Avaya BSG8/12 1.0 User Manual

BSG8ew 1.0 and BSG12ew/aw/tw 1.0Business Services GatewayDocument Status: StandardDocument Number: NN47928-100Document Version: 02.02Date: September 2

10 ContentsNN47928-100renew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314sho

100 Layer 2 commandsNN47928-100radius-server hostUse this command to configure the RADIUS client with the parameters which include host, timeout, key,

Layer 2 commands 101Commands Referenceshow radius serverUse this command to display RADIUS server configuration. Command modePrivileged EXEC or User E

102 Layer 2 commandsNN47928-100show radius statisticsUse this command to display RADIUS server statistics.Command modePrivileged EXEC or User EXECSynt

Layer 2 commands 103Commands ReferenceTACACS commandsTerminal Access Controller Access Control System (TACACS) is a client and server protocol that en

104 Layer 2 commandsNN47928-100debug tacacsUse this command to set the debug trace level for TACACS client module. Precede the command with no to disa

Layer 2 commands 105Commands Referenceshow tacacsUse this command to view the statistical log information and server for TACACS+ client.Command modePr

106 Layer 2 commandsNN47928-100tacacs-server hostUse this command to configure host, timeout, and key in the TACACS server. Precede this command with

Layer 2 commands 107Commands Referencetacacs-server retransmitUse this command to get the number of times the client searches the active server from t

108 Layer 2 commandsNN47928-100tacacs use-server addressUse this command to select a server from the list of servers maintained in the TACACS client a

Layer 2 commands 109Commands ReferenceInternet Group Management Protocol snooping commandsInternet Group Management Protocol (IGMP) is the protocol a

Contents 11Commands Referenceshow snmp group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355show

110 Layer 2 commandsNN47928-100debug ip igmp snoopingUse this command to specify the debug levels for IGMP snooping module. Precede this command with

Layer 2 commands 111Commands Referenceip igmp snoopingUse this command to enable IGMP snooping in the switch or a specific VLAN. Precede this command

112 Layer 2 commandsNN47928-100ip igmp snooping fast-leaveUse this command to enable fast leave processing for a specific VLAN. Precede this command w

Layer 2 commands 113Commands Referenceip igmp snooping group-query-intervalUse this command to set the time interval after which the switch sends a gr

114 Layer 2 commandsNN47928-100ip igmp snooping mrouterUse this command to configure statically the router ports for a VLAN. Precede this command with

Layer 2 commands 115Commands Referenceip igmp snooping mrouter-time-outUse this command to set the IGMP snooping router port purge time-out after whic

116 Layer 2 commandsNN47928-100ip igmp snooping port-purge-intervalUse this command to set the IGMP snooping port purge time interval after which the

Layer 2 commands 117Commands Referenceip igmp snooping proxy-reportingUse this command to enable proxy reporting in the IGMP snooping switch. Precede

118 Layer 2 commandsNN47928-100ip igmp snooping querierUse this command to configure the IGMP snooping switch as a querier for a specific VLAN. Preced

Layer 2 commands 119Commands Referenceip igmp snooping query-intervalUse this command to set the time period with which the general queries are sent b

12 ContentsNN47928-100maximum-paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402ping . . .

120 Layer 2 commandsNN47928-100ip igmp snooping report-forwardUse this command to specify if IGMP reports must be forwarded on all ports or router por

Layer 2 commands 121Commands Referenceip igmp snooping report-suppression-intervalUse this command to set the IGMP snooping report-suppression time in

122 Layer 2 commandsNN47928-100ip igmp snooping retry-countUse this command to set the maximum number of group specific queries sent on a port on rece

Layer 2 commands 123Commands Referenceip igmp snooping versionUse this command to set the operating version of the IGMP snooping switch for a specific

124 Layer 2 commandsNN47928-100show ip igmp snoopingUse this command to display IGMP snooping information for all VLANs or a specific VLAN.Command mod

Layer 2 commands 125Commands Referenceshow ip igmp snooping forwarding-databaseUse this command to display the multicast forwarding entries for all VL

126 Layer 2 commandsNN47928-100show ip igmp snooping globalsUse this command to display the IGMP snooping information for all VLANs or a specific VLAN

Layer 2 commands 127Commands Referenceshow ip igmp snooping groupsUse this command to display IGMP group information for all VLANs or a specific VLAN

128 Layer 2 commandsNN47928-100show ip igmp snooping mrouterUse this command to display the router ports for a VLAN. Command modePrivileged EXEC or Us

Layer 2 commands 129Commands Referenceshow ip igmp snooping statisticsUse this command to display IGMP snooping statistics for all VLANs or a specific

Contents 13Commands Referencevrrp—preempt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444vr

130 Layer 2 commandsNN47928-100shutdown snoopingUse this command to shut down snooping in the switch. Precede this command with no to start and enable

Layer 2 commands 131Commands Referencesnooping multicast-forwarding-modeUse this command to specify the snooping multicast forwarding mode (IP based o

132 Layer 2 commandsNN47928-100Syslog commandsSyslog is a protocol used for capturing log information for devices on a network. The syslog protocol pr

Layer 2 commands 133Commands Referenceclear logsUse this command to clear the system syslog buffers. Command modeGlobal configurationSyntaxclear logsR

134 Layer 2 commandsNN47928-100cmdbuffsUse this command to configure the number of syslog buffers for a particular user.Command modeGlobal configurati

Layer 2 commands 135Commands ReferenceloggingUse this command to enable Syslog server and configures the Syslog Server IP address, the log-level and o

136 Layer 2 commandsNN47928-100DefaultsRelated commandsshow loggingnotification Specifies the normal but significant messages.warnings Specifies the w

Layer 2 commands 137Commands ReferencemailserverUse this command to set the mail server IP address to be used for sending email alert messages. Preced

138 Layer 2 commandsNN47928-100receiver mail-idUse this command to set the receiver mail id. Precede this command with no to delete the configured rec

Layer 2 commands 139Commands Referencesender mail-idUse this command to set the sender mail id. Precede this command with no to delete the configured

14 ContentsNN47928-100ip ospf message-digest-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489ip ospf network

140 Layer 2 commandsNN47928-100show email alertsUse this command to display email alerts related configuration.Command modePrivileged EXEC or User EXE

Layer 2 commands 141Commands Referenceshow loggingUse this command to display logging status and configuration information. Command modePrivileged EXE

142 Layer 2 commandsNN47928-100Secure Shell commandsSecure Shell (SSH) is a protocol for secure remote logon and other secure network services over an

Layer 2 commands 143Commands Referencedebug sshUse this command to set the given trace levels for SSH. Precede this command with no to reset the given

144 Layer 2 commandsNN47928-100ip sshUse this command to enable SSH server on the device and also configures the various parameters associated with SS

Layer 2 commands 145Commands Referenceshow ip sshUse this command to display SSH server information.Command modePrivileged EXEC or User EXECSyntaxshow

146 Layer 2 commandsNN47928-100Secure Sockets Layer commandsSecure Sockets Layer (SSL) is a protocol developed for transmitting private documents thro

Layer 2 commands 147Commands Referencedebug sslUse this command to set the given debug levels for SSL. Precede this command with no to reset the given

148 Layer 2 commandsNN47928-100ip http secureUse this command to enable SSL server on the device. This command helps to configure ciphersuites and cry

Layer 2 commands 149Commands Referenceshow ip http secure server statusUse this command to display SSL status and configuration information. Initially

Contents 15Commands Referenceset sipserver BackupModeGlobalDialPlanName . . . . . . . . . . . . . . . . . . . . . . . . 533set sipserver—Brief / Det

150 Layer 2 commandsNN47928-100show ssl server-certUse this command to display SSL server certificate.Command modePrivileged EXEC or User EXECSyntaxsh

Layer 2 commands 151Commands Referencessl gen cert-req algo rsa snUse this command to create a certificate request using RSA key pair and subject name

152 Layer 2 commandsNN47928-100ssl server-certUse this command to configure the server cert, input in PEM format. It generates a certificate request,

Layer 2 commands 153Commands ReferenceSystem feature commandsSMB BSG 8x12 offers a rich set of system features to a user, such as logon services, copy

154 Layer 2 commandsNN47928-100• ip http port (page 184)• login authentication (page 185)• mac-address (page 186)• mtu frame size (page 187)• network-

Layer 2 commands 155Commands Referencearchive download-swUse this command to perform an image download operation using TFTP from a remote location.Com

156 Layer 2 commandsNN47928-100archive selectUse this command to select the image when you restart next. Command modePrivileged EXECSyntaxarchive sele

Layer 2 commands 157Commands Referenceauthorized-manager ip-sourceUse this command to configure an IP authorized manager. Precede this command with no

158 Layer 2 commandsNN47928-100Related commandsshow authorized-managers

Layer 2 commands 159Commands Referencebase-macUse this command to configure the base MAC address for the switch in the NVRAM.Command modeGlobal config

16 ContentsNN47928-100transport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576upd

160 Layer 2 commandsNN47928-100cli consoleUse this command to enable the console CLI through a serial port. Precede this command with no to disable co

Layer 2 commands 161Commands Referenceclock setUse this command to manage the system clock.Command modePrivileged EXECSyntaxclock set hh:mm:ss day mon

162 Layer 2 commandsNN47928-100copyUse this command to copy the configuration from a remote site to flash.Command modePrivileged EXECSyntaxcopy {flash

Layer 2 commands 163Commands Referencecopy-fileUse this command to copy a file from a source remote site or flash to a destination remote site or flas

164 Layer 2 commandsNN47928-100copy logsUse this command to write the system logs to a remote site.Command modePrivileged EXECSyntaxcopy logs tftp://i

Layer 2 commands 165Commands Referencecopy startup-configUse this command to back up the initial configuration in flash or at a remote location. Comma

166 Layer 2 commandsNN47928-100debug-loggingUse this command to configure where debug logs are to be displayed. Precede this command with no to displa

Layer 2 commands 167Commands Referencedefault ip address allocation protocolUse this command to configure the protocol by which the default interface

168 Layer 2 commandsNN47928-100default management port ip address Use this command to configure the IP address and subnet mask for the default managem

Layer 2 commands 169Commands Referencedefault modeUse this command to configure the mode by which the default interface acquires its IP address.Comman

Contents 17Commands Referenceshow firewall interface config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 620show fi

170 Layer 2 commandsNN47928-100default restore-fileUse this command to configure the default restoration file.Command modeGlobal configurationSyntaxde

Layer 2 commands 171Commands Referencedefault tr69Use this command to enable or disable the TR69 module automatically turns on. Command modeGlobal con

172 Layer 2 commandsNN47928-100default vlan mgmt port ip addressUse this command to configure the IP address and subnet mask for the default vlan inte

Layer 2 commands 173Commands Referencedisable loginUse this command to disable the login prompt and password prompt.Command modeGlobal configurationSy

174 Layer 2 commandsNN47928-100dump network statusUse this command to display the network status.Command modePrivileged EXEC Syntaxdump network status

Layer 2 commands 175Commands Referenceenable loginUse this command to enable the login prompt and password prompt.Command modeGlobal configurationSynt

176 Layer 2 commandsNN47928-100eraseUse this command to clear the contents of the startup configuration or sets parameters in NVRAM to default values.

Layer 2 commands 177Commands ReferenceflowcontrolUse this command to set the send or receive flow-control value for an interface.If flowcontrol send i

178 Layer 2 commandsNN47928-100jumbo frame supportUse this command to configure the jumbo frame support on the interface.Command modeInterface configu

Layer 2 commands 179Commands ReferenceinterfaceUse this command to select an interface to configure, which can be a physical interface or a port-chann

18 ContentsNN47928-100port trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 662show

180 Layer 2 commandsNN47928-100DefaultsRelated commandsshow interfacesfxo channel Specifies the Foreign eXchange Office channel.fxs channel Specifies

Layer 2 commands 181Commands Referenceip addressUse this command to set the IP address of an interface. Precede this command with no to reset the IP a

182 Layer 2 commandsNN47928-100ip address—DHCP, RARPUse this command to configure the current VLAN/OOB interface to dynamically acquire an IP address

Layer 2 commands 183Commands Referenceip address negotiatedUse this command to acquire IP address by negotiation and erases the previously configured

184 Layer 2 commandsNN47928-100ip http portUse this command to set the HTTP port. Precede this command with no to the HTTP port. Command modeGlobal co

Layer 2 commands 185Commands Referencelogin authenticationUse this command to set the authentication method for user logins. Precede this command with

186 Layer 2 commandsNN47928-100mac-addressUse this command to clone a MAC address on this interface.Command modeEthernet interface configuration Synta

Layer 2 commands 187Commands Referencemtu frame sizeUse this command to configure the Maximum Transmission Unit (MTU) frame size for the interface. Co

188 Layer 2 commandsNN47928-100network-type wanUse this command to configure the interface as a WAN interface.Command modeInterface configuration Synt

Layer 2 commands 189Commands Referenceprivate linkUse this command to configure that this WAN link connects to a private network, so that no default r

Contents 19Commands Referencequeue weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705s

190 Layer 2 commandsNN47928-100promptUse this command to write the prompt text into NVRAM. Precede the command with no to write the default prompt tex

Layer 2 commands 191Commands Referenceset bootdelayUse this command to configure the bootdelay value. It is used only for debugging purpose.Command mo

192 Layer 2 commandsNN47928-100set ip httpUse this command to enable or disable HTTP.Command modeGlobal configurationSyntaxset ip http {enable | disab

Layer 2 commands 193Commands Referenceshow authorized-managersUse this command to display the configured authorized managers.Command modePrivileged EX

194 Layer 2 commandsNN47928-100show clockUse this command to display the system date and time. Command modePrivileged EXEC or User EXECSyntaxshow cloc

Layer 2 commands 195Commands Referenceshow debuggingUse this command to display the state of each debugging option. Command modePrivileged EXEC or Use

196 Layer 2 commandsNN47928-100show debug-loggingUse this command to display the debug logs stored in file. Command modePrivileged EXEC or User EXECSy

Layer 2 commands 197Commands Referenceshow filesUse this command to display list of files present in the flash. Command modePrivileged EXEC Syntaxshow

198 Layer 2 commandsNN47928-100show flow-controlUse this command to display flow control information. Command modePrivileged EXEC or User EXECSyntaxsh

Layer 2 commands 199Commands Referenceshow http server statusUse this command to view the http server status.Command modePrivileged EXEC or user EXECS

Copyright © 2007–2008 Nortel Networks, All Rights ReservedAll rights reserved.The information in this document is subject to change without notice. Th

20 ContentsNN47928-100set fxs fax-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 750set fxs

200 Layer 2 commandsNN47928-100show ip interfaceUse this command to display the IP interface configuration.Command modePrivileged EXEC or User EXECSyn

Layer 2 commands 201Commands Referenceshow interface mtuUse this command to show the Maximum Transmission Unit (MTU) of ports in the switch. Command m

202 Layer 2 commandsNN47928-100show interfacesUse this command to display the interface status and configuration. Command modePrivileged EXEC or User

Layer 2 commands 203Commands Referenceinterfaceshow files

204 Layer 2 commandsNN47928-100show interfaces—countersUse this command to display the interface status and configuration.Command modePrivileged EXEC

Layer 2 commands 205Commands Referenceshow management vlanUse this command to the VLANs associated with the management interface. Command modePrivileg

206 Layer 2 commandsNN47928-100show nvramUse this command to display the current information stored in the NVRAM. Command modePrivileged EXEC or User

Layer 2 commands 207Commands Referenceshow running configUse this command to display the current system information. Command modePrivileged EXEC or Us

208 Layer 2 commandsNN47928-100show sub-system informationUse this command to view the sub-system information like the IP address, operation status, a

Layer 2 commands 209Commands Referenceshow system informationUse this command to display system information.Command modePrivileged EXEC or User EXECSy

Contents 21Commands Referenceconfig dot11 turbo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 794co

210 Layer 2 commandsNN47928-100show tasksUse this command to display the task control block information.Command modePrivileged EXEC Syntaxshow tasks

Layer 2 commands 211Commands Referenceshow uplink rate-limit statusUse this command to display the uplink rate limit information.Command modePrivilege

212 Layer 2 commandsNN47928-100shutdown—physical/VLAN/port-channel/tunnel/PPP InterfaceUse this command to disable a physical interface, VLAN interfac

Layer 2 commands 213Commands Referencesnmp trap link-statusUse this command to enable trap generation on either the physical interface or the port-cha

214 Layer 2 commandsNN47928-100switch nameUse this command to configure the switch name.Command modeGlobal configurationSyntaxswitch name <name>

Layer 2 commands 215Commands ReferenceswitchportUse this command to configure the port as switch port. Precede the command with no to change a Layer 2

216 Layer 2 commandsNN47928-100system set factory defaultUse this command to remove BSG.conf, BSGnvram.txt.Command modePrivileged or user EXEC Syntaxs

Layer 2 commands 217Commands Referencetunnel checksumUse this command to enable end-to-end check summing of packets. Precede this command with no to d

218 Layer 2 commandsNN47928-100tunnel modeUse this command to the tunnel interface associated parameters. Precede this command with no to delete the t

Layer 2 commands 219Commands Referencetunnel path-mtu-discoveryUse this command to enable path MTU discovery on tunnel. Precede this command with no t

22 ContentsNN47928-100clear controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835clear

220 Layer 2 commandsNN47928-100tunnel udlrUse this command to associate tunnel with a unidirectional interface. Precede this command with no to associ

Layer 2 commands 221Commands Referenceuplink rate limitUse this command to configure the output channel rate. This is applicable for WAN interfaces on

222 Layer 2 commandsNN47928-100uplink rate limit enable / disableUse this command to enable or disable the uplink rate limiting feature over WAN inter

Layer 2 commands 223Commands ReferencewriteUse this command to write the running-config to a flash file, startup-configuration file or to a remote sit

224 Layer 2 commandsNN47928-100Power over Ethernet commandsPower over Ethernet (PoE) technology is a system that transmits electrical power, along wit

Layer 2 commands 225Commands Referencepower inline Use this command to enable or disable POE on a port.Command modeInterface configuration Syntaxpower

226 Layer 2 commandsNN47928-100power inline priorityUse this command to set the POE port priority to critical, high, or low. Command modeInterface con

Layer 2 commands 227Commands Referenceset poeUse this command to enable or disable POE module in the switch. Command modeGlobal configurationSyntaxset

228 Layer 2 commandsNN47928-100show power detailUse this command to display the POE power supply status. Command modePrivileged EXEC or User EXECSynta

Layer 2 commands 229Commands Referenceshow power inlineUse this command to display the power status for all or the specified POE interface. Command mo

23Commands ReferenceNew in this releaseThis section details what is new in the Commands Reference guide for Business Services Gateway (BSG)8ew and BSG

230 Layer 2 commandsNN47928-100System commandsUse the system commands to manage access permissions, mode access, and terminal configurations on BSG.Sy

Layer 2 commands 231Commands ReferencealiasUse this command to replace the given token by the given string. Precede this command with no to remove the

232 Layer 2 commandsNN47928-100clear screenUse this command to clear the screen.Command modeAllSyntaxclear screen

Layer 2 commands 233Commands Referenceclose line vtyUse this command to close the specified line (Telnet/SSH connection).Command modePrivileged or use

234 Layer 2 commandsNN47928-100configure terminalUse this command to enter the configuration mode.Command modePrivileged EXECSyntaxconfigure terminalR

Layer 2 commands 235Commands ReferencedisableUse this command to turn off privileged commands.Command modeUser EXECSyntaxdisable [Privilege level to g

236 Layer 2 commandsNN47928-100enableUse this command to turn on privileged commands.Command modeUser EXECSyntaxenable [Enable Level <0-15>]Vari

Layer 2 commands 237Commands Referenceenable passwordUse this command to modify enable password parameters. Precede this command with no to disable en

238 Layer 2 commandsNN47928-100endUse this command to exit from configuration mode.Command modeAllSyntaxendRelated commandsexit

Layer 2 commands 239Commands Referenceexec-timeoutUse this command to set EXEC timeout (in seconds) for line disconnection. Precede this command with

24 New in this releaseNN47928-100BSG commands The following list provides the new Business Service Gateway (BSG) commands:• Domain name server command

240 Layer 2 commandsNN47928-100exitUse this command to exit the current configuration mode to the next highest configuration mode in the CLI.Command m

Layer 2 commands 241Commands ReferencegroupUse this command to add a command group. Precede the command with no to delete a group from the CLI group d

242 Layer 2 commandsNN47928-100helpUse this command to display help for a particular command.Command modeAllSyntaxhelp [command ]Variable definitionsT

Layer 2 commands 243Commands ReferencelineUse this command to configure a console or a virtual terminal line.Command modeGlobal configurationSyntaxlin

244 Layer 2 commandsNN47928-100line configuration modeUse this command to configure a console or virtual terminal line.Command modeGlobal configuratio

Layer 2 commands 245Commands ReferencelistgroupsUse this command to list all the valid groups, with their associated functional groups.Command modePri

246 Layer 2 commandsNN47928-100listuserUse this command to list all valid users, along with their permissible mode.Command modePrivileged EXECSyntaxli

Layer 2 commands 247Commands ReferencelockUse this command to lock the CLI console. You may want to lock the console to prevent unauthorized users fro

248 Layer 2 commandsNN47928-100logoutUse this command to exit from Privileged EXEC or User EXEC mode to SMB BSG login prompt in case of console sessio

Layer 2 commands 249Commands ReferencemoduserUse this command to modify the parameters (groups, password) for a user.Command modeGlobal configurationS

New in this release 25Commands ReferenceSyslog commandsSyslog is a protocol used for capturing log information for devices on a network. For more info

250 Layer 2 commandsNN47928-100paginationUse this command to enable pagination. Precede the command with no to disable the pagination.Command modePriv

Layer 2 commands 251Commands ReferencepasswordUse this command to enable or to disable the user login prompt.Command modePrivileged EXEC Syntaxpasswor

252 Layer 2 commandsNN47928-100run scriptUse this command to run CLI commands from the specified script file.Command modePrivileged EXECSyntaxrun scri

Layer 2 commands 253Commands Referenceshow aliasesUse this command to display the aliases.Command modePrivileged EXEC or User EXEC Syntaxshow aliasesR

254 Layer 2 commandsNN47928-100show historyUse this command to display command list history.Command modePrivileged EXEC or User EXEC Syntaxshow histor

Layer 2 commands 255Commands Referenceshow lineUse this command to display TTY line information.Command modePrivileged EXEC or User EXEC Syntaxshow li

256 Layer 2 commandsNN47928-100show privilegeUse this command to show current user privilege level.Command modePrivileged EXEC or User EXEC Syntaxshow

Layer 2 commands 257Commands Referenceshow usersUse this command to display information about terminal lines.Command modePrivileged EXEC or User EXEC

258 Layer 2 commandsNN47928-100usernameUse this command to create a user with specific group permission. Use double quotation marks around username if

Layer 2 commands 259Commands ReferenceRMON commandsRemote Monitoring (RMON) is a standard monitoring specification5 that enables various network monit

26 New in this releaseNN47928-100Simple network management protocol version 3 commandsSimple network management protocol version 3 (SNMPv3) specifies

260 Layer 2 commandsNN47928-100rmon alarmUse this command to set an alarm on a Management Information Base (MIB) object.The alarm group periodically t

Layer 2 commands 261Commands Referenceshow rmon

262 Layer 2 commandsNN47928-100rmon collection historyUse this command to enable history collection of interface statistics in the buckets for the spe

Layer 2 commands 263Commands Referencermon collection statsUse this command to enable RMON statistics collection on the interface. Precede the command

264 Layer 2 commandsNN47928-100rmon eventUse this command to add an event to the RMON event table. The added event is associated with an RMON event nu

Layer 2 commands 265Commands Referenceset rmonUse this command to enable or to disable the RMON feature.Command modeGlobal configurationSyntaxset rmon

266 Layer 2 commandsNN47928-100show rmonUse this command to view the RMON statistics, alarms, events, and history configured on the interface.Command

Layer 2 commands 267Commands ReferenceVirtual local area network commandsVirtual Local Area Network (VLANs) is a group of devices on different physica

268 Layer 2 commandsNN47928-100• show vlan port config (page 297)• show vlan protocols-group (page 298)• shutdown garp (page 299)• switchport acceptab

Layer 2 commands 269Commands Referencedebug vlanUse this command to enable module-wise debug traces like forwarding, priority, GARP, GVRP, or GMRP. Pr

New in this release 27Commands ReferenceFirewall commandsA firewall is a complete security solution. For more information, see Firewall commands (page

270 Layer 2 commandsNN47928-100Related commandsshow vlan

Layer 2 commands 271Commands Referencegroup restrictedUse this command to enable or disable restricted group registration on the port.Command modeInte

272 Layer 2 commandsNN47928-100mac-address-table aging-timeUse this command to set the maximum age of a dynamically learnt entry in the MAC address ta

Layer 2 commands 273Commands Referencemac-address-table static multicastUse this command to configure a static multicast MAC address in the forwarding

274 Layer 2 commandsNN47928-100DefaultsRelated commandsshow mac-address-table static multicaststatus permanent

Layer 2 commands 275Commands Referencemac-address-table static unicastUse this command to configure a static unicast MAC address in the forwarding dat

276 Layer 2 commandsNN47928-100map protocolUse this command to configure the group ID for a specific encapsulation and protocol value combination. Thi

Layer 2 commands 277Commands Referenceport protocol-vlanUse this command to enable port protocol based VLANs. Precede this command with no to disable

278 Layer 2 commandsNN47928-100portsUse this command to configure a static VLAN entry with the required member ports, untagged ports and forbidden por

Layer 2 commands 279Commands Referenceprotocol-vlanUse this command to enable protocol-VLAN based classification on all the ports. Precede this comman

28 New in this releaseNN47928-100

280 Layer 2 commandsNN47928-100set garp timerUse this command to configure the GARP join time, leave time, and leaveall time in milliseconds.Command m

Layer 2 commands 281Commands Referenceset gmrpUse this command to enable or disable GMRP globally on the device.Command modeGlobal configurationSyntax

282 Layer 2 commandsNN47928-100set gvrpUse this command to enable or disable GVRP on a global basis. Command modeGlobal configurationSyntaxset gvrp {e

Layer 2 commands 283Commands Referenceset port gmrpUse this command to enable or disable GMRP on the port.Command modeGlobal configurationSyntaxset po

284 Layer 2 commandsNN47928-100set port gvrpUse this command to enable or disable GVRP on the interface. Command modeGlobal configurationSyntaxset por

Layer 2 commands 285Commands Referenceshow garp timerUse this command to display the GARP timer information of the available interfaces.Command modePr

286 Layer 2 commandsNN47928-100show mac-address-tableUse this command to display the static and dynamic unicast and multicast MAC address table. Comma

Layer 2 commands 287Commands Referenceshow mac-address-table aging-timeUse this command to display the MAC address-table ageing time.Command modePrivi

288 Layer 2 commandsNN47928-100show mac-address-table countUse this command to display the number of MAC addresses present on all the VLANs or on the

Layer 2 commands 289Commands Referenceshow mac-address-table dynamic multicastUse this command to display the dynamically learned multicast MAC addres

29Commands ReferenceHow to get helpThis section explains how to get help for Nortel products and services.Getting Help from the Nortel Web siteThe bes

290 Layer 2 commandsNN47928-100show mac-address-table dynamic unicastUse this command to display the dynamically learned unicast entries from the MAC

Layer 2 commands 291Commands Referenceshow mac-address-table static multicastUse this command to display the statically configured multicast entries.C

292 Layer 2 commandsNN47928-100show mac-address-table static unicastUse this command to display the statically configured unicast addresses from the M

Layer 2 commands 293Commands Referenceshow protocol-vlanUse this command to display the entries in protocol-VLAN database.Command modePrivileged EXEC

294 Layer 2 commandsNN47928-100show vlanUse this command to display the VLAN information in the database.Command modePrivileged EXEC or User EXECSynta

Layer 2 commands 295Commands Referenceshow vlan device capabilitiesUse this command to display the VLAN capabilities of the device.Command modePrivile

296 Layer 2 commandsNN47928-100show vlan device infoUse this command to display the VLAN related global status variables.Command modePrivileged EXEC o

Layer 2 commands 297Commands Referenceshow vlan port configUse this command to display the VLAN related parameters specific for ports.Command modePriv

298 Layer 2 commandsNN47928-100show vlan protocols-groupUse this command to display the protocol group database.Command modePrivileged EXEC or User EX

Layer 2 commands 299Commands Referenceshutdown garpUse this command to command shut down the GARP module. Precede this command with no to start and en

Contents 3Commands ReferenceContentsNew in this release. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23Fea

30 How to get helpNN47928-100Getting Help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a

300 Layer 2 commandsNN47928-100switchport acceptable-frame-typeUse this command to configure the acceptable frame type for the port. Precede this comm

Layer 2 commands 301Commands Referenceswitchport ingress-filterUse this command to enable ingress filtering on the port. Precede this command with no

302 Layer 2 commandsNN47928-100switchport map protocols-groupUse this command to map the protocol group configured to a particular VLAN identifier for

Layer 2 commands 303Commands Referenceswitchport modeUse this command to configure the VLAN port mode. Precede this command with no to configure the d

304 Layer 2 commandsNN47928-100switchport priority defaultUse this command to set the default user priority for the port. Precede this command with no

Layer 2 commands 305Commands Referenceswitchport pvidUse this command to configure the PVID (VLAN Identifier) that would be assigned to untagged or pr

306 Layer 2 commandsNN47928-100vlanUse this command to configure a VLAN in the switch and is also used to enter into the config-VLAN mode. Precede thi

Layer 2 commands 307Commands Referencevlan map-priorityUse this command to map a priority to a traffic class on the specified port. The frame received

308 Layer 2 commandsNN47928-100vlan restrictedUse this command to enable or disable restricted VLAN registration on the port.Command modeInterface con

Layer 2 commands 309Commands ReferenceDynamic host configuration protocol commandsDynamic Host Configuration Protocol (DHCP) allows dynamic configurat

31Commands ReferenceIntroductionThe Commands Reference guide describes the Layer 2, Layer 3, Business Service Gateway (BSG), and wireless command line

310 Layer 2 commandsNN47928-100• ip dhcp device (page 332)• ip dhcp next-server (page 333)• ip dhcp option (page 334)• ip dhcp pool (page 335)• lease

Layer 2 commands 311Commands ReferenceDHCP client commandsdebug ip dhcp clientUse this command to set the debug level for tracing the DHCP client modu

312 Layer 2 commandsNN47928-100ip addressUse this command to configure the current virtual LAN (VLAN) or OOB interface to dynamically acquire an IP ad

Layer 2 commands 313Commands ReferencereleaseUse this command to immediately release the DHCP lease on the interface specified. Command modePrivileged

314 Layer 2 commandsNN47928-100renewUse this command to immediately renew the DHCP lease on the interface specified. Command modePrivileged EXEC or Us

Layer 2 commands 315Commands Referenceshow ip dhcp client statsUse this command to display the DHCP client statistics. Command modePrivileged EXEC or

316 Layer 2 commandsNN47928-100DHCP relay commandsdebug ip dhcp relay Use this command to enable the debug level for tracing the DHCP relay module. Pr

Layer 2 commands 317Commands Referenceip dhcp relayUse this command to enable or to disable the DHCP relay on the specified interface.Command modeInte

318 Layer 2 commandsNN47928-100ip dhcp relay information optionUse this command to enable the Relay Agent to perform any processing related to relay a

Layer 2 commands 319Commands Referenceip dhcp serverUse this command to set the IP address of the DHCP server. The relay agent will now start forwardi

32 IntroductionNN47928-100

320 Layer 2 commandsNN47928-100service dhcp-relayUse this command to enable the DHCP Relay agent in the switch. Precede this command with no to disabl

Layer 2 commands 321Commands Referenceshow dhcp-serverUse this command to display the DHCP server information.Command modePrivileged EXEC or User EXEC

322 Layer 2 commandsNN47928-100show ip dhcp relay informationUse this command to display the DHCP relay information.Command modePrivileged EXEC or Use

Layer 2 commands 323Commands Referenceshow ip dhcp relay interfaceUse this command to view the DHCP relay status on interfaces.Command modePrivileged

324 Layer 2 commandsNN47928-100DHCP server commandsdebug ip dhcp serverUse this command to enable the debug level for tracing the DHCP server module.

Layer 2 commands 325Commands Referencedefault-routerUse this command to set the default router in the DHCP server configuration parameters. Precede th

326 Layer 2 commandsNN47928-100dns-serverUse this command to specify the IP address of a DNS server that is available to a DHCP client. Precede this c

Layer 2 commands 327Commands Referencedomain-nameUse this command to set the domain name in the DHCP server configuration parameters. Precede this com

328 Layer 2 commandsNN47928-100excluded-addressUse this command to create an excluded pool to prevent DHCP Server from assigning certain addresses. Pr

Layer 2 commands 329Commands Referencehost hardware-typeUse this command to specify the hardware address of a DHCP client and host specific DHCP optio

33Commands ReferenceCommand modesThis section describes the command modes available in the Small and Medium Business (SMB) Business Services Gateway (

330 Layer 2 commandsNN47928-100ip dhcp Use this command to set the DHCP server parameters such as enabling ICMP echo mechanism or offer-reuse timeout.

Layer 2 commands 331Commands Referenceip dhcp bootfileUse this command to set the boot file name in the DHCP server configuration parameters. Precede

332 Layer 2 commandsNN47928-100ip dhcp deviceUse this command to configure the DHCP device name. Precede the command with no to delete the existing DH

Layer 2 commands 333Commands Referenceip dhcp next-serverUse this command to set the next boot server in the DHCP server configuration parameters. Pre

334 Layer 2 commandsNN47928-100ip dhcp optionUse this command to set the DHCP server options.Command modeGlobal configurationSyntaxip dhcp option <

Layer 2 commands 335Commands Referenceip dhcp poolUse this command to create a DHCP server address pool and to place the user in the DHCP pool configu

336 Layer 2 commandsNN47928-100leaseUse this command to configure the duration of the lease for an IP address that is assigned from the Nortel DHCP se

Layer 2 commands 337Commands Referencenetbios-name-serverUse this command to set the NetBIOS (WINS) name servers in the DHCP server configuration para

338 Layer 2 commandsNN47928-100netbios-node-typeUse this command to set the NetBios node type in the DHCP server configuration parameters. Precede thi

Layer 2 commands 339Commands ReferencenetworkUse this command to set the network IP address and mask in DHCP server configuration parameters. Precede

34 Command modesNN47928-100Layer 2 command modesThe following command modes are available in Layer 2:• Command modes(page 34)• Protocol-specific modes

340 Layer 2 commandsNN47928-100optionUse this command to the pool specific DHCP server option. Precede this command with no to delete the pool specifi

Layer 2 commands 341Commands Referenceservice dhcp-serverUse this command to enable the DHCP server. Precede this command with no to disable the DHCP

342 Layer 2 commandsNN47928-100show ip dhcp server bindingUse this command to display DHCP server binding information.Command modePrivileged EXEC or U

Layer 2 commands 343Commands Referenceshow ip dhcp server devicesUse this command to view the DHCP devices.Command modePrivileged EXEC or User EXECSyn

344 Layer 2 commandsNN47928-100show ip dhcp server informationUse this command to display DHCP server information.Command modePrivileged EXEC or User

Layer 2 commands 345Commands Referenceshow ip dhcp server poolsUse this command to display DHCP server pools.Command modePrivileged EXEC or User EXECS

346 Layer 2 commandsNN47928-100show ip dhcp server statisticsUse this command to display DHCP server statistics.Command modePrivileged EXEC or User EX

Layer 2 commands 347Commands Referenceshow snmp-server trapsUse this command to view the set of traps that are currently enabled.Command modePrivilege

348 Layer 2 commandsNN47928-100utilization thresholdUse this command to set the pool utilization threshold value in percentage. If the pool utilizatio

Layer 2 commands 349Commands ReferenceSimple Network Management Protocol version 3 commandsSimple Network Management Protocol (SNMP) is the most widel

Command modes 35Commands ReferencePhysical interface modeThis is a sub-section of interface configuration mode. Use the physical interface mode to per

350 Layer 2 commandsNN47928-100• snmp notify (page 372)• snmp-server enable traps snmp authentication (page 373)• snmp targetaddr (page 374)• snmp tar

Layer 2 commands 351Commands Referenceshow snmpUse this command to display the status information of SNMP communications. Command modePrivileged EXEC

352 Layer 2 commandsNN47928-100show snmp agent informationUse this command to display the SNMP agent information.Command modePrivileged EXEC or User E

Layer 2 commands 353Commands Referenceshow snmp communityUse this command to display the configured SNMP community details. Command modePrivileged EXE

354 Layer 2 commandsNN47928-100show snmp engineIDUse this command to display the engine identifier.Command modePrivileged EXEC or User EXECSyntaxshow

Layer 2 commands 355Commands Referenceshow snmp groupUse this command to display the configured SNMP groups. Command modePrivileged EXEC or User EXECS

356 Layer 2 commandsNN47928-100show snmp group accessUse this command to the configured SNMP group access details. Command modePrivileged EXEC or User

Layer 2 commands 357Commands Referenceshow snmp inform statisticsUse this command to display the inform message statistics.Command modePrivileged EXEC

358 Layer 2 commandsNN47928-100show snmp notifUse this command to display the configured SNMP notification types.Command modePrivileged EXEC or User E

Layer 2 commands 359Commands Referenceshow snmp-server trapsUse this command to display the set of traps that are currently enabled. Command modePrivi

36 Command modesNN47928-100DiffSrv ClassMap configuration modeUse the Diff ClassMap configuration mode to create a class map for matching the packets

360 Layer 2 commandsNN47928-100show snmp targetaddrUse this command to display the configured SNMP target addresses. Command modePrivileged EXEC or Us

Layer 2 commands 361Commands Referenceshow snmp targetparamUse this command to display the configured SNMP target address parameters. Command modePriv

362 Layer 2 commandsNN47928-100show snmp userUse this command to display the configured SNMP users. Command modePrivileged EXEC or User EXECSyntaxshow

Layer 2 commands 363Commands Referenceshow snmp viewtreeUse this command to display the configured SNMP Tree views. Command modePrivileged EXEC or Use

364 Layer 2 commandsNN47928-100snmp agent statusUse this command to enable or disable the SNMP agent status.Command modeGlobal configurationSyntaxsnmp

Layer 2 commands 365Commands Referencesnmp allowed versionUse this command to configure the SNMP allowed versions.Command modeGlobal configurationSynt

366 Layer 2 commandsNN47928-100snmp accessUse this command to configure the SNMP group access details. Precede this command with no to remove the SNMP

Layer 2 commands 367Commands ReferenceDefaultsRelated commandsshow snmp groupshow snmp group accessshow snmp viewtreesnmp groupsnmp viewGroupName isoR

368 Layer 2 commandsNN47928-100snmp community indexUse this command to configure the SNMP community details. Precede this command with no to remove th

Layer 2 commands 369Commands Referenceshow snmp community

Command modes 37Commands ReferenceLayer 3 command modesThe following command modes are available in Layer 3.• Protocol Independent Multicast component

370 Layer 2 commandsNN47928-100snmp engineidUse this command to configure the engine identifier. Precede this command with no to remove the configured

Layer 2 commands 371Commands Referencesnmp groupUse this command to configure SNMP group details. Precede this command with no to remove the SNMP grou

372 Layer 2 commandsNN47928-100snmp notifyUse this command to configure the SNMP notification details. Precede this command with no to remove the SNMP

Layer 2 commands 373Commands Referencesnmp-server enable traps snmp authenticationUse this command to enable generation of authentication traps for SN

374 Layer 2 commandsNN47928-100snmp targetaddrUse this command to configure the SNMP target address. Precede this command with no to remove the config

Layer 2 commands 375Commands Referenceshow snmp targetparamsnmp targetparams

376 Layer 2 commandsNN47928-100snmp targetparamsUse this command to configure the SNMP target parameters. Precede this command with no to remove the S

Layer 2 commands 377Commands ReferenceDefaultsRelated commandsshow snmp targetparamshow snmp usersnmp userParamName internetUser/Security name noneSec

378 Layer 2 commandsNN47928-100snmp userUse this command to configure the SNMP user details. Precede this command with no to remove the SNMP user deta

Layer 2 commands 379Commands Referencesnmp viewUse this command to configure the SNMP view. Precede this command with no to remove the SNMP view.Comma

38 Command modesNN47928-100Hierarchy of command modesThe following figures shows the hierarchy of command modes.

380 Layer 2 commandsNN47928-100snmp-server enable trapsUse this command to enable generation of a particular trap. Precede the command with no to disa

Layer 2 commands 381Commands Referencesystem contactUse this command to configure the system contact information.Command modeGlobal configurationSynta

382 Layer 2 commandsNN47928-100system locationUse this command to configure the system location.Command modeGlobal configurationSyntaxsystem location

383Commands ReferenceLayer 3 commands This section describes the command modes and commands available in Layer 3.Layer 3 commands navigation• Internet

384 Layer 3 commandsNN47928-100Internet Protocol commandsInternet Protocol (IP) is an identifier for a computer or device on a Transmission Control Pr

Layer 3 commands 385Commands Reference• show ip arp (page 404)• show ip information (page 405)• show ip pmtu (page 406)• show ip rarp (page 407)• show

386 Layer 3 commandsNN47928-100arp timeoutUse this command to set the Address Resolution Protocol (ARP) cache timeout. Precede this command with no to

Layer 3 commands 387Commands Referencearp—IP addressUse this command to add a static entry in the ARP cache. Precede this command with no to delete a

388 Layer 3 commandsNN47928-100ip aggregate-routeUse this command to set the maximum number of aggregate routes. Precede this command with no to set t

Layer 3 commands 389Commands Referenceip arp max-retriesUse this command to set the maximum number of ARP request retries. Precede this command with n

39Commands ReferenceUsing command modesThe Command Line Interface (CLI) uses different command modes, depending on the type of operation that you are

390 Layer 3 commandsNN47928-100ip default-ttlUse this command to set the Time To Live (TTL) value. Precede this command with no to set the TTL to the

Layer 3 commands 391Commands Referenceip directed-broadcastUse this command to enable forwarding of directed broadcasts. Precede this command with no

392 Layer 3 commandsNN47928-100ip echo-replyUse this command to enable sending ICMP echo reply messages. Precede this command with no to disable sendi

Layer 3 commands 393Commands Referenceip mask-replyUse this command to enable sending ICMP mask reply messages. Precede this command with no to disabl

394 Layer 3 commandsNN47928-100ip path mtuUse this command to configure the MTU for usage in PMTU discovery. Precede this command with no to remove MT

Layer 3 commands 395Commands Referenceip path mtu discoverUse this command to enable path Maximum Transmission Unit (MTU) discovery. Precede this comm

396 Layer 3 commandsNN47928-100ip rarp clientUse this command to enable Reverse Address Resolution Protocol (RARP) client. Precede this command with n

Layer 3 commands 397Commands Referenceip rarp client requestUse this command to set the number of RARP client request retries or interval between requ

398 Layer 3 commandsNN47928-100ip redirectsUse this command to enable sending Internet Control Message Protocol (ICMP) redirect messages. Precede this

Layer 3 commands 399Commands Referenceip routeUse this command to add a static route. Precede this command with no to delete a static route.Command mo

4 ContentsNN47928-100revision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52sho

40 Using command modesNN47928-100 1 Log on to the BSG system using Telnet or SSH.2 The CLI defaults to Privileged Exec mode. The prompt displayed for

400 Layer 3 commandsNN47928-100ip routingUse this command to enable IP routing. Precede this command with no to disable IP routing.Command modeGlobal

Layer 3 commands 401Commands Referenceip unreachablesUse this command to enable sending ICMP unreachable message. Precede this command with no to disa

402 Layer 3 commandsNN47928-100maximum-pathsUse this command to set the maximum number of multipaths. Precede this command with no to set the maximum

Layer 3 commands 403Commands ReferencepingUse this command to send echo messages.Command modeUser EXEC Syntaxping [ip] destination-address [size packe

404 Layer 3 commandsNN47928-100show ip arpUse this command to display IP ARP table.Command modePrivileged EXEC or User EXEC Syntaxshow ip arp [{Vlan &

Layer 3 commands 405Commands Referenceshow ip informationUse this command to display IP configuration information.Command modePrivileged EXEC or User

406 Layer 3 commandsNN47928-100show ip pmtuUse this command to display the configured PMTU Entries.Command modePrivileged EXEC or User EXEC Syntaxshow

Layer 3 commands 407Commands Referenceshow ip rarpUse this command to display RARP configuration information.Command modePrivileged EXEC or User EXEC

408 Layer 3 commandsNN47928-100show ip trafficUse this command to display the IP protocol statistics.Command modePrivileged EXEC or User EXEC Syntaxsh

Layer 3 commands 409Commands Referenceshow ip routeUse this command to view the IP routing table.Command modePrivileged EXEC or User EXEC Syntaxshow i

Using command modes 41Commands ReferenceVariable definitionsThis table describes the variables used in the Interface Configuration mode.Config-VLAN mo

410 Layer 3 commandsNN47928-100traffic-shareUse this command to enable traffic sharing (load sharing of IP packets). Precede this command with no to

Layer 3 commands 411Commands ReferenceInternet Group Management Protocol commandsInternet Group Management Protocol (IGMP) is a group membership manag

412 Layer 3 commandsNN47928-100debug ip igmpUse this command to enable the IGMP trace. Precede this command with no to disable the IGMP trace.Command

Layer 3 commands 413Commands Referenceip igmp immediate-leaveUse this command to enable immediate leave processing on the interface. Precede this comm

414 Layer 3 commandsNN47928-100ip igmp last-member-query-intervalUse this command to set the IGMP last member query interval for the interface. Preced

Layer 3 commands 415Commands Referenceip igmp query-intervalUse this command to set the IGMP query interval for the interface. Precede this command wi

416 Layer 3 commandsNN47928-100ip igmp query-max-response-timeUse this command to set the IGMP max query response value for the interface. Precede thi

Layer 3 commands 417Commands Referenceip igmp robustnessUse this command to set the IGMP robustness value for the interface. Precede this command with

418 Layer 3 commandsNN47928-100ip igmp static-groupUse this command to the static group membership on the interface. Precede this command with no to d

Layer 3 commands 419Commands Referenceip igmp versionUse this command to set the IGMP version on the interface. Precede this command with no to set th

42 Using command modesNN47928-100 Line configuration modeUse the Line Configuration mode to configure terminal line settings.Using Line configuration

420 Layer 3 commandsNN47928-100no ip igmpUse this command to delete the IGMP capable interface. Command modeInterface configurationSyntaxno ip igmp Re

Layer 3 commands 421Commands Referenceset ip igmpUse this command to enable or disable IGMP on the interface. Command modeGlobal configuration or Inte

422 Layer 3 commandsNN47928-100show ip igmp global-configUse this command to display the global configuration of IGMP.Command modePrivileged EXEC or U

Layer 3 commands 423Commands Referenceshow ip igmp groupsUse this command to display the IGMP groups information.Command modePrivileged EXEC or User E

424 Layer 3 commandsNN47928-100show ip igmp interfaceUse this command to display the interface configuration of IGMP.Command modePrivileged EXEC or Us

Layer 3 commands 425Commands Referenceshow ip igmp sourcesUse this command to display the IGMP source information. Command modePrivileged EXEC or User

426 Layer 3 commandsNN47928-100show ip igmp statisticsUse this command to view the IGMP statistics information.Command modePrivileged EXEC or User EXE

Layer 3 commands 427Commands ReferenceRoute redistribution commandsRoute redistribution (RRD) allows different routing protocols to exchange routing i

428 Layer 3 commandsNN47928-100as-numUse this command to set the AS number for the router. Command modeGlobal configurationSyntaxas-num <value(1-65

Layer 3 commands 429Commands Referencedefault redistribute-policyUse this command to set the default behavior of RRD control table. Command modeGlobal

43Commands ReferenceLayer 2 commands This section describes the commands used in configuring the Layer 2 Command Line Interface (CLI). The CLI support

430 Layer 3 commandsNN47928-100export ospfUse this command to enable redistribution of Open Shortest Path First (OSPF) area or external routes to the

Layer 3 commands 431Commands Referenceredistribute-policyUse this command to add the permit or deny redistribution policy. Precede this command with n

432 Layer 3 commandsNN47928-100router-idUse this command to set the ID address for the router.Command modeGlobal configurationSyntaxrouter-id <addr

Layer 3 commands 433Commands Referenceshow ip protocolsUse this command to display information about the active routing protocol process.Command modeP

434 Layer 3 commandsNN47928-100show redistribute informationUse this command to display Route Table Manager (RTM) RRD status for registered protocols.

Layer 3 commands 435Commands Referenceshow redistribute-policyUse this command to display route redistribution filters.Command modePrivileged EXEC or

436 Layer 3 commandsNN47928-100Virtual router redundancy protocol commandsVirtual Router Redundancy Protocol (VRRP) is an election protocol that dynam

Layer 3 commands 437Commands Referencedebug VRRPUse this command to enable the trace for the VRRP module. Precede this command with no to disable the

438 Layer 3 commandsNN47928-100interface vlanUse this command to select an interface to configure. Precede this command with no to delete the virtual

Layer 3 commands 439Commands Referencerouter vrrpUse this command to enable VRRP in the router and is used to enter the VRRP configuration mode. Prece

44 Layer 2 commandsNN47928-100Spanning Tree Protocol commandsSpanning Tree Protocol (STP) is a link management protocol that provides path redundancy

440 Layer 3 commandsNN47928-100show vrrp —vridUse this command to display the VRRP status information. Command modePrivileged EXEC or User EXECSyntaxs

Layer 3 commands 441Commands Referenceshow vrrp interface vlanUse this command to display the VRRP status information. Command modePrivileged EXEC or

442 Layer 3 commandsNN47928-100vrrp-intervalUse this command to set the advertisement timer for a virtual router. Precede this command with no to set

Layer 3 commands 443Commands Referencevrrp-ip addressUse this command to set the associated IP addresses for the virtual router. Precede this command

444 Layer 3 commandsNN47928-100vrrp—preemptUse this command to enable the preemption of state change from either backup to master or vice versa based

Layer 3 commands 445Commands Referencevrrp—priorityUse this command to set the priority for the virtual router. Precede this command with no to set th

446 Layer 3 commandsNN47928-100vrrp - text-authenticationUse this command to set the authentication type for the virtual router to simple password. Pr

Layer 3 commands 447Commands ReferenceRouting Information Protocol commandsRouting Information Protocol (RIP) is a widely used protocol for managing r

448 Layer 3 commandsNN47928-100auto-summaryUse this command to enable or to disable the auto summarization feature in RIP.Command modeRouter configura

Layer 3 commands 449Commands Referencedebug ip ripUse this command to set the debug level for RIP module. Precede this command with no to reset the de

Layer 2 commands 45Commands Reference• spanning-tree transmit hold-count (page 76)

450 Layer 3 commandsNN47928-100default-metricUse this command to set the RIP default metric. Precede this command with no to set the RIP metric to its

Layer 3 commands 451Commands Referenceip rip authentication modeUse this command to configure authentication mode and key. Precede this command with n

452 Layer 3 commandsNN47928-100ip rip default route originateUse this command to configure the metric to be used for default route propagated over the

Layer 3 commands 453Commands Referenceip rip receive versionUse this command to set IP RIP version number for receiving advertisements. Precede this c

454 Layer 3 commandsNN47928-100ip rip retransmissionUse this command to configure the timeout interval. Insert the number of retries to retransmit the

Layer 3 commands 455Commands Referenceip rip securityUse this command to accept or ignore RIP1 packets when authentication is in use. Precede this com

456 Layer 3 commandsNN47928-100ip rip send versionUse this command to set the IP RIP version number for transmitting advertisements. Precede this comm

Layer 3 commands 457Commands Referenceip rip summary-addressUse this command to command route aggregation for all subnet routes that falls under the s

458 Layer 3 commandsNN47928-100ip spilt-horizonUse this command to set the spilt horizon status. Precede this command with no to disable the spilt hor

Layer 3 commands 459Commands ReferenceneighborUse this command to add a neighbor router and to set its priority. Precede this command with no to delet

46 Layer 2 commandsNN47928-100clear spanning-tree countersUse this command to reset all bridge-level and port-level statistics counters.Command modeGl

460 Layer 3 commandsNN47928-100networkUse this command to enable RIP on an IP network. Precede this command with no to disable RIP on an IP network.Co

Layer 3 commands 461Commands Referenceoutput-delayUse this command to enable interpacket delay for RIP updates. Precede this command with no to disabl

462 Layer 3 commandsNN47928-100passive-interface vlanUse this command to suppress routing updates on an interface. Precede this command with no to not

Layer 3 commands 463Commands ReferenceredistributeUse this command to enable redistribution of corresponding protocol routes into RIP. Precede this co

464 Layer 3 commandsNN47928-100router ripUse this command to enter the router configuration mode. Precede this command with no to disable RIP on all t

Layer 3 commands 465Commands Referenceshow ip ripUse this command to IP RIP protocol database or statistics. Command modePrivileged EXEC or User EXECS

466 Layer 3 commandsNN47928-100timers basicUse this command to set update, route age, and garbage collection timers. Precede this command with no to s

Layer 3 commands 467Commands ReferenceOpen Shortest Path First commandsOpen Shortest Path First (OSPF) protocol is an Interior Gateway Protocol (IGP)

468 Layer 3 commandsNN47928-100• passive-interface default (page 496)• passive-interface vlan (page 497)• redistribute (page 498)• redist-config (page

Layer 3 commands 469Commands Referenceabr-typeUse this command to set the alternative ABR Type.Command modeRouter configurationSyntaxabr-type {standar

Layer 2 commands 47Commands Referenceclear spanning-tree detected protocolsUse this command to restart the protocol migration process on all of the in

470 Layer 3 commandsNN47928-100area—default costUse this command to specify a cost for the default summary route sent into a stub or NSSA. Precede thi

Layer 3 commands 471Commands Referencearea—nssaUse this command to configure an area as a NSSA and other parameters related to that area. Command mode

472 Layer 3 commandsNN47928-100area—rangeUse this command to consolidate and summarize routes at an area boundary. Precede this command with no to del

Layer 3 commands 473Commands ReferenceDefaultsRelated commandsarea—default costarea—nssaarea—stubarea—virtual-linkip ospf authenticationshow ip ospf—s

474 Layer 3 commandsNN47928-100area—stability-intervalUse this command to configure the stability interval for Not So Stubby Area (NSSA). Precede this

Layer 3 commands 475Commands Referencearea—stubUse this command to an area as a stub area and other parameters related to that area. Precede this comm

476 Layer 3 commandsNN47928-100area—translation-roleUse this command to configure the translation role for NSSA. Precede this command with no to confi

Layer 3 commands 477Commands Referencearea—virtual-linkUse this command to an OSPF virtual link and its related parameters. Precede this command with

478 Layer 3 commandsNN47928-100DefaultsRelated commandsarea—rangeip ospf authenticationshow ip ospfshow ip ospf virtual-linkstransmit-delay Specifies

Layer 3 commands 479Commands ReferenceASBR RouterUse this command to specify this router as ASBR. Precede this command with no to disable this router

48 Layer 2 commandsNN47928-100debug spanning-treeUse this command to provide spanning tree debugging support. Precede this command with no to disable

480 Layer 3 commandsNN47928-100compatible rfc1583Use this command to set OSPF compatibility list compatible with RFC 1583. Precede this command with n

Layer 3 commands 481Commands Referencedebug ip ospf Use this command to set the OSPF debug level. Precede this command with no to remove an old MD5 ke

482 Layer 3 commandsNN47928-100default-information originate alwaysUse this command to enable generation of a default external route into an OSPF rout

Layer 3 commands 483Commands Referenceip ospf authenticationUse this command to specify a password authentication type for an interface. Precede this

484 Layer 3 commandsNN47928-100ip ospf authentication-keyUse this command to specify a password for the neighboring routers that are using the OSPF si

Layer 3 commands 485Commands Referenceip ospf costUse this command to specify the cost of sending a packet on an interface. Precede this command with

486 Layer 3 commandsNN47928-100ip ospf dead-intervalUse this command to set the interval at which hello packets must not be seen before neighbors decl

Layer 3 commands 487Commands Referenceip ospf demand-circuitUse this command to configure the OSPF to treat the interface as an OSPF demand circuit. P

488 Layer 3 commandsNN47928-100ip ospf hello-intervalUse this command to specify the interval between hello packets sent on the interface. Precede thi

Layer 3 commands 489Commands Referenceip ospf message-digest-keyUse this command to enable OSPF MD5 authentication. Precede this command with no to re

Layer 2 commands 49Commands ReferenceDefaultsDebugging is disabled Related commandsshow spanning-tree—summary, blockedports, pathcostsem-variables Spe

490 Layer 3 commandsNN47928-100ip ospf networkUse this command to configure the OSPF network type to a type other than the default for a given media.

Layer 3 commands 491Commands Referenceip ospf priorityUse this command to configure the router priority. Precede this command with no to set default v

492 Layer 3 commandsNN47928-100ip ospf retransmit-intervalUse this command to specify the time between Link State Advertisement (LSA) retransmissions

Layer 3 commands 493Commands Referenceip ospf transmit-delayUse this command to configure the estimated time it takes to transmit a link state update

494 Layer 3 commandsNN47928-100neighborUse this command to specify a neighbor router and its priority. Precede this command with no to remove the neig

Layer 3 commands 495Commands ReferencenetworkUse this command to define the interfaces on which OSPF runs and the area ID for those interfaces. Preced

496 Layer 3 commandsNN47928-100passive-interface defaultUse this command to suppress routing updates on all interfaces. Precede this command with no t

Layer 3 commands 497Commands Referencepassive-interface vlanUse this command to suppress routing updates on an interface. Precede this command with no

498 Layer 3 commandsNN47928-100redistributeUse this command to configure the protocol from which the routes have to be redistributed into OSPF . Prece

Layer 3 commands 499Commands Referenceredist-configUse this command to configure the information to be applied to routes learned from RTM. Precede thi

Contents 5Commands Referenceset nas-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

50 Layer 2 commandsNN47928-100instanceUse this command to map virtual local area networks (VLAN) to a multiple spanning tree (MST) instance. Precede t

500 Layer 3 commandsNN47928-100router-idUse this command to set the router-id for the OSPF process. Command modeRouter configurationSyntaxrouter-id &l

Layer 3 commands 501Commands Referencerouter ospfUse this command to enable the OSPF routing process. Precede this command with no to disable the OSPF

502 Layer 3 commandsNN47928-100set nssa asbr-default-route translatorUse this command to enable or disable setting of P bit in the default Type-7 LSA

Layer 3 commands 503Commands Referenceshow ip ospf Use this command to display general information about the OSPF routing process.Command modePrivileg

504 Layer 3 commandsNN47928-100show ip ospf border-routersUse this command to display OSPF border and boundary router information.Command modePrivileg

Layer 3 commands 505Commands Referenceshow ip ospf—databaseUse this command to display OSPF database summary for the LSA type.Command modePrivileged E

506 Layer 3 commandsNN47928-100show ip ospf—database summaryUse this command to display OSPF LSA database summary.Command modePrivileged EXEC or User

Layer 3 commands 507Commands Referenceshow ip ospf interfaceUse this command to display OSPF interface information.Command modePrivileged EXEC or User

508 Layer 3 commandsNN47928-100show ip ospf neighborUse this command to display OSPF neighbor information list.Command modePrivileged EXEC or User EXE

Layer 3 commands 509Commands Referenceshow ip ospf request-listUse this command to display link state request list information.Command modePrivileged

Layer 2 commands 51Commands ReferencenameUse this command to set the configuration name for the MST region. Precede this command with no to delete the

510 Layer 3 commandsNN47928-100show ip ospf retransmission-listUse this command to display OSPF link state retransmission list information.Command mod

Layer 3 commands 511Commands Referenceshow ip ospf routeUse this command to display routes learned by OSPF process.Command modePrivileged EXEC or User

512 Layer 3 commandsNN47928-100show ip ospf—summary addressUse this command to display OSPF summary-address redistribution information.Command modePri

Layer 3 commands 513Commands Referenceshow ip ospf virtual-linksUse this command to display OSPF virtual link information.Command modePrivileged EXEC

514 Layer 3 commandsNN47928-100summary-addressUse this command to create aggregate addresses for OSPF. Precede this command with no to delete the exte

Layer 3 commands 515Commands ReferenceDefaultsRelated commandsarea—rangeip ospf authentication-keyip ospf message-digest-keyshow ip ospf—database summ

516 Layer 3 commandsNN47928-100Session Initiation Protocol commandsThe Session Initiation Protocol (SIP) module will be deployed in CAS. SIP module is

Layer 3 commands 517Commands Reference• set sipserver ServerHeader (page 549)• set sipserver SIP Message Dumps (page 550)• set sipserver TFTPServerAdd

518 Layer 3 commandsNN47928-100add dialplanUse this command to upload a new dialplan.Command modeSIP configurationSyntaxadd dialplan <dialplanname&

Layer 3 commands 519Commands Referenceadd sipserver MaximumSimWANCallsAllowedUse this command to configure the maximum simultaneous calls allowed on e

52 Layer 2 commandsNN47928-100revisionUse this command to set the configuration revision number for the MST region. Precede this command with no to de

520 Layer 3 commandsNN47928-100add subscriberUse this command to add subscriber details.Command modeSIP ConfigurationSyntaxadd subscriber <user-nam

Layer 3 commands 521Commands ReferencebsgUse this command to enter the BSG configuration mode.Command modeSIP ConfigurationSyntaxbsg

522 Layer 3 commandsNN47928-100CDR ModeUse this command to enter the CDR configuration mode.Command modeSIP ConfigurationSyntaxcdr

Layer 3 commands 523Commands Referencedelete dialplanUse this command to delete a dialplan.Command modeSIP ConfigurationSyntaxdelete dialplan <dial

524 Layer 3 commandsNN47928-100delete sipserver MaximumSimWANCallsAllowedUse this command to delete the configured value of maximum calls allowed on e

Layer 3 commands 525Commands Referencedelete subscriberUse this command to delete the subscriber details.Command modeSIP configurationSyntaxdelete sub

526 Layer 3 commandsNN47928-100dialplanUse this command to enter the dialplan configuration mode.Command modeSIP configurationSyntaxdialplan

Layer 3 commands 527Commands ReferencedomainUse this command to enter the domain configuration mode.Command modeSIP configurationSyntaxdomain

528 Layer 3 commandsNN47928-100protocolheaderUse this command to enter the protocolheader configuration mode.Command modeSIP configurationSyntaxprotoc

Layer 3 commands 529Commands ReferenceproxypolicyUse this command to enter the proxypolicy configuration mode.Command modeSIP configurationSyntaxproxy

Layer 2 commands 53Commands Referenceshow spanning-tree bridgeUse this command to display spanning tree information.Command modePrivileged EXEC or Use

530 Layer 3 commandsNN47928-100registrationUse this command to enter the registration configuration mode.Command modeSIP configurationSyntaxregistrati

Layer 3 commands 531Commands Referencereload dialplanUse this command to reload a dialplan from Data Base (DB).Command modeSIP configurationSyntaxrelo

532 Layer 3 commandsNN47928-100set sipserverUse this command to configure the ports on which the SIP server accepts requests.Command modeSIP transport

Layer 3 commands 533Commands Referenceset sipserver BackupModeGlobalDialPlanNameUse this command to configure the name of the global dialplan used in

534 Layer 3 commandsNN47928-100set sipserver—Brief / Detailed TracesUse this command to configure whether all the SIP messages processed by the SIP se

Layer 3 commands 535Commands Referenceset sipserver CDRDirectoryPathUse this command to configure the directory for storing old CDR in a remote host.C

536 Layer 3 commandsNN47928-100set sipserver CDRGenerationUse this command to configures the property for the SIP server.Command modeSIP CDR configura

Layer 3 commands 537Commands Referenceset sipserver DNSLookupTimeOutThis command configures the DNSLookupTimeOut in milliseconds after which DNS looku

538 Layer 3 commandsNN47928-100set sipserver domain nameUse this command to configure the domain name of the SIP server.Command modeSIP domain name co

Layer 3 commands 539Commands Referenceset sipserver Dynamic SubscriberUse this command to enable or disable the dynamic subscriber addition or deletio

54 Layer 2 commandsNN47928-100show spanning-tree—detail, activeUse this command to display spanning tree information.Command modePrivileged and User E

540 Layer 3 commandsNN47928-100set sipserver EnableSessionTimerRangeValidationsUse this command to configure the property EnableSessionTimerRangeValid

Layer 3 commands 541Commands Referenceset sipserver ForkingPolicyUse this command to configure the mode of forking in the proxy server.Command modeSIP

542 Layer 3 commandsNN47928-100set sipserver –max/min/default timersThis command configures the session timers supported by proxy.Command modeSIP Time

Layer 3 commands 543Commands Referenceset sipserver - MaximumRegistrationPeriodUse this command to configure properties of the SIP server like Maximum

544 Layer 3 commandsNN47928-100set sipserver MaximumSimWANCallsAllowedUse this command to configure the maximum simultaneous calls allowed on each WAN

Layer 3 commands 545Commands Referenceset sipserver MinimumRegistrationPeriodUse this command to configure the minimum registration period (MRP) of SI

546 Layer 3 commandsNN47928-100set sipserver NormalModeGlobalDialPlanNameThis command configures the name of the global dialplan.Command modeSIP Dialp

Layer 3 commands 547Commands Referenceset sipserver OrganizationHeaderThis command configures the organization name. Insert this name as organization

548 Layer 3 commandsNN47928-100set sipserver PolledServersThis command configures the carrier network or SIP servers to be polled.Command modeSIP Doma

Layer 3 commands 549Commands Referenceset sipserver ServerHeaderUse this command to specify the string to be used in the server header in responses ge

Layer 2 commands 55Commands Referenceshow spanning-tree interfaceUse this command to display spanning tree information.Command modePrivileged and User

550 Layer 3 commandsNN47928-100set sipserver SIP Message DumpsUse this command to configure whether all the SIP messages processed by the SIP server m

Layer 3 commands 551Commands Referenceset sipserver TFTPServerAddressUse this command to configures the host where TFTP server is running to store old

552 Layer 3 commandsNN47928-100set sipserver - timerUse this command to configures different timers of the SIP server.Command modeSIP timer configurat

Layer 3 commands 553Commands Referenceshow sipserver subscriber details

554 Layer 3 commandsNN47928-100show sipserver ActiveWANCallCountUse this command to display the total active WAN call count. Command modePrivileged EX

Layer 3 commands 555Commands Referenceshow sipserver CDRDirectoryPathUse this command to display the configuration properties of CDR directory path.Co

556 Layer 3 commandsNN47928-100show sipserver CDRGenerationUse this command to display the configuration properties of CDR generation.Command modePriv

Layer 3 commands 557Commands Referenceshow sipserver dialplanUse this command to display the dialplan configuration.Command modePrivileged EXEC or Use

558 Layer 3 commandsNN47928-100show sipserver DynamicSubscriberUse this command to display the configuration properties of the dynamic subscriber.Comm

Layer 3 commands 559Commands Referenceshow sipserver NormalModeGlobalDialPlanNameUse this command to display the name of the global dialplan.Command m

56 Layer 2 commandsNN47928-100show spanning-tree—summary, blockedports, pathcost Use this command to display spanning tree information. This command h

560 Layer 3 commandsNN47928-100show sipserver OrganizationHeaderUse this command to display the configuration properties for scope server information.

Layer 3 commands 561Commands Referenceshow sipserver - PortUse this command to display ports on which SIP server accepts requests.Command modePrivileg

562 Layer 3 commandsNN47928-100show sipserver - RegistrationUse this command to display the configuration properties for scope registrar.Command modeP

Layer 3 commands 563Commands Referenceshow sipserver –scope bsgUse this command to display the configuration properties for scope BSG.Command modePriv

564 Layer 3 commandsNN47928-100show sipserver serverdomainnameUse this command to display the domain name of the SIP server.Command modePrivileged EXE

Layer 3 commands 565Commands Referenceshow sipserver – Session TimerUse this command to display the configuration properties for scope TransactionStat

566 Layer 3 commandsNN47928-100show sipserver statusUse this command to display the status of the CCLI server or the SIP server.Command modePrivileged

Layer 3 commands 567Commands Referenceshow sipserver subscriber detailsUse this command to display the subscriber details.Command modePrivileged EXEC

568 Layer 3 commandsNN47928-100show sipserver TFTPServerAddressUse this command to display the configuration properties of the TFTP server.Command mod

Layer 3 commands 569Commands Referenceshow sipserver - TimerUse this command to display the configuration properties for scope stack component.Command

Layer 2 commands 57Commands Referenceshow spanning-tree mst—CIST or specified mst Instance Use this command to display multiple spanning tree informat

570 Layer 3 commandsNN47928-100show sipserver - TracesUse this command to display the configuration properties for scope diagnostics.Command modePrivi

Layer 3 commands 571Commands ReferencesipThis command enters the SIP configuration mode.Command modeGlobal configurationSyntaxsip

572 Layer 3 commandsNN47928-100sip – enable/disableUse this command to enable or to disable the SIP server.Command modeSIP configurationSyntaxsip {ena

Layer 3 commands 573Commands ReferencetimerUse this command to enter the timer configuration mode.Command modeSIP configurationSyntaxtimer

574 Layer 3 commandsNN47928-100trace sipUse this command to configure the SIP trace.Command modePrivileged EXEC or User EXECSyntaxtrace sip {on|off}Va

Layer 3 commands 575Commands ReferencetracesUse this command to enter the trace error configuration mode.Command modeSIP configurationSyntaxtraces

576 Layer 3 commandsNN47928-100transportUse this command to enter the transport configuration mode.Command modeSIP ConfigurationSyntaxtransport

Layer 3 commands 577Commands Referenceupdate subscriberUse this command to modify the subscriber details.Command modeSIP ConfigurationSyntaxupdate sub

578 Layer 3 commandsNN47928-100Linux tunnel commandsThe linux tunnel module creates a tunnel interface in the linux kernel. Use the linux kernel for i

Layer 3 commands 579Commands Referenceclear dns—server cacheUse this command to clear the cached entries created by the earlier DNS queries.Command mo

58 Layer 2 commandsNN47928-100show spanning-tree mst configurationUse this command to display multiple spanning tree instance configuration.Command mo

580 Layer 3 commandsNN47928-100copyUse this command to send a file to the remote location.Command modePrivileged EXEC or User EXECSyntaxcopy { <Lo

Layer 3 commands 581Commands Referencecopy ftpUse this command to receive a file from the remote location.Command modePrivileged EXEC or User EXECSynt

582 Layer 3 commandsNN47928-100debug linuxtunUse this command to enable the trace messages for linuxtun-related applications. Precede this command wit

Layer 3 commands 583Commands Referencedns-server forwarderUse this command to set primary or secondary or both IP addresses for dns-forwarder. Precede

584 Layer 3 commandsNN47928-100dns-server forwarder – enable/disableUse this command to enable or disable the dns-forwarder functionality.Command mode

Layer 3 commands 585Commands Referencedns-server forwarder zoneUse this command to add a zone and add or remove the host entries. Precede the command

586 Layer 3 commandsNN47928-100set dns—server cache timeoutUse this command to set the dns cache time.Command modeGlobal configurationSyntaxset dns—se

Layer 3 commands 587Commands Referenceshow dnsUse this command to show domain name server (DNS) server and list local host entries.Command modePrivile

588 Layer 3 commandsNN47928-100show tftpUse this command to display the trivial file transfer protocol (TFTP) server IP address, current status and th

Layer 3 commands 589Commands ReferencetelnetUse this command to open a telnet session to remote host.Command modePrivileged ExecSyntaxtelnet [-l user

Layer 2 commands 59Commands Referenceshow spanning-tree mst—common internal spanning tree or specified mst instanceUse this command to display multipl

590 Layer 3 commandsNN47928-100tftp-serverThis command enables the TFTP server. Precede this command with no to disable the TFTP server.Command modeGl

Layer 3 commands 591Commands Referencetftp-server topdirUse this command to change the tftp-server directory from where the TFTP clients read or write

592 Layer 3 commandsNN47928-100

593Commands ReferenceBSG commands This section describes the commands to configure the Business Service Gateway (BSG) Command Line Interface (CLI).BSG

594 BSG commandsNN47928-100Firewall commandsFirewall is a complete security solution. It enables small to medium-sized business enterprises to securel

BSG commands 595Commands Reference• show firewall interface statistics (page 621)• show firewall logs (page 622)• show firewall stateful table (page 6

596 BSG commandsNN47928-100access-listUse this command to add an access list or rule for the WAN interface. Precede this command with no to delete an

BSG commands 597Commands Referenceclear global statisticsUse this command to clear the firewall global statistics.Command modeFirewall configurationSy

598 BSG commandsNN47928-100clear interface statisticsUse this command to clear the firewall statistics for a given interface.Command modeFirewall conf

BSG commands 599Commands ReferencecommitUse this command to delete or modify stateful table entries if the rules are changed.Command modeFirewall conf

6 ContentsNN47928-100receiver mail-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138sender m

60 Layer 2 commandsNN47928-100show spanning-tree mst—port-specific configurationUse this command to display multiple spanning tree port-specific confi

600 BSG commandsNN47928-100disableUse this command to disable the firewall service.Command modeFirewall configurationSyntaxdisableRelated commandsshow

BSG commands 601Commands ReferencedmzUse this command to set the Demilitarized Zone (DMZ) host in the Local LAN. Precede this command with no to remov

602 BSG commandsNN47928-100enableUse this command to enable firewall service.Command modeFirewall configurationSyntaxenableRelated commandsshow firewa

BSG commands 603Commands Referencefilter addUse this command to add a firewall filter based on IP address range, protocol, and port.Command modeFirewa

604 BSG commandsNN47928-100firewallUse this command to enter into the firewall configuration mode.Command modeGlobal configurationSyntaxfirewall

BSG commands 605Commands ReferenceicmpUse this command to generate or suppress Internet Control Message Protocol (ICMP) message when firewall rejects

606 BSG commandsNN47928-100icmp inspectUse this command to discard ping requests arriving on the WAN interface. Precede this command with no to allow

BSG commands 607Commands Referenceip filter fragments largeUse this command to set the size of IP filter fragmentation. Precede this command with no t

608 BSG commandsNN47928-100ip inspect optionUse this command to set IP inspect option for the WAN interface. Precede this command with no to remove IP

BSG commands 609Commands Referenceip inspect tcp enableUse this command to enable examining the TCP SYN packets. Precede this command with no to disab

Layer 2 commands 61Commands Referenceshow spanning-tree rootUse this command to display spanning tree information.Command modePrivileged and User EXEC

610 BSG commandsNN47928-100ip inspect tcp half openUse this command to set the number of TCP connection requests that enters firewall module.Command m

BSG commands 611Commands Referenceip inspect tcp syn waitUse this command to set TCP SYN timeout interval in seconds.Command modeFirewall configuratio

612 BSG commandsNN47928-100ip verify reverse pathUse this command to enable IP spoof filtering mechanism. Precede this command with no to disable IP s

BSG commands 613Commands Referencenetbios filteringUse this command to enable or disable netbios filtering.Command modeFirewall configurationSyntaxnet

614 BSG commandsNN47928-100no filterUse this command to delete a filter in the firewall.Command modeFirewall configurationSyntaxno filter <filter&g

BSG commands 615Commands Referenceshow firewall access-listsUse this command to display the access lists configured in the firewall.Command modePrivil

616 BSG commandsNN47928-100show firewall configUse this command to display the current firewall configuration.Command modePrivileged EXEC or User EXEC

BSG commands 617Commands Referenceshow firewall dmz hostUse this command to display the configured DMZ hosts.Command modePrivileged EXEC or User EXECS

618 BSG commandsNN47928-100show firewall filtersUse this command to display the filters configured in the firewall.Command modePrivileged EXEC or User

BSG commands 619Commands Referenceshow firewall half open connectionsUse this command to display the Transmission Control Protocol (TCP) half open ent

62 Layer 2 commandsNN47928-100shutdown spanning-treeUse this command to shut down spanning tree operation. MSTP and RSTP are mutually exclusive and he

620 BSG commandsNN47928-100show firewall interface configUse this command to display the firewall interface configuration.Command modePrivileged EXEC

BSG commands 621Commands Referenceshow firewall interface statisticsUse this command to display interface specific statistics of the packets processed

622 BSG commandsNN47928-100show firewall logsUse this command to display the events logged by the firewall.Command modePrivileged EXEC or User EXECSyn

BSG commands 623Commands Referenceshow firewall stateful tableUse this command to display the stateful table entries.Command modePrivileged EXEC or Us

624 BSG commandsNN47928-100show firewall statsUse this command to display statistics of the packets processed by the firewall.Command modePrivileged E

BSG commands 625Commands Referenceshow url filtersUse this command to display the list of URL filters.Command modePrivileged EXEC or User EXECSyntaxsh

626 BSG commandsNN47928-100trap thresholdUse this command to configure the global threshold, the maximum packet discard count. The SNMP manager receiv

BSG commands 627Commands Referenceuntrusted portUse this command to configure the interface type as untrusted to apply firewall on this interface.Comm

628 BSG commandsNN47928-100url filter addUse this command to add a URL filter to the existing list of URL filters in the firewall.Command modeFirewall

BSG commands 629Commands Referenceurl filter deleteUse this command to delete an URL filter from the existing list of URL filters in the firewall.Comm

Layer 2 commands 63Commands Referencespanning-treeUse this command to enable the spanning tree operation. Precede this command with no to disable the

630 BSG commandsNN47928-100url filteringUse this command to enable or disable URL filtering for addition or deletion of URL filters.Command modeFirewa

BSG commands 631Commands ReferencePoint-to-Point Protocol commandsThe Point-to-Point Protocol (PPP) interface provides a point-to-point link between t

632 BSG commandsNN47928-100debug pppUse this command to set the debug level for tracing PPP module.Command modePrivileged EXECSyntaxdebug ppp { all |

BSG commands 633Commands Referencekeep-alive timeoutUse this command to set the keep-alive timeout value for a PPP link. The keep-alive timeout value

634 BSG commandsNN47928-100layerUse this command to attach a virtual PPP link to a physical ethernet, serial or PVC interface. Precede this command wi

BSG commands 635Commands Referencemultilink-groupUse this command to enable the multilink capability on a PPP link and to add it to the specified mult

636 BSG commandsNN47928-100peerUse this command to configure the peer IP address or DNS name offers during negotiation. Precede this command with no t

BSG commands 637Commands Referenceppp authenticate usernameUse this command to allow an authentication to a specified user at the called side. Precede

638 BSG commandsNN47928-100ppp chap hostnameUse this command to set the hostname sent in the CHAP challenge packets.Command modePPP interface configur

BSG commands 639Commands Referenceppp usernameUse this command to get login details (username and password) at the calling side. Precede the command w

64 Layer 2 commandsNN47928-100spanning-tree priorityUse this command to set the bridge priority for the spanning tree in steps of 4096. Precede this c

640 BSG commandsNN47928-100uplink rate limitUse this command to configure the output channel rate.Command modeGlobal configurationSyntaxuplink rate li

BSG commands 641Commands ReferenceSimple Network Time Protocol commandsThe Simple Network Time Protocol (SNTP) module synchronizes the time and date i

642 BSG commandsNN47928-100clock summer-time recurringUse this command to enable Daylight Saving Time (DST). Precede this command with no to disable t

BSG commands 643Commands Referenceshow sntp clockUse this command to display the current time.Command modePrivileged EXEC or User EXECSyntaxshow sntp

644 BSG commandsNN47928-100show sntp statusUse this command to display SNTP status (Running or Not Running), SNTP server's IP Address, SNTP authe

BSG commands 645Commands ReferencesntpUse this command to enter SNTP configuration mode.Command modeGlobal configurationSyntaxsntp Related commandssho

646 BSG commandsNN47928-100sntp authentication-keyUse this command to set the authentication parameters. Precede this command with no to disable authe

BSG commands 647Commands Referencesntp—enable/disableUse this command to start or stop the SNTP client.Command modeSNTP configurationSyntaxsntp {enabl

648 BSG commandsNN47928-100sntp no time zoneUse this command to reset system time zone to GMT. It resets the time zone difference to + 00:00 (Forward

BSG commands 649Commands Referencesntp serverUse this command to specify the IP address of the SNTP server.Command modeSNTP configurationSyntaxsntp se

Layer 2 commands 65Commands Referencespanning-tree compatibilityUse this command to set the compatibility version for the spanning tree protocol. Prec

650 BSG commandsNN47928-100sntp set poll-intervalUse this command to set the poll interval value in seconds.Command modeSNTP configurationSyntaxsntp s

BSG commands 651Commands Referencesntp time zoneUse this command to set the system time zone with respect to Greenwich Mean Time (GMT).Command modeSNT

652 BSG commandsNN47928-100Network Address Translation commandsNetwork Address Translation (NAT) provides a mechanism for a privately addressed networ

BSG commands 653Commands Referencedebug natUse this command to set the NAT module trace level. Precede this command with no to reset the NAT module tr

654 BSG commandsNN47928-100disable virtual serverUse this command to disable the virtual server configuration.Command modeInterface configurationSynta

BSG commands 655Commands Referenceenable virtual serverUse this command to enable the virtual server configuration.Command modeInterface configuration

656 BSG commandsNN47928-100interface natUse this command to enable or disable interface NAT status.Command modeInterface configurationSyntaxinterface

BSG commands 657Commands Referenceip natUse this command to enable NAT. Precede this command with no to disable NAT.Command modeGlobal configurationSy

658 BSG commandsNN47928-100ip nat poolUse this command to add global address pools. Precede this command with no to delete global address pools.Comman

BSG commands 659Commands Referenceip nat—timeoutUse this command to configure the Network Address Translation (NAT) value.Command modeGlobal configura

66 Layer 2 commandsNN47928-100spanning-tree modeUse this command to set the spanning tree operating mode. When BSG boots up, spanning tree is enabled

660 BSG commandsNN47928-100no virtual serverUse this command to delete the virtual server configuration. WAN interface must be created before the exec

BSG commands 661Commands ReferenceportrangeUse this command to configure the port forwarding range. Precede this command with no to delete the port fo

662 BSG commandsNN47928-100port triggerUse this command to configure port trigger for outbound and inbound application. Precede this command with no t

BSG commands 663Commands Referenceshow ip natUse this command to display various NAT tables.Command modePrivileged EXEC or User EXECSyntaxshow ip nat

664 BSG commandsNN47928-100show ip nat interfaceUse this command to display NAT interface configuration.Command modePrivileged EXEC or User EXECSyntax

BSG commands 665Commands Referenceshow nat configUse this command to display NAT configuration.Command modePrivileged EXEC or User EXECSyntaxshow nat

666 BSG commandsNN47928-100show portrangeUse this command to display the port range configuration.Command modePrivileged EXEC or User EXECSyntaxshow p

BSG commands 667Commands Referenceshow port triggerUse this command to display the port trigger configurations.Command modePrivileged EXEC or User EXE

668 BSG commandsNN47928-100show port trigger reserved listUse this command to display the port trigger reserved list.Command modePrivileged EXEC or Us

BSG commands 669Commands Referenceshow virtual serversUse this command to display the current virtual server configurations.Command modePrivileged EXE

Layer 2 commands 67Commands Referencespanning-tree auto-edgeUse this command to enable automatic detection of a bridge attached to an interface. Prece

670 BSG commandsNN47928-100static natUse this command to add a static mapping between local and global address on the specified interface. Precede thi

BSG commands 671Commands Referencevirtual serverUse this command to configure a virtual server. Precede this command with no to delete the virtual ser

672 BSG commandsNN47928-100Virtual private network policy commands The Virtual Private Network (VPN) policy commands are used to configure remote acce

BSG commands 673Commands Referenceaccess listThis command specifies the source and destination IP address to which the policy is applied with the type

674 BSG commandsNN47928-100clear vpn logsThis command clears the log file contents of the VPN subsystem.Command modePrivileged/User ExecSyntaxclear vp

BSG commands 675Commands Referencecrypto ipsec modeUse this command to configure the IPSEC mode.Command modeCrypto Map ConfigurationSyntaxcrypto ipsec

676 BSG commandsNN47928-100crypto key modeUse this command to specify the type of VPN used.Command modeCrypto Map ConfigurationSyntaxcrypto key mode {

BSG commands 677Commands Referencecrypto mapThis command creates a new crypto map which will define the VPN policy to be negotiated for SA creation. C

678 BSG commandsNN47928-100crypto map - InterfaceThis command applies the crypto policy to the specified interface. Precede this command with no to di

BSG commands 679Commands Referencecrypto map ipsecUse this command to specify the IKE Phase II Proposal with encryption and authenitication algorithm,

68 Layer 2 commandsNN47928-100spanning-tree mst configurationUse this command to enter the MST configuration mode. In the MST mode, the switch support

680 BSG commandsNN47928-100ip ra-vpn poolUse this command to configure the IP address pool for assigning IP addresses for remote users. Precede this c

BSG commands 681Commands Referenceisakmp peer identityUse this command to configure the peer identity type and its value to be used in IKE Phase 1. It

682 BSG commandsNN47928-100isakmp policy encryptionUse this command to specify the IKE Phase I proposal with encryption and authenitication algorithm,

BSG commands 683Commands Referencera-vpn usernameUse this command configures usernames and password to identify remote access users to the device and

684 BSG commandsNN47928-100set local identityThis command configures the local identity type and its value to be used in IKE Phase 1. It can be IP add

BSG commands 685Commands Referenceset peerUse this command to set the destination address in the packet during authentication and encryption of outbou

686 BSG commandsNN47928-100set session key This command specifies the mode of VPN along with the authentication and encryption algorithm with inbound

BSG commands 687Commands Referenceset vpnThis command enables or disables the VPN module for encryption and decryption of the flows.Command modeGlobal

688 BSG commandsNN47928-100show crypto mapUse this command to display the crypto policy parameters of the specified interface.Command modePrivileged E

BSG commands 689Commands Referenceshow ra-vpn usersUse this command to display the user information configured to do remote access.Command modePrivile

Layer 2 commands 69Commands Referencespanning-tree mst hello-timeUse this command to set the port-based hello timer value. Precede this command with n

690 BSG commandsNN47928-100show ra-vpn address-poolUse this command to display the IP address pool assigned for remote users.Command modePrivileged EX

BSG commands 691Commands Referenceshow vpn configThis command displays the global VPN settings.Command modePrivileged EXEC orUser EXECSyntaxshow vpn c

692 BSG commandsNN47928-100show vpn global statisticsUse this command to display the in, out, secured and dropped packet in the VPN module.Command mod

BSG commands 693Commands Referenceshow vpn IKE statisticsUse this command to display the IKE and IPSec Security Associations (SA) statistics.Command m

694 BSG commandsNN47928-100show vpn logsUse this command to display the last N pages of the VPN log file from the VPN processor.Command modePrivileged

BSG commands 695Commands Referenceshow vpn remote—idsUse this command to display the VPN remote identities existing in the system. For instance, you s

696 BSG commandsNN47928-100vpn remote identityUse this command to configure the remote identity information. It is a preshared key. Precede this comma

BSG commands 697Commands ReferenceDiffserv commandsDifferentiated Services (DiffServ) is an architecture for providing different types or levels of se

698 BSG commandsNN47928-100classUse this command to set the priority and Differentiated Services Code Point (DSCP) values in the classifier.Command mo

BSG commands 699Commands Referenceclass-mapUse this command to create a multi field classifier. Precede this command with no to delete the classifier

Contents 7Commands Referenceip address negotiated . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183ip htt

70 Layer 2 commandsNN47928-100spanning-tree mst max-hopsUse this command to set the maximum number of hops permitted in the MST. Precede this command

700 BSG commandsNN47928-100Related commandsshow class-mapclass

BSG commands 701Commands Referenceno policy-mapThis command deletes the policer entry.Command modeGlobal configurationSyntaxno policy-map <policer-

702 BSG commandsNN47928-100policeUse this command to create a policer entry.Command modeGlobal configurationSyntaxpolice <policer-id> [type {trt

BSG commands 703Commands Referencepolicy-mapUse this command to map a classifier entry with the appropriate policer.Command modeGlobal configurationSy

704 BSG commandsNN47928-100queue threshold Use this command to configure the RED parameters of a queue.Command modeInterface configuration Syntaxqueue

BSG commands 705Commands Referencequeue weightUse this command to configure the weight of a queue. Configure the weight to zero to make the queue to b

706 BSG commandsNN47928-100set qosUse this command to configure the control status of the Diffserv system.Command modeGlobal ConfigurationSyntaxset qo

BSG commands 707Commands Referenceset vlan traffic-classesUse this command to enable or disable traffic classes. Command modeGlobal configurationSynta

708 BSG commandsNN47928-100show class-mapUse this command to display one or more classifiers information.Command modePrivileged EXEC or User EXECSynta

BSG commands 709Commands Referenceshow policer statisticsUse this command to display one or more information of policers statistics .Command modePrivi

Layer 2 commands 71Commands Referencespanning-tree pathcost dynamicUse this command to set the maximum number of hops permitted in the MST. Precede th

710 BSG commandsNN47928-100show policy-mapUse this command to display one or more policers information.Command modePrivileged EXEC or User EXECSyntaxs

BSG commands 711Commands Referenceshow qos default dhcp-dot1p mappingUse this command to display the default mapping of DHCP to 802.1p user priorities

712 BSG commandsNN47928-100show qos statusUse this command to display the status of the QoS module.Command modePrivileged EXEC or User EXECSyntaxshow

BSG commands 713Commands Referenceshow queue statsUse this command to display the queue statistics.Command modePrivileged EXEC or User EXECSyntaxshow

714 BSG commandsNN47928-100show queuingUse this command to display one or more queue information.Command modePrivileged EXEC orUser EXECSyntaxshow que

BSG commands 715Commands Referenceshow vlan port configUse this command to display the VLAN-related parameters specific for ports.Command modePrivileg

716 BSG commandsNN47928-100show vlan traffic-classesUse this command to display the traffic classes information of all the available interfaces.Comman

BSG commands 717Commands Referenceshutdown qosUse this command to shut down Quality-of-Service (QoS) operation. Precede this command with no to start

718 BSG commandsNN47928-100switchport priority default Use this command to configure the default user priority for the port. Precede this command with

BSG commands 719Commands Referencevlan map—priorityUse this command to map a priority to a traffic class on the specified port. The frame received on

72 Layer 2 commandsNN47928-100spanning-tree path cost methodUse this command to set the method to calculate the port path cost. Precede this command w

720 BSG commandsNN47928-100vlan max-traffic-classUse this command to configure the maximum number of traffic classes supported on a port. Precede this

BSG commands 721Commands ReferenceAccess control list commandsAccess Control Lists (ACL) filters the network traffic by controlling whether routed pac

722 BSG commandsNN47928-100denyUse this command to specify the packets to reject based on the MAC address and the associated parameters.Command modeAC

BSG commands 723Commands ReferenceDefaultsRelated commandsmac access-groupmac access-list extendedpermitshow access-listsnetbios Specifies the EtherTy

724 BSG commandsNN47928-100mac access-groupUse this command to apply a MAC ACL to a Layer 2 interface. Precede this command with no to remove the MAC

BSG commands 725Commands Referencemac access-list extendedUse this command to create the Layer 2 MAC ACLs. This command creates a MAC ACL and returns

726 BSG commandsNN47928-100permitUse this command to specify the forwarded packets based on the MAC address and the associated parameters. This comman

BSG commands 727Commands ReferenceDefaultsRelated commandsmac access-groupmac access-list extendeddenynetbios Specifies the EtherType DEC-Network Basi

728 BSG commandsNN47928-100show access-listsUse this command to display the access list configuration.Command modePrivileged or user EXEC Syntaxshow a

BSG commands 729Commands ReferenceVOIP commandsVoIP subsystem is the analog to Digital Converter (Voice to Data ), so that they can be sent as IP pack

Layer 2 commands 73Commands Referencespanning-tree - Properties of an interfaceUse this command to set the spanning tree properties of an interface. P

730 BSG commandsNN47928-100• show voip codec config (page 763)• show voip config (page 764)• show voip firmware version (page 765)• show voip status (

BSG commands 731Commands Referencereboot voipUse this command to send the reboot message to VoIP subsystems.Command modeVOIP configurationSyntaxreboot

732 BSG commandsNN47928-100set country codeUse this command to set the country code for the telephone call progress and error indication tones such as

BSG commands 733Commands Referenceset default codec typeUse this command to set the default codec type, preference and frame size.Command modeVOIP con

734 BSG commandsNN47928-100set default g723 encoding rateUse this command to set the g723 default encoding rate.Command modeVOIP configurationSyntaxse

BSG commands 735Commands Referenceset default silent suppressionUse this command to enable or disable default silence suppression.Command modeVOIP con

736 BSG commandsNN47928-100set digital dial timeoutUse this command to set the digital dial timeout value.Command modeVOIP configurationSyntaxset digi

BSG commands 737Commands Referenceset dtmf relayUse this command to set the DTMF relay option. That is, it sets the options for relaying the DTMF digi

738 BSG commandsNN47928-100set dtmf rtp payloadUse this command to set the RTP payload type.Command modeVoIP configurationSyntaxset dtmf rtp payload &

BSG commands 739Commands Referenceset fxo emergency-numberUse this command to set the FXO emergency number for contact.Command modeFXO ConfigurationSy

74 Layer 2 commandsNN47928-100spanning-tree mst - Properties of an interface for MSTPUse this command to set the spanning tree properties of an interf

740 BSG commandsNN47928-100set fxo forward phone-noUse this command to set the FXO forwarding phone number.Command modeFXO ConfigurationSyntaxset fxo

BSG commands 741Commands Referenceset fxo hook detect timeUse this command to set the OnHook Detection time of the FXO Channel.Command modeFXO Configu

742 BSG commandsNN47928-100set fxo channel-numberUse this command to set the Foreign Exchange Office (FXO) channel number.Command modeFXO Configuratio

BSG commands 743Commands Referenceset fxo phone-numberUse this command to set the Foreign Exchange Office (FXO) phone number.Command modeFXO Configura

744 BSG commandsNN47928-100set fxo ring countUse this command to set the FXO maximum number for ring.Command modeFXO ConfigurationSyntaxset fxo ring c

BSG commands 745Commands Referenceset fxs call-forwardUse this command to enable or disable the call forward on different condition.Command modeFXS Co

746 BSG commandsNN47928-100set fxs call-forward numberUse this command to set the call forward number.Command modeFXS ConfigurationSyntaxset fxs call-

BSG commands 747Commands Referenceset fxs codec statusUse this command to set the channel based codec status.Command modeFXS ConfigurationSyntaxset fx

748 BSG commandsNN47928-100set fxs codec typeUse this command to set the FXS codec type, preference, and frame size.Command modeFXS ConfigurationSynta

BSG commands 749Commands Referenceset fxs display-nameUse this command to set the FXS display Name.Command modeFXS ConfigurationSyntaxset fxs display-

Layer 2 commands 75Commands Referencespanning-tree timersUse this command to set the spanning tree timers. Precede this command with no to set the spa

750 BSG commandsNN47928-100set fxs fax-optionUse this command to set the fax option for FXS.Command modeFXS ConfigurationSyntaxset fxs fax-option {dis

BSG commands 751Commands Referenceset fxs lineUse this command to set the FXS Line Status as enabled or disabled.Command modeFXS ConfigurationSyntaxse

752 BSG commandsNN47928-100set fxs mailbox numberUse this command to set the FXS mailbox number.Command modeFXS ConfigurationSyntaxset fxs mailbox num

BSG commands 753Commands Referenceset fxs mailbox passwordUse this command to set the FXS mailbox password.Command modeFXS ConfigurationSyntaxset fxs

754 BSG commandsNN47928-100set fxs ring typeUse this command to set the FXS ring type.Command modeFXS ConfigurationSyntaxset fxs ring type <integer

BSG commands 755Commands Referenceset fxs user-numberUse this command to set the FXS user number.Command modeFXS ConfigurationSyntaxset fxs user-numbe

756 BSG commandsNN47928-100set fxs user-passwordUse this command to set the FXS password for the user.Command modeFXS ConfigurationSyntaxset fxs user-

BSG commands 757Commands Referenceset gmt-offsetUse this command to set the offset from GMT for local time.Command modeVOIP ConfigurationSyntaxset gmt

758 BSG commandsNN47928-100set ip tosUse this command to enable or disable the IP TOS.Command modeVOIP configurationSyntaxset ip tos {delay | throughp

BSG commands 759Commands Referenceset ip tos precedence optionUse this command to set the IP TOS precedence option.Command modeVOIP configurationSynta

76 Layer 2 commandsNN47928-100spanning-tree transmit hold-countUse this command to set the transmit hold-count value. Precede this command with no to

760 BSG commandsNN47928-100set mailbox ipUse this command to set the voice mail server Ip address and server port.Command modeVOIP configurationSyntax

BSG commands 761Commands Referenceset pstn-gatewayUse this command to set the Public Switched Telephone Network (PSTN) line status.Command modeFXO Con

762 BSG commandsNN47928-100set voice mailboxUse this command to enable or disable the voice mail status.Command modeVOIP configurationSyntaxset voice

BSG commands 763Commands Referenceshow voip codec configUse this command to display the FXS and the Global Codec configuration.Command modePrivileged

764 BSG commandsNN47928-100show voip configUse this command to display the configurations of VoIP.Command modePrivileged EXEC or User EXECSyntaxshow v

BSG commands 765Commands Referenceshow voip firmware versionUse this command to display the firmware version.Command modePrivileged EXEC or User EXECS

766 BSG commandsNN47928-100show voip statusUse this command to display the firmware version.Command modePrivileged EXEC or User EXECSyntaxshow voip st

BSG commands 767Commands ReferenceshutdownUse this command to shutdown the admin status of the VoIP module. You can configure the FXO, FXS, and VoIP o

768 BSG commandsNN47928-100voip1000Use this command to enter the VOIP configuration mode.Command modeGlobal ConfigurationSyntaxvoip1000

BSG commands 769Commands ReferenceTechnical Report 069 commandsUse Technical Report (TR) 069 commands to configure TR 069. TR 069 is a DSL Forum techn

Layer 2 commands 77Commands ReferencePort based network access control commandsPort based Network Access Control (PNAC) is a portable implementation o

770 BSG commandsNN47928-100acs urlUse this command to configure the HTTP or HTTPS URL, user name and password of the ACS.Command modeTR 069 Syntaxacs

BSG commands 771Commands Referenceconnection requestUse this command to add the user name and password for CPE URL.Command modeTR 069 Syntaxconnection

772 BSG commandsNN47928-100periodic informUse this command to enable or disable the periodic inform interval.Command modeTR 069 Syntaxperiodic inform

BSG commands 773Commands Referenceperiodic inform intervalUse this command to configure the periodic inform interval in seconds.Command modeTR 069 Syn

774 BSG commandsNN47928-100send inform Use this command to send an inform forcibly to the ACS.Command modeTR 069 Syntaxsend inform Related Commandsacs

BSG commands 775Commands Referenceshow mgmt server config Use this command to display the CPE Management Server configuration.Command modePrivileged o

776 BSG commandsNN47928-100show tr69 status Use this command to display the CPE status.Command modePrivileged or User EXEC Syntaxshow tr69 status

BSG commands 777Commands Referencetr69 Use this command to enter the tr69 mode.Command modeTr-69Syntaxtr69

778 BSG commandsNN47928-100

779Commands ReferenceWireless commands This section describes the commands that helps you to configure the wireless command line interface (CLI). Wire

78 Layer 2 commandsNN47928-100aaa authentication dot1x defaultUse this command to enable the dot1x local authentication or Remote Authentication Dial

780 Wireless commandsNN47928-100Wireless local area network commandsThe Wireless Local Area Network (WLAN) module controls the configuration of the wi

Wireless commands 781Commands Reference• debug wlan (page 813)• no wlan static-wep-key encryption (page 814) • show AP status (page 815) • show client

782 Wireless commandsNN47928-100config ap countryUse this command to set the country code.Command modeGlobal configurationSyntaxconfig ap country <

Wireless commands 783Commands Referenceconfig dot11—network Use this command to enable or disable the radios.Command modeRadio configurationSyntaxconf

784 Wireless commandsNN47928-100config dot11 beaconperiodUse this command to configure the beaconperiod for radios.Command modeRadio configurationSynt

Wireless commands 785Commands Referenceconfig dot11 channelUse this command to set the radio channel.Command modeRadio configurationSyntaxconfig dot11

786 Wireless commandsNN47928-100config dot11 dtimUse this command to configure the DTIM period for radios.Command modeRadio configurationSyntaxconfig

Wireless commands 787Commands Referenceconfig dot11 fragmentationUse this command to configure the fragmentation threshold for radios.Command modeRadi

788 Wireless commandsNN47928-100config dot11 modeUse this command to set the radio mode.Command modeRadio configurationSyntaxconfig dot11 mode {b | g

Wireless commands 789Commands Referenceconfig dot11 preambleUse this command to set the preamble parameter.Command modeRadio configurationSyntaxconfig

Layer 2 commands 79Commands Referencedebug dot1xUse this command to enable debugging of the dot1x module. Precede this command with no to disable debu

790 Wireless commandsNN47928-100config dot11 profile clientsUse this command to set the maximum clients.Command modeRadio configurationSyntaxconfig do

Wireless commands 791Commands Referenceconfig dot11 protectionUse this command to set the protection method.Command modeRadio configurationSyntaxconfi

792 Wireless commandsNN47928-100config dot11 rts-thresholdUse this command to set the rts-threshold of the radios.Command modeRadio configurationSynta

Wireless commands 793Commands Referenceconfig dot11 supported ratesUse this command to set the supported wireless speed.Command modeRadio configuratio

794 Wireless commandsNN47928-100config dot11 turboUse this command to set the turbo mode.Command modeRadio configurationSyntaxconfig dot11 turbo {stat

Wireless commands 795Commands Referenceconfig dot11 txpowerUse this command to set the power levels.Command modeRadio configurationSyntaxconfig dot11

796 Wireless commandsNN47928-100config dot11 wmmUse this command to set the status of Wireless MultiMedia (WMM).Command modeRadio configurationSyntaxc

Wireless commands 797Commands Referenceconfig dot11 wmm-acknowledge-policyUse this command to set the acknowledge policy for each number.Command modeR

798 Wireless commandsNN47928-100config dot11 wmmparamUse this command to set the WMM parameters.Command modeRadio configurationSyntaxconfig dot11 wmmp

Wireless commands 799Commands Referenceconfig macfilter Use this command to add or delete the MAC filter table entry.Command modeGlobal configurationS

8 ContentsNN47928-100power inline priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226set poe

80 Layer 2 commandsNN47928-100dot1x access-controlUse this command to configure the supplicant access control. Precede this command with no to set the

800 Wireless commandsNN47928-100config wlanUse this command to enable or disable WLAN. Command modeGlobal configurationSyntaxconfig wlan { enable | di

Wireless commands 801Commands Referenceconfig wlan broadcast-ssidUse this command to configure broadcast SSID status.Command modeGlobal configurationS

802 Wireless commandsNN47928-100config wlan createUse this command to create a BSG with WLAN ID and Service Set Identifier (SSID).Command modeGlobal c

Wireless commands 803Commands Referenceconfig wlan deleteUse this command to delete a BSG for the specified WLAN ID.Command modeGlobal configurationSy

804 Wireless commandsNN47928-100config wlan interfaceUse this command to configure the VLAN ID for the specified WLAN ID.Command modeGlobal configurat

Wireless commands 805Commands Referenceconfig wlan mac-filteringUse this command to configure the WLAN MAC filtering.Command modeGlobal configurationS

806 Wireless commandsNN47928-100config wlan pmksa timeoutUse this command to the Pairwise Master Key Security Association (PMKSA) timeout value.Comman

Wireless commands 807Commands Referenceconfig wlan security auth-typeUse this command to set the authentication type.Command modeGlobal configurationS

808 Wireless commandsNN47928-100config wlan security cipher-suiteUse this command to configure the encryption cipher suite.Command modeGlobal configur

Wireless commands 809Commands Referenceconfig wlan security preauthUse this command to enable or disable 802.11i preauthentication.Command modeGlobal

Layer 2 commands 81Commands Referencedot1x control-directionUse this command to configure port control direction. Precede this command with no to set

810 Wireless commandsNN47928-100config wlan security pre-shared-keyUse this command to provide options to enter the PSK.Command modeGlobal configurati

Wireless commands 811Commands Referenceconfig wlan security static-wep-key encryptionUse this command to configure static WEP keys and indexes.Command

812 Wireless commandsNN47928-100config wlan wep default-keyUse this command to configure the WEP default key index of the particular SSID.Command mode

Wireless commands 813Commands Referencedebug wlanUse this command to display current trace or add new trace. Precede this command with no to remove th

814 Wireless commandsNN47928-100no wlan static-wep-key encryptionUse this command to remove the static WEP keys. Precede this command with no to remov

Wireless commands 815Commands Referenceshow AP statusUse this command to display the AP Status.Command modePrivileged EXEC or User EXECSyntaxshow ap s

816 Wireless commandsNN47928-100show client ap globalUse this command to display information about stations.Command modePrivileged EXEC or User EXECSy

Wireless commands 817Commands Referenceshow dot11Use this command to display all or specific 802.11 configurations.Command modePrivileged EXEC or User

818 Wireless commandsNN47928-100show mac-filter-infoUse this command to display the MAC filter table.Command modePrivileged EXEC or User EXECSyntaxsho

Wireless commands 819Commands Referenceshow wep default-key-infoUse this command to display WEP default key table per SSID.Command modePrivileged EXEC

82 Layer 2 commandsNN47928-100dot1x defaultUse this command to configure dot1x with default values for this port. Command modeInterface configurationS

820 Wireless commandsNN47928-100show wlanUse this command to display the information of all or a particular BSG.Command modePrivileged EXEC or User EX

Wireless commands 821Commands ReferenceDigital Subscriber Line commandsThe Digital Subscriber Line (DSL) module controls the configuration and control

822 Wireless commandsNN47928-100dsl operating-modeUse this command to set the operating mode of the DSL modem.Command modeDSL interface configuration

Wireless commands 823Commands ReferenceencapsulationUse this command to set the protocol encapsulation.Command modePVC interface configurationSyntaxen

824 Wireless commandsNN47928-100qos setUse this command to set the QOS parameters for the DSL modem. (CBR = 0, VBR = 1, or UBR = 2).Command modePVC in

Wireless commands 825Commands Referenceshow dsl interfaceUse this command to displays the DSL interface configuration.Command modePrivileged EXEC/User

826 Wireless commandsNN47928-100show dsl interface pvcUse this command to configure PVC.Command modePrivileged EXEC or User EXEC Syntaxshow dsl interf

Wireless commands 827Commands Referenceshow dsl trafficUse this command to display the DSL Statistics.Command modePrivileged EXEC or User EXEC Syntaxs

828 Wireless commandsNN47928-100traffic parameters setUse this command to set the traffic parameters of the DSL modem.Command modePVC interface config

Wireless commands 829Commands Referencevpi valueUse this command to configure the Virtual Path Identifier (VPI) value. The VPI and Virtual Channel Ide

Layer 2 commands 83Commands Referencedot1x init-sessionUse this command to initiate dot1x authentication session.Command modeGlobal configuration mode

830 Wireless commandsNN47928-100vci valueUse this command to configure the Virtual Channel Identifier (VCI) value.Command modePVC interface configurat

Wireless commands 831Commands ReferenceT1/E1 commandsT1/E1 is a digital WAN carrier facility. T1 transmits DS-1 formatted data at 1.544 Mbps and E1 tr

832 Wireless commandsNN47928-100cablelength longUse this command to set the Line Build Out of the T1 to various values. Precede the command with no to

Wireless commands 833Commands Referencecablelength shortUse this command to set the Line Length for the T1-DSU line. This command is for the BSG12 pla

834 Wireless commandsNN47928-100channel-groupUse this command to define the time slots that belongs to each group on the T1 or E1 circuit. Precede thi

Wireless commands 835Commands Referenceclear controllerUse this command to reset the T1 or E1 controller to default mode (T1). This command deletes al

836 Wireless commandsNN47928-100clear controller statistics tableUse this command to clear the statistics table for the T1/E1 link.Command modeT1/E1 c

Wireless commands 837Commands Referenceclock sourceUse this command to select the clock source for the Time Division Multiplexing (TDM). Precede this

838 Wireless commandsNN47928-100controllerUse this command to configure a T1 or E1 controller and enter T1/E1 controller configuration mode.Command mo

Wireless commands 839Commands Referencecontroller modeUse this command to configure a T1 or E1 controller as T1 or E1 mode.Command modeGlobal configur

84 Layer 2 commandsNN47928-100dot1x init-session-reauthUse this command to initiate the dot1x reauthentication session.Command modeGlobal configuratio

840 Wireless commandsNN47928-100debug t1e1Use this command to enable debug option for the T1/E1 module. Precede this command with no to disable the de

Wireless commands 841Commands Referencedump t1e1 sib-counterUse this command to display the LLP SIB counter statistics.Command modePrivileged EXEC or

842 Wireless commandsNN47928-100framingUse this command to select the frame type for the T1 or E1 data line.Command modeT1/E1 configurationSyntaxframi

Wireless commands 843Commands ReferencelinecodeUse this command to select the line code type for the T1 or E1 line.Command modeT1/E1 configurationSynt

844 Wireless commandsNN47928-100line status change trapUse this command to set the trap state for the line status change for the T1/E1 link. Command m

Wireless commands 845Commands ReferenceloopbackUse this command to loop an entire T1/E1 line (including all channel groups defined on the controller)

846 Wireless commandsNN47928-100modeUse this command to set the T1 Line Mode to either CSU (Long Haul) or DSU (Short Haul).Command modeT1/E1 configura

Wireless commands 847Commands ReferencesendcodeUse this command to select the data pattern to send on the T1/E1 line. Precede the command with no to d

848 Wireless commandsNN47928-100show controllersUse this command to display T1/E1 controller configurations for the T1/E1 link.Command modePrivileged

Wireless commands 849Commands Referenceshow controller statistics intervalUse this command to display T1/E1 interval statistics for the T1/E1 link.Com

Layer 2 commands 85Commands Referencedot1x auth-modeUse this command to configure the port authentication mode. Precede this command with no to set th

850 Wireless commandsNN47928-100show controller statistics tableUse this command to display the T1/E1 current or total table statistics for the local-

Wireless commands 851Commands Referenceshow controllers t1e1 channel-groupsUse this command to display the channel groups present on the T1E1 controll

852 Wireless commandsNN47928-100vendoridUse this command to set the T1/E1 hardware transmission vendors circuit identifier.Command modeT1/E1 configura

Appendix A - Target based commands 853Commands ReferenceAppendix A - Target based commandsThis section describes all the target based commands. The co

854 Appendix A - Target based commandsNN47928-100negotiationUse this command to enable the auto-negotiation on the interface. Precede this command wit

Appendix A - Target based commands 855Commands Referencespeed Use this command to set the speed of the interface. Precede this command with no to set

856 Appendix A - Target based commandsNN47928-100duplexUse this command to configure the duplex operation. Precede this command with no to configure t

Appendix A - Target based commands 857Commands Referencemac-address-table aging-timeUse this command to set the maximum age of a dynamically learnt en

858 Appendix A - Target based commandsNN47928-100databitsUse this command to specify the number of databits per character for this console. Precede th

Appendix A - Target based commands 859Commands ReferenceparityUse this command to set the parity for the console connection. Precede this command with

86 Layer 2 commandsNN47928-100dot1x local-databaseUse this command to configure the dot1x authentication server database with user name and password.

860 Appendix A - Target based commandsNN47928-100speed - consoleUse this command to set the transmit and receive speeds for the serial console. Preced

Appendix A - Target based commands 861Commands ReferencestopbitsUse this command to set the number of stopbits for the console connection. Precede thi

862 Appendix A - Target based commandsNN47928-100

Layer 2 commands 87Commands Referencedot1x max-reqUse this command to set the maximum number of Extensible Authentication Protocol (EAP) retries to th

88 Layer 2 commandsNN47928-100dot1x max-startUse this command to set the maximum number of EAP retries to the authenticator. Precede this command with

Layer 2 commands 89Commands Referencedot1x port-controlUse this command to configure the authenticator port control parameter. Precede this command wi

Contents 9Commands Referencegroup restricted . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271m

90 Layer 2 commandsNN47928-100dot1x re-authenticateUse this command to initiate re-authentication of all dot1x-enabled ports or the specified dot1x-en

Layer 2 commands 91Commands Referencedot1x reauthenticationUse this command to enable periodic re-authentication from authenticator to client. Precede

92 Layer 2 commandsNN47928-100dot1x system-auth-controlUse this command to enable dot1x in the switch. Precede this command with no to disable dot1x i

Layer 2 commands 93Commands Referencedot1x timeoutUse this command to set the dot1x timers. Precede this command with no to set the dot1x timers to th

94 Layer 2 commandsNN47928-100DefaultsRelated commandsdot1x defaultdot1x max-reqdot1x reauthenticationshow dot1xquiet-period 60 secondsreauth-period 3

Layer 2 commands 95Commands Referenceset nas-idUse this command to set the dot1x network access server id. Command modeGlobal configurationSyntaxset n

96 Layer 2 commandsNN47928-100show dot1xUse this command to display dot1x information.Command modePrivileged EXEC or User EXEC Syntaxshow dot1x [{inte

Layer 2 commands 97Commands Referenceshutdown dot1xUse this command to shut down dot1x capability. Precede this command with no to start and enable do

98 Layer 2 commandsNN47928-100Remote Authentication Dial-in User Service commandsRemote Authentication Dial-in User Service (RADIUS) is a client and s

Layer 2 commands 99Commands Referencedebug radiusUse this command to enable the RADIUS debugging options. Precede this command with no to disable the