another  
device only with a cross cable.  
No: It is possible to connect to a PC only with a cross cable and to connect to another  
device only with a normal cable.  
Example  
In the following example, automatic crossover is enabled on port 1.  
Console(config)# interface ethernet ext.  
Console(config-if)# mdix auto  
1
86  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
back-pressure  
The back-pressure Interface Configuration (Ethernet, port-channel) mode command  
enables back pressure on a given interface. To disable back pressure, use the no form of  
this command.  
Syntax  
back-pressure  
no back-pressure  
Default Configuration  
Back pressure is enabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
In the following example back pressure is enabled on port 1.  
Console(config)# interface ethernet ext.  
Console(config-if)# back-pressure  
1
port jumbo-frame  
The port jumbo-frame Global Configuration mode command enables jumbo frames on  
the device. To disable jumbo frames, use the no form of this command.  
Syntax  
port jumbo-frame  
no port jumbo-frame  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
87  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Default Configuration  
Jumbo frames are disabled on the device.  
Command Mode  
Global Configuration  
User Guidelines  
This command is relevant to Giga devices only.  
This command takes effect only after resetting the device.  
Example  
In the following example, jumbo frames are enabled on the device.  
Console(config)# port jumbo-frame  
clear counters  
The clear counters Privileged EXEC mode command clears statistics on an interface.  
Syntax  
clear counters [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
88  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
In the following example, the counters for interface 1 are cleared.  
Console# clear counters ethernet ext.2  
set interface active  
The set interface active Privileged EXEC mode command reactivates an interface that  
was shutdown.  
Syntax  
set interface active {ethernet interface | port-channel port-channel-number}  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
This command is used to activate interfaces that were configured to be active, but were  
shutdown by the system for some reason (e.g., port security).  
Example  
The following example reactivates interface 1.  
Console# set interface active ethernet ext.1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
89  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
show interfaces advertise  
The show interfaces advertise Privileged EXEC mode command displays auto-  
negotiation data.  
Syntax  
show interfaces advertise [ethernet interface | port-channel port-channel-number]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays auto-negotiation information.  
Console# show interfaces advertise  
Port  
Type  
Neg  
Operational Link Advertisement  
----  
-----------  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
-------  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
------------------------------  
1
2
3
4
5
6
7
--  
--  
--  
--  
100f, 100h, 10f, 10h  
--  
--  
90  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
8
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
--  
--  
--  
--  
--  
9
10  
11  
12  
show interfaces configuration  
The show interfaces configuration Privileged EXEC mode command displays the  
configuration for all configured interfaces.  
Syntax  
show interfaces configuration [ethernet interface | port-channel port-channel-number]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the configuration of all configured interfaces:  
Console# show interfaces configuration  
Port  
----  
Type  
Duplex  
------  
Speed  
-----  
Neg  
Flow  
Ctrl  
Admin  
State  
Back  
Pressure  
Mdix  
Mode  
-----------  
-------  
----  
-----  
--------  
----  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
91  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
1
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
Full  
Full  
Full  
Full  
Full  
Full  
Full  
Full  
Full  
Full  
Full  
100  
100  
100  
100  
100  
100  
100  
100  
100  
100  
100  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Enabled  
Off  
Off  
Off  
Off  
Off  
Off  
Off  
Off  
Off  
Off  
Off  
Up  
Up  
Up  
Up  
Up  
Up  
Up  
Up  
Up  
Up  
Up  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Disabled  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
Auto  
2
3
4
5
6
7
8
9
10  
11  
show interfaces status  
The show interfaces status Privileged EXEC mode command displays the status of all  
configured interfaces.  
Syntax  
show interfaces status [ethernet interface| port-channel port-channel-number |]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
92  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the status of all configured interfaces.  
Console# show interfaces status  
Port  
Type  
Duplex  
Speed  
Neg  
Flow  
Ctrl  
Link  
State  
Back  
Pressure  
Mdix  
Mode  
----  
1
-----------  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
100M-Copper  
------  
--  
-----  
--  
-------  
----  
--  
-----  
Down  
Down  
Down  
Down  
Up  
--------  
----  
--  
--  
--  
2
--  
--  
--  
--  
--  
--  
3
--  
--  
--  
--  
--  
--  
4
--  
--  
--  
--  
--  
--  
5
Full  
--  
100  
--  
Enabled  
--  
Off  
--  
Disabled  
Auto  
--  
6
Down  
Down  
Down  
Down  
Down  
Down  
Down  
--  
--  
--  
--  
--  
--  
--  
7
--  
--  
--  
--  
--  
8
--  
--  
--  
--  
--  
9
--  
--  
--  
--  
--  
10  
11  
12  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
--  
show interfaces description  
The show interfaces description Privileged EXEC mode command displays the  
description for all configured interfaces.  
Syntax  
show interfaces description [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
93  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays descriptions of configured interfaces.  
Console# show interfaces description  
Port  
----  
1
Description  
-----------  
lab  
2
3
4
5
6
ch1  
ch2  
show interfaces counters  
The show interfaces counters Privileged EXEC mode command displays traffic seen by  
the physical interface.  
Syntax  
show interfaces counters [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
94  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays traffic seen by the physical interface.  
Console# show interfaces counters  
Port  
InOctets  
--------  
183892  
0
InUcastPkts  
InMcastPkts  
InBcastPkts  
----  
-----------  
-----------  
-----------  
1
1
1
0
0
0
0
0
0
0
0
0
123899  
Port  
OutOctets  
----------  
9188  
OutUcastPkts  
OutMcastPkts  
OutBcastPkts  
-----  
------------  
------------  
------------  
1
1
1
0
0
0
0
0
0
0
0
0
0
8789  
Ch  
---  
1
InOctets  
--------  
27889  
InUcastPkts  
----------  
0
InMcastPkts  
-----------  
0
InBcastPkts  
-----------  
0
Ch  
---  
1
OutOctets  
---------  
23739  
OutUcastPkts  
------------  
0
OutMcastPkts  
------------  
0
OutBcastPkts  
------------  
0
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
95  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
The following example displays counters for Ethernet port 1.  
Console# show interfaces counters ethernet ext.  
1
Port  
------  
1
InOctets  
-----------  
183892  
InUcastPkts  
--------------  
0
InMcastPkts  
-----------  
0
InBcastPkts  
-----------  
0
Port  
------  
1
OutOctets  
-----------  
9188  
OutUcastPkts  
--------------  
0
OutMcastPkts  
------------  
0
OutBcastPkts  
------------  
0
FCS Errors: 0  
Single Collision Frames: 0  
Late Collisions: 0  
Excessive Collisions: 0  
Oversize Packets: 0  
Internal MAC Rx Errors: 0  
Received Pause Frames: 0  
Transmitted Pause Frames: 0  
The following table describes the fields shown in the display.  
Field  
Description  
InOctets  
Counted received octets.  
InUcastPkts  
InMcastPkts  
InBcastPkts  
OutOctets  
Counted received unicast packets.  
Counted received multicast packets.  
Counted received broadcast packets.  
Counted transmitted octets.  
OutUcastPkts  
OutMcastPkts  
OutBcastPkts  
FCS Errors  
Counted transmitted unicast packets.  
Counted transmitted multicast packets.  
Counted transmitted broadcast packets.  
Counted received frames that are an integral number of octets in length but do  
not pass the FCS check.  
Single Collision Frames  
Late Collisions  
Counted frames that are involved in a single collision, and are subsequently  
transmitted successfully.  
Number of times that a collision is detected later than one slotTime into the  
transmission of a packet.  
Excessive Collisions  
Oversize Packets  
Number of excessive collisions received on the selected interface.  
Counted frames received that exceed the maximum permitted frame size.  
96  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Field  
Description  
Internal MAC Rx Errors  
Counted frames for which reception fails due to an internal MAC sublayer  
received error.  
Received Pause Frames  
Transmitted Pause Frames  
Counted MAC Control frames received with an opcode indicating the PAUSE  
operation.  
Counted MAC Control frames transmitted on this interface with an opcode  
indicating the PAUSE operation.  
show ports jumbo-frame  
The show ports jumbo-frame Privileged EXEC mode command displays the  
configuration of jumbo frames.  
Syntax  
show ports jumbo-frame  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
This command is relevant to Giga devices only.  
Example  
The following example displays the configuration of jumbo frames on the device.  
Console# show port jumbo-frame  
Jumbo frames are disabled  
Jumbo frames will be enabled after reset  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
97  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
port storm-control include-multicast (GC)  
The port storm-control include-multicast Interface Configuration mode command  
enables counting multicast packets in the port storm-control broadcast rate command.  
To disable counting multicast packets, use the no form of this command.  
Syntax  
port storm-control include-multicast  
no port storm-control include-multicast  
Default Configuration  
Multicast packets are not counted.  
Command Modes  
Interface Configuration (Ethernet) mode  
User Guidelines  
To control multicasts storms, use the port storm-control broadcast enable and port  
storm-control broadcast rate commands.  
Example  
The following example enables counting multicast packets.  
Console# configure  
Console(config-if)# port storm-control include-multicast  
Console(config-if)# port storm-control iinclude-multicast unknown-unicast  
port storm-control include-multicast (IC)  
The port storm-control include-multicast Interface Configuration (Ethernet) mode  
command counts multicast packets in broadcast storm control. To disable counting  
multicast packets, use the no form of this command.  
Syntax  
port storm-control include-multicast [unknown-unicast]  
no port storm-control include-multicast  
98  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Parameters  
unknown-unicast Specifies also counting unknown unicast packets.  
Default Configuration  
Multicast packets are not counted.  
Command Modes  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables counting broadcast and multicast packets on Ethernet port  
2.  
Console(config)# interface ethernet ext.2  
Console(config-if)# port storm-control include-multicast unknown-unicast  
port storm-control broadcast enable  
The port storm-control broadcast enable Interface Configuration (Ethernet) mode  
command enables broadcast storm control. To disable broadcast storm control, use the no  
form of this command.  
Syntax  
port storm-control broadcast enable  
no port storm-control broadcast enable  
Default Configuration  
Broadcast storm control is disabled.  
Command Modes  
Interface Configuration (Ethernet) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
99  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
User Guidelines  
Use the port storm-control broadcast rate Interface Configuration (Ethernet) mode  
command, to set the maximum allowable broadcast rate.  
Use the port storm-control include-multicast Global Configuration mode command to  
enable counting multicast packets in the storm control calculation.  
Example  
The following example enables broadcast storm control on port 1 of a device.  
Console(config)# interface ethernet ext.  
1
Console(config-if)# port storm-control broadcast enable  
port storm-control broadcast rate  
The port storm-control broadcast rate Interface Configuration (Ethernet) mode  
command configures the maximum broadcast rate. To restore the default configuration,  
use the no form of this command.  
Syntax  
port storm-control broadcast rate rate  
no port storm-control broadcast rate  
Parameters  
rate — Maximum kilobits per second of broadcast and multicast traffic on a port.  
(Range of 3500-1000000)  
Default Configuration  
The default storm control broadcast rate is 3500 Kbits/Sec.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
Use the port storm-control broadcast enable Interface Configuration mode command to  
enable broadcast storm control.  
100  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
Example  
The following example configures a port storm-control broadcast rate 4000 on port 2.  
(config)# interface ethernet ext.2  
Console(config-if)# port storm-control broadcast rate 4000  
show ports storm-control  
The show ports storm-control Privileged EXEC mode command displays the storm  
control configuration.  
Syntax  
show ports storm-control [interface]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the storm control configuration.  
Console# show ports storm-control  
Port  
----  
1
State  
Rate [Kbits/Sec]  
----------------  
3500  
Included  
--------  
Broadcast  
Broadcast  
-----  
Disabled  
Disabled  
2
3500  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
101  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Ethernet Configuration Commands  
3
4
5
6
Disabled  
Disabled  
Disabled  
Disabled  
3500  
3500  
3500  
3500  
Broadcast  
Broadcast  
Broadcast  
Broadcast  
102  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
8 GVRP Commands  
gvrp enable (Global)  
GARP VLAN Registration Protocol (GVRP) is an industry-standard protocol designed to  
propagate VLAN information from device to device. With GVRP, a single device is  
manually configured with all desired VLANs for the network, and all other devices on the  
network learn these VLANs dynamically.  
The gvrp enable Global Configuration mode command enables GVRP globally. To  
disable GVRP on the device, use the no form of this command.  
Syntax  
gvrp enable  
no gvrp enable  
Default Configuration  
GVRP is globally disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables GVRP globally on the device.  
Console(config)# gvrp enable  
gvrp enable (Interface)  
The gvrp enable Interface Configuration (Ethernet, port-channel) mode command  
enables GVRP on an interface. To disable GVRP on an interface, use the no form of this  
command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
103  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
GVRP Commands  
Syntax  
gvrp enable  
no gvrp enable  
Default Configuration  
GVRP is disabled on all interfaces.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
An access port does not dynamically join a VLAN because it is always a member in only  
one VLAN.  
Membership in an untagged VLAN is propagated in the same way as in a tagged VLAN.  
That is, the PVID is manually defined as the untagged VLAN VID.  
Example  
The following example enables GVRP on Ethernet port 6.  
Console(config)# interface ethernet ext.6  
Console(config-if)# gvrp enable  
garp timer  
The garp timer Interface Configuration (Ethernet, Port channel) mode command adjusts  
the values of the join, leave and leaveall timers of GARP applications. To restore the  
default configuration, use the no form of this command.  
Syntax  
garp timer {join | leave | leaveall} timer_value  
no garp timer  
Parameters  
{join | leave | leaveall} — Indicates the type of timer.  
104  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
timer_value — Timer values in milliseconds in multiples of 10. (Range: 10-  
2147483640)  
Default Configuration  
Following are the default timer values:  
Join timer — 200 milliseconds  
Leave timer — 600 milliseconds  
Leavall timer — 10000 milliseconds  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
The following relationship must be maintained between the timers:  
Leave time must be greater than or equal to three times the join time.  
Leave-all time must be greater than the leave time.  
Set the same GARP timer values on all Layer 2-connected devices. If the GARP timers  
are set differently on Layer 2-connected devices, the GARP application will not operate  
successfully.  
Example  
The following example sets the leave timer for Ethernet port 6 to 900 milliseconds.  
Console(config)# interface ethernet ext.6  
Console(config-if)# garp timer leave 900  
gvrp vlan-creation-forbid  
The gvrp vlan-creation-forbid Interface Configuration (Ethernet, port-channel) mode  
command disables dynamic VLAN creation or modification. To enable dynamic VLAN  
creation or modification, use the no form of this command.  
Syntax  
gvrp vlan-creation-forbid  
no gvrp vlan-creation-forbid  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
105  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
Default Configuration  
Dynamic VLAN creation or modification is enabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
This command forbids dynamic VLAN creation from the interface. The creation or  
modification of dynamic VLAN registration entries as a result of the GVRP exchanges on  
an interface are restricted only to those VLANs for which static VLAN registration exists.  
Example  
The following example disables dynamic VLAN creation on Ethernet port 1.  
Console(config)# interface ethernet ext.  
1
Console(config-if)# gvrp vlan-creation-forbid  
gvrp registration-forbid  
The gvrp registration-forbid Interface Configuration (Ethernet, port-channel) mode  
command deregisters all dynamic VLANs on a port and prevents VLAN creation or  
registration on the port. To allow dynamic registration of VLANs on a port, use the no  
form of this command.  
Syntax  
gvrp registration-forbid  
no gvrp registration-forbid  
Default Configuration  
Dynamic registration of VLANs on the port is allowed.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
106  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example forbids dynamic registration of VLANs on Ethernet port 1.  
Console(config)# interface ethernet ext.  
1
Console(config-if)# gvrp registration-forbid  
clear gvrp statistics  
The clear gvrp statistics Privileged EXEC mode command clears all GVRP statistical  
information.  
Syntax  
clear gvrp statistics [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example clears all GVRP statistical information on Ethernet port 1.  
Console# clear gvrp statistics ethernet ext.1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
107  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
show gvrp configuration  
The show gvrp configuration Privieged EXEC mode command displays GVRP  
configuration information, including timer values, whether GVRP and dynamic VLAN  
creation is enabled, and which ports are running GVRP.  
Syntax  
show gvrp configuration [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privieged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays GVRP configuration information.  
Console# show gvrp configuration  
GVRP Feature is currently enabled on the device.  
Timers (milliseconds)  
Port(s)  
Status  
Registration  
Dynamic VLAN  
Creation  
Join  
Leave  
Leave All  
------  
-------  
Enabled  
Enabled  
------------  
Normal  
-----------  
Enabled  
----  
200  
-----  
600  
---------  
10000  
1
4
Normal  
Enabled  
200  
600  
10000  
108  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
show gvrp statistics  
The show gvrp statistics Privieged EXEC mode command displays GVRP statistics.  
Syntax  
show gvrp statistics [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privieged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows GVRP statistical information.  
Console# show gvrp statistics  
GVRP Statistics:  
Legend:  
rJE :  
rEmp :  
rLE :  
sJE :  
sEmp :  
sLE :  
Port  
Join Empty Received  
Empty Received  
rJIn:  
rLIn:  
rLA :  
sJIn:  
sLIn:  
sLA :  
Join In Received  
Leave In Received  
Leave All Received  
Join In Sent  
Leave Empty Received  
Join Empty Sent  
Empty Sent  
Leave In Sent  
Leave Empty Sent  
rJE rJIn rEmp rLIn  
Leave All Sent  
rLE  
rLA  
sJE sJIn sEmp sLIn  
sLE  
sLA  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
109  
Download from Www.Somanuals.com. All Manuals Search And Download.  
GVRP Commands  
show gvrp error-statistics  
The show gvrp error-statistics Privieged EXEC mode command displays GVRP error  
statistics.  
Syntax  
show gvrp error-statistics [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privieged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays GVRP statistical information.  
Console# show gvrp error-statistics  
GVRP Error Statistics:  
Legend:  
INVPROT :  
INVATYP :  
INVAVAL :  
Invalid Protocol Id  
INVALEN :  
INVEVENT:  
Invalid Attribute Length  
Invalid Event  
Invalid Attribute Type  
Invalid Attribute Value  
Port INVPROT INVATYP INVAVAL INVALEN INVEVENT  
110  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
9 IGMP Snooping Commands  
ip igmp snooping (Global)  
The ip igmp snooping Global Configuration mode command enables Internet Group  
Management Protocol (IGMP) snooping. To disable IGMP snooping, use the no form of  
this command.  
Syntax  
ip igmp snooping  
no ip igmp snooping  
Default Configuration  
IGMP snooping is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
IGMP snooping can only be enabled on static VLANs. It must not be enabled on Private  
VLANs or their community VLANs.  
Example  
The following example enables IGMP snooping.  
Console(config)# ip igmp snooping  
ip igmp snooping (Interface)  
The ip igmp snooping Interface Configuration (VLAN) mode command enables Internet  
Group Management Protocol (IGMP) snooping on a specific VLAN. To disable IGMP  
snooping on a VLAN interface, use the no form of this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
111  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
IGMP Snooping Commands  
Syntax  
ip igmp snooping  
no ip igmp snooping  
Default Configuration  
IGMP snooping is disabled .  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
IGMP snooping can only be enabled on static VLANs. It must not be enabled on Private  
VLANs or their community VLANs.  
Example  
The following example enables IGMP snooping on VLAN 2.  
Console(config)# interface vlan  
2
Console(config-if)# ip igmp snooping  
ip igmp snooping mrouter learn-pim-dvmrp  
The ip igmp snooping mrouter learn-pim-dvmrp Interface Configuration (VLAN)  
mode command enables automatic learning of multicast device ports in the context of a  
specific VLAN. To remove automatic learning of multicast device ports, use the no form  
of this command.  
Syntax  
ip igmp snooping mrouter learn-pim-dvmrp  
no ip igmp snooping mrouter learn-pim-dvmrp  
Default Configuration  
Automatic learning of multicast device ports is enabled.  
112  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
Multicast device ports can be configured statically using the bridge multicast forward-  
all Interface Configuration (VLAN) mode command.  
Example  
The following example enables automatic learning of multicast device ports on VLAN 2.  
Console(config) # interface vlan  
2
Console(config-if)# ip igmp snooping mrouter learn-pim-dvmrp  
ip igmp snooping host-time-out  
The ip igmp snooping host-time-out Interface Configuration (VLAN) mode command  
configures the host-time-out. If an IGMP report for a multicast group was not received for  
a host-time-out period from a specific port, this port is deleted from the member list of  
that multicast group. To restore the default configuration, use the no form of this  
command.  
Syntax  
ip igmp snooping host-time-out time-out  
no ip igmp snooping host-time-out  
Parameters  
time-out — Specifies the host timeout in seconds. (Range: 1-2147483647)  
Default Configuration  
The default host-time-out is 260 seconds.  
Command Mode  
Interface Configuration (VLAN) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
113  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
User Guidelines  
The timeout should be at least greater than 2*query_interval+max_response_time of the  
IGMP router.  
Example  
The following example configures the host timeout to 300 seconds.  
Console(config)# interface vlan  
2
Console(config-if)# ip igmp snooping host-time-out 300  
ip igmp snooping mrouter-time-out  
The ip igmp snooping mrouter-time-out Interface Configuration (VLAN) mode  
command configures the mrouter-time-out. The ip igmp snooping mrouter-time-out  
Interface Configuration (VLAN) mode command is used for setting the aging-out time  
after multicast device ports are automatically learned. To restore the default configuration,  
use the no form of this command.  
Syntax  
ip igmp snooping mrouter-time-out time-out  
no ip igmp snooping mrouter-time-out  
Parameters  
time-out — Specifies the Multicast device timeout in seconds (Range: 1-2147483647)  
Default Configuration  
The default value is 300 seconds.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
There are no user guidelines for this command.  
114  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Example  
The following example configures the multicast device timeout to 200 seconds.  
Console(config)# interface vlan  
2
Console(config-if)# ip igmp snooping mrouter-time-out 200  
ip igmp snooping leave-time-out  
The ip igmp snooping leave-time-out Interface Configuration (VLAN) mode command  
configures the leave-time-out. If an IGMP report for a multicast group was not received  
for a leave-time-out period after an IGMP Leave was received from a specific port, this  
port is deleted from the member list of that multicast group.To restore the default  
configuration, use the no form of this command.  
Syntax  
ip igmp snooping leave-time-out {time-out | immediate-leave}  
no ip igmp snooping leave-time-out  
Parameters  
time-out — Specifies the leave-timeout in seconds for IGMP queries. (Range: 0-  
2147483647)  
immediate-leave — Indicates that the port should be immediately removed from the  
members list after receiving IGMP Leave.  
Default Configuration  
The default leave-time-out configuration is 10 seconds.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
The leave timeout should be set greater than the maximum time that a host is allowed to  
respond to an IGMP query.  
Use immediate leave only where there is just one host connected to a port.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
115  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Example  
The following example configures the host leave timeout to 60 seconds.  
Console(config)# interface vlan  
2
Console(config-if)# ip igmp snooping leave-time-out 60  
show ip igmp snooping mrouter  
The show ip igmp snooping mrouter Privileged EXEC mode command displays  
information on dynamically learned multicast device interfaces.  
Syntax  
show ip igmp snooping mrouter [interface vlan-id]  
Parameters  
vlan-id — Specifies the VLAN number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays multicast device interfaces in VLAN 1000.  
Console# show ip igmp snooping mrouter interface 10000  
VLAN  
----  
1000  
Ports  
-----  
1
116  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Detected multicast devices that are forbidden statically:  
VLAN  
----  
1000  
Ports  
-----  
19  
show ip igmp snooping interface  
The show ip igmp snooping interface Privileged EXEC mode command displays IGMP  
snooping configuration.  
Syntax  
show ip igmp snooping interface vlan-id  
Parameters  
vlan-id — Specifies the VLAN number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
117  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Example  
The following example displays IGMP snooping information on VLAN 1000.  
Console# show ip igmp snooping interface  
4
IGMP Snooping is globaly disabled  
IGMP Snooping is enabled on VLAN 4  
IGMP host timeout is 260 sec  
IGMP Immediate leave is disabled. IGMP leave timeout is 10 sec  
IGMP mrouter timeout is 300 sec  
Automatic learning of multicast router ports is enabled  
show ip igmp snooping groups  
The show ip igmp snooping groups Privileged EXEC mode command displays multicast  
groups learned by IGMP snooping.  
Syntax  
show ip igmp snooping groups [vlan vlan-id] [address ip-multicast-address]  
Parameters  
vlan-id — Specifies the VLAN number.  
ip-multicast-address — Specifies the IP multicast address.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
To see the full multicast address table (including static addresses) use the show bridge  
multicast address-table Privileged EXEC command.  
118  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
Example  
The following example shows IGMP snooping information on multicast groups.  
Console# show ip igmp snooping groups  
Vlan  
----  
1
IP Address  
Querier  
-------  
Yes  
Ports  
-----------------  
224-239.130|2.2.3  
224-239.130|2.2.8  
----------  
1, 2  
19  
Yes  
9-11  
IGMP Reporters that are forbidden statically:  
---------------------------------------------  
Vlan  
----  
1
IP Address  
Ports  
-----  
19  
-----------------  
224-239.130|2.2.3  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
119  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IGMP Snooping Commands  
120  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
10 IP Address Commands  
ip address  
ip address ip-address {mask | prefix-length}  
The ip address Interface Configuration (Ethernet, VLAN, port-channel) mode command  
sets an IP address. To remove an IP address, use the no form of this command.  
Syntax  
ip address ip-address {mask | prefix-length}  
no ip address [ip-address]  
Parameters  
ip-address — Specifies the valid IP address  
mask — Specifies the valid network mask of the IP address.  
prefix-length — Specifies the number of bits that comprise the IP address prefix. The  
prefix length must be preceded by a forward slash (/). (Range: 8-30)  
Default Configuration  
No IP address is defined for interfaces.  
Command Mode  
Interface Configuration (Ethernet, VLAN, port-channel) mode  
User Guidelines  
An IP address cannot be configured for a range of interfaces (range context).  
This command is only functional if the device is in Switch mode.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
121  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
IP Address Commands  
Example  
The following example configures VLAN 1 with IP address 131.108.1.27 and subnet  
mask 255.255.255.0  
Console(config)# interface vlan 1  
Console(config-if)# ip address 131.108.1.27 255.255.255.0  
ip address dhcp  
The ip address dhcp Interface Configuration (Ethernet, VLAN, port-channel) mode  
command acquires an IP address for an Ethernet interface from the Dynamic Host  
Configuration Protocol (DHCP) server. To deconfigure an acquired IP address, use the no  
form of this command.  
Syntax  
ip address dhcp [hostname host-name]  
no ip address dhcp  
Parameters  
host-name — Specifies the name of the host to be placed in the DHCP option 12 field.  
This name does not have to be the same as the host name specified in the hostname  
Global Configuration mode command. (Range: 1-20 characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface Configuration (Ethernet, VLAN, port-channel) mode  
User Guidelines  
This command is only functional if the device is in Switch mode.  
The ip address dhcp command allows any interface to dynamically learn its IP address  
by using the DHCP protocol.  
Some DHCP servers require that the DHCPDISCOVER message have a specific host  
name. The ip address dhcp hostname host-name command is most typically used when  
the host name is provided by the system administrator.  
122  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
If the device is configured to obtain its IP address from a DHCP server, it sends a  
DHCPDISCOVER message to provide information about itself to the DHCP server on the  
network.  
If the ip address dhcp command is used with or without the optional keyword, the DHCP  
option 12 field (host name option) is included in the DISCOVER message. By default, the  
specified DHCP host name is the globally configured host name of the device. However,  
the ip address dhcp hostname host-name command can be used to place a different host  
name in the DHCP option 12 field.  
The no ip address dhcp command deconfigures any IP address that was acquired, and  
sends a DHCPRELEASE message.  
Example  
The following example acquires an IP address for Ethernet port 16 from DHCP..  
Console(config)# interface ethernet ext.16  
Console(config-if)# ip address dhcp  
ip default-gateway  
The ip default-gateway Global Configuration mode command defines a default gateway  
(device). To restore the default configuration, use the no form of this command.  
Syntax  
ip default-gateway ip-address  
no ip default-gateway  
Parameters  
ip-address — Specifies the valid IP address of the currently defined default gateway.  
Default Configuration  
No default gateway is defined.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
123  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
User Guidelines  
This command is only operational in Switch mode.  
Example  
The following example defines default gateway 192.168.1.  
.
Console(config)# ip default-gateway 192.168.1.1  
show ip interface  
The show ip interface Privileged EXEC mode command displays the usability status of  
configured IP interfaces  
Syntax  
show ip interface [ethernet interface-number | vlan vlan-id | port-channel port-channel  
number |]  
Parameters  
interface-number — Specifies the valid Ethernet port.  
vlan-id — Specifies the valid VLAN number.  
port-channel number — Specifies the valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
124  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Example  
The following example the displays the configured IP interfaces and their types  
Console# show ip interface  
Proxy ARP is disabled  
IP address  
I/F  
Type  
Direct  
Broadca  
st  
-------------  
---------  
-------  
-------  
--  
10.7.1.192/24  
10.7.2.192/24  
1
2
Static  
Static  
disable  
disable  
arp  
The arp Global Configuration mode command adds a permanent entry in the Address  
Resolution Protocol (ARP) cache. To remove an entry from the ARP cache, use the no  
form of this command.  
Syntax  
arp ip_addr hw_addr {ethernet interface-number | vlan vlan-id | port-channel port-  
channel number.}  
no arp ip_addr {ethernet interface-number | vlan vlan-id | port-channel port-channel  
number.}  
Parameters  
ip_addr Valid IP address or IP alias to map to the specified MAC address.  
hw_addr Valid MAC address to map to the specified IP address or IP alias.  
interface-number Valid Ethernet port.  
vlan-id Valid VLAN number.  
port-channel number. — Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
125  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
The software uses ARP cache entries to translate 32-bit IP addresses into 48-bit hardware  
addresses. Because most hosts support dynamic resolution, static ARP cache entries do  
not generally have to be specified.  
Example  
The following example adds IP address 198.133.219.232 and MAC address  
00:00:0c:40:0f:bc to the ARP table.  
Console(config)# arp 198.133.219.232 00:00:0c:40:0f:bc ethernet ext.  
6
arp timeout  
The arp timeout Global Configuration mode command configures how long an entry  
remains in the ARP cache. To restore the default configuration, use the no form of this  
command.  
Syntax  
arp timeout seconds  
no arp timeout  
Parameters  
seconds — Time (in seconds) that an entry remains in the ARP cache. (Range: 1-  
40000000)  
Default Configuration  
The default timeout is 60000 seconds.  
Command Mode  
Global Configuration mode  
126  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
User Guidelines  
It is recommended not to set the timeout value to less than 3600.  
Example  
The following example configures the ARP timeout to 12000 seconds.  
Console(config)# arp timeout 12000  
clear arp-cache  
The clear arp-cache Privileged EXEC mode command deletes all dynamic entries from  
the ARP cache.  
Syntax  
clear arp-cache  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example deletes all dynamic entries from the ARP cache.  
Console# clear arp-cache  
show arp  
The show arp Privileged EXEC mode command displays entries in the ARP table.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
127  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Syntax  
show arp  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays entries in the ARP table.  
Console# show arp  
ARP timeout: 80000 Seconds  
Interface  
IP address  
----------  
10.7.1.102  
10.7.1.135  
HW address  
Status  
-------  
Dynamic  
Static  
---------  
-----------------  
00:10:B5:04:DB:4B  
00:50:22:00:2A:A4  
1
2
ip domain-lookup  
The ip domain-lookup Global Configuration mode command enables the IP Domain  
Naming System (DNS)-based host name-to-address translation. To disable DNS-based  
host name-to-address translation, use the no form of this command.  
Syntax  
ip domain-lookup  
no ip domain-lookup  
128  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Default Configuration  
IP Domain Naming System (DNS)-based host name-to-address translation is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables IP Domain Naming System (DNS)-based host name-to-  
address translation.  
Console(config)# ip domain-lookup  
ip domain-name  
The ip domain-name Global Configuration mode command defines a default domain  
name used by the software to complete unqualified host names (names without a dotted-  
decimal domain name). To remove the default domain name, use the no form of this  
command.  
Syntax  
ip domain-name name  
no ip domain-name  
Parameters  
name — Specifies the default domain name used to complete unqualified host names.  
Do not include the initial period that separates an unqualified name from the domain  
name. (Range: 1-158 characters)  
Default Configuration  
A default domain name is not defined.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
129  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines default domain name www.intel.com.  
Console(config)# ip domain-name www.intel.com  
ip name-server  
The ip name-server Global Configuration mode command defines the available name  
servers. To remove a name server, use the no form of this command.  
Syntax  
ip name-server server-address [server-address2 server-address8]  
no ip name-server [server-address1 server-address8]  
Parameters  
server-address — Specifies IP addresses of the name server.  
Default Configuration  
No name server addresses are specified.  
Command Mode  
Global Configuration mode  
User Guidelines  
The preference of the servers is determined by the order in which they were entered.  
Up to 8 servers can be defined using one command or using multiple commands.  
Example  
The following example sets the available name server..  
Console(config)# ip name-server 176.16.1.18  
130  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
ip host  
The ip host Global Configuration mode command defines static host name-to-address  
mapping in the host cache. To remove the name-to-address mapping, use the no form of  
this command.  
Syntax  
ip host name address  
no ip host name  
Parameters  
name — Specifies the name of the host. (Range: 1-158 characters)  
address — Specifies the associated IP address.  
Default Configuration  
No host is defined.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines a static host name-to-address mapping in the host cache.  
Console(config)# ip host accounting.intel.com 126.10.23.1  
clear host  
The clear host Privileged EXEC mode command deletes entries from the host name-to-  
address cache.  
Syntax  
clear host {name | *}  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
131  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Parameters  
name — Specifies the host entry to be removed. (Range: 1-158 characters)  
* — Removes all entries.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example deletes all entries from the host name-to-address cache.  
Console# clear host *  
clear host dhcp  
The clear host dhcp Privileged EXEC mode command deletes entries from the host  
name-to-address mapping received from Dynamic Host Configuration Protocol (DHCP).  
Syntax  
clear host dhcp {name | *}  
Parameters  
name — Specifies the host entry to be removed. (Range: 1-158 characters)  
* — Removes all entries.  
Default Configuration  
This command has no default configuration.  
132  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
This command is only operational in Switch mode.  
This command deletes the host name-to-address mapping temporarily until the next  
renewal of the IP address.  
Example  
The following example deletes all entries from the host name-to-address mappingg.  
Console# clear host dhcp *  
show hosts  
The show hosts Privileged EXEC mode command displays the default domain name, a  
list of name server hosts, the static and the cached list of host names and addresses.  
Syntax  
show hosts [name]  
Parameters  
name — Specifies the host name. (Range: 1-158 characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
133  
Download from Www.Somanuals.com. All Manuals Search And Download.  
IP Address Commands  
Example  
The following example displays host information..  
Console# show hosts  
System name: Device  
Default domain is gm.com, sales.gm.com, usa.sales.gm.com(DHCP)  
Name/address lookup is enabled  
Name servers (Preference order): 176.16.1.18 176.16.1.19  
Configured host name-to-address mapping:  
Host  
Addresses  
----  
---------  
accounting.gm.com  
176.16.8.8 176.16.8.9 (DHCP)  
Cache:  
TTL(Hours)  
Host  
Total Elapsed Type  
----- ------- ------  
Addresses  
----  
---------  
www.stanford.edu  
72  
3
IP  
171.64.14.203  
134  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
LACP Commands  
11 LACP Commands  
lacp system-priority  
The lacp system-priority Global Configuration mode command configures the system  
priority. To return to the default configuration, use the no form of this command.  
Syntax  
lacp system-priority value  
no lacp system-priority  
Parameters  
value — Specifies system priority value. (Range: 1-65535)  
Default Configuration  
The default system priority is 1.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the system priority to 120.  
Console(config)# lacp system-priority 120  
lacp port-priority  
The lacp port-priority Interface Configuration (Ethernet) mode command configures  
physical port priority. To return to the default configuration, use the no form of this  
command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
135  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
LACP Commands  
Syntax  
lacp port-priority value  
no lacp port-priority  
Parameters  
value — Specifies port priority. (Range: 1-65535)  
Default Configuration  
The default port priority is 1.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines the priority of Ethernet port 6 as 247.  
Console(config)# interface ethernet ext.6  
Console(config-if)# lacp port-priority 247  
lacp timeout  
The lacp timeout Interface Configuration (Ethernet) mode command assigns an  
administrative LACP timeout. To return to the default configuration, use the no form of  
this command.  
Syntax  
lacp timeout {long | short}  
no lacp timeout  
Parameters  
long — Specifies the long timeout value.  
136  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
LACP Commands  
short — Specifies the short timeout value.  
Default Configuration  
The default port timeout value is long.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example assigns a long administrative LACP timeout to Ethernet port 6 .  
Console(config)# interface ethernet ext.6  
Console(config-if)# lacp timeout long  
show lacp ethernet  
The show lacp ethernet Privileged EXEC mode command displays LACP information  
for Ethernet ports.  
Syntax  
show lacp ethernet interface [parameters | statistics | protocol-state]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
parameters — Link aggregation parameter information.  
statistics — Link aggregation statistics information.  
protocol-state — Link aggregation protocol-state information.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
137  
Download from Www.Somanuals.com. All Manuals Search And Download.  
LACP Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example display LACP information for Ethernet port 1.  
Console# show lacp ethernet ext.1  
Port 1 LACP parameters:  
Actor  
system priority:  
system mac addr:  
port Admin key:  
port Oper key:  
port Oper number:  
port Admin priority:  
port Oper priority:  
port Admin timeout:  
port Oper timeout:  
LACP Activity:  
Aggregation:  
1
00:00:12:34:56:78  
30  
30  
21  
1
1
LONG  
LONG  
ACTIVE  
AGGREGATABLE  
FALSE  
FALSE  
FALSE  
FALSE  
synchronization:  
collecting:  
distributing:  
expired:  
Partner  
system priority:  
system mac addr:  
port Admin key:  
port Oper key:  
port Oper number:  
port Admin priority:  
port Oper priority:  
0
00:00:00:00:00:00  
0
0
0
0
0
138  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
LACP Commands  
port Oper timeout:  
LACP Activity:  
Aggregation:  
synchronization:  
collecting:  
LONG  
PASSIVE  
AGGREGATABLE  
FALSE  
FALSE  
distributing:  
expired:  
FALSE  
FALSE  
Port 1 LACP Statistics:  
LACP PDUs sent:  
2
2
LACP PDUs received:  
Port 1 LACP Protocol State:  
LACP State Machines:  
Receive FSM:  
Port Disabled State  
Detached State  
Mux FSM:  
Periodic Tx FSM:  
Control Variables:  
BEGIN:  
No Periodic State  
FALSE  
LACP_Enabled:  
Ready_N:  
TRUE  
FALSE  
Selected:  
UNSELECTED  
FALSE  
Port_moved:  
NNT:  
FALSE  
Port_enabled:  
Timer counters:  
periodic tx timer:  
current while timer:  
wait while timer:  
FALSE  
0
0
0
show lacp port-channel  
The show lacp port-channel Privileged EXEC mode command displays LACP  
information for a port-channel.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
139  
Download from Www.Somanuals.com. All Manuals Search And Download.  
LACP Commands  
Syntax  
show lacp port-channel [port_channel_number]  
Parameters  
port_channel_number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays LACP information about port-channel 1.  
Console# show lacp port-channel 1  
Port-Channel 1: Port Type 1000 Ethernet  
Actor  
System Priority:  
MAC Address:  
Admin Key:  
Oper Key:  
1
00:02:85:0E:1C:00  
29  
29  
Partner  
System Priority:  
MAC Address:  
Oper Key:  
0
00:00:00:00:00:00  
14  
140  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
12 Line Commands  
Line  
The Line Global Configuration mode command identiofies a specific line for  
configuration, and begins the process.  
Syntax  
Line {telnet | ssh}  
Parameters  
telnet — Virtual terminal for remote console access.  
ssh — Virtual terminal for secured remote console access.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command has no user guidelines.  
Example  
.
Router (config)# line telnet  
Router (config-line)#  
show line  
The show line command is used to display the parameters of a line.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
141  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Line Commands  
Syntax  
show line {telnet | ssh}  
Parameters  
telnet — Virtual terminal for remote console access.  
ssh — Virtual terminal for secured remote console access.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Exec mode  
User Guidelines  
This command has no user guidelines.  
Example  
The following example configures communication to a device with the IP address  
192.168.1.4, in the WLAN domain as a passive.  
show line  
Router>  
Console configuration:  
Interactive timeout: Disabled  
History: 10  
Baudrate: 9600  
Databits: 8  
Parity: none  
Stopbits: 1  
Telnet configuration:  
Interactive timeout: 10 minutes 10 seconds  
History: 10  
SSH configuration:  
Interactive timeout: 10 minutes 10 seconds  
History: 10  
142  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Line Commands  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
143  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Line Commands  
144  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
13 Management ACL Commands  
management access-list  
The management access-list Global Configuration mode command configures a  
management access list and enters the Management Access-list Configuration command  
mode. To delete an access list, use the no form of this command.  
Syntax  
management access-list name  
no management access-list name  
Parameters  
name — Access list name. (Range: 1-32 characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use this command to configure a management access list. The command enters the  
Access-list Configuration mode, where permit and deny access rules are defined using the  
permit (Management) and deny (Management) commands.  
If no match criteria are defined, the default is deny.  
If you reenter an access list context, the new rules are entered at the end of the access list.  
Use the management access-class command to select the active access list.  
The active management list cannot be updated or removed.  
Management ACL requires a valid management interface, which is a port, VLAN, or port-  
channnel with an IP address or console interface. Management ACL only restricts access  
to the device for management configuration or viewing.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
145  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Management ACL Commands  
Example  
The following example creates a management access list called mlist, configures  
management Ethernet interfaces 1 and 9 and makes the new access list the active list.  
Console(config)# management access-list mlist  
Console(config-macl)# permit ethernet ext.1  
Console(config-macl)# permit ethernet ext.9  
Console(config-macl)# exit  
Console(config)# management access-class mlist  
The following example creates a management access list called mlist, configures all  
interfaces to be management interfaces except Ethernet interfaces 1 and 9 and makes the  
new access list the active list.  
Console(config)# management access-list mlist  
Console(config-macl)# deny ethernet ext.1  
Console(config-macl)# deny ethernet ext.9  
Console(config-macl)# permit  
Console(config-macl)# exit  
Console(config)# management access-class mlist  
146  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
permit (Management)  
The permit Management Access-List Configuration mode command defines a permit  
rule.  
Syntax  
permit [ethernet interface-number | vlan vlan-id | port-channel port-channel-number |]  
[service service]  
permit ip-source ip-address [mask mask | prefix-length] [ethernet interface-number |  
vlan vlan-id | port-channel port-channel-number |] [service service]  
Parameters  
interface-number — A valid Ethernet port number.  
vlan-id — A valid VLAN number.  
port-channel-number — A valid port channel index.  
ip-address — A valid source IP address.  
mask — A valid network mask of the source IP address.  
prefix-length — Number of bits that comprise the source IP address prefix. The prefix length  
must be preceded by a forward slash (/). (Range: 0-32)  
service — Service type. Possible values: telnet, ssh, http, https and snmp.  
Default Configuration  
If no permit rule is defined, the default is set to deny.  
Command Mode  
Management Access-list Configuration mode  
User Guidelines  
Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is  
defined on the appropriate interface.  
The system supports up to 128 management access rules.  
Example  
The following example permits all ports in the mlist access list.  
Console(config)# management access-list mlist  
Console(config-macl)# permit  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
147  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
deny (Management)  
The deny Management Access-List Configuration mode command defines a deny rule.  
Syntax  
deny [ethernet interface-number | vlan vlan-id | port-channel port-channel-number |]  
[service service]  
deny ip-source ip-address [mask mask | prefix-length] [ethernet interface-number | vlan  
vlan-id | port-channel port-channel-number |] [service service]  
Parameters  
interface-number — A valid Ethernet port number.  
vlan-id — A valid VLAN number.  
port-channel-number — A valid port-channel number.  
ip-address — A valid source IP address.  
mask — A valid network mask of the source IP address.  
mask prefix-length — Specifies the number of bits that comprise the source IP address prefix.  
The prefix length must be preceded by a forward slash (/). (Range: 0-32)  
service — Service type. Possible values: telnet, ssh, http, https and snmp.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Management Access-list Configuration mode  
User Guidelines  
Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is  
defined on the appropriate interface.  
The system supports up to 128 management access rules.  
Example  
The following example denies all ports in the access list called mlist.  
Console(config)# management access-list mlist  
Console(config-macl)# deny  
148  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
management access-class  
The management access-class Global Configuration mode command restricts  
management connections by defining the active management access list. To disable this  
restriction, use the no form of this command.  
Syntax  
management access-class {name}  
no management access-class  
Parameters  
name — Specifies the name of the access list to be used. (Range: 1-32 characters)  
Default Configuration  
If no access list is specified, an empty access list is used.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures an access list called mlist as the management access  
list.  
Console(config)# management access-class mlist  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
149  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
show management access-list  
The show management access-list Privileged EXEC mode command displays  
management access-lists.  
Syntax  
show management access-list [name]  
Parameters  
name — Specifies the name of a management access list. (Range: 1-32 characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the mlist management access list.  
Console# show management access-list mlist  
mlist  
-----  
permit ethernet ext.1  
permit ethernet ext.2  
! (Note: all other access implicitly denied)  
150  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
show management access-class  
The show management access-class Privileged EXEC mode command displays the  
active management access list.  
Syntax  
show management access-class  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays information about the active management access list.  
Console# show management access-class  
Management access-class is enabled, using access list mlist  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
151  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Management ACL Commands  
152  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
PHY Diagnostics Commands  
14 PHY Diagnostics Commands  
test copper-port tdr  
The test copper-port tdr Privileged EXEC mode command uses Time Domain  
Reflectometry (TDR) technology to diagnose the quality and characteristics of a copper  
cable attached to a port.  
Syntax  
test copper-port tdr interface  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
The port to be tested should be shut down during the test, unless it is a combination port  
with fiber port active.  
The maximum length of the cable for the TDR test is 120 meter.  
Example  
The following example results in a report on the cable attached to port 3.  
Console# test copper-port tdr ext.3  
Cable is open at 64 meters  
Console# test copper-port tdr ext.3  
Can’t perform this test on fiber ports  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
153  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
PHY Diagnostics Commands  
show copper-ports tdr  
The show copper-ports tdr User EXEC mode command displays information on the last  
Time Domain Reflectometry (TDR) test performed on copper ports.  
Syntax  
show copper-ports tdr [interface]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
The maximum length of the cable for the TDR test is 120 meters.  
Example  
The following example displays information on the last TDR test performed on all copper  
ports.  
Console> show copper-ports tdr  
Port  
Result  
------  
OK  
Length [meters]  
---------------  
Date  
----  
----  
1
2
3
4
5
Short  
50  
13:32:00 23 July 2005  
Test has not been performed  
Open  
64  
-
13:32:00 23 July 2005  
-
Fiber  
154  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
PHY Diagnostics Commands  
show copper-ports cable-length  
The show copper-ports cable-length User EXEC mode command displays the estimated  
copper cable length attached to a port.  
Syntax  
show copper-ports cable-length [interface]  
Parameters  
interface — A valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
The port must be active and working in 100M or 1000M mode.  
Example  
The following example displays the estimated copper cable length attached to all ports.  
Console> show copper-ports cable-length  
Port  
Length [meters]  
---------------------  
< 50  
----  
1
2
3
1
Copper not active  
110-140  
Fiber  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
155  
Download from Www.Somanuals.com. All Manuals Search And Download.  
PHY Diagnostics Commands  
156  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Channel Commands  
15 Port Channel Commands  
interface port-channel  
The interface port-channel Global Configuration mode command enters the interface  
configuration mode to configure a specific port-channel.  
Syntax  
interface port-channel port-channel-number  
Parameters  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Eight aggregated links can be defined with up to eight member ports per port-channel. The  
aggregated links’ valid IDs are 1-8.  
Example  
The following example enters the context of port-channel number 1.  
Console(config)# interface port-channel 1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
157  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Port Channel Commands  
interface range port-channel  
The interface range port-channel Global Configuration mode command enters the  
interface configuration mode to configure multiple port-channels.  
Syntax  
interface range port-channel {port-channel-range | all}  
Parameters  
port-channel-range — List of valid port-channels to add. Separate nonconsecutive  
port-channels with a comma and no spaces. A hyphen designates a range of port-  
channels.  
all — All valid port-channels.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Commands under the interface range context are executed independently on each  
interface in the range.  
Example  
The following example groups port-channels 1, 2 and 6 to receive the same command.  
Console(config)# interface range port-channel 1-2,6  
channel-group  
The channel-group Interface Configuration (Ethernet) mode command associates a port  
with a port-channel. To remove a port from a port-channel, use the no form of this  
command.  
158  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Channel Commands  
Syntax  
channel-group port-channel-number mode {on | auto}  
no channel-group  
Parameters  
port-channel_number — Specifies the number of the valid port-channel for the  
current port to join.  
on — Forces the port to join a channel without an LACP operation.  
auto — Allows the port to join a channel as a result of an LACP operation.  
Default Configuration  
The port is not assigned to a port-channel.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example forces port 1 to join port-channel 1 without an LACP operation.  
Console(config)# interface ethernet ext.1  
Console(config-if)# channel-group 1 mode on  
show interfaces port-channel  
The show interfaces port-channel Privileged EXEC mode command displays port-  
channel information.  
Syntax  
show interfaces port-channel [port-channel-number]  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
159  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Channel Commands  
Parameters  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays information on all port-channels.  
Console# show interfaces port-channel  
Channel  
Ports  
-------  
---------------------------------  
Active: 1, 2  
1
2
3
Active: 2, 7 Inactive: 1  
Active: 3, 8  
160  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Monitor Commands  
16 Port Monitor Commands  
port monitor  
The port monitor Interface Configuration mode command starts a port monitoring  
session. To stop a port monitoring session, use the no form of this command.  
Syntax  
port monitor src-interface [rx | tx]  
no port monitor src-interface  
Parameters  
src-interface—Valid Ethernet port. (Full syntax: unit/port)  
rxMonitors received packets only.  
txMonitors transmitted packets only.  
Default Configuration  
Monitors both received and transmitted packets.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
This command enables traffic on one port to be copied to another port, or between the  
source port (src-interface) and a destination port (port being configured).  
The following restrictions apply to ports configured as destination ports:  
The port cannot be already configured as a source port.  
The port cannot be a member in a port-channel.  
An IP interface is not configured on the port.  
GVRP is not enabled on the port.  
The port is not a member of a VLAN, except for the default VLAN (will automatically be  
removed from the default VLAN).  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
161  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Port Monitor Commands  
The following restrictions apply to ports configured to be source ports:  
The port cannot be already configured as a destination port.  
Example  
The following example copies traffic on port 8 (source port) to port 1 (destination port).  
Console(config)# interface ethernet ext.11  
Console(config-if)# port monitor ext.8  
port monitor vlan-tagging  
The port monitor Interface Configuration (Ethernet) mode command transmits tagged  
ingress mirrored packets. To transmit untagged ingress mirrored packets, use the no form  
of this command.  
Syntax  
port monitor vlan-tagging  
no port monitor vlan-tagging  
Default Configuration  
Ingress mirrored packets are transmitted untagged.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures all ingress mirrored packets from port 9 to be  
transmitted as tagged packets.  
Console (config)# interface ethernet ext.9  
Console (config-if)# port monitor vlan-tagging  
162  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Monitor Commands  
show ports monitor  
The show ports monitor User EXEC mode command displays the port monitoring status.  
Syntax  
show ports monitor  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows how the port monitoring status is displayed.  
Console> show ports monitor  
Source Port  
Destination Port  
Type  
-----  
RX,TX  
RX,TX  
RX  
Status  
-------  
Active  
Active  
Active  
VLAN Tagging  
-----------  
----------------  
------------  
1
8
8
8
No  
No  
No  
2
18  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
163  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Port Monitor Commands  
164  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
17 QoS Commands  
qos  
The qos Global Configuration mode command enables quality of service (QoS) on the  
device. To disable QoS on the device, use the no form of this command.  
Syntax  
qos [basic | advanced | service]  
no qos  
Parameters  
basic — QoS basic mode.  
advanced — QoS advanced mode, which enables the full range of QoS configuration.  
service — QoS service mode, which enables the user to define QOS in a simpler  
manner.  
Default Configuration  
The QoS basic mode is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
When the QoS service mode is enabled, Access Control Lists (ACLs) are no longer  
available. Instead the user is prompted to import pre-defined ACLs as Flow Classification  
Lists (FCLs).  
Example  
The following example enables QoS on the device.  
Console(config)# qos  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
165  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
QoS Commands  
show qos  
The show qos User EXEC mode command displays the quality of service (QoS) mode for  
the device.  
Syntax  
show qos  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
Trust mode is displayed if QoS is enabled in basic mode.  
Example  
The following example displays QoS attributes when QoS is enabled in basic mode on the  
device.  
Console> show qos  
Qos: basic  
Basic tust: dscp  
show qos aggregate-policer  
The show qos aggregate-policer Privileged EXEC mode command displays the  
aggregate policer parameter.  
Syntax  
show qos aggregate-policer [aggregate-policer-name]  
Parameters  
aggregate-policer-name — Specifies the name of the aggregate policer to be  
displayed.  
166  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines.  
Example  
The following example displays the parameters of the aggregate policer called ‘policer1’.  
Console# show qos aggregate-policer policer1  
aggregate-policer policer1 96000 4800 exceed-action drop  
not used by any policy map  
show qos interface  
The show qos interface Privileged EXEC mode command displays Quality of Service  
(QoS) information on the interface.  
Syntax  
show qos interface [ethernet interface-number | port-channel number | port-channel  
number] [buffers | queueing | policers | shapers]  
Parameters  
interface-number Valid Ethernet port number.  
number Valid port-channel number.  
buffers – Displays the buffer setting for the interface’s queues. Displays the queue  
depth for each queue and the thresholds for the WRED.  
queuing — Displays the queue strategy (WRR or EF), the weight for WRR queues,  
the CoS to queue map and the EF priority.  
policers — Displays the shaper of the specified interface and the shaper for the queue  
on the specified interface.  
shapers — Displays all the policers configured for this interface, their setting and the  
number of policers currently unused.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
167  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Default Configuration  
There is no default configuration for this command.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
If no keyword is specified, port QoS mode (for example., DSCP trusted, CoS trusted,  
untrusted), default CoS value, DSCP-to-DSCP-mutation map attached to the port, and  
policy map attached to the interface are displayed.  
If no interface is specified, QoS information about all interfaces is displayed.  
Example  
The following example displays the buffer settings for queues on Ethernet port1.  
Console# show qos interface ethernet 1 buffers  
Ethernet 1  
Notify Q depth  
qid  
1
Size  
125  
125  
125  
125  
125  
125  
125  
125  
2
3
4
5
6
7
8
qid  
1
Threshold  
100  
2
100  
3
100  
4
100  
5
N/A  
6
N/A  
168  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
7
8
N/A  
N/A  
qid  
Min  
DP0  
Max  
DP0  
Prob  
DP0  
Min  
DP1  
Max  
DP1  
Prob  
DP1  
Min  
DP2  
Max  
DP2  
Prob  
Weight  
DP2  
N/A  
N/A  
N/A  
N/A  
4
1
2
3
4
5
6
7
8
N/A  
N/A  
N/A  
N/A  
50  
N/A  
N/A  
N/A  
N/A  
60  
N/A  
N/A  
N/A  
N/A  
13  
N/A  
N/A  
N/A  
N/A  
65  
N/A  
N/A  
N/A  
N/A  
80  
N/A  
N/A  
N/A  
N/A  
6
N/A  
N/A  
N/A  
N/A  
85  
N/A  
N/A  
N/A  
N/A  
95  
N/A  
N/A  
N/A  
N/A  
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
show qos map  
The show qos map User EXEC mode command displays all QoS maps.  
Syntax  
show qos map [dscp-queue]  
Parameters  
dscp-queue — Indicates the DSCP to queue map.  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
169  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Example  
The following example displays the DSCP port-queue map.  
Console> show qos map  
Dscp-queue map:  
d1  
--  
0
: d2  
0
--  
01  
01  
02  
02  
03  
04  
04  
1
--  
01  
01  
02  
02  
03  
04  
04  
2
--  
01  
01  
02  
03  
03  
04  
04  
3
--  
01  
01  
02  
03  
03  
04  
04  
4
--  
01  
01  
02  
03  
03  
04  
5
--  
01  
01  
02  
03  
03  
04  
6
--  
01  
02  
02  
03  
03  
04  
7
--  
01  
02  
02  
03  
03  
04  
8
--  
01  
02  
02  
03  
04  
04  
9
--  
01  
02  
02  
03  
04  
04  
: --  
:
:
:
:
:
:
:
1
2
3
4
5
6
The following table describes the significant fields shown above.  
Column  
d1  
Description  
Decimal Bit 1 of DSCP  
Decimal Bit 2 of DSCP  
Queue numbers  
d2  
01 - 04  
class-map  
The create-map Global Configuration mode command creates or modifies a class map  
and enters the Class-map Configuration mode. To delete a class map, use the no form of  
this command.  
Syntax  
class-map class-map-name [match-all | match-any]  
no class-map class-map-name  
Parameters  
class-map-name — Specifies the name of the class map.  
match-all — Checks that the packet matches all classification criteria in the class map  
match statement.  
170  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
match-any — Checks that the packet matches one or more classification criteria in  
the class map match statement.  
Default Configuration  
By default, the match-all parameter is selected.  
Command Mode  
Global Configuration mode  
User Guidelines  
The class-map Global Configuration mode command is used to define packet  
classification, marking and aggregate policing as part of a globally named service policy  
applied on a per-interface basis.  
The Class-Map Configuration mode enables entering up to two match Class-map  
Configuration mode commands to configure the classification criteria for the specified  
class. If two match Class-map Configuration mode commands are entered, each should  
point to a different type of ACL (e.g., one to an IP ACL and one to a MAC ACL). Since  
packet classification is based on the order of the classification criteria, the order in which  
the match Class-Map Configuration mode commands are entered is important.  
If there is more than one match statement in a match-all class map and the same  
classification field appears in the participating ACLs, an error message is generated.  
Note: A class map in match-all mode cannot be configured if it contains both an IP ACL and a  
MAC ACL with an ether type that is not 0x0800.  
Example  
The following example creates a class map called class1 and configures it to check that  
packets match all classification criteria in the class map match statement.  
Console(config)# class-map class1 match-all  
Console(config-cmap)#  
show class-map  
The show class-map User EXEC mode command displays all class maps.  
Syntax  
show class-map [class-map-name]  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
171  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Parameters  
class-map-name — Specifies the name of the class map to be displayed.  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example shows the class map for class1.  
Console> show class-map class1  
Class Map match-any class1 (id4)  
Match Ip dscp 11 21  
match  
The match Class-map Configuration mode command defines the match criteria for  
classifying traffic. To delete the match criteria, use the no form of this command.  
Syntax  
match access-group acl-name  
no match access-group acl-name  
Parameters  
acl-name — Specifies the name of an IP or MAC ACL.  
Default Configuration  
No match criterion is supported.  
172  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Command Mode  
Class-map Configuration mode.  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines the match criterion for classifying traffic as an access  
group called enterprise in a class map called class1..  
Console (config)# class-map class1  
Console (config-cmap)# match access-group enterprise  
policy-map  
The policy-map Global Configuration mode command creates a policy map and enters  
the Policy-map Configuration mode. To delete a policy map, use the no form of this  
command.  
Syntax  
policy-map policy-map-name  
no policy-map policy-map-name  
Parameters  
policy-map-name — Specifies the name of the policy map.  
Default Configuration  
If the packet is an IP packet, the DCSP value of the policy map is 0.  
If the packet is tagged, the CoS value is 0.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
173  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
User Guidelines  
Before configuring policies for classes whose match criteria are defined in a class map,  
use the policy-map Global Configuration mode command to specify the name of the  
policy map to be created or modified.  
Class policies in a policy map can only be defined if match criteria has already been  
defined for the classes. Use the class-map Global Configuration and match Class-map  
Configuration commands to define the match criteria of a class.  
Only one policy map per interface per direction is supported. A policy map can be applied  
to multiple interfaces and directions.  
Example  
The following example creates a policy map called policy1 and enters the Policy-map  
Configuration mode.  
Console (config)# policy-map policy1  
Console (config-pmap)#  
class  
The class Policy-map Configuration mode command defines a traffic classification and  
enters the Policy-map Class Configuration mode. To remove a class map from the policy  
map, use the no form of this command.  
Syntax  
class class-map-name [access-group acl-name]  
no class class-map-name  
Parameters  
class-map-name — Specifies the name of an existing class map. If the class map does  
not exist, a new class map will be created under the specified name.  
acl-name — Specifies the name of an IP or MAC ACL.  
Default Configuration  
No policy map is defined.  
174  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Command Mode  
Policy-map Configuration mode  
User Guidelines  
Before modifying a policy for an existing class or creating a policy for a new class, use the  
policy-map Global Configuration mode command to specify the name of the policy map  
to which the policy belongs and to enter the Policy-map Configuration mode.  
Use the service-policy (Ethernet, Port-channel) Interface Configuration mode command  
to attach a policy map to an interface. Use an existing class map to attach classification  
criteria to the specified policy map and use the access-group parameter to modify the  
classification criteria of the class map.  
If this command is used to create a new class map, the name of an IP or MAC ACL must  
also be specified.  
Example  
The following example defines a traffic classification called class1 with an access-group  
called enterprise. The class is in a policy map called policy1.  
Console(config)# policy-map policy1  
Console (config-pmap)# class class1 access-group enterprise  
show policy-map  
The show policy-map User EXEC command displays the policy maps.  
Syntax  
show policy-map [policy-map-name [class class-name]]  
Parameters  
policy-map-name — Specifies the name of the policy map to be displayed.  
class-name — Specifies the name of the class whose QoS policies are to be displayed.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
175  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays all policy maps.  
Console> show policy-map  
Policy Map policy1  
class class1  
set Ip dscp 7  
Policy Map policy2  
class class 2  
police 96000 4800 exceed-action drop  
class class3  
police 124000 96000 exceed-action policed-dscp-transmit  
trust cos-dscp  
The trust cos-dscp Policy-map Class Configuration mode command configures the trust  
state. The trust state determines the source of the internal DSCP value used by Quality of  
Service (QoS). To return to the default configuration, use the no form of this command.  
Syntax  
trust cos-dscp  
no trust cos-dscp  
Default Configuration  
The port is not in the trust mode.  
If the port is in trust mode, the internal DSCP value is derived from the ingress packet.  
Command Mode  
Policy-map Class Configuration mode  
176  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
User Guidelines  
Action serviced to a class, so that if an IP packet arrives, the queue is assigned per DSCP.  
If a non-IP packet arrives, the queue is assigned per CoS (VPT).  
Example  
The following example configures the trust state for a class called class1 in a policy map  
called policy1.  
Console (config)# policy-map policy1  
Console (config-pmap)# class class1  
Console (config-pmap-c)# trust cos-dscp  
set  
The set Policy-map Class Configuration mode command sets new values in the IP packet.  
Syntax  
set {dscp new-dscp | queue queue-id | cos new-cos}  
no set  
Parameters  
new-dscp — Specifies a new DSCP value for the classified traffic. (Range: 0-63)  
queue-id — Specifies an explicit queue ID for setting the egress queue.  
new-cos — Specifies a new user priority for marking the packet. (Range: 0-7)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Policy-map Class Configuration mode  
User Guidelines  
This command is mutually exclusive with the trust Policy-map Class Configuration  
command within the same policy map.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
177  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Policy maps that contain set or trust Policy-map Class Configuration commands or that  
have ACL classifications cannot be attached to an egress interface by using the service-  
policy (Ethernet, Port-channel) Interface Configuration mode command.  
To return to the Policy-map Configuration mode, use the exit command. To return to  
privileged EXEC mode, use the end command.  
Example  
The following example sets the dscp value in the packet to 56 for classes in in policy map  
called policy1.  
Console (config)# policy-map policy1  
Console (config-pmap)# set dscp 56  
Console (config-if)# service-policy input policy1  
police  
The police Policy-map Class Configuration mode command defines the policer for  
classified traffic. To remove a policer, use the no form of this command.  
Syntax  
police committed-rate-bps committed -burst-byte [exceed-action {drop | policed-dscp-  
transmit}]  
no police  
Parameters  
committed-rate-bps — Specifies the average traffic rate (CIR) in bits per second  
(bps).  
committed -burst-byte — Specifies normal burst size (CBS) in bytes.  
drop — Indicates that when the rate is exceeded, the packet is dropped.  
policed-dscp-transmit — Indicates that when the rate is exceeded, the DSCP of the  
packet is remarked according to the policed-DSCP map as configured by the qos map  
policed-dscp Global Configuration mode command.  
Default Configuration  
This command has no default configuration.  
178  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Command Mode  
Policy-map Class Configuration mode  
User Guidelines  
Policing uses a token bucket algorithm. CIR represents the speed with which the token is  
removed from the bucket. CBS represents the depth of the bucket.  
Example  
The following example defines a policer for classified traffic. When the traffic rate  
exceeds 124,000 bps or the normal burst size exceeds 96000 bps, the packet is dropped.  
The class is called class1 and is in a policy map called policy1..  
Console (config)# policy-map policy1  
Console (config-pmap)# class class1  
Console (config-pmap-c)# police 124000 9600 exceed-action drop  
service-policy  
The service-policy Interface Configuration (Ethernet, port-Channel) mode command  
applies a policy map to the input of a particular interface. To detach a policy map from an  
interface, use the no form of this command.  
Syntax  
service-policy {input policy-map-name}  
no service-policy {input}  
Parameters  
policy-map-name — Specifies the name of the policy map to be applied to the input  
interface.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface Configuration (Ethernet, port-Channel) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
179  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
User Guidelines  
Only one policy map per interface per direction is supported.  
Example  
The following example attaches a policy map called policy1 to the input interface.  
Console(config-if)# service-policy input policy1  
qos aggregate-policer  
The qos aggregate-policer Global Configuration mode command defines the policer  
parameters that can be applied to multiple traffic classes within the same policy map. To  
remove an existing aggregate policer, use the no form of this command.  
Syntax  
qos aggregate-policer aggregate-policer-name committed-rate-bps excess-burst-byte  
exceed-action {drop | policed-dscp-transmit} [dscp dscp]  
no qos aggregate-policer  
Parameters  
aggregate-policer-name — Specifies the name of the aggregate policer.  
committed-rate-bps — Specifies the average traffic rate (CIR) in bits per second  
(bps).  
excess-burst-byte — Specifies the normal burst size (CBS) in bytes.  
drop — Indicates that when the rate is exceeded, the packet is dropped.  
policed-dscp-transmit — Indicates that when the rate is exceeded, the DSCP of the  
packet is remarked.  
dscp — Specifies the value that the DSCP would be remarked. If unspecified, the  
DSCP would be remarked according to the policed-DSCP map as configured by the  
qos map policed-dscp Global Configuration mode command.  
Default Configuration  
No aggregate policer is define.  
Command Mode  
Global Configuration mode  
180  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
User Guidelines  
Policers that contain set or trust Policy-map Class Configuration commands or that have  
ACL classifications cannot be attached to an output interface.  
Define an aggregate policer if the policer is shared with multiple classes.  
Policers in one port cannot be shared with other policers in another device; traffic from  
two different ports can be aggregated for policing purposes.  
An aggregate policer can be applied to multiple classes in the same policy map; An  
aggregate policer cannot be applied across multiple policy maps.  
This policer can also be used in Cascade police to make a cascade policer.  
An aggregate policer cannot be deleted if it is being used in a policy map. The no police  
aggregate Policy-map Class Configuration command must first be used to delete the  
aggregate policer from all policy maps.  
Policing uses a token bucket algorithm. CIR represents the speed with which the token is  
removed from the bucket. CBS represents the depth of the bucket.  
Example  
The following example defines the parameters of a policer called policer1 that can be  
applied to multiple classes in the same policy map. When the average traffic rate exceeds  
124,000 bps or the normal burst size exceeds 96000 bps, the packet is dropped..  
Console (config)# qos aggregate-policer policer1 124000 96000  
exceed-action drop  
show qos aggregate-policer  
The show qos aggregate-policer User EXEC mode command displays the aggregate  
policer parameter.  
Syntax  
show qos aggregate-policer [aggregate-policer-name]  
Parameters  
aggregate-policer-name — Specifies the name of the aggregate policer to be  
displayed.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
181  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines.  
Example  
The following example displays the parameters of the aggregate policer called policer1.  
Console> show qos aggregate-policer policer1  
aggregate-policer policer1 96000 4800 exceed-action drop  
not used by any policy map  
police aggregate  
The police aggregate Policy-map Class Configuration mode command applies an  
aggregate policer to multiple classes within the same policy map. To remove an existing  
aggregate policer from a policy map, use the no form of this command.  
Syntax  
police aggregate aggregate-policer-name  
no police aggregate aggregate-policer-name  
Parameters  
aggregate-policer-name — Specifies the name of the aggregate policer.  
·Default Configuration  
This command has no default configuration.  
Command Mode  
Policy-map Class Configuration mode  
182  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
User Guidelines  
An aggregate policer can be applied to multiple classes in the same policy map; An  
aggregate policer cannot be applied across multiple policy maps or interfaces.  
To return to the Policy-map Configuration mode, use the exit command. To return to the  
Privileged EXEC mode, use the end command.  
Example  
The following example applies the aggregate policer called policer1 to a calass called  
class1 in policy map called policy1.  
Console(config)# policy-map policy1  
Console(config-pmap)# class class1  
Console(config-pmap-c)# police aggregate policer1  
wrr-queue cos-map  
The wrr-queue cos-map Global Configuration mode command maps Class of Service  
(CoS) values to a specific egress queue. To return to the default configuration, use the no  
form of this command.  
Syntax  
wrr-queue cos-map queue-id cos1...cos8  
no wrr-queue cos-map [queue-id]  
Parameters  
queue-id — Specifies the queue number to which the CoS values are mapped.  
cos1...cos8 — Specifies CoS values to be mapped to a specific queue. (Range: 0-7)  
Default Configuration  
CoS values are mapped to 8 queues as follows:  
Cos0 is mapped to queue 3.  
Cos1 is mapped to queue 1.  
Cos2 is mapped to queue 2.  
Cos3 is mapped to queue 4.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
183  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Cos4 is mapped to queue 5.  
Cos5 is mapped to queue 6.  
Cos6 is mapped to queue 7.  
Cos7 is mapped to queue 8.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command can be used to distribute traffic into different queues, where each queue is  
configured with different Weighted Round Robin (WRR) and Weighted Random Early  
Detection (WRED) parameters.  
It is recommended to specifically map a single VPT to a queue, rather than mapping  
multiple VPTs to a single queue. Use the priority-queue out Interface Configuration  
(Ethernet, Port-channel) mode command to enable expedite queues.  
Example  
The following example maps CoS 7 to queue 2.  
Console(config)# wrr-queue cos-map 2 7  
wrr-queue bandwidth  
The wrr-queue bandwidth Interface Configuration (Ethernet, port-channel) mode  
command assigns weights to each Weighted Round Robin (WRR) queue. The weight ratio  
determines the frequency by which the packet scheduler dequeues packets from each  
queue. To return to the default configuration, use the no form of this command.  
Syntax  
wrr-queue bandwidth weight1 weight2 ... weight_n  
no wrr-queue bandwidth  
Parameters  
weight1 weight2 ... weight_n — Sets the ratio of the bandwidth assigned by the WRR  
packet scheduler for the packet queues. Separate each value by a space. (Range: 6-  
255)  
184  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Default Configuration  
The default WRR weight ratio is one-eighth of the sum of all queue weights (each weight  
is set to 6).  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
Use the priority-queue out num-of-queues Global Configuration mode command to  
configure a queue as WRR or Strict Priority. Use this command to define a WRR weight  
per interface.  
The weight ratio for each queue is defined by the queue weight divided by the sum of all  
queue weights (i.e., the normalized weight). This sets the bandwidth allocation for each  
queue.  
A queue can be assigned a WRR weight of 0, in which case no bandwidth is allocated to  
the queue and the shared bandwidth is divided among the remaining queues.  
All eight queues participate in the WRR, excluding the queues that are assigned as  
expedite queues. The weights of the expedite queues are ignored in the ratio calculation.  
An expedite queue is a priority queue, and it is serviced before the other queues are  
serviced. Use the priority-queue out Interface Configuration (Ethernet, port-channel)  
mode command to enable expedite queues.  
Example  
The following example assigns a weight of 6 to each of the 8 WRR queues.  
Console(config-if)# wrr-queue bandwidth 6 6 6 6 6 6 6 6  
priority-queue out num-of-queues  
The priority-queue out num-of-queues Global Configuration mode command  
configures the number of expedite queues. To return to the default configuration, use the  
no form of this command.  
Syntax  
priority-queue out num-of-queues number-of-queues  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
185  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
no priority-queue out num-of-queues  
Parameters  
number-of-queues — Specifies the number of expedite queues. Expedite queues have  
higher indexes. (Range: 0-8)  
Default Configuration  
All queues are expedite queues.  
Command Mode  
Global Configuration mode  
User Guidelines  
Configuring the number of expedite queues affects the Weighted Round Robin (WRR)  
weight ratio because fewer queues participate in the WRR.  
Example  
The following example configures the number of expedite queues as 0.  
Console(config)# priority-queue out num-of-queues 0  
traffic-shape  
The traffic-shape Interface Configuration (Ethernet, port-channel) mode command  
configures the shaper of the egress port/queue. To disable the shaper, use the no form of  
this command.  
Syntax  
traffic-shape {committed-rate committed-burst}  
traffic-shape [queue-id]  
no traffic-shape [queue-id]  
Parameters  
committed-rate — Specifies the average traffic rate (CIR) in bits per second (bps).  
(Range: 6510-64-10000000)  
186  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
excess-burst — Specifies the excess burst size (CBS) in bytes.(Range: 4096-  
16769020)  
queue-id — Specifies the queue number to which the shaper is assigned. (Range: 0-8)  
Default Configuration  
No shape is defined.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
This command activates the shaper on a specified egress port or egress queue.  
To activate the shaper on an egress port, enter the Interface Configuration mode and  
specify the port number. Then run this command without the queue-id parameter. The  
CIR and the CBS will be applied to the specified port.  
To activate the shaper for specific queue, run this command with the queue-id parameter.  
Example  
The following example sets a shaper on Ethernet port 5 when the average traffic rate  
exceeds 124000 bps or the normal burst size exceeds 96000 bps.  
Console(config)# interface ethernet ext.5  
Console(config-if) traffic-shape 124000 96000  
show qos interface  
The show qos interface User EXEC mode command displays Quality of Service (QoS)  
information on the interface.  
Syntax  
show qos interface [ethernet interface-number | port-channel number | port-channel  
number] [buffers | queueing | policers | shapers]  
Parameters  
interface-number Valid Ethernet port number.  
number Valid port-channel number.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
187  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
buffers – Displays the buffer setting for the interface’s queues. Displays the queue  
depth for each queue and the thresholds for the WRED.  
queuing — Displays the queue strategy (WRR or EF), the weight for WRR queues,  
the CoS to queue map and the EF priority.  
policers — Displays the shaper of the specified interface and the shaper for the queue  
on the specified interface.  
shapers — Displays all the policers configured for this interface, their setting and the  
number of policers currently unused.  
Default Configuration  
There is no default configuration for this command.  
Command Mode  
User EXEC mode  
User Guidelines  
If no keyword is specified, port QoS QoS mode (e.g., DSCP trusted, CoS trusted,  
untrusted), default CoS value, DSCP-to-DSCP-mutation map attached to the port, and  
policy map attached to the interface are displayed.  
If no interface is specified, QoS information about all interfaces is displayed.  
Example  
The following example displays the buffer settings for queues on Ethernet port 1.  
Console# show qos interface ethernet 1 buffers  
Ethernet 1  
Notify Q depth  
qid  
1
Size  
125  
125  
125  
125  
125  
125  
125  
125  
2
3
4
5
6
7
8
188  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
qid  
1
Threshold  
100  
2
100  
3
100  
4
100  
5
N/A  
6
N/A  
7
N/A  
8
N/A  
qid  
Min  
DP0  
Max  
DP0  
Prob  
DP0  
Min  
DP1  
Max  
DP1  
Prob  
DP1  
Min  
DP2  
Max  
Prob  
DP2  
Weight  
DP2  
N/A  
N/A  
N/A  
N/A  
95  
1
2
3
4
5
6
7
8
N/A  
N/A  
N/A  
N/A  
50  
N/A  
N/A  
N/A  
N/A  
60  
N/A  
N/A  
N/A  
N/A  
13  
N/A  
N/A  
N/A  
N/A  
65  
N/A  
N/A  
N/A  
N/A  
80  
N/A  
N/A  
N/A  
N/A  
6
N/A  
N/A  
N/A  
N/A  
85  
N/A  
N/A  
N/A  
N/A  
4
N/A  
N/A  
N/A  
N/A  
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
50  
60  
13  
65  
80  
6
85  
95  
4
2
qos wrr-queue threshold  
The wrr-queue threshold Global Configuration mode command assigns queue  
thresholds globally. To return to the default configuration, use the no form of this  
command.  
Syntax  
qos wrr-queue threshold queue-id threshold-percentage0 threshold-percentage1,  
threshold-percentage2  
no qos wrr-queue threshold queue-id  
qos wrr-queue threshold gigabitethernet queue-id threshold-percentage0 threshold-  
percentage1, threshold-percentage2  
no qos wrr-queue threshold gigabitethernet queue-id  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
189  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
qos wrr-queue threshold tengigabitethernet queue-id threshold-percentage0 threshold-  
percentage1,  
threshold-percentage2  
no qos wrr-queue threshold tengigabitethernet queue-id  
Parameters  
gigabitethernet — Indicates that the thresholds are to be applied to Gigabit Ethernet  
ports.  
tengigabitethernet — Indicates that the thresholds are to be applied to 10 Gigabit  
Ethernet ports.  
queue-id — Specifies the queue number to which the threshold is assigned.  
threshold-percentage0,1,2 — Specifies the queue threshold percentage value. Each  
value is separated by a space. (Range: 0-100)  
Default Configuration  
80 percent for all thresholds.  
Command Mode  
Global Configuration mode.  
User Guidelines  
The packet refers to a certain threshold by the conformance level. If threshold 0 is  
exceeded, packets with the corresponding DP are dropped until the threshold is no longer  
exceeded. However, packets assigned to threshold 1 or 2 continue to be queued and sent as  
long as the second or third threshold is not exceeded.  
Example  
The following example assigns a threshold of 80 percent to WRR queue 1.  
Console (config)# qos wrr-queue threshold gigabitethernet 1 80  
qos map policed-dscp  
The qos map policed-dscp Global Configuration mode command modifies the policed-  
DSCP map for remarking purposes. To return to the default map, use the no form of this  
command.  
190  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Syntax  
qos map policed-dscp dscp-list to dscp-mark-down  
no qos map policed-dscp  
Parameters  
dscp- list — Specifies up to 8 DSCP values separated by a space. (Range: 0-63)  
dscp-mark-down — Specifies the DSCP value to mark down. (Range: 0-63)  
Default Configuration  
The default map is the Null map, which means that each incoming DSCP value is mapped  
to the same DSCP value.  
Command Mode  
Global Configuration mode.  
User Guidelines  
DSCP values 3,11,19… cannot be remapped to other values.  
·Example  
The following example marks down incoming DSCP value 3 as DSCP value 43 on the  
policed-DSCP map.  
Console(config)# qos map policed-dscp 3 to 43  
Reserved DSCP. DSCP 3 was not configured.  
qos map dscp-queue  
The qos map dscp-queue Global Configuration mode command modifies the DSCP to  
CoS map. To return to the default map, use the no form of this command.  
Syntax  
qos map dscp-queue dscp-list to queue-id  
no qos map dscp-queue  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
191  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Parameters  
dscp-list — Specifies up to 8 DSCP values separated by a space. (Range: 0 - 63)  
queue-id — Specifies the queue number to which the DSCP values are mapped.  
Default Configuration  
The following table describes the default map.  
DSCP value  
Queue-ID  
0-7  
1
8-15  
2
16-23  
3
24-31  
4
32-39  
5
40-47  
6
48-56  
7
57-63  
8
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example maps DSCP values 33, 40 and 41 to queue 1.  
Console(config)# qos map dscp-queue 33 40 41 to 1  
qos trust (Global)  
The qos trust Global Configuration mode command configures the system to the basic  
mode and trust state. To return to the untrusted state, use the no form of this command.  
Syntax  
qos trust {cos | dscp}  
no qos trust  
Parameters  
cos — Indicates that ingress packets are classified with packet CoS values. Untagged  
packets are classified with the default port CoS value.  
dscp — Indicates that ingress packets are classified with packet DSCP values.  
192  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Default Configuration  
CoS is the default trust mode.  
Command Mode  
Global Configuration mode  
User Guidelines  
Packets entering a quality of service (QoS) domain are classified at the edge of the QoS  
domain. When packets are classified at the edge, the switch port within the QoS domain  
can be configured to one of the trusted states because there is no need to classify the  
packets at every device in the domain.  
A switch port on an inter-QoS domain boundary can be configured to the DSCP trust  
state, and, if the DSCP values are different between the QoS domains, the DSCP to DSCP  
mutation map can be applied.  
Use this command to specify whether the port is trusted and which fields of the packet to  
use to classify traffic.  
When the system is configured as trust DSCP, traffic is mapped to a queue according to  
the DSCP-queue map.  
Example  
The following example configures the system to the DSCP trust state.  
Console(config)# qos trust dscp  
qos trust (Interface)  
The qos trust Interface Configuration (Ethernet, port-channel) mode command enables  
each port trust state while the system is in the basic QoS mode. To disable the trust state  
on each port, use the no form of this command.  
Syntax  
qos trust  
no qos trust  
Default Configuration  
qos trust is enabled on each port when the system is in basic mode.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
193  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures Ethernet port 15 to the default trust state.  
Console(config)# interface ethernet Ext.15  
Console(config-if) qos trust  
qos cos  
The qos cos Interface Configuration (Ethernet, port-channel) mode command defines the  
default CoS value of a port. To return to the default configuration, use the no form of this  
command.  
Syntax  
qos cos default-cos  
no qos cos  
Parameters  
default-cos — Specifies the default CoS value of the port. (Range: 0-7)  
Default Configuration  
Default CoS value of a port is 0.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
If the port is trusted, the default CoS value of the port is used to assign a CoS value to all  
untagged packets entering the port.  
194  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Example  
The following example configures port 15 default CoS value to 3.  
Console(config)# interface ethernet ext. 15  
Console(config-if) qos cos 3  
qos dscp-mutation  
The qos dscp-mutation Global Configuration mode command applies the DSCP  
Mutation map to a system DSCP trusted port. To return to the trust state with no DSCP  
mutation, use the no form of this command.  
Syntax  
qos dscp-mutation  
no qos dscp-mutation  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode.  
User Guidelines  
The DSCP to DSCP mutation map is applied to a port at the boundary of a Quality of  
Service (QoS) administrative domain.  
If two QoS domains have different DSCP definitions, use the DSCP to DSCP mutation  
map to match one set of DSCP values with the DSCP values of another domain.  
Apply the DSCP to DSCP mutation map only to ingress and to DSCP-trusted ports.  
Applying this map to a port causes IP packets to be rewritten with newly mapped DSCP  
values at the ingress ports.  
If the DSCP to DSCP mutation map is applied to an untrusted port, class of service (CoS)  
or IP-precedence trusted port, this command has no immediate effect until the port  
becomes DSCP-trusted.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
195  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Example  
The following example applies the DSCP Mutation map to system DSCP trusted ports.  
Console(config)# qos dscp-mutation  
qos map dscp-mutation  
The qos map dscp-mutation Global Configuration mode command modifies the DSCP  
to DSCP mutation map. To return to the default DSCP to DSCP mutation map, use the no  
form of this command.  
Syntax  
qos map dscp-mutation in-dscp to out-dscp  
no qos map dscp-mutation  
Parameters  
in-dscp — Specifies up to 8 DSCP values separated by spaces. (Range: 0-63)  
out-dscp — Specifies up to 8 DSCP values separated by spaces. (Range: 0-63)  
Default Configuration  
The default map is the Null map, which means that each incoming DSCP value is mapped  
to the same DSCP value.  
Command Mode  
Global Configuration mode.  
User Guidelines  
This is the only map that is not globally configured. it is possible to have several maps and  
assign each one to different ports.  
Example  
The following example changes DSCP values 1, 2, 4, 5 and 6 to DSCP mutation map  
value 63.  
Console config)# qos map dscp-mutation 1 2 4 5 6 to 63  
196  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
197  
Download from Www.Somanuals.com. All Manuals Search And Download.  
QoS Commands  
198  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
18 RMON Commands  
show rmon statistics  
The show rmon statistics Privileged EXEC mode command displays RMON Ethernet  
statistics.  
Syntax  
show rmon statistics {ethernet interface number | port-channel port-channel-number}  
Parameters  
interface number Valid Ethernet port.  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays RMON Ethernet statistics for Ethernet port 1.  
Console# show rmon statistics ethernet ext.1  
Port: 1  
Octets: 878128  
Packets: 978  
Broadcast: 7  
Multicast: 1  
CRC Align Errors: 0  
Undersize Pkts: 0  
Collisions: 0  
Oversize Pkts: 0  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
199  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
RMON Commands  
Fragments: 0  
Jabbers: 0  
64 Octets: 98  
65 to 127 Octets: 0  
256 to 511 Octets: 0  
1024 to 1518 Octets: 389  
128 to 255 Octets: 0  
512 to 1023 Octets: 491  
The following table describes the significant fields shown in the display.  
Field  
Description  
Octets  
The total number of octets of data (including those in bad packets) received on  
the network (excluding framing bits but including FCS octets).  
Packets  
Broadcast  
Multicast  
The total number of packets (including bad packets, broadcast packets, and  
multicast packets) received.  
The total number of good packets received and directed to the broadcast  
address. This does not include multicast packets.  
The total number of good packets received and directed to a multicast  
address. This number does not include packets directed to the broadcast  
address.  
CRC Align Errors  
The total number of packets received with a length (excluding framing bits, but  
including FCS octets) of between 64 and 1518 octets, inclusive, but with either  
a bad Frame Check Sequence (FCS) with an integral number of octets (FCS  
Error) or a bad FCS with a non-integral number of octets (Alignment Error).  
Collisions  
The best estimate of the total number of collisions on this Ethernet segment.  
Undersize Pkts  
The total number of packets received, less than 64 octets long (excluding  
framing bits, but including FCS octets) and otherwise well formed.  
Oversize Pkts  
Fragments  
The total number of packets received, longer than 1518 octets (excluding  
framing bits, but including FCS octets) and otherwise well formed.  
The total number of packets received, less than 64 octets in length (excluding  
framing bits but including FCS octets) and either a bad Frame Check  
Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS  
with a non-integral number of octets (Alignment Error).  
Jabbers  
The total number of packets received, longer than 1518 octets (excluding  
framing bits, but including FCS octets), and either a bad Frame Check  
Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS  
with a non-integral number of octets (Alignment Error).  
64 Octets  
The total number of packets (including bad packets) received that are 64  
octets in length (excluding framing bits but including FCS octets).  
65 to 127 Octets  
The total number of packets (including bad packets) received that are between  
65 and 127 octets in length inclusive (excluding framing bits but including FCS  
octets).  
128 to 255 Octets  
256 to 511 Octets  
The total number of packets (including bad packets) received that are between  
128 and 255 octets in length inclusive (excluding framing bits but including  
FCS octets).  
The total number of packets (including bad packets) received that are between  
256 and 511 octets in length inclusive (excluding framing bits but including  
FCS octets).  
200  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
Field  
Description  
512 to 1023 Octets  
The total number of packets (including bad packets) received that are between  
512 and 1023 octets in length inclusive (excluding framing bits but including  
FCS octets).  
1024 to 1518 Octets  
The total number of packets (including bad packets) received that are between  
1024 and 1518 octets in length inclusive (excluding framing bits but including  
FCS octets).  
rmon collection history  
The rmon collection history Interface Configuration (Ethernet, port-channel) mode  
command enables a Remote Monitoring (RMON) MIB history statistics group on an  
interface. To remove a specified RMON history statistics group, use the no form of this  
command.  
Syntax  
rmon collection history index [owner ownername] [buckets bucket-number] [interval  
seconds]  
no rmon collection history index  
Parameters  
index — Specifies the statistics group index . (Range: 1-65535)  
ownername — Specifies the RMON statistics group owner name. (Range: 0-160  
characters)  
bucket-number — Number of buckets specified for the RMON collection history  
group of statistics. If unspecified, defaults to 50. (Range:1-65535)  
seconds — Number of seconds in each polling cycle. (Range: 1-3600)  
Default Configuration  
RMON statistics group owner name is an empty string.  
Number of buckets specified for the RMON collection history statistics group is 50.  
Number of seconds in each polling cycle is 1800.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
201  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
User Guidelines  
Cannot be configured for a range of interfaces (Range context).  
Example  
The following example enables a Remote Monitoring (RMON) MIB history statistics  
group on Ethernet port 1 with index number 1 and a polling interval period of 2400  
seconds.  
Console(config)# interface ethernet ext.1  
Console(config-if)# rmon collection history 1 interval 2400  
show rmon collection history  
The show rmon collection history Privileged EXEC mode command displays the  
requested RMON history group statistics.  
Syntax  
show rmon collection history [ethernet interface | port-channel port-channel-number]  
Parameters  
interface — Valid Ethernet port. (Full syntax: unit/port)  
port-channel-number Valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
202  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
The following example displays all RMON history group statistics.  
Console# show rmon collection history  
Index  
Interface  
Interval  
Requested  
Samples  
Granted  
Samples  
Owner  
-----  
---------  
--------  
30  
---------  
-------  
50  
-------  
CLI  
1
2
1
1
50  
50  
1800  
50  
Manager  
The following table describes the significant fields shown in the display.  
Field  
Description  
An index that uniquely identifies the entry.  
Index  
Interface  
The sampled Ethernet interface  
Interval  
The interval in seconds between samples.  
The requested number of samples to be saved.  
The granted number of samples to be saved.  
The entity that configured this entry  
Requested Samples  
Granted Samples  
Owner  
show rmon history  
The show rmon history Privileged EXEC mode command displays RMON Ethernet  
history statistics.  
Syntax  
show rmon history index {throughput | errors | other} [period seconds]  
Parameters  
index — Specifies the requested set of samples. (Range: 1-65535)  
throughput — Indicates throughput counters.  
errors — Indicates error counters.  
other — Indicates drop and collision counters.  
seconds — Specifies the period of time in seconds. (Range: 1-4294967295)  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
203  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays RMON Ethernet history statistics for index 1.  
Console# show rmon history  
1
throughput  
Sample Set: 1  
Owner: CLI  
Interface: 1  
Interval: 1800  
Requested samples: 50  
Granted samples: 50  
Maximum table size: 500  
Time  
Octets  
Packets  
-------  
357568  
275686  
Broadcast  
Multicast  
---------  
7287  
Util  
-----  
19%  
--------------------  
Jan 18 2005 21:57:00  
Jan 18 2005 21:57:30  
---------  
303595962  
287696304  
----------  
3289  
2789  
5878  
20%  
Console# show rmon history  
1
errors  
Sample Set: 1  
Owner: Me  
Interface: 1  
Interval: 1800  
Requested samples: 50  
Granted samples: 50  
Maximum table size: 500 (800 after reset)  
Time  
CRC Align  
Undersize  
Oversize  
Fragments  
---------  
49  
Jabbers  
----------  
---------  
---------  
--------  
-------  
Jan 18 2005 21:57:00  
Jan 18 2005 21:57:30  
1
1
1
1
0
0
0
0
27  
204  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
Console# show rmon history  
1
other  
Sample Set: 1  
Owner: Me  
Interface:1  
Interval: 1800  
Granted samples: 50  
Requested samples: 50  
Maximum table size: 500  
Time  
Dropped  
Collisions  
--------------------  
Jan 18 2005 21:57:00  
Jan 18 2005 21:57:30  
--------  
----------  
3
3
0
0
The following table describes significant fields shown in the example:  
Field  
Description  
Date and Time the entry is recorded.  
Time  
Octets  
The total number of octets of data (including those in bad packets) received on  
the network (excluding framing bits but including FCS octets).  
Packets  
The number of packets (including bad packets) received during this sampling  
interval.  
Broadcast  
Multicast  
The number of good packets received during this sampling interval that were  
directed to the broadcast address.  
The number of good packets received during this sampling interval that were  
directed to a multicast address. This number does not include packets  
addressed to the broadcast address.  
Util  
The best estimate of the mean physical layer network utilization on this  
interface during this sampling interval, in hundredths of a percent.  
CRC Align  
The number of packets received during this sampling interval that had a length  
(excluding framing bits but including FCS octets) between 64 and 1518 octets,  
inclusive, but had either a bad Frame Check Sequence (FCS) with an integral  
number of octets (FCS Error) or a bad FCS with a non-integral number of  
octets (Alignment Error).  
Undersize  
Oversize  
The number of packets received during this sampling interval that were less  
than 64 octets long (excluding framing bits but including FCS octets) and were  
otherwise well formed.  
The number of packets received during this sampling interval that were longer  
than 1518 octets (excluding framing bits but including FCS octets) but were  
otherwise well formed.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
205  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
Field  
Description  
Fragments  
The total number of packets received during this sampling interval that were  
less than 64 octets in length (excluding framing bits but including FCS octets)  
had either a bad Frame Check Sequence (FCS) with an integral number of  
octets (FCS Error), or a bad FCS with a non-integral number of octets  
(AlignmentError). It is normal for etherHistoryFragments to increment because  
it counts both runts (which are normal occurrences due to collisions) and  
noise hits.  
Jabbers  
The number of packets received during this sampling interval that were longer  
than 1518 octets (excluding framing bits but including FCS octets), and had  
either a bad Frame Check Sequence (FCS) with an integral number of octets  
(FCS Error) or a bad FCS with a non-integral number of octets (Alignment  
Error).  
Dropped  
The total number of events in which packets were dropped by the probe due to  
lack of resources during this sampling interval. This number is not necessarily  
the number of packets dropped, it is just the number of times this condition  
has been detected.  
Collisions  
The best estimate of the total number of collisions on this Ethernet segment  
during this sampling interval.  
rmon alarm  
The rmon alarm Global Configuration mode command configures alarm conditions. To  
remove an alarm, use the no form of this command.  
Syntax  
rmon alarm index variable interval rthreshold fthreshold revent fevent [type type]  
[startup direction] [owner name]  
no rmon alarm index  
Parameters  
index — Specifies the alarm index. (Range: 1-65535)  
variable — Specifies the object identifier of the variable to be sampled.  
interval — Specifies the interval in seconds during which the data is sampled and  
compared with rising and falling thresholds. (Range: 0-2147483647)  
rthreshold — Specifies the rising threshold. (Range: 0-2147483647)  
fthreshold — Specifies the falling threshold. (Range: 0-2147483647)  
revent — Specifies the event index used when a rising threshold is crossed.  
(Range: 1-65535)  
fevent — Specifies the event index used when a falling threshold is crossed.  
(Range: 1-65535)  
206  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
type — Specifies the method used for sampling the selected variable and calculating  
the value to be compared against the thresholds. Possible values are absolute and  
delta.  
If the method is absolute, the value of the selected variable is compared directly with  
the thresholds at the end of the sampling interval. If the method is delta, the selected  
variable value of the last sample is subtracted from the current value, and the  
difference is compared with the thresholds.  
direction — Specifies the alarm that may be sent when this entry is first set to valid.  
Possible values are rising, rising-falling and falling.  
If the first sample (after this entry becomes valid) is greater than or equal to rthreshold  
and direction is equal to rising or rising-falling, a single rising alarm is generated. If  
the first sample (after this entry becomes valid) is less than or equal to fthreshold and  
direction is equal to falling or rising-falling, a single falling alarm is generated.  
name — Specifies the name of the person who configured this alarm. If unspecified,  
the name is an empty string.  
Default Configuration  
The type is absolute.  
The startup direction is rising-falling.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the following alarm conditions:  
Alarm index — 1000  
Variable identifier — Intel  
Sample interval — 360000 seconds  
Rising threshold — 1000000  
Falling threshold — 1000000  
Rising threshold event index — 10  
Falling threshold event index — 20  
Console(config)# rmon alarm 1000 Intel 360000 1000000 1000000 10 20  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
207  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
show rmon alarm-table  
The show rmon alarm-table Privileged EXEC mode command displays the alarms table.  
Syntax  
show rmon alarm-table  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the alarms table.  
Console# show rmon alarm-table  
Index  
OID  
Owner  
-------  
CLI  
-----  
----------------------  
1.3.6.1.2.1.2.2.1.10.1  
1.3.6.1.2.1.2.2.1.10.1  
1.3.6.1.2.1.2.2.1.10.9  
1
2
3
Manager  
CLI  
The following table describes significant fields shown in the example:  
Field  
Description  
An index that uniquely identifies the entry.  
Index  
OID  
Monitored variable OID.  
Owner  
The entity that configured this entry.  
208  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
show rmon alarm  
The show rmon alarm Privileged EXEC mode command displays alarm configuration.  
Syntax  
show rmon alarm number  
Parameters  
number — Specifies the alarm index. (Range: 1-65535)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays RMON 1 alarms.  
Console# show rmon alarm 1  
Alarm 1  
-------  
OID: 1.3.6.1.2.1.2.2.1.10.1  
Last sample Value: 878128  
Interval: 30  
Sample Type: delta  
Startup Alarm: rising  
Rising Threshold: 8700000  
Falling Threshold: 78  
Rising Event: 1  
Falling Event: 1  
Owner: CLI  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
209  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
The following table describes the significant fields shown in the display:  
Field  
Description  
Alarm  
OID  
Alarm index.  
Monitored variable OID.  
Last Sample Value  
The statistic value during the last sampling period. For example, if the sample  
type is delta, this value is the difference between the samples at the beginning  
and end of the period. If the sample type is absolute, this value is the sampled  
value at the end of the period.  
Interval  
The interval in seconds over which the data is sampled and compared with the  
rising and falling thresholds.  
Sample Type  
The method of sampling the variable and calculating the value compared  
against the thresholds. If the value is absolute, the value of the variable is  
compared directly with the thresholds at the end of the sampling interval. If the  
value is delta, the value of the variable at the last sample is subtracted from  
the current value, and the difference compared with the thresholds.  
Startup Alarm  
The alarm that may be sent when this entry is first set. If the first sample is  
greater than or equal to the rising threshold, and startup alarm is equal to  
rising or rising and falling, then a single rising alarm is generated. If the first  
sample is less than or equal to the falling threshold, and startup alarm is equal  
falling or rising and falling, then a single falling alarm is generated.  
Rising Threshold  
Falling Threshold  
A sampled statistic threshold. When the current sampled value is greater than  
or equal to this threshold, and the value at the last sampling interval is less  
than this threshold, a single event is generated.  
A sampled statistic threshold. When the current sampled value is less than or  
equal to this threshold, and the value at the last sampling interval is greater  
than this threshold, a single event is generated.  
Rising Event  
Falling Event  
Owner  
The event index used when a rising threshold is crossed.  
The event index used when a falling threshold is crossed.  
The entity that configured this entry.  
rmon event  
The rmon event Global Configuration mode command configures an event. To remove an  
event, use the no form of this command.  
Syntax  
rmon event index type [community text] [description text] [owner name]  
no rmon event index  
Parameters  
index — Specifies the event index. (Range: 1-65535)  
type — Specifies the type of notification generated by the device about this event.  
Possible values: none, log, trap, log-trap.  
210  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
community text — If the specified notification type is trap, an SNMP trap is sent to  
the SNMP community specified by this octet string. (Range: 0-127 characters)  
description text — Specifies a comment describing this event. (Range: 0-127  
characters)  
name — Specifies the name of the person who configured this event. If unspecified,  
the name is an empty string.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
If log is specified as the notification type, an entry is made in the log table for each event.  
If trap is specified, an SNMP trap is sent to one or more management stations.  
Example  
The following example configures an event identified as index 10 and for which the  
device generates a notification in the log table.  
Console(config)# rmon event 10 log  
show rmon events  
The show rmon events Privileged EXEC mode command displays the RMON event  
table.  
Syntax  
show rmon events  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
211  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the RMON event table.  
Console# show rmon events  
Index  
Description  
--------------  
Errors  
Type  
Community  
---------  
Owner  
-------  
CLI  
Last time sent  
-----  
--------  
Log  
--------------------  
Jan 18 2006 23:58:17  
Jan 18 2006 23:59:48  
1
2
High Broadcast  
Log-Trap  
device  
Manager  
The following table describes significant fields shown in the example:  
Field  
Description  
Index  
An index that uniquely identifies the event.  
A comment describing this event.  
Description  
Type  
The type of notification that the device generates about this event. Can have  
the following values: none, log, trap, log-trap. In the case of log, an entry is  
made in the log table for each event. In the case of trap, an SNMP trap is sent  
to one or more management stations.  
Community  
If an SNMP trap is to be sent, it is sent to the SNMP community specified by  
this octet string.  
Owner  
The entity that configured this event.  
Last time sent  
The time this entry last generated an event. If this entry has not generated any  
events, this value is zero.  
show rmon log  
The show rmon log Privileged EXEC mode command displays the RMON log table.  
Syntax  
show rmon log [event]  
Parameters  
event — Specifies the event index. (Range: 0-65535)  
212  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the RMON log table.  
Console# show rmon log  
Maximum table size: 500  
Event  
Description  
--------------  
Errors  
Time  
-------  
---------  
1
1
2
Jan 18 2006 23:48:19  
Jan 18 2006 23:58:17  
Jan 18 2006 23:59:48  
Errors  
High Broadcast  
Console# show rmon log  
Maximum table size: 500 (800 after reset)  
Event  
Description  
--------------  
Errors  
Time  
-------  
---------  
1
1
2
Jan 18 2006 23:48:19  
Jan 18 2006 23:58:17  
Jan 18 2006 23:59:48  
Errors  
High Broadcast  
The following table describes the significant fields shown in the display:  
Field  
Description  
Event  
An index that uniquely identifies the event.  
A comment describing this event.  
The time this entry was created.  
Description  
Time  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
213  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RMON Commands  
rmon table-size  
The rmon table-size Global Configuration mode command configures the maximum size  
of RMON tables. To return to the default configuration, use the no form of this command.  
Syntax  
rmon table-size {history entries | log entries}  
no rmon table-size {history | log}  
Parameters  
history entries — Maximum number of history table entries. (Range: 20 -32767)  
log entries — Maximum number of log table entries. (Range: 20-32767)  
Default Configuration  
History table size is 270.  
Log table size is 200.  
Command Mode  
Global Configuration mode  
User Guidelines  
The configured table size taskes effect after the device is rebooted.  
Example  
The following example configures the maximum RMON history table sizes to 100 entries.  
Console(config)# rmon table-size history 100  
214  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
19 RADIUS Commands  
radius-server host  
The radius-server host Global Configuration mode command specifies a RADIUS server  
host. To delete the specified RADIUS host, use the no form of this command.  
Syntax  
radius-server host {ip-address | hostname} [auth-port auth-port-number] [timeout  
timeout] [retransmit retries] [deadtime deadtime] [key key-string] [source source]  
[priority priority] [usage type]  
no radius-server host {ip-address | hostname}  
Parameters  
ip-address — IP address of the RADIUS server host.  
hostname — Hostname of the RADIUS server host. (Range: 1-158 characters)  
auth-port-number — Port number for authentication requests. The host is not used for  
authentication if the port number is set to 0. (Range: 0-65535)  
timeout — Specifies the timeout value in seconds. (Range: 1-30)  
retries — Specifies the retransmit value. (Range: 1-10)  
deadtime — Length of time in minutes during which a RADIUS server is skipped  
over by transaction requests. (Range: 0-2000)  
key-string — Specifies the authentication and encryption key for all RADIUS  
communications between the device and the RADIUS server. This key must match  
the encryption used on the RADIUS daemon. To specify an empty string, enter "".  
(Range: 0-128 characters)  
source — Specifies the source IP address to use for communication. 0.0.0.0 is  
interpreted as request to use the IP address of the outgoing IP interface.  
priority — Determines the order in which servers are used, where 0 has the highest  
priority. (Range: 0-65535)  
type — Specifies the usage type of the server. Possible values: login, dot.1x, wireless  
or all.  
Default Configuration  
No RADIUS server host is specified.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
215  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
RADIUS Commands  
The port number for authentication requests is 1812.  
The usage type is all.  
Command Mode  
Global Configuration mode  
User Guidelines  
To specify multiple hosts, multiple radius-server host commands can be used.  
If no host-specific timeout, retries, deadtime or key-string values are specified, global  
values apply to each RADIUS server host.  
The address type of the source parameter must be the same as the ip-address parameter.  
Example  
The following example specifies a RADIUS server host with IP address 192.168.10.1,  
authentication request port number 20 and a 20-second timeout period.  
Console(config)# radius-server host 192.168.10.1 auth-port 20 timeout 20  
radius-server key  
The radius-server key Global Configuration mode command sets the authentication and  
encryption key for all RADIUS communications between the device and the RADIUS  
daemon. To restore the default configuration, use the no form of this command.  
Syntax  
radius-server key [key-string]  
no radius-server key  
Parameters  
key-string — Specifies the authentication and encryption key for all RADIUS  
communications between the device and the RADIUS server. This key must match  
the encryption used on the RADIUS daemon.  
(Range: 0-128 characters)  
216  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
Default Configuration  
The key-string is an empty string.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines the authentication and encryption key for all RADIUS  
communications between the device and the RADIUS daemon.  
Console(config)# radius-server key enterprise-server  
radius-server retransmit  
The radius-server retransmit Global Configuration mode command specifies the  
number of times the software searches the list of RADIUS server hosts. To reset the  
default configuration, use the no form of this command.  
Syntax  
radius-server retransmit retries  
no radius-server retransmit  
Parameters  
retries — Specifies the retransmit value. (Range: 1-10)  
Default Configuration  
The software searches the list of RADIUS server hosts 3 times.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
217  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the number of times the software searches all RADIUS  
server hosts to 5 times.  
console(config)# radius-server retransmit 5  
radius-server source-ip  
The radius-server source-ip Global Configuration mode command specifies the source  
IP address used for communication with RADIUS servers. To restore the default  
configuration, use the no form of this command.  
Syntax  
radius-server source-ip source  
no radius-source-ip source  
Parameters  
source — Specifies a valid source IP address.  
Default Configuration  
The source IP address is the IP address of the outgoing IP interface.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
218  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
Example  
The following example configures the source IP address used for communication with all  
RADIUS servers to 10.1.1.1.  
console(config)# radius-server source-ip 10.1.1.1  
radius-server timeout  
The radius-server timeout Global Configuration mode command sets the interval during  
which the device waits for a server host to reply. To restore the default configuration, use  
the no form of this command.  
Syntax  
radius-server timeout timeout  
no radius-server timeout  
Parameters  
timeout — Specifies the timeout value in seconds. (Range: 1-30)  
Default Configuration  
The timeout value is 3 seconds.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the timeout interval on all RADIUS servers to 5  
seconds.  
Console(config)# radius-server timeout 5  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
219  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
radius-server deadtime  
The radius-server deadtime Global Configuration mode command improves RADIUS  
response time when servers are unavailable. The command is used to cause the  
unavailable servers to be skipped. To restore the default configuration, use the no form of  
this command.  
Syntax  
radius-server deadtime deadtime  
no rhadius-server deadtime  
Parameters  
deadtime — Length of time in minutes during which a RADIUS server is skipped  
over by transaction requests. (Range: 0-2000)  
Default Configuration  
The deadtime setting is 0.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets all RADIUS server deadtimes to 10 minutes.  
Console(config)# radius-server deadtime 10  
show radius-servers  
The show radius-servers Privileged EXEC mode command displays the RADIUS server  
settings.  
220  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
Syntax  
show radius-servers  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays RADIUS server settings.  
Console# show radius-servers  
IP address  
Port  
Auth  
TimeOut  
Retransmit  
DeadTime  
Source IP  
Priority  
Usage  
---------  
172.16.1.1  
172.16.1.2  
----  
1645  
1645  
-------  
Global  
11  
----------  
Global  
8
------  
Global  
Global  
--------  
-
--------  
-----  
All  
1
2
Global  
All  
Global values  
-------------  
TimeOut: 3  
Retransmit: 3  
Deadtime: 0  
Source IP: 172.16.8.1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
221  
Download from Www.Somanuals.com. All Manuals Search And Download.  
RADIUS Commands  
222  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
20 Web Server Commands  
ip http server  
The ip http server Global Configuration mode command enables configuring the device  
from a browser. To disable this function, use the no form of this command.  
Syntax  
ip http server  
no ip http server  
Default Configuration  
HTTP server is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Only a user with access level 15 can use the Web server.  
Example  
The following example enables configuring the device from a browser.  
Console(config)# ip http server  
ip http port  
The ip http port Global Configuration mode command specifies the TCP port to be used  
by the Web browser interface. To return to the default configuration, use the no form of  
this command.  
Syntax  
ip http port port-number  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
223  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Web Server Commands  
no ip http port  
Parameters  
port-number — Port number for use by the HTTP server. (Range: 0-65535)  
Default Configuration  
The default port number is 80.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use the crypto certificate generate Global Configuration mode command to generate an  
HTTPS certificate.  
Specifying 0 as the port number effectively disables HTTP access to the device.  
Example  
The following example configures the http port number to 100.  
Console(config)# ip http port 100  
ip http exec-timeout  
The ip http exec-timeout command allows users to define the interval that the system  
waits for user input in http sessions before automatic logoff. To return to default, use the  
no form of this command.  
Syntax  
ip http exec-timout minutes [seconds]  
no ip http exec-timout  
Parameters  
minutes — Specifies the number of minutes to wait.  
seconds — Specifies the number of seconds to wait.  
224  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Default Configuration  
The default timout is 10 minutes.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command also configures the exec-timeout for HTTPS in case the the HTTPS  
timeout was not set. To specify no timeout, enter the ip https exec-timeout 0 0 command.  
ip https server  
The ip https server Global Configuration mode command enables configuring the device  
from a secured browser. To return to the default configuration, use the no form of this  
command.  
Syntax  
ip https server  
no ip https server  
Default Configuration  
Disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use the crypto certificate generate Global Configuration mode command to generate an  
HTTPS certificate.  
Example  
The following example enables configuring the device from a secured browser.  
Console(config)# ip https server  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
225  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
ip https port  
The ip https port Global Configuration mode command specifies the TCP port used by  
the server to configure the device through the Web browser. To return to the default  
configuration, use the no form of this command.  
Syntax  
ip https port port-number  
no ip https port  
Parameters  
port-number — Port number to be used by the HTTP server. (Range: 0-65535)  
Default Configuration  
The default port number is 443.  
Command Mode  
Global Configuration mode  
User Guidelines  
Specifying 0 as the port number effectively disables HTTP access to the device.  
Example  
The following example configures the https port number to 100.  
Console(config)# ip https port 100  
ip https exec-timeout  
The ip https exec-timeout command allows users to define the interval that the system  
waits for user input in https sessions before automatic logoff. To return to default, use the  
no form of this command.  
Syntax  
ip https exec-timout minutes [seconds]  
226  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
no ip https exec-timout  
Parameters  
minutes — Specifies the number of minutes to wait.  
seconds — Specifies the number of seconds to wait.  
Default Configuration  
The default timout is 10 minutes.  
Command Mode  
Global Configuration mode  
User Guidelines  
To specify no timeout, enter the ip https exec-timeout 0 0 command.  
crypto certificate generate  
The crypto certificate generate Global Configuration mode command generates a self-  
signed HTTPS certificate.  
Syntax  
crypto certificate [number] generate [key-generate length] [cn common- name] [ou  
organization-unit] [or organization] [loc location] [st state] [cu country] [duration days]  
Parameters  
number — Specifies the certificate number. (Range: 1-2)  
key-generate — Regenerate the SSL RSA key.  
length — Specifies the SSL RSA key length. (Range: 512-2048)  
common- name — Specifies the fully qualified URL or IP address of the device.  
(Range: 1-64)  
organization — Specifies the organization name. (Range: 1-64)  
organization-unit — Specifies the organization-unit or department name.(Range: 1-  
64)  
location — Specifies the location or city name. (Range: 1-64)  
state — Specifies the state or province name. (Range: 1-64)  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
227  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
country — Specifies the country name. (Range: 2-2)  
days — Specifies number of days certification is valid. (Range: 30-3650)  
Default Configuration  
The Certificate and SSL’s RSA key pairs do not exist.  
If no certificate number is specified, the default certificate number is 1.  
If no RSA key length is specified, the default length is 1024.  
If no URL or IP address is specified, the default common name is the lowest IP address of  
the device at the time that the certificate is generated.  
If the number of days is not specified, the default period of time that the certification is  
valid is 365 days.  
Command Mode  
Global Configuration mode  
User Guidelines  
The command is not saved in the device configuration; however, the certificate and keys  
generated by this command are saved in the private configuration (which is never  
displayed to the user or backed up to another device).  
Use this command to generate a self-signed certificate for the device.  
If the RSA keys do not exist, parameter key-generate must be used.  
Example  
The following example regenerates an HTTPS certificate.  
Console(config)# crypto certificate 1 generate key-generate  
crypto certificate request  
The crypto certificate request Privileged EXEC mode command generates and displays  
certificate requests for HTTPS.  
Syntax  
crypto certificate number request [cn common- name][ou organization-unit] [or  
organization] [loc location] [st state] [cu country]  
228  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Parameters  
number — Specifies the certificate number. (Range: 1-2)  
common- name — Specifies the fully qualified URL or IP address of the device.  
(Range: 1- 64)  
organization-unit — Specifies the organization-unit or department name. (Range: 1-  
64)  
organization — Specifies the organization name. (Range: 1-64)  
location — Specifies the location or city name. (Range: 1-64)  
state — Specifies the state or province name. (Range: 1-64)  
country — Specifies the country name. (Range: 1-2)  
Default Configuration  
There is no default configuration for this command.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
Use this command to export a certificate request to a Certification Authority. The  
certificate request is generated in Base64-encoded X.509 format.  
Before generating a certificate request you must first generate a self-signed certificate  
using the crypto certificate generate Global Configuration mode command. Be aware  
that you have to reenter the certificate fields.  
After receiving the certificate from the Certification Authority, use the crypto certificate  
import Global Configuration mode command to import the certificate into the device.  
This certificate replaces the self-signed certificate.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
229  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Example  
The following example generates and displays a certificate request for HTTPS.  
Console# crypto certificate 1 request  
-----BEGIN CERTIFICATE REQUEST-----  
MIwTCCASoCAQAwYjELMAkGA1UEBhMCUFAxCzAJBgNVBAgTAkNDMQswCQYDVQQH  
EwRDEMMAoGA1UEChMDZGxkMQwwCgYDVQQLEwNkbGQxCzAJBgNVBAMTAmxkMRAw  
DgKoZIhvcNAQkBFgFsMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8ecwQ  
HdML0831i0fh/F0MV/Kib6Sz5p+3nUUenbfHp/igVPmFM+1nbqTDekb2ymCu6K  
aKvEbVLF9F2LmM7VPjDBb9bb4jnxkvwW/wzDLvW2rsy5NPmH1QVl+8Ubx3GyCm  
/oW93BSOFwxwEsP58kf+sPYPy+/8wwmoNtDwIDAQABoB8wHQYJKoZIhvcNAQkH  
MRDjEyMwgICCAgICAICAgIMA0GCSqGSIb3DQEBBAUAA4GBAGb8UgIx7rB05m+2  
m5ZZPhIwl8ARSPXwhVdJexFjbnmvcacqjPG8pIiRV6LkxryGF2bVU3jKEipcZa  
g+uNpyTkDt3ZVU72pjz/fa8TF0n3  
-----END CERTIFICATE REQUEST-----  
CN= router.gm.com  
0= General Motors  
C= US  
crypto certificate import  
The crypto certificate import Global Configuration mode command imports a certificate  
signed by the Certification Authority for HTTPS.  
Syntax  
crypto certificate number import  
Parameters  
number — Specifies the certificate number. (Range: 1-2)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use this command to enter an external certificate (signed by Certification Authority) to  
the device. To end the session, enter an empty line.  
230  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
The imported certificate must be based on a certificate request created by the crypto  
certificate request Privileged EXEC mode command.  
If the public key found in the certificate does not match the device's SSL RSA key, the  
command fails.  
This command is not saved in the device configuration; however, the certificate imported  
by this command is saved in the private configuration (which is never displayed to the  
user or backed up to another device).  
Example  
The following example imports a certificate signed by Certification Authority for HTTPS.  
Console(config)# crypto certificate 1 import  
-----BEGIN CERTIFICATE-----  
dHmUgUm9vdCBDZXJ0aWZpZXIwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp4HS  
nnH/xQSGA2ffkRBwU2XIxb7n8VPsTm1xyJ1t11a1GaqchfMqqe0kmfhcoHSWr  
yf1FpD0MWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwYBBAGCNxQCBAYeBABDAEEw  
CwR0PBAQDAgFGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAf4MT9BRD47  
ZvKBAEL9Ggp+6MIIBNgYDVR0fBIIBLTCCASkwgdKggc+ggcyGgclsZGFwOi8v  
L0VByb3h5JTIwU29mdHdhcmUlMjBSb290JTIwQ2VydGlmaWVyLENOPXNlcnZl  
-----END CERTIFICATE-----  
Certificate imported successfully.  
Issued to: router.gm.com  
Issued by: www.verisign.com  
Valid from: 8/9/2003 to 8/9/2004  
Subject: CN= router.gm.com, 0= General Motors, C= US  
Finger print: DC789788 DC88A988 127897BC BB789788  
ip https certificate  
The ip https certificate Global Configuration mode command configures the active  
certificate for HTTPS. To return to the default configuration, use the no form of this  
command.  
Syntax  
ip https certificate number  
no ip https certificate  
Parameters  
number — Specifies the certificate number. (Range: 1-2)  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
231  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Default Configuration  
Certificate number 1.  
Command Mode  
Global Configuration mode  
User Guidelines  
The crypto certificate generate command should be used to generate HTTPS  
certificates.  
Example  
The following example configures the active certificate for HTTPS.  
Console(config)# ip https certificate 1  
show crypto certificate mycertificate  
The show crypto certificate mycertificate Privileged EXEC mode command displays  
the SSH certificates of the device.  
Syntax  
show crypto certificate mycertificate [number]  
Parameters  
number — Specifies the certificate number. (Range: 1-2)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
232  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Example  
The following example displays the certificate.  
Console# show crypto certificate mycertificate 1  
-----BEGIN CERTIFICATE-----  
dHmUgUm9vdCBDZXJ0aWZpZXIwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp4HS  
nnH/xQSGA2ffkRBwU2XIxb7n8VPsTm1xyJ1t11a1GaqchfMqqe0kmfhcoHSWr  
yf1FpD0MWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwYBBAGCNxQCBAYeBABDAEEw  
CwR0PBAQDAgFGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAf4MT9BRD47  
ZvKBAEL9Ggp+6MIIBNgYDVR0fBIIBLTCCASkwgdKggc+ggcyGgclsZGFwOi8v  
L0VByb3h5JTIwU29mdHdhcmUlMjBSb290JTIwQ2VydGlmaWVyLENOPXNlcnZl  
-----END CERTIFICATE-----  
Issued by: www.verisign.com  
Valid from: 8/9/2003 to 8/9/2004  
Subject: CN= router.gm.com, 0= General Motors, C= US  
Finger print: DC789788 DC88A988 127897BC BB789788  
show ip http  
The show ip http Privileged EXEC mode command displays the HTTP server  
configuration.  
Syntax  
show ip http  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
233  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Example  
The following example displays the HTTP server configuration.  
Console# show ip http  
HTTP server enabled. Port: 80  
show ip https  
The show ip https Privileged EXEC mode command displays the HTTPS server  
configuration.  
Syntax  
show ip https  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the HTTP server configuration.  
Console# show ip https  
HTTPS server enabled. Port: 443  
Certificate 1 is active  
Issued by: www.verisign.com  
Valid from: 8/9/2004 to 8/9/2005  
Subject: CN= router.gm.com, 0= General Motors, C= US  
Finger print: DC789788 DC88A988 127897BC BB789788  
234  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
Certificate 2 is inactive  
Issued by: self-signed  
Valid from: 8/9/2004 to 8/9/2005  
Subject: CN= router.gm.com, 0= General Motors, C= US  
Finger print: 1873B936 88DC3411 BC8932EF 782134BA  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
235  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Web Server Commands  
236  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
21 SNMP Commands  
snmp-server community  
The snmp-server community Global Configuration mode command configures the  
community access string to permit access to the SNMP protocol. To remove the specified  
community string, use the no form of this command.  
Syntax  
snmp-server community community [ro | rw | su] [ip-address] [view view-name]  
snmp-server community-group community group-name [ip-address] [type {router |  
oob}]  
no snmp-server community community [ip-address]  
Parameters  
community — Community string that acts like a password and permits access to the  
SNMP protocol.  
(Range: 1-20 characters)  
ro — Indicates read-only access (default).  
rw — Indicates read-write access.  
su — Indicates SNMP administrator access.  
ip-address — Specifies the IP address of the management station.  
group-name — Specifies the name of a previously defined group. A group defines the  
objects available to the community. (Range: 1-30 characters)  
view-name — Specifies the name of a previously defined view. The view defines the  
objects available to the community. (Range: 1-30 characters).  
Default Configuration  
No communities are defined.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
237  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
SNMP Commands  
User Guidelines  
The view-name parameter cannot be specified for su, which has access to the whole MIB.  
The view-name parameter can be used to restrict the access rights of a community string.  
When it is specified:  
An internal security name is generated.  
The internal security name for SNMPv1 and SNMPv2 security models is mapped to an  
internal group name.  
The internal group name for SNMPv1 and SNMPv2 security models is mapped to a view-  
name (read-view and notify-view always, and for rw for write-view also)  
The group-name parameter can also be used to restrict the access rights of a community  
string. When it is specified:  
An internal security name is generated.  
The internal security name for SNMPv1 and SNMPv2 security models is mapped to the  
group name.  
Example  
The following example defines community access string public to permit administrative  
access to SNMP protocol at an administrative station with IP address 192.168.1.20.  
Console(config)# snmp-server community public su 192.168.1.20  
snmp-server view  
The snmp-server view Global Configuration mode command creates or updates a Simple  
Network Management Protocol (SNMP) server view entry. To remove a specified SNMP  
server view entry, use the no form of this command.  
Syntax  
snmp-server view view-name oid-tree {included | excluded}  
no snmp-server view view-name [oid-tree]  
Parameters  
view-name — Specifies the label for the view record that is being created or updated.  
The name is used to reference the record. (Range: 1-30 characters)  
238  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
oid-tree — Specifies the object identifier of the ASN.1 subtree to be included or  
excluded from the view. To identify the subtree, specify a text string consisting of  
numbers, such as 1.3.6.2.4, or a word, such as system. Replace a single subidentifier  
with the asterisk (*) wildcard to specify a subtree family; for example 1.3.*.4.  
included — Indicates that the view type is included.  
excluded — Indicates that the view type is excluded.  
Default Configuration  
No view entry exists.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command can be entered multiple times for the same view record.  
The number of views is limited to 64.  
No check is made to determine that a MIB node corresponds to the "starting portion" of  
the OID until the first wildcard.  
Example  
The following example creates a view that includes all objects in the MIB-II system group  
except for sysServices (System 7) and all objects for interface 1 in the MIB-II interface  
group.  
Console(config)# snmp-server view user-view system included  
Console(config)# snmp-server view user-view system.7 excluded  
Console(config)# snmp-server view user-view ifEntry.*.1 included  
snmp-server group  
The snmp-server group Global Configuration mode command configures a new Simple  
Management Protocol (SNMP) group or a table that maps SNMP users to SNMP views.  
To remove a specified SNMP group, use the no form of this command.  
Syntax  
snmp-server group groupname {v1 | v2 | v3 {noauth | auth | priv} [notify notifyview]}  
[read readview] [write writeview]  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
239  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
no snmp-server group groupname {v1 | v2 | v3 [noauth | auth | priv]}  
Parameters  
groupname—Specifies the name of the group (Range: 1-30 characters).  
v1 — Indicates the SNMP Version 1 security model.  
v2 — Indicates the SNMP Version 2 security model.  
v3 — Indicates the SNMP Version 3 security model.  
noauth — Indicates no authentication of a packet. Applicable only to the SNMP  
Version 3 security model.  
auth — Indicates authentication of a packet without encrypting it. Applicable only to  
the SNMP Version 3 security model.  
priv — Indicates authentication of a packet with encryption. Applicable only to the  
SNMP Version 3 security model.  
name — Specifies the context of a packet. The following context is supported: Router.  
If the context name is unspecified, all contexts are defined.  
readview — Specifies a string that is the name of the view that enables only viewing  
the contents of the agent. If unspecified, all objects except for the community-table  
and SNMPv3 user and access tables are available.  
writeview — Specifies a string that is the name of the view that enables entering data  
and configuring the contents of the agent. If unspecified, nothing is defined for the  
write view.  
notifyview — Specifies a string that is the name of the view that enables specifying an  
inform or a trap. If unspecified, nothing is defined for the notify view. Applicable only  
to the SNMP Version 3 security model.  
Default Configuration  
No group entry exists.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
240  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Example  
The following example attaches a group called user-group to SNMPv3 and assigns to the  
group the privacy security level and read access rights to a view called user-view.  
Console(config)# snmp-server group user-group v3 priv read user-view  
snmp-server user  
The snmp-server user Global Configuration mode command configures a new SNMP  
Version 3 user. To remove a user, use the no form of this command.  
Syntax  
snmp-server user username groupname [remote engineid-string] [ auth-md5 password |  
auth-sha password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys]  
no snmp-server user username [remote engineid-string]  
Parameters  
username — Specifies the name of the user on the host that connects to the agent.  
(Range: 1-30 characters)  
groupname — Specifies the name of the group to which the user belongs. (Range: 1-  
30 characters)  
engineid-string — Specifies the engine ID of the remote SNMP entity to which the  
user belongs. The engine ID is a concatenated hexadecimal string. Each byte in the  
hexadecimal character string is two hexadecimal digits. Each byte can be separated by  
a period or colon. (Range: 5-32 characters)  
auth-md5 password — Indicates the HMAC-MD5-96 authentication level. The user  
should enter a password for authentication and generation of a DES key for privacy.  
(Range: 1-32 characters)  
auth-sha password—Indicates the HMAC-SHA-96 authentication level. The user  
should enter a password for authentication and generation of a DES key for privacy.  
(Range: 1-32 characters)  
auth-md5-key md5-des-keys — Indicates the HMAC-MD5-96 authentication level.  
The user should enter a concatenated hexadecimal string of the MD5 key (MSB) and  
the privacy key (LSB). If authentication is only required, 16 bytes should be entered;  
if authentication and privacy are required, 32 bytes should be entered. Each byte in the  
hexadecimal character string is two hexadecimal digits. Each byte can be separated by  
a period or colon. (16 or 32 bytes)  
auth-sha-key sha-des-keys — Indicates the HMAC-SHA-96 authentication level.  
The user should enter a concatenated hexadecimal string of the SHA key (MSB) and  
the privacy key (LSB). If authentication is only required, 20 bytes should be entered;  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
241  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
if authentication and privacy are required, 36 bytes should be entered. Each byte in the  
hexadecimal character string is two hexadecimal digits. Each byte can be separated by  
a period or colon. (20 or 36 bytes)  
Default Configuration  
No group entry exists.  
Command Mode  
Global Configuration mode  
User Guidelines  
If auth-md5 or auth-sha is specified, both authentication and privacy are enabled for the  
user.  
When a show running-config Privileged EXEC mode command is entered, a line for this  
user will not be displayed. To see if this user has been added to the configuration, type the  
show snmp users Privileged EXEC mode command.  
An SNMP EngineID has to be defined to add SNMP users to the device. Changing or  
removing the SNMP EngineID value deletes SNMPv3 users from the device’s database.  
The remote engineid designates the remote management station and should be defined to  
enable the device to receive informs.  
Example  
The following example configures an SNMPv3 user John in a group called user-group.  
Console(config)# snmp-server user John user-group  
snmp-server engineID local  
The snmp-server engineID local Global Configuration mode command specifies the  
Simple Network Management Protocol (SNMP) engineID on the local device. To remove  
the configured engine ID, use the no form of this command.  
Syntax  
snmp-server engineID local {engineid-string | default}  
no snmp-server engineID local  
242  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Parameters  
engineid-string—Specifies a character string that identifies the engine ID. (Range: 5-  
32 characters)  
default—The engine ID is created automatically based on the device MAC address.  
Default Configuration  
The engine ID is not configured.  
If SNMPv3 is enabled using this command, and the default is specified, the default engine  
ID is defined per standard as:  
First 4 octets — first bit = 1, the rest is IANA Enterprise number = 674.  
Fifth octet — set to 3 to indicate the MAC address that follows.  
Last 6 octets — MAC address of the device.  
Command Mode  
Global Configuration mode  
User Guidelines  
To use SNMPv3, you have to specify an engine ID for the device. You can specify your  
own ID or use a default string that is generated using the MAC address of the device.  
If the SNMPv3 engine ID is deleted or the configuration file is erased, SNMPv3 cannot be  
used. By default, SNMPv1/v2 are enabled on the device. SNMPv3 is enabled only by  
defining the Local Engine ID.  
If you want to specify your own ID, you do not have to specify the entire 32-character  
engine ID if it contains trailing zeros. Specify only the portion of the engine ID up to the  
point where just zeros remain in the value. For example, to configure an engine ID of  
123400000000000000000000, you can specify snmp-server engineID local 1234.  
Since the engine ID should be unique within an administrative domain, the following is  
recommended:  
For a this device, use the default keyword to configure the engine ID.  
Changing the value of the engine ID has the following important side-effect. A user's  
password (entered on the command line) is converted to an MD5 or SHA security digest.  
This digest is based on both the password and the local engine ID. The user’s command  
line password is then destroyed, as required by RFC 2274. As a result, the security digests  
of SNMPv3 users become invalid if the local value of the engine ID change, and the users  
will have to be reconfigured.  
You cannot specify an engine ID that consists of all 0x0, all 0xF or 0x000000001.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
243  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
The show running-config Privileged EXEC mode command does not display the SNMP  
engine ID configuration. To see the SNMP engine ID configuration, enter the snmp-  
server engineID local Global Configuration mode command.  
Example  
The following example enables SNMPv3 on the device and sets the local engine ID of the  
device to the default value.  
Console(config) # snmp-server engineID local default  
snmp-server enable traps  
The snmp-server enable traps Global Configuration mode command enables the device  
to send SNMP traps. To disable SNMP traps, use the no form of the command.  
Syntax  
snmp-server enable traps  
no snmp-server enable traps  
Default Configuration  
SNMP traps are enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables SNMP traps.  
Console(config)# snmp-server enable traps  
244  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
snmp-server filter  
The snmp-server filter Global Configuration mode command creates or updates a Simple  
Network Management Protocol (SNMP) server filter entry. To remove the specified  
SNMP server filter entry, use the no form of this command.  
Syntax  
snmp-server filter filter-name oid-tree {included | excluded}  
no snmp-server filter filter-name [oid-tree]  
Parameters  
filter-name — Specifies the label for the filter record that is being updated or created.  
The name is used to reference the record. (Range: 1-30 characters)  
oid-tree — Specifies the object identifier of the ASN.1 subtree to be included or  
excluded from the view. To identify the subtree, specify a text string consisting of  
numbers, such as 1.3.6.2.4, or a word, such as system. Replace a single subidentifier  
with the asterisk (*) wildcard to specify a subtree family; for example, 1.3.*.4.  
included — Indicates that the filter type is included.  
excluded — Indicates that the filter type is excluded.  
Default Configuration  
No filter entry exists.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command can be entered multiple times for the same filter record. Later lines take  
precedence when an object identifier is included in two or more lines.  
Example  
The following example creates a filter that includes all objects in the MIB-II system group  
except for sysServices (System 7) and all objects for interface 1 in the MIB-II interfaces  
group.  
Console(config)# snmp-server filter filter-name system included  
Console(config)# snmp-server filter filter-name system.7 excluded  
Console(config)# snmp-server filter filter-name ifEntry.*.1 included  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
245  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
snmp-server host  
The snmp-server host Global Configuration mode command specifies the recipient of  
Simple Network Management Protocol Version 1 or Version 2 notifications. To remove  
the specified host, use the no form of this command.  
Syntax  
snmp-server host {ip-address | hostname} community-string [traps | informs] [1 | 2]  
[udp-port port] [filter filtername] [timeout seconds] [retries retries]  
no snmp-server host {ip-address | hostname} [traps | informs]  
Parameters  
ip-address — Specifies the IP address of the host (targeted recipient).  
hostname — Specifies the name of the host. (Range:1-158 characters)  
community-string — Specifies a password-like community string sent with the  
notification operation.  
(Range: 1-20)  
traps — Indicates that SNMP traps are sent to this host. If unspecified, SNMPv2 traps  
are sent to the host.  
informs — Indicates that SNMP informs are sent to this host. Not applicable to  
SNMPv1.  
1 — Indicates that SNMPv1 traps will be used.  
2 — Indicates that SNMPv2 traps will be used. If  
port—Specifies the UDP port of the host to use. If unspecified, the default UDP port  
number is 162.  
(Range:1-65535)  
filtername — Specifies a string that defines the filter for this host. If unspecified,  
nothing is filtered.  
(Range: 1-30 characters)  
seconds — Specifies the number of seconds to wait for an acknowledgment before  
resending informs. If unspecified, the default timeout period is 15 seconds. (Range: 1-  
300)  
retries — Specifies the maximum number of times to resend an inform request. If  
unspecified, the default maximum number of retries is 3. (Range: 0-255)  
Default Configuration  
This command has no default configuration.  
246  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
When configuring an SNMPv1 or SNMPv2 notification recipient, a notification view for  
that recipient is automatically generated for all the MIB.  
When configuring an SNMPv1 notification recipient, the Inform option cannot be  
selected.  
If a trap and inform are defined on the same target, and an inform was sent, the trap is not  
sent.  
Example  
The following example enables SNMP traps for host 10.1.1.1 with community string  
"management" using SNMPv2.  
Console(config)# snmp-server host 10.1.1.1 management 2  
snmp-server v3-host  
The snmp-server v3-host Global Configuration mode command specifies the recipient of  
Simple Network Management Protocol Version 3 notifications. To remove the specified  
host, use the no form of this command.  
Syntax  
snmp-server v3-host {ip-address | hostname} username [traps | informs] {noauth |  
auth | priv} [udp-port port] [filter filtername] [timeout seconds] [retries retries]  
no snmp-server host {ip-address | hostname} username [traps | informs]  
Parameters  
ip-address — Specifies the IP address of the host (targeted recipient).  
hostname — Specifies the name of the host. (Range:1-158 characters)  
username — Specifies the name of the user to use to generate the notification.  
(Range: 1-24)  
traps — Indicates that SNMP traps are sent to this host.  
informs — Indicates that SNMP informs are sent to this host.  
noauth — Indicates no authentication of a packet.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
247  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
auth — Indicates authentication of a packet without encrypting it.  
priv — Indicates authentication of a packet with encryption.  
port — Specifies the UDP port of the host to use. If unspecified, the default UDP port  
number is 162.  
(Range: 1-65535)  
filtername—Specifies a string that defines the filter for this host. If unspecified,  
nothing is filtered.  
(Range: 1-30 characters)  
seconds — Specifies the number of seconds to wait for an acknowledgment before  
resending informs. If unspecified, the default timeout period is 15 seconds. (Range: 1-  
300)  
retries — Specifies the maximum number of times to resend an inform request. If  
unspecified, the default maximum number of retries is 3. (Range: 0-255)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
A user and notification view are not automatically created. Use the snmp-server user,  
snmp-server group and snmp-server view Global Configuration mode commands to  
generate a user, group and notify group, respectively.  
Example  
The following example configures an SNMPv3 host.  
Console(config)# snmp-server v3-host 192.168.0.20 john noauth  
snmp-server trap authentication  
The snmp-server trap authentication Global Configuration mode command enables the  
device to send SNMP traps when authentication fails. To disable SNMP failed  
authentication traps, use the no form of this command.  
Syntax  
snmp-server trap authentication  
248  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
no snmp-server trap authentication  
Default Configuration  
SNMP failed authentication traps are enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables SNMP failed authentication traps.  
Console(config)# snmp-server trap authentication  
snmp-server contact  
The snmp-server contact Global Configuration mode command configures the system  
contact (sysContact) string. To remove system contact information, use the no form of the  
command.  
Syntax  
snmp-server contact text  
no snmp-server contact  
Parameters  
text — Specifies the string that describes system contact information. (Range: 1-160  
characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
249  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
User Guidelines  
Do not include spaces in the text string or place text that includes spaces inside quotation  
marks.  
Example  
The following example configures the system contact point called  
Intel_Technical_Support.  
console(config)# snmp-server contact Intel_Technical_Support  
snmp-server location  
The snmp-server location Global Configuration mode command configures the system  
location string. To remove the location string, use the no form of this command.  
Syntax  
snmp-server location text  
no snmp-server location  
Parameters  
text — Specifies a string that describes system location information. (Range: 1-160  
characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Do not include spaces in the text string or place text that includes spaces inside quotation  
marks.  
250  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Example  
The following example defines the device location as New_York.  
Console(config)# snmp-server location New_York  
snmp-server set  
The snmp-server set Global Configuration mode command defines the SNMP MIB  
value.  
Syntax  
snmp-server set variable-name name1 value1 [ name2 value2 …]  
Parameters  
variable-name — MIB variable name (Range 1-160 characters).  
name value — List of name and value pairs. In the case of scalar MIBs, only a single  
pair of name values. In the case of an entry in a table, at least one pair of name and  
value followed by one or more fields (Range 1-160 characters).  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Although the CLI can set any required configuration, there might be a situation where a  
SNMP user sets a MIB variable that does not have an equivalent command. In order to  
generate configuration files that support those situations, the snmp-server set command  
is used.  
This command is case-sensitive.  
Example  
The following example configures the scalar MIB sysName with the value Intel.  
Console(config)# snmp-server set sysName sysname Intel  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
251  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
show snmp  
The show snmp Privileged EXEC mode command displays the SNMP status.  
Syntax  
show snmp  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the SNMP communications status.  
Console# show snmp  
Community-  
String  
Community-  
Access  
View name  
IP  
address  
----------  
public  
----------  
read only  
read write  
su  
---------  
user-view  
Default  
--------  
All  
private  
private  
172.16.1.1  
172.17.1.1  
DefaultSuper  
Community-string  
----------------  
public  
Group name  
----------  
user-group  
IP address  
----------  
all  
Type  
Traps are enabled.  
Authentication trap is enabled.  
252  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Version 1,2 notifications  
Target Address  
Type  
Community  
Version  
UDP  
Port  
Filter  
Name  
TO  
Retries  
Sec  
---  
15  
--------------  
192.122.173.42  
192.122.173.42  
-----  
Trap  
---------  
public  
-------  
----  
162  
------  
-------  
2
2
3
3
Inform  
public  
162  
15  
Version 3 notifications  
Target Address  
Type  
Username  
Security  
Level  
UDP  
Port  
Filter  
Name  
TO  
Sec  
Retries  
--------------  
192.122.173.42  
-----  
---------  
Bob  
-------  
Priv  
----  
162  
------  
---  
15  
-------  
3
Inform  
System Contact: Robert  
System Location: Marketing  
The following table describes the significant fields shown in the display.  
Field  
Description  
Community-string  
Community-access  
IP Address  
Community access string to permit access to the SNMP protocol.  
Type of access - read-only, read-write, super access  
Management station IP Address.  
Trap-Rec-Address  
Trap-Rec-Community  
Version  
Targeted Recipient  
Statistics sent with the notification operation.  
SNMP version for the sent trap 1 or 2.  
show snmp engineid  
The show snmp engineID Privileged EXEC mode command displays the ID of the local  
Simple Network Management Protocol (SNMP) engine.Syntax  
show snmp engineID  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
253  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the SNMP engine ID.  
Console# show snmp engineID  
Local SNMP engineID: 08009009020C0B099C075878  
show snmp views  
The show snmp views Privileged EXEC mode command displays the configuration of  
views.  
Syntax  
show snmp views [viewname]  
Parameters  
viewname — Specifies the name of the view. (Range: 1-30)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
254  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Example  
The following example displays the configuration of views.  
Console# show snmp views  
Name  
OID Tree  
Type  
-----------  
user-view  
user-view  
user-view  
-----------------------  
1.3.6.1.2.1.1  
---------  
Included  
Excluded  
Included  
1.3.6.1.2.1.1.7  
1.3.6.1.2.1.2.2.1.*.1  
show snmp groups  
The show snmp groups Privileged EXEC mode command displays the configuration of  
groups.  
Syntax  
show snmp groups [groupname]  
Parameters  
groupname—Specifies the name of the group. (Range: 1-30)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
255  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Example  
The following example displays the configuration of views.  
Console# show snmp groups  
Name  
Security  
Views  
Notify  
Model  
-----  
V3  
Level  
-----  
priv  
Read  
Write  
-------  
""  
--------------  
user-group  
-------  
Default  
Default  
Default  
-------  
""  
""  
""  
managers-group  
managers-group  
V3  
priv  
Default  
""  
V3  
priv  
The following table describes significant fields shown above.  
Field  
Description  
Name  
Name of the group.  
Security Model  
Security Level  
Views  
SNMP model in use (v1, v2 or v3).  
Authentication of a packet with encryption. Applicable only to SNMP v3 security.  
Read  
Name of the view that enables only viewing the contents of the agent. If  
unspecified, all objects except the community-table and SNMPv3 user and  
access tables are available.  
Write  
Name of the view that enables entering data and managing the contents of the  
agent.  
Notify  
Name of the view that enables specifying an inform or a trap.  
show snmp filters  
The show snmp filters Privileged EXEC mode command displays the configuration of  
filters.  
Syntax  
show snmp filters [filtername]  
Parameters  
filtername—Specifies the name of the filter. (Range: 1-30)  
Default Configuration  
This command has no default configuration.  
256  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the configuration of filters.  
Console# show snmp filters  
Name  
OID Tree  
Type  
-----------  
user-filter  
user-filter  
user-filter  
-----------------------  
1.3.6.1.2.1.1  
---------  
Included  
Excluded  
Included  
1.3.6.1.2.1.1.7  
1.3.6.1.2.1.2.2.1.*.1  
show snmp users  
The show snmp users Privileged EXEC mode command displays the configuration of  
users.  
Syntax  
show snmp users [username]  
Parameters  
username—Specifies the name of the user. (Range: 1-30)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
257  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SNMP Commands  
User Guidelines  
There are no user guidelines for this command.Example  
The following example displays the configuration of users.  
Console# show snmp users  
Name  
Group name  
------------  
user-group  
user-group  
Auth Method  
---------  
md5  
Remote  
------  
John  
-------------------------  
John  
md5  
08009009020C0B099C075879  
258  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
22 Spanning-Tree Commands  
spanning-tree  
The spanning-tree Global Configuration mode command enables spanning-tree  
functionality. To disable the spanning-tree functionality, use the no form of this command.  
Syntax  
spanning-tree  
no spanning-tree  
Default Configuration  
Spanning-tree is enabled.  
Command Modes  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables spanning-tree functionality.  
Console(config)# spanning-tree  
spanning-tree mode  
The spanning-tree mode Global Configuration mode command configures the spanning-  
tree protocol. To restore the default configuration, use the no form of this command.  
Syntax  
spanning-tree mode {stp | rstp| mstp}  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
259  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Spanning-Tree Commands  
no spanning-tree mode  
Parameters  
stp — Indicates that the Spanning Tree Protocol (STP) is enabled.  
rstp — Indicates that the Rapid Spanning Tree Protocol (RSTP) is enabled.  
mstp — Indicates that the Multiple Spanning Tree Protocol (RSTP) is enabled.  
Default Configuration  
STP is enabled.  
Command Modes  
Global Configuration mode  
User Guidelines  
In RSTP mode, the device uses STP when the neighbor device uses STP.  
In MSTP mode, the device uses RSTP when the neighbor device uses RSTP and uses STP  
when the neighbor device uses STP.  
Example  
The following example configures the spanning-tree protocol to RSTP.  
console(config)# spanning-tree mode rstp  
spanning-tree forward-time  
The spanning-tree forward-time Global Configuration mode command configures the  
spanning-tree bridge forward time, which is the amount of time a port remains in the  
listening and learning states before entering the forwarding state. To restore the default  
configuration, use the no form of this command.  
Syntax  
spanning-tree forward-time seconds  
no spanning-tree forward-time  
260  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Parameters  
seconds — Time in seconds. (Range: 4-30)  
Default Configuration  
The default forwarding time for the IEEE Spanning Tree Protocol (STP) is 15 seconds.  
Command Modes  
Global Configuration mode  
User Guidelines  
When configuring the forwarding time, the following relationship should be kept:  
2*(Forward-Time - 1) >= Max-Age  
Example  
The following example configures the spanning tree bridge forwarding time to 25  
seconds.  
Console(config)# spanning-tree forward-time 25  
spanning-tree hello-time  
The spanning-tree hello-time Global Configuration mode command configures the  
spanning tree bridge hello time, which is how often the device broadcasts hello messages  
to other devices.To restore the default configuration, use the no form of this command.  
Syntax  
spanning-tree hello-time seconds  
no spanning-tree hello-time  
Parameters  
seconds — Time in seconds. (Range: 1-10)  
Default Configuration  
The default hello time for IEEE Spanning Tree Protocol (STP) is 2 seconds.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
261  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Command Modes  
Global Configuration mode  
User Guidelines  
When configuring the hello time, the following relationship should be kept:  
Max-Age >= 2*(Hello-Time + 1)  
Example  
The following example configures spanning tree bridge hello time to 5 seconds.  
Console(config)# spanning-tree hello-time 5  
spanning-tree max-age  
The spanning-tree max-age Global Configuration mode command configures the  
spanning tree bridge maximum age. To restore the default configuration, use the no form  
of this command.  
Syntax  
spanning-tree max-age seconds  
no spanning-tree max-age  
Parameters  
seconds — Time in seconds. (Range: 6-40)  
Default Configuration  
The default maximum age for IEEE Spanning Tree Protocol (STP) is 20 seconds.  
Command Modes  
Global Configuration mode  
User Guidelines  
When configuring the maximum age, the following relationships should be kept:  
262  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
2*(Forward-Time - 1) >= Max-Age  
Max-Age >= 2*(Hello-Time + 1)  
Example  
The following example configures the spanning tree bridge maximum-age to 10 seconds.  
Console(config)# spanning-tree max-age 10  
spanning-tree priority  
The spanning-tree priority Global Configuration mode command configures the  
spanning tree priority of the device. The priority value is used to determine which bridge  
is elected as the root bridge. To restore the default configuration, use the no form of this  
command.  
Syntax  
spanning-tree priority priority  
no spanning-tree priority  
Parameters  
priority — Priority of the bridge. (Range: 0-61440 in steps of 4096)  
Default Configuration  
The default bridge priority for IEEE Spanning Tree Protocol (STP) is 32768.  
Command Modes  
Global Configuration mode  
User Guidelines  
The bridge with the lowest priority is elected as the root bridge.  
Example  
The following example configures spanning tree priority to 12288.  
Console(config)# spanning-tree priority 12288  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
263  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
spanning-tree disable  
The spanning-tree disable Interface Configuration mode command disables spanning  
tree on a specific port. To enable spanning tree on a port, use the no form of this  
command.  
Syntax  
spanning-tree disable  
no spanning-tree disable  
Default Configuration  
Spanning tree is enabled on all ports.  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example disables spanning-tree on Ethernet port 5.  
Console(config)# interface ethernet ext.5  
Console(config-if)# spanning-tree disable  
spanning-tree cost  
The spanning-tree cost Interface Configuration mode command configures the spanning  
tree path cost for a port. To restore the default configuration, use the no form of this  
command.  
Syntax  
spanning-tree cost cost  
no spanning-tree cost  
264  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Parameters  
cost — Path cost of the port (Range: 1-200,000,000)  
Default Configuration  
Default path cost is determined by port speed and path cost method (long or short) as  
shown below:  
Interface  
Long  
Short  
Port-channel  
20,000  
4
Gigabit Ethernet (1000 Mbps)  
Fast Ethernet (100 Mbps)  
Ethernet (10 Mbps)  
20,000  
4
200,000  
2,000,000  
19  
100  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
The path cost method is configured using the spanning-tree pathcost method Global  
Configuration mode command.  
Example  
The following example configures the spanning-tree cost on Ethernet port 15 to 35000.  
Console(config)# interface ethernet ext.15  
Console(config-if)# spanning-tree cost 35000  
spanning-tree port-priority  
The spanning-tree port-priority Interface Configuration mode command configures port  
priority. To restore the default configuration, use the no form of this command.  
Syntax  
spanning-tree port-priority priority  
no spanning-tree port-priority  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
265  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Parameters  
priority — The priority of the port. (Range: 0-240 in multiples of 16)  
Default Configuration  
The default port priority for IEEE Spanning TreeProtocol (STP) is 128.  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the spanning priority on Ethernet port 15 to 96.  
Console(config)# interface ethernet ext.15  
Console(config-if)# spanning-tree port-priority 96  
spanning-tree portfast  
The spanning-tree portfast Interface Configuration mode command enables PortFast  
mode. In PortFast mode, the interface is immediately put into the forwarding state upon  
linkup without waiting for the standard forward time delay. To disable PortFast mode, use  
the no form of this command.  
Syntax  
spanning-tree portfast [auto]  
no spanning-tree portfast  
Parameters  
auto — Specifies that the software waits for 3 seconds (With no BPDUs received on  
the interface) before putting the interface into the PortFast mode.  
Default Configuration  
PortFast mode is disabled.  
266  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
This feature should be used only with interfaces connected to end stations. Otherwise, an  
accidental topology loop could cause a data packet loop and disrupt device and network  
operations.  
Example  
The following example enables PortFast on Ethernet port 15.  
Console(config)# interface ethernet ext.15  
Console(config-if)# spanning-tree portfast  
spanning-tree link-type  
The spanning-tree link-type Interface Configuration mode command overrides the  
default link-type setting determined by the duplex mode of the port and enables Rapid  
Spanning Tree Protocol (RSTP) transitions to the forwarding state. To restore the default  
configuration, use the no form of this command.  
Syntax  
spanning-tree link-type {point-to-point | shared}  
no spanning-tree spanning-tree link-type  
Parameters  
point-to-point —Indicates that the port link type is point-to-point.  
shared — Indicates that the port link type is shared.  
Default Configuration  
The device derives the port link type from the duplex mode. A full-duplex port is  
considered a point-to-point link and a half-duplex port is considered a shared link.  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
267  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables shared spanning-tree on Ethernet port 15.  
Console(config)# interface ethernet ext.15  
Console(config-if)# spanning-tree link-type shared  
spanning-tree pathcost method  
The spanning-tree pathcost method Global Configuration mode command sets the  
default path cost method. To return to the default configuration, use the no form of this  
command.  
Syntax  
spanning-tree pathcost method {long | short}  
no spanning-tree pathcost method  
Parameters  
long — Specifies port path costs with a range of 1-200,000,000 .  
short — Specifies port path costs with a range of 0-65,535.  
Default Configuration  
Short path cost method.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command is only operational with the device in Interface mode.  
This command applies to all spanning tree instances on the device.  
The cost is set using the spanning-tree cost command.  
268  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Example  
The following example sets the default path cost method to long.  
Console(config)# spanning-tree pathcost method long  
spanning-tree bpdu  
The spanning-tree bpdu Global Configuration mode command defines BPDU handling  
when the spanning tree is disabled globally or on a single interface. To restore the default  
configuration, use the no form of this command.  
Syntax  
spanning-tree bpdu {filtering | flooding}  
no spanning-tree bpdu  
Parameters  
filtering — Filter BPDU packets when the spanning tree is disabled on an interface.  
flooding — Flood BPDU packets when the spanning tree is disabled on an interface.  
Default Configuration  
The default setting is flooding.  
Command Modes  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines BPDU packet flooding when the spanning-tree is disabled  
on an interface.  
Console(config)# spanning-tree bpdu flooding  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
269  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
clear spanning-tree detected-protocols  
The clear spanning-tree detected-protocols Privileged EXEC mode command restarts  
the protocol migration process (forces renegotiation with neighboring devices) on all  
interfaces or on a specified interface.  
Syntax  
clear spanning-tree detected-protocols [ethernet interface | port-channel port-  
channel-number]  
Parameters  
interface — A valid Ethernet port.  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
This feature should be used only when working in RSTP or MSTP mode.  
Example  
The following example restarts the protocol migration process on Ethernet port 11.  
Console# clear spanning-tree detected-protocols ethernet ext.11  
spanning-tree mst priority  
The spanning-tree mst priority Global Configuration mode command configures the  
device priority for the specified spanning-tree instance. To restore the default  
configuration, use the no form of this command.  
Syntax  
spanning-tree mst instance-id priority priority  
270  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
no spanning-tree mst instance-id priority  
Parameters  
instance -id—ID of the spanning -tree instance (Range: 1-15).  
priority—Device priority for the specified spanning-tree instance (Range: 0-61440 in  
multiples of 4096).  
Default Configuration  
The default bridge priority for IEEE Spanning Tree Protocol (STP) is 32768.  
Command Mode  
Global Configuration mode  
User Guidelines  
The device with the lowest priority is selected as the root of the spanning tree.  
Example  
The following example configures the spanning tree priority of instance 1 to 4096.  
Console (config) # spanning-tree mst  
1
priority 4096  
spanning-tree mst max-hops  
The spanning-tree mst priority Global Configuration mode command configures the  
number of hops in an MST region before the BDPU is discarded and the port information  
is aged out. To restore the default configuration, use the no form of this command.  
Syntax  
spanning-tree mst max-hops hop-count  
no spanning-tree mst max-hops  
Parameters  
hop-count—Number of hops in an MST region before the BDPU is discarded  
.(Range: 1-40)  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
271  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Default Configuration  
The default number of hops is 20.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the maximum number of hops that a packet travels in  
an MST region before it is discarded to 10.  
Console (config) # spanning-tree mst max-hops 10  
spanning-tree mst port-priority  
The spanning-tree mst port-priority Interface Configuration mode command configures  
port priority for the specified MST instance. To restore the default configuration, use the  
no form of this command.  
Syntax  
spanning-tree mst instance-id port-priority priority  
no spanning-tree mst instance-id port-priority  
Parameters  
instance-ID—ID of the spanning tree instance. (Range: 1-15)  
priority—The port priority. (Range: 0-240 in multiples of 16)  
Default Configuration  
The default port priority for IEEE Multiple Spanning Tree Protocol (MSTP) is 128.  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
272  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the port priority of port g1 to 144.  
Console(config)# interface ethernet ext.1  
Console(config-if)# spanning-tree mst port-priority 144  
1
spanning-tree mst cost  
The spanning-tree mst cost Interface Configuration mode command configures the path  
cost for multiple spanning tree (MST) calculations. If a loop occurs, the spanning tree  
considers path cost when selecting an interface to put in the forwarding state. To restore  
the default configuration, use the no form of this command.  
Syntax  
spanning-tree mst instance-id cost cost  
no spanning-tree mst instance-id cost  
Parameters  
instance-ID—ID of the spanning -tree instance (Range: 1-16).  
cost—The port path cost. (Range: 1-200,000,000)  
Default Configuration  
Default path cost is determined by port speed and path cost method (long or short) as  
shown below:  
Interface  
Long  
20,000  
Short  
Port-channel  
4
Gigabit Ethernet (1000 Mbps)  
Fast Ethernet (100 Mbps)  
Ethernet (10 Mbps)  
20,000  
4
200,000  
2,000,000  
19  
100  
Command Modes  
Interface Configuration (Ethernet, port-channel) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
273  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the MSTP instance 1 path cost for Ethernet port 9 to 4.  
Console(config) # interface ethernet ext.9  
Console(config-if) # spanning-tree mst  
1
cost  
4
spanning-tree mst configuration  
The spanning-tree mst configuration Global Configuration mode command enables  
configuring an MST region by entering the Multiple Spanning Tree (MST) mode.  
Syntax  
spanning-tree mst configuration  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
All devices in an MST region must have the same VLAN mapping, configuration revision  
number and name.  
Example  
The following example configures an MST region.  
Console(config)# spanning-tree mst configuration  
Console(config-mst)#  
274  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
instance (mst)  
The instance MST Configuration mode command maps VLANS to an MST instance.  
Syntax  
instance instance-id {add | remove} vlan vlan-range  
Parameters  
instance-ID—ID of the MST instance (Range: 1-15).  
vlan-range—VLANs to be added to or removed from the specified MST instance. To  
specify a range of VLANs, use a hyphen. To specify a series of VLANs, use a comma.  
(Range: 1-4094).  
Default Configuration  
VLANs are mapped to the common and internal spanning tree (CIST) instance (instance  
0).  
Command Modes  
MST Configuration mode  
User Guidelines  
All VLANs that are not explicitly mapped to an MST instance are mapped to the common  
and internal spanning tree (CIST) instance (instance 0) and cannot be unmapped from the  
CIST.  
For two or more devices to be in the same MST region, they must have the same VLAN  
mapping, the same configuration revision number, and the same name.  
Example  
The following example maps VLANs 10-20 to MST instance 1.  
Console(config)# spanning-tree mst configuration  
Console(config-mst)# instance 1 add vlan 10-20  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
275  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
name (mst)  
The name MST Configuration mode command defines the configuration name. To restore  
the default setting, use the no form of this command.  
Syntax  
name string  
Parameters  
string — MST configuration name. The name is case-sensitive. (Range: 1-32  
characters)  
Default Configuration  
The default name is a radlan_guest.  
Command Mode  
MST Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example defines the configuration name as region1.  
Console(config) # spanning-tree mst_configuration  
Console(config-mst) # name region1  
revision (mst)  
The revision MST Configuration mode command defines the configuration revision  
number. To restore the default configuration, use the no form of this command.  
Syntax  
revision value  
no revision  
276  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Parameters  
value — Configuration revision number (Range: 0-65535).  
Default Configuration  
The default configuration revision number is 0.  
Command Mode  
MST Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the configuration revision to 1.  
Console(config) # spanning-tree mst configuration  
Console(config-mst) # revision  
1
show (mst)  
The show MST Configuration mode command displays the current or pending MST  
region configuration.  
Syntax  
show {current | pending}  
Parameters  
currentIndicates the current region configuration.  
pendingIndicates the pending region configuration.  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
277  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Command Mode  
MST Configuration mode  
User Guidelines  
The pending MST region configuration takes effect only after exiting the MST  
Configuration mode.  
Example  
The following example displays a pending MST region configuration.  
Console(config-mst)# show pending  
Pending MST configuration  
Name: Region1  
Revision: 1  
Instance  
Vlans Mapped  
------------  
1-9,21-4094  
10-20  
State  
--------  
-------  
Enabled  
Enabled  
0
1
exit (mst)  
The exit MST Configuration mode command exits the MST Configuration mode, and  
applies all configuration changes.  
Syntax  
exit  
Default Configuration  
This command has no default configuration.  
Command Mode  
MST Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
278  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Example  
The following example exits the MST Configuration mode and saves changes.  
Console(config) # spanning-tree mst configuration  
Console(config-mst) # exit  
Console(config) #  
abort (mst)  
The abort MST Configuration mode command exits the MST Configuration mode  
without applying the configuration changes.  
Syntax  
abort  
Default Configuration  
This command has no default configuration.  
Command Mode  
MST Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example exits the MST Configuration mode without saving changes.  
Console(config) # spanning-tree mst configuration  
Console(config-mst) # abort  
spanning-tree guard root  
The spanning-tree guard root Interface Configuration (Ethernet, port-channel) mode  
command enables root guard on all spanning tree instances on the interface. Root guard  
prevents the interface from becoming the root port of the device. To disable root guard on  
the interface, use the no form of this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
279  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Syntax  
spanning-tree guard root  
no spanning-tree guard root  
Default Configuration  
Root guard is disabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
Root guard can be enabled when the device operates in STP, RSTP and MSTP.  
When root guard is enabled, the port changes to the alternate state if spanning-tree  
calculations selects the port as the root port.  
Example  
The following example prevents Ethernet port 1 from being the root port of the device.  
Console(config) # interface ethernet ext.1  
Console(config-mst) # spanning-tree guard root  
show spanning-tree  
The show spanning-tree Privileged EXEC mode command displays spanning-tree  
configuration.  
Syntax  
show spanning-tree [ethernet interface -number| port-channel port-channel-number]  
[instance instance-id]  
show spanning-tree [detail] [active | blockedports] [instance instance-id]  
show spanning-tree mst-configuration  
Parameters  
interface -number— A valid Ethernet port.  
280  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
port-channel-number — A valid port channel number.  
detail — Indicates detailed information.  
active — Indicates active ports only.  
blockedports — Indicates blocked ports only.  
mst-configuration— Indicates the MST configuration identifier.  
instance-id—Specifies ID of the spanning tree instance.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays spanning-tree information.  
Console# show spanning-tree  
Spanning tree enabled mode MSTP  
Default port cost method: short  
CST Root ID Priority  
Address  
32768  
00:01:42:97:e0:00  
20000  
Path Cost  
Root Port  
1 (1/1)  
This switch is the IST master  
Hello Time 2 sec  
Max Age 20 sec  
Forward Delay 15 sec  
Forward Delay 15 sec  
Bridge ID  
Priority  
36864  
Address  
00:02:4b:29:7a:00  
Max Age 20 sec  
20  
Hello Time 2 sec  
Max hops  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
281  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Interfaces  
Name  
State  
Prio.Nbr Cost  
-------- -----  
Sts  
---  
FWD  
FWD  
-
Role  
----  
Root  
Desg  
-
PortFast  
Type  
----  
-------  
Enabled  
Enabled  
Disabled  
Enabled  
Enabled  
--------  
----------  
P2p bound(RSTP)  
Shared (STP)  
-
1
2
3
4
5
128.1  
128.2  
128.3  
128.4  
128.5  
20000  
20000  
20000  
20000  
20000  
No  
No  
-
BLK  
DIS  
ALTN  
-
No  
-
Shared (STP)  
-
Console# show spanning-tree  
Spanning tree enabled mode RSTP  
Default port cost method: long  
Root ID  
Priority  
Address  
36864  
00:02:4b:29:7a:00  
This switch is the root.  
Hello Time 2 sec Max Age 20 sec  
Forward Delay 15 sec  
Interfaces  
Name  
State  
Prio.Nbr Cost  
-------- -----  
Sts  
---  
FWD  
FWD  
-
Role  
----  
Desg  
Desg  
-
PortFast  
Type  
----  
-------  
Enabled  
Enabled  
Disabled  
Enabled  
Enabled  
--------  
----------  
P2p (RSTP)  
Shared (STP)  
-
1
2
3
4
5
128.1  
128.2  
128.3  
128.4  
128.5  
20000  
20000  
20000  
20000  
20000  
No  
No  
-
FWD  
DIS  
Desg  
-
No  
-
Shared (STP)  
-
282  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Console# show spanning-tree  
Spanning tree disabled (BPDU filtering) mode RSTP  
Default port cost method: long  
Root ID  
Priority  
N/A  
Address  
N/A  
Path Cost  
Root Port  
Hello Time N/A  
N/A  
N/A  
Max Age N/A  
Forward Delay N/A  
Bridge ID  
Priority  
36864  
Address  
00:02:4b:29:7a:00  
Max Age 20 sec  
Hello Time 2 sec  
Forward Delay 15 sec  
Interfaces  
Name  
State  
Prio.Nbr Cost  
-------- -----  
Sts  
Role  
PortFast  
Type  
----  
-------  
Enabled  
Enabled  
Disabled  
Enabled  
Enabled  
---  
-
----  
--------  
----  
1
2
3
4
5
128.1  
128.2  
128.3  
128.4  
128.5  
20000  
20000  
20000  
20000  
20000  
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Console# show spanning-tree active  
Spanning tree enabled mode RSTP  
Default port cost method: long  
Root ID  
Priority  
32768  
Address  
00:01:42:97:e0:00  
20000  
Path Cost  
Root Port  
Hello Time 2 sec  
1 (1/1)  
Max Age 20 sec  
Forward Delay 15 sec  
Bridge ID  
Priority  
36864  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
283  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Address  
00:02:4b:29:7a:00  
Max Age 20 sec  
Hello Time 2 sec  
Forward Delay 15 sec  
Interfaces  
Name  
State  
Prio.Nbr Cost  
-------- -----  
Sts  
---  
FWD  
FWD  
BLK  
Role  
----  
Root  
Desg  
ALTN  
PortFast  
Type  
----  
-------  
Enabled  
Enabled  
Enabled  
--------  
----------  
P2p (RSTP)  
Shared (STP)  
Shared (STP)  
1
2
4
128.1  
128.2  
128.4  
20000  
20000  
20000  
No  
No  
No  
Console# show spanning-tree blockedports  
Spanning tree enabled mode RSTP  
Default port cost method: long  
Root ID  
Priority  
32768  
Address  
00:01:42:97:e0:00  
20000  
Path Cost  
Root Port  
Hello Time 2 sec  
1 (1/1)  
Max Age 20 sec  
Forward Delay 15 sec  
Forward Delay 15 sec  
Bridge ID  
Priority  
36864  
Address  
00:02:4b:29:7a:00  
Max Age 20 sec  
Hello Time 2 sec  
Interfaces  
Name  
----  
4
State  
Prio.Nbr Cost  
-------- -----  
128.4 20000  
Sts  
Role  
----  
ALTN  
PortFast  
--------  
No  
Type  
-------  
Enabled  
---  
BLK  
----------  
Shared (STP)  
284  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Console# show spanning-tree detail  
Spanning tree enabled mode RSTP  
Default port cost method: long  
Root ID  
Priority  
32768  
Address  
00:01:42:97:e0:00  
20000  
Path Cost  
Root Port  
Hello Time 2 sec  
1 (1/1)  
Max Age 20 sec  
Forward Delay 15 sec  
Bridge ID  
Priority  
Address  
36864  
00:02:4b:29:7a:00  
Max Age 20 sec  
Hello Time 2 sec  
Forward Delay 15 sec  
Number of topology changes 2 last change occurred 2d18h ago  
Times:  
hold 1, topology change 35, notification 2  
hello 2, max age 20, forward delay 15  
Port 1 (1/1) enabled  
State: Forwarding  
Role: Root  
Port id: 128.1  
Port cost: 20000  
Type: P2p (configured: auto) RSTP  
Designated bridge Priority: 32768  
Designated port id: 128.25  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 120638  
Port Fast: No (configured:no)  
Address: 00:01:42:97:e0:00  
Designated path cost: 0  
Port 2 enabled  
State: Forwarding  
Role: Designated  
Port id: 128.2  
Port cost: 20000  
Type: Shared (configured: auto) STP  
Designated bridge Priority: 32768  
Designated port id: 128.2  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
285  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Port 3 disabled  
State: N/A  
Role: N/A  
Port id: 128.3  
Port cost: 20000  
Type: N/A (configured: auto)  
Designated bridge Priority: N/A  
Designated port id: N/A  
Number of transitions to forwarding state: N/A  
BPDU: sent N/A, received N/A  
Port Fast: N/A (configured:no)  
Address: N/A  
Designated path cost: N/A  
Port 4 enabled  
State: Blocking  
Role: Alternate  
Port id: 128.4  
Port cost: 20000  
Type: Shared (configured:auto) STP  
Designated bridge Priority: 28672  
Designated port id: 128.25  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 120638  
Port Fast: No (configured:no)  
Address: 00:30:94:41:62:c8  
Designated path cost: 20000  
Port 5 enabled  
State: Disabled  
Role: N/A  
Port id: 128.5  
Port cost: 20000  
Type: N/A (configured: auto)  
Designated bridge Priority: N/A  
Designated port id: N/A  
Number of transitions to forwarding state: N/A  
BPDU: sent N/A, received N/A  
Port Fast: N/A (configured:no)  
Address: N/A  
Designated path cost: N/A  
286  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Console# show spanning-tree ethernet ext.1  
Port 1 (1/1) enabled  
State: Forwarding  
Role: Root  
Port cost: 20000  
Port id: 128.1  
Type: P2p (configured: auto) RSTP  
Designated bridge Priority: 32768  
Designated port id: 128.25  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 120638  
Port Fast: No (configured:no)  
Address: 00:01:42:97:e0:00  
Designated path cost: 0  
Console# show spanning-tree mst-configuration  
Name: Region1  
Revision: 1  
Instance  
Vlans mapped  
------------  
1-9, 21-4094  
10-20  
State  
--------  
-------  
Enabled  
Enabled  
0
1
Console# show spanning-tree  
Spanning tree enabled mode MSTP  
Default port cost method: long  
###### MST 0 Vlans Mapped: 1-9, 21-4094  
CST Root ID  
Priority 32768  
Address  
00:01:42:97:e0:00  
20000  
Path  
Cost  
Root  
Port  
1 (1/1)  
Hello Time 2 sec  
Max Age 20 sec  
Forward Delay 15 sec  
IST Master ID  
Priority 32768  
Address  
This switch is the IST master.  
Hello Time 2 sec Max Age 20 sec  
00:02:4b:29:7a:00  
Forward Delay 15 sec  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
287  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Maxhops  
20  
Interfaces  
Name  
----  
1
State  
Prio.Nbr Cost  
-------- -----  
Sts  
---  
FWD  
Role  
----  
Root  
PortFast  
--------  
No  
Type  
-------  
Enabled  
----------  
128.1  
20000  
P2p Bound  
(RSTP)  
2
Enabled  
128.2  
20000  
FWD  
Desg  
No  
Shared Bound  
(STP)  
3
4
Enabled  
Enabled  
128.3  
128.4  
20000  
20000  
FWD  
FWD  
Desg  
Desg  
No  
No  
P2p  
P2p  
###### MST 1 Vlans Mapped: 10-20  
CST Root ID Priority 24576  
Address  
00:02:4b:29:89:76  
20000  
Path  
Cost  
Root  
Port  
4 (1/4)  
Rem hops 19  
Bridge ID  
Priority 32768  
Address  
00:02:4b:29:7a:00  
Interfaces  
Name  
----  
1
State  
Prio.Nbr Cost  
-------- -----  
Sts  
---  
FWD  
Role  
----  
Boun  
PortFast  
--------  
No  
Type  
-------  
Enabled  
----------  
128.1  
20000  
P2p Bound  
(RSTP)  
2
Enabled  
128.2  
20000  
FWD  
Boun  
No  
Shared Bound  
(STP)  
3
4
Enabled  
Enabled  
128.3  
128.4  
20000  
20000  
BLK  
FWD  
Altn  
Desg  
No  
No  
P2p  
P2p  
288  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Console# show spanning-tree detail  
Spanning tree enabled mode MSTP  
Default port cost method: long  
###### MST 0 Vlans Mapped: 1-9, 21-4094  
CST Root ID  
Priority 32768  
Address  
00:01:42:97:e0:00  
Path  
Cost  
20000  
Root  
Port  
1 (1/1)  
Hello Time 2 sec  
Max Age 20 sec  
Forward Delay 15 sec  
IST Master ID  
Priority 32768  
Address  
This switch is the IST master.  
Hello Time 2 sec Max Age 20 sec  
Maxhops 20  
00:02:4b:29:7a:00  
Forward Delay 15 sec  
Number of topology changes 2 last change occurred 2d18h ago  
Times: hold 1, topology change 35, notification 2  
hello 2, max age 20, forward delay 15  
Port 1 (1/1) enabled  
State: Forwarding  
Port id: 128.1  
Role: Root  
Port cost: 20000  
Type: P2p (configured: auto) Boundary RSTP  
Designated bridge Priority: 32768  
Designated port id: 128.25  
Port Fast: No (configured:no)  
Address: 00:01:42:97:e0:00  
Designated path cost: 0  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 120638  
Port 2 (enabled  
State: Forwarding  
Role: Designated  
Port id: 128.2  
Port cost: 20000  
Type: Shared (configured: auto) Boundary STP  
Designated bridge Priority: 32768  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
289  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Designated port id: 128.2  
Designated path cost: 20000  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port 3 enabled  
State: Forwarding  
Role: Designated  
Port id: 128.3  
Port cost: 20000  
Type: Shared (configured: auto) Internal  
Designated bridge Priority: 32768  
Designated port id: 128.3  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
Port 4 enabled  
State: Forwarding  
Role: Designated  
Port id: 128.4  
Port cost: 20000  
Type: Shared (configured: auto) Internal  
Designated bridge Priority: 32768  
Designated port id: 128.2  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
###### MST 1 Vlans Mapped: 10-20  
Root ID  
Priority 24576  
Address  
00:02:4b:29:89:76  
Path  
Cost  
20000  
4 (1/4)  
19  
Port  
Cost  
Remhops  
Bridge ID  
Priority 32768  
Address 00:02:4b:29:7a:00  
Number of topology changes 2 last change occurred 1d9h ago  
Times: hold 1, topology change 2, notification 2  
hello 2, max age 20, forward delay 15  
290  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Port 1 (1/1) enabled  
State: Forwarding  
Role: Boundary  
Port id: 128.1  
Port cost: 20000  
Type: P2p (configured: auto) Boundary RSTP  
Designated bridge Priority: 32768  
Designated port id: 128.1  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 120638  
Port 2 (1/2) enabled  
State: Forwarding  
Role: Designated  
Port id: 128.2  
Port cost: 20000  
Type: Shared (configured: auto) Boundary STP  
Designated bridge Priority: 32768  
Designated port id: 128.2  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port 3 disabled  
State: Blocking  
Role: Alternate  
Port id: 128.3  
Port cost: 20000  
Type: Shared (configured: auto) Internal  
Designated bridge Priority: 32768  
Designated port id: 128.78  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:1a:19  
Designated path cost: 20000  
Port 4 enabled  
State: Forwarding  
Role: Designated  
Port id: 128.4  
Port cost: 20000  
Type: Shared (configured: auto) Internal  
Designated bridge Priority: 32768  
Designated port id: 128.2  
Number of transitions to forwarding state: 1  
BPDU: sent 2, received 170638  
Port Fast: No (configured:no)  
Address: 00:02:4b:29:7a:00  
Designated path cost: 20000  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
291  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Console# show spanning-tree  
Spanning tree enabled mode MSTP  
Default port cost method: long  
###### MST 0 Vlans Mapped: 1-9, 21-4094  
CST Root ID  
Priority 32768  
Address  
00:01:42:97:e0:00  
Path  
Cost  
20000  
Root  
Port  
1 (1/1)  
Hello Time 2 sec  
Priority 32768  
Max Age 20 sec  
Forward Delay 15 sec  
IST Master ID  
Address  
00:02:4b:19:7a:00  
10000  
Path  
Cost  
Rem hops 19  
Bridge ID  
Priority 32768  
Address  
00:02:4b:29:7a:00  
Hello Time 2 sec  
Max Age 20 sec  
Forward Delay 15 sec  
Maxhops  
20  
Console# show spanning-tree  
Spanning tree enabled mode MSTP  
Default port cost method: long  
###### MST 0 Vlans Mapped: 1-9, 21-4094  
CST Root ID Priority 32768  
Address 00:01:42:97:e0:00  
This switch is root for CST and IST master.  
Root  
Port  
1 (1/1)  
292  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
Hello Time 2 sec  
Max hops 20  
Max Age 20 sec  
Forward Delay 15 sec  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
293  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Spanning-Tree Commands  
294  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
23 SSH Commands  
ip ssh port  
The ip ssh port Global Configuration mode command specifies the port to be used by the  
SSH server. To restore the default configuration, use the no form of this command.  
Syntax  
ip ssh port port-number  
no ip ssh port  
Parameters  
port-number — Port number for use by the SSH server (Range: 1-65535).  
Default Configuration  
The default port number is 22.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example specifies the port to be used by the SSH server as 8080.  
Console(config)# ip ssh port 8080  
ip ssh server  
The ip ssh server Global Configuration mode command enables the device to be  
configured from a SSH server. To disable this function, use the no form of this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
295  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
SSH Commands  
Syntax  
ip ssh server  
no ip ssh server  
Default Configuration  
Device configuration from a SSH server is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
If encryption keys are not generated, the SSH server is in standby until the keys are  
generated. To generate SSH server keys, use the crypto key generate dsa, and crypto  
key generate rsa Global Configuration mode commands.  
Example  
The following example enables configuring the device from a SSH server.  
Console(config)# ip ssh server  
crypto key generate dsa  
The crypto key generate dsa Global Configuration mode command generates DSA key  
pairs.  
Syntax  
crypto key generate dsa  
Default Configuration  
DSA key pairs do not exist.  
Command Mode  
Global Configuration mode  
296  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
User Guidelines  
DSA keys are generated in pairs: one public DSA key and one private DSA key. If the  
device already has DSA keys, a warning and prompt to replace the existing keys with new  
keys are displayed.  
This command is not saved in the device configuration; however, the keys generated by  
this command are saved in the private configuration, which is never displayed to the user  
or backed up on another device.  
DSA keys are saved to the backup master.  
This command may take a considerable period of time to execute.  
Example  
The following example generates DSA key pairs.  
Console(config)# crypto key generate dsa  
crypto key generate rsa  
The crypto key generate rsa Global Configuration mode command generates RSA key  
pairs.  
Syntax  
crypto key generate rsa  
Default Configuration  
RSA key pairs do not exist.  
Command Mode  
Global Configuration mode  
User Guidelines  
RSA keys are generated in pairs: one public RSA key and one private RSA key. If the  
device already has RSA keys, a warning and prompt to replace the existing keys with new  
keys are displayed.  
This command is not saved in the device configuration; however, the keys generated by  
this command are saved in the private configuration which is never displayed to the user  
or backed up on another device.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
297  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
RSA keys are saved to the backup master.  
This command may take a considerable period of time to execute.  
Example  
The following example generates RSA key pairs.  
Console(config)# crypto key generate rsa  
ip ssh pubkey-auth  
The ip ssh pubkey-auth Global Configuration mode command enables public key  
authentication for incoming SSH sessions. To disable this function, use the no form of this  
command.  
Syntax  
ip ssh pubkey-auth  
no ip ssh pubkey-auth  
Default Configuration  
Public Key authentication fo incoming SSH sessions is disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
AAA authentication is independent.  
Example  
The following example enables public key authentication for incoming SSH sessions.  
Console(config)# ip ssh pubkey-auth  
298  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
crypto key pubkey-chain ssh  
The crypto key pubkey-chain ssh Global Configuration mode command enters the SSH  
Public Key-chain Configuration mode. The mode is used to manually specify other device  
public keys such as SSH client public keys.  
Syntax  
crypto key pubkey-chain ssh  
Default Configuration  
No keys are specified.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enters the SSH Public Key-chain Configuration mode and  
manually configures the RSA key pair for SSH public key-chain bob.  
Console(config)# crypto key pubkey-chain ssh  
Console(config-pubkey-chain)# user-key bob  
Console(config-pubkey-key)# key-string rsa  
AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPWl  
Al4kpqIw9GBRonZQZxjHKcqKL6rMlQ+  
ZNXfZSkvHG+QusIZ/76ILmFT34v7u7ChFAE+  
Vu4GRfpSwoQUvV35LqJJk67IOU/zfwOl1g  
kTwml75QR9gHujS6KwGN2QWXgh3ub8gDjTSq  
muSn/Wd05iDX2IExQWu08licglk02LYciz  
+Z4TrEU/9FJxwPiVQOjc+KBXuR0juNg5nFYsY  
0ZCk0N/W9a/tnkm1shRE7Di71+w3fNiOA  
6w9o44t6+AINEICBCCA4YcF6zMzaT1wefWwX6f+  
Rmt5nhhqdAtN/4oJfce166DqVX1gWmN  
zNR4DYDvSzg0lDnwCAC8Qh  
Fingerprint: a4:16:46:23:5a:8d:1d:b5:37:59:eb:44:13:b9:33:e9  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
299  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
user-key  
The user-key SSH Public Key-string Configuration mode command specifies which SSH  
public key is manually configured. To remove an SSH public key, use the no form of this  
command.  
Syntax  
user-key username {rsa | dsa}  
no user-key username  
Parameters  
username — Specifies the username of the remote SSH client. (Range: 1-48  
characters)  
rsa — Indicates the RSA key pair.  
dsa — Indicates the DSA key pair.  
Default Configuration  
No SSH public keys exist.  
Command Mode  
SSH Public Key-string Configuration mode  
User Guidelines  
Follow this command with the key-string SSH Public Key-String Configuration mode  
command to specify the key.  
Example  
The following example enables manually configuring an SSH public key for SSH public  
key-chain bob.  
Console(config)# crypt\o key pubkey-chain ssh  
Console(config-pubkey-chain)# user-key bob rsa  
Console(config-pubkey-key)# key-string row  
AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPWl  
300  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
key-string  
The key-string SSH Public Key-string Configuration mode command manually specifies  
an SSH public key.  
Syntax  
key-string  
key-string row key-string  
Parameters  
row — Indicates the SSH public key row by row.  
key-string — Specifies the key in UU-encoded DER format; UU-encoded DER  
format is the same format in the authorized_keys file used by OpenSSH. (Range:0-  
160)  
Default Configuration  
No keys exist.  
Command Mode  
SSH Public Key-string Configuration mode  
User Guidelines  
Use the key-string SSH Public Key-string Configuration mode command to specify  
which SSH public key is to be interactively configured next. To complete the command,  
you must enter a row with no characters.  
Use the key-string row SSH Public Key-string Configuration mode command to specify  
the SSH public key row by row. Each row must begin with a key-string row command.  
This command is useful for configuration files.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
301  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
Example  
The following example enters public key strings for SSH public key client bob.  
Console(config)# crypto key pubkey-chain ssh  
Console(config-pubkey-chain)# user-key bob rsa  
Console(config-pubkey-key)# key-string  
AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPWl  
Al4kpqIw9GBRonZQZxjHKcqKL6rMlQ+  
ZNXfZSkvHG+QusIZ/76ILmFT34v7u7ChFAE+  
Vu4GRfpSwoQUvV35LqJJk67IOU/zfwOl1g  
kTwml75QR9gHujS6KwGN2QWXgh3ub8gDjTSq  
muSn/Wd05iDX2IExQWu08licglk02LYciz  
+Z4TrEU/9FJxwPiVQOjc+KBXuR0juNg5nFYsY  
0ZCk0N/W9a/tnkm1shRE7Di71+w3fNiOA  
6w9o44t6+AINEICBCCA4YcF6zMzaT1wefWwX6f+  
Rmt5nhhqdAtN/4oJfce166DqVX1gWmN  
zNR4DYDvSzg0lDnwCAC8Qh  
Fingerprint: a4:16:46:23:5a:8d:1d:b5:37:59:eb:44:13:b9:33:e9  
Console(config)# crypto key pubkey-chain ssh  
Console(config-pubkey-chain)# user-key bob rsa  
Console(config-pubkey-key)# key-string row AAAAB3Nza  
Console(config-pubkey-key)# key-string row C1yc2  
show ip ssh  
The show ip ssh Privileged EXEC mode command displays the SSH server configuration.  
Syntax  
show ip ssh  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
302  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the SSH server configuration.  
Console# show ip ssh  
SSH server enabled. Port: 22  
RSA key was generated.  
DSA (DSS) key was generated.  
SSH Public Key Authentication is enabled.  
Active incoming sessions:  
IP address  
----------  
172.16.0.1  
SSH username  
------------  
John Brown  
Version  
---------  
2.0 3  
Cipher  
-------  
DES  
Auth Code  
----------  
HMAC-SHA1  
The following table describes the significant fields shown in the display.  
Field  
Description  
IP address  
SSH username  
Version  
Client address  
User name  
SSH version number  
Cipher  
Encryption type (3DES, Blowfish, RC4)  
Auth Code  
Authentication Code (HMAC-MD5, HMAC-SHA1)  
show crypto key mypubkey  
The show crypto key mypubkey Privileged EXEC mode command displays the SSH  
public keys on the device.  
Syntax  
show crypto key mypubkey [rsa | dsa]  
Parameters  
rsa — Indicates the RSA key.  
dsa — Indicates the DSA key.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
303  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the SSH public RSA keys on the device.  
Console# show crypto key mypubkey rsa  
RSA key data:  
005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22  
04AEF1BA A54028A6 9ACC01C5 129D99E4 64CAB820 847EDAD9 DF0B4E4C 73A05DD2  
BD62A8A9 FA603DD2 E2A8A6F8 98F76E28 D58AD221 B583D7A4 71020301 87685768  
Fingerprint(Hex): 77:C7:19:85:98:19:27:96:C9:CC:83:C5:78:89:F8:86  
Fingerprint(Bubble Babble): yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk  
show crypto key pubkey-chain ssh  
The show crypto key pubkey-chain ssh Privileged EXEC mode command displays SSH  
public keys stored on the device.  
Syntax  
show crypto key pubkey-chain ssh [username username] [fingerprint {bubble-babble  
| hex}]  
Parameters  
username — Specifies the remote SSH client username.  
bubble-babble — Fingerprint in Bubble Babble format.  
hex — Fingerprint in Hex format.  
Default Configuration  
This command has no default configuration.  
304  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays SSH public keys stored on the device.  
Console# show crypto key pubkey-chain ssh  
Username  
--------  
bob  
Fingerprint  
-----------------------------------------------  
9A:CC:01:C5:78:39:27:86:79:CC:23:C5:98:59:F1:86  
98:F7:6E:28:F2:79:87:C8:18:F8:88:CC:F8:89:87:C8  
john  
Console# show crypto key pubkey-chain ssh username bob  
Username: bob  
Key: 005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 04AEF1BA  
A54028A6 9ACC01C5 129D99E4  
Fingerprint: 9A:CC:01:C5:78:39:27:86:79:CC:23:C5:98:59:F1:86  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
305  
Download from Www.Somanuals.com. All Manuals Search And Download.  
SSH Commands  
306  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
24 Syslog Commands  
logging on  
The logging on Global Configuration mode command controls error message logging.  
This command sends debug or error messages to a logging process, which logs messages  
to designated locations asynchronously to the process that generated the messages. To  
disable the logging process, use the no form of this command.  
Syntax  
logging on  
no logging on  
Default Configuration  
Logging is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
The logging process controls the distribution of logging messages at various destinations,  
such as the logging buffer, logging file or syslog server. Logging on and off at these  
destinations can be individually configured using the logging buffered, logging file, and  
logging Global Configuration mode commands. However, if the logging on command is  
disabled, no messages are sent to these destinations. Only the console receives messages.  
Example  
The following example enables logging error messages.  
Console(config)# logging on  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
307  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Syslog Commands  
logging  
The logging Global Configuration mode command logs messages to a syslog server. To  
delete the syslog server with the specified address from the list of syslogs, use the no form  
of this command.  
Syntax  
logging {ip-address | hostname} [port port] [severity level] [facility facility]  
[description text]  
no logging {ip-address | hostname}  
Parameters  
ip-address — IP address of the host to be used as a syslog server.  
hostname — Specifies the host name of the syslog server. (Range: 1-158 characters)  
port — Specifies the port number for syslog messages. (Range: 1-65535)  
level — Specifies the severity level of logged messages sent to the syslog servers.  
Possible values: emergencies, alerts, critical, errors, warnings, notifications,  
informational and debugging.  
facility — Specifies the facility that is indicated in the message. Possible values:  
local0, local1, local2, local3, local4, local5, local 6, local7.  
text — Syslog server description. (Range: 1-64 characters)  
Default Configuration  
The default port number is 514.  
The default logging message level is informational.  
The default facility is local7.  
Command Mode  
Global Configuration mode  
User Guidelines  
Up to 8 syslog servers can be used.  
If no specific severity level is specified, the global values apply to each server.  
308  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Example  
The following example limits logged messages sent to the syslog server with IP address  
10.1.1.1 to severity level critical.  
Console(config)# logging 10.1.1.1 severity critical  
logging buffered  
The logging buffered Global Configuration mode command limits syslog messages  
displayed from an internal buffer based on severity. To cancel using the buffer, use the no  
form of this command.  
Syntax  
logging buffered level  
no logging buffered  
Parameters  
level — Specifies the severity level of messages logged in the buffer. The possible  
values are: emergencies, alerts, critical, errors, warnings, notifications,  
informational, debugging.  
Default Configuration  
The default severity level is informational.  
Command Mode  
Global Configuration mode  
User Guidelines  
All the syslog messages are logged to the internal buffer. This command limits the  
messages displayed to the user.  
Example  
The following example limits syslog messages displayed from an internal buffer based on  
severity level debugging.  
Console(config)# logging buffered debugging  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
309  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
logging buffered size  
The logging buffered size Global Configuration mode command changes the number of  
syslog messages stored in the internal buffer. To restore the default configuration, use the  
no form of this command.  
Syntax  
logging buffered size number  
no logging buffered size  
Parameters  
number — Specifies the maximum number of messages stored in the history table.  
(Range: 20-400)  
Default Configuration  
The default number of messages is 200.  
Command Mode  
Global Configuration mode  
User Guidelines  
This command takes effect only after Reset.  
Example  
The following example changes the number of syslog messages stored in the internal  
buffer to 300.  
Console(config)# logging buffered size 300  
clear logging  
The clear logging Privileged EXEC mode command clears messages from the internal  
logging buffer.  
310  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Syntax  
clear logging  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example clears messages from the internal logging buffer.  
Console# clear logging  
Clear Logging File [y/n]  
logging file  
The logging file Global Configuration mode command limits syslog messages sent to the  
logging file based on severity. To cancel using the buffer, use the no form of this  
command.  
Syntax  
logging file level  
no logging file  
Parameters  
level — Specifies the severity level of syslog messages sent to the logging file.  
Possible values are: emergencies, alerts, critical, errors, warnings, notifications,  
informational and debugging.  
Default Configuration  
The default severity level is errors.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
311  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example limits syslog messages sent to the logging file based on severity  
level alerts.  
Console(config)# logging file alerts  
clear logging file  
The clear logging file Privileged EXEC mode command clears messages from the  
logging file.  
Syntax  
clear logging file  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example clears messages from the logging file.  
Console# clear logging file  
Clear Logging File [y/n]  
312  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
aaa logging  
The aaa logging Global Configuration mode command enables logging AAA login  
events. To disable logging AAA login events, use the no form of this command.  
Syntax  
aaa logging login  
no aaa logging login  
Parameters  
login — Indicates logging messages related to successful login events, unsuccessful  
login events and other login-related events.  
Default Configuration  
Logging AAA login events is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Other types of AAA events are not subject to this command.  
Example  
The following example enables logging messages related to AAA login events.  
Console(config)# aaa logging login  
file-system logging  
The file-system logging Global Configuration mode command enables logging file  
system events. To disable logging file system events, use the no form of this command.  
Syntax  
file-system logging copy  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
313  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
no file-system logging copy  
file-system logging delete-rename  
no file-system logging delete-rename  
Parameters  
copy — Indicates logging messages related to file copy operations.  
delete-rename — Indicates logging messages related to file deletion and renaming  
operations.  
Default Configuration  
Logging file system events is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables logging messages related to file copy operations.  
Console(config)# file-system logging copy  
management logging  
The management logging Global Configuration command enables logging management  
access list (ACL) events. To disable logging management access list events, use the no  
form of this command.  
Syntax  
management logging deny  
no management logging deny  
314  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Parameters  
deny — Indicates logging messages related to deny actions of management ACLs.  
Default Configuration  
Logging management ACL events is enabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Other types of management ACL events are not subject to this command.  
Example  
The following example enables logging messages related to deny actions of management  
ACLs.  
Console(config)# management logging deny  
show logging  
The show logging Privileged EXEC mode command displays the state of logging and the  
syslog messages stored in the internal buffer.  
Syntax  
show logging  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
315  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Example  
The following example displays the state of logging and the syslog messages stored in the  
internal buffer.  
Console# show logging  
Logging is enabled.  
Console logging: level debugging. Console Messages: 0 Dropped (severity).  
Buffer logging: level debugging. Buffer Messages: 11 Logged, 200 Max.  
File logging: level notifications. File Messages: 0 Dropped (severity).  
Syslog server 192.180.2.27 logging: errors. Messages: 6 Dropped (severity).  
Syslog server 192.180.2.28 logging: errors. Messages: 6 Dropped (severity).  
2 messages were not logged (resources)  
Application filtering control  
Application  
-----------  
AAA  
Event  
Status  
-----  
------  
Login  
Enabled  
Enabled  
Enabled  
Enabled  
File system  
File system  
Management ACL  
Copy  
Delete-Rename  
Deny  
Buffer log:  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet ext.0, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.0, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.1, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.2, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.3, changed state to up  
11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet ext.0 ,  
changed state to up  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.0,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.1,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.2,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.3,  
changed state to down  
316  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
show logging file  
The show logging file Privileged EXEC mode command displays the state of logging and  
the syslog messages stored in the logging file.  
Syntax  
show logging file  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the logging state and the syslog messages stored in the  
logging file.  
Console# show logging file  
Logging is enabled.  
Console logging: level debugging. Console Messages: 0 Dropped (severity).  
Buffer logging: level debugging. Buffer Messages: 11 Logged, 200 Max.  
File logging: level notifications. File Messages: 0 Dropped (severity).  
Syslog server 192.180.2.27 logging: errors. Messages: 6 Dropped (severity).  
Syslog server 192.180.2.28 logging: errors. Messages: 6 Dropped (severity).  
2 messages were not logged (resources)  
Application filtering control  
Application  
-----------  
AAA  
Event  
Status  
-----  
------  
Login  
Enabled  
Enabled  
Enabled  
Enabled  
File system  
File system  
Management ACL  
Copy  
Delete-Rename  
Deny  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
317  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Buffer log:  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface FastEthernet ext.0, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.0, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.1, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.2, changed state to up  
11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet ext.3, changed state to up  
11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet ext.0,  
changed state to up  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.0,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.1,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.2,  
changed state to down  
11-Aug-2004 15:41:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet ext.3,  
changed state to down  
show syslog-servers  
The show syslog-servers Privileged EXEC mode command displays the settings of the  
syslog servers.  
Syntax  
show syslog-servers  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
318  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
Example  
The following example displays the settings of the syslog servers.  
Console# show syslog-servers  
Device Configuration  
IP address  
Port  
----  
514  
Severity  
Facility  
--------  
local7  
Description  
-----------  
------------  
192.180.2.27  
192.180.2.28  
-------------  
Informational  
Warning  
514  
local7  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
319  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Syslog Commands  
320  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
25 System Management Commands  
ping  
The ping User EXEC mode command sends ICMP echo request packets to another node  
on the network.  
Syntax  
ping {ip-address | hostname}[size packet_size] [count packet_count] [timeout time_out]  
Parameters  
ip-address — IP address to ping.  
hostname — Host name to ping. (Range: 1-158 characters)  
packet_size — Number of bytes in a packet. The actual packet size is eight bytes  
larger than the specified size specified because the device adds header information.  
(Range: 56-1472 bytes)  
packet_count — Number of packets to send. If 0 is entered, it pings until stopped.  
(Range: 0-65535 packets)  
time_out — Timeout in milliseconds to wait for each reply. (Range: 50-65535  
milliseconds)  
Default Configuration  
Default packet size is 56 bytes.  
Default number of packets to send is 4.  
Default timeout value is 2000 milliseconds.  
Command Mode  
User EXEC mode  
User Guidelines  
Press Esc to stop pinging.  
Following are examples of unsuccessful pinging:  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
321  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
System Management Commands  
Destination does not respond. If the host does not respond, a “no answer from host”  
appears in ten seconds.  
Destination unreachable. The gateway for this destination indicates that the destination is  
unreachable.  
Network or host unreachable. The device found no corresponding entry in the route table.  
Example  
The following example displays pinging results:  
Console> ping 10.1.1.1  
Pinging 10.1.1.1 with 64 bytes of data:  
64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms  
64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms  
64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms  
64 bytes from 10.1.1.1: icmp_seq=3. time=7 ms  
----10.1.1.1 PING Statistics----  
4 packets transmitted, 4 packets received, 0% packet loss  
round-trip (ms) min/avg/max = 7/8/11  
Console> ping yahoo.com  
Pinging yahoo.com 66.218.71.198 with 64 bytes of data:  
64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms  
64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms  
64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms  
64 bytes from 10.1.1.1: icmp_seq=3. time=7 ms  
----10.1.1.1 PING Statistics----  
4 packets transmitted, 4 packets received, 0% packet loss  
round-trip (ms) min/avg/max = 7/8/11  
traceroute  
The traceroute User EXEC mode command discovers routes that packets actually take  
when traveling to their destination.  
322  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Syntax  
traceroute {ip-address |hostname}[size packet_size] [ttl max-ttl] [count packet_count]  
[timeout time_out] [source ip-address] [tos tos]  
Parameters  
ip-address — IP address of the destination host.  
hostname — Host name of the destination host. (Range: 1-158 characters)  
packet_size — Number of bytes in a packet. (Range: 40-1500)  
max-ttl — The largest TTL value that can be used. The traceroute command  
terminates when the destination is reached or when this value is reached. (Range:1-  
255)  
packet_count — The number of probes to be sent at each TTL level. (Range:1-10)  
time_out — The number of seconds to wait for a response to a probe packet.  
(Range:1-60)  
ip-address — One of the device’s interface addresses to use as a source address for the  
probes. The device normally selects what it feels is the best source address to use.  
tos — The Type-Of-Service byte in the IP Header of the packet. (Range: 0-255)  
Default Configuration  
The default number of bytes in a packet is 40.  
The default maximum TTL value is 30.  
The default number of probes to be sent at each TTL level is 3.  
The default timeout interval in seconds is 3.  
Command Mode  
User EXEC mode  
User Guidelines  
The traceroute command takesadvantage of the error messages generated by the devices  
when a datagram exceeds its time-to-live (TTL) value.  
The traceroute command starts by sending probe datagrams with a TTL value of one.  
This causes the first device to discard the probe datagram and send back an error message.  
The traceroute command sends several probes at each TTL level and displays the round-  
trip time for each.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
323  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
The traceroute command sends out one probe at a time. Each outgoing packet may result  
in one or two error messages. A "time exceeded" error message indicates that an  
intermediate device has seen and discarded the probe. A "destination unreachable" error  
message indicates that the destination node has received the probe and discarded it  
because it could not deliver the packet. If the timer goes off before a response comes in,  
the  
traceroute command prints an asterisk (*).  
The traceroute command terminates when the destination responds, when the maximum  
TTL is exceeded or when the user interrupts the trace by pressing Esc.  
Example  
The following example discovers the routes that packets will actually take when traveling  
to their destination.  
Console> traceroute umaxp1.physics.lsa.umich.edu  
Type Esc to abort.  
Tracing the route to umaxp1.physics.lsa.umich.edu (141.211.101.64)  
1 i2-gateway.stanford.edu (192.68.191.83) 0 msec 0 msec 0 msec  
2 STAN.POS.calren2.NET (171.64.1.213) 0 msec 0 msec 0 msec  
3 SUNV--STAN.POS.calren2.net (198.32.249.73) 1 msec 1 msec 1 msec  
4 Abilene--QSV.POS.calren2.net (198.32.249.162) 1 msec 1 msec 1 msec  
5 kscyng-snvang.abilene.ucaid.edu (198.32.8.103) 33 msec 35 msec 35 msec  
6 iplsng-kscyng.abilene.ucaid.edu (198.32.8.80) 47 msec 45 msec 45 msec  
7 so-0-2-0x1.aa1.mich.net (192.122.183.9) 56 msec 53 msec 54 msec  
8 atm1-0x24.michnet8.mich.net (198.108.23.82) 56 msec 56 msec 57 msec  
9 * * *  
10 A-ARB3-LSA-NG.c-SEB.umnet.umich.edu (141.211.5.22) 58 msec 58 msec 58 msec  
11 umaxp1.physics.lsa.umich.edu (141.211.101.64) 62 msec 63 msec 63 msec  
The following table describes significant fields shown above.  
Field  
Description  
1
Indicates the sequence number of the device in the path to the host.  
Host name of this device.  
i2-gateway.stanford.edu  
192.68.191.83  
IP address of this device.  
1 msec 1 msec 1 msec  
Round-trip time for each probe sent.  
The following table describes characters that may appear in the traceroute command  
output.  
Field  
Description  
*
The probe timed out.  
Unknown packet type.  
?
A
Administratively unreachable. Usually, this output indicates that an access list is  
blocking traffic.  
F
Fragmentation is required and DF is set.  
324  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
H
N
P
Q
R
S
U
Host unreachable.  
Network unreachable.  
Protocol unreachable.  
Source quench.  
Fragment reassembly time exceeded.  
Source route failed.  
Port unreachable.  
telnet  
The telnet User EXEC mode command enables logging on to a host that supports Telnet.  
telnet {ip-address | hostname} [port] [keyword1......]  
Syntax  
Parameters  
ip-address — IP address of the destination host.  
hostname — Host name of the destination host. (Range: 1-158 characters)  
port — A decimal TCP port number, or one of the keywords listed in the Ports table in  
the User Guidelines.  
keyword — One or more keywords listed in the Keywords table in the User  
Guidelines.  
Default Configuration  
The default port is the Telnet port (decimal23) on the host.  
Command Mode  
User EXEC mode  
User Guidelines  
Telnet software supports special Telnet commands in the form of Telnet sequences that  
map generic terminal control functions to operating system-specific functions. To enter a  
Telnet sequence, press the escape sequence keys (Ctrl-shift-6) followed by a Telnet  
command character.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
325  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Special Telnet Sequences  
Telnet Sequence  
Ctrl-shift-6-b  
Purpose  
Break  
Ctrl-shift-6-c  
Ctrl-shift-6-h  
Ctrl-shift-6-o  
Ctrl-shift-6-t  
Ctrl-shift-6-u  
Interrupt Process (IP)  
Erase Character (EC)  
Abort Output (AO)  
Are You There? (AYT)  
Erase Line (EL)  
At any time during an active Telnet session, Telnet commands can be listed by pressing  
the Ctrl-shift-6-? keys at the system prompt.  
A sample of this list follows. Note that the Ctrl-shift-6 sequence appears as ^^ on the screen.  
Console> ‘Ctrl-shift-6’ ?  
[Special telnet escape help]  
^^ B sends telnet BREAK  
^^ C sends telnet IP  
^^ H sends telnet EC  
^^ O sends telnet AO  
^^ T sends telnet AYT  
^^ U sends telnet EL  
Ctrl-shift-6 x suspends the session (return to system command prompt)  
Several concurrent Telnet sessions can be opened and switched. To open a subsequent  
session, the current connection has to be suspended by pressing the escape sequence keys  
(Ctrl-shift-6) and x to return to the system command prompt. Then open a new connection  
with the telnet User EXEC mode command.  
Keywords Table  
Options  
Description  
/echo  
/quiet  
Enables local echo.  
Prevents onscreen display of all messages from the software.  
Specifies the source interface.  
/source-interface  
/stream  
Turns on stream processing, which enables a raw TCP stream with no Telnet  
control sequences. A stream connection does not process Telnet options and  
can be appropriate for connections to ports running UNIX-to-UNIX Copy  
Program (UUCP) and other non-Telnet protocols.  
Ctrl-shift-6 x  
Return to System Command Prompt  
326  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Ports Table  
Keyword  
Description  
Border Gateway Protocol  
Port Number  
BGP  
179  
19  
chargen  
cmd  
Character generator  
Remote commands  
Daytime  
514  
13  
daytime  
discard  
domain  
echo  
Discard  
9
Domain Name Service  
Echo  
53  
7
exec  
Exec  
512  
79  
finger  
ftp  
Finger  
File Transfer Protocol  
FTP data connections  
Gopher  
21  
ftp-data  
gopher  
20  
70  
hostname  
ident  
NIC hostname server  
Ident Protocol  
101  
113  
194  
543  
544  
513  
515  
119  
496  
109  
110  
25  
irc  
Internet Relay Chat  
Kerberos login  
Kerberos shell  
Login  
klogin  
kshell  
login  
lpd  
Printer service  
Network News Transport Protocol  
PIM Auto-RP  
nntp  
pim-auto-rp  
pop2  
Post Office Protocol v2  
Post Office Protocol v3  
Simple Mail Transport Protocol  
Sun Remote Procedure Call  
Syslog  
pop3  
smtp  
sunrpc  
syslog  
tacacs  
talk  
111  
514  
49  
TAC Access Control System  
Talk  
517  
23  
telnet  
time  
Telnet  
Time  
37  
uucp  
Unix-to-Unix Copy Program  
Nickname  
540  
43  
whois  
www  
World Wide Web  
80  
This command lists concurrent telnet connections to remote hosts that were opened by the  
current telnet session to the local device. It does not list telnet connections to remote hosts  
that were opened by other telnet sessions.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
327  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Example  
The following example displays connecting to 176.213.10.50 via Telnet.  
Console> telnet 176.213.10.50  
Esc U sends telnet EL  
resume  
The resume User EXEC mode command enables switching to another open Telnet  
session.  
Syntax  
resume [connection]  
Parameters  
connection — The connection number. (Range: 1-4 connections)  
Default Configuration  
The default connection number is that of the most recent connection.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following command switches to open Telnet session number 1.  
Console> resume 1  
reload  
The reload Privileged EXEC mode command reloads the operating system.  
328  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Syntax  
reload  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
Caution should be exercised when resetting the device, to ensure that no other activity is  
being performed. In particular, the user should verify that no configuration files are being  
downloaded at the time of reset.  
Example  
The following example reloads the operating system.  
Console# reload  
This command will reset the whole system and disconnect your current session. Do  
you want to continue (y/n) [n]?  
hostname  
The hostname Global Configuration mode command specifies or modifies the device  
host name. To remove the existing host name, use the no form of the command.  
Syntax  
hostname name  
no hostname  
Parameters  
name — The host name. of the device. (Range: 1-158 characters)  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
329  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example specifies the device host name.  
Console(config)# hostname enterprise  
enterprise(config)#  
show users  
The show users User EXEC mode command displays information about the active users.  
Syntax  
show users  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays information about the active users.  
Console show users  
Username  
Protocol  
-----------  
Location  
----------  
------------  
330  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Bob  
Serial  
SSH  
John  
172.16.0.1  
172.16.0.8  
172.16.1.7  
Robert  
Betty  
HTTP  
Telnet  
show sessions  
The show sessions User EXEC mode command lists open Telnet sessions.  
Syntax  
show sessions  
Default Configuration  
There is no default configuration for this command.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example lists open Telnet sessions.  
Console> show sessions  
Connection  
Host  
Address  
Port  
-----  
23  
Byte  
----  
89  
----------  
-------------  
Remote device  
172.16.1.2  
----------  
172.16.1.1  
172.16.1.2  
1
2
23  
8
The following table describes significant fields shown above.  
Field  
Description  
Connection  
Host  
Connection number.  
Remote host to which the device is connected through a Telnet session.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
331  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Field  
Description  
Address  
Port  
IP address of the remote host.  
Telnet TCP port number  
Number of unread bytes for the user to see on the connection.  
Byte  
show system  
The show system User EXEC mode command displays system information.  
Syntax  
show system  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the system information  
.
Console# show system  
Unit  
----  
1
Type  
-----------------  
enterprise  
Unit  
----  
1
Main Power Supply  
-----------------  
OPERATIONAL  
Redundant Power Supply  
----------------------  
NOT OPERATIONAL  
Unit  
Fan1  
Fan2  
Fan3  
Fan4  
Fan5  
332  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
----  
1
----  
OK  
----  
OK  
----  
OK  
----  
OK  
----  
OK  
show system id  
The show system id Privilaged EXEC mode command displays the system identity  
information.  
Syntax  
show system id [unit unit]  
Parameters  
unit unit — Unit number.  
Default Configuration  
This command has no default configuration.  
Command Modes  
Privilaged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
333  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Example  
Console> show system id  
Service Tag: 89788978  
Serial number: 8936589782  
Asset tag: 7843678957  
The following is relevant for stackable systems only  
Unit  
Service tag  
Serial number  
Asset tag  
-------------------- -------------------- -------------------- --------------------  
1
2
89788978  
34254675  
8936589782  
3216523877  
7843678957  
5621987728  
show system flowcontrol  
The show system flowcontrol Interface Configuration mode command displays the flow  
control state on cascade ports.  
Syntax  
show system flowcontrol  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
334  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Example  
Flow control for internal cascade ports: Enabled  
Flow control for Stack ports: Enabled  
Flow control rx-only: Enabled.  
show system mode  
The show system mode Priviledged EXEC mode command displays information on  
features control.  
Syntax  
show system mode  
Default Configuration  
This command has no default configuration.  
Command Mode  
Priviledged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays information on features control.  
Console> show system mode  
Mode: Router  
QoS: Inactive  
show version  
The show version User EXEC mode command displays system version information.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
335  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Syntax  
show version  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays system version information (only for demonstration  
purposes).  
Console> show version  
SW version 1.0.0.0  
Boot version 1.0.0.0  
HW version 1.0.0  
(date 23-Jul-2004 time 17:34:19)  
(date 11-Jan-2004 time 11:48:21)  
Unit  
----  
1
SW version  
Boot version  
------------  
2.178  
HW version  
----------  
1.0.0  
----------  
1.0.0.0  
service cpu-utilization  
The service cpu-utilization Global Configuration mode command enables measuring  
CPU utilization. To return to the default configuration, use the no form of this command.  
Syntax  
service cpu-utilization  
no service cpu-utilization  
336  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Default Configuration  
Disabled.  
Command Mode  
Global Configuration mode  
User Guidelines  
Use the show cpu utilization Privileged EXEC command to view information on CPU  
utilization.  
Example  
This example enables measuring CPU utilization.  
Console(config)# service cpu-utilization  
show cpu utilization  
The show cpu utilization Privileged EXEC mode command displays information about  
CPU utilization.  
Syntax  
show cpu utilization  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
Use the service cpu-utilization Global Configuration mode command to enable  
measuring CPU utilization.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
337  
Download from Www.Somanuals.com. All Manuals Search And Download.  
System Management Commands  
Example  
The following example configures the CPU utilization information display.  
Console# show cpu utilization  
CPU utilization service is on.  
CPU utilization  
--------------------------------------------------  
five seconds: 5%; one minute: 3%; five minutes: 3%  
338  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
TACACS+ Commands  
26 TACACS+ Commands  
tacacs-server host  
The tacacs-server host Global Configuration mode command specifies a TACACS+  
host. To delete the specified name or address, use the no form of this command.  
Syntax  
tacacs-server host {ip-address | hostname} [single-connection] [port port-number]  
[timeout timeout] [key key-string] [source source] [priority priority]  
no tacacs-server host {ip-address | hostname}  
Parameters  
ip-address — IP address of the TACACS+ server.  
hostname — Host name of the TACACS+ server. (Range: 1-158 characters)  
single-connection — Indicates a single-connection. Rather than have the device open  
and close a TCP connection to the daemon each time it must communicate, the single-  
connection option maintains a single open connection between the device and the  
daemon.  
port-number — Specifies a server port number. (Range: 0-65535)  
timeout — Specifies the timeout value in seconds. (Range: 1-30)  
key-string — Specifies the authentication and encryption key for all TACACS+  
communications between the device and the TACACS+ server. This key must match  
the encryption used on the TACACS+ daemon. To specify an empty string, enter "".  
(Range: 0-128 characters)  
source — Specifies the source IP address to use for the communication. 0.0.0.0  
indicates a request to use the IP address of the outgoing IP interface.  
priority — Determines the order in which the TACACS+ servers are used, where 0 is  
the highest priority. (Range: 0-65535)  
Default Configuration  
No TACACS+ host is specified.  
If no port number is specified, default port number 49 is used.  
If no host-specific timeout, key-string or source value is specified, the global value is  
used.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
339  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
TACACS+ Commands  
If no TACACS+ server priority is specified, default priority 0 is used.  
Command Mode  
Global Configuration mode  
User Guidelines  
Multiple tacacs-server host commands can be used to specify multiple hosts.  
Example  
The following example specifies a TACACS+ host.  
Console(config)# tacacs-server host 172.16.1.1  
tacacs-server key  
The tacacs-server key Global Configuration mode command sets the authentication  
encryption key used for all TACACS+ communications between the device and the  
TACACS+ daemon. To disable the key, use the no form of this command.  
Syntax  
tacacs-server key key-string  
no tacacs-server key  
Parameters  
key-string — Specifies the authentication and encryption key for all TACACS+  
communications between the device and the TACACS+ server. This key must match  
the encryption used on the TACACS+ daemon. (Range: 0-128 characters)  
Default Configuration  
Empty string.  
Command Mode  
Global Configuration mode  
340  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
TACACS+ Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the authentication encryption key.  
Console(config)# tacacs-server key enterprise  
tacacs-server timeout  
The tacacs-server timeout Global Configuration mode command sets the interval during  
which the device waits for a TACACS+ server to reply. To return to the default  
configuration, use the no form of this command.  
Syntax  
tacacs-server timeout timeout  
no tacacs-server timeout  
Parameters  
timeout — Specifies the timeout value in seconds. (Range: 1-30)  
Default Configuration  
5 seconds  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the timeout value to 30.  
Console(config)# tacacs-server timeout 30  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
341  
Download from Www.Somanuals.com. All Manuals Search And Download.  
TACACS+ Commands  
tacacs-server source-ip  
The tacacs-server source-ip Global Configuration mode command configures the source  
IP address to be used for communication with TACACS+ servers. To return to the default  
configuration, use the no form of this command.  
Syntax  
tacacs-server source-ip source  
no tacacs-server source-ip source  
Parameters  
source — Specifies the source IP address.  
Default Configuration  
The source IP address is the address of the outgoing IP interface.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example specifies the source IP address.  
Console(config)# tacacs-server source-ip 172.16.8.1  
show tacacs  
The show tacacs Privileged EXEC mode command displays configuration and statistical  
information about a TACACS+ server.  
Syntax  
show tacacs [ip-address]  
342  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
TACACS+ Commands  
Parameters  
ip-address — Name or IP address of the TACACS+ server.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays configuration and statistical information about a  
TACACS+ server.  
Console# show tacacs  
Device Configuration  
--------------------  
IP address Status  
---------- ------  
Port Single  
Connection  
TimeOut Source IP Priority  
---- ---------------- ------- --------- --------  
-
172.16.1.1 Connected 49  
No  
Global  
Global  
1
Global values  
-------------  
TimeOut: 3  
Device Configuration  
---------------------  
Source IP: 172.16.8.1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
343  
Download from Www.Somanuals.com. All Manuals Search And Download.  
TACACS+ Commands  
344  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
27 User Interface Commands  
enable  
The enable User EXEC mode command enters the Privileged EXEC mode.  
enable [privilege-level]  
Syntax  
Parameters  
privilege-level — Privilege level to enter the system. (Range: 1-15)  
Default Configuration  
The default privilege level is 15.  
Command Mode  
User EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enters Privileged EXEC mode:  
Console> enable  
enter password:  
Console#  
disable  
The disable Privileged EXEC mode command returns to the User EXEC mode.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
345  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
User Interface Commands  
Syntax  
disable [privilege-level]  
Parameters  
privilege-level — Privilege level to enter the system. (Range: 1-15)  
Default Configuration  
The default privilege level is 1.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example return to Users EXEC mode.  
Console# disable  
Console>  
login  
The login User EXEC mode command changes a login username.  
Syntax  
login  
Default Configuration  
This command has no default configuration.  
Command Mode  
User EXEC mode  
346  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enters Privileged EXEC mode and logs in with username admin.  
Console> login  
User Name:admin  
Password:*****  
Console#  
configure  
The configure Privileged EXEC mode command enters the Global Configuration mode.  
Syntax  
configure  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enters Global Configuration mode.  
Console# configure  
Console(config)#  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
347  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
exit (Configuration)  
The exit command exits any configuration mode to the next highest mode in the CLI  
mode hierarchy.  
Syntax  
exit  
Default Configuration  
This command has no default configuration.  
Command Mode  
All configuration modes  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example changes the configuration mode from Interface Configuration  
mode to Privileged EXEC mode.  
Console(config-if)# exit  
Console(config)# exit  
Console#  
exit  
The exit Privileged/User EXEC mode command closes an active terminal session by  
logging off the device.  
Syntax  
exit  
Default Configuration  
This command has no default configuration.  
348  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
Command Mode  
Privileged and User EXEC modes  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example closes an active terminal session.  
Console> exit  
end  
The end command ends the current configuration session and returns to the Privileged  
EXEC mode.  
Syntax  
end  
Default Configuration  
This command has no default configuration.  
Command Mode  
All configuration modes.  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example changes from Global Configuration mode to Privileged EXEC  
mode.  
Console(config)# end  
Console#  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
349  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
help  
The help command displays a brief description of the help system.  
Syntax  
help  
Default Configuration  
This command has no default configuration.  
Command Mode  
All command modes  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example describes the help system.  
Console# help  
Help may be requested at any point in a command by entering a question mark '?'.  
If nothing matches the currently entered incomplete command, the help list is  
empty. This indicates that for a query at this point, there is no command matching  
the current input. If the request is within a command, enter backspace and erase  
the entered characters to a point where the request results in a display.  
Help is provided when:  
1. There is a valid command and a help request is made for entering a parameter or  
argument (e.g. 'show ?'). All possible parameters or arguments for the entered  
command are displayed.  
2. An abbreviated argument is entered and a help request is made for arguments  
matching the input (e.g. 'show pr?').  
terminal datadump  
The terminal datadump User EXEC mode command enables dumping all the output of a  
show command without prompting. To disable dumping, use the no form of this  
command.  
350  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
Syntax  
terminal datadump  
no terminal datadump  
Default Configuration  
Dumping is disabled.  
Command Mode  
User EXEC mode  
User Guidelines  
By default, a More prompt is displayed when the output contains more lines than can be  
displayed on the screen. Pressing the Enter key displays the next line; pressing the  
Spacebar displays the next screen of output. The data-dump command enables dumping  
all output immediately after entering the show command.  
This command is relevant only for the current session.  
Example  
This example dumps all output immediately after entering a show command.  
Console> terminal datadump  
show history  
The show history User EXEC mode command lists the commands entered in the current  
session.  
Syntax  
show history  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
351  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
User Interface Commands  
Command Mode  
User EXEC mode  
User Guidelines  
The buffer includes executed and unexecuted commands.  
Commands are listed from the first to the most recent command.  
The buffer remains unchanged when entering into and returning from configuration  
modes.  
Example  
The following example displays all the commands entered while in the current Privileged  
EXEC mode.  
Console# show version  
SW version 3.131 (date 23-Jul-2005 time 17:34:19)  
HW version 1.0.0  
Console# show clock  
15:29:03 Jun 17 2005  
Console# show history  
show version  
show clock  
show history  
3 commands were logged (buffer size is 10)  
show privilege  
The show privilege Privileged/User EXEC mode command displays the current privilege  
level.  
Syntax  
show privilege  
Default Configuration  
This command has no default configuration.  
352  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
Command Mode  
Privileged and User EXEC modes  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the current privilege level for the Privileged EXEC mode.  
Console# show privilege  
Current privilege level is 15  
do  
The do command executes an EXEC-level command from global configuration mode or  
any configuration submode..  
Syntax  
do command  
Parameters  
command — The command to be executed  
Default Configuration  
This command has no default configuration.  
Command Mode  
All configuration modes  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
353  
Download from Www.Somanuals.com. All Manuals Search And Download.  
User Interface Commands  
Example  
The following example displays the current privilege level for the Privileged EXEC mode.  
Console (Config)# do show vlan  
VLAN  
Name  
Ports  
------  
1/1-2  
2/1-4  
1/3-4  
1/1-2  
1/3-4  
Type  
Authorization  
--------------  
Required  
--------  
1
---------------  
default  
-----  
Other  
10  
VLAN0010  
VLAN0011  
VLAN0020  
VLAN0021  
VLAN0030  
VLAN0031  
VLAN0011  
Guest VLAN  
dynamic  
static  
static  
static  
static  
static  
static  
static  
Required  
Required  
Required  
Required  
Required  
Required  
Not Required  
Guest  
11  
20  
21  
30  
31  
91  
1/1-2  
1/17  
3978  
354  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
28 VLAN Commands  
vlan database  
The vlan database Global Configuration mode command enters the VLAN Configuration  
mode.  
Syntax  
vlan database  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enters the VLAN database mode.  
Console(config)# vlan database  
Console(config-vlan)#  
vlan  
Use the vlan VLAN Configuration mode command to create a VLAN. To delete a VLAN,  
use the no form of this command.  
Syntax  
vlan vlan-range  
no vlan vlan-range  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
355  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
VLAN Commands  
Parameters  
vlan-range — Specifies a list of VLAN IDs to be added. Separate nonconsecutive  
VLAN IDs with a comma and no spaces; a hyphen designates a range of IDs.  
Default Configuration  
This command has no default configuration.  
Command Mode  
VLAN Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example VLAN number 1972 is created.  
Console(config)# vlan database  
Console(config-vlan)# vlan 1972  
interface vlan  
The interface vlan Global Configuration mode command enters the Interface  
Configuration (VLAN) mode.  
Syntax  
interface vlan vlan-id  
Parameters  
vlan-id — Specifies an existing VLAN ID.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
356  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures VLAN 1 with IP address 131.108.1.27 and subnet  
mask 255.255.255.0.  
Console(config)# interface vlan 1  
Console(config-if)# ip address 131.108.1.27 255.255.255.0  
interface range vlan  
The interface range vlan Global Configuration mode command enables simultaneously  
configuring multiple VLANs.  
Syntax  
interface range vlan {vlan-range | all}  
Parameters  
vlan-range — Specifies a list of VLAN IDs to be added. Separate nonconsecutive  
VLAN IDs with a comma and no spaces; a hyphen designates a range of IDs.  
all — All existing static VLANs.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
Commands under the interface range context are executed independently on each  
interface in the range. If the command returns an error on one of the interfaces, an error  
message is displayed and execution of the command continues on the other interfaces.  
Configuring all ports may consume an excessive amount of time. Define only the required  
ports to save time.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
357  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Example  
The following example groups VLANs 221, 228 and 889 to receive the same command.  
Console(config)# interface range vlan 221-228,889  
Console(config-if)#  
name  
The name Interface Configuration mode command adds a name to a VLAN. To remove  
the VLAN name, use the no form of this command.  
Syntax  
name string  
no name  
Parameters  
string — Unique name to be associated with this VLAN. (Range: 1-32 characters)  
Default Configuration  
No name is defined.  
Command Mode  
Interface Configuration (VLAN) mode. Cannot be configured for a range of interfaces  
(range context).  
User Guidelines  
The name string may include numbers and other characters (#,@,% etc.) but no spaces.  
Example  
The following example gives VLAN number 19 the name Marketing.  
Console(config)# interface vlan 19  
Console(config-if)# name Marketing  
358  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
switchport protected  
The switchport protected Interface Configuration mode command overrides the FDB  
decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To  
disable overriding the FDB decision, use the no form of this command..  
Syntax  
switchport protected {ethernet port | port-channel port-channel-number}  
no switchport protected  
Parameters  
port— Specifies the uplink Ethernet port.  
port-channel-number — Specifies the uplink port-channel.  
Default Configuration  
Switchport protected is disabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
Private VLAN Edge (PVE) supports private communication by isolating PVE-defined  
ports and ensuring that all Unicast, Broadcast and Multicast traffic from these ports is only  
forwarded to uplink port(s).  
PVE requires only one VLAN on each device, but not on every port; this reduces the  
number of VLANs required by the device. Private VLANs and the default VLAN function  
simultaneously in the same device.  
Example  
This example configures ethernet port 8 as a protected port, so that all traffic is sent to its  
uplink (ethernet port 1).  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport forbidden vlan add 234-256  
Console(config-if)# exit  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport protected ethernet ext.1  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
359  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
switchport mode  
The switchport mode Interface Configuration mode command configures the VLAN  
membership mode of a port. To return to the default configuration, use the no form of this  
command.  
Syntax  
switchport mode {access | trunk | general}  
no switchport mode  
Parameters  
access — Indicates an untagged layer 2 VLAN port.  
trunk — Indicates a trunking layer 2 VLAN port.  
general — Indicates a full 802-1q supported VLAN port.  
Default Configuration  
All ports are in access mode, and belong to the default VLAN (whose VID=1).  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines.  
Example  
The following example configures Ethernet port 1 as an untagged layer 2 VLAN port.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport mode access  
switchport access vlan  
The switchport access vlan Interface Configuration mode command configures the  
VLAN ID when the interface is in access mode. To return to the default configuration, use  
the no form of this command.  
360  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Syntax  
switchport access vlan {vlan-id | dynamic}  
no switchport access vlan  
Parameters  
vlan-id — Specifies the ID of the VLAN to which the port is configured.  
dynamic—Indicates that the port is assigned to a VLAN based on the source MAC  
address of the host connected to the port.  
Default Configuration  
All ports belong to VLAN 1.  
Command Mode  
Interface configuration (Ethernet, port-channel) mode  
User Guidelines  
The command automatically removes the port from the previous VLAN and adds it to the  
new VLAN.  
Example  
The following example configures a VLAN ID of 23 to the untagged layer 2 VLAN  
Ethernet port 1.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport access vlan 23  
switchport trunk allowed vlan  
The switchport trunk allowed vlan Interface Configuration mode command adds or  
removes VLANs to or from a trunk port.  
Syntax  
switchport trunk allowed vlan {add vlan-list | remove vlan-list}  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
361  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Parameters  
add vlan-list — List of VLAN IDs to be added. Separate nonconsecutive VLAN IDs  
with a comma and no spaces. A hyphen designates a range of IDs.  
remove vlan-list — List of VLAN IDs to be removed. Separate nonconsecutive  
VLAN IDs with a comma and no spaces. A hyphen designates a range of IDs.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example adds VLANs 1, 2, 5 to 6 to the allowed list of te Ethernet port 1  
Console(config)# interface ethernet ext.1  
console(config-if)# switchport trunk allowed vlan add 1-2,5-6  
switchport trunk native vlan  
The switchport trunk native vlan Interface Configuration mode command defines the  
native VLAN when the interface is in trunk mode. To return to the default configuration,  
use the no form of this command.  
Syntax  
switchport trunk native vlan vlan-id  
no switchport trunk native vlan  
Parameters  
vlan-id— Specifies the ID of the native VLAN.  
362  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Default Configuration  
VID=1.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
The command adds the port as a member in the VLAN. If the port is already a member in  
the VLAN (not as a native), it should be first removed from the VLAN.  
Example  
The following example configures VLAN number 123 as the native VLAN when Ethernet  
port 1 is in trunk mode.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport trunk native vlan 123  
switchport general allowed vlan  
The switchport general allowed vlan Interface Configuration mode command adds or  
removes VLANs from a general port.  
Syntax  
switchport general allowed vlan add vlan-list [tagged | untagged]  
switchport general allowed vlan remove vlan-list  
Parameters  
add vlan-list — Specifies the list of VLAN IDs to be added. Separate nonconsecutive  
VLAN IDs with a comma and no spaces. A hyphen designates a range of IDs.  
remove vlan-list — Specifies the list of VLAN IDs to be removed. Separate  
nonconsecutive VLAN IDs with a comma and no spaces. A hyphen designates a  
range of IDs.  
tagged — Indicates that the port transmits tagged packets for the VLANs.  
untagged — Indicates that the port transmits untagged packets for the VLANs.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
363  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Default Configuration  
If the port is added to a VLAN without specifying tagged or untagged, the default setting  
is tagged.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
This command enables changing the egress rule (for example from tagged to untagged)  
without first removing the VLAN from the list.  
Example  
The following example adds VLANs 2, 5, and 6 to the allowed list of Ethernet port 1.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport general allowed vlan add 2,5-6 tagged  
switchport general pvid  
The switchport general pvid Interface Configuration mode command configures the  
PVID when the interface is in general mode. To return to the default configuration, use the  
no form of this command.  
Syntax  
switchport general pvid vlan-id  
no switchport general pvid  
Parameters  
vlan-id — Specifies the PVID (Port VLAN ID).  
Default Configuration  
If the default VLAN is enabled, PVID = 1. Otherwise, PVID=4095.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
364  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the PVID for Ethernet port 1, when the interface is in  
general mode.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport general pvid 234  
switchport general ingress-filtering disable  
The switchport general ingress-filtering disable Interface Configuration mode  
command disables port ingress filtering. To return to the default configuration, use the no  
form of this command.  
Syntax  
switchport general ingress-filtering disable  
no switchport general ingress-filtering disable  
Default Configuration  
Ingress filtering is enabled.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example disables port ingress filtering on Ethernet port 1  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport general ingress-filtering disable  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
365  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
switchport general acceptable-frame-type  
tagged-only  
The switchport general acceptable-frame-type tagged-only Interface Configuration  
mode command discards untagged frames at ingress. To return to the default  
configuration, use the no form of this command.  
Syntax  
switchport general acceptable-frame-type tagged-only  
no switchport general acceptable-frame-type tagged-only  
Default Configuration  
All frame types are accepted at ingress.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures Ethernet port 1 to discard untagged frames at ingress.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport general acceptable-frame-type tagged-only  
switchport forbidden vlan  
The switchport forbidden vlan Interface Configuration mode command forbids adding  
specific VLANs to a port. To return to the default configuration, use the remove  
parameter for this command.  
Syntax  
switchport forbidden vlan {add vlan-list | remove vlan-list}  
366  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Parameters  
add vlan-list — Specifies the list of VLAN IDs to be added. Separate nonconsecutive  
VLAN IDs with a comma and no spaces. A hyphen designates a range of IDs.  
remove vlan-list — Specifies the list of VLAN IDs to be removed. Separate  
nonconsecutive VLAN IDs with a comma and no spaces. A hyphen designates a  
range of IDs.  
Default Configuration  
All VLANs are allowed.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
This command can be used to prevent GVRP from automatically making the specified  
VLANs active on the selected ports.  
Example  
The following example forbids adding VLAN IDs 234 to 256 to Ethernet port 1.  
Console(config)# interface ethernet ext.1  
Console(config-if)# switchport forbidden vlan add 234-256  
ip internal-usage-vlan  
The ip internal-usage-vlan Interface Configuration mode command reserves a VLAN as  
the internal usage VLAN of an interface. To return to the default configuration, use the no  
form of this command.  
Syntax  
ip internal-usage-vlan vlan-id  
no ip internal-usage-vlan  
Parameters  
vlan-id — Specifies the ID of the internal usage VLAN.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
367  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Default Configuration  
The software reserves a VLAN as the internal usage VLAN of an interface.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
User Guidelines  
An internal usage VLAN is required when an IP interface is configured on an Ethernet  
port or port-channel.  
This command enables the user to configure the internal usage VLAN of a port. If an  
internal usage VLAN is not configured and the user wants to configure an IP interface, an  
unused VLAN is selected by the software.  
If the software selected a VLAN for internal use and the user wants to use that VLAN as a  
static or dynamic VLAN, the user should do one of the following:  
Remove the IP interface.  
Create the VLAN and recreate the IP interface.  
Use this command to explicitly configure a different VLAN as the internal usage  
VLAN.  
Example  
The following example reserves an unused VLAN as the internal usage VLAN of ethernet  
port 1.  
Console# config  
Console(config)# interface ethernet ext.1  
Console(config-if)# ip internal-usage-vlan  
show vlan  
The show vlan Privileged EXEC mode command displays VLAN information.  
Syntax  
show vlan [id vlan-id | name vlan-name]  
Parameters  
vlan-id — specifies a VLAN ID  
368  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
vlan-name — Specifies a VLAN name string. (Range: 1-32 characters)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays all VLAN information.  
Console# show vlan  
VLAN  
----  
1
Name  
Ports  
Type  
Authorization  
-------------  
Required  
Required  
Required  
Required  
Required  
Required  
Required  
Not Required  
-
-------  
default  
VLAN0010  
VLAN0011  
VLAN0020  
VLAN0021  
VLAN0030  
VLAN0031  
VLAN0011  
Guest VLAN  
--------  
----  
1,2  
1
other  
10  
dynamic  
static  
static  
static  
static  
static  
static  
guest  
11  
1
20  
1
21  
30  
31  
91  
1
1
3978  
show vlan internal usage  
The show vlan internal usage Privileged EXEC mode command displays a list of  
VLANs used internally by the device.  
Syntax  
show vlan internal usage  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
369  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays VLANs used internally by the device.  
Console# show vlan internal usage  
VLAN  
----  
1007  
1008  
1009  
Usage  
IP address  
----------  
Active  
Reserved  
--------  
No  
---------  
Eth 1  
Eth 1  
Inactive  
Active  
Yes  
Eth 1  
Yes  
show interfaces switchport  
The show interfaces switchport Privileged EXEC mode command displays the  
switchport configuration.  
Syntax  
show interfaces switchport {ethernet interface | port-channel port-channel-number}  
Parameters  
interface — A valid Ethernet port number.  
port-channel-number — A valid port-channel number.  
Default Configuration  
This command has no default configuration.  
370  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the switchport configuration for Ethernet port 1.map  
Console# show interface switchport ethernet ext.1  
Port 1:  
VLAN Membership mode: General  
Operating parameters:  
PVID: 1 (default)  
Ingress Filtering: Enabled  
Acceptable Frame Type: All  
GVRP status: Enabled  
Protected: Enabled, Uplink is 1.  
Port 1 is member in:  
Vlan  
----  
1
Name  
Egress rule  
-----------  
untagged  
tagged  
Type  
-------  
default  
VLAN008  
VLAN011  
IPv6 VLAN  
VLAN0072  
-------  
System  
Dynamic  
Static  
Static  
Static  
8
11  
tagged  
19  
untagged  
untagged  
72  
Static configuration:  
PVID: 1 (default)  
Ingress Filtering: Enabled  
Acceptable Frame Type: All  
Port 1 is statically configured to:  
Vlan  
Name  
Egress rule  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
371  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
----  
1
-------  
-----------  
untagged  
tagged  
default  
11  
19  
72  
VLAN011  
IPv6 VLAN  
VLAN0072  
untagged  
untagged  
Forbidden VLANS:  
VLAN  
----  
73  
Name  
----  
out  
Console# show interface switchport ethernet ext.1  
Port 1:  
VLAN Membership mode: General  
Operating parameters:  
PVID: 4095 (discard vlan)  
Ingress Filtering: Enabled  
Acceptable Frame Type: All  
Port 1 is member in:  
Vlan  
----  
91  
Name  
Egress rule  
-----------  
tagged  
Type  
------------  
IP Telephony  
------  
Static  
Static configuration:  
PVID: 8  
Ingress Filtering: Disabled  
Acceptable Frame Type: All  
Port 1 is statically confgiured to:  
Vlan  
----  
8
Name  
Egress rule  
-----------  
untagged  
------------  
VLAN0072  
91  
IP Telephony  
tagged  
372  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Forbidden VLANS:  
VLAN  
----  
73  
Name  
----  
out  
Port 29  
Static configuration:  
PVID: 2922  
Ingress Filtering: Enabled  
Acceptable Frame Type: Untagged  
GVRP status: Disabled  
map protocol protocols-group  
The map protocol protocols-group VLAN database command adds a special protocol to  
a named group of protocols, which may be used for protocol-based VLAN assignment. To  
delete a protocol from a group, use the no form of this command.  
Syntax  
map protocol protocol [encapsulation] protocols-group group  
no map protocol protocol encapsulation  
Parameters  
protocol — The protocol is a protocol number or one of the reserved names. The  
format is Hex format.  
encapsulation — One of the following values: ethernet, rfc1042, llcOther. If no  
option is indicated the default is ethernet.  
group — Group number of group of protocols associated together. (Range: 1-  
2147483647)  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
373  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Command Mode  
VLAN Database mode  
User Guidelines  
The following protocol names are reserved:  
ip-arp  
ipx  
Example  
The following example maps protocol ip-arp to the group named "213".  
Console (config)# vlan database  
Console (config-vlan)# map protocol ip-arp protocols-group 213  
switchport general map protocols-group vlan  
The switchport general map protocols-group vlan interface configuration command  
sets a protocol-based classification rule. To delete a classification, use the no form of this  
command.  
Syntax  
switchport general map protocols-group group vlan vlan-id  
no switchport general map protocols-group group  
Parameters  
group — Group number as defined in the map protocol protocols-group command.  
(Range: 1-2147483647)  
vlan-id — Define the VLAN ID in the classifying rule.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface Configuration (Ethernet, port-channel) mode  
374  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets a protocol-based classification rule of protocol group 1 to  
VLAN 8.  
Console (config)# interface ethernet ext.8  
Console (config-if)# switchport general map protocols-group 1 vlan 8  
map mac macs-group  
Use the map mac macs-group VLAN configuration command to map a MAC address or  
range of MAC addresses to a group of MAC addresses. Use the no form of this command  
to delete the map.  
Syntax  
map mac mac-address {prefix-mask | host} macs-group group  
no map mac mac-address {prefix-mask | host}  
Parameters  
mac-address - Specify MAC address to be entered to the group.  
prefix-mask - Mask bits. The format is “/n”, where n is an integer number that specifies the  
number of 1’s in the mask.  
host - All 1’s mask.  
group - Group number  
Default Configuration  
This command has no default configuration.  
Command Mode  
VLAN Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
375  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Example  
The following example maps the MAC address 00:13:20:95:21:AA to macs group 4.  
Console(config-vlan)# map mac 00:13:20:95:21:AA host macs-group 4  
switchport general map macs-group vlan  
Use the switchport general map macs-group vlan interface configuration command to set a mac-  
based classification rule. Use the no form of this command to delete a classification.  
Syntax  
switchport general map macs-group group vlan vlan-id  
no switchport general map macs-group group  
Parameters  
group - Group numbe. Range:1 - 2147483647  
vlan-id - Define the VLAN ID that is associated with the rule.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface configuration (Ethernet, port-channel)  
User Guidelines  
MAC based VLAN rules can't contain overlapping ranges on the same interface.  
The priority between VLAN classification rules is:  
1. MAC based VLAN (Best match between the rules)  
2. Subnet based VLAN (Best match between the rules)  
3. Protocol based VLAN  
4. PVID  
.
Example  
The following example sets a mac-based classification rule.  
Console (config-if)# switchport general map macs-group 1 vlan 8  
376  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
map subnet subnets-group  
Use the map subnet subnets-group VLAN configuration command to map IP subnet to a group of  
IP subnets. Use the no form of this command to delete the map.  
Syntax  
map subnet ip-address prefix-mask subnets-group group  
no map subnet ip-address prefix-mask  
Parameters  
ip-addressSpecify the IP address prefix of the subnet to be entered to the group.  
prefix-maskMask bits. The format is IP address format.  
group Group number  
Default Configuration  
This command has no default configuration.  
Command Mode  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example configures the device as a virtual terminal for remote console access.  
Console(config)# line telnet  
Console(config-line)#  
switchport general map subnets-group vlan  
Use the switchport general map subnets-group vlan interface configuration command to set a  
subnet-based classification rule. Use the no form of this command to delete a classification.  
Syntax  
switchport general map subnets-group group vlan vlan-id  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
377  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
no switchport general map subnets-group group  
Parameters  
group - Group number. Range: 1 - 2147483647  
vlan-id - Define the VLAN ID that is associated with the rule.  
Default Configuration  
This command has no default configuration.  
Command Mode  
Interface configuration (Ethernet, port-channel)  
User Guidelines  
The priority between VLAN classification rules is:  
1. MAC based VLAN (Best match between the rules)  
2. Subnet based VLAN (Best match between the rules)  
3. Protocol based VLAN  
4. PVID  
Example  
The following example sets the subnets-based classification rule.  
Console (config-if)# switchport general map subnets-group 1 vlan 8  
show vlan protocols-groups  
The show vlan protocols-groups Privileged EXEC command displays protocols-groups informa-  
tion.  
Syntax  
show vlan protocols-groups  
Default Configuration  
This command has no default configuration.  
378  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays protocols-groups information.  
Console# show vlan protocols-groups  
Encapsulation  
-------------  
ethernet  
Protocol  
--------  
08 00  
Group Id  
--------  
213  
ethernet  
08 06  
213  
ethernet  
81 37  
312  
ethernet  
81 38  
312  
rfc1042  
08 00  
213  
rfc1042  
08 06  
213  
show vlan macs-groups  
Use the show vlan protocols-groups EXEC command to show protocols-groups information.  
Syntax  
show vlan protocols-groups  
Default Configuration  
This command has no default configuration.  
Command Mode  
EXEC  
User Guidelines  
There are no user guidelines for this command.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
379  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Example  
The following example displays protocols-groups information.  
Console> show vlan protocols-groups  
Protocol EncapsulationGroup  
-------------------------------------  
0x800 (IP)Ethernet  
0x806 (ARP)Ethernet  
1
1
0x86dd (IPv6)Ethernet 2  
0x8898 Ethernet  
3#  
show vlan subnets-groups  
Use the show vlan subnets-groups EXEC command to show subnets-groups  
information.  
Syntax  
show vlan subnets-groups  
Parameters  
console — Console terminal line.  
telnet — Virtual terminal for remote console access (Telnet).  
ssh — Virtual terminal for secured remote console access (SSH).  
Default Configuration  
This command has no default configuration.  
Command Mode  
EXEC  
User Guidelines  
There are no user guidelines for this command.  
380  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
Example  
The following example shows subnets-groups information.  
onsole> show vlan subnets-groups  
MAC Prefix Group  
-------------------------------------  
172.16.1.0 255.255.255.01  
172.16.2.0 255.255.255.02#  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
381  
Download from Www.Somanuals.com. All Manuals Search And Download.  
VLAN Commands  
382  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
29 802.1x Commands  
aaa authentication dot1x  
The aaa authentication dot1x Global Configuration mode command specifies one or  
more authentication, authorization, and accounting (AAA) methods for use on interfaces  
running IEEE 802.1x. To return to the default configuration, use the no form of this  
command.  
Syntax  
aaa authentication dot1x default method1 [method2...]  
no aaa authentication dot1x default  
Parameters  
method1 [method2...] — At least one from the following table:  
Keyword  
Description  
RADIUS  
None  
Uses the list of all RADIUS servers for authentication  
Uses no authentication  
Default Configuration  
No authentication method is defined.  
Command Mode  
Global Configuration mode  
User Guidelines  
Additional methods of authentication are used only if the previous method returns an error  
and not if the request for authentication is denied. To ensure that authentication succeeds  
even if all methods return an error, specify none as the final method in the command line.  
The RADIUS server must support MD-5 challenge and EAP type frames.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
383  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
802.1x Commands  
Example  
The following example uses the aaa authentication dot1x default command with no  
authentication.  
Console# configure  
Console(config)# aaa authentication dot1x default none  
dot1x system-auth-control  
The dot1x system-auth-control Global Configuration mode command enables 802.1x  
globally. To return to the default configuration, use the no form of this command.  
Syntax  
dot1x system-auth-control  
no dot1x system-auth-control  
Default Configuration  
802.1x is disabled globally.  
Command Modes  
Global Configuration mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables 802.1x globally.  
Console(config)# dot1x system-auth-control  
dot1x port-control  
The dot1x port-control Interface Configuration mode command enables manually  
controlling the authorization state of the port. To return to the default configuration, use  
the no form of this command.  
384  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Syntax  
dot1x port-control {auto | force-authorized | force-unauthorized}  
no dot1x port-control  
Parameters  
auto — Enables 802.1x authentication on the interface and causes the port to  
transition to the authorized or unauthorized state based on the 802.1x  
authentication exchange between the port and the client.  
force-authorized — Disables 802.1x authentication on the interface and  
causes the port to transition to the authorized state without any authentication  
exchange required. The port resends and receives normal traffic without  
802.1x-based authentication of the client.  
force-unauthorized — Denies all access through this interface by forcing the  
port to transition to the unauthorized state and ignoring all attempts by the  
client to authenticate. The device cannot provide authentication services to the  
client through the interface.  
Default Configuration  
Port is in the force-authorized state  
Command Mode  
Interface Configuration (Ethernet)  
User Guidelines  
It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on  
802.1x edge ports (ports in auto state that are connected to end stations), in order to get  
immediately to the forwarding state after successful authentication.  
Example  
The following example enables 802.1x authentication on Ethernet port 16.  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x port-control auto  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
385  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
dot1x re-authentication  
The dot1x re-authentication Interface Configuration mode command enables periodic  
re-authentication of the client. To return to the default configuration, use the no form of  
this command.  
Syntax  
dot1x re-authentication  
no dot1x re-authentication  
Default Configuration  
Periodic re-authentication is disabled.  
Command Mode  
Interface Configuration (Ethernet)  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example enables periodic re-authentication of the client.  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x re-authentication  
dot1x timeout re-authperiod  
The dot1x timeout re-authperiod Interface Configuration mode command sets the  
number of seconds between re-authentication attempts. To return to the default  
configuration, use the no form of this command.  
Syntax  
dot1x timeout re-authperiod seconds  
no dot1x timeout re-authperiod  
386  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Parameters  
• seconds — Number of seconds between re-authentication attempts. (Range:  
300-4294967295)  
Default Configuration  
Re-authentication period is 3600 seconds.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example sets the number of seconds between re-authentication attempts, to  
300.  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x timeout re-authperiod 300  
dot1x re-authenticate  
The dot1x re-authenticate Privileged EXEC mode command manually initiates a re-  
authentication of all 802.1x-enabled ports or the specified 802.1x-enabled port.  
Syntax  
dot1x re-authenticate [ethernet interface]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
387  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following command manually initiates a re-authentication of 802.1x-enabled Ethernet  
port 16.  
Console# dot1x re-authenticate ethernet ext.16  
dot1x timeout quiet-period  
The dot1x timeout quiet-period Interface Configuration mode command sets the number  
of seconds that the device remains in the quiet state following a failed authentication  
exchange (for example, the client provided an invalid password). To return to the default  
configuration, use the no form of this command.  
Syntax  
dot1x timeout quiet-period seconds  
no dot1x timeout quiet-period  
Parameters  
seconds — Specifies the time in seconds that the device remains in the quiet state  
following a failed authentication exchange with the client. (Range: 0-65535 seconds)  
Default Configuration  
Quiet period is 60 seconds.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
During the quiet period, the device does not accept or initiate authentication requests.  
388  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
The default value of this command should only be changed to adjust for unusual  
circumstances, such as unreliable links or specific behavioral problems with certain  
clients and authentication servers.  
To provide a faster response time to the user, a smaller number than the default value  
should be entered.  
Example  
The following example sets the number of seconds that the device remains in the quiet  
state following a failed authentication exchange to 3600.  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x timeout quiet-period 3600  
dot1x timeout tx-period  
The dot1x timeout tx-period Interface Configuration mode command sets the number of  
seconds that the device waits for a response to an Extensible Authentication Protocol  
(EAP)-request/identity frame from the client before resending the request. To return to the  
default configuration, use the no form of this command.  
Syntax  
dot1x timeout tx-period seconds  
no dot1x timeout tx-period  
Parameters  
seconds — Specifies the time in seconds that the device waits for a response to an  
EAP-request/identity frame from the client before resending the request. (Range: 1-  
65535 seconds)  
Default Configuration  
Timeout period is 30 seconds.  
Command Mode  
Interface Configuration (Ethernet) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
389  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
User Guidelines  
The default value of this command should be changed only to adjust for unusual  
circumstances, such as unreliable links or specific behavioral problems with certain  
clients. and authentication servers  
Example  
The following command sets the number of seconds that the device waits for a response to  
an EAP-request/identity frame, to 3600 seconds.  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x timeout tx-period 3600  
dot1x max-req  
The dot1x max-req Interface Configuration mode command sets the maximum number  
of times that the device sends an Extensible Authentication Protocol (EAP)-request/  
identity frame (assuming that no response is received) to the client, before restarting the  
authentication process. To return to the default configuration, use the no form of this  
command.  
Syntax  
dot1x max-req count  
no dot1x max-req  
Parameters  
count — Number of times that the device sends an EAP-request/identity frame before  
restarting the authentication process. (Range: 1-10)  
Default Configuration  
The default number of times is 2.  
Command Mode  
Interface Configuration (Ethernet) mode  
390  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
User Guidelines  
The default value of this command should be changed only to adjust for unusual  
circumstances, such as unreliable links or specific behavioral problems with certain  
clients. and authentication servers  
Example  
The following example sets the number of times that the device sends an EAP-request/  
identity frame to 6 .  
Console(config)# interface ethernet ext.16  
Console(config-if)# dot1x max-req 6  
dot1x timeout supp-timeout  
The dot1x timeout supp-timeout Interface Configuration mode command sets the time  
for the retransmission of an Extensible Authentication Protocol (EAP)-request frame to  
the client. To return to the default configuration, use the no form of this command.  
Syntax  
dot1x timeout supp-timeout seconds  
no dot1x timeout supp-timeout  
Parameters  
seconds — Time in seconds that the device waits for a response to an EAP-request  
frame from the client before resending the request. (Range: 1- 65535 seconds)  
Default Configuration  
Default timeout period is 30 seconds.  
Command Mode  
Interface configuration (Ethernet) mode  
User Guidelines  
The default value of this command should be changed only to adjust for unusual  
circumstances, such as unreliable links or specific behavioral problems with certain  
clients. and authentication servers  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
391  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Example  
The following example sets the timeout period before retransmitting an EAP-request  
frame to the client to 3600 seconds.  
Console(config-if)# dot1x timeout supp-timeout 3600  
dot1x timeout server-timeout  
The dot1x timeout server-timeout Interface Configuration mode command sets the time  
that the device waits for a response from the authentication server. To return to the default  
configuration, use the no form of this command.  
Syntax  
dot1x timeout server-timeout seconds  
no dot1x timeout server-timeout  
Parameters  
seconds — Time in seconds that the device waits for a response from the  
authentication server. (Range: 1-65535 seconds)  
Default Configuration  
The timeout period is 30 seconds.  
Command Mode  
Interface configuration (Ethernet) mode  
User Guidelines  
The actual timeout can be determined by comparing the dot1x timeout server-timeout  
value and the result of multiplying the radius-server retransmit value with the radius-  
server timeout value and selecting the lower of the two values.  
Example  
The following example sets the time for the retransmission of packets to the  
authentication server to 3600 seconds.  
Console(config-if)# dot1x timeout server-timeout 3600  
392  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
show dot1x  
The show dot1x Privileged EXEC mode command displays the 802.1x status of the  
device or specified interface.  
Syntax  
show dot1x [ethernet interface]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays the status of 802.1x-enabled Ethernet ports.  
Console# show dot1x  
802.1x is enabled  
Port  
Admin Mode  
Oper Mode  
Reauth  
Control  
Reauth  
Period  
Username  
----  
----------  
Auto  
---------  
-------  
Ena  
------  
3600  
3600  
3600  
3600  
3600  
--------  
Bob  
1
2
3
4
5
Authorized  
Authorized  
Unauthorized  
Authorized  
Unauthorized*  
Auto  
Ena  
John  
Clark  
n/a  
Auto  
Ena  
Force-auth  
Force-auth  
Dis  
Dis  
n/a  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
393  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
* Port is down or not present.  
Console# show dot1x ethernet ext.3  
802.1x is enabled.  
Port  
Admin Mode  
Oper Mode  
Reauth  
Control  
Reauth  
Period  
Username  
----  
3
----------  
Auto  
---------  
-------  
Ena  
------  
3600  
--------  
Clark  
Unauthorized  
Quiet period: 60 Seconds  
Tx period:30 Seconds  
Max req: 2  
Supplicant timeout: 30 Seconds  
Server timeout: 30 Seconds  
Session Time (HH:MM:SS): 08:19:17  
MAC Address: 00:08:78:32:98:78  
Authentication Method: Remote  
Termination Cause: Supplicant logoff  
Authenticator State Machine  
State: HELD  
Backend State Machine  
State: IDLE  
Authentication success: 9  
Authentication fails: 1  
The following table describes significant fields shown above:  
Field  
Description  
Port  
The port number.  
Admin mode  
Oper mode  
Reauth Control  
Reauth Period  
The port admin mode. Possible values: Force-auth, Force-unauth, Auto.  
The port oper mode. Possible values: Authorized, Unauthorized or Down.  
Reauthentication control.  
Reauthentication period.  
394  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Field  
Description  
Username  
The username representing the identity of the Supplicant. This field shows the  
username in case the port control is auto. If the port is Authorized, it shows the  
username of the current user. If the port is unauthorized it shows the last user  
that was authenticated successfully.  
Quiet period  
Tx period  
Max req  
The number of seconds that the device remains in the quiet state following a  
failed authentication exchange (for example, the client provided an invalid  
password).  
The number of seconds that the device waits for a response to an Extensible  
Authentication Protocol (EAP)-request/identity frame from the client before  
resending the request.  
The maximum number of times that the device sends an Extensible  
Authentication Protocol (EAP)-request frame (assuming that no response is  
received) to the client before restarting the authentication process.  
Supplicant timeout  
Server timeout  
Time in seconds the switch waits for a response to an EAP-request frame from  
the client before resending the request.  
Time in seconds the switch waits for a response from the authentication server  
before resending the request.  
Session Time  
MAC address  
Authentication Method  
Termination Cause  
State  
The amount of time the user is logged in.  
The supplicant MAC address.  
The authentication method used to establish the session.  
The reason for the session termination.  
The current value of the Authenticator PAE state machine and of the Backend  
state machine.  
Authentication success  
Authentication fails  
The number of times the state machine received a Success message from the  
Authentication Server.  
The number of times the state machine received a Failure message from the  
Authentication Server.  
show dot1x users  
The show dot1x users Privileged EXEC mode command displays active 802.1x  
authenticated users for the device.  
Syntax  
show dot1x users [username username]  
Parameters  
username — Supplicant username (Range: 1-160 characters)  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
395  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays 802.1x users.  
Console# show dot1x users  
Port  
Username  
Session Time  
------------  
1d:03:08.58  
08:19:17  
Auth Method  
-----------  
Remote  
MAC Address  
----- --------  
--------------  
0008:3b79:8787  
0008:3b89:3127  
1
2
Bob  
John  
None  
Console# show dot1x users username Bob  
Username: Bob  
Port  
Username  
Session Time  
------------  
1d:03:08.58  
Auth Method  
-----------  
Remote  
MAC Address  
----- --------  
--------------  
0008:3b79:8787  
1
Bob  
The following table describes significant fields shown above:  
Field  
Description  
Port  
The port number.  
Username  
The username representing the identity of the Supplicant.  
The period of time the Supplicant is connected to the system.  
Session Time  
Authentication Method  
MAC Address  
Authentication method used by the Supplicant to open the session.  
MAC address of the Supplicant.  
396  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
show dot1x statistics  
The show dot1x statistics Privileged EXEC mode command displays 802.1x statistics for  
the specified interface.  
Syntax  
show dot1x statistics ethernet interface  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays 802.1x statistics for the specified interface.  
Console# show dot1x statistics ethernet ext.1  
EapolFramesRx: 11  
EapolFramesTx: 12  
EapolStartFramesRx: 12  
EapolLogoffFramesRx: 1  
EapolRespIdFramesRx: 3  
EapolRespFramesRx: 6  
EapolReqIdFramesTx: 3  
EapolReqFramesTx: 6  
InvalidEapolFramesRx: 0  
EapLengthErrorFramesRx: 0  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
397  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
LastEapolFrameVersion: 1  
LastEapolFrameSource: 00:08:78:32:98:78  
The following table describes the significant fields shown in the display:  
Field  
Description  
EapolFramesRx  
The number of valid EAPOL frames of any type that have been received by  
this Authenticator.  
EapolFramesTx  
The number of EAPOL frames of any type that have been transmitted by this  
Authenticator.  
EapolStartFramesRx  
EapolLogoffFramesRx  
EapolRespIdFramesRx  
EapolRespFramesRx  
EapolReqIdFramesTx  
EapolReqFramesTx  
The number of EAPOL Start frames that have been received by this  
Authenticator.  
The number of EAPOL Logoff frames that have been received by this  
Authenticator.  
The number of EAP Resp/Id frames that have been received by this  
Authenticator.  
The number of valid EAP Response frames (other than Resp/Id frames) that  
have been received by this Authenticator.  
The number of EAP Req/Id frames that have been transmitted by this  
Authenticator.  
The number of EAP Request frames (other than Rq/Id frames) that have been  
transmitted by this Authenticator.  
InvalidEapolFramesRx  
EapLengthErrorFramesRx  
LastEapolFrameVersion  
LastEapolFrameSource  
The number of EAPOL frames that have been received by this Authenticator in  
which the frame type is not recognized.  
The number of EAPOL frames that have been received by this Authenticator in  
which the Packet Body Length field is invalid.  
The protocol version number carried in the most recently received EAPOL  
frame.  
The source MAC address carried in the most recently received EAPOL frame.  
ADVANCED FEATURES  
dot1x auth-not-req  
The dot1x auth-not-req Interface Configuration mode command enables unauthorized  
devices access to the VLAN. To disable access to the VLAN, use the no form of this  
command.  
Syntax  
dot1x auth-not-req  
no dot1x auth-not-req  
398  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Default Configuration  
Access is enabled.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
An access port cannot be a member in an unauthenticated VLAN.  
The native VLAN of a trunk port cannot be an unauthenticated VLAN.  
For a general port, the PVID can be an unauthenticated VLAN (although only tagged  
packets would be accepted in the unauthorized state.)  
Example  
The following example enables access to the VLAN to unauthorized devices.  
Console(config-if)# dot1x auth-not-req  
dot1x multiple-hosts  
The dot1x multiple-hosts Interface Configuration mode command enables multiple hosts  
(clients) on an 802.1x-authorized port, where the authorization state of the port is set to  
auto. To return to the default configuration, use the no form of this command.  
Syntax  
dot1x multiple-hosts  
no dot1x multiple-hosts  
Default Configuration  
Multiple hosts are disabled.  
Command Mode  
Interface Configuration (Ethernet) mode  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
399  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
User Guidelines  
This command enables the attachment of multiple clients to a single 802.1x-enabled port.  
In this mode, only one of the attached hosts must be successfully authorized for all hosts  
to be granted network access. If the port becomes unauthorized, all attached clients are  
denied access to the network.  
For unauthenticated VLANs, multiple hosts are always enabled.  
Multiple-hosts must be enabled to enable port security on the port.  
Example  
The following command enables multiple hosts (clients) on an 802.1x-authorized port.  
Console(config-if)# dot1x multiple-hosts  
dot1x single-host-violation  
The dot1x single-host-violation Interface Configuration mode command configures the  
action to be taken, when a station whose MAC address is not the supplicant MAC address,  
attempts to access the interface. Use the no form of this command to return to default.  
Syntax  
dot1x single-host-violation {forward | discard | discard-shutdown} [trap seconds]  
no port dot1x single-host-violation  
Parameters  
forward — Forwards frames with source addresses that are not the supplicant  
address, but does not learn the source addresses.  
discard — Discards frames with source addresses that are not the supplicant address.  
discard-shutdown — Discards frames with source addresses that are not the  
supplicant address. The port is also shut down.  
trap — Indicates that SNMP traps are sent.  
seconds — Specifies the minimum amount of time in seconds between consecutive  
traps. (Range: 1- 1000000)  
Default Configuration  
Frames with source addresses that are not the supplicant address are discarded.  
400  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
No traps are sent.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
The command is relevant when multiple hosts is disabled and the user has been  
successfully authenticated.  
Example  
The following example forwards frames with source addresses that are not the supplicant  
address and sends consecutive traps at intervals of 100 seconds.  
Console(config-if)# dot1x single-host-violation forward trap 100  
dot1x guest-vlan  
The dot1x guest-vlan Interface Configuration mode command defines a guest VLAN. To  
return to the default configuration, use the no form of this command.  
Syntax  
dot1x guest-vlan  
no dot1x guest-vlan  
Default Configuration  
No VLAN is defined as a guest VLAN.  
Command Mode  
Interface Configuration (VLAN) mode  
User Guidelines  
Use the dot1x guest-vlan enable Interface Configuration mode command to enable  
unauthorized users on an interface to access the guest VLAN.  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
401  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
If the guest VLAN is defined and enabled, the port automatically joins the guest VLAN  
when the port is unauthorized and leaves it when the port becomes authorized. To be able  
to join or leave the guest VLAN, the port should not be a static member of the guest  
VLAN.  
Example  
The following example defines VLAN 2 as a guest VLAN.  
Console#  
Console# configure  
Console(config)# vlan database  
Console(config-vlan)# vlan 2  
Console(config-vlan)# exit  
Console(config)# interface vlan 2  
Console(config-if)# dot1x guest-vlan  
dot1x guest-vlan enable  
The dot1x vlans guest-vlan enable Interface Configuration mode command enables  
unauthorized users on the interface access to the Guest VLAN. To disable access, use the  
no form of this command  
Syntax  
dot1x guest-vlan enable  
no dot1x guest-vlan enable  
Default Configuration  
Disabled.  
Command Mode  
Interface Configuration (Ethernet) mode  
User Guidelines  
A device can have only one global guest VLAN. The guest VLAN is defined using the  
dot1x guest-vlan Interface Configuration mode command.  
402  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Example  
The following example enables unauthorized users on Ethernet port 1 to access the guest  
VLAN.  
Console# configure  
Console(config)# interface ethernet ext.1  
Console(config-if)# dot1x guest-vlan enable  
show dot1x advanced  
The show dot1x advanced Privileged EXEC mode command displays 802.1x advanced  
features for the device or specified interface.  
Syntax  
show dot1x advanced [ethernet interface]  
Parameters  
interface Valid Ethernet port. (Full syntax: unit/port)  
Default Configuration  
This command has no default configuration.  
Command Mode  
Privileged EXEC mode  
User Guidelines  
There are no user guidelines for this command.  
Example  
The following example displays 802.1x advanced features for the device.  
Console# show dot1x advanced  
Guest VLAN: 2  
Unauthenticated VLANs: 91,92  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
403  
Download from Www.Somanuals.com. All Manuals Search And Download.  
802.1x Commands  
Interface  
Multiple Hosts  
--------------  
Disabled  
Guest VLAN  
----------  
Enabled  
---------  
1
2
Enabled  
Disabled  
Console# show dot1x advanced ethernet ext.1  
Interface  
---------  
1
Multiple Hosts  
--------------  
Disabled  
Guest VLAN  
----------  
Enabled  
Single host parameters  
Violation action: Discard  
Trap: Enabled  
Trap frequency: 100  
Status: Single-host locked  
Violations since last trap: 9  
404  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Appendix A: Getting Help  
World Wide Web  
http://support.intel.com/support/motherboards/server/blade.htm.  
Telephone  
All calls are billed US $25.00 per incident, levied in local currency at the applicable credit  
card exchange rate plus applicable taxes. (Intel reserves the right to change the pricing for  
telephone support at any time without notice).  
Before calling, fill out an Intel Server Issue Report Form available from http://  
support.intel.com/support. For the fastest service, please submit your form via the  
Internet.  
For an updated support contact list, see http://www.intel.com/support/9089.htm/  
U.S. and Canada  
1-800-404-2284  
Europe  
Belgium ..... 02 714 3182  
Denmark ... 38 487077  
Finland ...... 9 693 79297  
France........ 01 41 918529  
Germany ... 069 9509 6099  
Holland...... 020 487 4562  
Italy............ 02 696 33276  
Norway ...... 23 1620 50  
Spain.......... 91 377 8166  
Sweden....... 08 445 1251  
UK.............. 870 6072439  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
405  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
In Asia-Pacific Region  
Australia.... 1800 649931  
Cambodia.. 63 2 636 9797 (via Philippines)  
China ......... 800 820 1100 (toll-free)  
.................... 8 621 33104691 (not toll-free)  
Hong Kong 852 2 844 4456  
India........... 0006517 2 68303634 (manual toll-free. You need an IDD-equipped  
telephone)  
Indonesia... 803 65 7249  
Korea......... 822 767 2595  
Malaysia.... 1 800 80 1390  
Myanmar... 63 2 636 9796 (via Philippines)  
New Zealand 0800 444 365  
Pakistan..... 632 63684 15 (IDD via Philippines)  
Philippines 1 800 1 651 0117  
Singapore .. 65 6213-1311  
Taiwan ....... 2 2545-1640  
Thailand.... 1 800 631 0003  
Vietnam ..... 632 6368416 (IDD via Philippines)  
Japan  
Domestic.... 0120 868686  
Outside country 81 298 47 0800  
Latin America  
Argentina .. Contact AT&T USA at 0-800 222 1288. Once connected, dial 800 843 4481  
Brazil ......... 001-916 377 0180  
Chile  
Easter Island.. ............ Contact AT&T USA at 800 800 311. Once  
connected, dial 800 843 4481  
Mainland and Juan .. Contact AT&T USA at 800 225 288. Once  
connected, dial 800 843 4481  
406  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Colombia... Contact AT&T USA at 01 800 911 0010. Once connected, dial 800 843 4481  
Costa Rica . Contact AT&T USA at 0 800 0 114 114. Once connected, dial 800 843 4481  
Ecuador  
(Andimate) .... Contact AT&T USA at 1 999 119. Once connected,  
dial 800 843 4481  
(Pacifictel) ..... Contact AT&T USA at 1 800 225 528. Once connected, dial  
800 843 4481  
Guatemala. Contact AT&T USA at 99 99 190. Once connected, dial 800 843 4481  
Mexico ....... Contact AT&T USA at 001 800 462 628 4240. Once connected, dial 800 843  
4481  
Miami ........ 1 800 621 8423  
Panama...... Contact AT&T USA at 00 800 001 0109. Once connected, dial 800 843 4481  
Paraguay ... 001 916 377 0114  
Peru ........... 001 916 377 0114  
Uruguay..... 001 916 377 0114  
Venezuela... Contact AT&T USA at 0 800 2255 288. Once connected, dial 800 843 4481  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
407  
Download from Www.Somanuals.com. All Manuals Search And Download.  
408  
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide  
Download from Www.Somanuals.com. All Manuals Search And Download.  

Infinity Home Theater System HTS 20 User Manual
IOGear Switch 8 port dvi kvmp switch User Manual
John Deere Lawn Mower GM2109 User Manual
JVC Car Video System KV MR900 User Manual
JVC Digital Camera GC A33 User Manual
JVC Headphones HA EB75 User Manual
JVC Projector 330 User Manual
Kenwood Marine Radio TK 2300 User Manual
Kenwood Washer KVWA146SL User Manual
KitchenAid Power Hammer CMO 2743 User Manual