This command creates a user and sets the enable password for that user with the privilege level.

The no form of the command deletes a user and disables the enable password for that user.

username <user-name> [password <passwd>] [privilege <1-15>]

no username < user-name >

<user-name> - Specifies the login user name to be created.

<passwd> - Specifies the password to be entered by the user to login to the system. The size password entered must be a minimum of 4 and maximum of 32 characters containing atleast one uppercase, one lowercase, one number and one special character.

privilege <1-15> - Applies restriction to the user for accessing the CLI commands. This values ranges between 1 and 15. For Example, a user ID configured with privilege level as four can access only the commands having privilege ID lesser than or equal to four.

This command identifies a specific line for configuration and enters the line configuration mode and allows the user to execute all the commands that supports line configuration mode.

This command won't work when accessing the Switch console via ssh.

This command will work only when accessing the Switch console via Switch console port.

This command sets a time (in seconds) for EXEC line disconnection. This value ranges between 1 and 10000 minutes.

The no form of this command resets the EXEC timeout to its default value.

exec-timeout <integer (1-10000)>

no exec-timeout

This command sends echo messages. The Ping module is built based on the ICMP echo request and ICMP echo response messages. The network administrator uses this ping on a remote device to verify its presence. Ping involves sending ICMP echo messages repeated and measuring the time between transmission and reception of message. The output displays the time taken for each packet to be transmitted, number of packets transmitted, number of packets received and packet loss percentage.

• ip - Configures the IP address of the node to be pinged.

• ip_addr - Configures the source IP address of the node to be pinged.

• string - Configures the name of the host.

• repeat | count - Configures the number of times the given node address is to be pinged.

• size - Configures the size of the data portion of the PING PDU.

This command traces route to the destination.

• <ip_addr> - Configure the destination IP address to which a route has to be traced.

• <string> - Configure the destination IP hostname to which a route has to be traced.

• [max-ttl <short (2-255)>] - Configures the maximum value of the TTL field to be filled up in the IP packets used for the trace route.

This command clears all the current interface counters from the interface unless the optional arguments type and number are

specified to clear only a specific interface type (serial, Ethernet, Token Ring, and so on).

• <interface-type> - Configures the specified type of interface.

• <interface-id> - Configures the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. For Example: 0/1 represents that the slot number is 0 and port number is 1.

This command configures the maximum transmission unit frame size for all the frames transmitted and received on all the interfaces in a Switch. The size of the jumbo frame size can be increased using this command. The value ranges between 1522 and 10240. The no form of this command sets the maximum transmission unit to the default value in all interfaces. This value defines the largest PDU that can be passed by the interface without any need for fragmentation. This value is shown to the higher interface sub-layer and should not include size of the encapsulation or header added by the interface.

This command selects the range of physical interfaces and VLAN interfaces to be configured.

The no form of the command selects the range of VLAN interfaces to be removed.

interface range ( { <interface-type> <slot/port-port>} {vlan <vlan-id(1-4094)> - <vlan-id(2-4094)>})

no interface range vlan <vlan-id(1-4094)> - <vlan-id(2-4094)>

• <interface-type> - Selects the range of the specified interface.

• <slot/port-port> - Selects the range of the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash.

• vlan <vlan-id(1-4094)> - <vlan-id(2-4094)> - Selects the range of the specified VLAN ID. This is a unique value that represents the specific VLAN created and activated. This value ranges between 1 and 4094.

This command enters the configuration mode. Configuration from memory or network is not supported when entered into the configuration mode using this command.

This command configures a static unicast MAC address in the forwarding database.

The no form of the command deletes a configured static Unicast MAC address from the forwarding database.

mac-address-table static unicast <aa:aa:aa:aa:aa:aa> vlan

<vlan-id > interface ([<interface-type> <0/a-b, 0/c, ...>] [<interface-type> <0/a-b, 0/c, ...>] [port-channel <a,b,c-d>])

no mac-address-table static unicast <aa:aa:aa:aa:aa:aa> vlan

<vlan-id >

• <aa:aa:aa:aa:aa:aa> - Configures the static unicast destination MAC address. The received packets having the specified MAC address are processed.

• vlan <vlan-id> - Configures the static unicast destination MAC address for the specified VLAN. This value ranges between 1 and 4094.

  • <vlan –id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges between 1 and 4094

• interface - Configures the member ports interface type and ID. The details to be provided are:

  • <interface-type> - Configures the member ports for the specified type of interface. The interface can be:

    • gigabitethernet - A version of LAN standard architecture that supports data transfer up to 1 Gigabit per second.

    • port-channel - Logical interface that represents an aggregator which contains several ports aggregated together.

  • <0/a-b, 0/c, ...> - Configures the member ports for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. Port-channel ID is provided, for interface type port-channel. Use comma as a separator without space while configuring list of interfaces. Example: 0/1, 0/3 or 1, 3.

This command configures the timeout period (in seconds) for aging out dynamically learned forwarding information entry and static entry in the MAC address table. That is, the entry is deleted once the aging timer expires. High value for the aging time helps to record dynamic entries for a longer time, if traffic is not frequent. This reduces the possibility of flooding.

The no form of the command resets the maximum age of an entry in the MAC address table to its default value.

mac-address-table aging-time <10-630 seconds>

no mac-address-table aging-time

This command sets the name of the Switch.

set switch-name <switchname>

This command enables the telnet service in the system. The no form of this command disables the telnet service.

ip telnet server

no ip telnet server

This command copies a file from a source remote site /flash to a destination remote site/flash. The entire copying process takes several minutes and differs from protocol to protocol and from network to network.

copy startup-config { tftp://ip-address/filename }

• tftp://ip-address/filename - Configures the TFTP details for taking back up of initial configuration in TFTP server.

  • ip-address - The IP address or host name of the server.

  • filename - The name of the file in which the initial configuration should be stored. Filenames and directory names are case sensitive

This command copies the configuration from a remote site to flash.

copy { tftp://ip-address/filename startup-config}

• tftp://ip-address/filename startup-config - Configures the address from which the file is to be copied and the file name from which configuration is to be copied. This option configures the TFTP server details Filenames and directory names are case sensitive

This command copies variables from the running configuration to the startup configuration file in NVRAM, where the running- config is the current configuration in the router and the startup config is the configuration that is loaded when the Switch boots up.

save

This command writes the system logs to a remote site.

copy logs { tftp://ip-address/filename }

• tftp://ip-address/filename startup-config - Configures the address from which the file is to be copied and the file name from which configuration is to be copied. This option configures the TFTP server details Filenames and directory names are case sensitive

This command manages the system clock.

• clock set hh:mm:ss <day (1-31)>

• {january|february|march|april|may|june|july|august|septemb er|october|november|december} <year (2000 - 2035)>

• hh:mm:ss - Sets the current time. The format is hour, minutes and seconds.

  • <day (1-31)> - Sets the current day. It ranges between 1 and 31.

  • january - Sets the month as January.

  • february - Sets the month as February

  • march - Sets the month as march

  • april - Sets the month as april

  • may - Sets the month as may

  • june - Sets the month as June

  • july - Sets the month as July

  • august - Sets the month as August

  • september - Sets the month as September

  • october - Sets the month as October

  • november - Sets the month as November

  • december - Sets the month as December

  • <year (2000 - 2035)> - Sets the year. It ranges between 2000 and 2035

This command displays the system date and time.

show clock

This command displays the maximum transmission unit frame size for all the frames transmitted and received on all the interfaces in a Switch.

show jumbo-frame

This command restarts the Switch.

reboot

This command restore default configuration.

restore-defaults

This command displays the telnet server status.

show telnet server

This command configures the speed and duplex operation.

• speed { 10 | 100 | 1000 | 10000 } duplex { full | half }

• 10 - Port runs at 10Mbps

• 100 - Port runs at 100Mbps

• 1000 - Port runs at 1000Mbps

• 10000 - Port runs at 10000Mbps

• full - Port is in full-duplex mode, that is data simultaneously communicates in both directions.

• half - Port is in half-duplex mode, that is data can communicate in both directions, but only in one direction at a time.

This command enables auto-negotiation on the interface.

The no form of the command disables auto-negotiation on the interface.

The port in which auto-negotiation is enabled, negotiates with the other end for port properties like speed, duplexity and so one. The normal port uses the port property values configured by the administrator.

negotiation

no negotiation

This command set the status of the traffic to be allowed in these configured egress ports when the ingress is this interface.

port-isolation {enable|disable}

• enabled - Enables the Port Isolation rule in this ingress interface.
• disabled - Disables the Port Isolation rule in this ingress interface.

This command displays the Port Isolation table.

show port-isolation status

This command sets the system time zone with respect to UTC.

The no form of command resets the system time zone to GMT.

clock utc-offset <UTC-offset value as (+HH:MM /-HH:MM)(+00:00 to +14:00)/ (-00:00 to -12:00)> Eg: +05:30

• +/- - Sets the client time zone as after or before UTC. Plus indicates forward time zone and minus indicates backward time zone.

• UTC- offset value as - Sets the UTC offset value in hours.

  • +00:00 to +14:00

  • -00:00 to -12:00

This command displays the PTP clock properties.

show clock properties

This command allows to configure interface such as VLAN.

interface {vlan < vlan-id > [switch <string(32)>] | port-channel <integer (1-8)> | <iftype> <ifnum>} no interface {vlan < vlan-id > [switch <string(32)>] | port- channel <integer (1-8)> | <iftype> <ifnum>}

• vlan <vlan-id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges between 1 and 4094.

• switch<switch-name> - Configures interface for the specified context. This value represents unique name of the Switch context. This value is a string whose maximum size is 32. This parameter is specific to multiple instance feature. This feature has been included to adhere to the Industry Standard CLI syntax.

• port-channel<port-channel-id (1-8)> - Configures the port to be used by the host to configure the router. This value ranges between 1 and 8. The port channel identifier can be created or port channel related configuration can done, only if the LA feature is enabled in the Switch.

• <interface-type> - Configures the specified type of interface

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

  • port-channel - Logical interface that represents an aggregator which contains several ports aggregated together.

This command sets the IP address for an interface.

ip address <ucast_addr> <ip_mask>

no ip address <ucast_addr>

• ucast_addr - Sets the IP address for an interface. If the network in which the Switch is implemented contains a server such as DHCP server, dynamically allocating IP address, the configured IP address should not be within the range of the addresses that will be allocated by the server to the other Switches. This precaution avoids creation of IP address conflicts between the Switches.

• ip_mask - Sets the subnet mask for the configured IP address. The configured subnet mask should be in the same subnet of the network in which the Switch is placed.

This command sets the DHCP/BOOTP IP address for an interface.

ip address dhcp

no ip address

• dhcp - Get IP by using DHCP protocol.

• bootp - Get IP by using BOOTP protocol.

Set the AdminStatus of Interface down/up.

shutdown

no shutdown

Descriptions about the interface.

description <description of this interface>

no description

This command shows the maximum number of learning address and lock mode.

show interface port-security [<iftype> <ifnum>]

• <interface-type> - Displays the IP interface configuration for the specified type of interface. The interface can be:

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

Used to diagnose the copper cable. If there is an error on the cable, it can determine the type of error and the position where the error occurred.

show interface cable-diag Gigabitethernet [<iftype> <ifnum>]

• OK - This pair has been connected to partner network device and the link is up.

• OPEN - This pair is left open.

• SHORT - This pair has been shorted between two lines of its own.

• Unknown - The last diagnosis do not obtain the cable’ status, please try it again.

This command displays the interface status and configuration.

show interfaces [{ [<interface-type> <interface-id>]

[{ description | storm-control | flowcontrol | capabilities | status | port-security-state | rate-limit }]| {vlan <vlan-id> [{switch <switch-name>}]}

• <interface-type> - Displays the interface status and configuration for the specified type of interface. The interface can be:

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

  • port-channel - Logical interface that represents an aggregator which contains several ports aggregated together.

• <interface-id> - Displays the interface status and configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. For Example: 0/1 represents that the slot number is 0 and port number is 1.

• Description - Displays the interface description.

• storm-control - Displays the broadcast, multicast, and unicast storm suppression levels for the specified interface

• flowcontrol - Displays the flow control related statistics information for the specified interface.

• capabilities - Displays the interface type, interface speed, duplex operation and flowcontrol status for the specified interface.

• status - Displays the status, duplex details, speed and negotiation mode of the specified interface.

• port-security-state - Displays the state of the port security option.

• vlan <vlan-id> - VLAN ID is a unique value that represents the specific VLAN. This value ranges between 1 and 4094.

• switch<switch-name> - Configures interface for the specified context. This value represents unique name of the Switch context. This value is a string whose maximum size is 32. This parameter is specific to multiple instance feature. This feature has been included to adhere to the Industry Standard CLI syntax.

This command displays the interface statistics for each port.

show interfaces {counters | { <interface-type> <interface-id> counters }}

• counters - Displays the interface statistics for all the available interfaces.

• <interface-type> - Displays the IP interface configuration for the specified type of interface. The interface can be:

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

• <interface-id> - Displays the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. For Example: 0/1 represents that the slot number is 0 and port number is 1.

This command clears all the current interface counters from the interface unless the optional arguments type and number are specified to clear only a specific interface type (serial, Ethernet, Token Ring, and so on).

clear interfaces [ <interface-type> <interface-id> ] counters

• <interface-type> - Configures the specified type of interface.

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

• <interface-id> - Displays the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash.

  For Example: 0/1 represents that the slot number is 0 and port number is 1.

This command displays the IP interface configuration.

show ip interface [{[Vlan <vlan-id(1-4094)> | [<interface- type><interface-id>]

• Vlan<vlan-id(1-4094)> - Displays the IP interface configuration for the

• The specified VLAN ID is a unique value that represents the specific VLAN created. This value ranges between 1 and 4094.

• <interface-type> - Displays the IP interface configuration for the specified type of interface. The interface can be:

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

• <interface-id> - Displays the IP interface configuration for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. For Example: 0/1 represents that the slot number is 0 and port number is 1.

This command displays the flow-control information.

show flow-control [ interface <interface-type> <interface-id>]

• <interface-type> - Displays the flow-control information for the specified type of interface. The interface can be:

  • gigabitethernet - A version of LAN standard architecture that supports data transfer upto 1 Gigabit per second.

• <interface-id> - Displays the flow-control information for the specified interface identifier. This is a unique value that represents the specific interface. This value is a combination of slot number and port number separated by a slash. For Example: 0/1 represents that the slot number is 0 and port number is 1.

This command enables/disable trap generation on the interface. The interface generates a linkUp or linkDown trap. The linkUp trap denotes that the communication link is available and ready for traffic flow. The linkDown trap denotes that the communication link failed and is not ready for traffic flow.

snmp trap link-status

no snmp trap link-status

This command is used to set the send or receive flow-control value for an interface.

flowcontrol { on | off }

• on - If used with receive allows an interface to operate with the attached device to send flow control packets. If used with send the interface sends flowcontrol packets to a remote device if the device supports it

• off - Turns-off the attached devices (when used with receive) or the local ports (when used with send) ability to send flow-control packets to an interface or to a remote device respectively.

This command configures the number of learning address on certain interface port.

port-security <limit-size(1-256)>

no port-security

• < limit-size(1-256)> - Range is 1 to 256.