204.4275.

03 DM1200E Series - Command Reference

February 2016
 WARRANTY
This product is guaranteed to be free against manufacturing and raw material defects, during
the period specified in the sales receipt.
The warranty includes only the repair and replacement of components or defective parts, free
of charge. The warranty does not cover damages caused by any one of the following
conditions: improper use, energy failures, natural phenomena (lightning, for example), failure in
equipments connected to this product, improper grounding or repairs done by DATACOM
unauthorized personnel.
This warranty does not cover repairs done at the customer’s site. All equipments must be sent
to DATACOM to be repaired.

Quality Management System

certified by DQS according to

ISO9001 Register number (287097 QM)

Although this document has been written with care, the company does not assume
responsibility for occasional mistakes and omissions, likewise no liability is assumed by damages
that may result from the use of the information contained in this manual. Specifications
provided in this manual are subject to changes without any previous notice and should not be
construed as a commitment of any kind by DATACOM.

2 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 CONTACTS
To contact the technical support, or sales department:

 Support:
E-mail: support@datacom.ind.br
Phone: +55 51 3933-3122

 Sales
E-mail: sales@datacom.ind.br
Phone: +55 51 3933-3000
 Internet
www.datacom.ind.br
 Address
DATACOM
Rua América, 1000 - Eldorado do Sul, RS - Brazil
CEP: 92990-000

3 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Revision History

REVISION DATE CHANGE DESCRIPTION

2.0 17/09/2014 First release

2.4 21/01/2015 Added VLAN Assignment and Dynamic VLAN commands

3.0 19/06/2015 New models with PoE support

3.2 26/02/2016 Display the hardware version in the show switch command

4 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Table of Contents
About This Document ..................................................................................... 40
Purpose and Audience ....................................................................................................... 40

Document Conventions ..................................................................................................... 40

Section 1: Product Concept ............................................................................ 41

Section 2: Using the Command-Line Interface .............................................. 41

Command Syntax .............................................................................................................. 42

Command Conventions ..................................................................................................... 43

Common Parameter Values ............................................................................................... 43

unit/slot/port Naming Convention ................................................................................... 44

Using the “No” Form of a Command ................................................................................. 45

Executing Show Commands .............................................................................................. 46

CLI Output Filtering .......................................................................................................... 46

Command Modes ............................................................................................................... 47

Command Completion and Abbreviation .......................................................................... 53

CLI Error Messages ........................................................................................................... 53

CLI Line-Editing Conventions............................................................................................ 53

Using CLI Help................................................................................................................... 55

Accessing the CLI .............................................................................................................. 56

Section 3: Stacking Commands ...................................................................... 56

Dedicated Port Stacking .................................................................................................... 57

stack-enable .............................................................................................................. 57
no stack-enable ......................................................................................................... 58
stack .......................................................................................................................... 58
member ..................................................................................................................... 58
no member ............................................................................................................... 59
switch priority ........................................................................................................... 60
switch renumber........................................................................................................ 60
movemanagement ..................................................................................................... 61
standby ...................................................................................................................... 61
no standby ................................................................................................................ 62
slot ............................................................................................................................. 63
no slot ...................................................................................................................... 63

5 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 set slot disable ........................................................................................................... 64
no set slot disable ..................................................................................................... 64
set slot power ............................................................................................................ 65
no set slot power ...................................................................................................... 66
reload (Stack) ............................................................................................................ 66
show slot ................................................................................................................... 66
show supported cardtype .......................................................................................... 69
show switch ............................................................................................................... 70
show supported switchtype ...................................................................................... 73
Stack Firmware Synchronization Commands ................................................................... 74

boot auto-copy-sw .................................................................................................... 75

no boot auto-copy-sw ................................................................................................ 75
boot auto-copy-sw trap ............................................................................................. 75
no boot auto-copy-sw trap ......................................................................................... 76
boot auto-copy-sw allow-downgrade ....................................................................... 76
no boot auto-copy-sw allow-downgrade ...................................................................... 77
show auto-copy-sw ................................................................................................... 77

Section 4: Management Commands ............................................................... 78

Network Interface Commands .......................................................................................... 78

enable (Privileged EXEC access) ............................................................................... 79

do (Privileged EXEC commands) ............................................................................... 79
network parms .......................................................................................................... 80
network protocol ....................................................................................................... 80
network protocol dhcp .............................................................................................. 81
network javamode ..................................................................................................... 82
no network javamode ................................................................................................ 82
show network ............................................................................................................ 82
Console Port Access Commands ....................................................................................... 84

configure.................................................................................................................... 85
line ............................................................................................................................. 85
serial baudrate .......................................................................................................... 86
no serial baudrate ..................................................................................................... 86
serial timeout ............................................................................................................ 87
no serial timeout ....................................................................................................... 87
show serial................................................................................................................. 87
Telnet Commands ............................................................................................................. 88

ip telnet server enable ............................................................................................... 89

no ip telnet server enable .......................................................................................... 89
transport input telnet ................................................................................................ 89
no transport input telnet ............................................................................................ 90
telnetcon maxsessions .............................................................................................. 90
no telnetcon maxsessions .......................................................................................... 91

6 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 telnetcon timeout ...................................................................................................... 91
no telnetcon timeout ................................................................................................. 92
show telnetcon .......................................................................................................... 92
Secure Shell Commands .................................................................................................... 93

ip ssh.......................................................................................................................... 93
ip ssh protocol ........................................................................................................... 94
ip ssh server enable ................................................................................................... 94
no ip ssh server enable .............................................................................................. 94
sshcon maxsessions .................................................................................................. 95
no sshcon maxsessions .............................................................................................. 95
sshcon timeout .......................................................................................................... 96
no sshcon timeout ..................................................................................................... 96
show ip ssh ................................................................................................................ 97
Management Security Commands .................................................................................... 98

crypto certificate generate ........................................................................................ 98

no crypto certificate generate..................................................................................... 98
crypto key generate rsa ............................................................................................. 99
no crypto key generate rsa ........................................................................................ 99
crypto key generate dsa ............................................................................................ 99
no crypto key generate dsa ...................................................................................... 100
Hypertext Transfer Protocol Commands ......................................................................... 100

ip http accounting exec, ip https accounting exec .................................................. 100

no ip http/https accounting exec .............................................................................. 101
ip http authentication .............................................................................................. 102
no ip http authentication .......................................................................................... 103
ip https authentication ............................................................................................ 103
no ip https authentication ........................................................................................ 104
ip http server ........................................................................................................... 104
no ip http server ..................................................................................................... 105
ip http secure-server ............................................................................................... 105
no ip http secure-server ........................................................................................... 106
ip http java .............................................................................................................. 106
no ip http java ........................................................................................................ 106
ip http session hard-timeout ................................................................................... 107
no ip http session hard-timeout ................................................................................ 107
ip http session maxsessions .................................................................................... 108
no ip http session maxsessions................................................................................. 108
ip http session soft-timeout .................................................................................... 109
no ip http session soft-timeout ................................................................................. 109
ip http secure-session hard-timeout ....................................................................... 109
no ip http secure-session hard-timeout ..................................................................... 110

7 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 ip http secure-session maxsessions ........................................................................ 110
no ip http secure-session maxsessions ...................................................................... 111
ip http secure-session soft-timeout ........................................................................ 111
no ip http secure-session soft-timeout ...................................................................... 111
ip http secure-port................................................................................................... 112
no ip http secure-port .............................................................................................. 112
ip http secure-protocol ............................................................................................ 113
show ip http ............................................................................................................. 113
Access Commands ........................................................................................................... 115

disconnect ............................................................................................................... 115

show loginsession ................................................................................................... 115
show loginsession long............................................................................................ 116
User Account Commands ................................................................................................ 117

aaa authentication login .......................................................................................... 117

no aaa authentication login ...................................................................................... 118
aaa authentication enable ....................................................................................... 119
no aaa authentication enable ................................................................................... 121
enable authentication.............................................................................................. 122
no enable authentication ......................................................................................... 122
username (Global Config) ....................................................................................... 123
no username ........................................................................................................... 125
username name nopassword................................................................................... 125
username name unlock ........................................................................................... 126
username snmpv3 accessmode ............................................................................... 126
no username snmpv3 accessmode ........................................................................... 127
username snmpv3 authentication ........................................................................... 127
no username snmpv3 authentication ........................................................................ 128
username snmpv3 encryption ................................................................................. 128
no username snmpv3 encryption .............................................................................. 129
username snmpv3 encryption encrypted ................................................................ 129
show users ............................................................................................................... 130
show users long ....................................................................................................... 131
show users accounts ............................................................................................... 131
show users login-history [long] .............................................................................. 133
show users login-history [username] ..................................................................... 133
login authentication ................................................................................................ 134
no login authentication ............................................................................................ 135
password (Line Configuration) ................................................................................ 135
no password (Line Configuration) ............................................................................. 136
password (User EXEC) ............................................................................................. 136
password (aaa IAS User Config) ............................................................................. 137
no password (aaa IAS User Config) .......................................................................... 137
enable password (Privileged EXEC) ........................................................................ 138
no enable password (Privileged EXEC) ...................................................................... 139

8 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 passwords min-length ............................................................................................. 140
no passwords min-length ......................................................................................... 140
passwords history.................................................................................................... 140
no passwords history ............................................................................................... 141
passwords aging ...................................................................................................... 141
no passwords aging ................................................................................................. 142
passwords lock-out ................................................................................................. 142
no passwords lock-out ............................................................................................. 143
passwords strength-check ...................................................................................... 143
no passwords strength-check ................................................................................... 143
passwords strength maximum consecutive-characters .......................................... 144
passwords strength maximum repeated-characters .............................................. 144
passwords strength minimum uppercase-letters.................................................... 145
no passwords strength minimum uppercase-letters ................................................... 145
passwords strength minimum lowercase-letters .................................................... 146
no passwords strength minimum lowercase-letters .................................................... 146
passwords strength minimum numeric-characters ................................................ 146
no passwords strength minimum numeric-characters ................................................. 147
passwords strength minimum special-characters .................................................. 147
no passwords strength minimum special-characters .................................................. 148
passwords strength minimum character-classes .................................................... 148
no passwords strength minimum character-classes .................................................... 149
passwords strength exclude-keyword .................................................................... 149
no passwords strength exclude-keyword ................................................................... 149
show passwords configuration ................................................................................ 150
show passwords result ............................................................................................ 151
aaa ias-user username ............................................................................................ 152
no aaa ias-user username ........................................................................................ 152
aaa session-id .......................................................................................................... 153
no aaa session-id .................................................................................................... 154
aaa accounting ........................................................................................................ 154
no aaa accounting ................................................................................................... 156
password (AAA IAS User Configuration) ................................................................. 157
no password (AAA IAS User Configuration) ............................................................... 158
clear aaa ias-users ................................................................................................... 158
show aaa ias-users .................................................................................................. 159
accounting ............................................................................................................... 160
no accounting ......................................................................................................... 161
show accounting ...................................................................................................... 161
show accounting methods ....................................................................................... 162
clear accounting statistics ....................................................................................... 163
SNMP Commands ............................................................................................................ 163

snmp-server............................................................................................................. 163

9 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 snmp-server community .......................................................................................... 164
no snmp-server community ...................................................................................... 165
snmp-server community-group ............................................................................... 165
snmp-server enable traps violation ......................................................................... 166
no snmp-server enable traps violation ...................................................................... 167
snmp-server enable traps ........................................................................................ 167
no snmp-server enable traps .................................................................................... 168
snmp trap link-status .............................................................................................. 168
no snmp trap link-status .......................................................................................... 168
snmp trap link-status all ......................................................................................... 169
no snmp trap link-status all ...................................................................................... 169
snmp-server enable traps linkmode ........................................................................ 170
no snmp-server enable traps linkmode ..................................................................... 170
snmp-server enable traps multiusers ...................................................................... 171
no snmp-server enable traps multiusers .................................................................... 171
snmp-server enable traps stpmode ......................................................................... 172
no snmp-server enable traps stpmode ...................................................................... 172
snmp-server engineID local .................................................................................... 172
no snmp-server engineID local ................................................................................. 173
snmp-server filter .................................................................................................... 174
no snmp-server filter ............................................................................................... 174
snmp-server group .................................................................................................. 175
no snmp-server group ............................................................................................. 176
snmp-server host ..................................................................................................... 176
no snmp-server host ................................................................................................ 178
snmp-server user ..................................................................................................... 178
no snmp-server user................................................................................................ 179
snmp-server view .................................................................................................... 180
no snmp-server view ............................................................................................... 180
snmp-server v3-host ............................................................................................... 181
snmptrap source-interface ...................................................................................... 182
no snmptrap source-interface ................................................................................... 183
show snmp............................................................................................................... 183
show snmp engineID ............................................................................................... 185
show snmp filters .................................................................................................... 185
show snmp group .................................................................................................... 186
show snmp source-interface ................................................................................... 187
show snmp user ....................................................................................................... 187
show snmp views .................................................................................................... 188
show trapflags ......................................................................................................... 189
RADIUS Commands ......................................................................................................... 190

radius accounting mode .......................................................................................... 190

no radius accounting mode ...................................................................................... 191

10 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 radius server attribute 4 .......................................................................................... 191
no radius server attribute 4 ...................................................................................... 192
radius server host .................................................................................................... 192
no radius server host ............................................................................................... 194
radius server key ..................................................................................................... 195
radius server msgauth ............................................................................................. 196
no radius server msgauth ........................................................................................ 197
radius server primary .............................................................................................. 197
radius server retransmit .......................................................................................... 198
no radius server retransmit ...................................................................................... 198
radius source-interface ........................................................................................... 199
no radius source-interface ........................................................................................ 200
radius server timeout .............................................................................................. 200
no radius server timeout .......................................................................................... 201
show radius ............................................................................................................. 201
show radius servers ................................................................................................. 203
show radius accounting ........................................................................................... 205
show radius accounting statistics ........................................................................... 207
show radius source-interface .................................................................................. 209
show radius statistics .............................................................................................. 209
TACACS+ Commands ...................................................................................................... 212

tacacs-server host ................................................................................................... 212

no tacacs-server host .............................................................................................. 212
tacacs-server key .................................................................................................... 213
no tacacs-server key ................................................................................................ 213
tacacs-server keystring ........................................................................................... 214
tacacs-server source-interface ................................................................................ 214
no tacacs-server source-interface ............................................................................. 215
tacacs-server timeout.............................................................................................. 216
no tacacs-server timeout ......................................................................................... 216
key ........................................................................................................................... 217
keystring .................................................................................................................. 217
port .......................................................................................................................... 218
priority (TACACS Config) ......................................................................................... 218
timeout .................................................................................................................... 219
show tacacs ............................................................................................................. 219
show tacacs source-interface .................................................................................. 220
Configuration Scripting Commands ................................................................................ 221

script apply .............................................................................................................. 221

script delete ............................................................................................................. 222
script list .................................................................................................................. 222
script show .............................................................................................................. 223
script validate .......................................................................................................... 223
Prelogin Banner, System Prompt and Host Name Commands ........................................ 224

copy (pre-login banner) .......................................................................................... 224

11 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 set prompt ............................................................................................................... 225
hostname ................................................................................................................. 225
show clibanner ........................................................................................................ 226
set clibanner ............................................................................................................ 226
no set clibanner ...................................................................................................... 227
Section 5: Utility Commands ........................................................................ 227
AutoInstall Commands .................................................................................................... 228

boot autoinstall ....................................................................................................... 229

boot host retrycount ................................................................................................ 229
no boot host retrycount ........................................................................................... 230
boot host dhcp ......................................................................................................... 230
no boot host dhcp ................................................................................................... 231
boot host autosave .................................................................................................. 231
no boot host autosave ............................................................................................. 231
boot host autoreboot ............................................................................................... 232
no boot host autoreboot .......................................................................................... 232
erase startup-config ................................................................................................ 233
show autoinstall ...................................................................................................... 233
CLI Output Filtering Commands ..................................................................................... 234

show xxx|include “string” ...................................................................................... 234

show xxx|include “string” exclude “string2” ......................................................... 234
show xxx|exclude “string” ..................................................................................... 234
show xxx|begin “string” ......................................................................................... 235
show xxx|section “string” ...................................................................................... 235
show xxx|section “string” “string2” ....................................................................... 236
show xxx|section “string” include “string2” .......................................................... 236
Dual Image Commands ................................................................................................... 236

delete ....................................................................................................................... 236

boot system ............................................................................................................. 237
show bootvar ........................................................................................................... 237
filedescr ................................................................................................................... 238
update bootcode ...................................................................................................... 238
System Information and Statistics Commands ............................................................... 239

show arp switch....................................................................................................... 239

show eventlog ......................................................................................................... 240
show hardware ........................................................................................................ 241
show version............................................................................................................ 241
show platform vpd ................................................................................................... 243
show interface ......................................................................................................... 244
show interfaces status ............................................................................................ 246
show interface counters .......................................................................................... 247
show interface ethernet .......................................................................................... 249
show interface Ethernet unit/slot/port switchport ................................................ 256
show interface lag ................................................................................................... 257
show fiber-ports optical-transceiver ....................................................................... 259

12 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show fiber-ports optical-transceiver-info ............................................................... 260
show mac-addr-table .............................................................................................. 262
process cpu threshold.............................................................................................. 264
show process app-list .............................................................................................. 265
show process cpu .................................................................................................... 266
show process proc-list ............................................................................................. 266
show running-config ............................................................................................... 267
show running-config interface ................................................................................ 269
show ........................................................................................................................ 270
show sysinfo ............................................................................................................ 272
show tech-support................................................................................................... 273
length value ............................................................................................................. 274
no length value ....................................................................................................... 274
terminal length ........................................................................................................ 275
no terminal length ................................................................................................... 275
show terminal length .............................................................................................. 275
memory free low-watermark processor .................................................................. 276
Box Services Commands ................................................................................................. 277

environment trap temperature ............................................................................... 277

no environment trap temperature ............................................................................. 277
show environment ................................................................................................... 278
Logging Commands ......................................................................................................... 279

logging buffered ...................................................................................................... 280

no logging buffered ................................................................................................. 280
logging buffered wrap ............................................................................................. 280
no logging buffered wrap ......................................................................................... 281
logging cli-command ............................................................................................... 281
no logging cli-command ........................................................................................... 282
logging console ........................................................................................................ 282
no logging console .................................................................................................. 282
logging host ............................................................................................................. 283
logging host reconfigure ......................................................................................... 284
logging host remove ................................................................................................ 284
logging port ............................................................................................................. 285
no logging port ....................................................................................................... 285
logging syslog .......................................................................................................... 285
no logging syslog .................................................................................................... 286
logging syslog port .................................................................................................. 286
no logging syslog port ............................................................................................. 287
logging syslog source-interface .............................................................................. 287
no logging syslog source-interface ............................................................................ 288
show logging ........................................................................................................... 288
show logging buffered ............................................................................................. 290
show logging hosts .................................................................................................. 291
show logging persistent .......................................................................................... 292

13 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show logging traplogs ............................................................................................. 293
clear logging buffered ............................................................................................. 294
Email Alerting and Mail Server Commands ..................................................................... 294

logging email ........................................................................................................... 294

no logging email...................................................................................................... 295
logging email urgent ............................................................................................... 295
no logging email urgent ........................................................................................... 295
logging email message-type to-addr....................................................................... 296
no logging email message-type to-addr .................................................................... 296
logging email from-addr .......................................................................................... 297
no logging email from-addr ...................................................................................... 297
logging email message-type subject ....................................................................... 298
no logging email message-type subject .................................................................... 298
logging email logtime .............................................................................................. 298
no logging email logtime .......................................................................................... 299
logging traps............................................................................................................ 299
no logging traps ...................................................................................................... 300
logging email test message-type ............................................................................ 300
show logging email config ....................................................................................... 300
show logging email statistics .................................................................................. 302
clear logging email statistics ................................................................................... 303
mail-server .............................................................................................................. 303
no mail-server ......................................................................................................... 303
security .................................................................................................................... 304
port .......................................................................................................................... 304
username (Mail Server Config) ................................................................................ 305
password ................................................................................................................. 305
show mail-server config .......................................................................................... 305
System Utility and Clear Commands ............................................................................... 306

traceroute ................................................................................................................ 307

clear counters .......................................................................................................... 310
clear igmpsnooping ................................................................................................. 311
clear pass ................................................................................................................. 311
clear traplog ............................................................................................................ 311
clear vlan ................................................................................................................. 312
logout ...................................................................................................................... 312
ping .......................................................................................................................... 313
quit .......................................................................................................................... 316
reload ....................................................................................................................... 316
copy ......................................................................................................................... 317
file verify .................................................................................................................. 322
no file verify ............................................................................................................ 322
write memory .......................................................................................................... 323
Simple Network Time Protocol Commands ..................................................................... 323

sntp broadcast client poll-interval .......................................................................... 323

14 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no sntp broadcast client poll-interval ........................................................................ 324
sntp client mode ...................................................................................................... 324
no sntp client mode ................................................................................................. 325
sntp client port ........................................................................................................ 325
no sntp client port ................................................................................................... 325
sntp unicast client poll-interval ............................................................................... 326
no sntp unicast client poll-interval ............................................................................ 326
sntp unicast client poll-timeout .............................................................................. 327
no sntp unicast client poll-timeout ............................................................................ 327
sntp unicast client poll-retry ................................................................................... 327
no sntp unicast client poll-retry ................................................................................ 328
sntp server ............................................................................................................... 328
no sntp server ......................................................................................................... 329
sntp source-interface .............................................................................................. 329
no sntp source-interface .......................................................................................... 330
show sntp ................................................................................................................ 330
show sntp client ...................................................................................................... 331
show sntp server ..................................................................................................... 332
show sntp source-interface ..................................................................................... 334
Time Zone Commands ..................................................................................................... 334

clock set ................................................................................................................... 335

clock summer-time date .......................................................................................... 335
clock summer-time recurring .................................................................................. 336
no clock summer-time ............................................................................................. 338
clock timezone ......................................................................................................... 338
no clock timezone ................................................................................................... 339
show clock ............................................................................................................... 339
show clock detail ..................................................................................................... 340
DHCP Server Commands ................................................................................................. 341

ip dhcp pool ............................................................................................................. 341

no ip dhcp pool ....................................................................................................... 342
client-identifier ........................................................................................................ 342
no client-identifier ................................................................................................... 343
client-name.............................................................................................................. 343
no client-name ........................................................................................................ 343
default-router .......................................................................................................... 344
no default-router ..................................................................................................... 344
dns-server ................................................................................................................ 345
no dns-server .......................................................................................................... 345
hardware-address ................................................................................................... 345
no hardware-address ............................................................................................... 346
host .......................................................................................................................... 346

15 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no host ................................................................................................................... 347
lease ........................................................................................................................ 347
no lease .................................................................................................................. 348
network (DHCP Pool Config) ................................................................................... 348
no network ............................................................................................................. 348
bootfile .................................................................................................................... 349
no bootfile .............................................................................................................. 349
domain-name .......................................................................................................... 350
no domain-name ..................................................................................................... 350
netbios-name-server ............................................................................................... 350
no netbios-name-server ........................................................................................... 351
netbios-node-type ................................................................................................... 351
no netbios-node-type .............................................................................................. 352
next-server .............................................................................................................. 352
no next-server......................................................................................................... 353
option ...................................................................................................................... 353
no option ................................................................................................................ 354
ip dhcp excluded-address ........................................................................................ 354
no ip dhcp excluded-address .................................................................................... 355
ip dhcp ping packets ................................................................................................ 355
no ip dhcp ping packets ........................................................................................... 355
service dhcp ............................................................................................................. 356
no service dhcp ....................................................................................................... 356
ip dhcp bootp automatic .......................................................................................... 357
no ip dhcp bootp automatic ..................................................................................... 357
ip dhcp conflict logging ........................................................................................... 357
no ip dhcp conflict logging ....................................................................................... 358
clear ip dhcp binding ............................................................................................... 358
clear ip dhcp server statistics .................................................................................. 359
clear ip dhcp conflict ............................................................................................... 359
show ip dhcp binding ............................................................................................... 360
show ip dhcp global configuration .......................................................................... 360
show ip dhcp pool configuration ............................................................................. 361
show ip dhcp server statistics ................................................................................. 363
show ip dhcp conflict ............................................................................................... 364
DNS Client Commands .................................................................................................... 365

ip domain lookup ..................................................................................................... 365

no ip domain lookup ................................................................................................ 366
ip domain name ....................................................................................................... 366
no ip domain name ................................................................................................. 367
ip domain list ........................................................................................................... 367
no ip domain list...................................................................................................... 368

16 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 ip name server ......................................................................................................... 368
no ip name server ................................................................................................... 368
ip name source-interface......................................................................................... 369
no ip name source-interface ..................................................................................... 369
ip host ...................................................................................................................... 370
no ip host ............................................................................................................... 370
ipv6 host .................................................................................................................. 371
no ipv6 host ............................................................................................................ 371
ip domain retry ........................................................................................................ 372
no ip domain retry ................................................................................................... 372
ip domain timeout ................................................................................................... 372
no ip domain timeout .............................................................................................. 373
clear host ................................................................................................................. 373
show hosts ............................................................................................................... 374
show ip name source-interface ............................................................................... 376
IP Address Conflict Commands ....................................................................................... 376

ip address-conflict-detect run ................................................................................. 376

show ip address-conflict.......................................................................................... 377
clear ip address-conflict-detect ............................................................................... 377
Serviceability Packet Tracing Commands ....................................................................... 378

capture start ............................................................................................................ 378

capture stop............................................................................................................. 379
capture file|remote|line ......................................................................................... 379
capture remote port ................................................................................................ 380
capture file size ....................................................................................................... 381
capture line wrap ..................................................................................................... 381
no capture line wrap ................................................................................................ 382
show capture packets .............................................................................................. 382
logging persistent .................................................................................................... 383
no logging persistent ............................................................................................... 383
mbuf ........................................................................................................................ 384
show mbuf ............................................................................................................... 384
show mbuf total ...................................................................................................... 385
session start unit ..................................................................................................... 387
Cable Test Command ...................................................................................................... 387

cablestatus .............................................................................................................. 387

Remote Monitoring Commands....................................................................................... 389

rmon alarm .............................................................................................................. 389

no rmon alarm ........................................................................................................ 390
rmon hcalarm .......................................................................................................... 391
no rmon hcalarm ..................................................................................................... 393
rmon event .............................................................................................................. 394
no rmon event ........................................................................................................ 395

17 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 rmon collection history ............................................................................................ 395
no rmon collection history ........................................................................................ 397
show rmon ............................................................................................................... 397
show rmon collection history .................................................................................. 399
show rmon events ................................................................................................... 401
show rmon history ................................................................................................... 402
show rmon log ......................................................................................................... 407
show rmon statistics interfaces .............................................................................. 408
show rmon hcalarms ............................................................................................... 411
Statistics Application Commands .................................................................................... 414

stats group............................................................................................................... 414

no stats group ......................................................................................................... 416
stats flow-based ...................................................................................................... 416
no stats flow-based ................................................................................................. 418
stats flow-based reporting ...................................................................................... 418
stats group (interface config) ................................................................................. 419
no stats group (interface config) .............................................................................. 419
stats flow-based (interface config) ......................................................................... 420
no stats flow-based (interface config) ....................................................................... 420
show stats group ..................................................................................................... 421
show stats flow-based ............................................................................................. 422

Section 6: Switching Commands .................................................................. 424

Port Configuration Commands ........................................................................................ 425

interface .................................................................................................................. 425

auto-negotiate ......................................................................................................... 426
no auto-negotiate .................................................................................................... 426
auto-negotiate all .................................................................................................... 427
no auto-negotiate all ............................................................................................... 427
description ............................................................................................................... 428
mtu .......................................................................................................................... 428
no mtu ................................................................................................................... 429
shutdown ................................................................................................................. 429
no shutdown ........................................................................................................... 429
shutdown all ............................................................................................................ 430
no shutdown all ....................................................................................................... 430
speed ....................................................................................................................... 431
speed all................................................................................................................... 431
show port ................................................................................................................. 432
show port advertise ................................................................................................. 434
show port description .............................................................................................. 435
Spanning Tree Protocol Commands ................................................................................ 436

spanning-tree .......................................................................................................... 437

no spanning-tree ..................................................................................................... 437

18 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 spanning-tree auto-edge ......................................................................................... 437
no spanning-tree auto-edge ..................................................................................... 438
spanning-tree bpdumigrationcheck ........................................................................ 438
spanning-tree configuration name .......................................................................... 439
no spanning-tree configuration name ....................................................................... 439
spanning-tree configuration revision ...................................................................... 440
no spanning-tree configuration revision .................................................................... 440
spanning-tree cost................................................................................................... 440
no spanning-tree cost .............................................................................................. 441
spanning-tree edgeport ........................................................................................... 441
no spanning-tree edgeport ....................................................................................... 442
spanning-tree mode ................................................................................................ 442
no spanning-tree mode ............................................................................................ 442
spanning-tree forward-time .................................................................................... 443
no spanning-tree forward-time ................................................................................. 443
spanning-tree max-age ........................................................................................... 444
no spanning-tree max-age ....................................................................................... 444
spanning-tree max-hops ......................................................................................... 445
no spanning-tree max-hops ..................................................................................... 445
spanning-tree mst ................................................................................................... 445
no spanning-tree mst .............................................................................................. 446
spanning-tree mst instance ..................................................................................... 447
no spanning-tree mst instance ................................................................................. 447
spanning-tree mst priority ...................................................................................... 448
no spanning-tree mst priority ................................................................................... 449
spanning-tree mst vlan ........................................................................................... 449
no spanning-tree mst vlan ....................................................................................... 450
spanning-tree port mode ......................................................................................... 450
no spanning-tree port mode ..................................................................................... 451
spanning-tree port mode all .................................................................................... 451
no spanning-tree port mode all ................................................................................ 451
spanning-tree tcnguard ........................................................................................... 452
no spanning-tree tcnguard ....................................................................................... 452
spanning-tree guard loop ........................................................................................ 452
spanning-tree guard none ....................................................................................... 453
spanning-tree guard root ........................................................................................ 453
no spanning-tree guard ........................................................................................... 454
spanning-tree transmit............................................................................................ 454
show spanning-tree ................................................................................................. 455
show spanning-tree brief ........................................................................................ 457
show spanning-tree interface ................................................................................. 458
show spanning-tree mst detailed ............................................................................ 460
show spanning-tree mst port detailed .................................................................... 461

19 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show spanning-tree mst port summary .................................................................. 466
show spanning-tree mst port summary active ........................................................ 467
show spanning-tree mst summary .......................................................................... 468
show spanning-tree summary ................................................................................. 469
show spanning-tree vlan ......................................................................................... 471
VLAN Commands ............................................................................................................. 472

vlan database .......................................................................................................... 472

network mgmt_vlan ................................................................................................ 472
no network mgmt_vlan ............................................................................................ 473
vlan .......................................................................................................................... 473
no vlan ................................................................................................................... 473
vlan acceptframe ..................................................................................................... 474
no vlan acceptframe ................................................................................................ 474
vlan ingressfilter ...................................................................................................... 475
no vlan ingressfilter ................................................................................................. 475
vlan internal allocation ............................................................................................ 476
vlan makestatic ....................................................................................................... 476
vlan name ................................................................................................................ 477
no vlan name .......................................................................................................... 477
vlan participation..................................................................................................... 478
vlan participation all ................................................................................................ 479
vlan port acceptframe all......................................................................................... 479
no vlan port acceptframe all ..................................................................................... 480
vlan port ingressfilter all ......................................................................................... 481
no vlan port ingressfilter all ...................................................................................... 481
vlan port pvid all ...................................................................................................... 482
no vlan port pvid all ................................................................................................. 482
vlan port tagging all ................................................................................................ 482
no vlan port tagging all ............................................................................................ 483
vlan pvid .................................................................................................................. 483
no vlan pvid ............................................................................................................ 484
vlan tagging ............................................................................................................. 484
no vlan tagging ....................................................................................................... 485
Switch Port Commands ................................................................................................... 485

switchport mode ...................................................................................................... 485

no switchport mode ................................................................................................. 486
switchport mode trunk allowed vlan ....................................................................... 486
no switchport trunk allowed vlan .............................................................................. 488
switchport trunk native vlan ................................................................................... 488
no switchport trunk native vlan ................................................................................ 488
switchport access vlan ............................................................................................ 489
no switchport access vlan ........................................................................................ 489
show interfaces switchport ..................................................................................... 490

20 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show vlan................................................................................................................. 491
show vlan internal usage......................................................................................... 493
show vlan brief ........................................................................................................ 493
show vlan port ......................................................................................................... 494
Private VLAN Commands ................................................................................................ 495

switchport private-vlan ........................................................................................... 495

no switchport private-vlan ........................................................................................ 496
switchport mode private-vlan ................................................................................. 497
no switchport mode private-vlan .............................................................................. 498
private-vlan ............................................................................................................. 498
no private-vlan ........................................................................................................ 499
Voice VLAN Commands ................................................................................................... 499

voice vlan (Global Config) ....................................................................................... 500

no voice vlan (Global Config) ................................................................................... 500
voice vlan (Interface Config)................................................................................... 500
no voice vlan (Interface Config) ............................................................................... 501
voice vlan data priority ............................................................................................ 502
show voice vlan ....................................................................................................... 502
Provisioning (IEEE 802.1p) Commands .......................................................................... 503

vlan port priority all ................................................................................................. 503

vlan priority ............................................................................................................. 504
Flow Control .................................................................................................................... 504

flowcontrol {symmetric|asymmetric} .................................................................... 504

no flowcontrol {symmetric|asymmetric} ............................................................... 505
show flowcontrol ..................................................................................................... 505
Protected Ports Commands ............................................................................................ 507

switchport protected (Global Config) ...................................................................... 507

no switchport protected (Global Config) .................................................................... 508
switchport protected (Interface Config) ................................................................. 508
no switchport protected (Interface Config) ................................................................ 509
show switchport protected ...................................................................................... 509
show interfaces switchport ..................................................................................... 510
GARP Commands............................................................................................................. 511

show garp ................................................................................................................ 511

GVRP Commands............................................................................................................. 511

set gvrp adminmode ................................................................................................ 512

no set gvrp adminmode ........................................................................................... 512
set gvrp interfacemode ........................................................................................... 513
no set gvrp interfacemode ....................................................................................... 513
show gvrp configuration ......................................................................................... 514
GMRP Commands ............................................................................................................ 515

set gmrp adminmode ............................................................................................... 515

21 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no set gmrp adminmode .......................................................................................... 515
set gmrp interfacemode .......................................................................................... 516
no set gmrp interfacemode ...................................................................................... 516
show gmrp configuration ........................................................................................ 517
show mac-address-table gmrp ................................................................................ 518
Port-Based Network Access Control Commands ............................................................ 519

aaa authentication dot1x default ............................................................................ 519

authorization network radius .................................................................................. 520
no authorization network radius ............................................................................... 520
clear dot1x statistics ............................................................................................... 521
clear dot1x authentication-history .......................................................................... 521
clear radius statistics ............................................................................................... 522
dot1x eapolflood ...................................................................................................... 522
no dot1x eapolflood ................................................................................................. 522
dot1x dynamic-vlan enable ..................................................................................... 523
no dot1x dynamic-vlan enable .................................................................................. 523
dot1x guest-vlan ..................................................................................................... 524
no dot1x guest-vlan ................................................................................................. 524
dot1x initialize ......................................................................................................... 524
dot1x max-req ......................................................................................................... 525
no dot1x max-req .................................................................................................... 525
dot1x port-control ................................................................................................... 526
no dot1x port-control ............................................................................................... 526
dot1x port-control all .............................................................................................. 527
no dot1x port-control all .......................................................................................... 527
dot1x mac-auth-bypass ........................................................................................... 527
no dot1x mac-auth-bypass ....................................................................................... 528
dot1x re-authenticate ............................................................................................. 528
dot1x re-authentication .......................................................................................... 529
no dot1x re-authentication ....................................................................................... 529
dot1x system-auth-control ...................................................................................... 530
no dot1x system-auth-control .................................................................................. 530
dot1x system-auth-control monitor ........................................................................ 530
no dot1x system-auth-control monitor ...................................................................... 531
dot1x timeout .......................................................................................................... 531
no dot1x timeout ..................................................................................................... 533
dot1x unauthenticated-vlan .................................................................................... 533
no dot1x unauthenticated-vlan ................................................................................. 534
dot1x user................................................................................................................ 534
no dot1x user .......................................................................................................... 535
show authentication methods ................................................................................. 535
show dot1x .............................................................................................................. 536
show dot1x authentication-history ......................................................................... 542

22 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show dot1x clients................................................................................................... 543
show dot1x users .................................................................................................... 545
802.1X Supplicant Commands ........................................................................................ 545

dot1x pae ................................................................................................................. 545

dot1x supplicant port-control ................................................................................. 546
no dot1x supplicant port-control ............................................................................... 547
dot1x supplicant max-start ..................................................................................... 547
no dot1x supplicant max-start .................................................................................. 547
dot1x supplicant timeout start-period .................................................................... 548
no dot1x supplicant timeout start-period ................................................................... 548
dot1x supplicant timeout held-period ..................................................................... 549
no dot1x supplicant timeout held-period ................................................................... 549
dot1x supplicant timeout auth-period .................................................................... 549
no dot1x supplicant timeout auth-period ................................................................... 550
dot1x supplicant user .............................................................................................. 550
show dot1x statistics ............................................................................................... 551
Storm-Control Commands............................................................................................... 552

storm-control broadcast .......................................................................................... 553

no storm-control broadcast ...................................................................................... 554
storm-control broadcast level ................................................................................. 554
no storm-control broadcast level .............................................................................. 555
storm-control broadcast rate .................................................................................. 555
no storm-control broadcast rate ............................................................................... 556
storm-control multicast ........................................................................................... 556
no storm-control multicast ....................................................................................... 557
storm-control multicast level .................................................................................. 557
no storm-control multicast level ............................................................................... 558
storm-control multicast rate ................................................................................... 558
no storm-control multicast rate ................................................................................ 559
storm-control unicast .............................................................................................. 559
no storm-control unicast .......................................................................................... 560
storm-control unicast level ..................................................................................... 560
no storm-control unicast level .................................................................................. 561
storm-control unicast rate....................................................................................... 561
no storm-control unicast rate ................................................................................... 562
show storm-control ................................................................................................. 562
Port-Channel/LAG (802.3ad) Commands ....................................................................... 564

port-channel ............................................................................................................ 565

addport .................................................................................................................. 566
deleteport (Interface Config) .................................................................................. 566
deleteport (Global Config) ....................................................................................... 567
lacp admin key ......................................................................................................... 567

23 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no lacp admin key ................................................................................................... 568
lacp collector max-delay ......................................................................................... 568
no lacp collector max delay ...................................................................................... 569
lacp actor admin key ............................................................................................... 569
no lacp actor admin key ........................................................................................... 570
lacp actor admin state individual ............................................................................ 570
no lacp actor admin state individual .......................................................................... 570
lacp actor admin state longtimeout ........................................................................ 571
no lacp actor admin state longtimeout ...................................................................... 571
lacp actor admin state passive ................................................................................ 572
no lacp actor admin state passive ............................................................................. 572
lacp actor admin state ............................................................................................. 572
no lacp actor admin state......................................................................................... 573
lacp actor port priority ............................................................................................ 573
no lacp actor port priority ........................................................................................ 574
lacp partner admin key ............................................................................................ 574
no lacp partner admin key ....................................................................................... 575
lacp partner admin state individual......................................................................... 575
no lacp partner admin state individual ...................................................................... 576
lacp partner admin state longtimeout ..................................................................... 576
no lacp partner admin state longtimeout ................................................................... 577
lacp partner admin state passive ............................................................................ 577
no lacp partner admin state passive ......................................................................... 577
lacp partner port id .................................................................................................. 578
no lacp partner port id ............................................................................................. 578
lacp partner port priority ......................................................................................... 579
no lacp partner port priority ..................................................................................... 579
lacp partner system-id............................................................................................. 580
no lacp partner system-id ........................................................................................ 580
lacp partner system priority .................................................................................... 581
no lacp partner system priority ................................................................................. 581
interface lag............................................................................................................. 582
port-channel static .................................................................................................. 582
no port-channel static .............................................................................................. 582
port lacpmode .......................................................................................................... 583
no port lacpmode .................................................................................................... 583
port lacpmode enable all ......................................................................................... 584
no port lacpmode enable all ..................................................................................... 584
port lacptimeout (Interface Config) ........................................................................ 584
no port lacptimeout ................................................................................................. 585
port lacptimeout (Global Config)............................................................................. 585
no port lacptimeout ................................................................................................. 586

24 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 port-channel adminmode ........................................................................................ 586
no port-channel adminmode .................................................................................... 587
port-channel linktrap ............................................................................................... 587
no port-channel linktrap ........................................................................................... 588
port-channel load-balance ...................................................................................... 588
no port-channel load-balance ................................................................................... 589
port-channel local-preference ................................................................................. 590
no port-channel local-preference .............................................................................. 591
port-channel min-links ............................................................................................ 591
port-channel name .................................................................................................. 591
port-channel system priority ................................................................................... 592
no port-channel system priority ................................................................................ 592
show lacp actor ....................................................................................................... 593
show lacp partner .................................................................................................... 594
show port-channel brief .......................................................................................... 595
show port-channel ................................................................................................... 596
show port-channel system priority ......................................................................... 597
show port-channel counters .................................................................................... 598
clear port-channel counters .................................................................................... 599
clear port-channel all counters ............................................................................... 600
Port Mirroring Commands ............................................................................................... 600

monitor session ....................................................................................................... 600

no monitor session .................................................................................................. 602
no monitor .............................................................................................................. 602
show monitor session .............................................................................................. 603
show vlan remote-span ........................................................................................... 604
Static MAC Filtering Commands ...................................................................................... 605

macfilter .................................................................................................................. 605

no macfilter ............................................................................................................ 606
macfilter adddest..................................................................................................... 606
no macfilter adddest ................................................................................................ 607
macfilter adddest all ................................................................................................ 608
no macfilter adddest all ........................................................................................... 608
macfilter addsrc ....................................................................................................... 609
no macfilter addsrc .................................................................................................. 609
macfilter addsrc all .................................................................................................. 610
no macfilter addsrc all ............................................................................................. 610
show mac-address-table static ............................................................................... 611
show mac-address-table staticfiltering................................................................... 611
DHCP Client Commands .................................................................................................. 612

dhcp client vendor-id-option ................................................................................... 613

no dhcp client vendor-id-option ................................................................................ 613
dhcp client vendor-id-option-string ........................................................................ 613
no dhcp client vendor-id-option-string ...................................................................... 614

25 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 show dhcp client vendor-id-option ......................................................................... 614
DHCP Snooping Configuration Commands ..................................................................... 615

ip dhcp snooping ..................................................................................................... 615

no ip dhcp snooping ................................................................................................ 615
ip dhcp snooping vlan .............................................................................................. 616
no ip dhcp snooping vlan ......................................................................................... 616
ip dhcp snooping verify mac-address ...................................................................... 616
no ip dhcp snooping verify mac-address ................................................................... 617
ip dhcp snooping database ...................................................................................... 617
ip dhcp snooping database write-delay .................................................................. 618
no ip dhcp snooping database write-delay ................................................................ 618
ip dhcp snooping binding ........................................................................................ 618
no ip dhcp snooping binding .................................................................................... 619
ip dhcp filtering trust ............................................................................................... 619
no ip dhcp filtering trust .......................................................................................... 620
ip dhcp snooping limit ............................................................................................. 620
no ip dhcp snooping limit ......................................................................................... 620
ip dhcp snooping log-invalid ................................................................................... 621
no ip dhcp snooping log-invalid ................................................................................ 621
ip dhcp snooping trust ............................................................................................. 622
no ip dhcp snooping trust ........................................................................................ 622
show ip dhcp snooping ............................................................................................ 622
show ip dhcp snooping binding ............................................................................... 624
show ip dhcp snooping database ............................................................................ 625
show ip dhcp snooping interfaces ........................................................................... 626
show ip dhcp snooping statistics............................................................................. 626
clear ip dhcp snooping binding ................................................................................ 628
clear ip dhcp snooping statistics ............................................................................. 628
IGMP Snooping Configuration Commands ...................................................................... 629

set igmp ................................................................................................................... 629

no set igmp............................................................................................................. 630
set igmp interfacemode ........................................................................................... 630
no set igmp interfacemode ...................................................................................... 631
set igmp fast-leave .................................................................................................. 631
no set igmp fast-leave ............................................................................................. 632
set igmp groupmembership-interval ....................................................................... 632
no set igmp groupmembership-interval ..................................................................... 633
set igmp maxresponse............................................................................................. 633
no set igmp maxresponse ........................................................................................ 634
set igmp mcrtrexpiretime ........................................................................................ 634
no set igmp mcrtrexpiretime .................................................................................... 635
set igmp mrouter ..................................................................................................... 636
no set igmp mrouter ................................................................................................ 636

26 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 set igmp mrouter interface...................................................................................... 636
no set igmp mrouter interface .................................................................................. 637
set igmp report-suppression ................................................................................... 637
no set igmp report-suppression ................................................................................ 638
show igmpsnooping................................................................................................. 639
show igmpsnooping mrouter interface ................................................................... 641
show igmpsnooping mrouter vlan ........................................................................... 642
show mac-address-table igmpsnooping ................................................................. 642
IGMP Snooping Querier Commands ................................................................................ 643

set igmp querier ...................................................................................................... 644

no set igmp querier ................................................................................................. 645
set igmp querier query-interval .............................................................................. 645
no set igmp querier query-interval ............................................................................ 645
set igmp querier timer expiry .................................................................................. 646
no set igmp querier timer expiry............................................................................... 646
set igmp querier version .......................................................................................... 647
no set igmp querier version...................................................................................... 647
set igmp querier election participate ...................................................................... 647
no set igmp querier election participate .................................................................... 648
show igmpsnooping querier .................................................................................... 648
Port Security Commands ................................................................................................. 650

port-security ............................................................................................................ 650

no port-security ....................................................................................................... 651
port-security max-dynamic ..................................................................................... 651
no port-security max-dynamic .................................................................................. 652
port-security max-static .......................................................................................... 652
no port-security max-static ...................................................................................... 652
port-security mac-address ...................................................................................... 653
no port-security mac-address ................................................................................... 653
port-security mac-address move ............................................................................. 654
port-security mac-address sticky ............................................................................ 654
no port-security mac-address sticky .......................................................................... 655
show port-security .................................................................................................. 655
show port-security dynamic .................................................................................... 657
show port-security static......................................................................................... 657
show port-security violation ................................................................................... 658
LLDP (802.1AB) Commands ............................................................................................ 659

lldp transmit ............................................................................................................ 659

no lldp transmit ....................................................................................................... 660
lldp receive .............................................................................................................. 660
no lldp receive ........................................................................................................ 660
lldp timers ................................................................................................................ 661
no lldp timers .......................................................................................................... 661

27 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 lldp transmit-tlv ....................................................................................................... 662
no lldp transmit-tlv .................................................................................................. 662
lldp transmit-mgmt ................................................................................................. 663
no lldp transmit-mgmt ............................................................................................. 663
lldp notification ....................................................................................................... 664
no lldp notification ................................................................................................... 664
lldp notification-interval .......................................................................................... 665
no lldp notification-interval ....................................................................................... 665
clear lldp statistics ................................................................................................... 665
clear lldp remote-data ............................................................................................. 666
show lldp ................................................................................................................. 666
show lldp interface .................................................................................................. 667
show lldp statistics .................................................................................................. 668
show lldp remote-device ......................................................................................... 670
show lldp remote-device detail ............................................................................... 671
show lldp local-device ............................................................................................. 673
show lldp local-device detail ................................................................................... 674
LLDP-MED Commands ..................................................................................................... 675

lldp med ................................................................................................................... 675

no lldp med............................................................................................................. 676
lldp med confignotification ...................................................................................... 676
no ldp med confignotification ................................................................................... 676
lldp med transmit-tlv ............................................................................................... 677
no lldp med transmit-tlv ........................................................................................... 678
lldp med all .............................................................................................................. 678
lldp med confignotification all ................................................................................. 678
lldp med faststartrepeatcount ................................................................................. 679
no lldp med faststartrepeatcount .............................................................................. 679
lldp med transmit-tlv all .......................................................................................... 680
no lldp med transmit-tlv ........................................................................................... 681
show lldp med ......................................................................................................... 681
show lldp med interface .......................................................................................... 682
show lldp med local-device detail ........................................................................... 683
show lldp med remote-device ................................................................................. 684
show lldp med remote-device detail ....................................................................... 685
Denial of Service Commands .......................................................................................... 686

dos-control all .......................................................................................................... 687

no dos-control all .................................................................................................... 687
dos-control sipdip .................................................................................................... 688
no dos-control sipdip ............................................................................................... 688
dos-control firstfrag ................................................................................................ 689
no dos-control firstfrag ............................................................................................ 689
dos-control tcpfrag .................................................................................................. 690
no dos-control tcpfrag ............................................................................................. 690

28 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 dos-control tcpflag .................................................................................................. 690
no dos-control tcpflag .............................................................................................. 691
dos-control l4port .................................................................................................... 691
no dos-control l4port ............................................................................................... 692
dos-control smacdmac ............................................................................................ 692
no dos-control smacdmac ........................................................................................ 693
dos-control tcpport .................................................................................................. 693
no dos-control tcpport ............................................................................................. 694
dos-control udpport ................................................................................................. 694
no dos-control udpport ............................................................................................ 695
dos-control tcpflagseq ............................................................................................. 695
no dos-control tcpflagseq ......................................................................................... 696
dos-control tcpoffset ............................................................................................... 696
no dos-control tcpoffset ........................................................................................... 696
dos-control tcpsyn ................................................................................................... 697
no dos-control tcpsyn .............................................................................................. 697
dos-control tcpsynfin ............................................................................................... 698
no dos-control tcpsynfin .......................................................................................... 698
dos-control tcpfinurgpsh ......................................................................................... 699
no dos-control tcpfinurgpsh ..................................................................................... 699
dos-control icmpv4 .................................................................................................. 699
no dos-control icmpv4 ............................................................................................. 700
dos-control icmpv6 .................................................................................................. 700
no dos-control icmpv6 ............................................................................................. 701
dos-control icmpfrag ............................................................................................... 701
no dos-control icmpfrag ........................................................................................... 702
show dos-control ..................................................................................................... 702
MAC Database Commands .............................................................................................. 704

bridge aging-time .................................................................................................... 704

no bridge aging-time ............................................................................................... 705
show forwardingdb agetime ................................................................................... 705
show mac-address-table multicast ......................................................................... 706
show mac-address-table stats ................................................................................ 707
Section 7: Routing Commands ..................................................................... 708
Address Resolution Protocol Commands ........................................................................ 708

arp ........................................................................................................................... 709

no arp .................................................................................................................... 709
arp cachesize ........................................................................................................... 709
no arp cachesize ..................................................................................................... 710
arp dynamicrenew ................................................................................................... 710
no arp dynamicrenew .............................................................................................. 711

29 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 arp purge ................................................................................................................. 712
arp resptime ............................................................................................................ 712
no arp resptime ....................................................................................................... 712
arp retries ................................................................................................................ 713
no arp retries .......................................................................................................... 713
arp timeout .............................................................................................................. 714
no arp timeout ........................................................................................................ 714
clear arp-cache ........................................................................................................ 714
clear arp-switch ....................................................................................................... 715
show arp .................................................................................................................. 715
show arp brief.......................................................................................................... 717
show arp switch....................................................................................................... 718
IP Routing Commands .................................................................................................... 719

routing ..................................................................................................................... 719

no routing ............................................................................................................... 719
ip routing ................................................................................................................. 720
no ip routing ........................................................................................................... 720
ip address ................................................................................................................ 720
no ip address .......................................................................................................... 722
ip address dhcp ........................................................................................................ 722
no ip address dhcp .................................................................................................. 723
ip default-gateway .................................................................................................. 723
no ip default-gateway .............................................................................................. 724
release dhcp ............................................................................................................ 725
renew dhcp .............................................................................................................. 725
renew dhcp network-port ....................................................................................... 725
ip route .................................................................................................................... 726
no ip route .............................................................................................................. 726
ip route default ........................................................................................................ 727
no ip route default ................................................................................................... 727
ip route distance ...................................................................................................... 728
no ip route distance ................................................................................................. 728
ip netdirbcast ........................................................................................................... 729
no ip netdirbcast ..................................................................................................... 729
ip mtu ...................................................................................................................... 730
no ip mtu ................................................................................................................ 730
encapsulation .......................................................................................................... 731
show dhcp lease ...................................................................................................... 731
show ip brief ............................................................................................................ 732
show ip interface ..................................................................................................... 734
show ip interface brief ............................................................................................. 736
show ip route ........................................................................................................... 738
show ip route ecmp-groups ..................................................................................... 740
show ip route summary ........................................................................................... 741

30 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 clear ip route counters ............................................................................................ 744
show ip route preferences ....................................................................................... 744
show ip stats............................................................................................................ 745
show routing heap summary ................................................................................... 746
ip prefix-list ............................................................................................................. 747
no ip prefix-list ........................................................................................................ 749
ip prefix-list description .......................................................................................... 749
no ip prefix-list description ....................................................................................... 750
route-map ................................................................................................................ 750
no route-map .......................................................................................................... 751
match ip address ..................................................................................................... 752
no match ip address ................................................................................................ 752
match ip address <access-list-number | access-list-name> ................................. 753
no match ip address ................................................................................................ 756
match length ........................................................................................................... 756
no match length ...................................................................................................... 757
match mac-list ......................................................................................................... 757
no match mac-list .................................................................................................... 759
set interface ............................................................................................................. 759
set ip next-hop ........................................................................................................ 760
no set ip next-hop ................................................................................................... 761
set ip default next-hop ............................................................................................ 761
no set ip default next-hop ........................................................................................ 762
set ip precedence ..................................................................................................... 762
no set ip precedence ............................................................................................... 763
show ip policy .......................................................................................................... 764
show ip prefix-list .................................................................................................... 764
show route-map ...................................................................................................... 766
clear ip prefix-list .................................................................................................... 767
Router Discovery Protocol Commands ............................................................................ 768

ip irdp ...................................................................................................................... 768

no ip irdp ................................................................................................................ 768
ip irdp address ......................................................................................................... 769
no ip irdp address ................................................................................................... 769
ip irdp holdtime ....................................................................................................... 769
no ip irdp holdtime .................................................................................................. 770
ip irdp maxadvertinterval ........................................................................................ 770
no ip irdp maxadvertinterval .................................................................................... 771
ip irdp minadvertinterval ......................................................................................... 771
no ip irdp minadvertinterval ..................................................................................... 771
ip irdp multicast....................................................................................................... 772
no ip irdp multicast .................................................................................................. 772
ip irdp preference .................................................................................................... 773

31 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no ip irdp preference ............................................................................................... 773
show ip irdp ............................................................................................................. 774
Virtual LAN Routing Commands ...................................................................................... 775

vlan routing ............................................................................................................. 775

no vlan routing ........................................................................................................ 777
interface vlan ........................................................................................................... 777
show ip vlan ............................................................................................................. 778
DHCP and BOOTP Relay Commands ............................................................................... 779

bootpdhcprelay cidoptmode .................................................................................... 779

no bootpdhcprelay cidoptmode ................................................................................ 779
bootpdhcprelay maxhopcount ................................................................................. 780
no bootpdhcprelay maxhopcount .............................................................................. 780
bootpdhcprelay minwaittime .................................................................................. 780
no bootpdhcprelay minwaittime................................................................................ 781
show bootpdhcprelay .............................................................................................. 781
IP Helper Commands ...................................................................................................... 782

clear ip helper statistics .......................................................................................... 785

ip helper-address (Global Config) ........................................................................... 785
no ip helper-address (Global Config) ......................................................................... 787
ip helper-address (Interface Config) ....................................................................... 787
no ip helper-address (Interface Config)..................................................................... 789
ip helper enable ....................................................................................................... 790
no ip helper enable .................................................................................................. 790
show ip helper-address ........................................................................................... 791
show ip helper statistics .......................................................................................... 792
ICMP Throttling Commands ............................................................................................ 794

ip unreachables ....................................................................................................... 794

no ip unreachables .................................................................................................. 794
ip redirects ............................................................................................................... 795
no ip redirects ......................................................................................................... 795
ip icmp echo-reply ................................................................................................... 796
no ip icmp echo-reply .............................................................................................. 796
ip icmp error-interval .............................................................................................. 796
no ip icmp error-interval .......................................................................................... 797
Section 8: IPv6 Management Commands .................................................... 797
IPv6 Management Commands ........................................................................................ 798

network ipv6 enable ................................................................................................ 798

no network ipv6 enable ........................................................................................... 799
network ipv6 address .............................................................................................. 799
no network ipv6 address .......................................................................................... 800

32 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 network ipv6 gateway ............................................................................................. 800
no network ipv6 gateway ......................................................................................... 801
network ipv6 neighbor ............................................................................................ 801
no network ipv6 neighbor ........................................................................................ 802
show network ipv6 neighbors ................................................................................. 802
ping ipv6 .................................................................................................................. 804
DHCPv6 Commands......................................................................................................... 805

show network ipv6 dhcp statistics .......................................................................... 805

clear network ipv6 dhcp statistics ........................................................................... 807
DHCPv6 Snooping Configuration Commands.................................................................. 807

ipv6 dhcp snooping.................................................................................................. 807

no ipv6 dhcp snooping ............................................................................................. 808
ipv6 dhcp snooping vlan .......................................................................................... 808
no ipv6 dhcp snooping vlan...................................................................................... 808
ipv6 dhcp snooping verify mac-address .................................................................. 809
no ipv6 dhcp snooping verify mac-address ................................................................ 809
ipv6 dhcp snooping binding..................................................................................... 809
no ipv6 dhcp snooping binding ................................................................................. 810
ipv6 dhcp snooping trust ......................................................................................... 810
no ipv6 dhcp snooping trust ..................................................................................... 810
ipv6 dhcp snooping log-invalid................................................................................ 811
no ipv6 dhcp snooping log-invalid............................................................................. 811
ipv6 dhcp snooping limit ......................................................................................... 812
no ipv6 dhcp snooping limit ..................................................................................... 812
show ipv6 dhcp snooping ........................................................................................ 813
show ipv6 dhcp snooping binding ........................................................................... 814
show ipv6 dhcp snooping interfaces ....................................................................... 815
show ipv6 dhcp snooping statistics ......................................................................... 815
clear ipv6 dhcp snooping binding ............................................................................ 816
clear ipv6 dhcp snooping statistics ......................................................................... 816

Section 9: Quality of Service Commands...................................................... 817

PoE Power Management Commands .............................................................................. 817

PoE Detection Commands ............................................................................................... 817

Class of Service Commands ............................................................................................ 817

classofservice dot1p-mapping ................................................................................. 817

no classofservice dot1p-mapping .............................................................................. 818
classofservice ip-dscp-mapping .............................................................................. 818
no classofservice ip-dscp-mapping ............................................................................ 819
classofservice trust .................................................................................................. 819
no classofservice trust ............................................................................................. 819
cos-queue min-bandwidth....................................................................................... 820

33 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no cos-queue min-bandwidth ................................................................................... 820
cos-queue strict ....................................................................................................... 821
no cos-queue strict .................................................................................................. 821
traffic-shape ............................................................................................................ 821
no traffic-shape ....................................................................................................... 822
show classofservice dot1p-mapping ....................................................................... 822
show classofservice ip-dscp-mapping ..................................................................... 823
show classofservice trust ........................................................................................ 824
show interfaces cos-queue ...................................................................................... 825
Differentiated Services Commands ................................................................................. 826

diffserv..................................................................................................................... 827
no diffserv .............................................................................................................. 828
DiffServ Class Commands ............................................................................................... 828

class-map................................................................................................................. 828
no class-map........................................................................................................... 829
class-map rename ................................................................................................... 830
match ethertype ...................................................................................................... 830
match any ................................................................................................................ 831
match class-map...................................................................................................... 831
no match class-map ................................................................................................ 832
match cos ................................................................................................................ 833
match secondary-cos ............................................................................................... 833
match destination-address mac .............................................................................. 833
match dstip .............................................................................................................. 834
match dstl4port ....................................................................................................... 834
match ip dscp........................................................................................................... 835
match ip precedence ............................................................................................... 836
match ip tos ............................................................................................................. 836
match protocol ........................................................................................................ 837
match source-address mac ...................................................................................... 838
match srcip .............................................................................................................. 838
match srcip6 ............................................................................................................ 839
match srcl4port ....................................................................................................... 839
match vlan ............................................................................................................... 840
match secondary-vlan ............................................................................................. 840
DiffServ Policy Commands .............................................................................................. 841

assign-queue ........................................................................................................... 841

drop ......................................................................................................................... 842
mirror ....................................................................................................................... 842
redirect .................................................................................................................... 843
conform-color .......................................................................................................... 843
class ......................................................................................................................... 844
no class .................................................................................................................. 844
mark cos .................................................................................................................. 845
mark cos-as-sec-cos ................................................................................................ 845
mark ip-dscp ............................................................................................................ 846

34 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 mark ip-precedence ................................................................................................. 846
police-simple ........................................................................................................... 847
police-single-rate .................................................................................................... 848
police-two-rate ........................................................................................................ 849
policy-map ............................................................................................................... 849
no policy-map ......................................................................................................... 850
policy-map rename .................................................................................................. 850
DiffServ Service Commands ............................................................................................ 851

service-policy ........................................................................................................... 851

no service-policy ..................................................................................................... 852
DiffServ Show Commands ............................................................................................... 852

show class-map ....................................................................................................... 852

show diffserv ........................................................................................................... 854
show policy-map ..................................................................................................... 855
show diffserv service ............................................................................................... 859
show diffserv service brief ...................................................................................... 860
show policy-map interface ...................................................................................... 861
show service-policy ................................................................................................. 862
MAC Access Control List Commands ............................................................................... 863

mac access-list extended ........................................................................................ 863

no mac access-list extended..................................................................................... 864
mac access-list extended rename ........................................................................... 864
{deny | permit} (MAC ACL) ..................................................................................... 865
mac access-group .................................................................................................... 867
no mac access-group ............................................................................................... 869
show mac access-lists ............................................................................................. 869
IP Access Control List Commands ................................................................................... 871

access-list ................................................................................................................ 872

no access-list .......................................................................................................... 876
ip access-list ............................................................................................................ 877
no ip access-list ....................................................................................................... 877
ip access-list rename ............................................................................................... 877
{deny | permit} (IP ACL) ........................................................................................ 878
ip access-group........................................................................................................ 883
no ip access-group .................................................................................................. 884
acl-trapflags ............................................................................................................ 885
no acl-trapflags ....................................................................................................... 885
show ip access-lists ................................................................................................. 885
show access-lists ..................................................................................................... 889
show access-lists vlan ............................................................................................. 890
Time Range Commands for Time-Based ACLs ................................................................ 891

time-range ............................................................................................................... 891

no time-range ......................................................................................................... 892
absolute ................................................................................................................... 892

35 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 no absolute ............................................................................................................. 892
periodic .................................................................................................................... 893
no periodic .............................................................................................................. 894
show time-range ..................................................................................................... 894
Auto-Voice over IP Commands ....................................................................................... 895

auto-voip ................................................................................................................. 895

no auto-voip ........................................................................................................... 896
auto-voip oui ........................................................................................................... 896
no auto-voip oui ...................................................................................................... 897
auto-voip oui-based priority .................................................................................... 897
no auto-voip oui ...................................................................................................... 898
auto-voip protocol-based ........................................................................................ 898
no auto-voip protocol-based..................................................................................... 899
auto-voip vlan.......................................................................................................... 899
no auto-voip vlan .................................................................................................... 900
show auto-voip ........................................................................................................ 900
show auto-voip oui-table ........................................................................................ 902

Section 10: Power over Ethernet (PoE) Commands ..................................... 902

PoE Detection Commands ............................................................................................... 903

poe detection 4ptdot3af .......................................................................................... 904

no poe detection ..................................................................................................... 904
poe detection 4ptdot3af+legacy ............................................................................. 904
no poe detection ..................................................................................................... 904
poe detection legacy ............................................................................................... 905
no poe detection ..................................................................................................... 905
PoE Power Limits Commands .......................................................................................... 905

poe power limit dot3af ............................................................................................ 905

no poe power limit .................................................................................................. 906
poe power limit none ............................................................................................... 906
no poe power limit .................................................................................................. 906
poe power limit user-defined .................................................................................. 906
no poe power limit .................................................................................................. 907
PoE Power Management Commands .............................................................................. 907

poe power management .......................................................................................... 907

no poe power management ..................................................................................... 908
PoE Priority ..................................................................................................................... 908

poe priority .............................................................................................................. 908

no poe priority ........................................................................................................ 909
PoE High-Power .............................................................................................................. 909

36 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 poe high-power ....................................................................................................... 909
no poe high-power .................................................................................................. 909
PoE Reset ........................................................................................................................ 910

poe reset .................................................................................................................. 910

poe reset auto.......................................................................................................... 910
poe reset auto all ..................................................................................................... 910
PoE Traps ........................................................................................................................ 911

poe traps .................................................................................................................. 911

no poe traps ........................................................................................................... 911
PoE UsageThreshold........................................................................................................ 911

poe usagethreshold ................................................................................................. 912

no poe usagethreshold ............................................................................................ 912
PoE Timer Schedule......................................................................................................... 912

poe timer schedule .................................................................................................. 913

no poe timer schedule ............................................................................................. 913
Show PoE Commands ...................................................................................................... 913

show poe ................................................................................................................. 913

show poe configuration ........................................................................................... 914
show poe info .......................................................................................................... 914

Section 11: DM1200E Log Messages ............................................................ 914

Core ................................................................................................................................. 915

Utilities ............................................................................................................................ 918

Management ................................................................................................................... 923

Switching ........................................................................................................................ 928

QoS .................................................................................................................................. 938

Stacking .......................................................................................................................... 939

Technologies ................................................................................................................... 939

37 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 List of Tables
TABLE 1: PARAMETER CONVENTIONS ........................................................................................................... 43
TABLE 2: PARAMETER DESCRIPTIONS ............................................................................................................ 43
TABLE 3: TYPE OF SLOTS ................................................................................................................................... 45
TABLE 4: TYPE OF PORTS .................................................................................................................................. 45
TABLE 5: CLI COMMAND MODES.................................................................................................................. 48
TABLE 6: CLI MODE ACCESS AND EXIT ......................................................................................................... 50
TABLE 7: CLI ERROR MESSAGES ..................................................................................................................... 53
TABLE 8: CLI EDITING CONVENTIONS ........................................................................................................... 54
TABLE 9: COPY PARAMETERS .......................................................................................................................318
TABLE 10: DEFAULT PORTS - UDP PORT NUMBERS IMPLIED BY WILDCARD............................................783
TABLE 11: ETHERTYPE KEYWORD AND 4-DIGIT HEXADECIMAL VALE .....................................................865
TABLE 12: ACL COMMAND PARAMETERS..................................................................................................873
TABLE 13: BSP LOG MESSAGES ....................................................................................................................915
TABLE 14: NIM LOG MESSAGES ....................................................................................................................915
TABLE 15: SIM LOG MESSAGE ......................................................................................................................916
TABLE 16: SYSTEM LOG MESSAGES ..............................................................................................................917
TABLE 17: TRAP MGR LOG MESSAGES ........................................................................................................918
TABLE 18: DHCP FILTERING LOG MESSAGES ..............................................................................................918
TABLE 19: NVSTORE LOG MESSAGES ..........................................................................................................918
TABLE 20: RADIUS LOG MESSAGES ..............................................................................................................919
TABLE 21: TACACS+ LOG MESSAGES .........................................................................................................921
TABLE 22: SNTP LOG MESSAGE ....................................................................................................................921
TABLE 23: DHCPV6 CLIENT LOG MESSAGES ..............................................................................................922
TABLE 24: DHCPV4 CLIENT LOG MESSAGES ..............................................................................................922
TABLE 25: SNMP LOG MESSAGE ..................................................................................................................923
TABLE 26: EMWEB LOG MESSAGES .............................................................................................................923
TABLE 27: CLI_UTIL LOG MESSAGES.............................................................................................................924
TABLE 28: WEB LOG MESSAGES ...................................................................................................................924
TABLE 29: CLI_WEB_MGR LOG MESSAGES ................................................................................................925
TABLE 30: SSHD LOG MESSAGES ..................................................................................................................925
TABLE 31: SSLT LOG MESSAGES ....................................................................................................................926
TABLE 32: USER_MANAGER LOG MESSAGES .............................................................................................927
TABLE 33: PROTECTED PORTS LOG MESSAGES .........................................................................................928
TABLE 34: IP SUBNET VLANS LOG MESSAGES .............................................................................................928
TABLE 35: MAC-BASED VLANS LOG MESSAGES........................................................................................929
TABLE 36: 802.1X LOG MESSAGES ...............................................................................................................930
TABLE 37: IGMP SNOOPING LOG MESSAGES ...........................................................................................931
TABLE 38: GARP/GVRP/GMRP LOG MESSAGES .......................................................................................932

38 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TABLE 39: 802.3AD LOG MESSAGES ............................................................................................................933
TABLE 40: FDB LOG MESSAGE ......................................................................................................................933
TABLE 41: MFDB LOG MESSAGE ..................................................................................................................933
TABLE 42: 802.1Q LOG MESSAGES ..............................................................................................................933
TABLE 43: 802.1S LOG MESSAGES ...............................................................................................................937
TABLE 44: PORT MAC LOCKING LOG MESSAGE ......................................................................................937
TABLE 45: ACL LOG MESSAGES ...................................................................................................................938
TABLE 46: COS LOG MESSAGE ....................................................................................................................938
TABLE 47: EDB LOG MESSAGE ......................................................................................................................939
TABLE 48: ERROR MESSAGES ........................................................................................................................939

39 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

About This Document
Purpose and Audience
This document describes command-line interface (CLI) commands you use to view and
configure DM1200E family of switches. You can access the CLI by using a direct connection to
the serial port or by using telnet or SSH over a remote network connection.

Note: This document contains both standalone and stacking commands. The stacking
commands are available on the DM1200E.

This document is for system administrators who configure and operate systems. It provides an
understanding of the configuration options of the DM1200E.

This document assumes that the reader has an basic knowledge of Ethernet and networking
concepts.

Document Conventions
The following conventions may be used in this document:

CONVENTION DESCRIPTION

BOLD  User input and actions: for example, type exit, click OK, press Alt+C

Monospace Code:#include <iostream>

HTML: <td rowspan = 3>

Command line commands and parameters: wl [-l] <command>

<> Placeholders for required elements: enter your <username> or wl <command>

[] Indicates optional command-line parameters: wl [-l]

Indicates bit and byte ranges (inclusive): [0:3] or [7:0]

40 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Note: Notes better explain some detail presented in the text.

Caution!: This formatting indicates that the text herein has great importance and risk of
damage. Must be read with care and can avoid great difficulties.

Section 1: Product Concept

Fast Ethernet and Gigabit Ethernet switching continues to evolve from high-end backbone
applications to desktop switching applications. The price of the technology continues to decline,
while performance and feature sets continue to improve. Devices that are capable of switching
Layers 2, 3, and 4 are increasingly in demand.
DM1200E software includes a set of comprehensive management functions for managing both
software and the network. You can manage the system by using one of the following three
methods:
 Command-Line Interface (CLI)
 Simple Network Management Protocol (SNMP)
 Web-based
Each of the management methods enables you to configure, manage, and control the software
locally or remotely using in-band or out-of-band mechanisms. Management is standards-based,
with configuration parameters and a private MIB providing control for functions not completely
specified in the MIBs.

Section 2: Using the Command-Line Interface

The command-line interface (CLI) is a text-based way to manage and monitor the system. You
can access the CLI by using a direct serial connection or by using a remote logical connection
with telnet or SSH.
This chapter describes the CLI syntax, conventions, and modes. It contains the following
sections:
 Command Syntax

41 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Command Conventions
 Common Parameter Values
 unit/slot/port Naming Convention
 Using the “No” Form of a Command
 Executing Show Commands
 CLI Output Filtering

Command Syntax
A command is one or more words that might be followed by one or more parameters.
Parameters can be required or optional values.
Some commands, such as show network or clear vlan, do not require parameters. Other
commands, such as network parms, require that you supply a value after the command. You
must type the parameter values in a specific order, and optional parameters follow required
parameters. The following example describes the network parms command syntax:
network parms ipaddr netmask [gateway]

 network parms is the command name.

 ipaddr and netmask are parameters and represent required values that you must enter

after you type the command keywords.

 [gateway] is an optional parameter, so you are not required to enter a value in place of

the parameter.
The CLI Command Reference lists each command by the command name and provides a brief
description of the command. Each command reference also contains the following information:
 Format shows the command keywords and the required and optional parameters.
 Mode identifies the command mode you must be in to access the command.
 Default shows the default value, if any, of a configurable setting on the device.

The show commands also contain a description of the information that the command shows.

42 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Conventions
The parameters for a command might include mandatory values, optional values, or keyword
choices. Parameters are order-dependent. Table 1: Parameter Conventions describes the
conventions this document uses to distinguish between value types.
Table 1: Parameter Conventions

SYMBOL EXAMPLE DESCRIPTION

[] square brackets [value] Indicates an optional parameter.

italic font in a value or [value] Indicates a variable value. You must replace the italicized
parameter. text and brackets with an appropriate value, which might
be a name or number.

{} curly braces {choice1 | choice2} Indicates that you must select a parameter from the list
of choices.

| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.

[{}] Braces within [{choice1 | Indicates a choice within an optional element.

square brackets choice2}]

Common Parameter Values

Parameter values might be names (strings) or numbers. To use spaces as part of a name
parameter, enclose the name value in double quotes. For example, the expression “System
Name with Spaces” forces the system to accept the spaces. Empty strings (““) are not valid
user-defined strings. Table 2: Parameter Descriptions describes common parameter values and
value formatting.
Table 2: Parameter Descriptions

PARAMETER DESCRIPTION

ipaddr This parameter is a valid IP address. You can enter the IP address in the following
formats:

43 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 a (32 bits)

a.b (8.24 bits)

a.b.c (8.8.16 bits)

a.b.c.d (8.8.8.8)

In addition to these formats, the CLI accepts decimal, hexadecimal and octal formats
through the following input formats (where n is any valid hexadecimal, octal or decimal
number):

0xn (CLI assumes hexadecimal format.)

0n (CLI assumes octal format with leading zeros.)

n (CLI assumes decimal format.)

ipv6-address FE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or

FE80:0:0:0:20F:24FF:FEBF:DBCB, or

FE80::20F24FF:FEBF:DBCB, or

FE80:0:0:0:20F:24FF:128:141:49:32

For additional information, refer to RFC 3513.

Interface or Valid slot and port number separated by a forward slash. For example, 1/0/2 representes
slot number 0 and port number 2 of the unit 1.
unit/slot/port

Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-channel
(LAG). You can use the logical unit/slot/port to configure the port-channel.

Character strings Use double quotation marks to identify character strings, for example, “System Name
with Spaces”. An empty string (“”) is not valid.

unit/slot/port Naming Convention

Physical entities, such as cards and ports, are referenced by using a unit/slot/port naming
convention. The DM1200E software also uses this convention to identify certain logical entities,
such as Port-Channel interfaces.

44 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

The slot number has two uses. In the case of physical ports, it identifies the card containing the
ports (always zero). In the case of logical and CPU ports it also identifies the type of interface
or port. Logical and CPU ports are located at unit 0.
Table 3: Type of Slots

SLOT TYPE DESCRIPTION

Physical slot numbers Physical slot numbers are always zero.

Logical slot numbers Logical slots identify port-channel (LAG) - slot 3 - or router interfaces - slot 4.

CPU slot numbers The CPU slots immediately follow the logical slots and is designated by the number 5.

The port identifies the specific physical port or logical interface being managed on a given slot.
Table 4: Type of Ports

PORT TYPE DESCRIPTION

Physical Ports The physical ports for each slot are numbered sequentially starting from one/ For example,
port 1 on slot 0 (an internal port) for a stand alone (nonstacked) switch is 1/0/1, port 2 is
1/0/2, port 3 is 1/0/3, and so on.

Logical Interfaces Port-channel or Link Aggregation Group (LAG) interfaces are logical interfaces that are only
used for bridging functions.

VLAN routing interfaces are only used for routing functions.

CPU ports CPU ports are handled by the driver as one or more physical entities located on physical
slots.

Using the “No” Form of a Command

The no keyword is a specific form of an existing command and does not represent a new or
distinct command. Almost every configuration command has a no form. In general, use the no
form to reverse the action of a command or reset a value back to the default. For example, the
no shutdown configuration command reverses the shutdown of an interface. Use the command

45 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

without the keyword no to re-enable a disabled feature or to enable a feature that is disabled by
default. Only the configuration commands are available in the no form.

Executing Show Commands

All show commands can be issued from any configuration mode (Global Configuration, Interface
Configuration, VLAN Configuration, etc.). The show commands provide information about
system and feature-specific configuration, status, and statistics.

CLI Output Filtering

Many CLI show commands include considerable content to display to the user. This can make
output confusing and cumbersome to parse through to find the information of desired
importance. The CLI Output Filtering feature allows the user, when executing CLI show display
commands, to optionally specify arguments to filter the CLI output to display only desired
information. The result is to simplify the display and make it easier for the user to find the
information the user is interested in.
The main functions of the CLI Output Filtering feature are:
 Pagination Control
– Supports enabling/disabling paginated output for all show CLI commands. When
disabled, output is displayed in its entirety. When enabled, output is displayed page-
by-page such that content does not scroll off the terminal screen until the user
presses a key to continue. --More-- or (q)uit is displayed at the end of each page.
– When pagination is enabled, press the return key to advance a single line, press q or
Q to stop pagination, or press any other key to advance a whole page. These keys are
not configurable.
 Output Filtering
– “Grep”-like control for modifying the displayed output to only show the user-desired
content.
 Filter displayed output to only include lines containing a specified string match.
 Filter displayed output to exclude lines containing a specified string match.

46 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Filter displayed output to only include lines including and following a specified
string match.

 Filter displayed output to only include a specified section of the content (e.g.
“interface 0/1”) with a configurable end-of-section delimiter.
 String matching should be case insensitive.
 Pagination, when enabled, also applies to filtered output.

Example: The following shows an example of the extensions made to the CLI show commands
for the Output Filtering feature.
(DM1200E) #show running-config ?
<cr> Press enter to execute the command.
| Output filter options.
<scriptname> Script file name for writing active configuration.
Show all the running configuration on the switch.
interface Display the running configuration for specificed
interface on the switch.

(DM1200E) #show running-config | ?

begin Begin with the line that
matches
exclude Exclude lines that matches
include Include lines that matches
section Display portion of lines
For new commands for the feature, see CLI Output Filtering Commands.

Command Modes
The CLI groups commands into modes according to the command function. Each of the
command modes supports specific software commands. The commands in one mode are not
available until you switch to that particular mode, with the exception of the User EXEC mode
commands. You can execute the User EXEC mode commands in the Privileged EXEC mode.
The command prompt changes in each command mode to help you identify the current mode.
Table 5: CLI Command Modes describes the command modes and the prompts visible in that
mode.

Note: The word Switch, Prompt column of the table below, must be replaced by the hostname
configured for the device, which, by default, assumes the value DM1200E.

47 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Table 5: CLI Command Modes

COMMAND MODE PROMPT MODE DESCRIPTION

User EXEC Switch> Contains a limited set of commands to view

basic system information.

Privileged EXEC Switch# Allows you to issue any EXEC command,

enter the VLAN mode, or enter the Global
Configuration mode.

Global Config Switch (Config)# Groups general setup commands and

permits you to make modifications to the
running configuration.

VLAN Config Switch (Vlan)# Groups all the VLAN commands.

Interface Config Switch (Interface Manages the operation of an interface and

unit/slot/port)# provides access to the router interface
configuration commands.

Switch (Interface unit/slot/port You can also use this mode to manage the
(startrange)- operation of a range of interfaces. For
unit/slot/port(endrange)# example the prompt may display as follows:

Switch (Interface 1/0/1-1/0/4) #

Switch (Interface lag lag-intf- Enters LAG Interface configuration mode for
num)# the specified LAG.

Switch (Interface vlan vlan-id)# Enters VLAN routing interface configuration

mode for the specified VLAN ID.

48 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COMMAND MODE PROMPT MODE DESCRIPTION

Line Console Switch (config-line)# Contains commands to configure console

interface settings, as well as to configure
console login/enable authentication.

Line SSH Switch (config-ssh)# Contains commands to configure SSH

login/enable authentication.

Line Telnet Switch (config-telnet)# Contains commands to configure telnet

login/enable authentication.

AAA IAS User Config Switch (Config-IAS-User)# Allows password configuration for a user in
the IAS database.

Mail Server Config Switch (Mail-Server)# Allows configuration of the email server.

Policy Map Config Switch (Config-policy-map)# Contains the QoS Policy-Map configuration
commands.

Policy ClassConfig Switch (Config-policy-class- Consists of class creation, deletion, and

map)# matching commands. The class match
commands specify Layer 2, Layer 3, and
general match criteria.

Class Map Config Switch (Config-class-map)# Contains the QoS class map configuration
commands.

49 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 COMMAND MODE PROMPT MODE DESCRIPTION

Route Map Config Switch (config-route-map)# Contains the route map configuration
commands.

MAC Access-list Switch (Config-mac-access-list)# Allows you to create a MAC Access-List and
Config to enter the mode containing MAC Access-
List configuration commands.

TACACS Config Switch (Tacacs)# Contains commands to configure properties

for the TACACS servers.

DHCP PoolConfig Switch (Config dhcp-pool)# Contains the DHCP server IP address pool
configuration commands.

Stack Global Config Switch (Config stack)# Allows you to access the Stack Global Config
Mode Mode.

ARP Access-List Switch (Config-arp-access-list)# Contains commands to add ARP ACL rules in
Config Mode an ARP Access List.

Table 6: CLI Mode Access and Exit explains how to enter or exit each mode.
Table 6: CLI Mode Access and Exit

COMMAND MODE ACCESS METHOD EXIT OR ACCESS PREVIOUS MODE

User EXEC This is the first level of access. To exit, enter logout.

Privileged EXEC From the User EXEC mode, enter To exit to the User EXEC mode, enter exit or press
enable. Ctrl-Z.

Global Config From the Privileged EXEC mode, enter To exit to the Privileged EXEC mode, enter exit, or
configure. press Ctrl-Z.

50 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COMMAND MODE ACCESS METHOD EXIT OR ACCESS PREVIOUS MODE

VLAN Config From the Privileged EXEC mode, enter To exit to the Privileged EXEC mode, enter exit, or
vlan database. press Ctrl-Z.

Interface Config From the Global Config mode, enter: To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
interface unit/slot/port or

interface
unit/slot/port(startrange)-
unit/slot/port(endrange)

interface lag lag-intf-num

interface vlan vlan-id

Line Console From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
line console. return to the Privileged EXEC mode, enter Ctrl-Z.

Line SSH From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
line ssh. return to the Privileged EXEC mode, enter Ctrl-Z.

Line Telnet From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
line telnet. return to the Privileged EXEC mode, enter Ctrl-Z.

AAA IAS User Config From the Global Config mode, To exit to the Global Config mode, enter exit. To
enter return to the Privileged EXEC mode, enter Ctrl-Z.

aaa ias-user username name.

Mail Server Config From the Global Config mode, To exit to the Global Config mode, enter exit. To
enter return to the Privileged EXEC mode, enter Ctrl-Z.

mail-server address

51 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COMMAND MODE ACCESS METHOD EXIT OR ACCESS PREVIOUS MODE

Policy-Map Config From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
policy-map. return to the Privileged EXEC mode, enter Ctrl-Z.

Policy-Class-Map From the Policy Map mode enter To exit to the Policy Map mode, enter exit. To
Config class. return to the Privileged EXEC mode, enter Ctrl-Z.

Class-Map Config From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
class-map name. return to the Privileged EXEC mode, enter Ctrl-Z.

Route Map Config From the Global Config mode, enter - To exit to the Global Config mode, enter exit. To
route-map map-tag. return to the Privileged EXEC mode, enter Ctrl-Z.

MAC Access-list Config From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
mac access-list extended return to the Privileged EXEC mode, enter Ctrl-Z.
name.

TACACS Config From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
tacacs-server host ip-addr, return to the Privileged EXEC mode, enter Ctrl-Z.
where ip-addr is the IP address of
the TACACS server on your network.

DHCP Pool Config From the Global Config mode, enter To exit to the Global Config mode, enter exit. To
ip dhcp pool pool-name. return to the Privileged EXEC mode, enter Ctrl-Z.

Stack Global Config From the Global Config mode, enter To exit to the Global Config mode, enter the exit
Mode the stack command. command. To return to the Privileged EXEC mode,
enter Ctrl-Z.

ARP Access-List Config From the Global Config mode, enter To exit to the Global Config mode, enter the exit
Mode the arp access-list command. command. To return to the Privileged EXEC mode,
enter Ctrl-Z.

52 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Completion and Abbreviation
Command completion finishes spelling the command when you type enough letters of a
command to uniquely identify the command keyword. Once you have entered enough letters,
press the SPACEBAR or TAB key to complete the word.
Command abbreviation allows you to execute a command when you have entered there are
enough letters to uniquely identify the command. You must enter all of the required keywords
and parameters before you enter the command.

CLI Error Messages

If you enter a command and the system is unable to execute it, an error message appears.
Table 7: CLI Error Messages describes the most common CLI error messages.
Table 7: CLI Error Messages

MESSAGE TEXT DESCRIPTION

% Invalid input Indicates that you entered an incorrect or unavailable command. The carat (^) shows
detected at '^' where the invalid text is detected. This message also appears if any of the parameters or
marker. values are not recognized.

Command not found / Indicates that you did not enter the required keywords or values.
Incomplete command.
Use ? to list
commands.

Ambiguous command Indicates that you did not enter enough letters to uniquely identify the command.

CLI Line-Editing Conventions

Table 8: CLI Editing Conventions describes the key combinations you can use to edit commands
or increase the speed of command entry. You can access this list from the CLI by entering help
from the User or Privileged EXEC modes.

53 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Table 8: CLI Editing Conventions

KEY SEQUENCE DESCRIPTION

DEL or Backspace Delete previous character.

Ctrl-A Go to beginning of line.

Ctrl-E Go to end of line.

Ctrl-F Go forward one character.

Ctrl-B Go backward one character.

Ctrl-D Delete current character.

Ctrl-U, X Delete to beginning of line.

Ctrl-K Delete to end of line.

Ctrl-W Delete previous word.

Ctrl-T Transpose previous character.

Ctrl-P Go to previous line in history buffer.

Ctrl-R Rewrites or pastes the line.

Ctrl-N Go to next line in history buffer.

Ctrl-Y Prints last deleted character.

54 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Ctrl-Q Enables serial flow.

Ctrl-S Disables serial flow.

Ctrl-Z Return to root command prompt.

Tab, <SPACE> Command-line completion.

Exit Go to next lower command prompt.

? List available commands, keywords, or parameters.

Using CLI Help

Enter a question mark (?) at the command prompt to display the commands available in the
current mode.
(DM1200E) >?

enable Enter into user privilege mode.

help Display help for various special keys.
logout Exit this session. Any unsaved changes are
lost.
password Change an existing user’s password.
ping Send ICMP echo packets to a specified IP
address.
quit Exit this session. Any unsaved changes are
lost.
show Display Switch Options and Settings.
telnet Telnet to a remote host.

Enter a question mark (?) after each word you enter to display available command keywords or
parameters.
(DM1200E) #network ?

ipv6 Configure IPv6 parameters for system network.

javamode Enable/Disable.
mgmt_vlan Configure the Management VLAN ID of the switch.
parms Configure Network Parameters of the device.
protocol Select DHCP, BootP, or None as the network config

55 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 protocol.

If the help output shows a parameter in angle brackets, you must replace the parameter with a
value.
(DM1200E) #network parms ?

<ipaddr> Enter the IP Address.

Default Set IP address and gateway on management interface to
default value.
none Reset IP address and gateway on management interface

If there are no additional command keywords or parameters, or if additional parameters are

optional, the following message appears in the output:
<cr> Press Enter to execute the command
You can also enter a question mark (?) after typing one or more characters of a word to list the
available command or parameters that begin with the letters, as shown in the following.
Example:
(DM1200E) #show m?

mail-server mbuf monitor

Accessing the CLI

You can access the CLI by using a direct console connection or by using a telnet or SSH
connection from a remote management host.
For the initial connection, you could use a direct connection to the console port or a telnet
connection to the default IP address: 192.168.0.25 (with a 255.255.255.0 subnet mask and
without a default gateway), directly connecting an ethernet port of your PC to any port of the
switch. You can set the network configuration information manually, or you can configure the
system to accept these settings from a BOOTP or DHCP server on your network. For more
information, see Network Interface Commands.

Section 3: Stacking Commands

This chapter describes the stacking commands available in the DM1200E series.
The Stacking Commands chapter includes the following sections:

56 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Dedicated Port Stacking
 Erro! Fonte de referência não encontrada.
 Stack Firmware Synchronization Commands

Caution! You need to reset the system immediately to change the stack mode. If you do not
confirm the system reset when prompted for that, the stack-enable configuration will not be
applied on any other reset of the equipment.

Note: The Primary Management Unit is the unit that controls the stack.

Dedicated Port Stacking

This section describes the commands you use to configure dedicated port stacking.

stack-enable
The stack-enable command must be used to activate the stacking support.

Caution! You need to reset the system to change the stack mode. Are you sure you would like
to reset the system? (y/n)).
The stack-enabled configuration will not be applied on next reset of the equipment.

Default without support stacking

Format stack-enable

Mode Global Config

Command Added in firmware release 1.0

57 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no stack-enable
Use this command to disable the stacking support.

Default without support stacking

Format no stack-enable

Mode Global Config

Command Added in firmware release 1.0

History

stack
This command sets the mode to Stack Global Config.

Default N/A

Format Stack

Mode Global Config

Command Added in firmware release 1.0

History

member
This command configures a switch. The unit is the switch identifier of the switch to be
added/removed from the stack. The switchindex is the index into the database of the
supported switch types, indicating the type of the switch being preconfigured. The switch index
is a 32-bit integer. This command is executed on the Primary Management Unit.

58 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default unit = 1, switchindex = 3

Obs.: The unit number is stored at local switch configuration files. Different units into the stacking
must have different numbers. The switchindex depends on the switch model: DM1200E 24GT+4GX
have switchindex 1, DM1200E 24GT+4XS have switchindex 2 at standalone configuration and have
switchindex 3 at stacking configuration.

Format member unit switchindex

Mode Stack Global Config

Command Added in firmware release 1.0

History

Note: Switch index can be obtained by executing the show supported switchtype command in
User EXEC mode.

no member
This command removes a switch from the stack. The unit is the switch identifier of the switch
to be removed from the stack. This command is executed on the Primary Management Unit.

Default N/A

Format no member unit

Mode Stack Global Config

Command Added in firmware release 1.0

History

59 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

switch priority
This command configures the ability of a switch to become the Primary Management Unit. The
unit is the switch identifier. The value is the preference parameter that allows the user to

specify, priority of one backup switch over another. The range for priority is 1 to 15. The switch
with the highest priority value will be chosen to become the Primary Management Unit if the
active Primary Management Unit fails. The switch priority defaults to the hardware management
preference value 1. Switches that do not have the hardware capability to become the Primary
Management Unit are not eligible for management.

Default enabled

Format switch unit priority value

Mode Global Config

Command Added in firmware release 1.0

History

switch renumber
This command changes the switch identifier for a switch in the stack. The oldunit is the
current switch identifier on the switch whose identifier is to be changed. The newunit is the
updated value of the switch identifier. Upon execution, the switch will be configured with the
configuration information for the new switch, if any. The old switch configuration information
will be retained, however the old switch will be operationally unplugged. This command is
executed on the Primary Management Unit.

Note: If the management unit is renumbered, then the running configuration is no longer
applied (i.e. the stack acts as if the configuration had been cleared).

Default N/A

Obs.: When a unit disconnect from the stacking, that unit remain with the same number until an

60 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 explicit switch renumber.

Format Switch oldunit renumber newunit

Mode Global Config

Command Added in firmware release 1.0

History

movemanagement
This command moves the Primary Management Unit functionality from one switch to another.
The fromunit is the switch identifier on the current Primary Management Unit. The tounit is
the switch identifier on the new Primary Management Unit. Upon execution, the entire stack
(including all interfaces in the stack) is unconfigured and reconfigured with the configuration on
the new Primary Management Unit. After the reload is complete, all stack management
capability must be performed on the new Primary Management Unit. To preserve the current
configuration across a stack move, execute the copy system: running-config nvram:startup-
config(in Privileged EXEC) command before performing the stack move. A stack move causes

all routes and layer 2 addresses to be lost. This command is executed on the Primary
Management Unit. The system prompts you to confirm the management move.

Default N/A

Format Movemanagement fromunit tounit

Mode Stack Global Config

Command Added in firmware release 1.0

History

standby
Use this command to configure a unit as a Standby Management Unit (STBY).

61 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: The Standby Management Unit cannot be the current Management Unit. The Standby
unit should be a management-capable unit.

Default N/A

Format standby unit number

Mode Stack Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Standby Management Unit Indicates the unit number which is to be the Standby Management Unit. unit number
Number must be a valid unit number.

no standby
The no form of this command allows the application to run the auto Standby Management Unit
logic.

Default N/A

Format no standby

Mode Stack Global Config

Command Added in firmware release 1.0

History

62 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

slot
This command configures a slot in the system. The unit/slot is the slot identifier of the slot.
The cardindex is the index into the database of the supported card types, indicating the type
of the card being preconfigured in the specified slot. The card index is a 32-bit integer. If a card
is currently present in the slot that is unconfigured, the configured information will be deleted
and the slot will be reconfigured with default information for the card.

Default Slot = 0 and cardindex have the same options of switchindex on member command.

Format slot unit/slot cardindex

Mode Global Config

Command Added in firmware release 1.0

History

Note: Card index can be obtained by executing show supported cardtype command in User
EXEC mode.

no slot
This command removes configured information from an existing slot in the system.

Default N/A

Format no slot unit/slot cardindex

Mode Global Config

Command Added in firmware release 1.0

History

63 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: Card index can be obtained by executing show supported cardtype command in User
EXEC mode.

set slot disable

This command configures the administrative mode of the slot(s). If you specify [all], the
command is applied to all slots, otherwise the command is applied to the slot identified by
unit/slot.

If a card or other module is present in the slot, this administrative mode will effectively be
applied to the contents of the slot. If the slot is empty, this administrative mode will be applied
to any module that is inserted into the slot. If a card is disabled, all the ports on the device are
operationally disabled and shown as “unplugged” on management screens.

Default N/A

Format set slot disable [unit/slot | all]

Mode Global Config

Command Added in firmware release 1.0

History

no set slot disable

This command unconfigures the administrative mode of the slot(s). If you specify all, the
command removes the configuration from all slots, otherwise the configuration is removed from
the slot identified by unit/slot.

If a card or other module is present in the slot, this administrative mode removes the
configuration from the contents of the slot. If the slot is empty, this administrative mode
removes the configuration from any module inserted into the slot. If a card is disabled, all the

64 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ports on the device are operationally disabled and shown as “unplugged” on management
screens.

Default N/A

Format no set slot disable [unit/slot | all]

Mode Global Config

Command Added in firmware release 1.0

History

set slot power

This command configures the power mode of the slot(s) and allows power to be supplied to a
card located in the slot. If you specify all, the command is applied to all slots, otherwise the
command is applied to the slot identified by unit/slot.

Use this command when installing or removing cards. If a card or other module is present in
this slot, the power mode is applied to the contents of the slot. If the slot is empty, the power
mode is applied to any card inserted into the slot.

Default N/A

Format set slot power [unit/slot | all]

Mode Global Config

Command Added in firmware release 1.0

History

65 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no set slot power
This command unconfigures the power mode of the slot(s) and prohibits power from being
supplied to a card located in the slot. If you specify all, the command prohibits power to all
slots, otherwise the command prohibits power to the slot identified by unit/slot.

Use this command when installing or removing cards. If a card or other module is present in
this slot, power is prohibited to the contents of the slot. If the slot is empty, power is prohibited
to any card inserted into the slot.

Default N/A

Format no set slot power [unit/slot | all]

Mode Global Config

Command Added in firmware release 1.0

History

reload (Stack)
This command resets the entire stack or the identified unit. The unit is the switch identifier.
The system prompts you to confirm that you want to reset the switch.

Default all

Format reload [unit]

Mode Global Config

Command Added in firmware release 1.0

History

show slot
This command displays information about all the slots in the system or for a specific slot.

66 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show slot [unit/slot]

Mode User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Slot The slot identifier in a unit/slot format.

Slot Status The slot is empty, full, or has encountered an error

Admin State The slot administrative mode is enabled or disabled.

Power State The slot power mode is enabled or disabled.

Configured Card The model identifier of the card preconfigured in the slot. Model Identifier is a 32-character
Model Identifier field used to identify a card.

Pluggable Cards are pluggable or non-pluggable in the slot.

Power Down Indicates whether the slot can be powered down.

Example: The following shows example CLI display output for the command.
(DM1200E) #show slot

Admin Power Configured Card Power

Slot Status State State Model ID Pluggable Down
----- ------ ------- ------- -------------------------------- --------- -----
1/0 Empty Enable Enable 24GT+4XS Stacking No No

67 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 2/0 Empty Enable Enable 24GT+4XS Stacking No No
3/0 Full Enable Enable 24GT+4XS Standalone No No

If you supply a value for unit/slot, the following additional information appears:

TERM DEFINITION

Inserted Card Model The model identifier of the card inserted in the slot. Model Identifier is a 32-character field
Identifier used to identify a card. This field is displayed only if the slot is full.

Inserted Card The card description. This field is displayed only if the slot is full.
Description

Configured Card The card description.

Description

Example: The following shows example CLI display output for the command.
(DM1200E) #show slot 3/0

Slot.............................. 3/0
Slot Status....................... Full
Admin State....................... Enable
Power State....................... Enable
Inserted Card:
Model Identifier............... 24GT+4XS Standalone
Card Description............... DM1200E 24GT+4XS Standalone
Configured Card:
Model Identifier............... 24GT+4XS Standalone
Card Description............... DM1200E 24GT+4XS Standalone
Pluggable......................... No
Power Down........................ No

(DM1200E) #show slot 1/0

Slot.............................. 1/0
Slot Status....................... Empty
Admin State....................... Enable
Power State....................... Enable
Configured Card:
Model Identifier............... 24GT+4XS Stacking
Card Description............... DM1200E 24GT+4XS Stacking mode
Pluggable......................... No
Power Down........................ No

68 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show supported cardtype
This commands displays information about all card types or specific card types supported in the
system.

Default N/A

Format show supported cardtype [cardindex]

Mode User EXEC

Command Added in firmware release 1.0

History

If you do not supply a value for cardindex, the following output appears:

TERM DEFINITION

Card Index (CID) The index into the database of the supported card types. This index is used when
preconfiguring a slot.

Card Model Identifier The model identifier for the supported card type.

Example: The following shows example CLI display output for the command.
(DM1200E) #show supported cardtype

CID Card Model ID

--- --------------------------------
1 24GT+4GX
2 24GT+4XS Standalone
3 24GT+4XS Stacking

If you supply a value for cardindex, the following output appears:

TERM DEFINITION

69 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Card Type The 32-bit numeric card type for the supported card.

Model Identifier The model identifier for the supported card type.

Card Description The description for the supported card type.

Example: The following shows example CLI display output for the command.
(DM1200E) #show supported cardtype 3

Model Identifier.................. 24GT+4XS Stacking

Card Description.................. DM1200E 24GT+4XS Stacking mode

show switch
This command displays switch status information about all units in the stack or a single unit
when you specify the unit value.

Default N/A

Format show switch [unit]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Unit The unit identifier assigned to the switch.

When you do not specify a value for unit, the following information appears:

70 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Management Status Indicates whether the switch is the Primary Management Unit, a stack member, a configured
standby switch, an operational standby switch, or the status is unassigned.

Preconfigured Model The model identifier of a preconfigured switch ready to join the stack. The Model Identifier is
Identifier a 32-character field assigned by the device manufacturer to identify the device.

Plugged-In Model The model identifier of the switch in the stack. Model Identifier is a 32-character field
Identifier assigned by the device manufacturer to identify the device.

Switch Status The switch status. Possible values for this state are: OK, Unsupported, Code Mismatch,
Config Mismatch, or Not Present. A mismatch indicates that a stack unit is running a
different version of the code, SDM template, or configuration than the management unit.

If there is a Stacking Firmware Synchronization operation in progress status is shown as

Updating Code.

Example: The following shows example CLI display output for the command.
Management Standby Preconfig Plugged-in Switch Code Stack
SW Switch Status Model ID Model ID Status Version Mode
--- ---------- --------- ---------------- ---------------- ------------- ----------- --
------
1 Unassigned 24GT+4XS Stac... Not Present 0.0.0.0 ---
2 Unassigned 24GT+4XS Stac... Not Present 0.0.0.0 ---
3 Mgmt Sw 24GT+4XS Stan... 24GT+4XS Stan... OK 2.0.0.41 Disabled

When you specify a value for unit, the following information appears.

TERM DEFINITION

Management Status Indicates whether the switch is the Primary Management Unit, a stack member, or the status
is unassigned.

Hardware The hardware management preference of the switch. The hardware management preference
Management can be disabled or unassigned.
Preference

71 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Admin Management The administrative management preference value assigned to the switch. This preference
Preference value indicates how likely the switch is to be chosen as the Primary Management Unit.

Switch Status The switch status. Possible values are OK, Unsupported, Code Mismatch, Config Mismatch, or
Not Present.

Switch Description The switch description.

Detected Code in The version of code that is currently stored in FLASH memory on the switch. This code
Flash executes after the switch is reset. If the switch is not present and the data is from
preconfiguration, then the code version is “None”.

SFS Last Attempt The stack firmware synchronization status in the last attempt for the specified unit.
Status

Serial Number The serial number for the specified unit.

Up Time The system up time.

Example: The following shows example CLI display output for the command.
(DM1200E) #show switch 2

Switch............................ 2
Management Status................. Unassigned
Hardware Management Preference.... Unassigned
Admin Management Preference....... Unassigned
Preconfigured Model Identifier.... 24GT+4XS Stacking
Plugged-in Model Identifier.......
Switch Status..................... Not Present
Switch Description................ DM1200E 24GT+4XS Stacking mode
Detected Code in Flash............ 0.0.0.0
SFS Last Attempt Status........... None
HW Version........................ 2.0
Up Time........................... 0 days 0 hrs 0 mins 0 secs

Example: The following shows example CLI display output for the command.
(DM1200E) #show switch 3

Switch............................ 3
Management Status................. Management Switch
Hardware Management Preference.... Unassigned
Admin Management Preference....... Unassigned

72 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Preconfigured Model Identifier.... 24GT+4XS Standalone
Plugged-in Model Identifier....... 24GT+4XS Standalone
Switch Status..................... OK
Switch Description................ DM1200E 24GT+4XS Standalone
Detected Code in Flash............ 2.0.0.41
SFS Last Attempt Status........... None
Serial Number..................... 2345354
Up Time........................... 0 days 14 hrs 21 mins 56 secs

show supported switchtype

This commands displays information about all supported switch types or a specific switch type.

Default N/A

Format show supported switchtype [switchindex]

Mode User EXEC

Privileged EXEC

Command Added in firmware release 1.0

History

If you do not supply a value for switchindex, the following output appears:

TERM DEFINITION

Switch Index (SID) The index into the database of supported switch types. This index is used when
preconfiguring a member to be added to the stack.

Model Identifier The model identifier for the supported switch type.

Management The management preference value of the switch type.

Preference

Code Version The code load target identifier of the switch type.

73 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show supported switchtype

Mgmt
SID Switch Model ID Pref
--- -------------------------------- ------------
1 24GT+4GX 1
2 24GT+4XS Standalone 1
3 24GT+4XS Stacking 1

If you supply a value for switchindex, the following output appears:

TERM DEFINITION

Switch Type The 32-bit numeric switch type for the supported switch.

Model Identifier The model identifier for the supported switch type.

Switch Description The description for the supported switch type.

Example: The following shows example CLI display output for the command.
(DM1200E) #show supported switchtype 3

Model Identifier.................. 24GT+4XS Stacking

Switch Description................ DM1200E 24GT+4XS Stacking mode
Management Preference............. 1

Supported Cards:
Slot........................... 0
Card Index (CID)............... 3
Model Identifier............... 24GT+4XS Stacking

Stack Firmware Synchronization Commands

Stack Firmware Synchronization (SFS) provides the ability to automatically synchronize firmware
for all stack members. If a unit joins the stack and its firmware version is different from the
version running on the stack manager, the SFS feature can either upgrade or downgrade the
firmware on the mismatched stack member. There is no attempt to synchronize the stack to the
latest firmware in the stack.

74 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

boot auto-copy-sw
Use this command to enable the Stack Firmware Synchronization feature on the stack.

Default disabled

Format boot auto-copy-sw

Mode Privileged Exec

Command Added in firmware release 1.0

History

no boot auto-copy-sw
Use this command to disable the Stack Firmware Synchronization feature on the stack

Default disabled

Format no boot auto-copy-sw

Mode Privileged Exec

Command Added in firmware release 1.0

History

boot auto-copy-sw trap

Use this command to enable the sending of SNMP traps related to the Stack Firmware
Synchronization feature.

Default enabled

Format boot auto-copy-sw trap

75 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged Exec

Command Added in firmware release 1.0

History

no boot auto-copy-sw trap

Use this command to disable the sending of traps related to the Stack Firmware Synchronization
feature.

Default enabled

Format no boot auto-copy-sw trap

Mode Privileged Exec

Command Added in firmware release 1.0

History

boot auto-copy-sw allow-downgrade

Use this command to allow the stack manager to downgrade the firmware version on the stack
member if the firmware version on the manager is older than the firmware version on the
member.

Default enabled

Format boot auto-copy-sw allow-downgrade

Mode Privileged Exec

Command Added in firmware release 1.0

History

76 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no boot auto-copy-sw allow-downgrade
Use this command to prevent the stack manager from downgrading the firmware version of a
stack member.

Default enabled

Format no boot auto-copy-sw allow-downgrade

Mode Privileged Exec

Command Added in firmware release 1.0

History

show auto-copy-sw
Use this command to display Stack Firmware Synchronization configuration status information.

Default N/A

Format show auto-copy-sw

Mode Privileged Exec

Command Added in firmware release 1.0

History

TERM DEFINITION

Synchronization Shows whether the SFS feature is enabled.

77 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SNMP Trap Status Shows whether the stack will send traps for SFS events.

Allow Downgrade Shows wether the manager is permitted to downgrade the firmware version of a stack
member.

Section 4: Management Commands

This chapter describes the management commands available in the DM1200E CLI.
The Management Commands chapter contains the following sections:

 Network Interface Commands  User Account Commands

 Console Port Access Commands  SNMP Commands
 Telnet Commands  RADIUS Commands
 Secure Shell Commands  TACACS+ Commands
 Management Security Commands  Configuration Scripting Commands
 Hypertext Transfer Protocol  Prelogin Banner, System Prompt and Host
Commands Name Commands
 Access Commands

Caution! The commands in this chapter are in one of three functional groups:
 Show commands display switch settings, statistics, and other information.
 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.
 Clear commands clear some or all of the settings to factory defaults.

Network Interface Commands

This section describes the commands you use to configure a logical interface for management
access. To configure the management VLAN, see network mgmt_vlan.

78 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

enable (Privileged EXEC access)
This command gives you access to the Privileged EXEC mode. From the Privileged EXEC mode,
you can configure the network interface.

Default N/A

Format enable

Mode User EXEC

Command Added in firmware release 1.0

History

do (Privileged EXEC commands)

This command executes Privileged EXEC mode commands from any of the configuration modes.

Default N/A

Format do Priv Exec Mode Command

Mode  Global Config

 Interface Config

 VLAN Config

 Routing Config

Command Added in firmware release 1.0

History

Example: The following is an example of the do command that executes the Privileged Exec
command script list in Global Config Mode.

(DM1200E) #configure

79 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E)(config)#do script list

Configuration Script Name Size(Bytes)

backup-config 2105
running-config 4483
startup-config 445

3 configuration script(s) found.

2041 Kbytes free.

(DM1200E)(config)#

network parms
This command sets the IP address, subnet mask and gateway of the device. The IP address
and the gateway must be on the same subnet. When you specify the default option, the IP
address and subnet mask are set to the factory defaults. When you specify the none option, the
IP address and subnet mask are removed.

Default 192.168.0.25 255.255.255.0

none 0.0.0.0 0.0.0.0

Format network parms {ipaddr netmask [gateway]| none}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network protocol
This command specifies the network configuration protocol to be used. If you modify this value,
change is effective immediately. If you use the bootp parameter, the switch periodically sends
requests to a BootP server until a response is received. If you use the dhcp parameter, the
switch periodically sends requests to a DHCP server until a response is received. If you use the
none parameter, you must configure the network information for the switch manually.

80 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format network protocol {none | bootp | dhcp}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network protocol dhcp

This command enables the DHCPv4 client on a Network port. If the client-id optional
parameter is given, the DHCP client messages are sent with the client identifier option.

Default none

Format network protocol dhcp [client-id]

Mode Global Config

Command Added in firmware release 1.0

History

There is no support for the no form of the command network protocol dhcp client-id. To
remove the client-id option from the DHCP client messages, issue the command network
protocol dhcp without the client-id option. The command network protocol none can be
used to disable the DHCP client and client-id option on the interface.

Example: The following shows an example of the command.

(DM1200E) # network protocol dhcp client-id

81 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

network javamode
This command specifies whether or not the switch should allow access to the Java applet in the
header frame of the Web interface. When access is enabled, the Java applet can be viewed
from the Web interface. When access is disabled, the user cannot view the Java applet.

Default enabled

Format network javamode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no network javamode
This command disallows access to the Java applet in the header frame of the Web interface.
When access is disabled, the user cannot view the Java applet.

Default Disabled

Format no network javamode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show network
This command displays configuration settings associated with the switch's network interface.
The network interface is the logical interface used for in-band connectivity with the switch via
any of the switch's front panel ports. The configuration parameters associated with the switch's
network interface do not affect the configuration of the front panel ports through which traffic is

82 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

switched or routed. The network interface is always considered to be up, whether or not any
member ports are up; therefore, the show network command will always show Interface
Status as Up.

Default N/A

Format show network

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface Status The network interface status; it is always considered to be “up”.

IP Address The IP address of the interface. The factory default value is 192.168.0.25.

Subnet Mask The IP subnet mask for this interface. The factory default value is 255.255.255.0.

Default Gateway The default gateway for this IP interface. The factory default value is 0.0.0.0.

IPv6 Administrative Whether enabled or disabled.

Mode

IPv6 Address/Length The IPv6 address and length.

IPv6 Default Router The IPv6 default router address.

83 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Burned In MAC Address The burned in MAC address used for in-band connectivity.

Configured IPv4 Protocol The IPv4 network protocol being used. The options are bootp | dhcp | none.

Configured IPv6 Protocol The IPv6 network protocol being used. The options are dhcp | none.

DHCPv6 Client DUID The DHCPv6 client’s unique client identifier. This row is displayed only when the configured
IPv6 protocol is dhcp.

IPv6 Autoconfig Mode Whether IPv6 Stateless address autoconfiguration is enabled or disabled.

DHCP Client Identifier The client identifier is displayed in the output of the command only if DHCP is enabled with
the client-id option on the network port. See network protocol dhcp.

Example: The following shows example CLI display output for the network port.
(DM1200E) #show network

Interface Status Up
IP Address 10.250.3.1
Subnet Mask 255.255.255.0
Default Gateway 10.250.3.3
IPv6 Administrative Mode Enabled
IPv6 Prefix is fe80::210:18ff:fe82:64c/64
IPv6 Prefix is 2003::1/128
IPv6 Default Router is fe80::204:76ff:fe73:423a
Burned In MAC Address 00:10:18:82:06:4C
Configured IPv4 Protocol None
Configured IPv6 Protocol DHCP
DHCPv6 Client DUID 00:03:00:06:00:10:18:82:06:4C
IPv6 Autoconfig Mode Disabled
Management VLAN ID 1
DHCP Client Identifier 00-0010.1882.160B-vl1

Console Port Access Commands

This section describes the commands you use to configure the console port. You can use a
serial cable to connect a management host directly to the console port of the switch.

84 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

configure
This command gives you access to the Global Config mode. From the Global Config mode, you
can configure a variety of system settings, including user accounts. From the Global Config
mode, you can enter other command modes, including Line Config mode.

Default N/A

Format configure

Mode Privileged EXEC

Command Added in firmware release 1.0

History

line
This command gives you access to the Line Console mode, which allows you to configure
various Telnet settings and the console port, as well as to configure console login/enable
authentication.

Default N/A

Format line {console | telnet | ssh}

Mode Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

85 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

console Console terminal line.

telnet Virtual terminal for remote console access (Telnet).

ssh Virtual terminal for secured remote console access (SSH).

Example: The following shows an example of the CLI command.

(DM1200E)(config)#line telnet
(DM1200E)(config-telnet)#

serial baudrate
This command specifies the communication rate of the terminal interface. The supported rates
are 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200.

Default 9600

Format serial baudrate {1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 |
115200}

Mode Line Config

Command Added in firmware release 1.0

History

no serial baudrate
This command sets the communication rate of the terminal interface.

Default 9600

Format no serial baudrate

Mode Line Config

86 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

serial timeout
This command specifies the maximum connect time (in minutes) without console activity. A
value of 0 indicates that a console can be connected indefinitely. The time range is 0 to 160.

Default 5

Format serial timeout 0-160

Mode Line Config

Command Added in firmware release 1.0

History

no serial timeout
This command sets the maximum connect time (in minutes) without console activity back to the
default value.

Default 5 minutes

Format no serial timeout

Mode Line Config

Command Added in firmware release 1.0

History

show serial
This command displays serial communication settings for the switch.

87 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show serial

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Serial Port Login The time, in minutes, of inactivity on a serial port connection, after which the switch will
Timeout (minutes) close the connection. A value of 0 disables the timeout.

Baud Rate (bps) The default baud rate at which the serial port will try to connect.

Character Size (bits) The number of bits in a character. The number of bits is always 8.

Flow Control Whether Hardware Flow-Control is enabled or disabled. Hardware Flow Control is always
disabled.

Stop Bits The number of Stop bits per character. The number of Stop bits is always 1.

Parity The parity method used on the Serial Port. The Parity Method is always None.

Telnet Commands
This section describes the commands you use to configure and view Telnet settings. You can
use Telnet to manage the device from a remote management host.

88 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip telnet server enable
Use this command to enable Telnet connections to the system and to enable the Telnet Server
Admin Mode. This command opens the Telnet listening port.

Default enabled

Format ip telnet server enable

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip telnet server enable

Use this command to disable Telnet access to the system and to disable the Telnet Server
Admin Mode. This command closes the Telnet listening port and disconnects all open Telnet
sessions.

Default disabled

Format no ip telnet server enable

Mode Privileged EXEC

Command Added in firmware release 1.0

History

transport input telnet

This command regulates new Telnet sessions. If enabled, new Telnet sessions can be
established until there are no more sessions available. An established session remains active
until the session is ended or an abnormal network error ends the session.

89 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: If the Telnet Server Admin Mode is disabled, Telnet sessions cannot be established. Use
the ip telnet server enable command to enable Telnet Server Admin Mode.

Default enabled

Format transport input telnet

Mode Line Config

Command Added in firmware release 1.0

History

no transport input telnet

Use this command to prevent new Telnet sessions from being established.

Default disabled

Format no transport input telnet

Mode Line Config

Command Added in firmware release 1.0

History

telnetcon maxsessions
This command specifies the maximum number of Telnet connection sessions that can be
established. A value of 0 indicates that no Telnet connection can be established. The range is
0-4.

Default 4

90 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format telnetcon maxsessions 0-4

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no telnetcon maxsessions
This command sets the maximum number of Telnet connection sessions that can be established
to the default value.

Default 4 sessions

Format no telnetcon maxsessions

Mode Privileged EXEC

Command Added in firmware release 1.0

History

telnetcon timeout
This command sets the Telnet connection session timeout value, in minutes. A session is active
as long as the session has not been idle for the value set. The time is a decimal value from 1 to
160.

Note: When you change the timeout value, the new value is applied to all active and inactive
sessions immediately. Any sessions that have been idle longer than the new timeout value are
disconnected immediately.

Default 5

91 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format telnetcon timeout 1-160

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no telnetcon timeout
This command sets the Telnet connection session timeout value to the default.

Default 5 minutes

Format no telnetcon timeout

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show telnetcon
This command displays the current inbound Telnet settings. In other words, these settings
apply to Telnet connections initiated from a remote system to the switch.

Default N/A

Format show telnetcon

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

92 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

TERM DEFINITION

Remote Connection This object indicates the number of minutes a remote connection session is allowed to
Login Timeout (minutes) remain inactive before being logged off. May be specified as a number from 1 to 160. The
factory default is 5.

Maximum Number of This object indicates the number of simultaneous remote connection sessions allowed. The
Remote Connection factory default is 4.
Sessions

Allow New Telnet New Telnet sessions will not be allowed when this field is set to no. The factory default
Sessions value is yes.

Secure Shell Commands

This section describes the commands you use to configure Secure Shell (SSH) access to the
switch. Use SSH to access the switch from a remote management host.

Note: The system allows a maximum of 5 remote management sessions, including either SSH
or Telnet.

ip ssh
Use this command to enable SSH access to the system. (This command is the short form of the
ip ssh server enable command.)

Default disabled

Format ip ssh

Mode Privileged EXEC

93 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip ssh protocol
This command is used to set or remove protocol levels (or versions) for SSH. Either SSH1 (1),
SSH2 (2), or both SSH 1 and SSH 2 (1 and 2) can be set.

Default 2

Format ip ssh protocol [1] [2]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip ssh server enable

This command enables the IP secure shell server.

Default enabled

Format ip ssh server enable

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip ssh server enable

This command disables the IP secure shell server. No new SSH connections are allowed, but the
existing SSH connections continue to work until timed-out or logged-out.

94 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format no ip ssh server enable

Mode Privileged EXEC

Command Added in firmware release 1.0

History

sshcon maxsessions
This command specifies the maximum number of SSH connection sessions that can be
established. A value of 0 indicates that no ssh connection can be established. The range is 0 to
2.

Default 2

Format sshcon maxsessions 0-2

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no sshcon maxsessions
This command sets the maximum number of allowed SSH connection sessions to the default
value.

Default 2

Format no sshcon maxsessions

95 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

sshcon timeout
This command sets the SSH connection session timeout value, in minutes. A session is active as
long as the session has been idle for the value set. The time is a decimal value from 1 to 160.
Changing the timeout value for active sessions does not become effective until the session is re
accessed. Also, any keystroke activates the new timeout duration.

Default 5

Format sshcon timeout 1-160

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no sshcon timeout
This command sets the SSH connection session timeout value, in minutes, to the default.
Changing the timeout value for active sessions does not become effective until the session is re
accessed. Also, any keystroke activates the new timeout duration.

Default 5 minutes

Format no sshcon timeout

Mode Privileged EXEC

96 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show ip ssh
This command displays the ssh settings.

Default N/A

Format show ip ssh

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Administrative Mode This field indicates whether the administrative mode of SSH is enabled or disabled.

Protocol Level The protocol level may have the values of version 1, version 2 or both versions 1 and version
2.

SSH Sessions The number of SSH sessions currently active.

Currently Active

Max SSH Sessions The maximum number of SSH sessions allowed.

Allowed

SSH Timeout The SSH timeout value in minutes.

Keys Present Indicates whether the SSH RSA and DSA key files are present on the device.

97 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Key Generation in Indicates whether RSA or DSA key files generation is currently in progress.
Progress

Management Security Commands

This section describes commands you use to generate keys and certificates, which you can do
in addition to loading them as before.

crypto certificate generate

Use this command to generate a self-signed certificate for HTTPS. The generated RSA key for
SSL has a length of 1024 bits. The resulting certificate is generated with a common name equal
to the lowest IP address of the device and a duration of 365 days.

Default not generated

Format crypto certificate generate

Mode Global Config

Command Added in firmware release 1.0

History

no crypto certificate generate

Use this command to delete the HTTPS certificate files from the device, regardless of whether
they are self-signed or downloaded from an outside source.

Default Not generated

Format no crypto certificate generate

Mode Global Config

98 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

crypto key generate rsa

Use this command to generate an RSA key pair for SSH. The new key files will overwrite any
existing generated or downloaded RSA key files.

Default not generated

Format crypto key generate rsa

Mode Global Config

Command Added in firmware release 1.0

History

no crypto key generate rsa

Use this command to delete the RSA key files from the device.

Default Not generated

Format no crypto key generate rsa

Mode Global Config

Command Added in firmware release 1.0

History

crypto key generate dsa

Use this command to generate a DSA key pair for SSH. The new key files will overwrite any
existing generated or downloaded DSA key files.

99 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default not generated

Format crypto key generate dsa

Mode Global Config

Command Added in firmware release 1.0

History

no crypto key generate dsa

Use this command to delete the DSA key files from the device.

Default Not generated

Format no crypto key generate dsa

Mode Global Config

Command Added in firmware release 1.0

History

Hypertext Transfer Protocol Commands

This section describes the commands you use to configure Hypertext Transfer Protocol (HTTP)
and secure HTTP access to the switch. Access to the switch by using a Web browser is enabled
by default. Everything you can view and configure by using the CLI is also available by using
the Web.

ip http accounting exec, ip https accounting exec

This command applies user exec (start-stop/stop-only) accounting list to the line methods HTTP
and HTTPS.

100 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

The user exec accounting list should be created using the command aaa accounting.

Default none

Format ip {http|https} accounting exec {default|listname}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

http/https The line method for which the list needs to be applied.

default The default list of methods for authorization services.

listname An alphanumeric character string used to name the list of accounting methods.

no ip http/https accounting exec

This command deletes the authorization method list.

Default none

Format no ip {http|https} accounting exec {default|listname}

Mode Global Config

Command Added in firmware release 1.0

History

101 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip http authentication
Use this command to specify authentication methods for http server users. The default
configuration is the local user database is checked. This action has the same effect as the
command ip http authentication local . The additional methods of authentication are used
only if the previous method returns an error, not if it fails. To ensure that the authentication
succeeds even if all methods return an error, specify none as the final method in the command
line. For example, if none is specified as an authentication method after radius, no
authentication is used if the RADIUS server is down.

Default local

Format ip http authentication method1 [method2...]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

local Uses the local username database for authentication.

none Uses no authentication.

radius Uses the list of all RADIUS servers for authentication.

tacacs Uses the list of all TACACS+ servers for authentication.

Example: The following example configures the http authentication.

(DM1200E) (config)# ip http authentication radius local

102 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no ip http authentication
Use this command to return to the default.

Default local

Format no ip http authentication

Mode Global Config

Command Added in firmware release 1.0

History

ip https authentication
Use this command to specify authentication methods for https server users. The default
configuration is the local user database is checked. This action has the same effect as the
command ip https authentication local. The additional methods of authentication are used
only if the previous method returns an error, not if it fails. To ensure that the authentication
succeeds even if all methods return an error, specify none as the final method in the command
line. For example, if none is specified as an authentication method after radius, no
authentication is used if the RADIUS server is down.

Default local

Format ip https authentication method1 [method2...]

Mode Global Config

Command Added in firmware release 1.0

History

103 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

local Uses the local username database for authentication.

none Uses no authentication.

radius Uses the list of all RADIUS servers for authentication.

tacacs Uses the list of all TACACS+ servers for authentication.

Example: The following example configures https authentication.

(DM1200E)(config)# ip https authentication radius local

no ip https authentication
Use this command to return to the default.

Default local

Format no ip https authentication

Mode Global Config

Command Added in firmware release 1.0

History

ip http server
This command enables access to the switch through the Web interface. When access is enabled,
the user can login to the switch from the Web interface. When access is disabled, the user
cannot login to the switch's Web server. Disabling the Web interface takes effect immediately.
All interfaces are affected.

104 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default enabled

Format ip http server

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http server
This command disables access to the switch through the Web interface. When access is
disabled, the user cannot login to the switch's Web server.

Default enabled

Format no ip http server

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http secure-server
This command is used to enable the secure socket layer for secure HTTP.

Default disabled

Format ip http secure-server

Mode Privileged EXEC

105 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no ip http secure-server
This command is used to disable the secure socket layer for secure HTTP.

Default disabled

Format no ip http secure-server

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http java
This command enables the Web Java mode. The Java mode applies to both secure and un-
secure Web connections.

Default enabled

Format ip http java

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http java
This command disables the Web Java mode. The Java mode applies to both secure and un-
secure Web connections.

106 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default enabled

Format no ip http java

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http session hard-timeout

This command configures the hard timeout for un-secure HTTP sessions in hours. When this
timeout expires, the user will be forced to reauthenticate. This timer begins on initiation of the
web session and is unaffected by the activity level of the connection.

Default 24

Format ip http session hard-timeout 1-168

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http session hard-timeout

This command restores the hard timeout for un-secure HTTP sessions to the default value.

Default 24 hours

Format no ip http session hard-timeout

Mode Privileged EXEC

107 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip http session maxsessions

This command limits the number of allowable un-secure HTTP sessions. Zero is the configurable
minimum.

Default 3

Format ip http session maxsessions 0-3

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http session maxsessions

This command restores the number of allowable un-secure HTTP sessions to the default value.

Default 3

Format no ip http session maxsessions

Mode Privileged EXEC

Command Added in firmware release 1.0

History

108 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip http session soft-timeout
This command configures the soft timeout for un-secure HTTP sessions in minutes. When this
timeout expires the user will be forced to reauthenticate. This timer begins on initiation of the
Web session and is restarted with each access to the switch.

Default 5

Format ip http session soft-timeout 1-60

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http session soft-timeout

This command resets the soft timeout for un-secure HTTP sessions to the default value.

Default 5 minutes

Format no ip http session soft-timeout

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http secure-session hard-timeout

This command configures the hard timeout for secure HTTP sessions in hours. When this
timeout expires, the user is forced to reauthenticate. This timer begins on initiation of the Web
session and is unaffected by the activity level of the connection. The secure-session hard-
timeout can not be set to zero (infinite).

109 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 24

Format ip http secure-session hard-timeout 1-168

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http secure-session hard-timeout

This command resets the hard timeout for secure HTTP sessions to the default value.

Default 24 hours

Format no ip http secure-session hard-timeout

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http secure-session maxsessions

This command limits the number of secure HTTP sessions. Zero is the configurable minimum.

Default 4

Format ip http secure-session maxsessions 0-4

Mode Privileged EXEC

Command Added in firmware release 1.0

110 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no ip http secure-session maxsessions

This command restores the number of allowable secure HTTP sessions to the default value.

Default 4

Format no ip http secure-session maxsessions

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http secure-session soft-timeout

This command configures the soft timeout for secure HTTP sessions in minutes. When this
timeout expires, you are forced to reauthenticate. This timer begins on initiation of the Web
session and is restarted with each access to the switch. The secure-session soft-timeout can not
be set to zero (infinite).

Default 5

Format ip http secure-session soft-timeout 1-60

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http secure-session soft-timeout

This command restores the soft timeout for secure HTTP sessions to the default value.

111 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 5 minutes

Format no ip http secure-session soft-timeout

Mode Privileged EXEC

Command Added in firmware release 1.0

History

ip http secure-port
This command is used to set the SSL port where port can be 1025-65535 and the default is port
443.

Default 443

Format ip http secure-port portid

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no ip http secure-port
This command is used to reset the SSL port to the default value.

Default 443

Format no ip http secure-port

Mode Privileged EXEC

112 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip http secure-protocol
This command is used to set protocol levels (versions). The protocol level can be set to TLS1,
SSL3 or to both TLS1 and SSL3.

Default SSL3 and TLS1

Format ip http secure-protocol [SSL3][TLS1]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show ip http
This command displays the http settings for the switch.

Default N/A

Format show ip http

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

113 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

HTTP Mode (Unsecure) The unsecure HTTP server administrative mode.

Java Mode The java applet administrative mode which applies to both secure and un-secure web
connections.

Maximum Allowable The number of allowable un-secure http sessions.

HTTP Sessions

HTTP Session Hard The hard timeout for un-secure http sessions in hours.
Timeout

HTTP Session Soft The soft timeout for un-secure http sessions in minutes.
Timeout

HTTP Mode (Secure) The secure HTTP server administrative mode.

Secure Port The secure HTTP server port number.

Secure Protocol Level(s) The protocol level may have the values of SSL3, TSL1, or both SSL3 and TSL1.

Maximum Allowable The number of allowable secure http sessions.

HTTPS Sessions

HTTPS Session Hard The hard timeout for secure http sessions in hours.
Timeout

HTTPS Session Soft The soft timeout for secure http sessions in minutes.
Timeout

Certificate Present Indicates whether the secure-server certificate files are present on the device.

Certificate Generation in Indicates whether certificate generation is currently in progress.

Progress

114 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Access Commands
Use the commands in this section to close remote connections or to view information about
connections to the system.

disconnect
Use the disconnect command to close HTTP, HTTPS, Telnet or SSH sessions. Use all to close
all active sessions, or use session-id to specify the session ID to close. To view the possible
values for session-id, use the show loginsession command.

Default N/A

Format disconnect {session_id | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show loginsession
This command displays current Telnet, SSH and serial port connections to the switch. This
command displays truncated user names. Use the show loginsession long command to display
the complete usernames.

Default N/A

Format show loginsession

Mode Privileged EXEC

Command Added in firmware release 1.0

History

115 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

ID Login Session ID.

User Name The name the user entered to log on to the system.

Connection From IP address of the remote client machine or EIA-232 for the serial port connection.

Idle Time Time this session has been idle.

Session Time Total time this session has been connected.

Session Type Shows the type of session, which can be HTTP, HTTPS, telnet, serial, or SSH.

show loginsession long

This command displays the complete user names of the users currently logged in to the switch.

Default N/A

Format show loginsession long

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #show loginsession long
User Name
------------
admin
test1111test1111test1111test1111test1111test1111test1111test1111

116 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

User Account Commands
This section describes the commands you use to add, manage, and delete system users. The
DM1200E has two default users: admin and guest. The admin user can view and configure
system settings, and the guest user can view settings.

Note: You cannot delete the admin user.

aaa authentication login

Use this command to set authentication at login. The default and optional list names created
with the command are used with the aaa authentication login command. Create a list by
entering the aaa authentication login list-name method command, where list-name is any
character string used to name this list. The method argument identifies the list of methods that
the authentication algorithm tries, in the given sequence.
The additional methods of authentication are used only if the previous method returns an error,
not if there is an authentication failure. To ensure that the authentication succeeds even if all
methods return an error, specify none as the final method in the command line. For example, if
none is specified as an authentication method after radius, no authentication is used if the

RADIUS server is down.

Default  defaultList. Used by the console and only contains the method none.

 networkList. Used by telnet and SSH and only contains the method local.

Format aaa authentication login {default | list-name} method1 [method2...]

Mode Global Config

Command Added in firmware release 1.0

History

117 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DEFINITION

default Uses the listed authentication methods that follow this argument as the default list of
methods when a user logs in.

list-name Character string of up to 15 characters used to name the list of authentication methods
activated when a user logs in.

method1...[method2.. At least one from the following:

.]
 enable. Uses the enable password for authentication.

 line. Uses the line password for authentication.

 local. Uses the local username database for authentication.

 none. Uses no authentication.

 radius. Uses the list of all RADIUS servers for authentication.

 tacacs. Uses the list of all TACACS servers for authentication.

Example: The following shows an example of the command.

(DM1200E)(config)# aaa authentication login default radius local enable
none

no aaa authentication login

This command returns to the default.

Default local

Format no aaa authentication login {default | list-name}

Mode Global Config

Command Added in firmware release 1.0

History

118 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

aaa authentication enable
Use this command to set authentication for accessing higher privilege levels. The default enable
list is enableList. It is used by console, and contains the method as enable followed by none.

A separate default enable list, enableNetList, is used for Telnet and SSH users instead of
enableList. This list is applied by default for Telnet and SSH, and contains enable followed by

deny methods. In DM1200E, by default, the enable password is not configured. That means

that, by default, Telnet and SSH users will not get access to Privileged EXEC mode. On the
other hand, with default conditions, a console user always enter the Privileged EXEC mode
without entering the enable password.

The default and optional list names created with the aaa authentication enable command are
used with the enable authentication command. Create a list by entering the aaa
authentication enable list-name method command where list-name is any character string

used to name this list. The method argument identifies the list of methods that the
authentication algorithm tries in the given sequence.
The user manager returns ERROR (not PASS or FAIL) for enable and line methods if no
password is configured, and moves to the next configured method in the authentication list.
The method none reflects that there is no authentication needed.
The user will only be prompted for an enable password if one is required. The following
authentication methods do not require passwords:
1) none
2) deny
3) enable (if no enable password is configured)
4) line (if no line password is configured)

Example: See the examples below.

a) aaa authentication enable default enable none
b) aaa authentication enable default line none
c) aaa authentication enable default enable radius none
d) aaa authentication enable default line tacacs none

119 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Examples a and b do not prompt for a password, however because examples c and d contain
the radius and tacacs methods, the password prompt is displayed.
If the login methods include only enable, and there is no enable password configured, then
DM1200E does not prompt for a username. In such cases, DM1200E only prompts for a
password. DM1200E supports configuring methods after the local method in authentication and
authorization lists. If the user is not present in the local database, then the next configured
method is tried.
The additional methods of authentication are used only if the previous method returns an error,
not if it fails. To ensure that the authentication succeeds even if all methods return an error,
specify none as the final method in the command line.

Use the command show authentication methods to display information about the authentication
methods.

Note: Requests sent by the switch to a RADIUS server include the username $enabx$, where x
is the requested privilege level. For enable to be authenticated on Radius servers, add
$enabx$ users to them. The login user ID is now sent to TACACS+ servers for enable

authentication.

Default default

Format aaa authentication enable {default | list-name} method1 [method2...]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

120 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

default Uses the listed authentication methods that follow this argument as the default list of
methods, when using higher privilege levels.

list-name Character string used to name the list of authentication methods activated, when using
access higher privilege levels. Range: 1-15 characters.

method1 Specify at least one from the following:

[method2...]
 deny. Used to deny access.

 enable. Uses the enable password for authentication.

 line. Uses the line password for authentication.

 none. Uses no authentication.

 radius. Uses the list of all RADIUS servers for authentication.

 tacacs. Uses the list of all TACACS+ servers for authentication.

Example: The following example sets authentication when accessing higher privilege levels.
(DM1200E)(config)# aaa authentication enable default enable

no aaa authentication enable

Use this command to return to the default configuration.

Default none

Format no aaa authentication enable {default | list-name}

Mode Global Config

Command Added in firmware release 1.0

History

121 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

enable authentication
Use this command to specify the authentication method list when accessing a higher privilege
level from a remote telnet or console.

Default none

Format enable authentication {default | list-name}

Mode Line Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

default Uses the default list created with the aaa authentication enable command.

list-name Uses the indicated list created with the aaa authentication enable command.

Example: The following example specifies the default authentication method when accessing a
higher privilege level console.
(DM1200E)(config)# line console
(DM1200E)(config-line)# enable authentication default

no enable authentication
Use this command to return to the default specified by the enable authentication command.

Default none

Format no enable authentication

122 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Line Config

Command Added in firmware release 1.0

History

username (Global Config)

Use the username command in Global Config mode to add a new user to the local user database.
The default privilege level is 1. Using the encrypted keyword allows the administrator to
transfer local user passwords between devices without having to know the passwords. When
the password parameter is used along with encrypted parameter, the password must be exactly
128 hexadecimal characters in length. If the password strength feature is enabled, this
command checks for password strength and returns an appropriate error if it fails to meet the
password strength criteria. Giving the optional parameter override-complexity-check disables
the validation of the password strength.

Default N/A

Obs.: admin and guest usernames are default users. Admin user could not be removed or disabled.

Format username name {password password [encrypted [override-complexity-check]

| level level [encrypted [override-complexity-check]] | override-
complexity-check]} | {level level [override-complexity-check] password}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

name The name of the user. Range: 1-64 characters.

123 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

password The authentication password for the user. Range 8-64 characters. This value can be zero if
the no passwords min-length command has been executed. The special characters
allowed in the password include ! # $ % & ' ( ) * + , - . / : ; < = > @ [ \ ]
^ _ ` { | } ~.

level The user level. Level 0 can be assigned by a level 15 user to another user to suspend that
user’s access. Range 0-15. Enter access level 1 for Read Access or 15 for Read/Write
Access. If not specified where it is optional, the privilege level is 1.

encrypted Encrypted password entered, copied from another switch configuration.

override-complexity- Disables the validation of the password strength.

check

Example: The following example configures user bob with password xxxyyymmmm and user level
15.
(DM1200E)(config)# username bob password xxxyyymmmm level 15

Example: The following example configures user test with password testPassword and assigns
a user level of 1 (read-only). The password strength will not be validated.
(DM1200E)(config)# username test password testPassword level 1 override-complexity-
check

Example: A example.
(DM1200E) (Config)#username test password testtest

Example: A fourth example.

(DM1200E) (Config)# username test password
e8d63677741431114f9e39a853a15e8fd35ad059e2e1b49816c243d7e08152b052eafbf23b528d348cdba1b
1b7ab91be842278e5e970dbfc62d16dcd13c0b864 level 1 encrypted override-complexity-check

(DM1200E) (Config)# username test level 15 password

Enter new password:********

Confirm new password:********

Example: A fifth example.

(DM1200E) (Config)# username test level 15 override-complexity-check password

124 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Enter new password:********

Confirm new password:********

no username
Use this command to remove a user name.

Default N/A

Format no username name

Mode Global Config

Command Added in firmware release 1.0

History

username name nopassword

Use this command to remove an existing user’s password (NULL password).

Default nopassword

Obs.: No password allow the user to uses an empty password.

Format username name nopassword [level level]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

125 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

name The name of the user. Range: 1-32 characters.

password The authentication password for the user. Range 8-64 characters.

level The user level. Level 0 can be assigned by a level 15 user to another user to suspend that
user’s access. Range 0-15.

username name unlock

Use this command to allows a locked user account to be unlocked. Only a user with read/write
access can reactivate a locked user account.

Default N/A

Format username name unlock

Mode Global Config

Command Added in firmware release 1.0

History

username snmpv3 accessmode

This command specifies the snmpv3 access privileges for the specified login user. The valid
accessmode values are readonly or readwrite. The username is the login user name for which
the specified access mode applies. The default is readwrite for the “admin” user and readonly
for all other users. You must enter the username in the same case you used when you added
the user. To see the case of the username, enter the show users command.

Defaults  admin - readwrite

 other - readonly

126 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format username snmpv3 accessmode username {readonly | readwrite}

Mode Global Config

Command Added in firmware release 1.0

History

no username snmpv3 accessmode

This command sets the snmpv3 access privileges for the specified user as readwrite for the
“admin” user and readonly for all other users. The username value is the user name for which
the specified access mode will apply.

Default Read-only, except for admin user

Format no username snmpv3 accessmode username

Mode Global Config

Command Added in firmware release 1.0

History

username snmpv3 authentication

This command specifies the authentication protocol to be used for the specified user. The valid
authentication protocols are none, md5 or sha. If you specify md5 or sha, the login password is
also used as the snmpv3 authentication password and therefore must be at least eight
characters in length. The username is the user name associated with the authentication protocol.
You must enter the username in the same case you used when you added the user. To see the
case of the username, enter the show users command.

Default no authentication

127 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format username snmpv3 authentication username {none | md5 | sha}

Mode Global Config

Command Added in firmware release 1.0

History

no username snmpv3 authentication

This command sets the authentication protocol to be used for the specified user to none. The
username is the user name for which the specified authentication protocol is used.

Default No authentication

Format no username snmpv3 authentication username

Mode Global Config

Command Added in firmware release 1.0

History

username snmpv3 encryption

This command specifies the encryption protocol used for the specified user. The valid
encryption protocols are des or none.

If you select des, you can specify the required key on the command line. The encryption
keymust be 8 to 64 characters long. If you select the des protocol but do not provide a key, the
user is prompted for the key. When you use the des protocol, the login password is also used
as the snmpv3 encryption password, so it must be a minimum of eight characters. If you select
none, you do not need to provide a key.

The username value is the login user name associated with the specified encryption. You must
enter the username in the same case you used when you added the user. To see the case of the
username, enter the show users command.

128 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default no encryption

Format username snmpv3 encryption username {none | des[key]}

Mode Global Config

Command Added in firmware release 1.0

History

no username snmpv3 encryption

This command sets the encryption protocol to none. The username is the login user name for
which the specified encryption protocol will be used.

Default No encryption

Format no username snmpv3 encryption username

Mode Global Config

Command Added in firmware release 1.0

History

username snmpv3 encryption encrypted

This command specifies the des encryption protocol and the required encryption key for the
specified user. The encryption keymust be 8 to 64 characters long.

Default no encryption

Format username snmpv3 encryption encrypted username des key

Mode Global Config

129 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show users
This command displays the configured user names and their settings. The show users
command displays truncated user names. Use the show users long command to display the
complete usernames. The show users command is only available for users with Read/Write
privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system.

Default N/A

Format show users

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

User Name The name the user enters to login using the serial port, Telnet or Web.

Access Mode Shows whether the user is able to change parameters on the switch (Read/Write) or is only
able to view them (Read Only). As a factory default, the “admin” user has Read/Write
access and the “guest” has Read Only access.

SNMPv3 Access Mode The SNMPv3 Access Mode. If the value is set to ReadWrite, the SNMPv3 user is able to
set and retrieve parameters on the system. If the value is set to ReadOnly, the SNMPv3
user is only able to retrieve parameter information. The SNMPv3 access mode may be
different than the CLI and Web access mode.

SNMPv3 Authentication The authentication protocol to be used for the specified login user.

130 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SNMPv3 Encryption The encryption protocol to be used for the specified login user.

show users long

This command displays the complete usernames of the configured users on the switch.

Default N/A

Format show users long

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #show users long
User Name
------------
admin
guest
test1111test1111test1111test1111

show users accounts

This command displays the local user status with respect to user account lockout and password
aging. This command displays truncated user names. Use the show users long command to
display the complete usernames.

Default N/A

Format show users accounts [detail]

Mode Privileged EXEC

131 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

User Name The local user account’s user name.

Access Level The user’s access level (1 for read-only or 15 for read/write).

Password Aging Number of days, since the password was configured, until the password expires.

Password Expiry Date The current password expiration date in date format.

Lockout Indicates whether the user account is locked out (true or false).

If the detail keyword is included, the following additional fields display.

TERM DEFINITION

Password Override Displays the user's Password override complexity check status. By default it is disabled.
Complexity Check

Password Strength Displays the user password's strength (Strong or Weak). This field is displayed only if the
Password Strength feature is enabled.

Example: The following example displays information about the local user database.
(DM1200E)#show users accounts
UserName Privilege Password Password Lockout
Aging Expiry
date

admin 15 False

132 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 guest 1 False

console#show users accounts detail

UserName admin
Privilege 15
Password Aging
Password Expiry
Lockout False
Override Complexity Disable
Check
Password Strength

UserName guest
Privilege 1
Password Aging
Password Expiry
Lockout False
Override Complexity Disable
Check
Password Strength

show users login-history [long]

Use this command to display information about the login history of users.

Default N/A

Format show users login-history [long]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show users login-history [username]

Use this command to display information about the login history of users.

Default N/A

Format show users login-history [username name]

Mode Privileged EXEC

133 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

name Name of the user. Range: 1-20 characters.

Example: The following example shows user login history outputs.

Console>show users login-history
Login Time Username Protocol Location

Jan 19 2005 Bob Serial

08:23:48
Jan 19 2005 Robert HTTP 172.16.0.8
08:29:29
Jan 19 2005 John SSH 172.16.0.1
08:42:31
Jan 19 2005 Betty Telnet 172.16.1.7
08:49:52

login authentication
Use this command to specify the login authentication method list for a line (console, telnet, or
SSH). The default configuration uses the default set with the command aaa authentication
login.

Default local

Format login authentication {default | list-name}

Mode Line Configuration

Command Added in firmware release 1.0

History

134 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

default Uses the default list created with the aaa authentication login command.

list-name Uses the indicated list created with the aaa authentication login command.

Example: The following example specifies the default authentication method for a console.
(DM1200E) (config)# line console
(DM1200E) (config-line)# login authentication default

no login authentication
Use this command to return to the default specified by the authentication login command.

password (Line Configuration)

Use the password command in Line Configuration mode to specify a password on a line. The
default configuration is no password is specified.

Default N/A

Format password [password [encrypted]]

Mode Line Config

Command Added in firmware release 1.0

History

PARAMETER DEFINITION

password Password for this level. Range: 8-64 characters

135 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

encrypted Encrypted password to be entered, copied from another switch configuration. The encrypted
password should be 128 characters long because the assumption is that this password is
already encrypted with AES.

Example: The following example specifies a password mcmxxyyy on a line.

(DM1200E)(config-line)# password mcmxxyyy

Example: The following is another example of the command.

(DM1200E)(Config-line)# password testtest

(DM1200E) (Config-line)# password

e8d63677741431114f9e39a853a15e8fd35ad059e2e1b49816c243d7e08152b052eafbf23b528d348cdba1b
1b7ab91be842278e5e970dbfc62d16dcd13c0b864 encrypted

(DM1200E) (Config-line)# password

Enter new password:********

Confirm new password:********

no password (Line Configuration)

Use this command to remove the password on a line.

Default Disable password check for line config mode

Format no password

Mode Line Config

Command Added in firmware release 1.0

History

password (User EXEC)

Use this command to allow a user to change the password for only that user. This command
should be used after the password has aged. The user is prompted to enter the old password
and the new password.

136 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format password

Mode User EXEC

Command Added in firmware release 1.0

History

Example: The following example shows the prompt sequence for executing the password
command.
(DM1200E)>password
Enter old password:********
Enter new password:********
Confirm new password:********

password (aaa IAS User Config)

This command is used to configure a password for a user. An optional parameter [encrypted] is
provided to indicate that the password given to the command is already preencrypted.

Default N/A

Format password password [encrypted]

Mode aaa IAS User Config

Command Added in firmware release 1.0

History

no password (aaa IAS User Config)

This command is used to clear the password of a user.

137 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default Set empty password for selected IAS user

Format no password

Mode aaa IAS User Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#aaa ias-user username client-1
(DM1200E) (Config-aaa-ias-User)#password client123
(DM1200E) (Config-aaa-ias-User)#no password

Example: The following is an example of adding a MAB Client to the Internal user database.
(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#aaa ias-user username 1f3ccb1157
(DM1200E) (Config-aaa-ias-User)#password 1f3ccb1157
(DM1200E) (Config-aaa-ias-User)#exit
(DM1200E) (Config)#

enable password (Privileged EXEC)

Use the enable password configuration command to set a local password to control access to
the privileged EXEC mode.

Default N/A

enable password [password [encrypted]]

Format

Mode Privileged EXEC

Command Added in firmware release 1.0

History

138 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

password Password string. Range: 8-64 characters.

encrypted Encrypted password you entered, copied from another switch configuration. The encrypted
password should be 128 characters long because the assumption is that this password is
already encrypted with AES.

Example: The following shows an example of the command.

(DM1200E) #enable password testtest

(DM1200E) #enable password

e8d63677741431114f9e39a853a15e8fd35ad059e2e1b49816c243d7e08152b052eafbf23b528d348cdba1b
1b7ab91be842278e5e970dbfc62d16dcd13c0b864 encrypted

(DM1200E) #enable password

Enter old password:********

Enter new password:********

Confirm new password:********

no enable password (Privileged EXEC)

Use the no enable password command to remove the password requirement.

Default Disable password check for Privileged Exec Mode

Format no enable password

Mode Privileged EXEC

Command Added in firmware release 1.0

History

139 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

passwords min-length
Use this command to enforce a minimum password length for local users. The value also
applies to the enable password. The valid range is 0-64.

Default 8

Format passwords min-length 0-64

Mode Global Config

Command Added in firmware release 1.0

History

no passwords min-length
Use this command to set the minimum password length to the default value.

Default 8

Format no passwords min-length

Mode Global Config

Command Added in firmware release 1.0

History

passwords history
Use this command to set the number of previous passwords that shall be stored for each user
account. When a local user changes his or her password, the user will not be able to reuse any
password stored in password history. This ensures that users don’t reuse their passwords often.
The valid range is 0-10.

140 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0

Format passwords history 0-10

Mode Global Config

Command Added in firmware release 1.0

History

no passwords history
Use this command to set the password history to the default value.

Default 0

Format no passwords history

Mode Global Config

Command Added in firmware release 1.0

History

passwords aging
Use this command to implement aging on passwords for local users. When a user’s password
expires, the user will be prompted to change it before logging in again. The valid range is 1-365.
The default is 0, or no aging.

Default 0

Format passwords aging 1-365

Mode Global Config

141 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no passwords aging
Use this command to set the password aging to the default value.

Default 0

Format no passwords aging

Mode Global Config

Command Added in firmware release 1.0

History

passwords lock-out
Use this command to strengthen the security of the switch by locking user accounts that have
failed login due to wrong passwords. When a lockout count is configured, a user that is logged
in must enter the correct password within that count. Otherwise the user will be locked out
from further switch access. Only a user with read/write access can reactivate a locked user
account. Password lockout does not apply to logins from the serial console. The valid range is
1-5. The default is 0, or no lockout count enforced.

Default 0

Format passwords lock-out 1-5

Mode Global Config

Command Added in firmware release 1.0

History

142 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no passwords lock-out
Use this command to set the password lock-out count to the default value.

Default 0

Format no passwords lock-out

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength-check
Use this command to enable the password strength feature. It is used to verify the strength of
a password during configuration.

Default disabled

Format passwords strength-check

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength-check
Use this command to set the password strength checking to the default value.

Default disabled

143 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no passwords strength-check

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength maximum consecutive-characters

Use this command to set the maximum number of consecutive characters to be used in
password strength. The valid range is 0-15. The default is 0. Minimum of 0 means no restriction
on that set of characters.

Default 0

Format passwords strength maximum consecutive-characters 0-15

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength maximum repeated-characters

Use this command to set the maximum number of repeated characters to be used in password
strength. The valid range is 0-15. The default is 0. Minimum of 0 means no restriction on that
set of characters.

Default 0

Format passwords strength maximum consecutive-characters 0-15

Mode Global Config

144 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

passwords strength minimum uppercase-letters

Use this command to enforce a minimum number of uppercase letters that a password should
contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set
of characters.

Default 2

Format passwords strength minimum uppercase-letters

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength minimum uppercase-letters

Use this command to reset the minimum uppercase letters required in a password to the default
value.

Default 2

Format no passwords minimum uppercase-letter

Mode Global Config

Command Added in firmware release 1.0

History

145 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

passwords strength minimum lowercase-letters
Use this command to enforce a minimum number of lowercase letters that a password should
contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set
of characters.

Default 2

Format passwords strength minimum lowercase-letters

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength minimum lowercase-letters

Use this command to reset the minimum lower letters required in a password to the default
value.

Default 2

Format no passwords minimum lowercase-letter

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength minimum numeric-characters

Use this command to enforce a minimum number of numeric characters that a password should
contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set
of characters.

146 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 2

Format passwords strength minimum numeric-characters

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength minimum numeric-characters

Use this command to reset the minimum numeric characters required in a password to the
default value.

Default 2

Format no passwords minimum numeric-characters

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength minimum special-characters

Use this command to enforce a minimum number of special characters that a password should
contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set
of characters.

Default 2

Format passwords strength minimum special-characters

147 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength minimum special-characters

Use this command to reset the minimum special characters required in a password to the
default value.

Default 2

Format no passwords minimum special-characters

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength minimum character-classes

Use this command to enforce a minimum number of characters classes that a password should
contain. Character classes are uppercase letters, lowercase letters, numeric characters and
special characters. The valid range is 0-4. The default is 4.

Default 4

Format passwords strength minimum character-classes

Mode Global Config

Command Added in firmware release 1.0

History

148 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no passwords strength minimum character-classes
Use this command to reset the minimum number of character classes required in a password to
the default value.

Default 4

Format no passwords minimum character-classes

Mode Global Config

Command Added in firmware release 1.0

History

passwords strength exclude-keyword

Use this command to exclude the specified keyword while configuring the password. The
password does not accept the keyword in any form (in between the string, case in-sensitive and
reverse) as a substring. User can configure up to a maximum of 3 keywords.

Default none

Format passwords strength exclude-keyword keyword

Mode Global Config

Command Added in firmware release 1.0

History

no passwords strength exclude-keyword

Use this command to reset the restriction for the specified keyword or all the keywords
configured.

149 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format no passwords exclude-keyword [keyword]

Mode Global Config

Command Added in firmware release 1.0

History

show passwords configuration

Use this command to display the configured password management settings.

Default N/A

Format show passwords configuration

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Minimum Password Minimum number of characters required when changing passwords.

Length

Password History Number of passwords to store for reuse prevention.

Password Aging Length in days that a password is valid.

150 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Lockout Attempts Number of failed password login attempts before lockout.

Minimum Password Minimum number of uppercase characters required when configuring passwords.
Uppercase Letters

Minimum Password Minimum number of lowercase characters required when configuring passwords.
Lowercase Letters

Minimum Password Minimum number of numeric characters required when configuring passwords.
Numeric Characters

Maximum Password Maximum number of consecutive characters required that the password should contain
Consecutive Characters when configuring passwords.

Maximum Password Maximum number of repetition of characters that the password should contain when
Repeated Characters configuring passwords.

Minimum Password Minimum number of character classes (uppercase, lowercase, numeric and special) required
Character Classes when configuring passwords.

Password Exclude- The set of keywords to be excluded from the configured password when strength checking
Keywords is enabled.

show passwords result

Use this command to display the last password set result information.

Default N/A

Format show passwords result

Mode Privileged EXEC

Command Added in firmware release 1.0

History

151 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Last User Whose Shows the name of the user with the most recently set password.
Password Is Set

Password Strength Shows whether password strength checking is enabled.

Check

Last Password Set Shows whether the attempt to set a password was successful. If the attempt failed, the
Result reason for the failure is included.

aaa ias-user username

The Internal Authentication Server (IAS) database is a dedicated internal database used for
local authentication of users for network access through the IEEE 802.1X feature.
Use the aaa ias-user username command in Global Config mode to add the specified user to
the internal user database. This command also changes the mode to AAA User Config mode.

Default N/A

Format aaa ias-user username user

Mode Global Config

Command Added in firmware release 1.0

History

no aaa ias-user username

Use this command to remove the specified user from the internal user database.

Default N/A

152 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no aaa ias-user username user

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#aaa ias-user username client-1
(DM1200E) (Config-aaa-ias-User)#exit
(DM1200E) (Config)#no aaa ias-user username client-1
(DM1200E) (Config)#

aaa session-id
Use this command in Global Config mode to specify if the same session-id is used for
Authentication, Authorization and Accounting service type within a session.

Default common

Format aaa session-id [common | unique]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

common Use the same session-id for all AAA Service types.

153 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

unique Use a unique session-id for all AAA Service types.

no aaa session-id
Use this command in Global Config mode to reset the aaa session-id behavior to the default.

Default common

Format no aaa session-id [unique]

Mode Global Config

Command Added in firmware release 1.0

History

aaa accounting
Use this command in Global Config mode to create an accounting method list for user EXEC
sessions, user-executed commands, or DOT1X. This list is identified by default or a user-
specified list_name. Accounting records, when enabled for a line-mode, can be sent at both
the beginning and at the end (start-stop) or only at the end (stop-only). If none is specified,
then accounting is disabled for the specified list. If tacacs is specified as the accounting
method, accounting records are notified to a TACACS+ server. If radius is the specified
accounting method, accounting records are notified to a RADIUS server.

Note: Please note the following:

 A maximum of five Accounting Method lists can be created for each exec and
commands type.
 Only the default Accounting Method list can be created for DOT1X. There is no
provision to create more.
 The same list-name can be used for both exec and commands accounting type
 AAA Accounting for commands with RADIUS as the accounting method is not

154 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 supported.
 Start-stop or None are the only supported record types for DOT1X accounting. Start-
stop enables accounting and None disables accounting.
 RADIUS is the only accounting method type supported for DOT1X accounting.

Default Start-stop using tacacs for exec, stop-only using tacacs for commands and start-stop using radius
for dot1x.

Format aaa accounting {exec | commands | dot1x} {default | list_name} {start-

stop | stop-only |none} method1 [method2…]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

exec Provides accounting for a user EXEC terminal sessions.

commands Provides accounting for all user executed commands.

dot1x Provides accounting for DOT1X user commands.

default The default list of methods for accounting services.

list-name Character string used to name the list of accounting methods.

start-stop Sends a start accounting notice at the beginning of a process and a stop accounting notice at
the beginning of a process and a stop accounting notice at the end of a process.

155 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

stop-only Sends a stop accounting notice at the end of the requested user process.

none Disables accounting services on this line.

method Use either TACACS or radius server for accounting purposes.

Example: The following shows an example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) #aaa accounting commands default stop-only tacacs
(DM1200E) #aaa accounting exec default start-stop radius
(DM1200E) #aaa accounting dot1x default start-stop radius
(DM1200E) #aaa accounting dot1x default none
(DM1200E) #exit
For the same set of accounting type and list name, the administrator can change the
record type, or the methods list, without having to first delete the previous
configuration.
(DM1200E) #
(DM1200E) #configure
(DM1200E) #aaa accounting exec ExecList stop-only tacacs
(DM1200E) #aaa accounting exec ExecList start-stop tacacs
(DM1200E) #aaa accounting exec ExecList start-stop tacacs radius

The first aaa command creates a method list for exec sessions with the name ExecList, with
record-type as stop-only and the method as TACACS+. The second command changes the
record type to start-stop from stop-only for the same method list. The third command, for the
same list changes the methods list to {tacacs,radius} from {tacacs}.

no aaa accounting
This command deletes the accounting method list.

Default Start-stop using tacacs for exec, stop-only using tacacs for commands and start-stop using radius
for dot1x.

Format no aaa accounting {exec | commands | dot1x} {default | list_name

default}

156 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) #aaa accounting commands userCmdAudit stop-only tacacs radius
(DM1200E) #no aaa accounting commands userCmdAudit
(DM1200E) #exit

password (AAA IAS User Configuration)

Use this command to specify a password for a user in the IAS database. An optional parameter
encrypted is provided to indicate that the password given to the command is already
preencrypted.

Default Empty password

Format password password [encrypted]

Mode AAA IAS User Config

Command Added in firmware release 1.0

History

PARAMETER DEFINITION

password Password for this level. Range: 8-64 characters

encrypted Encrypted password to be entered, copied from another switch configuration.

157 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no password (AAA IAS User Configuration)
Use this command to clear the password of a user.

Default Empty password

Format no password

Mode AAA IAS User Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#aaa ias-user username client-1
(DM1200E) (Config-aaa-ias-User)#password client123
(DM1200E) (Config-aaa-ias-User)#no password

Example: The following is an example of adding a MAB Client to the Internal user database.
(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#aaa ias-user username 1f3ccb1157
(DM1200E) (Config-aaa-ias-User)#password 1f3ccb1157
(DM1200E) (Config-aaa-ias-User)#exit
(DM1200E) (Config)#

clear aaa ias-users

Use this command to remove all users from the IAS database.

Default N/A

Format clear aaa ias-users

Mode Privileged Exec

158 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DEFINITION

password Password for this level. Range: 8-64 characters

encrypted Encrypted password to be entered, copied from another switch configuration.

Example: The following is an example of the command.

(DM1200E) #
(DM1200E) #clear aaa ias-users
(DM1200E) #

show aaa ias-users

Use this command to display configured IAS users and their attributes. Passwords configured
are not shown in the show command output.

Default N/A

Format show aaa ias-users [username]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following is an example of the command.

(DM1200E) #
(DM1200E) #show aaa ias-users

UserName

159 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Client-1
Client-2

Example: Following are the IAS configuration commands shown in the output of show
running-config command. Passwords shown in the command output are always encrypted.
aaa ias-user username client-1
password a45c74fdf50a558a2b5cf05573cd633bac2c6c598d54497ad4c46104918f2c encrypted
exit

accounting
Use this command in Line Configuration mode to apply the accounting method list to a line
config (console/telnet/ssh).

Default none

Format accounting {exec | commands } {default | listname}

Mode Line Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

exec Causes accounting for an EXEC session.

commands This causes accounting for each command execution attempt. If a user is enabling accounting
for exec mode for the current line-configuration type, the user will be logged out.

default The default Accounting List

160 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

listname Enter a string of not more than 15 characters.

Example: The following is a example of the command.

(DM1200E) #
(DM1200E) #configure
(DM1200E) (Config)#line telnet
(DM1200E)(Config-line)# accounting exec default
(DM1200E) #exit

no accounting
Use this command to remove accounting from a Line Configuration mode.

Default none

Format no accounting {exec|commands]

Mode Line Configuration

Command Added in firmware release 1.0

History

show accounting
Use this command to display ordered methods for accounting lists.

Default N/A

Format show accounting

Mode Privileged EXEC

Command Added in firmware release 1.0

History

161 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show accounting
Number of Accounting Notifications sent at beginning of an EXEC 0
session:
Errors when sending Accounting Notifications beginning of an EXEC 0
session:
Number of Accounting Notifications at end of an EXEC session: 0
Errors when sending Accounting Notifications at end of an EXEC 0
session:
Number of Accounting Notifications sent at beginning of a command 0
execution:
Errors when sending Accounting Notifications at beginning of a 0
command execution:
Number of Accounting Notifications sent at end of a command 0
execution:
Errors when sending Accounting Notifications at end of a command 0
execution:

show accounting methods

Use this command to display configured accounting method lists.

Default N/A

Format show accounting methods

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #
(DM1200E) #show accounting methods

Acct Method Name Record Type Method Type

Type

Exec dfltExecList start-stop TACACS

Commands dfltCmdsList stop-only TACACS
Commands UserCmdAudit start-stop TACACS
DOT1X dfltDot1xList start-stop radius

Line EXEC Method Command Method

List List

162 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Console dfltExecList dfltCmdsList
Telnet dfltExecList dfltCmdsList
SSH dfltExecList UserCmdAudit

clear accounting statistics

This command clears the accounting statistics.

Default N/A

Format clear accounting statistics

Mode Privileged Exec

Command Added in firmware release 1.0

History

SNMP Commands
This section describes the commands you use to configure Simple Network Management
Protocol (SNMP) on the switch. You can configure the switch to act as an SNMP agent so that it
can communicate with SNMP managers on your network.

snmp-server
This command sets the name and the physical location of the switch, and the organization
responsible for the network. The parameters name, loc and con can be up to 255 characters in
length.

Default none

Format snmp-server {sysname name | location loc | contact con}

Mode Global Config

163 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

Note: To clear the snmp-server, enter an empty string in quotes. For example, snmp-server
{sysname “ “} clears the system name.

snmp-server community
This command adds (and names) a new SNMP community, and optionally sets the access mode,
allowed IP address, and create a view for the community.

Note: Community names in the SNMP Community Table must be unique. When making
multiple entries using the same community name, the first entry is kept and processed and all
duplicate entries are ignored.

Default Two communities are created by default:

 public, with read-only permissions, a view name of Default, and allows access from all IP
addresses

 private, with read/write permissions, a view name of Default, and allows access from all IP
addresses.

Format snmp-server community community-string [{ro | rw |su }] [ipaddress ip-

address] [viewview-name]

Mode Global Config

Command Added in firmware release 1.0

History

164 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

community-name A name associated with the switch and with a set of SNMP managers that manage it with a
specified privileged level. The length of community-name can be up to 16 case-sensitive
characters.

ro | rw | su The access mode of the SNMP community, which can be public (Read-Only/RO), private
(Read-Write/RW), or Super User (SU).

ip-address The associated community SNMP packet sending address and is used along with the client
IP mask value to denote a range of IP addresses from which SNMP clients may use that
community to access the device. A value of 0.0.0.0 allows access from any IP address.
Otherwise, this value is ANDed with the mask to determine the range of allowed client IP
addresses.

view-name The name of the view to create or update.

no snmp-server community
This command removes this community name from the table. The name is the community
name to be deleted.

Default none

Format no snmp-server community community-name

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server community-group
This command configures a community access string to permit access via the SNMPv1 and
SNMPv2c protocols.

165 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format snmp-server community-group community-string group-name [ipaddress

ipaddress]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

community-string The community which is created and then associated with the group. The range is 1 to 20
characters.

group-name The name of the group that the community is associated with. The range is 1 to 30
characters.

ipaddress Optionally, the IPv4 address that the community may be accessed from.

snmp-server enable traps violation

The Port MAC locking component interprets this command and configures violation action to
send an SNMP trap with default trap frequency of 30 seconds. The Global command configures
the trap violation mode across all interfaces valid for port-security. There is no global trap mode
as such.

Note: For other port security commands, see Port Security Commands.

Default disabled

166 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format snmp-server enable traps violation

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no snmp-server enable traps violation

This command disables the sending of new violation traps.

Default disabled

Format no snmp-server enable traps violation

Mode Interface Config

Command Added in firmware release 1.0

History

snmp-server enable traps

This command enables the Authentication Flag.

Default enabled

Format snmp-server enable traps

Mode Global Config

Command Added in firmware release 1.0

History

167 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no snmp-server enable traps
This command disables the Authentication Flag.

Default enabled

Format no snmp-server enable traps

Mode Global Config

Command Added in firmware release 1.0

History

snmp trap link-status

This command enables link status traps on an interface or range of interfaces.

Note: This command is valid only when the Link Up/Down Flag is enabled.

Default enabled

Format snmp trap link-status

Mode Interface Config

Command Added in firmware release 1.0

History

no snmp trap link-status

This command disables link status traps by interface.

168 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: This command is valid only when the Link Up/Down Flag is enabled.

Default enabled

Format no snmp trap link-status

Mode Interface Config

Command Added in firmware release 1.0

History

snmp trap link-status all

This command enables link status traps for all interfaces.

Note: This command is valid only when the Link Up/Down Flag is enabled.

Default enabled

Format snmp trap link-status all

Mode Global Config

Command Added in firmware release 1.0

History

no snmp trap link-status all

This command disables link status traps for all interfaces.

169 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: This command is valid only when the Link Up/Down Flag is enabled.

Default enabled

Format no snmp trap link-status all

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server enable traps linkmode

This command enables Link Up/Down traps for the entire switch. When enabled, link traps are
sent only if the Link Trap flag setting associated with the port is enabled.

Default enabled

Format snmp-server enable traps linkmode

Mode Global Config

Command Added in firmware release 1.0

History

no snmp-server enable traps linkmode

This command disables Link Up/Down traps for the entire switch.

Default enabled

170 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no snmp-server enable traps linkmode

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server enable traps multiusers

This command enables Multiple User traps. When the traps are enabled, a Multiple User Trap is
sent when a user logs in to the terminal interface (EIA 232 or Telnet) and there is an existing
terminal interface session.

Default enabled

Format snmp-server enable traps multiusers

Mode Global Config

Command Added in firmware release 1.0

History

no snmp-server enable traps multiusers

This command disables Multiple User traps.

Default enabled

Format no snmp-server enable traps multiusers

Mode Global Config

Command Added in firmware release 1.0

171 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

snmp-server enable traps stpmode

This command enables the sending of new root traps and topology change notification traps.

Default enabled

Format snmp-server enable traps stpmode

Mode Global Config

Command Added in firmware release 1.0

History

no snmp-server enable traps stpmode

This command disables the sending of new root traps and topology change notification traps.

Default enabled

Format no snmp-server enable traps stpmode

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server engineID local

This command configures the SNMP engine ID on the local device.

Default The engineID is configured automatically, based on the device MAC address.

172 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format snmp-server engineID local {engineid-string|default}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

engineid-string A hexadecimal string identifying the engine-id, used for localizing configuration. Engine-id
must be an even length in the range of 6 to 32 hexadecimal characters.

default Sets the engine-id to the default string, based on the device MAC address.

Caution !Changing the engine-id will invalidate all SNMP configuration that exists on the box.

no snmp-server engineID local

This command removes the specified engine ID.

Default The engineID is configured automatically, based on the device MAC address.

Format no snmp-server engineID local

Mode Global Config

Command Added in firmware release 1.0

History

173 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

snmp-server filter
This command creates a filter entry for use in limiting which traps will be sent to a host.

Default No filters are created by default.

Format snmp-server filter filtername oid-tree {included|excluded}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

filtername The label for the filter being created. The range is 1 to 30 characters.

oid-tree The OID subtree to include or exclude from the filter. Subtrees may be specified by numerical
(1.3.6.2.4) or keywords (system), and asterisks may be used to specify a subtree family
(1.3.*.4).

included The tree is included in the filter.

excluded The tree is excluded from the filter.

no snmp-server filter
This command removes the specified filter.

Default No filters are created by default.

Format snmp-server filter filtername [oid-tree]

174 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server group
This command creates an SNMP access group.

Default Generic groups are created for all versions and privileges using the default views.

Format snmp-server group group-name {v1 | v2c | v3 {noauth | auth | priv}}

[context context-name] [read read-view] [write write-view] [notify
notify-view]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

group-name The group name to be used when configuring communities or users. The range is 1 to 30
characters.

v1 This group can only access via SNMPv1.

v2 This group can only access via SNMPv2c.

v3 This group can only access via SNMPv3.

noauth This group can be accessed only when not using Authentication or Encryption. Applicable only

175 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 if SNMPv3 is selected.

auth This group can be accessed only when using Authentication but not Encryption. Applicable
only if SNMPv3 is selected.

priv This group can be accessed only when using both Authentication and Encryption. Applicable
only if SNMPv3 is selected.

context-name The SNMPv3 context used during access. Applicable only if SNMPv3 is selected.

read-view The view this group will use during GET requests. The range is 1 to 30 characters.

write-view The view this group will use during SET requests. The range is 1 to 30 characters.

notify-view The view this group will use when sending out traps. The range is 1 to 30 characters.

no snmp-server group
This command removes the specified group.

Default N/A

Format no snmp-server group group-name {v1|v2c| 3 {noauth|auth|priv}} [context

context-name]

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server host
This command configures traps to be sent to the specified host.

176 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default No default hosts are configured.

Format snmp-server host host-addr {informs [timeout seconds] [retries

retries]|traps version {1 | 2c }} community-string [udp-port port]
[filter filter-name]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

host-addr The IPv4 or IPv6 address of the host to send the trap or inform to.

traps Send SNMP traps to the host. This option is selected by default.

version 1 Sends SNMPv1 traps. This option is not available if informs is selected.

version 2 Sends SNMPv2c traps. This option is not available if informs is selected. This option is
selected by default.

informs Send SNMPv2 informs to the host.

seconds The number of seconds to wait for an acknowledgement before resending the Inform. The
default is 15 seconds. The range is 1 to 300 seconds.

retries The number of times to resend an Inform. The default is 3 attempts. The range is 0 to 255
retries.

community-string Community string sent as part of the notification. The range is 1 to 20 characters.

177 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

port The SNMP Trap receiver port. The default is port 162.

filter-name The filter name to associate with this host. Filters can be used to specify which traps are sent
to this host. The range is 1 to 30 characters.

no snmp-server host
This command removes the specified host entry.

Default N/A

Format no snmp-server host host-addr [traps|informs]

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server user
This command creates an SNMPv3 user for access to the system.

Default No default users are created.

Format snmp-server user username groupname [remote engineid-string] [ {auth-md5

password | auth-sha password | auth-md5-key md5-key | auth-sha-key sha-
key} [priv-des password| priv-des-key des-key]

Mode Global Config

Command Added in firmware release 1.0

History

178 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

username The username the SNMPv3 user will connect to the switch as. The range is 1 to 30
characters.

group-name The name of the group the user belongs to. The range is 1 to 30 characters.

engineid-string The engine-id of the remote management station that this user will be connecting from. The
range is 5 to 32 characters.

password The password the user will use for the authentication or encryption mechanism. The range is
1 to 32 characters.

md5-key A pregenerated MD5 authentication key. The length is 32 characters.

sha-key A pregenerated SHA authentication key. The length is 48 characters.

des-key A pregenerated DES encryption key. The length is 32 characters if MD5 is selected, 48
characters if SHA is selected.

no snmp-server user
This command removes the specified SNMPv3 user.

Default N/A

Format no snmp-server user username

Mode Global Config

Command Added in firmware release 1.0

History

179 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

snmp-server view
This command creates or modifies an existing view entry that is used by groups to determine
which objects can be accessed by a community or user.

Default Views are created by default to provide access to the default groups.

Format snmp-server viewname oid-tree {included|excluded}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

viewname The label for the view being created. The range is 1 to 30 characters.

oid-tree The OID subtree to include or exclude from the view. Subtrees may be specified by numerical
(1.3.6.2.4) or keywords (system), and asterisks may be used to specify a subtree family
(1.3.*.4).

included The tree is included in the view.

excluded The tree is excluded from the view.

no snmp-server view
This command removes the specified view.

Default N/A

Format no snmp-server view viewname [oid-tree]

180 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

snmp-server v3-host
This command configures traps to be sent to the specified host.

Default No default hosts are configured.

Format snmp-server v3-host host-addrusername [traps | informs [timeout seconds]

[retries retries]] [auth | noauth | priv] [udpport port] [filter
filtername]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

host-addr The IPv4 or IPv6 address of the host to send the trap or inform to.

user-name User used to send a Trap or Inform message. This user must be associated with a group that
supports the version and access method. The range is 1 to 30 characters.

traps Send SNMP traps to the host. This is the default option.

informs Send SNMP informs to the host.

Seconds Number of seconds to wait for an acknowledgement before resending the Inform. The default

181 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 is 15 seconds. The range is 1 to 300 seconds.

retries Number of times to resend an Inform. The default is 3 attempts. The range is 0 to 255
retries.

Auth Enables authentication but not encryption.

Noauth No authentication or encryption. This is the default.

Priv Enables authentication and encryption.

port The SNMP Trap receiver port. This value defaults to port 162.

filter-name The filter name to associate with this host. Filters can be used to specify which traps are sent
to this host. The range is 1 to 30 characters.

snmptrap source-interface
Use this command in Global Configuration mode to configure the global source-interface
(Source IP address) for all SNMP communication between the SNMP client and the server.

Default Management IP (configured with network parms or network protocol commands)

Format snmptrap source-interface {unit/slot/port | vlan vlan-id}

Mode Global Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

182 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

unit/slot/port The unit identifier assigned to the switch.

vlan-id Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.

no snmptrap source-interface
Use this command in Global Configuration mode to remove the global source-interface (Source
IP selection) for all SNMP communication between the SNMP client and the server.

Default Management IP (configured with network parms or network protocol commands)

Format no snmptrap source-interface

Mode Global Configuration

Command Added in firmware release 1.0

History

show snmp
This command displays the current SNMP configuration.

Default N/A

Format show snmp

Mode Privileged EXEC

Command Added in firmware release 1.0

History

183 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Community Community- The community string for the entry. This is used by SNMPv1 and SNMPv2
Table: String protocols to access the switch.

Community- The type of access the community has:

Access
 Read only

 Read write

 su

View Name The view this community has access to.

IP Address Access to this community is limited to this IP address.

Community Community- The community this mapping configures

Group Table: String

Group Name The group this community is assigned to.

IP Address The IP address this community is limited to.

Host Table: Target Address The address of the host that traps will be sent to.

Type The type of message that will be sent, either traps or informs.

Community The community traps will be sent to.

Version The version of SNMP the trap will be sent as.

UDP Port The UDP port the trap or inform will be sent to.

184 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Filter name The filter the traps will be limited by for this host.

TO Sec The number of seconds before informs will time out when sending to this host.

Retries The number of times informs will be sent after timing out.

show snmp engineID

This command displays the currently configured SNMP engineID.

Default N/A

Format show snmp engineID

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Local SNMP EnginID The current configuration of the displayed SNMP engineID.

show snmp filters

This command displays the configured filters used when sending traps.

Default N/A

Format show snmp filters [filtername]

185 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Name The filter name for this entry.

OID Tree The OID tree this entry will include or exclude.

Type Indicates if this entry includes or excludes the OID Tree.

show snmp group

This command displays the configured groups.

Default N/A

Format show snmp group [groupname]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Name The name of the group.

186 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Security Model Indicates which protocol can access the system via this group.

Security Level Indicates the security level allowed for this group.

Read View The view this group provides read access to.

Write View The view this group provides write access to.

Notify View The view this group provides trap access to.

show snmp source-interface

Use this command in Privileged EXEC mode to display the configured global source-interface
(Source IP address) details used for an SNMP client.

Default N/A

Format show snmp source-interface

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E)# show snmp source-interface
SNMP trap Client Source Interface.............. (not configured)

show snmp user

This command displays the currently configured SNMPv3 users.

Default N/A

187 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show snmp user [username]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Name The name of the user.

Group Name The group that defines the SNMPv3 access parameters.

Auth Method The authentication algorithm configured for this user.

Privilege Method The encryption algorithm configured for this user.

Remote Engine ID The engineID for the user defined on the client machine.

show snmp views

This command displays the currently configured views.

Default N/A

Format show snmp views [viewname]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

188 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

Name The view name for this entry.

OID Tree The OID tree that this entry will include or exclude.

Type Indicates if this entry includes or excludes the OID tree.

show trapflags
This command displays trap conditions. Configure which traps the switch should generate by
enabling or disabling the trap condition. If a trap condition is enabled and the condition is
detected, the SNMP agent on the switch sends the trap to all enabled trap receivers. You do not
have to reset the switch to implement the changes. Cold and warm start traps are always
generated and cannot be disabled.

Default N/A

Format show trapflags

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Authentication Flag Can be enabled or disabled. The factory default is enabled. Indicates whether authentication
failure traps will be sent.

189 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Link Up/Down Flag Can be enabled or disabled. The factory default is enabled. Indicates whether link status traps
will be sent.

Multiple Users Flag Can be enabled or disabled. The factory default is enabled. Indicates whether a trap will be
sent when the same user ID is logged into the switch more than once at the same time
(either through Telnet or the serial port).

Spanning Tree Flag Can be enabled or disabled. The factory default is enabled. Indicates whether spanning tree
traps are sent.

ACL Traps May be enabled or disabled. The factory default is disabled. Indicates whether ACL traps are
sent.

Temperature trap Can be enabled or disabled. The factory default is enabled. Indicates whether temperature
traps will be sent.

RADIUS Commands
This section describes the commands you use to configure the switch to use a Remote
Authentication Dial-In User Service (RADIUS) server on your network for authentication and
accounting.

radius accounting mode

This command is used to enable the RADIUS accounting function.

Default disabled

Format radius accounting mode

Mode Global Config

Command Added in firmware release 1.0

History

190 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no radius accounting mode
This command is used to set the RADIUS accounting function to the default value - i.e. the
RADIUS accounting function is disabled.

Default disabled

Format no radius accounting mode

Mode Global Config

Command Added in firmware release 1.0

History

radius server attribute 4

This command specifies the RADIUS client to use the NAS-IP Address attribute in the RADIUS
requests. If the specific IP address is configured while enabling this attribute, the RADIUS client
uses that IP address while sending NAS-IP-Address attribute in RADIUS communication.

Default none

Format radius server attribute 4 [ipaddr]

Mode Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

4 NAS-IP-Address attribute to be used in RADIUS requests.

191 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ipaddr The IP address of the server.

no radius server attribute 4

The no version of this command disables the NAS-IP-Address attribute global parameter for
RADIUS client. When this parameter is disabled, the RADIUS client does not send the NAS-IP-
Address attribute in RADIUS requests.

Default none

Format no radius server attribute 4 [ipaddr]

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config) #radius server attribute 4 192.168.37.60
(DM1200E) (Config) #radius server attribute 4

radius server host

This command configures the IP address or DNS name to use for communicating with the
RADIUS server of a selected server type. While configuring the IP address or DNS name for the
authenticating or accounting servers, you can also configure the port number and server name.
If the authenticating and accounting servers are configured without a name, the command uses
the Default_RADIUS_Auth_Server and Default_RADIUS_Acct_Server as the default names,
respectively. The same name can be configured for more than one authenticating servers and
the name should be unique for accounting servers. The RADIUS client allows the configuration
of a maximum 32 authenticating and accounting servers.
If you use the auth parameter, the command configures the IP address or hostname to use to
connect to a RADIUS authentication server. You can configure up to 3 servers per RADIUS
client. If the maximum number of configured servers is reached, the command fails until you

192 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

remove one of the servers by issuing the “no” form of the command. If you use the optional
port parameter, the command configures the UDP port number to use when connecting to the

configured RADIUS server. The port number range is 1 - 65535, with 1812 being the default
value.

Note: To reconfigure a RADIUS authentication server to use the default UDP port, set the
port parameter to 1812.

If you use the acct token, the command configures the IP address or hostname to use for the
RADIUS accounting server. You can only configure one accounting server. If an accounting
server is currently configured, use the “no” form of the command to remove it from the
configuration. The IP address or hostname you specify must match that of a previously
configured accounting server. If you use the optional port parameter, the command configures
the UDP port to use when connecting to the RADIUS accounting server. If a port is already
configured for the accounting server, the new port replaces the previously configured port. The
port must be a value in the range 0 - 65535, with 1813 being the default.

Note: To reconfigure a RADIUS accounting server to use the default UDP port, set the port
parameter to 1813.

Default none

Format radius server host {auth | acct} {ipaddr|dnsname} [name servername]

[port 0-65535]

Mode Global Config

Command Added in firmware release 1.0

History

193 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

FIELD DESCRIPTION

ipaddr The IP address of the server.

dnsname The DNS name of the server.

0-65535 The port number to use to connect to the specified RADIUS server.

servername The alias name to identify the server.

no radius server host

The no version of this command deletes the configured server entry from the list of configured
RADIUS servers. If the RADIUS authenticating server being removed is the active server in the
servers that are identified by the same server name, then the RADIUS client selects another
server for making RADIUS transactions. If the 'auth' token is used, the previously configured
RADIUS authentication server is removed from the configuration. Similarly, if the 'acct' token is
used, the previously configured RADIUS accounting server is removed from the configuration.
The ipaddr|dnsname parameter must match the IP address or DNS name of the previously
configured RADIUS authentication / accounting server.

Default none

Format no radius server host {auth | acct} {ipaddr|dnsname}

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config) #radius server host acct 192.168.37.60

194 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config) #radius server host acct 192.168.37.60 port 1813
(DM1200E) (Config) #radius server host auth 192.168.37.60 name Network1_RS port 1813
(DM1200E) (Config) #radius server host acct 192.168.37.60 name Network2_RS
(DM1200E) (Config) #no radius server host acct 192.168.37.60

radius server key

This command configures the key to be used in RADIUS client communication with the specified
server. Depending on whether the 'auth' or 'acct' token is used, the shared secret is configured
for the RADIUS authentication or RADIUS accounting server. The IP address or hostname
provided must match a previously configured server. When this command is executed, the
secret is prompted.
Text-based configuration supports Radius server’s secrets in encrypted and non-encrypted
format. When you save the configuration, these secret keys are stored in encrypted format only.
If you want to enter the key in encrypted format, enter the key along with the encrypted
keyword. In the show running-config command’s display, these secret keys are displayed in
encrypted format. You cannot show these keys in plain text format.

Note: The secret must be an alphanumeric value not exceeding 16 characters.

Default none

Format radius server key {auth | acct} {ipaddr|dnsname} encrypted password

Mode Global Config

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

195 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ipaddr The IP address of the server.

dnsname The DNS name of the server.

password The password in encrypted format.

Example: The following shows an example of the CLI command.

radius server key acct 10.240.4.10 encrypted encrypt-string

radius server msgauth

This command enables the message authenticator attribute to be used for the specified RADIUS
Authenticating server.

Default IP of primary Radius server

Format radius server msgauth ipaddr|dnsname

Mode Global Config

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

ip addr The IP address of the server.

dnsname The DNS name of the server.

196 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no radius server msgauth
The no version of this command disables the message authenticator attribute to be used for the
specified RADIUS Authenticating server.

Default none

Format no radius server msgauth ipaddr|dnsname

Mode Global Config

Command Added in firmware release 1.0

History

radius server primary

This command specifies a configured server that should be the primary server in the group of
servers which have the same server name. Multiple primary servers can be configured for each
number of servers that have the same name. When the RADIUS client has to perform
transactions with an authenticating RADIUS server of specified name, the client uses the
primary server that has the specified server name by default. If the RADIUS client fails to
communicate with the primary server for any reason, the client uses the backup servers
configured with the same server name. These backup servers are identified as the Secondary
type.

Default none

Format radius server primary {ipaddr|dnsname}

Mode Global Config

Command Added in firmware release 1.0

History

197 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

FIELD DESCRIPTION

ip addr The IP address of the RADIUS Authenticating server.

dnsname The DNS name of the server.

radius server retransmit

This command configures the global parameter for the RADIUS client that specifies the number
of transmissions of the messages to be made before attempting the fall back server upon
unsuccessful communication with the current RADIUS authenticating server. When the
maximum number of retries are exhausted for the RADIUS accounting server and no response
is received, the client does not communicate with any other server.

Default 4

Format radius server retransmit retries

Mode Global Config

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

retries The maximum number of transmission attempts in the range of 1 to 15.

no radius server retransmit

The no version of this command sets the value of this global parameter to the default value.

198 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 4

Format no radius server retransmit

Mode Global Config

Command Added in firmware release 1.0

History

radius source-interface
Use this command to specify the physical or logical interface to use as the RADIUS client source
interface (Source IP address). If configured, the address of source Interface is used for all
RADIUS communications between the RADIUS server and the RADIUS client. The selected
source-interface IP address is used for filling the IP header of RADIUS management protocol
packets. This allows security devices (firewalls) to identify the source packets coming from the
specific switch.
If a source-interface is not specified, the primary IP address of the originating (outbound)
interface is used as the source address. If the configured interface is down, the RADIUS client
falls back to its default behavior.

Default Management IP (configured with network parms or network protocol commands)

Format radius source-interface {unit/slot/port | vlan vlan-id}

Mode Global Config

Command Added in firmware release 1.0

History

199 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

unit/slot/port The unit identifier assigned to the switch.

vlan-id Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.

no radius source-interface
Use this command to reset the RADIUS source interface to the default settings.

Format no radius source-interface

Mode Global Config

Command Added in firmware release 1.0

History

radius server timeout

This command configures the global parameter for the RADIUS client that specifies the timeout
value (in seconds) after which a request must be retransmitted to the RADIUS server if no
response is received. The timeout value is an integer in the range of 1 to 30.

Default 5

Format radius server timeout seconds

Mode Global Config

Command Added in firmware release 1.0

History

200 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

FIELD DESCRIPTION

retries Maximum number of transmission attempts in the range 1-30.

no radius server timeout

The no version of this command sets the timeout global parameter to the default value.

Default 5 seconds

Format no radius server timeout

Mode Global Config

Command Added in firmware release 1.0

History

show radius
This command displays the values configured for the global parameters of the RADIUS client.

Default N/A

Format show radius

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

201 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Number of Configured The number of RADIUS Authentication servers that have been configured.
Authentication Servers

Number of Configured The number of RADIUS Accounting servers that have been configured.
Accounting Servers

Number of Named The number of configured named RADIUS server groups.

Authentication Server
Groups

Number of Named The number of configured named RADIUS server groups.

Accounting Server Groups

Number of Retransmits The configured value of the maximum number of times a request packet is retransmitted.

Time Duration The configured timeout value, in seconds, for request retransmissions.

RADIUS Accounting Mode A global parameter to indicate whether the accounting mode for all the servers is enabled
or not.

RADIUS Attribute 4 Mode A global parameter to indicate whether the NAS-IP-Address attribute has been enabled to
use in RADIUS requests.

RADIUS Attribute 4 Value A global parameter that specifies the IP address to be used in the NAS-IP-Address
attribute to be used in RADIUS requests.

Example: The following shows example CLI display output for the command.
(DM1200E) #show radius

Number of Configured Authentication Servers 32

Number of Configured Accounting Servers 32
Number of Named Authentication Server Groups 15
Number of Named Accounting Server Groups 3
Number of Retransmits 4
Time Duration 10
RADIUS Accounting Mode Disable
RADIUS Attribute 4 Mode Enable
RADIUS Attribute 4 Value 192.168.37.60

202 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show radius servers
This command displays the summary and details of RADIUS authenticating servers configured
for the RADIUS client.

Default N/A

Format show radius servers [{ipaddr|dnsname | name [servername]}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

ipaddr The IP address of the authenticating server.

dnsname The DNS name of the authenticating server.

servername The alias name to identify the server.

Current The * symbol preceding the server host address specifies that the server is currently active.

Host Address The IP address of the host.

Server Name The name of the authenticating server.

Port The port used for communication with the authenticating server.

Type Specifies whether this server is a primary or secondary type.

203 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Current Host Address The IP address of the currently active authenticating server.

Secret Configured Yes or No Boolean value that indicates whether this server is configured with a secret.

Number of The configured value of the maximum number of times a request packet is retransmitted.
Retransmits

Message Authenticator A global parameter to indicate whether the Message Authenticator attribute is enabled or
disabled.

Time Duration The configured timeout value, in seconds, for request retransmissions.

RADIUS Accounting A global parameter to indicate whether the accounting mode for all the servers is enabled or
Mode not.

RADIUS Attribute 4 A global parameter to indicate whether the NAS-IP-Address attribute has been enabled to use
Mode in RADIUS requests.

RADIUS Attribute 4 A global parameter that specifies the IP address to be used in NAS-IP-Address attribute used
Value in RADIUS requests.

Example: The following shows example CLI display output for the command.
(DM1200E) #show radius servers

Curr Host Server Name Po Type

ent Address rt

* Network1_RADIUS_S 18 Primar
192.168.37 erver 13 y
.200
192.168.37 Network2_RADIUS_S 18 Second
.201 erver 13 ary
192.168.37 Network3_RADIUS_S 18 Primar
.202 erver 13 y
192.168.37 Network4_RADIUS_S 18 Second
.203 erver 13 ary

(DM1200E) #show radius servers name

Current Host Server Name Type

Address

204 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 192.168.37.200 Network1_RADIUS_Server Secondary
192.168.37.201 Network2_RADIUS_Server Primary
192.168.37.202 Network3_RADIUS_Server Secondary
192.168.37.203 Network4_RADIUS_Server Primary

(DM1200E) #show radius servers name Default_RADIUS_Server

Server Name Default_RADIUS_Server

Host Address 192.168.37.58
Secret Configured No
Message Authenticator Enable
Number of Retransmits 4
Time Duration 10
RADIUS Accounting Mode Disable
RADIUS Attribute 4 Mode Enable
RADIUS Attribute 4 Value 192.168.37.60

(DM1200E) #show radius servers 192.168.37.58

Server Name Default_RADIUS_Server

Host Address 192.168.37.58
Secret Configured No
Message Authenticator Enable
Number of Retransmits 4
Time Duration 10
RADIUS Accounting Mode Disable
RADIUS Attribute 4 Mode Enable
RADIUS Attribute 4 Value 192.168.37.60

show radius accounting

This command displays a summary of configured RADIUS accounting servers.

Default N/A

Format show radius accounting name [servername]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

205 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

servername An alias name to identify the server.

RADIUS Accounting A global parameter to indicate whether the accounting mode for all the servers is enabled or
Mode not.

If you do not specify any parameters, then only the accounting mode and the RADIUS
accounting server details are displayed.

TERM DEFINITION

Host Address The IP address of the host.

Server Name The name of the accounting server.

Port The port used for communication with the accounting server.

Secret Configured Yes or No Boolean value indicating whether this server is configured with a secret.

Example: The following shows example CLI display output for the command.
(DM1200E) #show radius accounting name

Host Address Server Name Port Secret

Configured

192.168.37.200 Network1_RADIUS_Server 1813 Yes

192.168.37.201 Network2_RADIUS_Server 1813 No
192.168.37.202 Network3_RADIUS_Server 1813 Yes
192.168.37.203 Network4_RADIUS_Server 1813 Secondary

(DM1200E) #show radius accounting name Default_RADIUS_Server

Server Name Default_RADIUS_Server

Host Address 192.168.37.200
RADIUS Accounting Mode Disable
Port 1813
Secret Configured Yes

206 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show radius accounting statistics
This command displays a summary of statistics for the configured RADIUS accounting servers.

Default N/A

Format show radius accounting statistics {ipaddr|dnsname | name servername}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

ipaddr The IP address of the server.

dnsname The DNS name of the server.

servername The alias name to identify the server.

RADIUS Accounting Server The name of the accounting server.

Name

Server Host Address The IP address of the host.

Round Trip Time The time interval, in hundredths of a second, between the most recent Accounting-
Response and the Accounting-Request that matched it from this RADIUS accounting
server.

Requests The number of RADIUS Accounting-Request packets sent to this server. This number
does not include retransmissions.

207 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Retransmission The number of RADIUS Accounting-Request packets retransmitted to this RADIUS
accounting server.

Responses The number of RADIUS packets received on the accounting port from this server.

Malformed Responses The number of malformed RADIUS Accounting-Response packets received from this
server. Malformed packets include packets with an invalid length. Bad authenticators or
signature attributes or unknown types are not included as malformed accounting
responses.

Bad Authenticators The number of RADIUS Accounting-Response packets containing invalid authenticators
received from this accounting server.

Pending Requests The number of RADIUS Accounting-Request packets sent to this server that have not yet
timed out or received a response.

Timeouts The number of accounting timeouts to this server.

Unknown Types The number of RADIUS packets of unknown types, which were received from this server
on the accounting port.

Packets Dropped The number of RADIUS packets received from this server on the accounting port and
dropped for some other reason.

Example: The following shows example CLI display output for the command.
(DM1200E) #show radius accounting statistics 192.168.37.200

RADIUS Accounting Server Name Default_RADIUS_Server

Host Address 192.168.37.200
Round Trip Time 0.00
Requests 0
Retransmissions 0
Responses 0
Malformed Responses 0
Bad Authenticators 0
Pending Requests 0
Timeouts 0
Unknown Types 0
Packets Dropped 0

(DM1200E) #show radius accounting statistics name Default_RADIUS_Server

208 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 RADIUS Accounting Server Name Default_RADIUS_Server
Host Address 192.168.37.200
Round Trip Time 0.00
Requests 0
Retransmissions 0
Responses 0
Malformed Responses 0
Bad Authenticators 0
Pending Requests 0
Timeouts 0
Unknown Types 0
Packets Dropped 0

show radius source-interface

Use this command in Privileged EXEC mode to display the configured RADIUS client source-
interface (Source IP address) information.

Default N/A

Format show radius source-interface

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E)# show radius source-interface
RADIUS Client Source Interface.............. (not configured)

show radius statistics

This command displays the summary statistics of configured RADIUS Authenticating servers.

Default N/A

Format show radius statistics {ipaddr|dnsname | name servername}

Mode Privileged EXEC

209 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

ipaddr The IP address of the server.

dnsname The DNS name of the server.

servername The alias name to identify the server.

RADIUS Server Name The name of the authenticating server.

Server Host Address The IP address of the host.

Access Requests The number of RADIUS Access-Request packets sent to this server. This number does not
include retransmissions.

Access The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication
Retransmissions server.

Access Accepts The number of RADIUS Access-Accept packets, including both valid and invalid packets, that
were received from this server.

Access Rejects The number of RADIUS Access-Reject packets, including both valid and invalid packets, that
were received from this server.

Access Challenges The number of RADIUS Access-Challenge packets, including both valid and invalid packets,
that were received from this server.

Malformed Access The number of malformed RADIUS Access-Response packets received from this server.
Responses Malformed packets include packets with an invalid length. Bad authenticators or signature
attributes or unknown types are not included as malformed access responses.

210 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Bad Authenticators The number of RADIUS Access-Response packets containing invalid authenticators or
signature attributes received from this server.

Pending Requests The number of RADIUS Access-Request packets destined for this server that have not yet
timed out or received a response.

Timeouts The number of authentication timeouts to this server.

Unknown Types The number of packets of unknown type that were received from this server on the
authentication port.

Packets Dropped The number of RADIUS packets received from this server on the authentication port and
dropped for some other reason.

Example: The following shows example CLI display output for the command.
(DM1200E) #show radius statistics 192.168.37.200

RADIUS Server Name Default_RADIUS_Server

Server Host Address 192.168.37.200
Access Requests 0.00
Access Retransmissions 0
Access Accepts 0
Access Rejects 0
Access Challenges 0
Malformed Access Responses 0
Bad Authenticators 0
Pending Requests 0
Timeouts 0
Unknown Types 0
Packets Dropped 0

(DM1200E) #show radius statistics name Default_RADIUS_Server

RADIUS Server Name Default_RADIUS_Server

Server Host Address 192.168.37.200
Access Requests 0.00
Access Retransmissions 0
Access Accepts 0
Access Rejects 0
Access Challenges 0
Malformed Access Responses 0
Bad Authenticators 0
Pending Requests 0
Timeouts 0
Unknown Types 0
Packets Dropped 0

211 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TACACS+ Commands
TACACS+ provides access control for networked devices via one or more centralized servers.
Similar to RADIUS, this protocol simplifies authentication by making use of a single database
that can be shared by many clients on a large network. TACACS+ is based on the TACACS
protocol (described in RFC1492) but additionally provides for separate authentication,
authorization, and accounting services. The original protocol was UDP based with messages
passed in clear text over the network; TACACS+ uses TCP to ensure reliable delivery and a
shared key configured on the client and daemon server to encrypt all messages.

tacacs-server host
Use the tacacs-server host command in Global Configuration mode to configure a TACACS+
server. This command enters into the TACACS+ configuration mode. The ip-address|hostname
parameter is the IP address or hostname of the TACACS+ server. To specify multiple hosts,
multiple tacacs-server host commands can be used.

Default none

Format tacacs-server host ip-address|hostname

Mode Global Config

Command Added in firmware release 1.0

History

no tacacs-server host
Use the no tacacs-server host command to delete the specified hostname or IP address. The
ip-address|hostname parameter is the IP address of the TACACS+ server.

Default none

Format no tacacs-server host ip-address|hostname

212 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

tacacs-server key
Use the tacacs-server key command to set the authentication and encryption key for all
TACACS+ communications between the switch and the TACACS+ daemon. The key-string
parameter has a range of 0 - 128 characters and specifies the authentication and encryption
key for all TACACS communications between the switch and the TACACS+ server. This key
must match the key used on the TACACS+ daemon.
Text-based configuration supports TACACS server’s secrets in encrypted and non-encrypted
format. When you save the configuration, these secret keys are stored in encrypted format only.
If you want to enter the key in encrypted format, enter the key along with the encrypted
keyword. In the show running-config command’s display, these secret keys are displayed in
encrypted format. You cannot show these keys in plain text format.

Default none

Format tacacs-server key [key-string | encrypted key-string]

Mode Global Config

Command Added in firmware release 1.0

History

no tacacs-server key
Use the no tacacs-server key command to disable the authentication and encryption key for
all TACACS+ communications between the switch and the TACACS+ daemon. The key-string
parameter has a range of 0 - 128 characters This key must match the key used on the
TACACS+ daemon.

213 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format no tacacs-server key key-string

Mode Global Config

Command Added in firmware release 1.0

History

tacacs-server keystring
Use the tacacs-server keystring command to set the global authentication encryption key
used for all TACACS+ communications between the TACACS+ server and the client.

Default none

Format tacacs-server keystring

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the CLI command.

(DM1200E)(Config)#tacacs-server keystring
Enter tacacs key:********
Re-enter tacacs key:********

tacacs-server source-interface
Use this command in Global Configuration mode to configure the source interface (Source IP
address) for TACACS+ server configuration. The selected source-interface IP address is used for
filling the IP header of management protocol packets. This allows security devices (firewalls) to
identify the source packets coming from the specific switch.

214 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

If a source-interface is not specified, the primary IP address of the originating (outbound)
interface is used as the source address.

Default Management IP (configured with network parms or network protocol commands)

Format tacacs-server source-interface {unit/slot/port | vlan vlan-id}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

unit/slot/port The unit identifier assigned to the switch, in unit/slot/port format.

vlan-id Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.

Example: The following shows an example of the command.

(Config)#tacacs-server source-interface loopback 0
(Config)#tacacs-server source-interface 1/0/1
(Config)#no tacacs-server source-interface

no tacacs-server source-interface
Use this command in Global Configuration mode to remove the global source interface (Source
IP selection) for all TACACS+ communications between the TACACS+ client and the server.

Default Management IP (configured with network parms or network protocol commands)

Format no tacacs-server source-interface

215 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

tacacs-server timeout
Use the tacacs-server timeout command to set the timeout value for communication with the
TACACS+ servers. The timeout parameter has a range of 1-30 and is the timeout value in
seconds. If you do not specify a timeout value, the command sets the global timeout to the
default value. TACACS+ servers that do not use the global timeout will retain their configured
timeout values.

Default 5

Format tacacs-server timeout timeout

Mode Global Config

Command Added in firmware release 1.0

History

no tacacs-server timeout
Use the no tacacs-server timeout command to restore the default timeout value for all
TACACS servers.

Default 5 seconds

Format no tacacs-server timeout

Mode Global Config

216 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

key
Use the key command in TACACS Configuration mode to specify the authentication and
encryption key for all TACACS communications between the device and the TACACS server. This
key must match the key used on the TACACS daemon. The key-string parameter specifies the
key name. For an empty string use “ ”. (Range: 0 - 128 characters).
Text-based configuration supports TACACS server’s secrets in encrypted and non-encrypted
format. When you save the configuration, these secret keys are stored in encrypted format only.
If you want to enter the key in encrypted format, enter the key along with the encrypted
keyword. In the show running-config command’s display, these secret keys are displayed in
encrypted format. You cannot show these keys in plain text format.

Default none

Format key [key-string | encrypted key-string]

Mode TACACS Config

Command Added in firmware release 1.0

History

keystring
Use the keystring command in TACACS Server Configuration mode to set the TACACS+ server-
specific authentication encryption key used for all TACACS+ communications between the
TACACS+ server and the client.

Default none

217 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format keystring

Mode TACACS Server Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E)(Config)#tacacs-server host 1.1.1.1
(DM1200E)(Tacacs)#keystring

Enter tacacs key:********

Re-enter tacacs key:********

port
Use the port command in TACACS Configuration mode to specify a server port number. The
server port-number range is 0 - 65535.

Default 49

Format port port-number

Mode TACACS Config

Command Added in firmware release 1.0

History

priority (TACACS Config)

Use the priority command in TACACS Configuration mode to specify the order in which
servers are used, where 0 (zero) is the highest priority. The priority parameter specifies the
priority for servers. The highest priority is 0 (zero), and the range is 0 - 65535.

Default 0

218 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format priority priority

Mode TACACS Config

Command Added in firmware release 1.0

History

timeout
Use the timeout command in TACACS Configuration mode to specify the timeout value in
seconds. If no timeout value is specified, the global value is used. The timeout parameter has
a range of 1-30 and is the timeout value in seconds.

Default Global value, configured using tacacs-server timeout command.

Format timeout timeout

Mode TACACS Config

Command Added in firmware release 1.0

History

show tacacs
Use the show tacacs command to display the configuration, statistics, and source interface
details of the TACACS+ client.

Default N/A

Format show tacacs [ip-address|hostname|client|server]

Mode Privileged EXEC

219 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Host address The IP address or hostname of the configured TACACS+ server.

Port The configured TACACS+ server port number.

TimeOut The timeout in seconds for establishing a TCP connection.

Priority The preference order in which TACACS+ servers are contacted. If a server connection fails,
the next highest priority server is contacted.

show tacacs source-interface

Use the show tacacs source-interface command in Global Config mode to display the
configured global source interface details used for a TACACS+ client. The IP address of the
selected interface is used as source IP for all communications with the server.

Default N/A

Format show tacacs source-interface

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show tacacs source-interface
TACACS Client Source Interface................. (not configured)

220 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Configuration Scripting Commands
Configuration Scripting allows you to generate text-formatted script files representing the
current configuration of a system. You can upload these configuration script files to a PC or
UNIX system and edit them. Then, you can download the edited files to the system and apply
the new configuration. You can apply configuration scripts to one or more switches with no or
minor modifications.
Use the show running-config command (see show running-config) to capture the running
configuration into a script. Use the copy command (see copy) to transfer the configuration
script to or from the switch.
You should use scripts on systems with default configuration; however, you are not prevented
from applying scripts on systems with non-default configurations.
Scripts must conform to the following rules:

 Script files are not distributed across the stack, and only live in the unit that is the
master unit at the time of the file download.
 The file extension must be “.scr”.
 The combined size of all script files on the switch shall not exceed 2048 KB.
You can type single-line annotations at the command prompt to use when you write test or
configuration scripts to improve script readability. The exclamation point (!) character flags the
beginning of a comment and all input following this character is ignored. Any command line that
begins with the “!” character is recognized as a comment line and ignored by the parser.
The following lines show an example of a script:
!create xyz user at IAS user database
configure
aaa ias-user username xyz
password 1234
exit
exit
!verify that user was succesfullty created
show aaa ias-users

script apply
This command applies the commands in the script to the switch. The scriptname parameter is
the name of the script to apply.

221 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format script apply scriptname

Mode Privileged EXEC

Command Added in firmware release 1.0

History

script delete
This command deletes a specified script where the scriptname parameter is the name of the
script to delete. The all option deletes all the scripts present on the switch.

Default N/A

Format script delete {scriptname | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

script list
This command lists all scripts present on the switch as well as the remaining available space.

Default N/A

Format script list

Mode Privileged EXEC

222 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Configuration Script Name of the script.

Size Privileged EXEC

script show
This command displays the contents of a script file, which is named scriptname.

Default N/A

Format script show scriptname

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Output Format line number: line contents

script validate
This command validates a script file by parsing each line in the script file where scriptname is
the name of the script to validate. The validate option is intended to be used as a tool for script

223 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

development. Validation identifies potential problems. It might not identify all problems with a
given script on any given device.
The validate script is performed automatically during the copy of scripts files. During the
validation, some commands are performed automatically, for example: shows, cablestatus, ping,
write memory, etc.

Note: The validation is not performed when triggered by web manages even when the copy is
performed by TFTP or FTP.

Default N/A

Format script validate scriptname

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Prelogin Banner, System Prompt and Host Name Commands

This section describes the commands you use to configure the prelogin banner and the system
prompt. The prelogin banner is the text that displays before you login at the User: prompt.

Note: The pre-login banner is not stored at running-config and ain't synchronized between
different units from a stacking.

copy (pre-login banner)

The copy command includes the option to upload or download the CLI Banner to or from the
switch. You can specify local URLs by using FTP, TFTP, SFTP, SCP, or Xmodem.

Default none

224 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format copy <tftp://<ipaddr>/<filepath>/<filename>> nvram:clibanner

copy nvram:clibanner <tftp://<ipaddr>/<filepath>/<filename>>

Mode Privileged EXEC

Command Added in firmware release 1.0

History

set prompt
This command changes the name of the prompt. The length of name may be up to 64
alphanumeric characters.

Default This configuration was stored using hostname format and uses hostname default.

Format set prompt prompt_string

Mode Privileged EXEC

Command Added in firmware release 1.0

History

hostname
This command sets the system hostname. It also changes the prompt. The length of name may
be up to 64 alphanumeric, case-sensitive characters.

Default DM1200E

Format hostname hostname

225 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show clibanner
Use this command to display the configured prelogin CLI banner. The prelogin banner is the
text that displays before displaying the CLI prompt.

Default N/A

Format show clibanner

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show clibanner

Banner Message configured :

TEST

set clibanner
Use this command to configure the prelogin CLI banner before displaying the login prompt.

Default none

Format set clibanner line

226 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

line Banner text where ““ (double quote) is a delimiting character. The banner message can be up
to 2000 characters.

no set clibanner
Use this command to unconfigure the prelogin CLI banner.

Default none

Format no set clibanner

Mode Global Config

Command Added in firmware release 1.0

History

Section 5: Utility Commands

This chapter describes the utility commands available in the DM1200E CLI.
The Utility Commands chapter includes the following sections:
 AutoInstall Commands  Time Zone Commands
 CLI Output Filtering Commands  DHCP Server Commands
 Dual Image Commands  DNS Client Commands
 System Information and Statistics  IP Address Conflict Commands

227 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Commands  Serviceability Packet Tracing
 Box Services Commands Commands
 Logging Commands  Cable Test Command
 Email Alerting and Mail Server Commands  Remote Monitoring Commands
 System Utility and Clear Commands  Statistics Application Commands
 Simple Network Time Protocol Commands

Note: The commands in this chapter are in one of four functional groups:
 Show commands display switch settings, statistics, and other information.
 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.
 Copy commands transfer or save configuration and informational files to and from the
switch.
 Clear commands clear some or all of the settings to factory defaults.

AutoInstall Commands
The AutoInstall feature enables the automatic update of the image and configuration of the
switch. This feature enables touchless or low-touch provisioning to simplify switch configuration
and imaging.
AutoInstall includes the following support:

 Downloading an image from TFTP server using DHCP option 125. The image update can
result in a downgrade or upgrade of the firmware on the switch.
 Automatically downloading a configuration file from a TFTP server when the switch is
booted with no saved configuration file.
 Automatically downloading an image from a TFTP server in the following situations:
 When the switch is booted with no saved configuration found.
 When the switch is booted with a saved configuration that has AutoInstall enabled.

228 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

When the switch boots and no configuration file is found, it attempts to obtain an IP address
from a network DHCP server. The response from the DHCP server includes the IP address of
the TFTP server where the image and configuration flies are located.
After acquiring an IP address and the additional relevant information from the DHCP server, the
switch downloads the image file or configuration file from the TFTP server. A downloaded image
is automatically installed. A downloaded configuration file is saved to non-volatile memory.

Note: AutoInstall from a TFTP server can run on any IP interface, including the network port
and in-band routing interfaces. To support AutoInstall, the DHCP client is enabled operationally
on the network port.

boot autoinstall
Use this command to operationally start or stop the AutoInstall process on the switch. The
command is non-persistent and is not saved in the startup or running configuration file.

Default stopped

Format boot autoinstall {start | stop}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

boot host retrycount

Use this command to set the number of attempts to download a configuration file from the
TFTP server.

Default 3

Format boot host retrycount 1-3

229 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no boot host retrycount

Use this command to set the number of attempts to download a configuration file to the default
value.

Default 3

Format no boot host retrycount

Mode Privileged EXEC

Command Added in firmware release 1.0

History

boot host dhcp

Use this command to enable AutoInstall on the switch for the next reboot cycle. The command
does not change the current behavior of AutoInstall and saves the command to NVRAM.

Default enabled

Format boot host dhcp

Mode Privileged EXEC

Command Added in firmware release 1.0

History

230 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no boot host dhcp
Use this command to disable AutoInstall for the next reboot cycle.

Default disabled

Format no boot host dhcp

Mode Privileged EXEC

Command Added in firmware release 1.0

History

boot host autosave

Use this command to automatically save the downloaded configuration file to the startup-config
file on the switch. When autosave is disabled, you must explicitly save the downloaded
configuration to non-volatile memory by using the write memory or copy system:running-
config nvram:startup-config command. If the switch reboots and the downloaded

configuration has not been saved, the AutoInstall process begins, if the feature is enabled.

Default disabled

Format boot host autosave

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no boot host autosave

Use this command to disable automatically saving the downloaded configuration on the switch.

231 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format no boot host autosave

Mode Privileged EXEC

Command Added in firmware release 1.0

History

boot host autoreboot

Use this command to allow the switch to automatically reboot after successfully downloading an
image. When auto reboot is enabled, no administrative action is required to activate the image
and reload the switch.

Default enabled

Format boot host autoreboot

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no boot host autoreboot

Use this command to prevent the switch from automatically rebooting after the image is
downloaded by using the AutoInstall feature.

Default disabled

Format no boot host autoreboot

232 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

erase startup-config
Use this command to erase the text-based configuration file stored in non-volatile memory. If
the switch boots and no startup-config file is found, the AutoInstall process automatically begins.

Default N/A

Format erase startup-config

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show autoinstall
This command displays the current status of the AutoInstall process.

Default N/A

Format show autoinstall

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.

233 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #show autoinstall

AutoInstall Mode Stopped

AutoInstall Persistent Mode Disabled
AutoSave Mode Disabled
AutoReboot Mode Enabled
AutoInstall Retry Count 3

CLI Output Filtering Commands

show xxx|include “string”
The command xxx is executed and the output is filtered to only show lines containing the
“string” match. All other non-matching lines in the output are suppressed.

Example: The following shows an example of the CLI command.

(DM1200E) #show running-config | include “spanning-tree”

spanning-tree configuration name "00-02-BC-42-F9-33"

spanning-tree bpduguard
spanning-tree bpdufilter default
spanning-tree mode rstp

show xxx|include “string” exclude “string2”

The command xxx is executed and the output is filtered to only show lines containing the
“string” match and not containing the “string2” match. All other non-matching lines in the
output are suppressed. If a line of output contains both the include and exclude strings then the
line is not displayed.

Example: The following shows example of the CLI command.

(DM1200E) #show running-config | include “spanning-tree” exclude “configuration”

spanning-tree bpduguard
spanning-tree bpdufilter default
spanning-tree mode rstp

show xxx|exclude “string”

The command xxx is executed and the output is filtered to show all lines not containing the
“string” match. Output lines containing the “string” match are suppressed.

Example: The following shows an example of the CLI command.

234 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #show interface 1/0/1

Packets Received Without Error 0

Packets Received With Error 0
Broadcast Packets Received 0
Receive Packets Discarded 0
Packets Transmitted Without Errors 0
Transmit Packets Discarded 0
Transmit Packet Errors 0
Collision Frames 0
Time Since Counters Last Cleared 281 day 4 hr 9 min 0
sec

(DM1200E) #show interface 1/0/1 | exclude “Packets”

Transmit Packet Errors 0

Collision Frames 0
Time Since Counters Last Cleared 20 day 21 hr 30 min 9
sec

show xxx|begin “string”

The command xxx is executed and the output is filtered to show all lines beginning with and
following the first line containing the “string” match. All prior lines are suppressed.

Example: The following shows an example of the CLI command.

(DM1200E) #show port all | begin "1/0/20"

1/0/20 Enable Auto 1000 Full Up Enable Enable long

1/0/21 Enable Auto 1000 Full Up Enable Enable long
1/0/22 Enable Auto 1000 Full Up Enable Enable long
1/0/23 Enable Auto Down Enable Enable long
1/0/24 Enable Auto 100 Full Up Enable Enable long
1/0/25 Enable Auto Down Enable Enable long
1/0/26 Enable Auto Down Enable Enable long
1/0/27 Enable Auto Down Enable Enable long
1/0/28 Enable Auto 1000 Full Up Enable Enable long
0/3/1 Enable Down Disable N/A N/A
0/3/2 Enable Down Disable N/A N/A
0/3/3 Enable Down Disable N/A N/A
0/3/4 Enable Down Disable N/A N/A
0/3/5 Enable Down Disable N/A N/A
0/3/6 Enable Down Disable N/A N/A

show xxx|section “string”

The command xxx is executed and the output is filtered to show only lines included within the
section(s) identified by lines containing the “string” match and ending with the first line
containing the default end-of-section identifier (i.e. “exit”).

235 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows an example of the CLI command.
(DM1200E) #show running-config | section “interface 1/0/1”

interface 1/0/1
no spanning-tree port mode
exit

show xxx|section “string” “string2”

The command xxx is executed and the output is filtered to only show lines included within the
section(s) identified by lines containing the “string” match and ending with the first line
containing the “string2” match. If multiple sessions matching the specified string match criteria
are part of the base output, then all instances are displayed.

show xxx|section “string” include “string2”

The command xxx is executed and the output is filtered to only show lines included within the
section(s) identified by lines containing the “string” match and ending with the first line
containing the default end-of-section identifier (i.e. “exit”) and that include the “string2” match.
This type of filter command could also include “exclude” or user-defined end-of-section
identifier parameters as well.

Dual Image Commands

DM1200E series software supports a dual image feature that allows the switch to have two
software images in the permanent storage. You can specify which image is the active image to
be loaded in subsequent reboots. This feature allows reduced down-time when you upgrade or
downgrade the software.

delete
This command deletes the backup image file from the permanent storage. The optional unit
parameter is valid only on Stacks. Error will be returned, if this parameter is provided, on
Standalone systems. In a stack, the unit parameter identifies the node on which this command
must be executed. When this parameter is not supplied, the command is executed on all nodes
in a Stack.

236 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format delete [unit] backup

Mode Privileged EXEC

Command Added in firmware release 1.0

History

boot system
This command activates the specified image. It will be the active-image for subsequent reboots
and will be loaded by the boot loader. The current active-image is marked as the backup-image
for subsequent reboots. If the specified image doesn't exist on the system, this command
returns an error message. The optional unit parameter is valid only in Stacking, where the unit
parameter identifies the node on which this command must be executed. When this parameter
is not supplied, the command is executed on all nodes in a Stack.

Default active

Format boot system [unit] {active | backup}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show bootvar
This command displays the version information and the activation status for the current active
and backup images on the supplied unit (node) of the Stack. If you do not specify a unit
number, the command displays image details for all nodes on the Stack. The command also
displays any text description associated with an image. This command, when used on a

237 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Standalone system, displays the switch activation status. For a standalone system, the unit
parameter is not valid.

Default N/A

Format show bootvar [unit]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

filedescr
This command associates a given text description with an image. Any existing description will
be replaced. The command is executed on all nodes in a Stack.

Default none

Format filedescr {active | backup} text-description

Mode Privileged EXEC

Command Added in firmware release 1.0

History

update bootcode
This command updates the bootcode (boot loader) on the switch. The bootcode is read from
the active-image for subsequent reboots. The optional unit parameter is valid only on Stacks.
Error will be returned, if this parameter is provided, on Standalone systems. For Stacking, the
unit parameter identifies the node on which this command must be executed. When this

parameter is not supplied, the command is executed on all nodes in a Stack.

238 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format update bootcode [unit]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

System Information and Statistics Commands

This section describes the commands you use to view information about system features,
components, and configurations.

show arp switch

This command displays the contents of the IP stack’s Address Resolution Protocol (ARP) table.
The IP stack only learns ARP entries associated with the management network interfaces. ARP
entries associated with routing interfaces are not listed.

Default N/A

Format show arp switch

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

239 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IP Address IP address of the management interface or another device on the management network.

MAC Address Hardware MAC address of that device.

Interface For a service port the output is Management. For a network port, the output is the
unit/slot/port of the physical interface.

show eventlog
This command displays the event log, which contains error messages from the system. The
event log is not cleared on a system reset. The unit is the switch identifier.

Default N/A

Format show eventlog [unit]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

File The file in which the event originated.

Line The line number of the event.

Task Id The task ID of the event.

Code The event code.

240 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Time The time this event occurred.

Unit The unit for the event.

Note: Event log information is retained across a switch reset.

show hardware
This command displays inventory information for the switch.

Note: The show version command and the show hardware command display the same
information. In future releases of the software, the show hardware command will not be
available. For a description of the command output, see the command show version.

Default N/A

Format show hardware

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show version
This command displays inventory information for the switch.

Note: The show version command will replace the show hardware command in future releases
of the software.

241 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show version

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show version

Switch: 3

System Description............................. DM1200E 24GT+4XS Standalone,

2.0.0.41
Machine Type................................... DM1200E 24GT+4XS Standalone
Machine Model.................................. 24GT+4XS Standalone
Serial Number.................................. 2345354
Part Number.................................... 24GT+4XS
Maintenance Level.............................. A
Burned In MAC Address.......................... 00:04:DF:69:F3:92
Software Version............................... 2.0.0.41
Network Processing Device...................... 24GT+4XS

TERM DEFINITION

System Description Text used to identify the product name of this switch.

Machine Type The machine model as defined by the Vital Product Data.

Machine Model The machine model as defined by the Vital Product Data

Serial Number The unique box serial number for this switch.

242 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Part Number Manufacturing part number.

Maintenance Level Hardware changes that are significant to software.

Burned in MAC Universally assigned network address.

Address

Software Version The release.version.revision number of the code currently running on the switch.

Network Processing The type of the processor microcode.

Device

show platform vpd

This command displays vital product data for the switch.

Default N/A

Format show platform vpd

Mode User Privileged

Command Added in firmware release 1.0

History

The following information is displayed.

TERM DEFINITION

Operational Code Build Signature loaded into the switch

Image File Name

Software Version Release Version Maintenance Level and Build (RVMB) information of the switch.

243 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Timestamp Timestamp at which the image is built

Example: The following shows example CLI display output for the command.
(DM1200E) #show platform vpd

Software Version............................... 2.0.0.0

Timestamp...................................... Wed Oct 1 15:56:10 BRT 2014

show interface
This command displays a summary of statistics for a specific interface or a count of all CPU
traffic based upon the argument.

Default N/A

Format show interface {unit/slot/port | switchport}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

The display parameters, when the argument is unit/slot/port, are as follows:

PARAMETERS DEFINITION

Packets Received The total number of packets (including broadcast packets and multicast packets) received by
Without Error the processor.

Packets Received With The number of inbound packets that contained errors preventing them from being deliverable
Error to a higher-layer protocol.

Broadcast Packets The total number of packets received that were directed to the broadcast address. Note that
Received this does not include multicast packets.

244 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Receive Packets The number of inbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. One possible
reason for discarding such a packet could be to free up buffered space.

Packets Transmitted The total number of packets transmitted out of the interface.
Without Error

Transmit Packets The number of outbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. A possible
reason for discarding a packet could be to free up buffer space.

Transmit Packets The number of outbound packets that could not be transmitted because of errors.
Errors

Collisions Frames The best estimate of the total number of collisions on this Ethernet segment.

Time Since Counters The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were
Last Cleared last cleared.

The display parameters, when the argument is “switchport” are as follows:

TERM DEFINITION

Packets Received Without The total number of packets (including broadcast packets and multicast packets) received
Error by the processor.

Broadcast Packets The total number of packets received that were directed to the broadcast address. Note
Received that this does not include multicast packets.

Packets Received With The number of inbound packets that contained errors preventing them from being
Error deliverable to a higher-layer protocol.

Packets Transmitted The total number of packets transmitted out of the interface.
Without Error

245 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Broadcast Packets The total number of packets that higher-level protocols requested to be transmitted to the
Transmitted Broadcast address, including those that were discarded or not sent.

Transmit Packet Errors The number of outbound packets that could not be transmitted because of errors.

Time Since Counters Last The elapsed time, in days, hours, minutes, and seconds since the statistics for this switch
Cleared were last cleared.

show interfaces status

Use this command to display interface information, including the description, port state, speed
and auto-neg capabilities. The command is similar to show port all but displays additional
fields like interface description and port-capability.
The description of the interface is configurable through the existing command description
<name> which has a maximum length of 64 characters that is truncated to 28 characters in the

output. The long form of the description can be displayed using show port description. The
interfaces displayed by this command are physical interfaces, LAG interfaces and VLAN routing
interfaces.

Default N/A

Format show interfaces status [unit/slot/port] {all | lag}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Parameters Definition

all Display status information of all interfaces of the device.

246 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

lag Display status information of all interfaces in lag format.

FIELD DESCRIPTION

Port The interface associated with the rest of the data in the row.

Name The descriptive user-configured name for the interface.

Link State Indicates whether the link is up or down.

Physical Mode The speed and duplex settings on the interface.

Physical Status Indicates the port speed and duplex mode for physical interfaces. The physical status for
LAGs is not reported. When a port is down, the physical status is unknown.

Media Type The media type of the interface.

Flow Control Status The 802.3x flow control status.

Flow Control The configured 802.3x flow control mode.

show interface counters

This command reports key summary statistics for all the ports (physical/CPU/port-channel).

Default N/A

Format show interface counters

Mode Privileged EXEC

247 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Port The interface associated with the rest of the data in the row.

InOctects The total number of octets received on the interface.

InUcastPkts The total number of unicast packets received on the interface.

InMcastPkts The total number of multicast packets received on the interface.

InBcastPkts The total number of broadcast packets received on the interface.

OutOctects The total number of octets transmitted by the interface.

OutUcastPkts The total number of unicast packets transmitted by the interface.

OutMcastPkts The total number of multicast packets transmitted by the interface.

OutBcastPkts The total number of broadcast packets transmitted by the interface.

Example: The following shows example CLI display output for the command.
DM1200E) #show interface counters

Port InOctets InUcastPkts InMcastPkts InBcastPkts

--------- ---------------- ---------------- ---------------- ----------------
1/0/1 53602177 97574 29399 654103
1/0/2 0 0 0 0
1/0/3 79091310 7 1123599 5
1/0/4 56651200 8 793258 5
1/0/5 79092670 7 1123619 5
1/0/6 79094710 7 1123649 5
...

248 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 1/0/21 80335826 7 1141648 5
1/0/22 80630766 7 1145999 5
1/0/23 0 0 0 0
1/0/24 69351179400 750696540 511669 3828
1/0/25 0 0 0 0
1/0/26 0 0 0 0
1/0/27 0 0 0 0
1/0/28 80422187 7 801035 5
ch1 0 0 0 0
ch2 0 0 0 0
ch3 0 0 0 0
ch4 0 0 0 0
ch5 0 0 0 0
ch6 0 0 0 0
CPU 1152527444 24026 16454965 480222

Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts

--------- ---------------- ---------------- ---------------- ----------------
1/0/1 2223971 24272 68 3837
1/0/2 0 0 0 0
1/0/3 2939008 0 45922 0
1/0/4 3144256 0 49129 0
1/0/5 2940928 0 45952 0
1/0/6 2943104 0 45986 0
...
1/0/21 3245952 0 50718 0
1/0/22 3407878 7 52512 5
1/0/23 0 0 0 0
1/0/24 56660 21 401 105
1/0/25 0 0 0 0
1/0/26 0 0 0 0
1/0/27 0 0 0 0
1/0/28 3232448 0 50507 0
ch1 0 0 0 0
ch2 0 0 0 0
ch3 0 0 0 0
ch4 0 0 0 0
ch5 0 0 0 0
ch6 0 0 0 0
CPU 66345519 24272 1006005 65

show interface ethernet

This command displays detailed statistics for a specific interface or for all CPU traffic based
upon the argument.

Default N/A

Format show interface ethernet {unit/slot/port | switchport | all}

249 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

When you specify a value for unit/slot/port, the command displays the following information.

TERM DEFINITION

Packets Received  Total Packets Received (Octets) - The total number of octets of data (including
those in bad packets) received on the network (excluding framing bits but including
Frame Check Sequence (FCS) octets). This object can be used as a reasonable
estimate of Ethernet utilization. If greater precision is desired, the etherStatsPkts
and etherStatsOctets objects should be sampled before and after a common interval.
The result of this equation is the value Utilization which is the percent utilization of
the Ethernet segment on a scale of 0 to 100 percent.

 Packets Received 64 Octets - The total number of packets (including bad

packets) received that were 64 octets in length (excluding framing bits but including
FCS octets).

 Packets Received 65–127 Octets - The total number of packets (including bad
packets) received that were between 65 and 127 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Received 128–255 Octets - The total number of packets (including bad
packets) received that were between 128 and 255 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Received 256–511 Octets - The total number of packets (including bad
packets) received that were between 256 and 511 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Received 512–1023 Octets - The total number of packets (including

bad packets) received that were between 512 and 1023 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Received 1024–1518 Octets - The total number of packets (including

bad packets) received that were between 1024 and 1518 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Received > 1518 Octets - The total number of packets received that
were longer than 1522 octets (excluding framing bits, but including FCS octets) and
were otherwise well formed.

250 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Packets RX and TX 64 Octets - The total number of packets (including bad
packets) received and transmitted that were 64 octets in length (excluding framing
bits but including FCS octets).

 Packets RX and TX 65–127 Octets - The total number of packets (including bad
packets) received and transmitted that were between 65 and 127 octets in length
inclusive (excluding framing bits but including FCS octets).

 Packets RX and TX 128–255 Octets - The total number of packets (including

bad packets) received and transmitted that were between 128 and 255 octets in
length inclusive (excluding framing bits but including FCS octets).

 Packets RX and TX 256–511 Octets - The total number of packets (including

bad packets) received and transmitted that were between 256 and 511 octets in
length inclusive (excluding framing bits but including FCS octets).

Packets Received  Packets RX and TX 512–1023 Octets - The total number of packets (including
bad packets) received and transmitted that were between 512 and 1023 octets in
(con’t) length inclusive (excluding framing bits but including FCS octets).

 Packets RX and TX 1024–1518 Octets - The total number of packets (including

bad packets) received and transmitted that were between 1024 and 1518 octets in
length inclusive (excluding framing bits but including FCS octets).

 Packets RX and TX 1519–2047 Octets - The total number of packets received

and transmitted that were between 1519 and 2047 octets in length inclusive
(excluding framing bits, but including FCS octets) and were otherwise well formed.

 Packets RX and TX 1523–2047 Octets - The total number of packets received

and transmitted that were between 1523 and 2047 octets in length inclusive
(excluding framing bits, but including FCS octets) and were otherwise well formed.

 Packets RX and TX 2048–4095 Octets - The total number of packets received

that were between 2048 and 4095 octets in length inclusive (excluding framing bits,
but including FCS octets) and were otherwise well formed.

 Packets RX and TX 4096–9216 Octets - The total number of packets received

that were between 4096 and 9216 octets in length inclusive (excluding framing bits,
but including FCS octets) and were otherwise well formed.

Packets Received  Total Packets Received Without Error - The total number of packets received
Successfully that were without errors.

 Unicast Packets Received - The number of subnetwork-unicast packets delivered

to a higher-layer protocol.

 Multicast Packets Received - The total number of good packets received that
were directed to a multicast address. Note that this number does not include packets

251 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 directed to the broadcast address.

 Broadcast Packets Received - The total number of good packets received that
were directed to the broadcast address. Note that this does not include multicast
packets.

Receive Packets The number of inbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. One possible
reason for discarding such a packet could be to free up buffer space.

Packets Received with  Total Packets Received with MAC Errors - The total number of inbound packets
MAC Errors that contained errors preventing them from being deliverable to a higher-layer
protocol.

 Jabbers Received - The total number of packets received that were longer than
1518 octets (excluding framing bits, but including FCS octets), and had either a bad
Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad
FCS with a non-integral number of octets (Alignment Error). Note that this definition
of jabber is different than the definition in IEEE-802.3 section 8.2.1.5 (10BASE5) and
section 10.3.1.4 (10BASE2). These documents define jabber as the condition where
any packet exceeds 20 ms. The allowed range to detect jabber is between 20 ms
and 150 ms.

 Fragments/Undersize Received - The total number of packets received that

were less than 64 octets in length (excluding framing bits but including FCS octets).

 Alignment Errors - The total number of packets received that had a length
(excluding framing bits, but including FCS octets) of between 64 and 1518 octets,
inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of
octets.

 FCS Errors - The total number of packets received that had a length (excluding
framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but
had a bad Frame Check Sequence (FCS) with an integral number of octets.

 Overruns - The total number of frames discarded as this port was overloaded with
incoming packets, and could not keep up with the inflow.

Received Packets Not  Total Received Packets Not Forwarded - A count of valid frames received which
Forwarded were discarded (in other words, filtered) by the forwarding process

 802.3x Pause Frames Received - A count of MAC Control frames received on this
interface with an opcode indicating the PAUSE operation. This counter does not
increment when the interface is operating in half-duplex mode.

 Unacceptable Frame Type - The number of frames discarded from this port due
to being an unacceptable frame type.

252 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Packets Transmitted  Total Packets Transmitted (Octets) - The total number of octets of data
Octets (including those in bad packets) received on the network (excluding framing bits but
including FCS octets). This object can be used as a reasonable estimate of Ethernet
utilization. If greater precision is desired, the etherStatsPkts and etherStatsOctets
objects should be sampled before and after a common interval. -----

 Packets Transmitted 64 Octets - The total number of packets (including bad

packets) received that were 64 octets in length (excluding framing bits but including
FCS octets).

 Packets Transmitted 65-127 Octets - The total number of packets (including

bad packets) received that were between 65 and 127 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Transmitted 128-255 Octets - The total number of packets (including

bad packets) received that were between 128 and 255 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Transmitted 256-511 Octets - The total number of packets (including

bad packets) received that were between 256 and 511 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Transmitted 512-1023 Octets - The total number of packets (including

bad packets) received that were between 512 and 1023 octets in length inclusive
(excluding framing bits but including FCS octets).

 Packets Transmitted 1024-1518 Octets - The total number of packets

(including bad packets) received that were between 1024 and 1518 octets in length
inclusive (excluding framing bits but including FCS octets).

 Packets Transmitted > 1518 Octets - The total number of packets transmitted
that were longer than 1518 octets (excluding framing bits, but including FCS octets)
and were otherwise well formed.

 Max Frame Size - The maximum size of the Info (non-MAC) field that this port will
receive or transmit.

Packets Transmitted  Total Packets Transmitted Successfully - The number of frames that have been
Successfully transmitted by this port to its segment.

 Unicast Packets Transmitted - The total number of packets that higher-level

protocols requested be transmitted to a subnetwork-unicast address, including those
that were discarded or not sent.

 Multicast Packets Transmitted - The total number of packets that higher-level

protocols requested be transmitted to a Multicast address, including those that were
discarded or not sent.

 Broadcast Packets Transmitted - The total number of packets that higher-level

protocols requested be transmitted to the Broadcast address, including those that

253 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 were discarded or not sent.

Transmit Packets The number of outbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. A possible
reason for discarding a packet could be to free up buffer space.

Transmit Errors  Total Transmit Errors - The sum of Single, Multiple, and Excessive Collisions.

 FCS Errors - The total number of packets transmitted that had a length (excluding
framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but
had a bad Frame Check Sequence (FCS) with an integral number of octets.

 Underrun Errors - The total number of frames discarded because the transmit
FIFO buffer became empty during frame transmission.

Transmit Discards  Total Transmit Packets Discards - The sum of single collision frames discarded,
multiple collision frames discarded, and excessive frames discarded.

 Single Collision Frames - A count of the number of successfully transmitted

frames on a particular interface for which transmission is inhibited by exactly one
collision.

 Multiple Collision Frames - A count of the number of successfully transmitted

frames on a particular interface for which transmission is inhibited by more than one
collision.

 Excessive Collisions - A count of frames for which transmission on a particular

interface fails due to excessive collisions.

 Port Membership Discards - The number of frames discarded on egress for this
port due to egress filtering being enabled.

Protocol Statistics  802.3x Pause Frames Transmitted - A count of MAC Control frames transmitted
on this interface with an opcode indicating the PAUSE operation. This counter does
not increment when the interface is operating in half-duplex mode.

 GVRP PDUs Received - The count of GVRP PDUs received in the GARP layer.

 GVRP PDUs Transmitted - The count of GVRP PDUs transmitted from the GARP
layer.

 GVRP Failed Registrations - The number of times attempted GVRP registrations

could not be completed.

 GMRP PDUs Received - The count of GMRP PDUs received in the GARP layer.

 GMRP PDUs Transmitted - The count of GMRP PDUs transmitted from the GARP

254 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 layer.

 GMRP Failed Registrations - The number of times attempted GMRP registrations

could not be completed.

 STP BPDUs Transmitted - Spanning Tree Protocol Bridge Protocol Data Units sent.

 STP BPDUs Received - Spanning Tree Protocol Bridge Protocol Data Units
received.

 RST BPDUs Transmitted - Rapid Spanning Tree Protocol Bridge Protocol Data
Units sent.

 RSTP BPDUs Received - Rapid Spanning Tree Protocol Bridge Protocol Data Units
received.

 MSTP BPDUs Transmitted - Multiple Spanning Tree Protocol Bridge Protocol Data
Units sent.

 MSTP BPDUs Received - Multiple Spanning Tree Protocol Bridge Protocol Data
Units received.

Dot1x Statistics  EAPOL Frames Transmitted - The number of EAPOL frames of any type that have
been transmitted by this authenticator.

 EAPOL Start Frames Received - The number of valid EAPOL start frames that
have been received by this authenticator.

Time Since Counters The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were
Last Cleared last cleared.

If you use the switchport keyword, the following information appears.

TERM DEFINITION

Packets Received The total number of packets (including broadcast packets and multicast packets) received
Without Error by the processor.

Broadcast Packets The total number of packets received that were directed to the broadcast address. Note that
Received this does not include multicast packets.

Packets Received With The total number of packets with errors (including broadcast packets and multicast packets)

255 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Error received by the processor.

Packets Transmitted The total number of packets transmitted out of the interface.
without Errors

Broadcast Packets The total number of packets that higher-level protocols requested be transmitted to the
Transmitted Broadcast address, including those that were discarded or not sent.

Transmit Packet Errors The number of outbound packets that could not be transmitted because of errors.

Time Since Counters The elapsed time, in days, hours, minutes, and seconds, since the statistics for this switch
Last Cleared were last cleared.

If you use the all keyword, the following information appears for all interfaces on the switch.

TERM DEFINITION

Port The Interface ID.

Bytes Tx The total number of bytes transmitted by the interface.

Bytes Rx The total number of bytes transmitted by the interface.

Packets Tx The total number of packets transmitted by the interface.

Packets Rx The total number of packets transmitted by the interface.

show interface Ethernet unit/slot/port switchport

This command displays the private VLAN mapping information for the switch interfaces.

Default N/A

256 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show interface ethernet interface-id switchport

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

interface-id The unit/slot/port of the switch.

The command displays the following information.

TERM DEFINITION

Private-vlan host- The VLAN association for the private-VLAN host ports.
association

Private-vlan mapping The VLAN mapping for the private-VLAN promiscuous ports.

show interface lag

Use this command to display configuration information about the specified LAG interface.

Default N/A

Format show interface lag lag-intf-num

Mode Privileged EXEC

257 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETERS DEFINITION

Packets Received The total number of packets (including broadcast packets and multicast packets) received
Without Error on the LAG interface

Packets Received With The number of inbound packets that contained errors preventing them from being
Error deliverable to a higher-layer protocol.

Broadcast Packets The total number of packets received that were directed to the broadcast address. Note
Received that this does not include multicast packets.

Receive Packets The number of inbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. One
possible reason for discarding such a packet could be to free up buffer space.

Packets Transmitted The total number of packets transmitted out of the LAG.
Without Error

Transmit Packets The number of outbound packets which were chosen to be discarded even though no errors
Discarded had been detected to prevent their being deliverable to a higher-layer protocol. A possible
reason for discarding a packet could be to free up buffer space.

Transmit Packets Errors The number of outbound packets that could not be transmitted because of errors.

Collisions Frames The best estimate of the total number of collisions on this Ethernet segment.

Time Since Counters The elapsed time, in days, hours, minutes, and seconds since the statistics for this LAG
Last Cleared were last cleared.

258 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show fiber-ports optical-transceiver
This command displays the diagnostics information of the SFP like Temp, Voltage, Current,
Input Power, Output Power, Tx Fault, and LOS. The values are derived from the SFP's A2
(Diagnostics) table using the I²C interface.

Default N/A

Format show fiber-ports optical-transceiver {all | unit/slot/port}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Temp Internally measured transceiver temperature.

Voltage Internally measured supply voltage.

Current Measured TX bias current.

Output Power Measured optical output power relative to 1mW.

Input Power Measured optical power received relative to 1mW.

TX Fault Transmitter fault.

LOS Loss of signal.

Example: The following information shows an example of the command output:

259 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #show fiber-ports optical-transceiver all

Port Voltage Current Output Input TX LOS

Temp
[Volt] [mA] Power Power Fault
[C]
[dBm] [dBm]

1/0/26 39.3 3.256 5.0 2.234 2.465 No No

1/0/27 33.9 3.260 5.3 2.374 40.000 No Yes
1/0/28 32.2 3.256 5.6 2.300 2.897 No No

show fiber-ports optical-transceiver-info

This command displays the SFP vendor related information like Vendor Name, Serial Number of
the SFP, Part Number of the SFP. The values are derived from the SFP's A0 table using the I²C
interface.

Default N/A

Format show fiber-ports optical-transceiver-info {all | unit/slot/port}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Vendor Name The vendor name is a 16 character field that contains ASCII characters, left-aligned and
padded on the right with ASCII spaces (20h). The vendor name shall be the full name of
the corporation, a commonly accepted abbreviation of the name of the corporation, the
SCSI company code for the corporation, or the stock exchange code for the corporation.

Length (50um, OM2) This value specifies link length that is supported by the transceiver while operating in
compliance with applicable standards using 50 micron multimode OM2 [500MHz*km at
850nm] fiber. A value of zero means that the transceiver does not support 50 micron
multimode fiber or that the length information must be determined from the transceiver
technology.

260 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Length (62.5um, OM1) This value specifies link length that is supported by the transceiver while operating in
compliance with applicable standards using 62.5 micron multimode OM1 [200 MHz*km at
850nm, 500 MHz*km at 1310nm] fiber. A value of zero means that the transceiver does
not support 62.5 micron multimode fiber or that the length information must determined
from the transceiver technology

Vendor SN The vendor serial number (vendor SN) is a 16 character field that contains ASCII
characters, left-aligned and padded on the right with ASCII spaces (20h), defining the
vendor's serial number for the transceiver. A value of all zero in the 16-byte field indicates
that the vendor SN is unspecified.

Vendor PN The vendor part number (vendor PN) is a 16-byte field that contains ASCII characters, left
aligned and added on the right with ASCII spaces (20h), defining the vendor part number
or product name. A value of all zero in the 16-byte field indicates that the vendor PN is
unspecified.

BR, nominal The nominal bit (signaling) rate (BR, nominal) is specified in units of 100 MBd, rounded off
to the nearest 100 MBd. The bit rate includes those bits necessary to encode and delimit
the signal as well as those bits carrying data information. A value of 0 indicates that the
bit rate is not specified and must be determined from the transceiver technology. The
actual information transfer rate will depend on the encoding of the data, as defined by the
encoding value.

Vendor Rev The vendor revision number (vendor rev) contains ASCII characters, left aligned and
padded on the right with ASCII spaces (20h), defining the vendor's product revision
number. A value of all zero in this field indicates that the vendor revision is unspecified.

Compliance The transceiver standard compliance. Possible values are DAC, 10GBase-SR, 10GBase-LR,
10GBase-LRM, 10GBase-ER, 1000SX, 1000LX, 1000CX, 1000T or Unknown.

Example: The following information shows an example of the command output:

(DM1200E) #show fiber-ports optical-transceiver-info all

Link Link Nominal

Length Length Bit
50um 62.5um Rate
Port Vendor Name [m] [m] Serial Number Part Number [Mbps] Rev Compliance
-------- ---------------- --- ---- ---------------- ---------------- ----- ----
----------------
1/0/25 APAC Opto 55 30 8808061580 LM28-C3S-TC-N 1300 0000 1000SX
1/0/26 APAC Opto 0 0 C322110098 LS48-C3U-TC-N-D5 1300 0000 1000LX
1/0/27 APAC Opto 0 0 B706059043 LS38-H3S-TC-N 10300 0000 10GBase-LR
1/0/28 APAC Opto 0 0 7306070005 LS48-C3U-TC-N-DD 1300 0000 1000LX

261 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show mac-addr-table
This command displays the forwarding database entries. These entries are used by the
transparent bridging function to determine how to forward a received frame.
Enter all or no parameter to display the entire table. Enter a MAC Address and VLAN ID to
display the table entry for the requested MAC address on the specified VLAN. Enter the count
parameter to view summary information about the forwarding database table. Use the
interface unit/slot/port parameter to view MAC addresses on a specific interface.

Instead of unit/slot/port, lag lag-intf-numcan be used as an alternate way to specify the

LAG interface. lag lag-intf-num can also be used to specify the LAG interface where lag-
intf-num is the LAG port number. Use the vlan vlan_id parameter to display information about

MAC addresses on a specified VLAN.

Default N/A

Format show mac-addr-table [{macaddr vlan_id | all | count | interface

unit/slot/port | vlan vlan_id}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

The following information displays if you do not enter a parameter, the keyword all, or the MAC
address and VLAN ID.

TERM DEFINITION

VLAN ID The VLAN in which the MAC address is learned.

MAC Address A unicast MAC address for which the switch has forwarding and or filtering information. The
format is 6 two-digit hexadecimal numbers that are separated by colons, for example

262 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 01:23:45:67:89:AB.

Interface The port through which this address was learned.

Interface Index This object indicates the if Index of the interface table entry associated with this port.

Status The status of this entry. The meanings of the values are:

 Static - The value of the corresponding instance was added by the system or a
user when a static MAC filter was defined. It cannot be relearned.

 Learned - The value of the corresponding instance was learned by observing the
source MAC addresses of incoming traffic, and is currently in use.

 Management - The value of the corresponding instance (system MAC address) is

also the value of an existing instance of dot1dStaticAddress. It is identified with
interface 0/1. and is currently used when enabling VLANs for routing.

 Self - The value of the corresponding instance is the address of one of the switch’s
physical interfaces (the system’s own MAC address).

 GMRP Learned - The value of the corresponding was learned via GMRP and applies
to Multicast.

 Other - The value of the corresponding instance does not fall into one of the other
categories.

If you enter vlan vlan_id, only the MAC Address, Interface, and Status fields appear. If you
enter the interface unit/slot/port parameter, in addition to the MAC Address and Status
fields, the VLAN ID field also appears.
The following information displays if you enter the count parameter:

TERM DEFINITION

Dynamic Address Number of MAC addresses in the forwarding database that were automatically learned.
count

Static Address (User- Number of MAC addresses in the forwarding database that were manually entered by a user.
defined) count

263 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Total MAC Addresses Number of MAC addresses currently in the forwarding database.
in use

Total MAC Addresses Number of MAC addresses the forwarding database can handle.
available

process cpu threshold

Use this command to configure the CPU utilization thresholds. The Rising and Falling thresholds
are specified as a percentage of CPU resources. The utilization monitoring time period can be
configured from 5 seconds to 86400 seconds in multiples of 5 seconds. The CPU utilization
threshold configuration is saved across a switch reboot. Configuring the falling utilization
threshold is optional. If the falling CPU utilization parameters are not configured, then they take
the same value as the rising CPU utilization parameters.

Default disabled

Format process cpu threshold type total rising 1-100 interval 5-86400 [ falling
1-100 interval 5-86400 ]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

rising threshold The percentage of CPU resources that, when exceeded for the configured rising interval,
triggers a notification. The range is 1 to 100. The default is 0 (disabled).

rising interval The duration of the CPU rising threshold violation, in seconds, that must be met to trigger a
notification. The range is 5 to 86400. The default is 0 (disabled).

264 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

falling threshold The percentage of CPU resources that, when usage falls below this level for the configured
interval, triggers a notification. The range is 1 to 100. The default is 0 (disabled).

A notification is triggered when the total CPU utilization falls below this level for a configured
period of time. The falling utilization threshold notification is made only if a rising threshold
notification was previously done. The falling utilization threshold must always be equal or less
than the rising threshold value. The CLI does not allow setting the falling threshold to be
greater than the rising threshold.

falling interval The duration of the CPU falling threshold, in seconds, that must be met to trigger a
notification. The range is 5 to 86400. The default is 0 (disabled).

show process app-list

This command displays the user and system applications.

Default N/A

Format show process app-list

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

ID The application identifier.

Name The name that identifies the process.

PID The number the software uses to identify the process.

Admin Status The administrative status of the process.

265 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Auto Restart Indicates whether the process will automatically restart if it stops.

Running Status Indicates whether the process is currently running or stopped.

show process cpu

This command provides the percentage utilization of the CPU by different tasks.

Note: It is not necessarily the traffic to the CPU, but different tasks that keep the CPU busy.

Default N/A

Format show process cpu

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show process proc-list

This application displays the processes started by applications created by the Process Manager.

Default N/A

Format show process proc-list

Mode Privileged EXEC

Command Added in firmware release 1.0

History

266 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

PID The number the software uses to identify the process.

Process Name The name that identifies the process.

Application ID-Name The application identifier and its associated name.

Child Indicates whether the process has spawned a child process.

VM Size Virtual memory size.

VM Peak The maximum amount of virtual memory the process has used at a given time.

FD Count The file descriptors count for the process.

show running-config
Use this command to display or capture the current setting of different protocol packages
supported on the switch. This command displays or captures commands with settings and
configurations that differ from the default value. To display or capture the commands with
settings and configurations that are equal to the default value, include the all option.

Note: Show running-config does not display the User Password, even if you set one different
from the default.

The output is displayed in script format, which can be used to configure another switch with the
same configuration. If the optional scriptname is provided with a file name extension of “.scr”,
the output is redirected to a script file.

267 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

If you issue the show running-config command from a serial connection, access to the switch
through remote connections (such as Telnet) is suspended while the output is being generated
and displayed.

If you use a text-based configuration file, the show running-config command only displays
configured physical interfaces (i.e. if any interface only contains the default configuration, that
interface will be skipped from the show running-config command output). This is true for any
configuration mode that contains nothing but default configuration. That is, the command to
enter a particular config mode, followed immediately by its exit command, are both omitted
from the show running-config command output (and hence from the startup-config file when
the system configuration is saved.)

Use the following keys to navigate the command output.

KEY ACTION

Enter Advance one line.

Space Bar Advance one page.

q Stop the output and return to the prompt.

Note that --More-- or (q)uit is displayed at the bottom of the output screen until you reach
the end of the output.

Default N/A

Format show running-config [all | scriptname]

268 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show running-config interface

Use this command to display the running configuration for a specific interface. Valid interfaces
include physical, LAG and VLAN interfaces.

Default N/A

Format show running-config interface {interface | lag {lag-intf-num} | vlan

{vlan-id}}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

interface Running configuration for the specified interface.

lag-intf-num Running configuration for the LAG interface.

vlan-id Running configuration for the VLAN routing interface.

The following information is displayed for the command.

269 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

unit|slot|port Enter an interface in unit/slot/port format.

lag Display the running config for a specified laginterface.

vlan Display the running config for a specified vlan routing interface.

Example: The following shows example CLI display output for the command.
(DM1200E) #show running-config interface 1/0/24

!Current Configuration:
!
interface 1/0/24
dot1x port-control force-authorized
vlan participation exclude 1
vlan participation include 101-120,1101-1120
vlan tagging 101-120,1101-1120
exit

show
This command displays the content of text-based configuration files from the CLI. The text-
based configuration files (startup-config and backup-config) are saved compressed in flash.
With this command, the files are decompressed while displaying their content.

Default N/A

Format show { startup-config | backup-config }

Mode Privileged EXEC

Command Added in firmware release 1.0

History

270 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

startup-config Display the content of the startup-config file.

backup-config Display the content of the backup-config file.

Example: The following shows example CLI display output for the command using the startup-
config parameter.
DM1200E) #show startup-config

!Current Configuration:
!
!System Description "DM1200E 24GT+4GX, 2.0.0.0"
!System Software Version "2.0.0.0"
!System Up Time "0 days 2 hrs 44 mins 7 secs"
!Current SNTP Synchronized Time: Aug 22 17:08:17 2014 UTC
!
hostname "DM1200E"
telnetcon timeout 120
network parms 172.22.109.10 255.255.255.0 172.22.109.254
vlan database
vlan 101-120,1101-1120
exit
ip http secure-server
ip http secure-session soft-timeout 60
ip ssh server enable
sshcon timeout 120
configure
sntp client mode unicast
sntp server "172.22.107.2"
clock timezone -3 minutes 0 zone "BRA"
stack
--More-- or (q)uit

Example: The following shows example CLI display output for the command using the backup-
config parameter.
(DM1200E) #show backup-config

!Current Configuration:
!
!System Description "DM1200E 24GT+4GX, 2.0.0.0"
!System Software Version "2.0.0.0"
!System Up Time "2 days 18 hrs 45 mins 16 secs"
!Current SNTP Synchronized Time: SNTP Last Attempt Status Is Not Successful
!
hostname "DM1200E_BKP"

271 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 telnetcon timeout 120
network parms 172.22.109.10 255.255.255.0 172.22.109.254
vlan database
vlan 101-120,1101-1120
exit
ip http secure-server
ip http secure-session soft-timeout 60
ip ssh server enable
sshcon timeout 120
configure
sntp client mode unicast
sntp server "172.22.107.2"
stack
member 1 1
--More-- or (q)uit

show sysinfo
This command displays switch information.

Default N/A

Format show sysinfo

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Switch Description Text used to identify this switch.

System Name Name used to identify the switch. The factory default is blank. To configure the system name,
see snmp-server.

System Location Text used to identify the location of the switch. The factory default is blank. To configure the
system location, see snmp-server.

272 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

System Contact Text used to identify a contact person for this switch. The factory default is blank. To
configure the system location, see snmp-server.

System ObjectID The base object ID for the switch’s enterprise MIB.

System Up Time The time in days, hours and minutes since the last switch reboot.

Current SNTP The system time acquired from a network SNTP server.
Synchronized Time

MIBs Supported A list of MIBs supported by this agent.

show tech-support
Use the show tech-support command to display system and configuration information when
you contact technical support. The output of the show tech-support command combines the
output of the following commands and includes log history files from previous runs:
 show version
 show sysinfo
 show port all
 show logging
 show event log
 show logging buffered
 show loggin traplogs
 show running-config

Default N/A

Format show tech-support

Mode Privileged EXEC

273 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

length value
Use this command to set the pagination length to value number of lines for the sessions
specified by configuring on different Line Config modes (telnet/ssh/console) and is persistent.
Example: Length command on Line Console mode applies for Serial Console session.

Default 24

Format length value

Mode Line Config

Command Added in firmware release 1.0

History

no length value
Use this command to set the pagination length to the default value number of lines.

Default 24

Format no length value

Mode Line Config

Command Added in firmware release 1.0

History

274 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

terminal length
Use this command to set the pagination length to value number of lines for the current session.
This command configuration takes an immediate effect on the current session and is
nonpersistent.

Default 24 lines per page

Format terminal length value

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no terminal length
Use this command to set the value to the length value configured on Line Config mode
depending on the type of session.

Default 24

Format no terminal length value

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show terminal length

Use this command to display all the configured terminal length values.

Default N/A

275 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show terminal length

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show terminal length
Terminal Length:

For Current Session 2

4
For Serial Console 2
4
For Telnet Sessions 2
4
For SSH Sessions 2
4

memory free low-watermark processor

Use this command to get notifications when the CPU free memory falls below the configured
threshold. A notification is generated when the free memory falls below the threshold. Another
notification is generated once the available free memory rises to 10 percent above the specified
threshold. To prevent generation of excessive notifications when the CPU free memory
fluctuates around the configured threshold, only one Rising or Falling memory notification is
generated over a period of 60 seconds. The threshold is specified in kilobytes. The CPU free
memory threshold configuration is saved across a switch reboot.

Default disabled

Format memory free low-watermark processor 1-240072

Mode Global Config

276 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

low-watermark When CPU free memory falls below this threshold, a notification message is triggered. The
range is 1 to the maximum available memory on the switch. The default is 0 (disabled).

Box Services Commands

This section describes the Box Services commands. Box services are services that provide
support for features such as temperature, power supply status, fan control, and others.

environment trap temperature

Use this command to enable the sending of traps for temperature status events.

Default enabled

Format environment trap temperature

Mode Global Config

Command Added in firmware release 2.0

History

no environment trap temperature

Use this command to disable the sending of traps for temperature status events.

Default enabled

277 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no environment trap temperature

Mode Global Config

Command Added in firmware release 2.0

History

show environment
This command displays temperature and fan status related information.

Default N/A

Format show environment

Mode Privileged EXEC

Command Added in firmware release 2.0

History

PARAMETER DESCRIPTION

Unit The unit identifier assigned to the switch.

Sensor The identifier of the temperature sensor on the switch mainboard.

Description The description of the temperature sensor.

Temp (C) The current value of temperature (in Celsius degree) read at the sensor (this temperature will
always be higher than the environment temperature).

278 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

State The related thermal state. Could be Normal, Warning or Critical.

Max_Temp (C) The absolute maximum temperature read at the sensor since the last power up.

Number
F of the fan.
a
n

State (fan) Information related fan status. Could be Operational or Failed. For Hardware version 2, the
fan information is not reported and its status is Not Applicable.

Example: The following shows example CLI display output for the command.
(DM1200E) #show environment
Temperature Sensors:
Unit Sensor Description Temp (C) State Max_Temp (C)
---- ------ ---------------- ---------- -------------- --------------
1 1 CPU 32 Normal 34
1 2 PSU 27 Normal 29
2 1 CPU 31 Normal 33
3 1 CPU 31 Normal 33
4 1 CPU 32 Normal 34

Fans:
Unit Fan Description State
---- --- -------------- --------------
1 1 CPU-1 Operational
1 2 CPU-2 Operational
1 3 PSU Operational
2 1 CPU1 Operational
2 2 CPU2 Operational
3 1 CPU1 Operational
3 2 CPU2 Operational
4 1 CPU1 Operational
4 2 CPU2 Operational

Logging Commands
This section describes the commands you use to configure system logging, and to view logs and
the logging settings.

279 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

logging buffered
This command enables logging to an in-memory log.

Default disabled; critical when enabled

Format logging buffered

Mode Global Config

Command Added in firmware release 1.0

History

no logging buffered
This command disables logging to in-memory log.

Default Enabled at critical level

Format no logging buffered

Mode Global Config

Command Added in firmware release 1.0

History

logging buffered wrap

This command enables wrapping of in-memory logging when the log file reaches full capacity.
Otherwise when the log file reaches full capacity, logging stops.

Default enabled

Format logging buffered wrap

280 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no logging buffered wrap

This command disables wrapping of in-memory logging and configures logging to stop when
the log file capacity is full.

Default enabled

Format no logging buffered wrap

Mode Privileged EXEC

Command Added in firmware release 1.0

History

logging cli-command
This command enables the CLI command logging feature, which enables the DM1200E to log all
CLI commands issued on the system.

Default disabled

Format logging cli-command

Mode Global Config

Command Added in firmware release 1.0

History

281 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no logging cli-command
This command disables the CLI command Logging feature.

Default disabled

Format no logging cli-command

Mode Global Config

Command Added in firmware release 1.0

History

logging console
This command enables logging to the console. You can specify the severitylevel value as
either an integer from 0 to 7 or symbolically through one of the following keywords: emergency
(0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).

Default disabled; critical when enabled

Format logging console [severitylevel]

Mode Global Config

Command Added in firmware release 1.0

History

no logging console
This command disables logging to the console.

Default Enabled at critical level

282 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no logging console

Mode Global Config

Command Added in firmware release 1.0

History

logging host
This command configures the logging host parameters. You can configure up to eight hosts.

Default  port - 514

 level - critical (2)

Format logging host {hostaddress|hostname} addresstype {port severitylevel}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

hostaddress|hostname The IP address of the logging host.

address-type Indicates the type of address ipv4 or ipv6 or dns being passed.

port A port number from 1 to 65535.

severitylevel Specify this value as either an integer from 0 to 7, or symbolically through one of the
following keywords: emergency (0), alert (1), critical (2), error (3), warning (4),

283 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 notice (5), info (6), or debug (7).

Example: The following shows examples of the command.

(DM1200E) (Config)# logging host google.com dns 214
(DM1200E) (Config)# logging host 10.130.64.88 ipv4 214 6
(DM1200E) (Config)# logging host 2000::150 ipv6 214 7

logging host reconfigure

This command enables logging host reconfiguration.

Default N/A

Format logging host reconfigure hostindex {ipaddr|dnsname}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

hostindex Enter the Logging Host Index for which to change the IP address.

logging host remove

This command disables logging to host. See show logging hosts for a list of host indexes.

Default N/A

Format logging host remove hostindex

Mode Global Config

284 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

logging port
This command sets the local port number of the LOG client for logging messages. The portid
can be in the range from 1 to 65535.

Default 514

Format logging port portid

Mode Global Config

Command Added in firmware release 1.0

History

no logging port
This command resets the local logging port to the default.

Default 514

Format no logging port

Mode Global Config

Command Added in firmware release 1.0

History

logging syslog
This command enables syslog logging.

285 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format logging syslog

Mode Global Config

Command Added in firmware release 1.0

History

no logging syslog
This command disables syslog logging.

Default disabled

Format no logging syslog

Mode Global Config

Command Added in firmware release 1.0

History

logging syslog port

This command enables syslog logging. The portid parameter is an integer with a range of 1-
65535.

Default disabled

Format logging syslog port portid

Mode Global Config

286 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no logging syslog port

This command disables syslog logging.

Default disabled

Format no logging syslog port

Mode Global Config

Command Added in firmware release 1.0

History

logging syslog source-interface

This command configures the syslog source-interface (source IP address) for syslog server
configuration. The selected source-interface IP address is used for filling the IP header of
management protocol packets. This allows security devices (firewalls) to identify the source
packets coming from the specific switch. If a source-interface is not specified, the primary IP
address of the originating (outbound) interface is used as the source address.

Default Management IP (configured with network parms or network protocol commands)

Format logging syslog source-interface {unit/slot/port|{vlan vlan-id}}

Mode Global Config

Command Added in firmware release 1.0

History

287 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

unit/slot/port VLAN or port-based routing interface.

vlan-id Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.

Example: The following shows examples of the command.

(config)#logging syslog source-interface 0/4/1
(config)#logging syslog source-interface 1/0/1

no logging syslog source-interface

This command disables syslog logging.

Default Management IP (configured with network parms or network protocol commands)

Format no logging syslog

Mode Global Config

Command Added in firmware release 1.0

History

show logging
This command displays logging configuration information.

Default N/A

Format show logging

Mode Privileged EXEC

288 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Logging Client Local Port on the collector/relay to which syslog messages are sent.
Port

Logging Client Source Shows the configured syslog source-interface (source IP address).
Interface

CLI Command Shows whether CLI Command logging is enabled.

Logging

Console Logging Shows whether console logging is enabled.

Console Logging The minimum severity to log to the console log. Messages with an equal or lower numerical
Severity Filter severity are logged.

Buffered Logging Shows whether buffered logging is enabled.

Persistent Logging Shows whether persistent logging is enabled.

Persistent Logging The minimum severity at which the logging entries are retained after a system reboot.
Severity Filter

Syslog Logging Shows whether syslog logging is enabled.

Log Messages Number of messages received by the log process. This includes messages that are dropped or
Received ignored.

Log Messages Number of messages that could not be processed due to error or lack of resources.
Dropped

289 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Log Messages Relayed Number of messages sent to the collector/relay.

Example: The following shows example CLI display output for the command.
(DM1200E) #show logging

Logging Client Local Port : 514

Logging Client Source Interface : (not configured)
CLI Command Logging : disabled
Console Logging : enabled
Console Logging Severity Filter : error
Buffered Logging : enabled
Persistent Logging : disabled
Persistent Logging Severity Filter : alert

Syslog Logging : disabled

Log Messages Received : 1010

Log Messages Dropped : 0
Log Messages Relayed : 0

show logging buffered

This command displays buffered logging (system startup and system operation logs).

Default N/A

Format show logging buffered

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Buffered (In-Memory) Shows whether the In-Memory log is enabled or disabled.

Logging

290 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Buffered Logging The behavior of the In Memory log when faced with a log full situation.
Wrapping Behavior

Buffered Log Count The count of valid entries in the buffered log.

show logging hosts

This command displays all configured logging hosts. Use the “|” character to display the output
filter options.

Default N/A

Format show logging hosts

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Host Index (Used for deleting hosts.)

IP Address / IP address or hostname of the logging host.

Hostname

Severity Level The minimum severity to log to the specified address. The possible values are emergency (0),
alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).

Port The server port number, which is the port on the local host from which syslog messages are
sent.

291 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Host Status The state of logging to configured syslog hosts. If the status is disable, no logging occurs.

Example: The following shows example CLI display output for the command.
(DM1200E) #show logging hosts ?

<cr> Press enter to execute the command.

| Output filter options.

(DM1200E) #show logging hosts

Index IP Severity Port Status

Address/Hostname

1 10.130.64.88 critical 514 Active

2 2000::150 critical 514 Active

show logging persistent

Use the show logging persistent command to display persistent log entries.

Default N/A

Format show logging persistent

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Persistent Logging

Persistent Log Count The number of persistent log entries.

292 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show logging persistent

Persistent Logging: disabled

Persistent Log Count: 0

show logging traplogs

This command displays SNMP trap events and statistics.

Default N/A

Format show logging traplogs

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Number of Traps Since The number of traps since the last boot.
Last Reset

Trap Log Capacity The number of traps the system can retain.

Number of Traps Since Log The number of new traps since the command was last executed.
Last Viewed

Log The log number.

System Time Up How long the system had been running at the time the trap was sent.

Trap The text of the trap message.

293 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clear logging buffered
This command clears buffered logging (system startup and system operation logs).

Default N/A

Format clear logging buffered

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Email Alerting and Mail Server Commands

logging email
This command enables email alerting and sets the lowest severity level for which log messages
are emailed. If you specify a severity level, log messages at or above this severity level, but
below the urgent severity level, are emailed in a non-urgent manner by collecting them
together until the log time expires. You can specify the severitylevel value as either an
integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert
(1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7).

Default disabled; when enabled, log messages at or above severity Warning (4) are emailed

Format logging email [severitylevel]

Mode Global Config

Command Added in firmware release 1.0

History

294 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no logging email
This command disables email alerting.

Default disabled

Format no logging email

Mode Global Config

Command Added in firmware release 1.0

History

logging email urgent

This command sets the lowest severity level at which log messages are emailed immediately in
a single email message. Specify the severitylevel value as either an integer from 0 to 7 or
symbolically through one of the following keywords: emergency (0), alert (1), critical (2),
error (3), warning (4), notice (5), info (6), or debug (7). Specify none to indicate that log

messages are collected and sent in a batch email at a specified interval.

Default Alert (1) and emergency (0) messages are sent immediately.

Format logging email urgent {severitylevel | none}

Mode Global Config

Command Added in firmware release 1.0

History

no logging email urgent

This command resets the urgent severity level to the default value.

295 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format no logging email urgent

Mode Global Config

Command Added in firmware release 1.0

History

logging email message-type to-addr

This command configures the email address to which messages are sent. The message types
supported are urgent, non-urgent, and both. For each supported severity level, multiple email
addresses can be configured. The to - email-addr variable is a standard email address, for
example admin@yourcompany.com.

Default none

Format logging email message-type {urgent |non-urgent |both} to-addr to -

email-addr

Mode Global Config

Command Added in firmware release 1.0

History

no logging email message-type to-addr

This command removes the configured to-addr field of email.

Default N/A

Format no logging email message-type {urgent |non-urgent |both} to-addr

296 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 to-email-addr

Mode Global Config

Command Added in firmware release 1.0

History

logging email from-addr

This command configures the email address of the sender (the switch).

Default switch@datacom.ind.br

Format no logging email from-addr from-email-addr

Mode Global Config

Command Added in firmware release 1.0

History

no logging email from-addr

This command removes the configured email source address.

Default switch@datacom.ind.br

Format no logging email from-addr from-email-addr

Mode Global Config

Command Added in firmware release 1.0

History

297 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

logging email message-type subject
This command configures the subject line of the email for the specified type.

Default For urgent messages: Urgent Log Messages

For non-urgent messages: Non Urgent Log Messages

Format logging email message-type {urgent |non-urgent |both} subject subject

Mode Global Config

Command Added in firmware release 1.0

History

no logging email message-type subject

This command removes the configured email subject for the specified message type and
restores it to the default email subject.

Default For Msg Type urgent, subject is.............. Urgent Log Messages

For Msg Type non-urgent, subject is.......... Non Urgent Log Messages

Format no logging email message-type {urgent |non-urgent |both} subject

Mode Global Config

Command Added in firmware release 1.0

History

logging email logtime

This command configures how frequently non-urgent email messages are sent. Non-urgent
messages are collected and sent in a batch email at the specified interval. The valid range is
every 30 - 1440 minutes.

298 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 30 minutes

Format logging email logtime minutes

Mode Global Config

Command Added in firmware release 1.0

History

no logging email logtime

This command resets the non-urgent log time to the default value.

Default 30 minutes

Format no logging email logtime

Mode Global Config

Command Added in firmware release 1.0

History

logging traps
This command sets the severity at which SNMP traps are logged and sent in an email. Specify
the severitylevel value as either an integer from 0 to 7 or symbolically through one of the
following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5),
info (6), or debug (7).

Default Info (6) messages and higher are logged.

Format logging traps severitylevel

299 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

no logging traps
This command resets the SNMP trap logging severity level to the default value.

Default info

Format no logging traps

Mode Global Config

Command Added in firmware release 1.0

History

logging email test message-type

This command sends an email to the SMTP server to test the email alerting function.

Default N/A

Format logging email test message-type {urgent |non-urgent |both} message-body

message-body

Mode Global Config

Command Added in firmware release 1.0

History

show logging email config

This command displays information about the email alert configuration.

300 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show logging email config

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Email Alert Logging The administrative status of the feature: enabled or disabled

Email Alert From Address The email address of the sender (the switch).

Email Alert Urgent The lowest severity level that is considered urgent. Messages of this type are sent
Severity Level immediately.

Email Alert Non Urgent The lowest severity level that is considered non-urgent. Messages of this type, up to the
Severity Level urgent level, are collected and sent in a batch email. Log messages that are less severe
are not sent in an email message at all.

Email Alert Trap Severity The lowest severity level at which traps are logged.
Level

Email Alert Notification The amount of time to wait between non-urgent messages.
Period

Email Alert To Address The configured email recipients.

Table

Email Alert Subject Table The subject lines included in urgent (Type 1) and non-urgent (Type 2) messages.

301 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

For Msg Type urgent, The configured email subject for sending urgent messages.
subject is

For Msg Type non-urgent, The configured email subject for sending non-urgent messages.
subject is

show logging email statistics

This command displays email alerting statistics.

Default N/A

Format show logging email statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Email Alert Operation The operational status of the email alerting feature.
Status

No of Email Failures The number of email messages that have attempted to be sent but were unsuccessful.

No of Email Sent The number of email messages that were sent from the switch since the counter was
cleared.

Time Since Last Email The amount of time that has passed since the last email was sent from the switch.
Sent

302 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clear logging email statistics
This command resets the email alerting statistics.

Default N/A

Format clear logging email statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

mail-server
This command configures the SMTP server to which the switch sends email alert messages and
changes the mode to Mail Server Configuration mode. The server address can be in the IPv4,
IPv6, or DNS name format.

Default none

Format mail-server {ip-address | ipv6-address | hostname}

Mode Global Config

Command Added in firmware release 1.0

History

no mail-server
This command removes the specified SMTP server from the configuration.

Default none

Format no mail-server {ip-address | ipv6-address | hostname}

303 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

security
This command sets the email alerting security protocol by enabling the switch to use TLS
authentication with the SMTP Server. If the TLS mode is enabled on the switch but the SMTP
sever does not support TLS mode, no email is sent to the SMTP server.

Default none

Format security {tlsv1 | none}

Mode Mail Server Config

Command Added in firmware release 1.0

History

port
This command configures the TCP port to use for communication with the SMTP server. The
recommended port for TLSv1 is 465, and for no security (i.e. none) it is 25. However, any
nonstandard port in the range 1 to 65535 is also allowed.

Default 25

Format port {465 | 25 | 1–65535}

Mode Mail Server Config

Command Added in firmware release 1.0

304 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

username (Mail Server Config)

This command configures the login ID the switch uses to authenticate with the SMTP server.

Default admin

Format username name

Mode Mail Server Config

Command Added in firmware release 1.0

History

password
This command configures the password the switch uses to authenticate with the SMTP server.

Default admin

Format password password

Mode Mail Server Config

Command Added in firmware release 1.0

History

show mail-server config

This command displays information about the email alert configuration.

Default N/A

305 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show mail-server {ip-address | hostname | all} config

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

No of mail servers The number of SMTP servers configured on the switch.

configured

Email Alert Mail Server The IPv4/IPv6 address or DNS hostname of the configured SMTP server.
Address

Email Alert Mail Server The TCP port the switch uses to send email to the SMTP server
Port

Email Alert Security The security protocol (TLS or none) the switch uses to authenticate with the SMTP server.
Protocol

Email Alert Username The username the switch uses to authenticate with the SMTP server.

Email Alert Password The password the switch uses to authenticate with the SMTP server.

System Utility and Clear Commands

This section describes the commands you use to help troubleshoot connectivity issues and to
restore various configurations to their factory defaults.

306 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

traceroute
Use the traceroute command to discover the routes that IPv4 or IPv6 packets actually take
when traveling to their destination through the network on a hop-by-hop basis. Traceroute
continues to provide a synchronous response when initiated from the CLI.
The user may specify the source IP address of the traceroute probes. Recall that traceroute
works by sending packets that are expected not to reach their final destination, but instead
trigger ICMP error messages back to the source address from each hop along the forward path
to the destination. By specifying the source address, the user can determine where along the
forward path there is no route back to the source address. Note that this is only useful if the
route from source to destination and destination to source is symmetric.) It would be common,
for example, to send a traceroute from an edge router to a target higher in the network using a
source address from a host subnet on the edge router. This would test reachability from within
the network back to hosts attached to the edge router.
In the CLI, the user may specify the source either as an IPv4 address, IPv6 address, or as a
routing interface. When the source is specified as a routing interface, the traceroute is sent
using the primary IPv4 address on the source interface. With SNMP, the source must be
specified as an address. The source cannot be specified in the web UI.
DM1200E will not accept an incoming packet, such as a traceroute response, that arrives on a
routing interface if the packet’s destination address is on one of the out-of-band management
interfaces (network port). Similarly, DM1200E will not accept a packet that arrives on a
management interface if the packet’s destination is an address on a routing interface. Thus, it
would be futile to send a traceroute on a management interface using a routing interface
address as source, or to send a traceroute on a routing interface using a management interface
as source. When sending a traceroute on a routing interface, the source must be that routing
interface or another routing interface. When sending a traceroute on a management interface,
the source must be on that management interface. For this reason, the user cannot specify the
source as a management interface or management interface address. When sending a
traceroute on a management interface, the user should not specify a source address, but
instead let the system select the source address from the outgoing interface.

Default  count: 3 probes

307 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  interval: 3 seconds

 size: 0 bytes

 port: 33434

 maxTtl: 30 hops

 maxFail: 5 probes

 initTtl: 1 hop

Format traceroute {ip-address | [ipv6] {ipv6-address | hostname}} [initTtl

initTtl]

[maxTtl maxTtl] [maxFail maxFail] [interval interval] [count count]

[port port]

[size size] [source {ip-address | | ipv6-address | unit/slot/port}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Using the options described below, you can specify the initial and maximum time-to-live (TTL)
in probe packets, the maximum number of failures before termination, the number of probes
sent for each TTL, and the size of each probe.

PARAMETER DESCRIPTION

ipaddress The ipaddress value should be a valid IP address.

ipv6-address The ipv6-address value should be a valid IPv6 address.

hostname The hostname value should be a valid hostname.

ipv6 The optional ipv6 keyword can be used before ipv6-address or hostname. Giving the

308 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 ipv6 keyword before the hostname tries it to resolve to an IPv6 address.

initTtl Use initTtl to specify the initial time-to-live (TTL), the maximum number of router hops
between the local and remote system. Range is 0 to 255.

maxTtl Use maxTtle to specify the maximum TTL. Range is 1 to 255.

maxFail Use maxFail to terminate the traceroute after failing to receive a response for this number
of consecutive probes. Range is 0 to 255.

interval Use the optional interval parameter to specify the time between probes, in seconds. If a
response is not received within this interval, then traceroute considers that probe a failure
(printing *) and sends the next probe. If traceroute does receive a response to a probe
within this interval, then it sends the next probe immediately. Range is 1 to 60 seconds.

count Use the optional count parameter to specify the number of probes to send for each TTL
value. Range is 1 to 10 probes.

port Use the optional port parameter to specify destination UDP port of the probe. This should
be an unused port on the remote destination system. Range is 1 to 65535.

size Use the optional size parameter to specify the size, in bytes, of the payload of the Echo
Requests sent. Range is 0 to 65507 bytes.

source Use the optional source parameter to specify the source IP address or interface for the
traceroute.

The following are examples of the CLI command.

Example: traceroute Success:

(DM1200E) # traceroute 10.240.10.115 initTtl 1 maxTtl 4 maxFail 0 interval 1 count 3
port 33434 size 43
Traceroute to 10.240.10.115 ,4 hops max 43 byte packets:
1 10.240.4.1 708 msec 41 msec 11 msec
2 10.240.10.115 0 msec 0 msec 0 msec

Hop Count = 1 Last TTL = 2 Test attempt = 6 Test Success = 6

309 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: traceroute ipv6 Success
(DM1200E) # traceroute 2001::2 initTtl 1 maxTtl 4 maxFail 0 interval 1 count 3 port
33434 size 43

Traceroute to 2001::2 hops max 43 byte packets:

1 2001::2 708 msec 41 msec 11 msec

The above command can also be execute with the optional ipv6 parameter as follows:

(DM1200E) # traceroute ipv6 2001::2 initTtl 1 maxTtl 4 maxFail 0 interval 1 count 3

port 33434 size 43

Example: traceroute Failure:

(DM1200E) # traceroute 10.40.1.1 initTtl 1 maxFail 0 interval 1 count 3
port 33434 size 43
Traceroute to 10.40.1.1 ,30 hops max 43 byte packets:
1 10.240.4.1 19 msec 18 msec 9 msec
2 10.240.1.252 0 msec 0 msec 1 msec
3 172.31.0.9 277 msec 276 msec 277 msec
4 10.254.1.1 289 msec 327 msec 282 msec
5 10.254.21.2 287 msec 293 msec 296 msec
6 192.168.76.2 290 msec 291 msec 289 msec
7 0.0.0.0 0 msec *
Hop Count = 6 Last TTL = 7 Test attempt = 19 Test Success = 18

Example: traceroute ipv6 Failure

(DM1200E)# traceroute 2001::2 initTtl 1 maxFail 0 interval 1 count 3 port 33434 size 43

Traceroute to 2001::2 hops max 43 byte packets:

1 3001::1 708 msec 41 msec 11 msec
2 4001::2 250 msec 200 msec 193 msec
3 5001::3 289 msec 313 msec 278 msec
4 6001::4 651 msec 41 msec 270 msec
5 0 0 msec *
Hop Count = 4 Last TTL = 5 Test attempt = 1 Test Success = 0

clear counters
This command clears the statistics for a specified unit/slot/port, for all the ports, or for the
entire switch based upon the argument.

Default N/A

Format clear counters {unit/slot/port | all}

Mode Privileged EXEC

310 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

clear igmpsnooping
This command clears the tables managed by the IGMP Snooping function and attempts to
delete these entries from the Multicast Forwarding Database.

Default N/A

Format clear igmpsnooping

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear pass
This command resets all user passwords to the factory defaults without powering off the switch.
You are prompted to confirm that the password reset should proceed.

Default N/A

Format clear pass

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear traplog
This command clears the trap log.

311 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format clear traplog

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear vlan
This command resets VLAN configuration parameters to the factory defaults. When the VLAN
configuration is reset to the factory defaults, there are some scenarios regarding GVRP that
happen due to this:
1) Static VLANs are deleted.
2) GVRP is restored to the factory default as a result of handling the VLAN RESTORE NOTIFY
event. Since GVRP is disabled by default, this means that GVRP should be disabled and all of
its dynamic VLANs should be deleted.

Default N/A

Format clear vlan

Mode Privileged EXEC

Command Added in firmware release 1.0

History

logout
This command closes the current telnet connection or resets the current serial connection.

312 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: Save configuration changes before logging out.

Default N/A

Format logout

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

ping
Use this command to determine whether another computer is on the network. Ping provides a
synchronous response when initiated from the CLI and Web interfaces.

Note: For information about the ping command for IPv6 hosts, see ping ipv6.

Default  The default count is 1.

 The default interval is 3 seconds.

 The default size is 0 bytes.

Format ping {address| hostname | {ipv6 {interface {unit/slot/port | vlan 1-4093

| network } link-local-address} | ipv6-address | hostname} [count count]
[interval 1-60] [size size] [source ip-address | ipv6-address |
{unit/slot/port | vlan 1-4093 | network}]

Modes  Privileged EXEC

313 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  User EXEC

Command Added in firmware release 1.0

History

Using the options described below, you can specify the number and size of Echo Requests and
the interval between Echo Requests.

PARAMETER DESCRIPTION

address IPv4 or IPv6 addresses to ping.

count Use the count parameter to specify the number of ping packets (ICMP Echo requests) that
are sent to the destination address specified by the ip-address field. The range for count
is 1 to 15 requests.

interval Use the interval parameter to specify the time between Echo Requests, in seconds.
Range is 1 to 60 seconds.

size Use the size parameter to specify the size, in bytes, of the payload of the Echo Requests
sent. Range is 0 to 65507 bytes.

source Use the source parameter to specify the source IP/IPv6 address or interface to use when
sending the Echo requests packets.

hostname Use the hostname parameter to resolve to an IPv4 or IPv6 address. The ipv6 keyword is
specified to resolve the hostname to IPv6 address. The IPv4 address is resolved if no keyword
is specified.

ipv6 The optional keyword ipv6 can be used before the ipv6-address or hostname
argument. Using the ipv6 optional keyword before hostname tries to resolve it directly to
the IPv6 address. Also used for pinging a link-local IPv6 address.

interface Use the interface keyword to ping a link-local IPv6 address over an interface.

314 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

link-local- The link-local IPv6 address to ping over an interface.
address

The following are examples of the CLI command.

Example: IPv4 ping success:

(DM1200E) #ping 10.254.2.160 count 3 interval 1 size 255
Pinging 10.254.2.160 with 255 bytes of data:

Received response for icmp_seq = 0. time = 275268 usec

Received response for icmp_seq = 1. time = 274009 usec
Received response for icmp_seq = 2. time = 279459 usec

----10.254.2.160 PING statistics----

3 packets transmitted, 3 packets received, 0% packet loss
round-trip (msec) min/avg/max = 274/279/276

Example: IPv6 ping success

(DM1200E) #ping 2001::1
Pinging 2001::1 with 64 bytes of data:

Send count=3, Receive count=3 from 2001::1

Average round trip time = 3.00 ms

Example: IPv4 ping failure:

In Case of Unreachable Destination:
(DM1200E) # ping 192.168.254.222 count 3 interval 1 size 255
Pinging 192.168.254.222 with 255 bytes of data:
Received Response: Unreachable Destination
Received Response :Unreachable Destination
Received Response :Unreachable Destination
----192.168.254.222 PING statistics----
3 packets transmitted,3 packets received, 0% packet loss
round-trip (msec) min/avg/max = 0/0/0
In Case Of Request TimedOut:
(DM1200E) # ping 1.1.1.1 count 1 interval 3
Pinging 1.1.1.1 with 0 bytes of data:

----1.1.1.1 PING statistics----

1 packets transmitted,0 packets received, 100% packet loss
round-trip (msec) min/avg/max = 0/0/0

Example: IPv6 ping failure

(DM1200E) #ping ipv6 2001::4
Pinging 2001::4 with 64 bytes of data:

315 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Send count=3, Receive count=0 from 2001::4
Average round trip time = 0.00 ms

quit
This command closes the current telnet connection or resets the current serial connection. The
system asks you whether to save configuration changes before quitting.

Default N/A

Format quit

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

reload
This command resets the switch without powering it off. Reset means that all network
connections are terminated and the boot code executes. The switch uses the stored
configuration to initialize the switch. You are prompted to confirm that the reset should proceed.
The LEDs on the switch indicate a successful reset.

Default N/A

Format reload

Mode Privileged EXEC

Command Added in firmware release 1.0

History

316 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

copy
The copy command uploads and downloads files to and from the switch. You can also use the
copy command to manage the dual images (active and backup) on the file system. Upload and

download files from a server using FTP, TFTP, Xmodem, Ymodem, or Zmodem. If FTP is used, a
password is required.

Default N/A

Format copy source destination {verify | noverify}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Replace the source and destination parameters with the options in

Table 9: Copy Parameters. For the url source or destination, use the following value:
{xmodem | ymodem | zmodem | tftp://<ipaddress|hostname>/<filepath>/<filename>|
ftp://<user>@<ipaddr|hostname>/<path>/<filename>}

verify | noverify is only available if the image/configuration verify options feature is enabled

(see file verify). verify specifies that digital signature verification will be performed for the
specified downloaded image or configuration file. noverify specifies that no verification will be
performed.
The keyword ias-users supports the downloading of the IAS user database file. When the IAS
users file is downloaded, the switch IAS user’s database is replaced with the users and its
attributes available in the downloaded file. In the command copy url ias-users, for url one of
the following is used for IAS users file:
{ { tftp://<ipaddr | hostname> | <ipv6address | hostname> /<filepath>/<filename> } |
{ ftp://<username>@<ipaddress>/<filepath>/<filename>} }

317 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note: The maximum length for the file path is 160 characters, and the maximum length for
the file name is 31 characters.

For FTP and TFTP, the ipaddr|hostname parameter is the IP address or host name of the server,
filepath is the path to the file, and filename is the name of the file you want to upload or

download.

To copy OpenFlow SSL certificates to the switch using TFTP or XMODEM, using only the
following options pertinent to the OpenFlow SSL certificates.

Default N/A

Format copy [<mode/file>] nvram:{openflow-ssl-ca-cert | openflow-ssl-cert |

openflow-ssl-priv-key}

Mode Privileged Exec

Command Added in firmware release 1.0

History

Table 9: Copy Parameters

SOURCE DESTINATION DESCRIPTION

nvram:backup-config nvram:startup- Copies the backup configuration to the startup

config configuration.

nvram:clibanner url Copies the CLI banner to a server.

nvram:cpupktcapture.p url Uploads CPU packets capture file.

cap

318 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

nvram:crash-log url Copies the crash log to a server.

nvram:errorlog url Copies the error log file to a server.

nvram:log url Copies the log file to a server.

nvram:operational-log url Copies the operational log file to a server.

nvram:script url Copies a specified configuration script file to a server.

scriptname

nvram:startup-config nvram:backup-config Copies the startup configuration to the backup

configuration.

nvram:startup-config url Copies the startup configuration to a server.

nvram:startup-log url Uploads the startup log file.

nvram:traplog url Copies the trap log file to a server.

system:running-config nvram:startup- Saves the running configuration to NVRAM.

config

system:image url Saves the system image to a server.

url nvram:clibanner Downloads the CLI banner to the system.

url nvram:publickey- Downloads the Public Key for Configuration Script

config validation.

url nvram:publickey- Downloads Public Key for Image validation.

image

319 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

url nvram:script Downloads a configuration script file to the system.
destfilename During the download of a configuration script, the copy
command validates the script. In case of any error, the
command lists all the lines at the end of the validation
process and prompts you to confirm before copying the
script file.

url nvram:script When you use this option, the copy command will not
destfilename noval validate the downloaded script file. An example of the CLI
command follows:

(DM1200E) #copy tftp://1.1.1.1/file.scr nvram:script file.scr noval

url nvram:sshkey-dsa Downloads an SSH key file. For more information, see
Secure Shell Commands.

url nvram:sshkey-rsa1 Downloads an SSH key file.

url nvram:sshkey-rsa2 Downloads an SSH key file.

url nvram:sslpem-dhweak Downloads an HTTP secure-server certificate.

url nvram:sslpem- Downloads an HTTP secure-server certificate.

dhstrong

url nvram:sslpem-root Downloads an HTTP secure-server certificate. For more

information, see Hypertext Transfer Protocol Commands.

url nvram:sslpem-server Downloads an HTTP secure-server certificate.

url nvram:startup- Downloads the startup configuration file to the system.

config

url ias-users Downloads an IAS users database file to the system.

When the IAS users file is downloaded, the switch IAS
user’s database is replaced with the users and their

320 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 attributes available in the downloaded file.

url {active | backup} Download an image from the remote server to either
image. In a stacking environment, the downloaded image
is distributed to the stack nodes.

{active | backup} url Upload either image to the remote server.

active backup Copy the active image to the backup image.

backup active Copy the backup image to the active image.

{active | backup} unit://unit/{active Copy an image from the management node to a given
| backup} node in a Stack. Use the unit parameter to specify the
node to which the image should be copied.

{active | backup} unit://*/{active | Copy an image from the management node to all of the
backup} nodes in a Stack.

Example: The following shows an example of downloading and applying ias users file.
(DM1200E) #copy tftp://10.131.17.104/aaa_users.txt as-users

Mode TFTP
Set Server IP 10.131.17.104
Path ./

Filename aaa_users.txt
Data Type IAS Users

Management access will be blocked for the duration of the transfer

Are you sure you want to start? (y/n) y

File transfer operation completed successfully.

Validating and updating the users to the IAS users database.

Updated IAS users database successfully.

(DM1200E) #

321 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

file verify
This command enables digital signature verification while an image and/or configuration file is
downloaded to the switch.

Default none

Format file verify {all | image | none | script}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

All Verifies the digital signature of both image and configuration files.

Image Verifies the digital signature of image files only.

None Disables digital signature verification for both images and configuration files.

Script Verifies the digital signature of configuration files.

no file verify
Resets the configured digital signature verification value to the factory default value.

Default none

Format no file verify

322 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

write memory
Use this command to save running configuration changes to NVRAM so that the changes you
make will persist across a reboot. This command is the same as copy system:running-config
nvram:startup-config. Use the confirm keyword to directly save the configuration to NVRAM

without prompting for a confirmation.

Default N/A

Format write memory [confirm]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Simple Network Time Protocol Commands

This section describes the commands you use to automatically configure the system time and
date by using Simple Network Time Protocol (SNTP).

sntp broadcast client poll-interval

This command sets the poll interval for SNTP broadcast clients in seconds as a power of two
where poll-interval can be a value from 6 to 10.

Default 6

323 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format sntp broadcast client poll-interval poll-interval

Mode Global Config

Command Added in firmware release 1.0

History

no sntp broadcast client poll-interval

This command resets the poll interval for SNTP broadcast client back to the default value.

Default 64 seconds

Format no sntp broadcast client poll-interval

Mode Global Config

Command Added in firmware release 1.0

History

sntp client mode

This command enables Simple Network Time Protocol (SNTP) client mode and may set the
mode to either broadcast or unicast.

Default disabled

Format sntp client mode [broadcast | unicast]

Mode Global Config

Command Added in firmware release 1.0

History

324 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no sntp client mode
This command disables Simple Network Time Protocol (SNTP) client mode.

Default disabled

Format no sntp client mode

Mode Global Config

Command Added in firmware release 1.0

History

sntp client port

This command sets the SNTP client port ID to 0, 123 or a value between 1025 and 65535. The
default value is 0, which means that the SNTP port is not configured by the user. In the default
case, the actual client port value used in SNTP packets is assigned by the underlying OS.

Default 0

Format sntp client port portid

Mode Global Config

Command Added in firmware release 1.0

History

no sntp client port

This command resets the SNTP client port back to its default value.

Default 0

325 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no sntp client port

Mode Global Config

Command Added in firmware release 1.0

History

sntp unicast client poll-interval

This command sets the poll interval for SNTP unicast clients in seconds as a power of two
where poll-interval can be a value from 6 to 10.

Default 6

Format sntp unicast client poll-interval poll-interval

Mode Global Config

Command Added in firmware release 1.0

History

no sntp unicast client poll-interval

This command resets the poll interval for SNTP unicast clients to its default value.

Default 64 seconds

Format no sntp unicast client poll-interval

Mode Global Config

Command Added in firmware release 1.0

326 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

sntp unicast client poll-timeout

This command sets the poll timeout for SNTP unicast clients in seconds to a value from 1-30.

Default 5

Format sntp unicast client poll-timeout poll-timeout

Mode Global Config

Command Added in firmware release 1.0

History

no sntp unicast client poll-timeout

This command will reset the poll timeout for SNTP unicast clients to its default value.

Default 5 seconds

Format no sntp unicast client poll-timeout

Mode Global Config

Command Added in firmware release 1.0

History

sntp unicast client poll-retry

This command will set the poll retry for SNTP unicast clients to a value from 0 to 10.

Default 1

327 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format sntp unicast client poll-retry poll-retry

Mode Global Config

Command Added in firmware release 1.0

History

no sntp unicast client poll-retry

This command will reset the poll retry for SNTP unicast clients to its default value.

Default 1

Format no sntp unicast client poll-retry

Mode Global Config

Command Added in firmware release 1.0

History

sntp server
This command configures an SNTP server (a maximum of three). The server address can be
either an IPv4 address or an IPv6 address. The optional priority can be a value of 1-3, the
version a value of 1-4, and the port id a value of 1-65535.

Default none

Format sntp server {ipaddress | ipv6address | hostname} [priority [version

[portid]]]

Mode Global Config

328 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no sntp server
This command deletes an server from the configured SNTP servers.

Default N/A

Format no sntp server remove {ipaddress | ipv6address | hostname}

Mode Global Config

Command Added in firmware release 1.0

History

sntp source-interface
Use this command to specify the physical or logical interface to use as the source interface
(source IP address) for SNTP unicast server configuration. If configured, the address of source
Interface is used for all SNTP communications between the SNTP server and the SNTP client.
The selected source-interface IP address is used for filling the IP header of management
protocol packets. This allows security devices (firewalls) to identify the source packets coming
from the specific switch. If a source-interface is not specified, the primary IP address of the
originating (outbound) interface is used as the source address. If the configured interface is
down, the SNTP client falls back to its default behavior.

Default Management IP (configured with network parms or network protocol commands)

Format sntp source-interface {unit/slot/port | vlan vlan-id}

Mode Global Config

329 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

unit/slot/port The unit identifier assigned to the switch.

vlan-id Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.

no sntp source-interface
Use this command to reset the SNTP source interface to the default settings.

Default Management IP (configured with network parms or network protocol commands)

Format no sntp source-interface

Mode Global Config

Command Added in firmware release 1.0

History

show sntp
This command is used to display SNTP settings and status.

Default N/A

Format show sntp

330 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Last Update Time Time of last clock update.

Last Attempt Time Time of last transmit query (in unicast mode).

Last Attempt Status Status of the last SNTP request (in unicast mode) or unsolicited message (in broadcast
mode).

Broadcast Count Current number of unsolicited broadcast messages that have been received and processed by
the SNTP client since last reboot.

show sntp client

This command is used to display SNTP client settings.

Default N/A

Format show sntp client

Mode Privileged EXEC

Command Added in firmware release 1.0

History

331 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Client Supported Modes Supported SNTP Modes (Broadcast or Unicast).

SNTP Version The highest SNTP version the client supports.

Port SNTP Client Port. The field displays the value 0 if it is default value. When the client port
value is 0, if the client is in broadcast mode, it binds to port 123; if the client is in unicast
mode, it binds to the port assigned by the underlying OS.

Client Mode Configured SNTP Client Mode.

show sntp server

This command is used to display SNTP server settings and configured servers.

Default N/A

Format show sntp server

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Server Host Address IP address or hostname of configured SNTP Server.

Server Type Address type of server (IPv4, IPv6, or DNS).

332 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Server Stratum Claimed stratum of the server for the last received valid packet.

Server Reference ID Reference clock identifier of the server for the last received valid packet.

Server Mode SNTP Server mode.

Server Maximum Entries Total number of SNTP Servers allowed.

Server Current Entries Total number of SNTP configured.

For each configured server:

TERM DEFINITION

IP Address / Hostname IP address or hostname of configured SNTP Server.

Address Type Address Type of configured SNTP server (IPv4, IPv6, or DNS).

Priority IP priority type of the configured server.

Version SNTP Version number of the server. The protocol version used to query the server in
unicast mode.

Port Server Port Number.

Last Attempt Time Last server attempt time for the specified server.

Last Update Status Last server attempt status for the server.

Total Unicast Requests Number of requests to the server.

333 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Failed Unicast Requests Number of failed requests from server.

show sntp source-interface

Use this command to display the SNTP client source interface configured on the switch.

Default N/A

Format show sntp source-interface

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

SNTP Client Source The interface ID of the physical or logical interface configured as the SNTP client source
Interface interface.

SNTP Client Source IPv4 The IP address of the interface configured as the SNTP client source interface.
Address

Example: The following shows example CLI display output for the command.
(DM1200E) #show sntp source-interface

SNTP Client Source Interface................... (not configured)

(DM1200E) #

Time Zone Commands

Use the Time Zone commands to configure system time and date, Time Zone and Summer
Time (that is, Daylight Saving Time). Summer time can be recurring or non-recurring.

334 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clock set
This command sets the system time and date.

Default 01/01/1970 00:00:00

Format clock set hh:mm:ss

clock set mm/dd/yyyy

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

hh:mm:ss Enter the current system time in 24-hour format in hours, minutes, and seconds. The range is
hours: 0 to 23, minutes: 0 to 59, seconds: 0 to 59.

mm/dd/yyyy Enter the current system date the format month, day, year. The range for month is 1 to 12.
The range for the day of the month is 1 to 31. The range for year is 2010 to 2079.

Example: The following shows examples of the command.

(DM1200E) (Config)# clock set 03:17:00

(DM1200E) (Config)# clock set 11/01/2011

clock summer-time date

Use the clock summer-time date command to set the summer-time offset to Coordinated
Universal Time (UTC). If the optional parameters are not specified, they are read as either 0 or
\0, as appropriate.

335 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format clock summer-time date {date month year hh:mm date month year hh:mm}[offset offset] [zone
acronym]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

date Day of the month. Range is 1 to 31.

month Month. Range is the first three letters by name; jan, for example.

year Year. The range is 2000 to 2097.

hh:mm Time in 24-hour format in hours and minutes. The range is hours: 0 to 23, minutes: 0 to 59.

offset The number of minutes to add during the summertime. The range is 1 to 1440.

acronym The acronym for the summer-time to be displayed when summertime is in effect. The range
is up to four characters are allowed.

Example: The following shows examples of the command.

(DM1200E) (Config)# clock summer-time date 1 nov 2011 3:18 2 nov 2011 3:18
(DM1200E) (Config)# clock summer-time date 1 nov 2011 3:18 2 nov 2011 3:18 offset 120
zone INDA

clock summer-time recurring

This command sets the summer-time recurring parameters.

336 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format clock summer-time recurring { EU | USA | week day month hh:mm week day
month hh:mm} [offset offset] [zone acronym]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

EU The system clock uses the standard recurring summer time settings used in countries in the
European Union.

USA The system clock uses the standard recurring daylight saving time settings used in the United
States.

week Week of the month. The range is 1 to 5, first or last.

day Day of the week. The range is the first three letters by name; sun, for example.

month Month. The range is the first three letters by name; jan, for example.

hh:mm Time in 24-hour format in hours and minutes. The range is hours: 0 to 23, minutes: 0 to 59.

offset The number of minutes to add during the summertime. The range is 1 to 1440.

acronym The acronym for the summertime to be displayed when summertime is in effect. Up to four
characters are allowed.

Example: The following shows examples of the command.

337 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)#clock summer-time recurring 3 sun oct 00:00 2 sun feb 00:00 offset
60 zone BRA

no clock summer-time
This command disales the summer-time settings.

Default None

Format no clock summer-time

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config)# no clock summer-time

clock timezone
Use this command to set the offset to Coordinated Universal Time (UTC). If the optional
parameters are not specified, they will be read as either 0 or \0 as appropriate.

Default +0:00

Format clock timezone {hours} [minutes minutes] [zone acronym]

Mode Global Config

Command Added in firmware release 1.0

History

338 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

hours Hours difference from UTC. The range is -12 to +13.

minutes Minutes difference from UTC. The range is 0 to 59.

acronym The acronym for the time zone. The range is up to four characters.

Example: The following shows an example of the command.

(DM1200E) (Config)# clock timezone -3 zone BRA

no clock timezone
Use this command to reset the time zone settings.

Default +0:00

Format no clock timezone

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config)# no clock timezone

show clock
Use this command to display the time and date from the system clock.

Default N/A

339 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show clock

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
With the above configuration the output appears as below:
(DM1200E) #show clock

08:16:29 BRA(UTC-3:00) Sep 12 2014

Time source is SNTP

show clock detail

Use this command to display the detailed system time along with the time zone and the
summertime configuration.

Default N/A

Format show clock detail

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) # show clock detail

15:05:24 (UTC+0:00) Nov 1 2011

No time source

Time zone:
Acronym not configured
Offset is UTC+0:00

340 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Summertime:
Summer-time is disabled

Example: The following shows example CLI display output for the command.
With the above configuration the output appears as below:
(DM1200E) #show clock detail
08:20:49 BRA(UTC-3:00) Sep 12 2014
Time source is SNTP

Time zone:
Acronym is BRA
Offset is UTC-3:00

Summertime:
Acronym is BRA
Recurring every year
Begins at third Sunday of Oct at 00:00
Ends at second Sunday of Feb at 00:00
offset is 60 minutes

DHCP Server Commands

This section describes the commands you to configure the DHCP server settings for the switch.
DHCP uses UDP as its transport protocol and supports a number of features that facilitate in
administration address allocations.

ip dhcp pool
This command configures a DHCP address pool name on a DHCP server and enters DHCP pool
configuration mode.

Default none

Format ip dhcp pool name

Mode Global Config

Command Added in firmware release 1.0

History

341 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no ip dhcp pool
This command removes the DHCP address pool. The name should be previously configured pool
name.

Default N/A

Format no ip dhcp pool name

Mode Global Config

Command Added in firmware release 1.0

History

client-identifier
This command specifies the unique identifier for a DHCP client. Unique-identifier is a valid
notation in hexadecimal format. In some systems, such as Microsoft® DHCP clients, the client
identifier is required instead of hardware addresses. The unique-identifier is a concatenation of
the media type and the MAC address. For example, the Microsoft client identifier for Ethernet
address c819.2488.f177 is 01c8.1924.88f1.77 where 01 represents the Ethernet media type. For
more information, refer to the “Address Resolution Protocol Parameters” section of RFC 1700,
Assigned Numbers for a list of media type codes.

Default none

Format client-identifier uniqueidentifier

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

342 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no client-identifier
This command deletes the client identifier.

Default none

Format no client-identifier

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

client-name
This command specifies the name for a DHCP client. Name is a string consisting of standard
ASCII characters.

Default none

Format client-name name

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no client-name
This command removes the client name.

Default “”

Format no client-name

343 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

default-router
This command specifies the default router list for a DHCP client. {address1, address2…
address8}are valid IP addresses, each made up of four decimal bytes ranging from 0 to 255. IP

address 0.0.0.0 is invalid.

Default none

Format default-router address1 [address2....address8]

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no default-router
This command removes the default router list.

Default none

Format no default-router

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

344 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dns-server
This command specifies the IP servers available to a DHCP client. Address parameters are valid
IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is
invalid.

Default none

Format dns-server address1 [address2....address8]

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no dns-server
This command removes the DNS Server list.

Default none

Format no dns-server

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

hardware-address
This command specifies the hardware address of a DHCP client. Hardware-address is the MAC
address of the hardware platform of the client consisting of 6 bytes in dotted hexadecimal
format. Type indicates the protocol of the hardware platform. It is 1 for 10 MB Ethernet and 6
for IEEE 802.

345 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default ethernet

Format hardware-address hardwareaddress type

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no hardware-address
This command removes the hardware address of the DHCP client.

Default N/A

Format no hardware-address

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

host
This command specifies the IP address and network mask for a manual binding to a DHCP
client. Address and Mask are valid IP addresses; each made up of four decimal bytes ranging
from 0 to 255. IP address 0.0.0.0 is invalid. The prefix-length is an integer from 0 to 32.

Default none

Format host address [{mask | prefix-length}]

Mode DHCP Pool Config

346 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no host
This command removes the IP address of the DHCP client.

Default N/A

Format no host

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

lease
This command configures the duration of the lease for an IP address that is assigned from a
DHCP server to a DHCP client. The overall lease time should be between 1-86400 minutes. If
you specify infinite, the lease is set for 60 days. You can also specify a lease duration. Days is
an integer from 0 to 59. Hours is an integer from 0 to 23. Minutes is an integer from 0 to 59.

Default 1 (day)

Format lease [{days [hours] [minutes] | infinite}]

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

347 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no lease
This command restores the default value of the lease time for DHCP Server.

Default 1 (day)

Format no lease

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

network (DHCP Pool Config)

Use this command to configure the subnet number and mask for a DHCP address pool on the
server. Network-number is a valid IP address, made up of four decimal bytes ranging from 0 to
255. IP address 0.0.0.0 is invalid. Mask is the IP subnet mask for the specified address pool.
The prefix-length is an integer from 0 to 32.

Default none

Format network networknumber [{mask | prefixlength}]

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no network
This command removes the subnet number and mask.

Default N/A

348 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no network

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

bootfile
The command specifies the name of the default boot image for a DHCP client. The filename
specifies the boot image file.

Default none

Format bootfile filename

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no bootfile
This command deletes the boot image name.

Default none

Format no bootfile

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

349 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

domain-name
This command specifies the domain name for a DHCP client. The domain specifies the domain
name string of the client.

Default none

Format domain-name domain

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no domain-name
This command removes the domain name.

Default none

Format no domain-name

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

netbios-name-server
This command configures NetBIOS Windows Internet Naming Service (WINS) name servers
that are available to DHCP clients.

350 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

One IP address is required, although one can specify up to eight addresses in one command
line. Servers are listed in order of preference (address1 is the most preferred server, address2
is the next most preferred server, and so on).

Default none

Format netbios-name-server address [address2...address8]

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no netbios-name-server
This command removes the NetBIOS name server list.

Default N/A

Format no netbios-name-server

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

netbios-node-type
The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration
Protocol (DHCP) clients.type Specifies the NetBIOS node type. Valid types are:
 b-node—Broadcast
 p-node—Peer-to-peer
 m-node—Mixed
 h-node—Hybrid (recommended)

351 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format netbios-node-type type

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

no netbios-node-type
This command removes the NetBIOS node Type.

Default none

Format no netbios-node-type

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

next-server
This command configures the next server in the boot process of a DHCP client. The address
parameter is the IP address of the next server in the boot process, which is typically a TFTP
server.

Default inbound interface helper addresses

Format next-server address

Mode DHCP Pool Config

352 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no next-server
This command removes the boot server list.

Default N/A

Format no next-server

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

option
The option command configures DHCP Server options. The code parameter specifies the DHCP
option code and ranges from 1-254. The ascii string parameter specifies an NVT ASCII
character string. ASCII character strings that contain white space must be delimited by
quotation marks. The hex string parameter specifies hexadecimal data. In hexadecimal,
character strings are two hexadecimal digits. You can separate each byte by a period (for
example, a3.4f.22.0c), colon (for example, a3:4f:22:0c), or white space (for example, a3 4f
22 0c).

Default none

Format option code {ascii string | hex string1 [string2...string8] | ip

address1 [address2...address8]}

Mode DHCP Pool Config

353 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no option
This command removes the DHCP Server options. The code parameter specifies the DHCP
option code.

Default N/A

Format no option code

Mode DHCP Pool Config

Command Added in firmware release 1.0

History

ip dhcp excluded-address
This command specifies the IP addresses that a DHCP server should not assign to DHCP clients.
Low-address and high-address are valid IP addresses; each made up of four decimal bytes
ranging from 0 to 255. IP address 0.0.0.0 is invalid.

Default none

Format ip dhcp excluded-address lowaddress [highaddress]

Mode Global Config

Command Added in firmware release 1.0

History

354 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no ip dhcp excluded-address
This command removes the excluded IP addresses for a DHCP client. Low-address and high-
address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP
address 0.0.0.0 is invalid.

Default N/A

Format no ip dhcp excluded-address lowaddress [highaddress]

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp ping packets

Use this command to specify the number, in a range from 2-10, of packets a DHCP server sends
to a pool address as part of a ping operation. By default the number of packets sent to a pool
address is 2, which is the smallest allowed number when sending packets. Setting the number
of packets to 0 disables this command.

Default 2

Format ip dhcp ping packets 0,2-10

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp ping packets

This command restores the number of ping packets to the default value.

355 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 2

Format no ip dhcp ping packets

Mode Global Config

Command Added in firmware release 1.0

History

service dhcp
This command enables the DHCP server.

Default disabled

Format service dhcp

Mode Global Config

Command Added in firmware release 1.0

History

no service dhcp
This command disables the DHCP server.

Default disabled

Format no service dhcp

Mode Global Config

Command Added in firmware release 1.0

356 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

ip dhcp bootp automatic

This command enables the allocation of the addresses to the bootp client. The addresses are
from the automatic address pool.

Default disabled

Format ip dhcp bootp automatic

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp bootp automatic

This command disables the allocation of the addresses to the bootp client. The address are
from the automatic address pool.

Default disabled

Format no ip dhcp bootp automatic

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp conflict logging

This command enables conflict logging on DHCP server.

357 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default enabled

Format ip dhcp conflict logging

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp conflict logging

This command disables conflict logging on DHCP server.

Default ebabled

Format no ip dhcp conflict logging

Mode Global Config

Command Added in firmware release 1.0

History

clear ip dhcp binding

This command deletes an automatic address binding from the DHCP server database. If “*” is
specified, the bindings corresponding to all the addresses are deleted. Address is a valid IP
address made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid.

Default N/A

Format clear ip dhcp binding {address | *}

Mode Privileged EXEC

358 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

clear ip dhcp server statistics

This command clears DHCP server statistics counters.

Default N/A

Format clear ip dhcp server statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear ip dhcp conflict

The command is used to clear an address conflict from the DHCP Server database. The server
detects conflicts using a ping. DHCP server clears all conflicts If the asterisk (*) character is
used as the address parameter.

Default N/A

Format clear ip dhcp conflict {address | *}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

359 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip dhcp binding
This command displays address bindings for the specific IP address on the DHCP server. If no
IP address is specified, the bindings corresponding to all the addresses are displayed.

Default N/A

Format show ip dhcp binding [address]

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

IP address The IP address of the client.

Hardware Address The MAC Address or the client identifier.

Lease expiration The lease expiration time of the IP address assigned to the client.

Type The manner in which IP address was assigned to the client.

show ip dhcp global configuration

This command displays address bindings for the specific IP address on the DHCP server. If no
IP address is specified, the bindings corresponding to all the addresses are displayed.

Default N/A

360 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show ip dhcp global configuration

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Service DHCP The field to display the status of dhcp protocol.

Number of Ping The maximum number of Ping Packets that will be sent to verify that an ip address id not
Packets already assigned.

Conflict Logging Shows whether conflict logging is enabled or disabled.

BootP Automatic Shows whether BootP for dynamic pools is enabled or disabled.

show ip dhcp pool configuration

This command displays pool configuration. If all is specified, configuration for all the pools is
displayed.

Default N/A

Format show ip dhcp pool configuration {name | all}

Modes  Privileged EXEC

 User EXEC

361 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

FIELD DEFINITION

Pool Name The name of the configured pool.

Pool Type The pool type.

Lease Time The lease expiration time of the IP address assigned to the client.

DNS Servers The list of DNS servers available to the DHCP client.

Default Routers The list of the default routers available to the DHCP client

The following additional field is displayed for Dynamic pool type:

FIELD DEFINITION

Network The network number and the mask for the DHCP address pool.

The following additional fields are displayed for Manual pool type:

FIELD DEFINITION

Client Name The name of a DHCP client.

Client Identifier The unique identifier of a DHCP client.

362 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Hardware Address The hardware address of a DHCP client.

Hardware Address The protocol of the hardware platform.

Type

Host The IP address and the mask for a manual binding to a DHCP client.

show ip dhcp server statistics

This command displays DHCP server statistics.

Default N/A

Format show ip dhcp server statistics

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

FIELD DEFINITION

Automatic Bindings The number of IP addresses that have been automatically mapped to the MAC addresses of
hosts that are found in the DHCP database.

Expired Bindings The number of expired leases.

Malformed Bindings The number of truncated or corrupted messages that were received by the DHCP server.

Message Received:

363 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

MESSAGE DEFINITION

DHCP DISCOVER The number of DHCPDISCOVER messages the server has received.

DHCP REQUEST The number of DHCPREQUEST messages the server has received.

DHCP DECLINE The number of DHCPDECLINE messages the server has received.

DHCP RELEASE The number of DHCPRELEASE messages the server has received.

DHCP INFORM The number of DHCPINFORM messages the server has received.

Message Sent:

MESSAGE DEFINITION

DHCP OFFER The number of DHCPOFFER messages the server sent.

DHCP ACK The number of DHCPACK messages the server sent.

DHCP NACK The number of DHCPNACK messages the server sent.

show ip dhcp conflict

This command displays address conflicts logged by the DHCP Server. If no IP address is
specified, all the conflicting addresses are displayed.

Default N/A

Format show ip dhcp conflict [ip-address]

364 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

IP address The IP address of the host as recorded on the DHCP server.

Detection Method The manner in which the IP address of the hosts were found on the DHCP Server.

Detection time The time when the conflict was found.

DNS Client Commands

These commands are used in the Domain Name System (DNS), an Internet directory service.
DNS is how domain names are translated into IP addresses. When enabled, the DNS client
provides a hostname lookup service to other components of the DM1200E.

ip domain lookup
Use this command to enable the DNS client.

Default enabled

Format ip domain lookup

Mode Global Config

Command Added in firmware release 1.0

365 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no ip domain lookup
Use this command to disable the DNS client.

Default disabled

Format no ip domain lookup

Mode Global Config

Command Added in firmware release 1.0

History

ip domain name
Use this command to define a default domain name DM1200E uses to complete unqualified host
names (names with a domain name).By default, no default domain name is configured in the
system. name may not be longer than 255 characters and should not include an initial period.
This name should be used only when the default domain name list, configured using the ip
domain list command, is empty.

Default none

Format ip domain name name

Mode Global Config

Command Added in firmware release 1.0

History

366 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The CLI command ip domain name yahoo.com will configure yahoo.com as a default
domain name. For an unqualified hostname xxx, a DNS query is made to find the IP address
corresponding to xxx.yahoo.com.

no ip domain name
Use this command to remove the default domain name configured using the ip domain name
command.

Default none

Format no ip domain name

Mode Global Config

Command Added in firmware release 1.0

History

ip domain list
Use this command to define a list of default domain names to complete unqualified names. By
default, the list is empty. Each name must be no more than 256 characters, and should not
include an initial period. The default domain name, configured using the ip domain name
command, is used only when the default domain name list is empty. A maximum of 32 names
can be entered in to this list.

Default none

Format ip domain list name

Mode Global Config

Command Added in firmware release 1.0

367 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no ip domain list
Use this command to delete a name from a list.

Default N/A

Format no ip domain list name

Mode Global Config

Command Added in firmware release 1.0

History

ip name server
Use this command to configure the available name servers. Up to eight servers can be defined
in one command or by using multiple commands. The parameter server-address is a valid IPv4
or IPv6 address of the server. The preference of the servers is determined by the order they
were entered.

Default none

Format ip name-server server-address1 [server-address2...server-address8]

Mode Global Config

Command Added in firmware release 1.0

History

no ip name server
Use this command to remove a name server.

368 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format no ip name-server [server-address1...server-address8]

Mode Global Config

Command Added in firmware release 1.0

History

ip name source-interface
Use this command to specify the physical or logical interface to use as the DNS client (IP name)
source interface (source IP address) for the DNS client management application. If configured,
the address of source Interface is used for all DNS communications between the DNS server
and the DNS client. The selected source-interface IP address is used for filling the IP header of
management protocol packets. This allows security devices (firewalls) to identify the source
packets coming from the specific switch. If a source-interface is not specified, the primary IP
address of the originating (outbound) interface is used as the source address. If the configured
interface is down, the DNS client falls back to its default behavior.

Default Management IP (configured with network parms or network protocol commands)

Format ip name source-interface {unit/slot/port | vlan vlan-id}

Mode Global Config

Command Added in firmware release 1.0

History

no ip name source-interface
Use this command to reset the DNS source interface to the default settings.

369 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default Management IP (configured with network parms or network protocol commands)

Format no ip name source-interface

Mode Global Config

Command Added in firmware release 1.0

History

ip host
Use this command to define static host name-to-address mapping in the host cache. The
parameter name is host name and ip address is the IP address of the host. The hostname can
include 1–255 alphanumeric characters, periods, hyphens, underscores, and non-consecutive
spaces. Hostnames that include one or more space must be enclosed in quotation marks, for
example “lab-pc 45”.

Default none

Format ip host name ipaddress

Mode Global Config

Command Added in firmware release 1.0

History

no ip host
Use this command to remove the name-to-address mapping.

Default N/A

Format no ip host name

370 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

ipv6 host
Use this command to define static host name-to-IPv6 address mapping in the host cache. The
parameter name is host name and v6 address is the IPv6 address of the host. The hostname
can include 1–255 alphanumeric characters, periods, hyphens, and spaces. Hostnames that
include one or more space must be enclosed in quotation marks, for example “lab-pc 45”.

Default none

Format ipv6 host name v6 address

Mode Global Config

Command Added in firmware release 1.0

History

no ipv6 host
Use this command to remove the static host name-to-IPv6 address mapping in the host cache.

Default N/A

Format no ipv6 host name

Mode Global Config

Command Added in firmware release 1.0

History

371 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip domain retry
Use this command to specify the number of times to retry sending Domain Name System (DNS)
queries. The parameter number indicates the number of times to retry sending a DNS query to
the DNS server. This number ranges from 0 to 100.

Default 2

Format ip domain retry number

Mode Global Config

Command Added in firmware release 1.0

History

no ip domain retry
Use this command to return to the default.

Default 2

Format no ip domain retry number

Mode Global Config

Command Added in firmware release 1.0

History

ip domain timeout
Use this command to specify the amount of time to wait for a response to a DNS query. The
parameter seconds specifies the time, in seconds, to wait for a response to a DNS query. The
parameter seconds ranges from 0 to 3600.

372 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 3

Format ip domain timeout seconds

Mode Global Config

Command Added in firmware release 1.0

History

no ip domain timeout
Use this command to return to the default setting.

Default 3 seconds

Format no ip domain timeout seconds

Mode Global Config

Command Added in firmware release 1.0

History

clear host
Use this command to delete entries from the host name-to-address cache. This command clears
the entries from the DNS cache maintained by the software. This command clears both IPv4
and IPv6 entries.

Default N/A

Format clear host {name | all}

Mode Privileged EXEC

373 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

FIELD DESCRIPTION

name A particular host entry to remove. The parameter name ranges from 1-255 characters.

all Removes all entries.

show hosts
Use this command to display the default domain name, a list of name server hosts, the static
and the cached list of host names and addresses. The parameter name ranges from 1-255
characters. This command displays both IPv4 and IPv6 entries.

Default N/A

Format show hosts [name]

Mode Privileged Exec

User EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Host Name Domain host name.

374 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default Domain Default domain name.

Default Domain List Default domain list.

Domain Name Lookup DNS client enabled/disabled.

Number of Retries Number of time to retry sending Domain Name System (DNS) queries.

Retry Timeout Period Amount of time to wait for a response to a DNS query.

Name Servers Configured name servers.

DNS Client Source Shows the configured source interface (source IP address) used for a DNS client. The IP
Interface address of the selected interface is used as source IP for all communications with the server.

Example: The following shows example CLI display output for the command.
(DM1200E) # show hosts

Host name Device

Default domain gm.com
Default domain list yahoo.com, Stanford.edu, rediff.com
Domain Name lookup Enabled
Number of retries 5
Retry timeout period 1500
Name servers (Preference 176.16.1.18 176.16.1.19
order)
DNS Client Source Interface (not configured)

Configured host name-to-address mapping:

Host Addresses

accounting.gm.com 176.16.8.8

Host Tota Elapse Typ Addresses

l d e

www.stanford.e 72 3 IP 171.64.14.20
du 3

375 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip name source-interface
Use this command to display the configured source interface details used for a DNS client. The
IP address of the selected interface is used as source IP for all communications with the server.

Default N/A

Format show ip name source-interface

Mode Privileged Exec

Command Added in firmware release 1.0

History

IP Address Conflict Commands

The commands in this section help troubleshoot IP address conflicts.

ip address-conflict-detect run
This command triggers the switch to run active address conflict detection by sending gratuitous
ARP packets for IPv4 addresses on the switch.

Default N/A

Format ip address-conflict-detect run

Mode Global Config

Command Added in firmware release 1.0

History

376 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip address-conflict
This command displays the status information corresponding to the last detected address
conflict.

Default N/A

Format show ip address-conflict

Modes Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Address Conflict Identifies whether the switch has detected an address conflict on any IP address.
Detection Status

Last Conflicting IP The IP Address that was last detected as conflicting on any interface.
Address

Last Conflicting MAC The MAC Address of the conflicting host that was last detected on any interface.
Address

Time Since Conflict The time in days, hours, minutes and seconds since the last address conflict was detected.
Detected

clear ip address-conflict-detect
This command clears the detected address conflict status information.

Default N/A

377 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format clear ip address-conflict-detect

Modes Privileged EXEC

Command Added in firmware release 1.0

History

Serviceability Packet Tracing Commands

These commands improve the capability of network engineers to diagnose conditions affecting
their DM1200E.

capture start
Use the command capture start to manually start capturing CPU packets for packet trace.
The packet capture operates in three modes:
 capture file
 remote capture
 capture line
The command is not persistent across a reboot cycle.

Default disabled

Format capture start [{all|receive|transmit}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

378 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

all Capture all traffic.

receive Capture only received traffic.

transmit Capture only transmitted traffic.

capture stop
Use the command capture stop to manually stop capturing CPU packets for packet trace.

Default N/A

Format capture stop

Mode Privileged EXEC

Command Added in firmware release 1.0

History

capture file|remote|line
Use this command to configure file capture options. The command is persistent across a reboot
cycle.

Default remote

Format capture {file|remote|line}

Mode Global Config

Command Added in firmware release 1.0

History

379 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

file In the capture file mode, the captured packets are stored in a file on NVRAM. The maximum
file size defaults to 524288 bytes. The switch can transfer the file to a TFTP or FTP server via
CLI and SNMP.

The file is formatted in pcap format, is named cpuPktCapture.pcap, and can be examined
using network analyzer tools such as Wireshark® or Ethereal®. Starting a file capture
automatically terminates any remote capture sessions and line capturing. After the packet
capture is activated, the capture proceeds until the capture file reaches its maximum size, or
until the capture is stopped manually using the CLI command capture stop.

remote In the remote capture mode, the captured packets are redirected in real time to an external
PC running the Wireshark tool for Microsoft® Windows®. A packet capture server runs on
the switch side and sends the captured packets via a TCP connection to the Wireshark tool.

The remote capture can be enabled or disabled using the CLI. There should be a Windows PC
with the Wireshark tool to display the captured file. When using the remote capture mode,
the switch does not store any captured data locally on its file system.

You can configure the IP port number for connecting Wireshark to the switch. The default
port number is 2002. If a firewall is installed between the Wireshark PC and the switch, then
these ports must be allowed to pass through the firewall. You must configure the firewall to
allow the Wireshark PC to initiate TCP connections to the switch.

If the client successfully connects to the switch, the CPU packets are sent to the client PC,
then Wireshark receives the packets and displays them. This continues until the session is
terminated by either end.

Starting a remote capture session automatically terminates the file capture and line capturing.

line In the capture line mode, the captured packets are saved into the RAM and can be displayed
on the CLI. Starting a line capture automatically terminates any remote capture session and
capturing into a file. There is a maximum 128 packets of maximum 128 bytes that can be
captured and displayed in line mode.

capture remote port

Use this command to configure file capture options. The command is persistent across a reboot
cycle. The id parameter is a TCP port number from 1024 - 49151.

Default 2002

380 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format capture remote port id

Mode Global Config

Command Added in firmware release 1.0

History

capture file size

Use this command to configure file capture options. The command is persistent across a reboot
cycle. The max-file-size parameter is the maximum size the pcap file can reach, which is 2 –
512 KB.

Default 512 KB

Format capture file size max file size

Mode Global Config

Command Added in firmware release 1.0

History

capture line wrap

This command enables wrapping of captured packets in line mode when the captured packets
reaches full capacity.

Default disabled

Format capture line wrap

Mode Global Config

381 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no capture line wrap

This command disables wrapping of captured packets and configures capture packet to stop
when the captured packet capacity is full.

Default disabled

Format no capture line wrap

Mode Global Config

Command Added in firmware release 1.0

History

show capture packets

Use this command to display packets captured and saved to RAM. It is possible to capture and
save into RAM, packets that are received or transmitted through the CPU. A maximum 128
packets can be saved into RAM per capturing session. A maximum 128 bytes per packet can be
saved into the RAM. If a packet holds more than 128 bytes, only the first 128 bytes are saved;
data more than 128 bytes is skipped and cannot be displayed in the CLI.
Capturing packets is stopped automatically when 128 packets are captured and have not yet
been displayed during a capture session. Captured packets are not retained after a reload cycle.

Default N/A

Format show capture packets

Mode Privileged EXEC

382 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

logging persistent
Use this command to configure the Persistent logging for the switch. The severity level of
logging messages is specified at severity level. Possible values for severity level are
(emergency|0, alert|1, critical|2, error|3, warning|4, notice|5, info|6, debug|7).

Default disabled

Format logging persistent severity level

Mode Global Config

Command Added in firmware release 1.0

History

no logging persistent
Use this command to disable the persistent logging in the switch.

Default disabled

Format no logging persistent

Mode Global Config

Command Added in firmware release 1.0

History

383 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

mbuf
Use this command to configure memory buffer (MBUF) threshold limits and generate
notifications when MBUF limits have been reached.

Default disabled

When enabled, default severity is NOTICE

Format mbuf {falling-threshold | rising threshold | severity}

Mode Global Config

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Rising Threshold The percentage of the memory buffer resources that, when exceeded for the configured
rising interval, triggers a notification. The range is 1 to 100. The default is 0 (disabled).

Falling Threshold The percentage of memory buffer resources that, when usage falls below this level for the
configured interval, triggers a notification. The range is 1 to 100. The default is 0 (disabled).

Severity The severity level at which Mbuf logs messages. The range is 1 to 7. The default is 5
(L7_LOG_SEVERITY_NOTICE).

show mbuf
Use this command to display the memory buffer (MBUF) Utilization Monitoring parameters.

Default N/A

Format show mbuf

384 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Rising Threshold The percentage of the memory buffer resources that, when exceeded for the configured
rising interval, triggers a notification. The range is 1 to 100. The default is 0 (disabled).

Falling Threshold The percentage of memory buffer resources that, when usage falls below this level for the
configured interval, triggers a notification. The range is 1 to 100. The default is 0 (disabled).

Severity The severity level.

show mbuf total

Use this command to display memory buffer (MBUF) information.

Default N/A

Format show mbuf total

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

385 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mbufs Total Total number of message buffers in the system.

Mbufs Free Number of message buffers currently available.

Mbufs Rx Used Number of message buffers currently in use.

Total Rx Norm Alloc Number of times the system tried to allocate a message buffer allocation of class RX Norm.
Attempts

Total Rx Mid2 Alloc Number of times the system tried to allocate a message buffer allocation of class RX Mid2.
Attempts

Total Rx Mid1 Alloc Number of times the system tried to allocate a message buffer allocation of class RX Mid1.
Attempts

Total Rx Mid0 Alloc Number of times the system tried to allocate a message buffer allocation of class RX Mid0.
Attempts

Total Rx High Alloc Number of times the system tried to allocate a message buffer allocation of class RX High.
Attempts

Total Tx Alloc Number of times the system tried to allocate a message buffer allocation of class TX.
Attempts

Total Rx Norm Alloc Number of message buffer allocation failures for RX Norm class of message buffer.
Failures

Total Rx Mid2 Alloc Number of message buffer allocation failures for RX Mid2 class of message buffer.
Failures

Total Rx Mid1 Alloc Number of message buffer allocation failures for RX Mid1 class of message buffer.
Failures

Total Rx Mid0 Alloc Number of message buffer allocation failures for RX Mid0 class of message buffer.
Failures

386 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Total Rx High Alloc Number of message buffer allocation failures for RX High class of message buffer.
Failures

Total Tx Alloc Failures Number of message buffer allocation failures for TX class of message buffer.

session start unit

Use this command to initiate a console session from the stack master to another unit in the
stack. During the session, troubleshooting and debugging commands can be issued on the
stack master, and the output displays the relevant information from the member unit specified
in the session.

Default Disable

Format session start unit unit-number

Mode Global Config

Command Added in firmware release 1.0

History

Cable Test Command

The cable test feature enables you to determine the cable connection status on a selected port.

Note: The cable test feature is supported only for copper cable. It is not supported for optical
fiber cable.
If the port has an active link while the cable test is run, the link can go down for the duration
of the test.

cablestatus
This command returns the status of the specified port.

387 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format cablestatus unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

Cable Status One of the following statuses is returned:

 Normal: The cable is working correctly.

 Open: The cable is disconnected or there is a faulty connector.

 Short: There is an electrical short in the cable.

 Cable Test Failed: The cable status could not be determined. The cable may in
fact be working.

 Cross Talk: There is a short-circuit between pins 1 and 5, 3 and 5 or 1 and 3.

Cable Length If this feature is supported by the PHY for the current link speed, the cable length is displayed
as a range between the shortest estimated length and the longest estimated length. Note
that if the link is down and a cable is attached to a 10/100 Ethernet adapter, then the cable
status may display as Open or Short because some Ethernet adapters leave unused wire pairs
unterminated or grounded. Unknown is displayed if the cable length could not be determined.

Example: The following shows example CLI display output for the command.
(DM1200E) #cablestatus 1/0/24

Cable Status................................... Normal

Cable Length................................... 0m - 12m

(DM1200E) #cablestatus 1/0/3

Cable Status................................... Open

Failure Location Distance...................... 4m

388 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #cablestatus 1/0/10

Cable Status................................... Cross Talk

Remote Monitoring Commands

Remote Monitoring (RMON) is a method of collecting a variety of data about network traffic.
RMON supports 64-bit counters (RFC 3273) and High Capacity Alarm Table (RFC 3434).

Note: There is no configuration command for ether stats and high capacity ether stats. The
data source for ether stats and high capacity ether stats are configured during initialization.

rmon alarm
This command sets the RMON alarm entry in the RMON alarm MIB group.

Default no record registered in the MIB

Format rmon alarm alarm number variable sample interval {absolute|delta}

rising-threshold value [rising-event-index] falling-threshold value
[falling-event-index] [startup {rising|falling|rising-falling}] [owner
string]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Alarm Index An index that uniquely identifies an entry in the alarm table. Each entry defines a diagnostic
sample at a particular interval for an object on the device. The range is 1 to 65535.

Alarm Variable The object identifier of the particular variable to be sampled. Only variables that resolve to an

389 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 ASN.1 primitive type of integer.

Alarm Interval The interval in seconds over which the data is sampled and compared with the rising and
falling thresholds. The range is 1 to 2147483647. The default is 1.

Alarm Absolute Value The value of the statistic during the last sampling period. This object is a read-only, 32-bit
signed value.

Alarm Rising The rising threshold for the sample statistics. The range is 2147483648 to 2147483647. The
Threshold default is 1.

Alarm Rising Event The index of the eventEntry that is used when a rising threshold is crossed. The range is 1 to
Index 65535. The default is 1.

Alarm Falling The falling threshold for the sample statistics. The range is 2147483648 to 2147483647. The
Threshold default is 1.

Alarm Falling Event The index of the eventEntry that is used when a falling threshold is crossed. The range is 1 to
Index 65535. The default is 2.

Alarm Startup Alarm The alarm that may be sent. Possible values are rising, falling or both rising-falling. The
default is rising-falling.

Alarm Owner The owner string associated with the alarm entry. The default is monitorAlarm.

Example: The following shows an example of the command.

(DM1200E) (Config)# rmon alarm 1 ifInErrors.2 30 absolute rising-threshold 100 1
falling-threshold 10 2 startup rising owner myOwner

no rmon alarm
This command deletes the RMON alarm entry.

Default no record registered in the MIB

Format no rmon alarm alarm number

390 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config)# no rmon alarm 1

rmon hcalarm
This command sets the RMON hcalarm entry in the High Capacity RMON alarm MIB group.

Default no record registered in the MIB

Format rmon hcalarm alarm number variable sample interval {absolute|delta}

rising-threshold high value low value status {positive|negative}
[rising-event-index] falling-threshold high value low value status
{positive|negative} [falling-event-index] [startup
{rising|falling|rising-falling}] [owner string]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

High Capacity Alarm An arbitrary integer index value used to uniquely identify the high capacity alarm entry. The
Index range is 1 to 65535.

High Capacity Alarm The object identifier of the particular variable to be sampled. Only variables that resolve to an
Variable ASN.1 primitive type of integer.

High Capacity Alarm The interval in seconds over which the data is sampled and compared with the rising and

391 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Interval falling thresholds. The range is 1 to 2147483647. The default is 1.

High Capacity Alarm The method of sampling the selected variable and calculating the value to be compared
Sample Type against the thresholds. Possible types are AbsoluteValue or DeltaValue. The default is
Absolute Value.

High Capacity Alarm The absolute value (that is, the unsigned value) of the hcAlarmVariable statistic during the
Absolute Value last sampling period. The value during the current sampling period is not made available until
the period is complete. This object is a 64-bit unsigned value that is Read-Only.

High Capacity Alarm This object indicates the validity and sign of the data for the high capacity alarm absolute
Absolute Alarm Status value object (hcAlarmAbsValueobject). Possible status types are valueNotAvailable,
valuePositive,or valueNegative. The default is valueNotAvailable.

High Capacity Alarm High capacity alarm startup alarm that may be sent. Possible values are rising, falling, or
Startup Alarm rising-falling. The default is rising-falling.

High Capacity Alarm The lower 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Rising-Threshold to 4294967295. The default is 1.
Absolute Value Low

High Capacity Alarm The upper 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Rising-Threshold to 4294967295. The default is 0.
Absolute Value High

High Capacity Alarm This object indicates the sign of the data for the rising threshold, as defined by the objects
Rising-Threshold hcAlarmRisingThresAbsValueLow and hcAlarmRisingThresAbsValueHigh. Possible values are
Value Status valueNotAvailable, valuePositive,or valueNegative. The default is valuePositive.

High Capacity Alarm The lower 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Falling-Threshold to 4294967295. The default is 1.
Absolute Value Low

High Capacity Alarm The upper 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Falling-Threshold to 4294967295. The default is 0.
Absolute Value High

High Capacity Alarm This object indicates the sign of the data for the falling threshold, as defined by the objects
Falling-Threshold hcAlarmFallingThresAbsValueLow and hcAlarmFallingThresAbsValueHigh. Possible values are

392 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Value Status valueNotAvailable, valuePositive,or valueNegative. The default is valuePositive.

High Capacity Alarm The index of the eventEntry that is used when a rising threshold is crossed. The range is 1 to
Rising Event Index 65535. The default is 1.

High Capacity Alarm The index of the eventEntry that is used when a falling threshold is crossed. The range is 1 to
Falling Event Index 65535. The default is 2.

High Capacity Alarm The number of times the associated hcAlarmVariable instance was polled on behalf of the
Failed Attempts hcAlarmEntry (while in the active state) and the value was not available. This object is a 32-
bit counter value that is read-only.

High Capacity Alarm The owner string associated with the alarm entry. The default is monitorHCAlarm.
Owner

High Capacity Alarm The type of non-volatile storage configured for this entry. This object is read-only. The default
Storage Type is volatile.

Example: The following shows an example of the command.

(DM1200E) (Config)# rmon hcalarm 1 ifInOctets.1 30 absolute rising-threshold high 1 low
100 status positive 1 falling-threshold high 1 low 10 status positive startup rising
owner myOwner

no rmon hcalarm
This command deletes the rmon hcalarm entry.

Default no record registered in the MIB

Format no rmon hcalarm alarm number

Mode Global Config

Command Added in firmware release 1.0

History

393 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows an example of the command.
(DM1200E) (Config)# no rmon hcalarm 1

rmon event
This command sets the RMON event entry in the RMON event MIB group.

Default N/A

Format rmon event event number [description string|log|owner string|trap

community]

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Event Index An index that uniquely identifies an entry in the event table. Each such entry defines one
event that is to be generated when the appropriate conditions occur. The range is 1 to
65535.

Event Description A comment describing the event entry. The default is alarmEvent.

Event Type The type of notification that the probe makes about the event. Possible values are None, Log,
SNMP Trap, Log and SNMP Trap. The default is None.

Event Owner Owner string associated with the entry. The default is monitorEvent.

Event Community The SNMP community specific by this octet string which is used to send an SNMP trap. The
default is public.

Example: The following shows an example of the command.

394 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)# rmon event 1 log description test

no rmon event
This command deletes the rmon event entry.

Default N/A

Format no rmon event event number

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Config)# no rmon event 1

rmon collection history

This command sets the history control parameters of the RMON history Control MIB group.

Note: This command is not supported on interface range. Each RMON history control collection
entry can be configured on only one interface. If you try to configure on multiple interfaces,
DUT displays an error.

Default all interfaces configured for the intervals 30 and 1800 seconds

Format rmon collection history index number [buckets number|interval interval

in sec|owner string]

Mode Interface Config

395 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

History Control Index An index that uniquely identifies an entry in the historyControl table. Each such entry defines
a set of samples at a particular interval for an interface on the device. The range is 1 to
65535.

History Control Data The source interface for which historical data is collected.
Source

History Control The requested number of discrete time intervals over which data is to be saved. The range is
Buckets Requested 1 to 65535. The default is 50.

History Control The number of discrete sampling intervals over which data shall be saved. This object is read-
Buckets Granted only. The default is 10.

History Control The interval in seconds over which the data is sampled. The range is 1 to 3600. The default is
Interval 1800.

History Control Owner The owner string associated with the history control entry. The default is
monitorHistoryControl.

Example: The following shows an example of the command.

(DM1200E) (Interface 1/0/1)# rmon collection history 1 buckets 10 interval 30 owner
myOwner

Example: The following shows an example of the command.

(DM1200E) (Interface 1/0/1-1/0/10)#rmon collection history 1 buckets 10 interval 30
owner myOwner

Error: 'rmon collection history' is not supported on range of interfaces.

396 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no rmon collection history
This command will delete the history control group entry with the specified index number.

Default all interfaces configured for intervals between 30 to 1800 seconds

Format no rmon collection history index number

Mode Interface Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (Interface 1/0/1-1/0/10)# no rmon collection history 1

show rmon
This command displays the entries in the RMON alarm table.

Default N/A

Format show rmon {alarms | alarm alarm-index}

Mode Privileged Exec

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Alarm Index An index that uniquely identifies an entry in the alarm table. Each entry defines a diagnostic
sample at a particular interval for an object on the device. The range is 1 to 65535.

397 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Alarm Variable The object identifier of the particular variable to be sampled. Only variables that resolve to an
ASN.1 primitive type of integer.

Alarm Interval The interval in seconds over which the data is sampled and compared with the rising and
falling thresholds. The range is 1 to 2147483647. The default is 1.

Alarm Absolute Value The value of the statistic during the last sampling period. This object is a read-only, 32-bit
signed value.

Alarm Rising The rising threshold for the sample statistics. The range is 2147483648 to 2147483647. The
Threshold default is 1.

Alarm Rising Event The index of the eventEntry that is used when a rising threshold is crossed. The range is 1 to
Index 65535. The default is 1.

Alarm Falling The falling threshold for the sample statistics. The range is 2147483648 to 2147483647. The
Threshold default is 1.

Alarm Falling Event The index of the eventEntry that is used when a falling threshold is crossed. The range is 1 to
Index 65535. The default is 2.

Alarm Startup Alarm The alarm that may be sent. Possible values are rising, falling or both rising-falling. The
default is rising-falling.

Alarm Owner The owner string associated with the alarm entry. The default is monitorAlarm.

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon alarms

Index OID Owner

1 alarmInterval.1 MibBrowser
2 alarmInterval.1 MibBrowser

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon alarm 1

398 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Alarm 1
----------
OID: alarmInterval.1
Last Sample Value: 1
Interval: 1
Sample Type: absolute
Startup Alarm: rising-falling
Rising Threshold: 1
Falling Threshold: 1
Rising Event: 1
Falling Event: 2
Owner: MibBrowser

show rmon collection history

This command displays the entries in the RMON history control table.

Default N/A

Format show rmon collection history [interfaces unit/slot/port]

Mode Privileged Exec

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

History Control Index An index that uniquely identifies an entry in the historyControl table. Each such entry defines
a set of samples at a particular interval for an interface on the device. The range is 1 to
65535.

History Control Data The source interface for which historical data is collected.
Source

History Control The requested number of discrete time intervals over which data is to be saved. The range is
Buckets Requested 1 to 65535. The default is 50.

History Control The number of discrete sampling intervals over which data shall be saved. This object is read-

399 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Buckets Granted only. The default is 10.

History Control The interval in seconds over which the data is sampled. The range is 1 to 3600. The default is
Interval 1800.

History Control Owner The owner string associated with the history control entry. The default is
monitorHistoryControl.

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon collection history

I Inte Int Requ Gra Owner

n rfac erv este nte
d e al d d
e
x
Samp Sam
les ple
s

1 1/0/ 30 10 10 myowner
1
2 1/0/ 180 50 10 monitorHistor
1 0 yControl
3 1/0/ 30 50 10 monitorHistor
2 yControl
4 1/0/ 180 50 10 monitorHistor
2 0 yControl
5 1/0/ 30 50 10 monitorHistor
3 yControl
6 1/0/ 180 50 10 monitorHistor
3 0 yControl
7 1/0/ 30 50 10 monitorHistor
4 yControl
8 1/0/ 180 50 10 monitorHistor
4 0 yControl
9 1/0/ 30 50 10 monitorHistor
5 yControl
1 1/0/ 180 50 10 monitorHistor
0 5 0 yControl
1 1/0/ 30 50 10 monitorHistor
1 6 yControl
1 1/0/ 180 50 10 monitorHistor
2 6 0 yControl
1 1/0/ 30 50 10 monitorHistor
3 7 yControl
1 1/0/ 180 50 10 monitorHistor
4 7 0 yControl
1 1/0/ 30 50 10 monitorHistor
5 8 yControl
1 1/0/ 180 50 10 monitorHistor

400 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 6 8 0 yControl
1 1/0/ 30 50 10 monitorHistor
7 9 yControl
1 1/0/ 180 50 10 monitorHistor
8 9 0 yControl
1 1/0/ 30 50 10 monitorHistor
9 10 yControl
--More-- or (q)uit

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon collection history interfaces 1/0/1

I Inte Int Requ Gra Owner

n rfac erv este nte
d e al d d
e
x
Samp Sam
les ple
s

1 1/0/ 30 10 10 myowner
1
2 1/0/ 180 50 10 monitorHistor
1 0 yControl

show rmon events

This command displays the entries in the RMON event table.

Default N/A

Format show rmon events

Mode Privileged Exec

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

401 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Event Index An index that uniquely identifies an entry in the event table. Each such entry defines one
event that is to be generated when the appropriate conditions occur. The range is 1 to 65535.

Event Description A comment describing the event entry. The default is alarmEvent.

Event Type The type of notification that the probe makes about the event. Possible values are None,
Log, SNMP Trap, Log and SNMP Trap. The default is None.

Event Owner Owner string associated with the entry. The default is monitorEvent.

Event Community The SNMP community specific by this octet string which is used to send an SNMP trap. The
default is public.

Owner Event owner. The owner string associated with the entry.

Last time sent The last time over which a log or a SNMP trap message is generated.

Example: The following shows example CLI display output for the command.
(DM1200E) # show rmon events

Inde Descripti Typ Communi Owne Las

x on e ty r t
tim
e
sen
t

1 test log public MIB 0

day
s 0
h:0
m:0
s

show rmon history

This command displays the specified entry in the RMON history table.

Default N/A

402 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show rmon history index {errors [period seconds]|other [period
seconds]|throughput [period seconds]}

Mode Privileged Exec

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

History Control Index An index that uniquely identifies an entry in the historyControl table. Each such entry defines
a set of samples at a particular interval for an interface on the device. The range is 1 to
65535.

History Control Data The source interface for which historical data is collected.
Source

History Control Buckets The requested number of discrete time intervals over which data is to be saved. The range is
Requested 1 to 65535. The default is 50.

History Control Buckets The number of discrete sampling intervals over which data shall be saved. This object is
Granted read-only. The default is 10.

History Control Interval The interval in seconds over which the data is sampled. The range is 1 to 3600. The default
is 1800.

History Control Owner The owner string associated with the history control entry. The default is
monitorHistoryControl.

Maximum Table Size Maximum number of entries that the history table can hold.

Time Time at which the sample is collected, displayed as period seconds.

403 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

CRC Align Number of CRC align errors.

Undersize Packets Total number of undersize packets. Packets are less than 64 octets long (excluding framing
bits, including FCS octets).

Oversize Packets Total number of oversize packets. Packets are longer than 1518 octets (excluding framing
bits, including FCS octets).

Fragments Total number of fragment packets. Packets are not an integral number of octets in length or
had a bad Frame Check Sequence (FCS), and are less than 64 octets in length (excluding
framing bits, including FCS octets).

Jabbers Total number of jabber packets. Packets are longer than 1518 octets (excluding framing bits,
including FCS octets), and are not an integral number of octets in length or had a bad Frame
Check Sequence (FCS).

Octets Total number of octets received on the interface.

Packets Total number of packets received (including error packets) on the interface.

Broadcast Total number of good Broadcast packets received on the interface.

Multicast Total number of good Multicast packets received on the interface.

Util Port utilization of the interface associated with the history index specified.

Dropped Collisions Total number of dropped collisions.

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon history 1 errors

Sample set: 1 Owner: myowner

Interface: 1/0/1 Interval: 30
Requested Samples: 10 Granted Samples: 10
Maximum table size: 1758

Time CRC Unders Overs Fragme Jabb

404 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Ali ize ize nts ers
gn

Jan 0 0 0 0 0
01
1970
21:41
:43
Jan 0 0 0 0 0
01
1970
21:42
:14
Jan 0 0 0 0 0
01
1970
21:42
:44
Jan 0 0 0 0 0
01
1970
21:43
:14
Jan 0 0 0 0 0
01
1970
21:43
:44
Jan 0 0 0 0 0
01
1970
21:44
:14
Jan 0 0 0 0 0
01
1970
21:44
:45
Jan 0 0 0 0 0
01
1970
21:45
:15
Jan 0 0 0 0 0
01
1970
21:45
:45
Jan 0 0 0 0 0
01
1970
21:46
:15

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon history 1 throughput

405 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Sample set: 1 Owner: myowner
Interface: 1/0/1 Interval: 30
Requested Samples: 10 Granted Samples: 10
Maximum table size: 1758

Time Octe Packe Broadc Multic Ut

ts ts ast ast il

Jan 0 0 0 0 1
01
1970
21:41
:43
Jan 0 0 0 0 1
01
1970
21:42
:14
Jan 0 0 0 0 1
01
1970
21:42
:44
Jan 0 0 0 0 1
01
1970
21:43
:14
Jan 0 0 0 0 1
01
1970
21:43
:44
Jan 0 0 0 0 1
01
1970
21:44
:14
Jan 0 0 0 0 1
01
1970
21:44
:45
Jan 0 0 0 0 1
01
1970
21:45
:15
Jan 0 0 0 0 1
01
1970
21:45
:45
Jan 0 0 0 0 1
01
1970
21:46

406 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 :15

(DM1200E) #show rmon history 1 other

Sample set: 1 Owner: myowner

Interface: 1/0/1 Interval: 30
Requested Samples: 10 Granted Samples: 10
Maximum table size: 1758

Time Dropped Collisions

Jan 01 1970 0 0
21:41:43
Jan 01 1970 0 0
21:42:14
Jan 01 1970 0 0
21:42:44
Jan 01 1970 0 0
21:43:14
Jan 01 1970 0 0
21:43:44
Jan 01 1970 0 0
21:44:14
Jan 01 1970 0 0
21:44:45
Jan 01 1970 0 0
21:45:15
Jan 01 1970 0 0
21:45:45
Jan 01 1970 0 0
21:46:15

show rmon log

This command displays the entries in the RMON log table.

Default N/A

Format show rmon log [event-index]

Mode Privileged Exec

Command Added in firmware release 1.0

History

407 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

Maximum table size Maximum number of entries that the log table can hold.

Event Event index for which the log is generated.

Description A comment describing the event entry for which the log is generated.

Time Time at which the event is generated.

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon log

Event Description Time

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon log 1

Maximum table size: 10

Event Description Time

show rmon statistics interfaces

This command displays the RMON statistics for the given interfaces.

Default N/A

Format show rmon statistics interfaces unit/slot/port

Mode Privileged Exec

408 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

Port unit/slot/port

Dropped Total number of dropped events on the interface.

Octets Total number of octets received on the interface.

Packets Total number of packets received (including error packets) on the interface.

Broadcast Total number of good broadcast packets received on the interface.

Multicast Total number of good multicast packets received on the interface.

CRC Align Errors Total number of packets received have a length (excluding framing bits, including FCS
octets) of between 64 and 1518 octets inclusive.

Collisions Total number of collisions on the interface.

Undersize Pkts Total number of undersize packets. Packets are less than 64 octets long (excluding framing
bits, including FCS octets).

Oversize Pkts Total number of oversize packets. Packets are longer than 1518 octets (excluding framing
bits, including FCS octets).

Fragments Total number of fragment packets. Packets are not an integral number of octets in length
or had a bad Frame Check Sequence (FCS), and are less than 64 octets in length
(excluding framing bits, including FCS octets).

409 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Jabbers Total number of jabber packets. Packets are longer than 1518 octets (excluding framing
bits, including FCS octets), and are not an integral number of octets in length or had a bad
Frame Check Sequence (FCS).

64 Octets Total number of packets which are 64 octets in length (excluding framing bits, including
FCS octets).

65-127 Octets Total number of packets which are between 65 and 127 octets in length (excluding framing
bits, including FCS octets).

128-255 Octets Total number of packets which are between 128 and 255 octets in length (excluding
framing bits, including FCS octets).

256-511 Octets Total number of packets which are between 256 and 511 octets in length (excluding
framing bits, including FCS octets).

512-1023 Octets Total number of packets which are between 512 and 1023 octets in length (excluding
framing bits, including FCS octets).

1024-1518 Octets Total number of packets which are between 1024 and 1518 octets in length (excluding
framing bits, including FCS octets).

HC Overflow Pkts Total number of HC overflow packets.

HC Overflow Octets Total number of HC overflow octets.

HC Overflow Pkts 64 Total number of HC overflow packets which are 64 octets in length
Octets

HC Overflow Pkts 65 - Total number of HC overflow packets which are between 65 and 127 octets in length.
127 Octets

HC Overflow Pkts 128 - Total number of HC overflow packets which are between 128 and 255 octets in length.
255 Octets

HC Overflow Pkts 256 - Total number of HC overflow packets which are between 256 and 511 octets in length.

410 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

511 Octets

HC Overflow Pkts 512 - Total number of HC overflow packets which are between 512 and 1023 octets in length.
1023 Octets

HC Overflow Pkts 1024 - Total number of HC overflow packets which are between 1024 and 1518 octets in length.
1518 Octets

Example: The following shows example CLI display output for the command.
(DM1200E) # show rmon statistics interfaces 1/0/1
Port: 1/0/1
Dropped: 0
Octets: 0 Packets: 0
Broadcast: 0 Multicast: 0
CRC Align Errors: 0 Collisions: 0
Undersize Pkts: 0 Oversize Pkts: 0
Fragments: 0 Jabbers: 0
64 Octets: 0 65 - 127 Octets: 0
128 - 255 Octets: 0 256 - 511 Octets: 0
512 - 1023 Octets: 0 1024 - 1518 Octets: 0
HC Overflow Pkts: 0 HC Pkts: 0
HC Overflow Octets: 0 HC Octets: 0
HC Overflow Pkts 64 Octets: 0 HC Pkts 64 Octets: 0
HC Overflow Pkts 65 - 127 Octets: 0 HC Pkts 65 - 127 Octets: 0
HC Overflow Pkts 128 - 255 Octets: 0 HC Pkts 128 - 255 Octets: 0
HC Overflow Pkts 256 - 511 Octets: 0 HC Pkts 256 - 511 Octets: 0
HC Overflow Pkts 512 - 1023 Octets: 0 HC Pkts 512 - 1023 Octets: 0
HC Overflow Pkts 1024 - 1518 Octets: 0 HC Pkts 1024 - 1518 Octets: 0

show rmon hcalarms

This command displays the entries in the RMON high-capacity alarm table.

Default N/A

Format show rmon {hcalarms|hcalarm alarm index}

Mode Privileged Exec

Command Added in firmware release 1.0

History

411 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

High Capacity Alarm An arbitrary integer index value used to uniquely identify the high capacity alarm entry. The
Index range is 1 to 65535.

High Capacity Alarm The object identifier of the particular variable to be sampled. Only variables that resolve to an
Variable ASN.1 primitive type of integer.

High Capacity Alarm The interval in seconds over which the data is sampled and compared with the rising and
Interval falling thresholds. The range is 1 to 2147483647. The default is 1.

High Capacity Alarm The method of sampling the selected variable and calculating the value to be compared
Sample Type against the thresholds. Possible types are AbsoluteValue or DeltaValue. The default is
Absolute Value.

High Capacity Alarm The absolute value (that is, the unsigned value) of the hcAlarmVariable statistic during the
Absolute Value last sampling period. The value during the current sampling period is not made available until
the period is complete. This object is a 64-bit unsigned value that is Read-Only.

High Capacity Alarm This object indicates the validity and sign of the data for the high capacity alarm absolute
Absolute Alarm Status value object (hcAlarmAbsValueobject). Possible status types are valueNotAvailable,
valuePositive,or valueNegative. The default is valueNotAvailable.

High Capacity Alarm High capacity alarm startup alarm that may be sent. Possible values are rising, falling, or
Startup Alarm rising-falling. The default is rising-falling.

High Capacity Alarm The lower 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Rising-Threshold to 4294967295. The default is 1.
Absolute Value Low

High Capacity Alarm The upper 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Rising-Threshold to 4294967295. The default is 0.
Absolute Value High

High Capacity Alarm This object indicates the sign of the data for the rising threshold, as defined by the objects
Rising-Threshold hcAlarmRisingThresAbsValueLow and hcAlarmRisingThresAbsValueHigh. Possible values are
Value Status valueNotAvailable, valuePositive,or valueNegative. The default is valuePositive.

412 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

High Capacity Alarm The lower 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Falling-Threshold to 4294967295. The default is 1.
Absolute Value Low

High Capacity Alarm The upper 32 bits of the absolute value for threshold for the sampled statistic. The range is 0
Falling-Threshold to 4294967295. The default is 0.
Absolute Value High

High Capacity Alarm This object indicates the sign of the data for the falling threshold, as defined by the objects
Falling-Threshold hcAlarmFallingThresAbsValueLow and hcAlarmFallingThresAbsValueHigh. Possible values are
Value Status valueNotAvailable, valuePositive,or valueNegative. The default is valuePositive.

High Capacity Alarm The index of the eventEntry that is used when a rising threshold is crossed. The range is 1 to
Rising Event Index 65535. The default is 1.

High Capacity Alarm The index of the eventEntry that is used when a falling threshold is crossed. The range is 1 to
Falling Event Index 65535. The default is 2.

High Capacity Alarm The number of times the associated hcAlarmVariable instance was polled on behalf of thie
Failed Attempts hcAlarmEntry (while in the active state) and the value was not available. This object is a 32-
bit counter value that is read-only.

High Capacity Alarm The owner string associated with the alarm entry. The default is monitorHCAlarm.
Owner

High Capacity Alarm The type of non-volatile storage configured for this entry. This object is read-only. The default
Storage Type is volatile.

Example: The following shows example CLI display output for the command.
(DM1200E) #show rmon hcalarms

Index OID Owner

1 alarmInterval.1 MibBrowser
2 alarmInterval.1 MibBrowser

(DM1200E) #show rmon hcalarm 1

Alarm 1
----------

413 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 OID: alarmInterval.1
Last Sample Value: 1
Interval: 1
Sample Type: absolute
Startup Alarm: rising-falling
Rising Threshold High: 0
Rising Threshold Low: 1
Rising Threshold Status: Positive
Falling Threshold High: 0
Falling Threshold Low: 1
Falling Threshold Status: Positive
Rising Event: 1
Falling Event: 2
Startup Alarm: Rising-Falling
Owner: MibBrowser

Statistics Application Commands

The statistics application gives you the ability to query for statistics on port utilization, flow-
based and packet reception on programmable time slots. The statistics application collects the
statistics at a configurable time range. You can specify the port number(s) or a range of ports
for statistics to be displayed. The configured time range applies to all ports. Detailed statistics
are collected between a specified time range in date and time format. You can define the time
range as having an absolute time entry and/or a periodic time. For example, you can specify
the statistics to be collected and displayed between 9:00 12 NOV 2011 (START) and 21:00 12
NOV 2012 (END) or schedule it on every Mon, Wed, and Fri 9:00 (START) to 21:00 (END).
You can receive the statistics in the following ways:

 User requests through the CLI for a set of counters.

 Configuring the device to display statistics using syslog or email alert. The syslog or
email alert messages are sent by the statistics application at END time.
You can configure the device to display statistics on the console. The collected statistics are
presented on the console at END time.

stats group
This command creates a new group with the specified id or name and configures the time
range and the reporting mechanism for that group.

Default no group created

414 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format stats group group id|name timerange time range name reporting list of reporting methods

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

group ID, name Name of the group of statistics or its identifier to apply on the interface. The range is:

1) received

2) received-errors

3) transmitted

4) transmitted-errors

5) received-transmitted

6) port-utilization

7) congestion

The default is None.

time range name Name of the time range for the group or the flow-based rule. The range is 1 to 31
alphanumeric characters. The default is None.

list of reporting Report the statistics to the configured method. The range is:
methods
0) none

1) console

2) syslog

3) e-mail

The default is None.

415 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows examples of the command.
(DM1200E) (Config)# stats group received timerange test reporting console email syslog

(DM1200E) (Config)# stats group received-errors timerange test reporting email syslog

(DM1200E) (Config)# stats group received- transmitted timerange test reporting none

no stats group
This command deletes the configured group.

Default no group created

Format no stats group group id|name

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows examples of the command.

(DM1200E) (Config)# no stats group received
(DM1200E) (Config)# no stats group received-errors
(DM1200E) (Config)# no stats group received-transmitted

stats flow-based
This command configures flow based statistics rules for the given parameters over the specified
time range. Only an IPv4 address is allowed as source and destination IP address.

Default no rules configured

Format stats flow-based rule-id timerange time range name [{srcip ip-address}
{dstip ip-address} {srcmac mac-address} {dstmac mac-address} {srctcpport
portid} {dsttcpport portid} {srcudpport portid} {dstudpport portid}]

416 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

rule ID The flow-based rule ID. The range is 1 to 16. The default is None.

time range name Name of the time range for the group or the flow-based rule. The range is 1 to 31
alphanumeric characters. The default is None.

srcip ip-address The source IP address.

dstip ip-address The destination IP address.

srcmac mac-address The source MAC address.

dstmac mac-address The destination MAC address.

srctcpport portid The source TCP port number.

dsttcpport portid The destination TCP port number.

srcudpport portid The source UDP port number.

dstudpport portid The destination UDP port number.

Example: The following shows examples of the command.

(DM1200E) (Config)#stats flow-based 1 timerange test srcip 1.1.1.1 dstip 2.2.2.2 srcmac
1234 dstmac 1234 srctcpport 123 dsttcpport 123 srcudpport 123 dstudpport 123

417 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)#stats flow-based 2 timerange test srcip 1.1.1.1 dstip 2.2.2.2
srctcpport 123 dsttcpport 123 srcudpport 123 dstudpport 123

no stats flow-based
This command deletes flow-based statistics.

Default N/A

Format stats flow-based rule-id

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows examples of the command.

(DM1200E) (Config)# no stats flow-based 1
(DM1200E) (Config)# no stats flow-based 2

stats flow-based reporting

This command configures the reporting mechanism for all the flow-based rules configured on
the system. There is no per flow-based rule reporting mechanism. Setting the reporting method
as none resets all the reporting methods.

Default none

Format stats flow-based reporting list of reporting methods

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows examples of the command.

418 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)# stats flow-based reporting console email syslog
(DM1200E) (Config)# stats flow-based reporting email syslog
(DM1200E) (Config)# stats flow-based reporting none

stats group (interface config)

This command applies the group specified on an interface or interface-range.

Default the interface does not belong to the statistical group

Format stats group <group id | name>

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

group id The unique identifier for the group.

name The name of the group.

Example: The following shows examples of the command.

(DM1200E) (Interface 1/0/1-1/0/10)# stats group 1
(DM1200E) (Interface 1/0/1-1/0/10)# stats group 2

no stats group (interface config)

This command deletes the interface or interface-range from the group specified.

Default N/A

Format no stats group <group id | name>

419 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

Example: The following shows examples of the command.

(DM1200E) (Interface 1/0/1-1/0/10)# no stats group 1
(DM1200E) (Interface 1/0/1-1/0/10)# no stats group 2

stats flow-based (interface config)

This command applies the flow-based rule specified by the ID on an interface or interface-range.

Default the interface does not belong to the statistical group

Format stats flow-based <rule-id>

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

rule-id The unique identifier for the flow-based rule.

Example: The following shows examples of the command.

(DM1200E) (Interface 1/0/1-1/0/10)# stats flow-based 1
(DM1200E) (Interface 1/0/1-1/0/10)# stats flow-based 2

no stats flow-based (interface config)

This command deletes the interface or interface-range from the flow-based rule specified.

420 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format no stats flow-based <rule-id>

Mode Interface Config

Command Added in firmware release 1.0

History

Example: The following shows examples of the command.

(DM1200E) (Interface 1/0/1-1/0/10)# no stats flow-based 1
(DM1200E) (Interface 1/0/1-1/0/10)# no stats flow-based 2

show stats group

This command displays the configured time range and the interface list for the group specified
and shows collected statistics for the specified time-range name on the interface list after the
time-range expiry.

Default N/A

Format show stats group <group id | name>

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

group id The unique identifier for the group.

421 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

name The name of the group.

Example: The following shows example CLI display output for the command.
(DM1200E) #show stats group received

Group: received
Time Range: test
Interface List
-----------------
1/0/2, 1/0/4, lag 1

Counter ID Interface Counter

Value

Rx Total 1/0/2 951600

Rx Total 1/0/4 304512
Rx Total lag 1 0
Rx 64 1/0/2 0
Rx 64 1/0/4 4758
Rx 64 lag 1 0
Rx 65to128 1/0/2 0
Rx 65to128 1/0/4 0
Rx 65to128 lag 1 0
Rx 128to255 1/0/2 4758
Rx 128to255 1/0/4 0
Rx 128to255 lag 1 0
Rx 256to511 1/0/2 0

Example: The following shows example CLI display output for the command.
(DM1200E) #show stats group port-utilization

Group: port-utilization
Time Range: test
Interface List
--------------
1/0/2, 1/0/4, lag 1
Interface Utilization
(%)

1/0/2 0
1/0/4 0
lag 1 0

show stats flow-based

This command displays the configured time range, flow-based rule parameters, and the
interface list for the flow specified.

422 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show stats flow-based rule-id|all

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

rule-id The unique identifier for the flow-based rule.

Example: The following shows example CLI display output for the command.
(DM1200E) #show stats flow-based all

Flow based rule Id 1

Time Range test
Source IP 1.1.1.1
Source MAC 1234
Source TCP Port 123
Source UDP Port 123
Destination IP 2.2.2.2
Destination MAC 1234
Destination TCP Port 123
Destination UDP Port 123
Interface List
--------------
1/0/1 - 1/0/2

Interface Hit
Count

1/0/1 100
1/0/2 0

Flow based rule Id 2

Time Range test
Source IP 1.1.1.1
Source TCP Port 123
Source UDP Port 123
Destination IP 2.2.2.2

423 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Destination TCP Port 123
Destination UDP Port 123

Interface List
--------------
1/0/1 - 1/0/2

Interface Hit
Count

1/0/1 100
1/0/2 0

Example: The following shows example CLI display output for the command.
(DM1200E) #show stats flow-based 2

Flow based rule Id 2

Time Range test
Source IP 1.1.1.1
Source TCP Port 123
Source UDP Port 123
Destination IP 2.2.2.2
Destination TCP Port 123
Destination UDP Port 123
Interface List
--------------
1/0/1 - 1/0/2

Interface Hit
Count

1/0/1 100
1/0/2 0

Section 6: Switching Commands

This chapter describes the switching commands available in the DM1200E.
The Switching Commands chapter includes the following sections:

 Port Configuration Commands  Storm-Control Commands

 Spanning Tree Protocol Commands  Port-Channel/LAG (802.3ad) Commands
 VLAN Commands  Port Mirroring Commands
 Private VLAN Commands  Static MAC Filtering Commands
 Voice VLAN Commands  DHCP Client Commands
 Provisioning (IEEE 802.1p) Commands  DHCP Snooping Configuration Commands

424 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Flow Control  IGMP Snooping Configuration Commands
 Protected Ports Commands  IGMP Snooping Querier Commands
 GARP Commands  Port Security Commands
 GVRP Commands  LLDP (802.1AB) Commands
 GMRP Commands  LLDP-MED Commands
 Port-Based Network Access Control  Denial of Service Commands
Commands  MAC Database Commands
 802.1X Supplicant Commands

Caution! The commands in this chapter are in one of three functional groups:
Show commands display switch settings, statistics, and other information.
Configuration commands configure features and options of the switch. For every configuration
command, there is a show command that displays the configuration setting.
Clear commands clear some or all of the settings to factory defaults.

Port Configuration Commands

This section describes the commands you use to view and configure port settings.

interface
This command gives you access to the Interface Config mode, which allows you to enable or
modify the operation of an interface (port). You can also specify a range of ports to configure at
the same time by specifying the starting unit/slot/port and ending unit/slot/port,
separated by a hyphen.

Format interface {unit/slot/port | unit/slot/port(startrange)-

unit/slot/port(endrange)}

Mode Global Config

425 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

Example: The following example enters Interface Config mode for port 1/0/1:
(DM1200E) #configure
(DM1200E) (config)#interface 1/0/1
(DM1200E) (interface 1/0/1)#

Example: The following example enters Interface Config mode for ports 1/0/1 through 1/0/4:
(DM1200E) #configure
(DM1200E) (config)#interface 1/0/1-1/0/4
(DM1200E) (interface 1/0/1-1/0/4)#

auto-negotiate
This command enables automatic negotiation on a port or range of ports.

Default enabled

Format auto-negotiate

Mode Interface Config

Command Added in firmware release 1.0

History

no auto-negotiate
This command disables automatic negotiation on a port.

Note! Automatic sensing is disabled when automatic negotiation is disabled.

Default enabled

426 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no auto-negotiate

Mode Interface Config

Command Added in firmware release 1.0

History

auto-negotiate all
This command enables automatic negotiation on all ports.

Default enabled

Format auto-negotiate all

Mode Global Config

Command Added in firmware release 1.0

History

no auto-negotiate all
This command disables automatic negotiation on all ports.

Default enabled

Format no auto-negotiate all

Mode Global Config

Command Added in firmware release 1.0

History

427 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

description
Use this command to create an alpha-numeric description of an interface or range of interfaces.

Default ""

Format description description

Mode Interface Config

Command Added in firmware release 1.0

History

mtu
Use the mtu command to set the maximum transmission unit (MTU) size, in bytes, for frames
that ingress or egress the interface. You can use the mtu command to configure jumbo frame
support for physical and port-channel (LAG) interfaces. The MTU size is a valid integer between
1522–9216 for tagged packets and a valid integer between 1518 - 9216 for untagged packets.

Note: To receive and process packets, the Ethernet MTU must include any extra bytes that
Layer-2 headers might require. To configure the IP MTU size, which is the maximum size of the
IP packet (IP Header + IP payload), see ip mtu.

Default 1518 (untagged)

Format mtu 1518-9216

Mode Interface Config

Command Added in firmware release 1.0

History

428 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no mtu
This command sets the default MTU size (in bytes) for the interface.

Default 1518 (untagged)

Format no mtu

Mode Interface Config

Command Added in firmware release 1.0

History

shutdown
This command disables a port or range of ports.

Note! You can use the shutdown command on physical and port-channel (LAG) interfaces, but
not on VLAN routing interfaces.

Default enabled

Format shutdown

Mode Interface Config

Command Added in firmware release 1.0

History

no shutdown
This command enables a port.

Default enabled

429 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no shutdown

Mode Interface Config

Command Added in firmware release 1.0

History

shutdown all
This command disables all ports.

Note! You can use the shutdown all command on physical and port-channel (LAG) interfaces,
but not on VLAN routing interfaces.

Default enabled

Format shutdown all

Mode Global Config

Command Added in firmware release 1.0

History

no shutdown all
This command enables all ports.

Default enabled

Format no shutdown all

Mode Global Config

430 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

speed
Use this command to enable or disable auto-negotiation and set the speed that will be
advertised by that port. The duplex parameter allows you to set the advertised speed for both
half as well as full duplex mode.
Use the auto keyword to enable auto-negotiation on the port. Use the command without the
auto keyword to ensure auto-negotiation is disabled and to set the port speed and mode

according to the command values. If auto-negotiation is disabled, the speed and duplex mode
must be set.

Note! Not all speeds are available for each port. For example, the 10G speed is only available
at the ports 25, 26, 27 and 28 of the DM1200E 24GX+4XS models.

Default Auto-negotiation is enabled.

Format speed {auto {10G | 1000 | 100 | 10} [10G | 1000 | 100 | 10] [half-duplex
| full-duplex] | {10G | 1000 | 100 | 10} {half-duplex | full-duplex}}

Mode Interface Config

Command Added in firmware release 1.0

History

speed all
This command sets the speed and duplex setting for all interfaces.

Default N/A

431 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format speed all {100 | 10} {half-duplex | full-duplex}

Mode Global Config

Command Added in firmware release 1.0

History

show port
This command displays port information.

Default N/A

Format show port {intf-range | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DEFINITION

Interface unit/slot/port

Type If not blank, this field indicates that this port is a special type of port. The possible values are:

 Mirror — this port is a monitoring port. For more information, see Port Mirroring
Commands.

 PC Mbr— this port is a member of a port-channel (LAG).

 Probe — this port is a probe port.

Admin Mode The Port control administration state. The port must be enabled in order for it to be allowed
into the network. May be enabled or disabled. The factory default is enabled.

432 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Physical Mode The desired port speed and duplex mode. If auto-negotiation support is selected, then the
duplex mode and speed is set from the auto-negotiation process. Note that the maximum
capability of the port (full duplex -100M) is advertised. Otherwise, this object determines the
port's duplex mode and transmission rate. The factory default is Auto.

Physical Status The port speed and duplex mode.

Link Status The Link is up or down.

Link Trap This object determines whether or not to send a trap when link status changes. The factory
default is enabled.

LACP Mode LACP is enabled or disabled on this port.

Example: The following command shows an example of the command output for all ports.
(DM1200E) #show port all

Admin Physical Physical Link Link LACP Actor

Intf Type Mode Mode Status Status Trap Mode Timeout
--------- ------ --------- ---------- ---------- ------ ------- ------ --------
1/0/1 Enable Auto 100 Full Up Enable Enable long
1/0/2 Enable Auto Down Enable Enable long
1/0/3 Enable Auto 1000 Full Up Enable Enable long
1/0/4 Enable Auto 1000 Full Up Enable Enable long
1/0/5 Enable Auto 1000 Full Up Enable Enable long
1/0/6 Enable Auto 1000 Full Up Enable Enable long
1/0/7 Enable Auto 1000 Full Up Enable Enable long
1/0/8 Enable Auto 1000 Full Up Enable Enable long
1/0/9 Enable Auto 1000 Full Up Enable Enable long
1/0/10 Enable Auto 1000 Full Up Enable Enable long
1/0/11 Enable Auto 1000 Full Up Enable Enable long
1/0/12 Enable Auto 1000 Full Up Enable Enable long
1/0/13 Enable Auto 1000 Full Up Enable Enable long
1/0/14 Enable Auto 1000 Full Up Enable Enable long
1/0/15 Enable Auto 1000 Full Up Enable Enable long
1/0/16 Enable Auto 1000 Full Up Enable Enable long
1/0/17 Enable Auto 1000 Full Up Enable Enable long
1/0/18 Enable Auto 1000 Full Up Enable Enable long
1/0/19 Enable Auto 1000 Full Up Enable Enable long
1/0/20 Enable Auto 1000 Full Up Enable Enable long
1/0/21 Enable Auto 1000 Full Up Enable Enable long
1/0/22 Enable Auto 1000 Full Up Enable Enable long
1/0/23 Enable Auto Down Enable Enable long
1/0/24 Enable Auto 100 Full Up Enable Enable long
1/0/25 Enable Auto Down Enable Enable long
1/0/26 Enable Auto Down Enable Enable long
1/0/27 Enable Auto Down Enable Enable long

433 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 1/0/28 Enable Auto 1000 Full Up Enable Enable long
0/3/1 Enable Down Disable N/A N/A
0/3/2 Enable Down Disable N/A N/A
0/3/3 Enable Down Disable N/A N/A
0/3/4 Enable Down Disable N/A N/A
0/3/5 Enable Down Disable N/A N/A
0/3/6 Enable Down Disable N/A N/A

Example: The following command shows an example of the command output for a range of
ports.
(DM1200E) #show port 1/0/1-1/0/6

Admin Physical Physical Link Link LACP Actor

Intf Type Mode Mode Status Status Trap Mode Timeout
--------- ------ --------- ---------- ---------- ------ ------- ------ --------
1/0/1 Enable Auto 100 Full Up Enable Enable long
1/0/2 Enable Auto Down Enable Enable long
1/0/3 Enable Auto 1000 Full Up Enable Enable long
1/0/4 Enable Auto 1000 Full Up Enable Enable long
1/0/5 Enable Auto 1000 Full Up Enable Enable long
1/0/6 Enable Auto 1000 Full Up Enable Enable long

show port advertise

Use this command to display the local administrative link advertisement configuration, local
operational link advertisement, and the link partner advertisement for an interface. It also
displays priority Resolution for speed and duplex as per 802.3 Annex 28B.3. It displays the Auto
negotiation state, Phy Master/Slave Clock configuration, and Link state of the port.
If the link is down, the Clock is displayed as No Link, and a dash is displayed against the Oper
Peer advertisement, and Priority Resolution. If Auto negotiation is disabled, then the admin
Local Link advertisement, operational local link advertisement, operational peer advertisement,
and Priority resolution fields are not displayed.
If this command is executed without the optional unit/slot/port parameter, then it displays
the Auto-negotiation state and operational Local link advertisement for all the ports.
Operational link advertisement will display speed only if it is supported by both local as well as
link partner. If auto-negotiation is disabled, then operational local link advertisement is not
displayed.

Default N/A

434 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show port advertise [unit/slot/port]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following commands show the command output with and without the optional
parameter:
(DM1200E)#show port advertise 1/0/1

Port: 1/0/1
Type: Gigabit - Level
Link State: Down
Auto Negotiation: Enabled
Clock: Auto
1000f 1000h 100f 100h 10f 10h
----- ----- ---- ---- --- ---
Admin Local Link Advertisement no no yes no yes no
Oper Local Link Advertisement no no yes no yes no
Oper Peer Advertisement no no yes yes yes yes
Priority Resolution - - yes - - -

(DM1200E)#show port advertise

Port Type Neg Operational Link Advertisement

--------- ------------------------------ ----------- ------------------------------
1/0/1 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h
1/0/2 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h
1/0/3 Gigabit - Level Enabled 1000f, 100f, 100h, 10f, 10h

show port description

This command displays the interface description. Instead of unit/slot/port, lag lag-intf-
num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can also

be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

Format show port description unit/slot/port

Mode Privileged EXEC

435 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Interface unit/slot/port

ifIndex The interface index number associated with the port.

Description The alpha-numeric description of the interface created by the command description.

MAC address The MAC address of the port. The format is 6 two-digit hexadecimal numbers that are
separated by colons, for example 01:23:45:67:89:AB.

Bit Offset Val The bit offset value.

Example: The following shows example CLI display output for the command.
(DM1200E) #show port description 1/0/1

Interface....... 1/0/1
ifIndex......... 1
Description.....
MAC address..... 00:04:DF:67:62:B3
Bit Offset Val.. 1

Spanning Tree Protocol Commands

This section describes the commands you use to configure Spanning Tree Protocol (STP). STP
helps prevent network loops, duplicate messages, and network instability.

Note! STP is enabled on the switch and on all ports and LAGs by default.

436 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! If STP is disabled, the system does not forward BPDU messages.

spanning-tree
This command sets the spanning-tree operational mode to enabled.

Default enabled

Format spanning-tree

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree
This command sets the spanning-tree operational mode to disabled. While disabled, the
spanning-tree configuration is retained and can be changed, but is not activated.

Default enabled

Format no spanning-tree

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree auto-edge
Use this command to allow the interface to become an edge port if it does not receive any
BPDUs within a given amount of time.

437 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default enabled

Format spanning-tree auto-edge

Mode Interface Config

Command Added in firmware release 1.0

History

no spanning-tree auto-edge
This command resets the auto-edge status of the port to the default value.

Default enabled

Format no spanning-tree auto-edge

Mode Interface Config

Command Added in firmware release 1.0

History

spanning-tree bpdumigrationcheck
Use this command to force a transmission of rapid spanning tree (RSTP) and multiple spanning
tree (MSTP) BPDUs. Use the unit/slot/port parameter to transmit a BPDU from a specified
interface, or use the all keyword to transmit RST or MST BPDUs from all interfaces. This
command forces the BPDU transmission when you execute it, so the command does not change
the system configuration or have a no version.

Default N/A

Format spanning-tree bpdumigrationcheck {unit/slot/port | all}

438 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree configuration name

This command sets the Configuration Identifier Name for use in identifying the configuration
that this switch is currently using. The name is a string of up to 32 characters.

Default base MAC address in hexadecimal notation

Format spanning-tree configuration name name

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree configuration name

This command resets the Configuration Identifier Name to its default.

Default base MAC address in hexadecimal notation

Format no spanning-tree configuration name

Mode Global Config

Command Added in firmware release 1.0

History

439 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

spanning-tree configuration revision
This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using. The Configuration Identifier Revision Level is a
number in the range of 0 to 65535.

Default 0

Format spanning-tree configuration revision 0-65535

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree configuration revision

This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using to the default value.

Default 0

Format no spanning-tree configuration revision

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree cost
Use this command to configure the external path cost for port used by a MST instance. When
the auto keyword is used, the path cost from the port to the root bridge is automatically
determined by the speed of the interface. To configure the cost manually, specify a cost value
from 1 - 200000000.

440 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default auto

Format spanning-tree cost {cost | auto}

Mode Interface Config

Command Added in firmware release 1.0

History

no spanning-tree cost
This command resets the auto-edge status of the port to the default value.

Default autor

Format no spanning-tree cost

Mode Interface Config

Command Added in firmware release 1.0

History

spanning-tree edgeport
This command specifies that an interface (or range of interfaces) is an Edge Port within the
common and internal spanning tree. This allows this port to transition to Forwarding State
without delay.

Default disabled

Format spanning-tree edgeport

Mode Interface Config

441 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no spanning-tree edgeport
This command specifies that this port is not an Edge Port within the common and internal
spanning tree.

Default disabled

Format no spanning-tree edgeport

Mode Interface Config

Command Added in firmware release 1.0

History

spanning-tree mode
This command sets the Force Protocol Version parameter to a new value.

Default 802.1s

Format spanning-tree mode {stp | rstp | mstp}

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree mode
This command sets the Protocol Version parameter to the default value.

442 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 802.1s

Format no spanning-tree mode

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree forward-time
This command sets the Bridge Forward Delay parameter to a new value for the common and
internal spanning tree. The forward-time value is in seconds within a range of 4 to 30, with the
value being greater than or equal to “(Bridge Max Age / 2) + 1”.

Default 15

Format spanning-tree forward-time 4-30

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree forward-time
This command sets the Bridge Forward Delay parameter for the common and internal spanning
tree to the default value.

Default 15r

Format no spanning-tree forward-time

443 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree max-age
This command sets the Bridge Max Age parameter to a new value for the common and internal
spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being
less than or equal to 2 x (Bridge Forward Delay - 1).

Default 20

Format spanning-tree max-age 6-40

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree max-age
This command sets the Bridge Max Age parameter for the common and internal spanning tree
to the default value.

Default 20

Format no spanning-tree max-age

Mode Global Config

Command Added in firmware release 1.0

History

444 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

spanning-tree max-hops
This command sets the Bridge Max Hops parameter to a new value for the common and
internal spanning tree. The max-hops value is a range from 6 to 40.

Default 20

Format spanning-tree max-hops 6-40

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree max-hops
This command sets the Bridge Max Hops parameter for the common and internal spanning tree
to the default value.

Default 20

Format no spanning-tree max-hops

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree mst
This command sets the Path Cost or Port Priority for this port within the multiple spanning tree
instance or in the common and internal spanning tree. If you specify an mstid parameter that
corresponds to an existing multiple spanning tree instance, the configurations are done for that

445 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

multiple spanning tree instance. If you specify 0 (defined as the default CIST ID) as the mstid,
the configurations are done for the common and internal spanning tree instance.
If you specify the cost option, the command sets the path cost for this port within a multiple
spanning tree instance or the common and internal spanning tree instance, depending on the
mstid parameter. You can set the path cost as a number in the range of 1 to 200000000 or

auto. If you select auto the path cost value is set based on Link Speed.
If you specify the port-priority option, this command sets the priority for this port within a
specific multiple spanning tree instance or the common and internal spanning tree instance,
depending on the mstid parameter. The port-priority value is a number in the range of 0 to 240
in increments of 16.

Default  Cost - auto

 port-priority - 128

Format spanning-tree mst mstid {{cost 1-200000000 | auto} | port-priority 0-

240}

Mode Interface Config

Command Added in firmware release 1.0

History

no spanning-tree mst
This command sets the Path Cost or Port Priority for this port within the multiple spanning tree
instance, or in the common and internal spanning tree to the respective default values. If you
specify an mstid parameter that corresponds to an existing multiple spanning tree instance, you
are configuring that multiple spanning tree instance. If you specify 0 (defined as the default
CIST ID) as the mstid, you are configuring the common and internal spanning tree instance.

If the you specify cost, this command sets the path cost for this port within a multiple spanning
tree instance or the common and internal spanning tree instance, depending on the mstid
parameter, to the default value, i.e., a path cost value based on the Link Speed.

446 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

If you specify port-priority, this command sets the priority for this port within a specific
multiple spanning tree instance or the common and internal spanning tree instance, depending
on the mstid parameter, to the default value.

Default  Cost - auto

 port-priority - 128

Format no spanning-tree mst mstid {cost | port-priority}

Mode Interface Config

Command Added in firmware release 1.0

History

spanning-tree mst instance

This command adds a multiple spanning tree instance to the switch. The parameter mstid is a
number within a range of 1 to 4094, that corresponds to the new instance ID to be added. The
maximum number of multiple instances supported by the switch is 4.

Default none

Format spanning-tree mst instance mstid

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree mst instance

This command removes a multiple spanning tree instance from the switch and reallocates all
VLANs allocated to the deleted instance to the common and internal spanning tree. The

447 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

parameter mstid is a number that corresponds to the desired existing multiple spanning tree
instance to be removed.

Default none

Format no spanning-tree mst instance mstid

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree mst priority

This command sets the bridge priority for a specific multiple spanning tree instance. The
parameter mstid is a number that corresponds to the desired existing multiple spanning tree
instance. The mstid value is a number within a range of 0 to 4094.
If you specify 0 (defined as the default CIST ID) as the mstid, this command sets the Bridge
Priority parameter to a new value for the common and internal spanning tree. The bridge
priority value is a number within a range of 0 to 61440. The twelve least significant bits are
masked according to the 802.1s specification. This causes the priority to be rounded down to
the next lower valid priority.

Default 32768

Format spanning-tree mst priority mstid 0-61440

Mode Global Config

Command Added in firmware release 1.0

History

448 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no spanning-tree mst priority
This command sets the bridge priority for a specific multiple spanning tree instance to the
default value. The parameter mstid is a number that corresponds to the desired existing
multiple spanning tree instance.
If 0 (defined as the default CIST ID) is passed as the mstid, this command sets the Bridge
Priority parameter for the common and internal spanning tree to the default value.

Default 32768

Format no spanning-tree mst priority mstid

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree mst vlan

This command adds an association between a multiple spanning tree instance and one or more
VLANs so that the VLAN(s) are no longer associated with the common and internal spanning
tree. The parameter mstid is a multiple spanning tree instance identifier, in the range of 0 to
4094, that corresponds to the desired existing multiple spanning tree instance. The vlanid can
be specified as a single VLAN, a list, or a range of values. To specify a list of VLANs, enter a list
of VLAN IDs in the range 1 to 4093, each separated by a comma with no spaces in between. To
specify a range of VLANs, separate the beginning and ending VLAN ID with a dash (-). Spaces
and zeros are not permitted. The VLAN IDs may or may not exist in the system.

Default all VLANs are associated with the default instance of MST

Format spanning-tree mst vlan mstid vlanid

Mode Global Config

449 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no spanning-tree mst vlan

This command removes an association between a multiple spanning tree instance and one or
more VLANs so that the VLAN(s) are again associated with the common and internal spanning
tree.

Default all VLANs are associated with the default instance of MST

Format no spanning-tree mst vlan mstid vlanid

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree port mode

This command sets the Administrative Switch Port State for this port to enabled for use by
spanning tree.

Default enabled

Format spanning-tree port mode

Mode Interface Config

Command Added in firmware release 1.0

History

450 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no spanning-tree port mode
This command sets the Administrative Switch Port State for this port to disabled, disabling the
port for use by spanning tree.

Default enabled

Format no spanning-tree port mode

Mode Interface Config

Command Added in firmware release 1.0

History

spanning-tree port mode all

This command sets the Administrative Switch Port State for all ports to enabled.

Default enabled

Format spanning-tree port mode all

Mode Global Config

Command Added in firmware release 1.0

History

no spanning-tree port mode all

This command sets the Administrative Switch Port State for all ports to disabled.

Default enabled

Format no spanning-tree port mode all

451 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

spanning-tree tcnguard
This command is used to enable TCN Guard on the interface. When enabled, TCN Guard
restricts the interface from propagating any topology change information received through that
interface.

Default Disabled

Format spanning-tree tcnguard

Mode Interface Config

Command Added in firmware release 3.0

History

no spanning-tree tcnguard
This command resets the TCN Guard status of the port to the default value.

Format no spanning-tree port mode all

Mode Interface Config

spanning-tree guard loop

This command is used to configure a port for loop guard. When enabled, Loop Guard prevents
an interface from erroneously transitioning from blocking state to forwarding when the interface
stops receiving BPDUs. The port is marked as being in loop-inconsistent state. In this state, the
interface does not forward frames.

452 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default None

Format spanning-tree guard loop

Mode Interface Config

Command Added in firmware release 3.0

History

spanning-tree guard none

This command is used to disable root and loop guards and sets the guard to the default value.

Default None

Format spanning-tree guard none

Mode Interface Config

Command Added in firmware release 3.0

History

spanning-tree guard root

This command is used to configure a port for root guard. When enabled, Root Guard allows the
interface to discard any superior information it receives to protect the root of the device from
changing. The port gets put into discarding state and does not forward any frames.

Default None

Format spanning-tree guard root

Mode Interface Config

453 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 3.0
History

no spanning-tree guard
This command resets the Spanning Tree Guard to the default value.

Default None

Format no spanning-tree guard

Mode Interface Config

Command Added in firmware release 3.0

History

spanning-tree transmit
This command sets the Bridge Transmit Hold Count parameter.

Default 6

Format spanning-tree transmit hold-count

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

hold-count The Bridge Tx hold-count parameter. The value in an integer between 1 and 10.

454 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show spanning-tree
This command displays spanning tree settings for the common and internal spanning tree. The
following details are displayed.

Default N/A

Format show spanning-tree

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Bridge Priority Specifies the bridge priority for the Common and Internal Spanning tree (CST). The value lies
between 0 and 61440. It is displayed in multiples of 4096.

Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base MAC
address of the bridge.

Time Since Topology Time in seconds.

Change

Topology Change Number of times changed.

Count

Topology Change in Boolean value of the Topology Change parameter for the switch indicating if a topology
Progress change is in progress on any port assigned to the common and internal spanning tree.

455 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Designated Root The bridge identifier of the root bridge. It is made up from the bridge priority and the base
MAC address of the bridge.

Root Path Cost Value of the Root Path Cost parameter for the common and internal spanning tree.

Root Port Identifier Identifier of the port to access the Designated Root for the CST

Bridge Max Age Derived value.

Bridge Max Hops Bridge max-hops count for the device.

Root Port Bridge Derived value.

Forward Delay

Hello Time Configured value of the parameter for the CST.

Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs).

CST Regional Root Bridge Identifier of the CST Regional Root. It is made up using the bridge priority and the
base MAC address of the bridge.

Regional Root Path Path Cost to the CST Regional Root.

Cost

Associated FIDs List of forwarding database identifiers currently associated with this instance.

Associated VLANs List of VLAN IDs currently associated with this instance.

Example: The following shows example CLI display output for the command.
(DM1200E) #show spanning-tree

Bridge Priority................................ 32768

Bridge Identifier.............................. 80:00:00:10:18:48:FC:07
Time Since Topology Change..................... 8 day 3 hr 22 min 37 sec
Topology Change Count.......................... 0
Topology Change in progress.................... FALSE

456 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Designated Root................................ 80:00:00:10:18:48:FC:07
Root Path Cost................................. 0
Root Port Identifier........................... 00:00
Bridge Max Age................................. 20
Bridge Max Hops................................ 20
Bridge Tx Hold Count........................... 6
Bridge Forwarding Delay........................ 15
Hello Time..................................... 2
Bridge Hold Time............................... 6
CST Regional Root.............................. 80:00:00:10:18:48:FC:07
Regional Root Path Cost........................ 0

Associated FIDs Associated VLANs

--------------- ----------------

(DM1200E) #

show spanning-tree brief

This command displays spanning tree settings for the bridge. The following information appears.

Default N/A

Format show spanning-tree brief

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Bridge Priority Configured value.

Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and
the base MAC address of the bridge.

Bridge Max Age Configured value.

457 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Bridge Max Hops Bridge max-hops count for the device.

Bridge Hello Time Configured value.

Bridge Forward Delay Configured value.

Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs).

Example: The following shows example CLI display output for the command.
(DM1200E) #show spanning-tree brief

Bridge 32768
Priority
Bridge 80:00:00:10:18:48:FC:07
Identifier
Bridge Max 20
Age
Bridge Max 20
Hops
Bridge Hello 2
Time
Bridge 15
Forward
Delay
Bridge Hold 6
Time

(DM1200E) #

show spanning-tree interface

This command displays the settings and parameters for a specific switch port within the
common and internal spanning tree. The unit/slot/port is the desired switch port. Instead of
unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the LAG

interface. lag lag-intf-num can also be used to specify the LAG interface where lag-intf-num
is the LAG port number. The following details are displayed on execution of the command.

Default N/A

Format show spanning-tree interface unit/slot/port|lag lag-intf-num

458 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Hello Time Admin hello time for this port.

Port Mode Enabled or disabled.

BPDU Guard Effect Enabled or disabled.

Root Guard Enabled or disabled.

Loop Guard Enabled or disabled.

TCN Guard Enable or disable the propagation of received topology change notifications and topology
changes to other ports.

BPDU Filter Mode Enabled or disabled.

BPDU Flood Mode Enabled or disabled.

Auto Edge To enable or disable the feature that causes a port that has not seen a BPDU for edge delay
time, to become an edge port and transition to forwarding faster.

Port Up Time Since Time since port was reset, displayed in days, hours, minutes, and seconds.
Counters Last Cleared

459 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

STP BPDUs Spanning Tree Protocol Bridge Protocol Data Units sent.
Transmitted

STP BPDUs Received Spanning Tree Protocol Bridge Protocol Data Units received.

RSTP BPDUs Rapid Spanning Tree Protocol Bridge Protocol Data Units sent.
Transmitted

RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received.

MSTP BPDUs Multiple Spanning Tree Protocol Bridge Protocol Data Units sent.
Transmitted

MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received.

Example: The following shows example CLI display output for the command.
(DM1200E) >show spanning-tree interface 1/0/1

Hello Time..................................... Not Configured

Port Mode...................................... Enabled
Root Guard..................................... False
TCN Guard...................................... False
Auto Edge...................................... TRUE
Port Up Time Since Counters Last Cleared....... 9 day 3 hr 36 min 51 sec
STP BPDUs Transmitted.......................... 0
STP BPDUs Received............................. 0
RSTP BPDUs Transmitted......................... 0
RSTP BPDUs Received............................ 0
MSTP BPDUs Transmitted......................... 0
MSTP BPDUs Received............................ 0

show spanning-tree mst detailed

This command displays the detailed settings for an MST instance.

Default N/A

Format show spanning-tree mst detailed mstid

460 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

mstid A multiple spanning tree instance identifier. The value is 0–4094.

Example: The following shows example CLI display output for the command.
(DM1200E) >show spanning-tree mst detailed 0

MST Instance ID................................ 0

MST Bridge Priority............................ 32768
MST Bridge Identifier.......................... 80:00:00:10:18:48:FC:07
Time Since Topology Change..................... 8 day 3 hr 47 min 7 sec
Topology Change Count.......................... 0
Topology Change in progress.................... FALSE
Designated Root................................ 80:00:00:10:18:48:FC:07
Root Path Cost................................. 0
Root Port Identifier........................... 00:00

Associated FIDs Associated VLANs

--------------- ----------------

(DM1200E) >

show spanning-tree mst port detailed

This command displays the detailed settings and parameters for a specific switch port within a
particular multiple spanning tree instance. The parameter mstid is a number that corresponds
to the desired existing multiple spanning tree instance. The unit/slot/port is the desired
switch port. Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to
specify the LAG interface. lag lag-intf-num can also be used to specify the LAG interface
where lag-intf-num is the LAG port number.

461 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show spanning-tree mst port detailed mstid unit/slot/port|lag lag-intf-

num

Mode Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MST Instance ID The ID of the existing multiple spanning tree (MST) instance identifier. The value is 0–4094.

Port Identifier The port identifier for the specified port within the selected MST instance. It is made up from
the port priority and the interface number of the port.

Port Priority The priority for a particular port within the selected MST instance. The port priority is
displayed in multiples of 16.

Port Forwarding State Current spanning tree state of this port.

Port Role Each enabled MST Bridge Port receives a Port Role for each spanning tree. The port role is
one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master
Port or Disabled Port

Auto-Calculate Port Indicates whether auto calculation for port path cost is enabled.
Path Cost

Port Path Cost Configured value of the Internal Port Path Cost parameter.

462 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Designated Root The Identifier of the designated root for this port.

Root Path Cost The path cost to get to the root bridge for this instance. The root path cost is zero if the
bridge is the root bridge for that instance.

Designated Bridge Bridge Identifier of the bridge with the Designated Port.

Designated Port Port on the Designated Bridge that offers the lowest cost to the LAN.
Identifier

Loop Inconsistent The current loop inconsistent state of this port in this MST instance. When in loop inconsistent
State state, the port has failed to receive BPDUs while configured with loop guard enabled. Loop
inconsistent state maintains the port in a blocking state until a subsequent BPDU is received.

Transitions Into Loop The number of times this interface has transitioned into loop inconsistent state.
Inconsistent State

Transitions Out of The number of times this interface has transitioned out of loop inconsistent state.
Loop Inconsistent
State

If you specify 0 (defined as the default CIST ID) as the mstid, this command displays the
settings and parameters for a specific switch port within the common and internal spanning tree.
The unit/slot/port is the desired switch port. In this case, the following are displayed.

TERM DEFINITION

Port Identifier The port identifier for this port within the CST.

Port Priority The priority of the port within the CST.

Port Forwarding State The forwarding state of the port within the CST.

463 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Port Role The role of the specified interface within the CST.

Auto-Calculate Port Indicates whether auto calculation for port path cost is enabled or not (disabled).
Path Cost

Port Path Cost The configured path cost for the specified interface.

Auto-Calculate Indicates whether auto calculation for external port path cost is enabled.
External Port Path
Cost

External Port Path The cost to get to the root bridge of the CIST across the boundary of the region. This means
Cost that if the port is a boundary port for an MSTP region, then the external path cost is used.

Designated Root Identifier of the designated root for this port within the CST.

Root Path Cost The root path cost to the LAN by the port.

Designated Bridge The bridge containing the designated port.

Designated Port Port on the Designated Bridge that offers the lowest cost to the LAN.
Identifier

Topology Change Value of flag in next Configuration Bridge Protocol Data Unit (BPDU) transmission indicating if
Acknowledgement a topology change is in progress for this port.

Hello Time The hello time in use for this port.

Edge Port The configured value indicating if this port is an edge port.

Edge Port Status The derived value of the edge port status. True if operating as an edge port; false otherwise.

Point To Point MAC Derived value indicating if this port is part of a point to point link.
Status

464 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

CST Regional Root The regional root identifier in use for this port.

CST Internal Root The internal root path cost to the LAN by the designated external port.
Path Cost

Loop Inconsistent The current loop inconsistent state of this port in this MST instance. When in loop inconsistent
State state, the port has failed to receive BPDUs while configured with loop guard enabled. Loop
inconsistent state maintains the port in a blocking state until a subsequent BPDU is received.

Transitions Into Loop The number of times this interface has transitioned into loop inconsistent state.
Inconsistent State

Transitions Out of The number of times this interface has transitioned out of loop inconsistent state.
Loop Inconsistent
State

Example: The following shows example CLI display output for the command in slot/port
format.
(DM1200E) >show spanning-tree mst port detailed 0 1/0/1

Port Identifier................................ 80:01

Port Priority.................................. 128
Port Forwarding State.......................... Manual forwarding
Port Role...................................... Disabled
Auto-calculate Port Path Cost.................. Enabled
Port Path Cost................................. 0
Auto-Calculate External Port Path Cost......... Enabled
External Port Path Cost........................ 0
Designated Root................................ 80:00:00:04:DF:67:62:B1
Designated Port Cost........................... 0
Designated Bridge.............................. 80:00:00:04:DF:67:62:B1
Designated Port Identifier..................... 00:00
Topology Change Acknowledge.................... False
Hello Time..................................... 2
Edge Port...................................... False
Edge Port Status............................... False
Point to Point MAC Status...................... TRUE
CST Regional Root.............................. 80:00:00:04:DF:67:62:B1
CST Internal Root Path Cost.................... 0
Loop Inconsistent State........................ False
Transitions Into Loop Inconsistent State....... 0
Transitions Out Of Loop Inconsistent State..... 0

465 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show spanning-tree mst port summary
This command displays the settings of one or all ports within the specified multiple spanning
tree instance. The parameter mstid indicates a particular MST instance. The parameter
{unit/slot/port|all} indicates the desired switch port or all ports. Instead of unit/slot/port,

lag lag-intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-

num can also be used to specify the LAG interface where lag-intf-num is the LAG port number.

If you specify 0 (defined as the default CIST ID) as the mstid, the status summary displays for
one or all ports within the common and internal spanning tree.

Default N/A

Format show spanning-tree mst port summary mstid {unit/slot/port |lag lag-intf-
num| all}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MST Instance ID The MST instance associated with this port.

Interface unit/slot/port

STP Mode Indicates whether spanning tree is enabled or disabled on the port.

Type Currently not used.

STP State The forwarding state of the port in the specified spanning tree instance.

466 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Port Role The role of the specified port within the spanning tree.

Desc Indicates whether the port is in loop inconsistent state or not. This field is blank if the loop
guard feature is not available.

Example: The following shows example CLI display output for the command in slot/port
format.
(DM1200E) >show spanning-tree mst port summary 0 1/0/1

MST Instance ID................................ CST

STP STP Port

Interface Mode Type State Role Desc
--------- -------- ------- ----------------- ---------- ----------
1/0/1 Enabled Disabled Disabled

Example: The following shows example CLI display output for the command using a LAG
interface number.
(DM1200E) >show spanning-tree mst port summary 0 lag 1

MST Instance ID................................ CST

STP STP Port

Interface Mode Type State Role Desc
--------- -------- ------- ----------------- ---------- ----------
0/3/1 Enabled Disabled Disabled

show spanning-tree mst port summary active

This command displays settings for the ports within the specified multiple spanning tree
instance that are active links.

Default N/A

Format show spanning-tree mst port summary mstid active

Mode  Privileged EXEC

 User EXEC

467 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

MST Instance ID The ID of the existing MST instance.

Interface unit/slot/port

STP Mode Indicates whether spanning tree is enabled or disabled on the port.

Type Currently not used.

STP State The forwarding state of the port in the specified spanning tree instance.

Port Role The role of the specified port within the spanning tree.

Desc Indicates whether the port is in loop inconsistent state or not. This field is blank if the loop
guard feature is not available.

Example: The following shows example CLI display output for the command.
(DM1200E) >show spanning-tree mst port summary 0 active

STP STP Port

Interface Mode Type State Role Desc
--------- -------- ------- ----------------- ---------- ---------

show spanning-tree mst summary

This command displays summary information about all multiple spanning tree instances in the
switch. On execution, the following details are displayed.

Default N/A

468 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show spanning-tree mst summary

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MST Instance ID List List of multiple spanning trees IDs currently configured.

For each MSTID:  List of forwarding database identifiers associated with this instance.

 Associated FIDs  List of VLAN IDs associated with this instance.

 Associated
VLANs

show spanning-tree summary

This command displays spanning tree settings and parameters for the switch. The following
details are displayed on execution of the command.

Default N/A

Format show spanning-tree summary

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

469 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Spanning Tree Enabled or disabled.

Adminmode

Spanning Tree Version Version of 802.1 currently supported (IEEE 802.1s, IEEE 802.1w, or IEEE 802.1d) based
upon the Force Protocol Version parameter.

BPDU Guard Mode Enabled or disabled.

BPDU Filter Mode Enabled or disabled.

Configuration Name Identifier used to identify the configuration currently being used.

Configuration Revision Identifier used to identify the configuration currently being used.
Level

Configuration Digest Key A generated Key used in the exchange of the BPDUs.

Configuration Format Specifies the version of the configuration format being used in the exchange of BPDUs.
Selector The default value is zero.

MST Instances List of all multiple spanning tree instances configured on the switch.

Example: The following shows example CLI display output for the command.
(DM1200E) >show spanning-tree summary

Spanning Tree Adminmode........... Enabled

Spanning Tree Version............. IEEE 802.1s
BPDU Guard Mode................... Disabled
BPDU Filter Mode.................. Disabled
Configuration Name................ ****
Configuration Revision Level...... ****
Configuration Digest Key.......... ****
Configuration Format Selector..... 0
No MST instances to display.

470 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show spanning-tree vlan
This command displays spanning tree information per VLAN and also lists out the port roles and
states along with port cost. The vlan-list parameter is a list of VLANs or VLAN-ranges
separated by commas and with no embedded blank spaces. VLAN ranges are of the form “X-Y”
where X and Y are valid VLAN identifiers and X< Y. The vlanid corresponds to an existing VLAN
ID.

Default N/A

Format show spanning-tree vlan {vlanid | vlan-list}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) show spanning-tree vlan 1

VLAN 1
Spanning-tree enabled protocol rpvst
RootID Priority 32769
Address 00:0C:29:D3:80:EA
Cost 0
Port This switch is the root
Hello Time 2 Sec Max Age 15 sec Forward Delay 15 sec
BridgeID Priority 32769 (priority 32768 sys-id-ext 1)
Address 00:0C:29:D3:80:EA
Hello Time 2 Sec Max Age 15 sec Forward Delay 15 sec
Aging Time 300
Interface Role Sts Cost Prio.Nbr
--------- ---------- ------------- --------- --------
1/0/1 Designated Forwarding 3000 128.1
1/0/2 Designated Forwarding 3000 128.2
1/0/3 Disabled Disabled 3000 128.3
1/0/4 Designated Forwarding 3000 128.4
1/0/5 Designated Forwarding 3000 128.5
1/0/6 Designated Forwarding 3000 128.6
1/0/7 Designated Forwarding 3000 128.7
1/0/8 Designated Forwarding 3000 128.8
0/1/1 Disabled Disabled 3000 128.1026

471 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 0/1/2 Disabled Disabled 3000 128.1027
0/1/3 Disabled Disabled 3000 128.1028
0/1/4 Disabled Disabled 3000 128.1029
0/1/5 Disabled Disabled 3000 128.1030
0/1/6 Disabled Disabled 3000 128.1031

VLAN Commands
This section describes the commands you use to configure VLAN settings.

vlan database
This command gives you access to the VLAN Config mode, which allows you to configure VLAN
characteristics.

Default N/A

Format vlan database

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network mgmt_vlan
This command configures the Management VLAN ID.

Default 1

Format network mgmt_vlan 1-4093

Mode Privileged EXEC

Command Added in firmware release 1.0

History

472 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no network mgmt_vlan
This command sets the Management VLAN ID to the default.

Default 1

Format no network mgmt_vlan

Mode Privileged EXEC

Command Added in firmware release 1.0

History

vlan
This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification
number (ID 1 is reserved for the default VLAN). VLAN range is 2-4093.

Default N/A

Format vlan 2-4093

Mode VLAN Config

Command Added in firmware release 1.0

History

no vlan
This command deletes an existing VLAN. The ID is a valid VLAN identification number (ID 1 is
reserved for the default VLAN). The VLAN range is 2-4093.

Default N/A

473 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no vlan 2-4093

Mode VLAN Config

Command Added in firmware release 1.0

History

vlan acceptframe
This command sets the frame acceptance mode on an interface or range of interfaces. For
VLAN Only mode, untagged frames or priority frames received on this interface are discarded.
For Admit All mode, untagged frames or priority frames received on this interface are accepted
and assigned the value of the interface VLAN ID for this port. For admituntaggedonly mode,
only untagged frames are accepted on this interface; tagged frames are discarded. With any
option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN
Specification.

Default all

Format vlan acceptframe {admituntaggedonly | vlanonly | all}

Mode Interface Config

Command Added in firmware release 1.0

History

no vlan acceptframe
This command resets the frame acceptance mode for the interface or range of interfaces to the
default value.

Default all

474 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no vlan acceptframe

Mode Interface Config

Command Added in firmware release 1.0

History

vlan ingressfilter
This command enables ingress filtering on an interface or range of interfaces. If ingress filtering
is disabled, frames received with VLAN IDs that do not match the VLAN membership of the
receiving interface are admitted and forwarded to ports that are members of that VLAN.

Default disabled

Format vlan ingressfilter

Mode Interface Config

Command Added in firmware release 1.0

History

no vlan ingressfilter
This command disables ingress filtering. If ingress filtering is disabled, frames received with
VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and
forwarded to ports that are members of that VLAN.

Default disabled

Format no vlan ingressfilter

Mode Interface Config

475 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

vlan internal allocation

Use this command to configure which VLAN IDs to use for port-based routing interfaces. When
a port-based routing interface is created, an unused VLAN ID is assigned internally.

Default  Base =4903

 policy descending

Format vlan internal allocation {base vlan-id | policy ascending | policy

decending}

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

base vlan-id The first VLAN ID to be assigned to a port-based routing interface.

policy ascending VLAN IDs assigned to port-based routing interfaces start at the base and increase in value

policy descending VLAN IDs assigned to port-based routing interfaces start at the base and decrease in value

vlan makestatic
This command changes a dynamically created VLAN (created by GVRP registration) to a static
VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification
number. VLAN range is 2-4093.

476 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format vlan makestatic 2-4093

Mode VLAN Config

Command Added in firmware release 1.0

History

vlan name
This command changes the name of a VLAN. The name is an alphanumeric string of up to 32
characters, and the ID is a valid VLAN identification number. ID range is 1-4093.

Default  VLAN ID 1 - default

 other VLANS - blank string

Format vlan name 1-4093 name

Mode VLAN Config

Command Added in firmware release 1.0

History

no vlan name
This command sets the name of a VLAN to a blank string.

Default  VLAN ID 1 – default

 other VLANS - blank string

Format no vlan name 1-4093

477 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode VLAN Config

Command Added in firmware release 1.0

History

vlan participation
This command configures the degree of participation for a specific interface or range of
interfaces in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid
interface number.

Default auto

Format vlan participation {exclude | include | auto} 1-4093

Mode Interface Config

Command Added in firmware release 1.0

History

Participation options are:

OPTIONS DEFINITION

include The interface is always a member of this VLAN. This is equivalent to registration fixed.

exclude The interface is never a member of this VLAN. This is equivalent to registration forbidden.

auto The interface is dynamically registered in this VLAN by GVRP and will not participate in this
VLAN unless a join request is received on this interface. This is equivalent to registration
normal.

478 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

vlan participation all
This command configures the degree of participation for all interfaces in a VLAN. The ID is a
valid VLAN identification number.

Default auto

Format vlan participation all {exclude | include | auto} 1-4093

Mode Global Config

Command Added in firmware release 1.0

History

You can use the following participation options:

PARTICIPATION
OPTIONS DEFINITION

include The interface is always a member of this VLAN. This is equivalent to registration fixed.

exclude The interface is never a member of this VLAN. This is equivalent to registration forbidden.

auto The interface is dynamically registered in this VLAN by GVRP. The interface will not participate
in this VLAN unless a join request is received on this interface. This is equivalent to
registration normal.

vlan port acceptframe all

This command sets the frame acceptance mode for all interfaces.

Default all

Format vlan port acceptframe all {vlanonly | admituntaggedonly |all}

479 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

The modes are defined as follows:

MODE DEFINITION

VLAN Only mode Untagged frames or priority frames received on this interface are discarded.

Admit Untagged Only VLAN-tagged and priority tagged frames received on this interface are discarded.
mode

Admit All mode Untagged frames or priority frames received on this interface are accepted and assigned the
value of the interface VLAN ID for this port.

With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q
VLAN Specification.

no vlan port acceptframe all

This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All
mode, untagged frames or priority frames received on this interface are accepted and assigned
the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are
forwarded in accordance with the IEEE 802.1Q VLAN Specification.

Default all

Format no vlan port acceptframe all

Mode Global Config

480 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

vlan port ingressfilter all

This command enables ingress filtering for all ports. If ingress filtering is disabled, frames
received with VLAN IDs that do not match the VLAN membership of the receiving interface are
admitted and forwarded to ports that are members of that VLAN.

Default disabled

Format vlan port ingressfilter all

Mode Global Config

Command Added in firmware release 1.0

History

no vlan port ingressfilter all

This command disables ingress filtering for all ports. If ingress filtering is disabled, frames
received with VLAN IDs that do not match the VLAN membership of the receiving interface are
admitted and forwarded to ports that are members of that VLAN.

Default disabled

Format no vlan port ingressfilter all

Mode Global Config

Command Added in firmware release 1.0

History

481 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

vlan port pvid all
This command changes the VLAN ID for all interface.

Default 1

Format vlan port pvid all 1-4093

Mode Global Config

Command Added in firmware release 1.0

History

no vlan port pvid all

This command sets the VLAN ID for all interfaces to 1.

Default 1

Format no vlan port pvid all

Mode Global Config

Command Added in firmware release 1.0

History

vlan port tagging all

This command configures the tagging behavior for all interfaces in a VLAN to enabled. If
tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is
transmitted as untagged frames. The ID is a valid VLAN identification number.

Default disabled

482 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format vlan port tagging all 1-4093

Mode Global Config

Command Added in firmware release 1.0

History

no vlan port tagging all

This command configures the tagging behavior for all interfaces in a VLAN to disabled. If
tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN
identification number.

Default disabled

Format no vlan port tagging all

Mode Global Config

Command Added in firmware release 1.0

History

vlan pvid
This command changes the VLAN ID on an interface or range of interfaces.

Default 1

Format vlan pvid 1-4093

Mode Interface Config

Interface Range Config

483 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no vlan pvid
This command sets the VLAN ID on an interface or range of interfaces to 1.

Default 1

Format no vlan pvid

Mode Interface Config

Command Added in firmware release 1.0

History

vlan tagging
This command configures the tagging behavior for a specific interface or range of interfaces in
a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is
disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.

Default disabled

Format vlan tagging 1-4093

Mode  Interface Config

Command Added in firmware release 1.0

History

484 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no vlan tagging
This command configures the tagging behavior for a specific interface or range of interfaces in
a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a
valid VLAN identification number.

Default disabled

Format no vlan tagging 1-4093

Mode  Interface Config

Command Added in firmware release 1.0

History

Switch Port Commands

This section describes the commands used for switch port mode.

switchport mode
Use this command to configure the mode of a switch port as access, trunk or general.
In Trunk mode, the port becomes a member of all VLANs on switch unless specified in the
allowed list in the switchport trunk allowed vlan command. The PVID of the port is set to the
Native VLAN as specified in the switchport trunk allowed native vlan command. It means
that trunk ports accept both tagged and untagged packets, where untagged packets are
processed on the native VLAN and tagged packets are processed on the VLAN ID contained in
the packet. MAC learning is performed on both tagged and untagged packets. Tagged packets
received with a VLAN ID of which the port is not a member are discarded and MAC learning is
not performed. The Trunk port always transmit packets untagged on native VLAN.
In Access mode, the port becomes a member of only one VLAN. The port sends and receives
untagged traffic, and it can also receive tagged traffic. The ingress filtering is enabled on port.
It means that when the VLAN ID of received packet is not identical to Access VLAN ID, the
packet will be discarded.

485 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

In Gerenal mode, the user can perform custom configuration of VLAN membership, PVID,
tagging, ingress filtering, etc. This is legacy DATACOM behavior of switch port configuration.
Legacy DATACOM CLI commands are used to configure port in general mode.

Default General mode

Format switchport mode {access | trunk | general}

Mode Interface Config

Command Added in firmware release 3.0

History

no switchport mode
This command resets the switch port mode to its default value.

Default General

Format no switchport mode

Mode Interface Config

Command Added in firmware release 3.0

History

switchport mode trunk allowed vlan

Use this command to configure the list of allowed VLANs that can receive and send traffic on
this interface in tagged format in trunk mode. The default value is all.
The VLANs list can be modified using the add or remove options or replaced with another list
using the vlan-list, all or except options. If all is choosen, all VLANs are added to the list of
allowed vlans. The except option provides an exclusion list.

486 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Trunk ports accept tagged packets, where tagged packets are processed on the VLAN ID
contained in the packet, if this VLAN is in the allowed VLAN list. Tagged packets received with a
VLAN ID to which the port is not a member are discarded and MAC learning is not performed. If
a VLAN is added to the system after a port is set to the Trunk mode and it is in the allowed
VLAN list, this VLAN is assigned to this port automatically.

Default All

Format switchport trunk allowed vlan {vlan-list | all | {add vlan-list} |

{remove vlan-list} | {except vlan-list}}

Mode Interface Config

Command Added in firmware release 3.0

History

MODE DEFINITION

all Specifies all VLANs from 1 to 4093. This keyword is not allowed on commands that do not
permit all VLANs in the list to be set at the same time.

add Adds the defined list of VLANs to those currently set instead of replacing the list.

remove Removes the defined list of VLANs from those currently set instead of replacing the list. Valid
IDs are from 1 to 4093; extended-range VLAN IDs of the form X-Y or X,Y,Z are valid in this
command.

except Lists the VLANs that should be calculated by inverting the defined list of VLANs. (VLANs are
added except the ones specified).

vlan-list Either a single VLAN number from 1 to 4093 or a continuous range of VLANs described by
two VLAN numbers, the lesser one first, separated by a hyphen.

487 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no switchport trunk allowed vlan
This command resets the list of allowed VLANs on the trunk port to its default value.

Default All

Format no switchport trunk allowed vlan

Mode Interface Config

Command Added in firmware release 3.0

History

switchport trunk native vlan

Use this command to configure the Trunk port Native VLAN (PVID) parameter. Any ingress
untagged packets on the port are tagged with the value of Native VLAN. Native VLAN must be
in the allowed VLAN list for tagging of received untagged packets. Otherwise, untagged packets
are discarded. Packets marked with Native VLAN are transmitted untagged from Trunk port.
The default value is 1.

Default 1 (Default VLAN)

Format switchport trunk native vlan vlan-id

Mode Interface Config

Command Added in firmware release 3.0

History

no switchport trunk native vlan

This command reset the switch port trunk mode native VLAN to its default value.

488 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 1 (Default VLAN)

Format no switchport trunk native vlan

Mode Interface Config

Command Added in firmware release 3.0

History

switchport access vlan

Use this command to configure the VLAN on the Access port. Only one VLAN can be assigned to
the Access port. Access ports are members of VLAN 1 by default. Access ports may be assigned
to a VLAN other than VLAN 1. Removing the Access VLAN on the switch makes the Access port
a member of VLAN 1. Configuring an Access port to be a member of a VLAN that does not exist
results in an error and does not change the configuration.

Default 1 (Default VLAN)

Format switchport access vlan vlan-id

Mode Interface Config

Command Added in firmware release 3.0

History

no switchport access vlan

This command resets the switch port access mode VLAN to its default value.

Default 1 (Default VLAN)

Format no switchport access vlan

489 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 3.0

History

show interfaces switchport

Use this command to display the switchport status for all interfaces or to a specific interface.

Format show interfaces switchport [{access | trunk | general}] [unit/slot/port]

Mode Privileged Exec

Command Added in firmware release 3.0

History

Example: The following information displays examples of the command output:

(DM1200E) (Config)#show interfaces switchport 1/0/1

Port: 1/0/1
VLAN Membership Mode: Access
Access Mode VLAN: 2
General Mode PVID: 1 (default)
General Mode Ingress Filtering: Disabled
General Mode Acceptable Frame Type: Admit all
General Mode Dynamically Added VLANs:
General Mode Untagged VLANs:
General Mode Tagged VLANs:
General Mode Forbidden VLANs: 1
Trunking Mode Native VLAN: 1 (default)
Trunking Mode Native VLAN tagging: Disable
Trunking Mode VLANs Enabled: All
Protected Port: False

(DM1200E) (Config)#show interfaces switchport access 1/0/1

Intf PVID
--------- ----
1/0/1 2

490 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)#show interfaces switchport general 1/0/2

Intf PVID Ingress Acceptable Untagged Tagged Forbidden Dynamic

Filtering Frame Type Vlans Vlans Vlans Vlans
--------- ----- ---------- ---------- --------- --------- --------- ---------
1/0/2 1 Disabled Admit all 1

(DM1200E) (Config)#show interfaces switchport trunk 2/0/25

Intf PVID Allowed Vlans List

--------- ----- -------------------
2/0/25 1 10,20,30,40

Note: If the interface port number be suppressed, the command output will display the
switchport information of all interface ports of the device.

show vlan
This command displays information about the configured private VLANs, including primary and
secondary VLAN IDs, type (community, isolated, or primary) and the ports which belong to a
private VLAN.

Default N/A

Format show vlan {vlanid|private-vlan [type]}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Primary Primary VLAN identifier. The range of the VLAN ID is 1 to 4093.

491 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Secondary Secondary VLAN identifier.

Type Secondary VLAN type (community, isolated, or primary).

Ports Ports which are associated with a private VLAN.

VLAN ID The VLAN identifier (VID) associated with each VLAN. The range of the VLAN ID is 1 to 4093.

VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. VLAN ID 1 always has a name of
Default. This field is optional.

VLAN Type Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and
permanently defined), or Dynamic. A dynamic VLAN can be created by GVRP registration or
during the 802.1X authentication process (DOT1X) if a RADIUS-assigned VLAN does not exist
on the switch.

Interface unit/slot/port. It is possible to set the parameters for all ports by using the selectors on the
top line.

Current The degree of participation of this port in this VLAN. The permissible values are:

 Include - This port is always a member of this VLAN. This is equivalent to

registration fixed in the IEEE 802.1Q standard.

 Exclude - This port is never a member of this VLAN. This is equivalent to

registration forbidden in the IEEE 802.1Q standard.

 Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP.
The port will not participate in this VLAN unless a join request is received on this
port. This is equivalent to registration normal in the IEEE 802.1Q standard.

Configured The configured degree of participation of this port in this VLAN. The permissible values are:

 Include - This port is always a member of this VLAN. This is equivalent to

registration fixed in the IEEE 802.1Q standard.

 Exclude - This port is never a member of this VLAN. This is equivalent to

registration forbidden in the IEEE 802.1Q standard.

 Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP.
The port will not participate in this VLAN unless a join request is received on this
port. This is equivalent to registration normal in the IEEE 802.1Q standard.

492 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Tagging The tagging behavior for this port in this VLAN.

 Tagged - Transmit traffic for this VLAN as tagged frames.

 Untagged - Transmit traffic for this VLAN as untagged frames.

show vlan internal usage

This command displays information about the VLAN ID allocation on the switch.

Default N/A

Format show vlan internal usage

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Base VLAN ID Identifies the base VLAN ID for Internal allocation of VLANs to the routing interface.

Allocation policy Identifies whether the system allocates VLAN IDs in ascending or descending order.

show vlan brief

This command displays a list of all configured VLANs.

Default N/A

Format show vlan brief

493 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

VLAN ID There is a VLAN Identifier (vlanid) associated with each VLAN. The range of the VLAN ID is 1
to 4093.

VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. VLAN ID 1 always has a name of
“Default.” This field is optional.

VLAN Type Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and
permanently defined), or a Dynamic (one that is created by GVRP registration).

show vlan port

This command displays VLAN port information.

Default N/A

Format show vlan port {unit/slot/port | all}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

494 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Interface unit/slot/port It is possible to set the parameters for all ports by using the selectors on
the top line.

Port VLAN ID The VLAN ID that this port will assign to untagged frames or priority tagged frames received
on this port. The value must be for an existing VLAN. The factory default is 1.

Acceptable Frame The types of frames that may be received on this port. The options are 'VLAN only' and
Types 'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received on
this port are discarded. When set to 'Admit All', untagged frames or priority tagged frames
received on this port are accepted and assigned the value of the Port VLAN ID for this port.
With either option, VLAN tagged frames are forwarded in accordance to the 802.1Q VLAN
specification.

Ingress Filtering May be enabled or disabled. When enabled, the frame is discarded if this port is not a
member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is
identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID
specified for the port that received this frame. When disabled, all frames are forwarded in
accordance with the 802.1Q VLAN bridge specification. The factory default is disabled.

GVRP May be enabled or disabled.

Default Priority The 802.1p priority assigned to tagged packets arriving on the port.

Private VLAN Commands

This section describes the commands you use for private VLANs. Private VLANs provides Layer
2 isolation between ports that share the same broadcast domain. In other words, it allows a
VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains. The
ports participating in a private VLAN can be located anywhere in the Layer 2 network.

switchport private-vlan
This command defines a private-VLAN association for an isolated or community port or a
mapping for a promiscuous port.

495 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default no association

Format switchport private-vlan {host-association primary-vlan-id secondary-

vlan-id | mapping primary-vlan-id {add | remove} secondary-vlan-list}

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

host-association Defines the VLAN association for community or host ports.

mapping Defines the private VLAN mapping for promiscuous ports.

primary-vlan-id Primary VLAN ID of a private VLAN.

secondary-vlan-id Secondary (isolated or community) VLAN ID of a private VLAN.

add Associates the secondary VLAN with the primary one.

remove Deletes the secondary VLANs from the primary VLAN association.

secondary-vlan-list A list of secondary VLANs to be mapped to a primary VLAN.

no switchport private-vlan
This command removes the private-VLAN association or mapping from the port.

Default no association

496 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no switchport private-vlan {host-association|mapping}

Mode Interface Config

Command Added in firmware release 1.0

History

switchport mode private-vlan

This command configures a port as a promiscuous or host private VLAN port. Note that the
properties of each mode can be configured even when the switch is not in that mode. However,
they will only be applicable once the switch is in that particular mode.

Default general

Format switchport mode private-vlan {host|promiscuous}

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

host Configures an interface as a private VLAN host port. It can be either isolated or community
port depending on the secondary VLAN it is associated with.

promiscuous Configures an interface as a private VLAN promiscuous port. The promiscuous ports are
members of the primary VLAN.

497 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no switchport mode private-vlan
This command removes the private-VLAN association or mapping from the port.

Default general

Format no switchport mode private-vlan

Mode Interface Config

Command Added in firmware release 1.0

History

private-vlan
This command configures the private VLANs and configures the association between the
primary private VLAN and secondary VLANs.

Default N/A

Format private-vlan {association [add|remove] secondary-vlan-

list|community|isolated|primary}

Mode VLAN Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

association Associates the primary and secondary VLAN.

secondary-vlan-list A list of secondary VLANs to be mapped to a primary VLAN.

498 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

community Designates a VLAN as a community VLAN.

isolated Designates a VLAN as the isolated VLAN.

primary Designates a VLAN as the primary VLAN.

no private-vlan
This command restores normal VLAN configuration.

Default N/A

Format no private-vlan {association}

Mode VLAN Config

Command Added in firmware release 1.0

History

Voice VLAN Commands

This section describes the commands you use for Voice VLAN. Voice VLAN enables switch ports
to carry voice traffic with defined priority so as to enable separation of voice and data traffic
coming onto the port. The benefits of using Voice VLAN is to ensure that the sound quality of
an IP phone could be safeguarded from deteriorating when the data traffic on the port is high.
Also the inherent isolation provided by VLANs ensures that inter-VLAN traffic is under
management control and that network- attached clients cannot initiate a direct attack on voice
components. QoS-based on IEEE 802.1P class of service (CoS) uses classification and
scheduling to sent network traffic from the switch in a predictable manner. The system uses the
source MAC of the traffic traveling through the port to identify the IP phone data flow.

499 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

voice vlan (Global Config)
Use this command to enable the Voice VLAN capability on the switch.

Default disabled

Format voice vlan

Mode Global Config

Command Added in firmware release 1.0

History

no voice vlan (Global Config)

Use this command to disable the Voice VLAN capability on the switch.

Default disabled

Format no voice vlan

Mode Global Config

Command Added in firmware release 1.0

History

voice vlan (Interface Config)

Use this command to enable the Voice VLAN capability on the interface or range of interfaces.

Default disabled

Format voice vlan {vlanid id| dot1p priority | none | untagged}

Mode Interface Config

500 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

You can configure Voice VLAN in one of four different ways:

PARAMETER DESCRIPTION

vlan-id Configure the IP phone to forward all voice traffic through the specified VLAN. Valid VLAN
ID’s are from 1 to 4093 (the max supported by the platform).

dot1p Configure the IP phone to use 802.1p priority tagging for voice traffic and to use the default
native VLAN (VLAN 0) to carry all traffic. Valid priority range is 0 to 7.

none Allow the IP phone to use its own configuration to send untagged voice traffic.

untagged Configure the phone to send untagged voice traffic.

no voice vlan (Interface Config)

Use this command to disable the Voice VLAN capability on the interface.

Default disabled

Format no voice vlan

Mode Interface Config

Command Added in firmware release 1.0

History

501 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

voice vlan data priority
Use this command to either trust or untrust the data traffic arriving on the Voice VLAN interface
or range of interfaces being configured.

Default trust

Format voice vlan data priority {untrust | trust}

Mode Interface Config

Command Added in firmware release 1.0

History

show voice vlan

Default N/A

Format show voice vlan [interface {unit/slot/port | all}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

When the interface parameter is not specified, only the global mode of the Voice VLAN is
displayed.

TERM DEFINITION

Administrative Mode The Global Voice VLAN mode.

When the interface is specified:

502 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Voice VLAN Mode The admin mode of the Voice VLAN on the interface.

Voice VLAN ID The Voice VLAN ID

Voice VLAN Priority The do1p priority for the Voice VLAN on the port.

Voice VLAN Untagged The tagging option for the Voice VLAN traffic.

Voice VLAN CoS Override The Override option for the voice traffic arriving on the port.

Voice VLAN Status The operational status of Voice VLAN on the port.

Provisioning (IEEE 802.1p) Commands

This section describes the commands you use to configure provisioning (IEEE 802.1p), which
allows you to prioritize ports.

vlan port priority all

This command configures the port priority assigned for untagged packets for all ports presently
plugged into the device. The range for the priority is 0-7. Any subsequent per port configuration
will override this configuration setting.

Default 0

Format vlan port priority all priority

Mode Global Config

Command Added in firmware release 1.0

503 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

vlan priority
This command configures the default 802.1p port priority assigned for untagged packets for a
specific interface. The range for the priority is 0-7.

Default 0

Format vlan priority priority

Mode Interface Config

Command Added in firmware release 1.0

History

Flow Control

Note: Flow Control can only be configured globally for all ports.

When in asymmetric flow control mode, the switch responds to PAUSE frames received from a
peer by stopping packet transmission, but the switch does not initiate MAC control PAUSE
frames.
When you configure the switch in asymmetric flow control (or no flow control mode), the device
is placed in egress drop mode. Egress drop mode maximizes the throughput of the system at
the expense of packet loss in a heavily congested system, and this mode avoids head-of-line
blocking.

flowcontrol {symmetric|asymmetric}
Use this command to enable or disable the symmetric or asymmetric flow control on the switch.
Asymmetric here means that Tx Pause can never be enabled. Only Rx Pause can be enabled.

504 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default flow control is disabled

Format flowcontrol {symmetric|asymmetric}

Mode Global Config

Command Added in firmware release 1.0

History

no flowcontrol {symmetric|asymmetric}
Use the no form of this command to disable symmetric or asymmetric flow control.

Default disabled

Format no flowcontrol {symmetric|asymmetric}

Mode Global Config

Command Added in firmware release 1.0

History

show flowcontrol
Use this command to display the IEEE 802.3 Annex 31B flow control settings and status for a
specific interface or all interfaces. The command also displays 802.3 Tx and Rx pause counts.
Priority Flow Control frames counts are not displayed. If the port is enabled for priority flow
control, operational flow control status is displayed as Inactive. Operational flow control status
for stacking ports is always displayed as N/A.

Default N/A

505 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show flowcontrol [unit / slot / port]

Mode Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

Admin Flow Control The administrative mode of 802.3 flow control on the switch.

Intf The interface associated with the rest of the data in the row.

Flow Control Oper The operational mode of 802.3 flow control on the interface, which is either active or
inactive.

Flow Control Mode The administrative mode of 802.3 flow control on the interface.

RxPause The number of pause frames received by the interface.

TxPause The number of pause frames the interface has transmitted.

Example: The following shows example CLI display output for the command.
(DM1200E) #show flowcontrol
Admin Flow Control: Inactive
Flow Control Flow Control RxPause TxPause
Intf Oper Mode
------- ------------ ------------ -------- --------
1/0/1 Inactive Disable 0 0
1/0/2 Inactive Disable 0 0
1/0/3 Inactive Disable 0 0
1/0/4 Inactive Disable 0 0
1/0/5 Inactive Disable 0 0
1/0/6 Inactive Disable 0 0
1/0/7 Inactive Disable 0 0
1/0/8 Inactive Disable 0 0

506 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Protected Ports Commands
This section describes commands you use to configure and view protected ports on a switch.
Protected ports do not forward traffic to each other, even if they are on the same VLAN.
However, protected ports can forward traffic to all unprotected ports in their group.
Unprotected ports can forward traffic to both protected and unprotected ports. Ports are
unprotected by default.
If an interface is configured as a protected port, and you add that interface to a Port Channel or
Link Aggregation Group (LAG), the protected port status becomes operationally disabled on the
interface, and the interface follows the configuration of the LAG port. However, the protected
port configuration for the interface remains unchanged. Once the interface is no longer a
member of a LAG, the current configuration for that interface automatically becomes effective.

switchport protected (Global Config)

Use this command to create a protected port group. The groupid parameter identifies the set of
protected ports. Use the name name pair to assign a name to the protected port group. The
name can be up to 32 alphanumeric characters long, including blanks. The default is blank.

Note: Port protection occurs within a single switch. Protected port configuration does not
affect traffic between ports on two different switches. No traffic forwarding is possible between
two protected ports.

Default unprotected

Format switchport protected groupid name name

Mode Global Config

Command Added in firmware release 1.0

History

507 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no switchport protected (Global Config)
Use this command to remove a protected port group. The groupid parameter identifies the set
of protected ports. The name keyword specifies the name to remove from the group.

Default unprotected

Format no switchport protected groupid name

Mode Global Config

Command Added in firmware release 1.0

History

switchport protected (Interface Config)

Use this command to add an interface to a protected port group. The groupid parameter
identifies the set of protected ports to which this interface is assigned. You can only configure
an interface as protected in one group.

Note! Port protection occurs within a single switch. Protected port configuration does not
affect traffic between ports on two different switches. No traffic forwarding is possible between
two protected ports.

Default unprotected

Format switchport protected groupid

Mode Interface Config

Command Added in firmware release 1.0

History

508 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no switchport protected (Interface Config)
Use this command to configure a port as unprotected. The groupid parameter identifies the set
of protected ports to which this interface is assigned.

Default unprotected

Format no switchport protected groupid

Mode Interface Config

Command Added in firmware release 1.0

History

show switchport protected

This command displays the status of all the interfaces, including protected and unprotected
interfaces.

Default N/A

Format show switchport protected groupid

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

509 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Group ID The number that identifies the protected port group.

Name An optional name of the protected port group. The name can be up to 32 alphanumeric
characters long, including blanks. The default is blank.

List of Physical Ports List of ports, which are configured as protected for the group identified with groupid. If no
port is configured as protected for this group, this field is blank.

show interfaces switchport

This command displays the status of the interface (protected/unprotected) under the groupid.

Default N/A

Format show interfaces switchport unit/slot/port groupid

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Name A string associated with this group as a convenience. It can be up to 32 alphanumeric

characters long, including blanks. The default is blank. This field is optional.

Protected Indicates whether the interface is protected or not. It shows TRUE or FALSE. If the group is a
multiple groups then it shows TRUE in Group groupid.

510 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

GARP Commands
This section describes the commands you use to configure Generic Attribute Registration
Protocol (GARP) and view GARP status. The commands in this section affect both GARP VLAN
Registration Protocol (GVRP) and GARP Multicast Registration Protocol (GMRP). GARP is a
protocol that allows client stations to register with the switch for membership in VLANS (by
using GVMP) or multicast groups (by using GVMP).

show garp
This command displays GARP information.

Default N/A

Format show garp

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

GMRP Admin Mode The administrative mode of GARP Multicast Registration Protocol (GMRP) for the system.

GVRP Admin Mode The administrative mode of GARP VLAN Registration Protocol (GVRP) for the system.

GVRP Commands
This section describes the commands you use to configure and view GARP VLAN Registration
Protocol (GVRP) information. GVRP-enabled switches exchange VLAN configuration information,

511 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

which allows GVRP to provide dynamic VLAN creation on trunk ports and automatic VLAN
pruning.

Note! If GVRP is disabled, the system does not forward GVRP messages.

set gvrp adminmode

This command enables GVRP on the system.

Default disabled

Format set gvrp adminmode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no set gvrp adminmode

This command disables GVRP.

Default disabled

Format no set gvrp adminmode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

512 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

set gvrp interfacemode
This command enables GVRP on a single port (Interface Config mode), a range of ports
(Interface Range mode), or all ports (Global Config mode).

Default disabled

Format set gvrp interfacemode

Mode  Interface Config

 Interface Range

 Global Config

Command Added in firmware release 1.0

History

no set gvrp interfacemode

This command disables GVRP on a single port (Interface Config mode) or all ports (Global
Config mode). If GVRP is disabled, Join Time, Leave Time and Leave All Time have no effect.

Default disabled

Format no set gvrp interfacemode

Mode  Interface Config

 Global Config

Command Added in firmware release 1.0

History

513 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show gvrp configuration
This command displays Generic Attributes Registration Protocol (GARP) information for one or
all interfaces.

Default N/A

Format show gvrp configuration {unit/slot/port | all}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface unit/slot/port

Join Timer The interval between the transmission of GARP PDUs registering (or reregistering)
membership for an attribute. Current attributes are a VLAN or multicast group. There is an
instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 10 to
100 centiseconds (0.1 to 1.0 seconds). The factory default is 20 centiseconds (0.2 seconds).
The finest granularity of specification is one centisecond (0.01 seconds).

Leave Timer The period of time to wait after receiving an unregister request for an attribute before
deleting the attribute. Current attributes are a VLAN or multicast group. This may be
considered a buffer time for another station to assert registration for the same attribute in
order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-
GARP participant basis. Permissible values are 20 to 600 centiseconds (0.2 to 6.0 seconds).
The factory default is 60 centiseconds (0.6 seconds).

LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU
indicates that all registrations will shortly be deregistered. Participants will need to rejoin in
order to maintain registration. There is an instance of this timer on a per-Port, per-GARP
participant basis. The Leave All Period Timer is set to a random value in the range of
LeaveAllTime to 1.5*LeaveAllTime. Permissible values are 200 to 6000 centiseconds (2 to 60

514 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 seconds). The factory default is 1000 centiseconds (10 seconds).

Port GMRP Mode The GMRP administrative mode for the port, which is enabled or disabled (default). If this
parameter is disabled, Join Time, Leave Time and Leave All Time have no effect.

GMRP Commands
This section describes the commands you use to configure and view GARP Multicast
Registration Protocol (GMRP) information. Like IGMP snooping, GMRP helps control the flooding
of multicast packets. GMRP-enabled switches dynamically register and de-register group
membership information with the MAC networking devices attached to the same segment.
GMRP also allows group membership information to propagate across all networking devices in
the bridged LAN that support Extended Filtering Services.

Note! If GMRP is disabled, the system does not forward GMRP messages.

set gmrp adminmode

This command enables GARP Multicast Registration Protocol (GMRP) on the system.

Default disabled

Format set gmrp adminmode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no set gmrp adminmode

This command disables GARP Multicast Registration Protocol (GMRP) on the system.

515 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format no set gmrp adminmode

Mode Privileged EXEC

Command Added in firmware release 1.0

History

set gmrp interfacemode

This command enables GARP Multicast Registration Protocol on a single interface (Interface
Config mode), a range of interfaces, or all interfaces (Global Config mode). If an interface which
has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG),
GARP functionality is disabled on that interface. GARP functionality is subsequently re-enabled if
routing is disabled and port-channel (LAG) membership is removed from an interface that has
GARP enabled.

Default disabled

Format set gmrp interfacemode

Mode  Interface Config

 Global Config

Command Added in firmware release 1.0

History

no set gmrp interfacemode

This command disables GARP Multicast Registration Protocol on a single interface or all
interfaces. If an interface which has GARP enabled is enabled for routing or is enlisted as a
member of a port-channel (LAG), GARP functionality is disabled. GARP functionality is

516 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

subsequently re-enabled if routing is disabled and port-channel (LAG) membership is removed
from an interface that has GARP enabled.

Default disabled

Format no set gmrp interfacemode

Mode  Interface Config

 Global Config

Command Added in firmware release 1.0

History

show gmrp configuration

This command displays Generic Attributes Registration Protocol (GARP) information for one or
all interfaces.

Default N/A

Format show gmrp configuration {unit/slot/port | all}

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The unit/slot/port of the interface that this row in the table describes.

517 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Join Timer The interval between the transmission of GARP PDUs registering (or reregistering)
membership for an attribute. Current attributes are a VLAN or multicast group. There is an
instance of this timer on a per-port, per-GARP participant basis. Permissible values are 10 to
100 centiseconds (0.1 to 1.0 seconds). The factory default is 20 centiseconds (0.2 seconds).
The finest granularity of specification is 1 centisecond (0.01 seconds).

Leave Timer The period of time to wait after receiving an unregister request for an attribute before
deleting the attribute. Current attributes are a VLAN or multicast group. This may be
considered a buffer time for another station to assert registration for the same attribute in
order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-
GARP participant basis. Permissible values are 20 to 600 centiseconds (0.2 to 6.0 seconds).
The factory default is 60 centiseconds (0.6 seconds).

LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU
indicates that all registrations will shortly be deregistered. Participants will need to rejoin in
order to maintain registration. There is an instance of this timer on a per-Port, per-GARP
participant basis. The Leave All Period Timer is set to a random value in the range of
LeaveAllTime to 1.5*LeaveAllTime. Permissible values are 200 to 6000 centiseconds (2 to 60
seconds). The factory default is 1000 centiseconds (10 seconds).

Port GMRP Mode The GMRP administrative mode for the port. It may be enabled or disabled. If this parameter
is disabled, Join Time, Leave Time and Leave All Time have no effect.

show mac-address-table gmrp

This command displays the GMRP entries in the Multicast Forwarding Database (MFDB) table.

Default N/A

Format show mac-address-table gmrp

Mode Privileged EXEC

Command Added in firmware release 1.0

History

518 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

VLAN ID The VLAN in which the MAC Address is learned.

MAC Address A unicast MAC address for which the switch has forwarding and or filtering information. The
format is 6 two-digit hexadecimal numbers that are separated by colons, for example
01:23:45:67:89:AB.

Type The type of the entry. Static entries are those that are configured by the end user. Dynamic
entries are added to the table as a result of a learning process or protocol.

Description The text description of this multicast table entry.

Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:).

Port-Based Network Access Control Commands

This section describes the commands you use to configure port-based network access control
(IEEE 802.1X). Port-based network access control allows you to permit access to network
services only to and devices that are authorized and authenticated.

aaa authentication dot1x default

Use this command to configure the authentication method for port-based access to the switch.
The additional methods of authentication are used only if the previous method returns an error,
not if there is an authentication failure. The possible methods are as follows:

 ias. Uses the internal authentication server users database for authentication. This
method can be used in conjunction with any one of the existing methods like local,
radius, etc.
 local. Uses the local username database for authentication.
 none. Uses no authentication.
 radius. Uses the list of all RADIUS servers for authentication.

519 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format aaa authentication dot1x default {[ias]|[method1 [method2 [method3]]]}

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following is an example of the command.

DM1200E Routing) #
(DM1200E) #configure
(DM1200E) (Config)#aaa authentication dot1x default ias none
(DM1200E) (Config)#aaa authentication dot1x default ias local radius none

authorization network radius

This command enables the VLAN Assignment of Dot1x, allowing the usage of VLANs sent by
RADIUS.

Default N/A

Format authorization network radius

Mode Privileged EXEC

Command Added in firmware release 2.4

History

no authorization network radius

This command disables the VLAN Assignment of Dot1x, not allowing the usage of VLANs sent
by RADIUS.

Default N/A

520 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no authorization network radius

Mode Privileged EXEC

Command Added in firmware release 2.4

History

clear dot1x statistics

This command resets the 802.1X statistics for the specified port or for all ports.

Default N/A

Format clear dot1x statistics {unit/slot/port | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear dot1x authentication-history

This command clears the authentication history table captured during successful and
unsuccessful authentication on all interface or the specified interface.

Default N/A

Format clear dot1x authentication-history [unit/slot/port]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

521 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clear radius statistics
This command is used to clear all RADIUS statistics.

Default N/A

Format clear radius statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

dot1x eapolflood
Use this command to enable EAPOL flood support on the switch.

Default disabled

Format dot1x eapolflood

Mode Global Config

Command Added in firmware release 1.0

History

no dot1x eapolflood
This command disables EAPOL flooding on the switch.

Default disabled

Format no dot1x eapolflood

522 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

dot1x dynamic-vlan enable

This command enables the creation of VLANs sent by RADIUS if they have not yet been already
created in the equipment.

Default N/A

Format dot1x dynamic-vlan enable

Mode Privileged EXEC

Command Added in firmware release 2.4

History

no dot1x dynamic-vlan enable

This command disables the creation of VLANs sent by RADIUS.

Default N/A

Format no dot1x dynamic vlan enable

Mode Privileged EXEC

Command Added in firmware release 2.4

History

523 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dot1x guest-vlan
This command configures VLAN as guest vlan on an interface or a range of interfaces. The
command specifies an active VLAN as an IEEE 802.1X guest VLAN. The range is 1 to 4093.

Default disabled

Format dot1x guest-vlan vlan-id

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x guest-vlan
This command disables Guest VLAN on the interface.

Default disabled

Format no dot1x guest-vlan

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x initialize
This command begins the initialization sequence on the specified port. This command is only
valid if the control mode for the specified port is auto or mac-based. If the control mode is not
auto or mac-based, an error will be returned.

Default N/A

524 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format dot1x initialize unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

dot1x max-req
This command sets the maximum number of times the authenticator state machine on will
transmit an EAPOL EAP Request/Identity frame before timing out the supplicant. The count
value must be in the range 1 - 10.

Default 2

Format dot1x max-req count

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x max-req
This command sets the maximum number of times the authenticator state machine on this port
will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant.

Default 2

Format no dot1x max-req

Mode Interface Config

525 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

dot1x port-control
This command sets the authentication mode to use on the specified interface or range of
interfaces. Use the force-unauthorized parameter to specify that the authenticator PAE
unconditionally sets the controlled port to unauthorized. Use the force-authorized parameter
to specify that the authenticator PAE unconditionally sets the controlled port to authorized. Use
the auto parameter to specify that the authenticator PAE sets the controlled port mode to
reflect the outcome of the authentication exchanges between the supplicant, authenticator and
the authentication server.

Default auto

Format dot1x port-control {force-unauthorized | force-authorized | auto}

Mode Interface Config

no dot1x port-control
This command sets the 802.1X port control mode on the specified port to the default value.

Default auto

Format no dot1x port-control

Mode Interface Config

Command Added in firmware release 1.0

History

526 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dot1x port-control all
This command sets the authentication mode to use on all ports. Select force-unauthorized to
specify that the authenticator PAE unconditionally sets the controlled port to unauthorized.
Select force-authorized to specify that the authenticator PAE unconditionally sets the
controlled port to authorized. Select auto to specify that the authenticator PAE sets the
controlled port mode to reflect the outcome of the authentication exchanges between the
supplicant, authenticator and the authentication server.

Default auto

Format dot1x port-control all {force-unauthorized | force-authorized | auto}

Mode Global Config

Command Added in firmware release 1.0

History

no dot1x port-control all

This command sets the authentication mode on all ports to the default value.

Default auto

Format no dot1x port-control all

Mode Global Config

Command Added in firmware release 1.0

History

dot1x mac-auth-bypass
If the 802.1X mode on the interface is mac-based, you can optionally use this command to
enable MAC Authentication Bypass (MAB) on an interface. MAB is a supplemental authentication

527 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

mechanism that allows 802.1X unaware clients - such as printers, fax machines, and some IP
phones - to authenticate to the network using the client MAC address as an identifier.

Default disabled

Format dot1x mac-auth-bypass

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x mac-auth-bypass
This command sets the MAB mode on the ports to the default value.

Default disabled

Format no dot1x mac-auth-bypass

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x re-authenticate
This command begins the reauthentication sequence on the specified port. This command is
only valid if the control mode for the specified port is auto. If the control mode is not auto, an
error will be returned.

Default N/A

528 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format dot1x re-authenticate unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

dot1x re-authentication
This command enables reauthentication of the supplicant for the specified interface or range of
interfaces.

Default disabled

Format dot1x re-authentication

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x re-authentication
This command disables reauthentication of the supplicant for the specified port.

Default disabled

Format no dot1x re-authentication

Mode Interface Config

Command Added in firmware release 1.0

History

529 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dot1x system-auth-control
Use this command to enable the dot1x authentication support on the switch. While disabled,
the dot1x configuration is retained and can be changed, but is not activated.

Default disabled

Format dot1x system-auth-control

Mode Global Config

Command Added in firmware release 1.0

History

no dot1x system-auth-control
This command is used to disable the dot1x authentication support on the switch.

Default disabled

Format no dot1x system-auth-control

Mode Global Config

Command Added in firmware release 1.0

History

dot1x system-auth-control monitor

Use this command to enable the 802.1X monitor mode on the switch. The purpose of Monitor
mode is to help troubleshoot port-based authentication configuration issues without disrupting
network access for hosts connected to the switch. In Monitor mode, a host is granted network
access to an 802.1X-enabled port even if it fails the authentication process. The results of the
process are logged for diagnostic purposes.

530 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format dot1x system-auth-control monitor

Mode Global Config

Command Added in firmware release 1.0

History

no dot1x system-auth-control monitor

This command disables the 802.1X Monitor mode on the switch.

Default disabled

Format no dot1x system-auth-control monitor

Mode Global Config

Command Added in firmware release 1.0

History

dot1x timeout
This command sets the value, in seconds, of the timer used by the authenticator state machine
on an interface or range of interfaces. Depending on the token used and the value (in seconds)
passed, various timeout configurable parameters are set. The following tokens are supported:

TOKENS DEFINITION

guest-vlan-period The time, in seconds, for which the authenticator waits to see if any EAPOL packets are received
on a port before authorizing the port and placing the port in the guest vlan (if configured). The
guest vlan timer is only relevant when guest vlan has been configured on that specific port.

531 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

reauth-period The value, in seconds, of the timer used by the authenticator state machine on this port to
determine when reauthentication of the supplicant takes place. The reauth-period must be a
value in the range 1 - 65535.

quiet-period The value, in seconds, of the timer used by the authenticator state machine on this port to
define periods of time in which it will not attempt to acquire a supplicant. The quiet-period must
be a value in the range 0 - 65535.

tx-period The value, in seconds, of the timer used by the authenticator state machine on this port to
determine when to send an EAPOL EAP Request/Identity frame to the supplicant. The quiet-
period must be a value in the range 1 - 65535.

supp-timeout The value, in seconds, of the timer used by the authenticator state machine on this port to
timeout the supplicant. The supp-timeout must be a value in the range 1 - 65535.

server-timeout The value, in seconds, of the timer used by the authenticator state machine on this port to
timeout the authentication server. The supp-timeout must be a value in the range 1 - 65535.

Default guest-vlan-period: 90 seconds

reauth-period: 3600 seconds

quiet-period: 60 seconds

tx-period: 30 seconds

supp-timeout: 30 seconds

server-timeout: 30 seconds

Default The default value depends on the token.

Check out the values in the table above, last line - token=Default.

Format dot1x timeout {{guest-vlan-period seconds} |{reauth-period seconds} |

{quiet-period seconds} | {tx-period seconds} | {supp-timeout seconds} |
{server-timeout seconds}}

532 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x timeout
This command sets the value, in seconds, of the timer used by the authenticator state machine
on this port to the default values. Depending on the token used, the corresponding default
values are set.

Default Same as the default value of “dot1x timeout”. Depends on the token.

Check out the informations on the Tokens Table’s last line.

Format no dot1x timeout {guest-vlan-period | reauth-period | quiet-period | tx-

period | supp-timeout | server-timeout}

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x unauthenticated-vlan
Use this command to configure the unauthenticated VLAN associated with the specified
interface or range of interfaces. The unauthenticated VLAN ID can be a valid VLAN ID from 0 to
4093. The unauthenticated VLAN must be statically configured in the VLAN database to be
operational. By default, the unauthenticated VLAN is 0, i.e. invalid and not operational.

Default 0

Format dot1x unauthenticated-vlan vlan id

533 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x unauthenticated-vlan
This command resets the unauthenticated-vlan associated with the port to its default value.

Default 0

Format no dot1x unauthenticated-vlan

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x user
This command adds the specified user to the list of users with access to the specified port or all
ports. The user parameter must be a configured user.

Default no user

Format dot1x user user {unit/slot/port| all}

Mode Global Config

Command Added in firmware release 1.0

History

534 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no dot1x user
This command removes the user from the list of users with access to the specified port or all
ports.

Default no user

Format no dot1x user user {unit/slot/port | all}

Mode Global Config

Command Added in firmware release 1.0

History

show authentication methods

Use this command to display information about the authentication methods.

Default N/A

Format show authentication methods

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Authentication Login List The authentication login listname.

Method 1 The first method in the specified authentication login list, if any.

535 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Method 2 The second method in the specified authentication login list, if any.

Method 3 The third method in the specified authentication login list, if any.

Example: The following example displays the authentication configuration.

(DM1200E)#show authentication methods

Login Authentication Method Lists

---------------------------------
defaultList : local
networkList : local

Enable Authentication Method Lists

----------------------------------
enableList : enable none
enableNetList : enable deny

Line Login Method List Enable Method List

------- ----------------- ------------------
Console defaultList enableList
Telnet networkList enableNetList
SSH networkList enableNetList

HTTPS :local
HTTP :local
DOT1X :

show dot1x
This command is used to show a summary of the global dot1x configuration, summary
information of the dot1x configuration for a specified port or all ports, the detailed dot1x
configuration for a specified port and the dot1x statistics for a specified port - depending on the
tokens used.

Default N/A

Format show dot1x [{summary {unit/slot/port | all} | detail unit/slot/port|

statistics unit/slot/port]

Mode Privileged EXEC

536 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

If you do not use the optional paameters unit/slot/port or vlanid, the command displays
the global dot1x mode, the VLAN Assignment mode, and the Dynamic VLAN Creation mode.

TERM DEFINITION

Administrative Mode Indicates whether authentication control on the switch is enabled or disabled.

VLAN Assignment Indicates whether assignment of an authorized port to a RADIUS-assigned VLAN is allowed
Mode (enabled) or not (disabled).

Dynamic VLAN Indicates whether the switch can dynamically create a RADIUS-assigned VLAN if it does not
Creation Mode currently exist on the switch.

Monitor Mode Indicates whether the Dot1x Monitor mode on the switch is enabled or disabled.

If you use the optional parameter summary {unit/slot/port | all}, the dot1x configuration
for the specified port or all ports are displayed.

TERM DEFINITION

Interface The interface whose configuration is displayed.

Control Mode The configured control mode for this port. Possible values are force-unauthorized | force-
authorized | auto | authorized | unauthorized.

Operating Control The control mode under which this port is operating. Possible values are authorized |
Mode unauthorized.

537 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Reauthentication Indicates whether reauthentication is enabled on this port.
Enabled

Port Status Indicates whether the port is authorized or unauthorized. Possible values are authorized |
unauthorized.

Example: The following shows example CLI display output for the command show dot1x
summary 1/0/1.
Operating
Interface Control Mode Control Mode Port Status
--------- ------------ ------------ ------------
1/0/1 auto auto Authorized

If you use the optional parameter 'detail unit/slot/port', the detailed dot1x configuration for
the specified port is displayed.

TERM DEFINITION

Port The interface whose configuration is displayed.

Protocol Version The protocol version associated with this port. The only possible value is 1, corresponding to
the first version of the dot1x specification.

PAE Capabilities The port access entity (PAE) functionality of this port. Possible values are Authenticator or
Supplicant.

Control Mode The configured control mode for this port. Possible values are force-unauthorized | force-
authorized | auto .

Authenticator PAE Current state of the authenticator PAE state machine. Possible values are Initialize,
State Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuthorized,
and ForceUnauthorized.

Backend Current state of the backend authentication state machine. Possible values are Request,
Authentication State Response, Success, Fail, Timeout, Idle, and Initialize

538 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Quiet Period The timer used by the authenticator state machine on this port to define periods of time in
which it will not attempt to acquire a supplicant. The value is expressed in seconds and will
be in the range 0 and 65535.

Transmit Period The timer used by the authenticator state machine on the specified port to determine when
to send an EAPOL EAP Request/Identity frame to the supplicant. The value is expressed in
seconds and will be in the range of 1 and 65535.

Guest-VLAN ID The guest VLAN identifier configured on the interface.

Guest VLAN Period The time in seconds for which the authenticator waits before authorizing and placing the port
in the Guest VLAN, if no EAPOL packets are detected on that port.

Supplicant Timeout The timer used by the authenticator state machine on this port to timeout the supplicant. The
value is expressed in seconds and will be in the range of 1 and 65535.

Server Timeout The timer used by the authenticator on this port to timeout the authentication server. The
value is expressed in seconds and will be in the range of 1 and 65535.

Maximum Requests The maximum number of times the authenticator state machine on this port will retransmit an
EAPOL EAP Request/Identity before timing out the supplicant. The value will be in the range
of 1 and 10.

Configured MAB Mode The administrative mode of the MAC authentication bypass feature on the switch.

Operational MAB The operational mode of the MAC authentication bypass feature on the switch. MAB might be
Mode administratively enabled but not operational if the control mode is not MAC based.

Vlan-ID The VLAN assigned to the port by the radius server.

VLAN Assigned The reason the VLAN identified in the VLAN-assigned field has been assigned to the port.
Reason Possible values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not Assigned.
When the VLAN Assigned Reason is Not Assigned, it means that the port has not been
assigned to any VLAN by dot1x..

Reauthentication The timer used by the authenticator state machine on this port to determine when
Period reauthentication of the supplicant takes place. The value is expressed in seconds and will be

539 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 in the range of 1 and 65535.

Reauthentication Indicates if reauthentication is enabled on this port. Possible values are ‘True” or “False”.
Enabled

Key Transmission Indicates if the key is transmitted to the supplicant for the specified port. Possible values are
Enabled True or False.

EAPOL Flood Mode Indicates whether the EAPOL flood support is enabled on the switch. Possible values are True
Enabled or False.

Control Direction The control direction for the specified port or ports. Possible values are both or in.

Maximum Users The maximum number of clients that can get authenticated on the port in the MAC-based
dot1x authentication mode.

Unauthenticated VLAN Indicates the unauthenticated VLAN configured for this port.
ID

Session Timeout Indicates the time for which the given session is valid. The time period in seconds is returned
by the RADIUS server on authentication of the port.

Session Termination This value indicates the action to be taken once the session timeout expires. Possible values
Action are Default, Radius-Request. If the value is Default, the session is terminated the port goes
into unauthorized state. If the value is Radius-Request, then a reauthentication of the client
authenticated on the port is performed.

Example: The following shows example CLI display output for the command.
(DM1200E) #show dot1x detail 1/0/3

Port........................................... 1/0/3
Protocol Version............................... 1
PAE Capabilities............................... Authenticator
Control Mode................................... auto
Authenticator PAE State........................ Initialize
Backend Authentication State................... Initialize
Quiet Period (secs)............................ 60
Transmit Period (secs)......................... 30
Guest VLAN ID.................................. 0
Guest VLAN Period (secs)....................... 90
Supplicant Timeout (secs)...................... 30

540 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Server Timeout (secs).......................... 30
Maximum Requests............................... 2
Configured MAB Mode............................ Enabled
Operational MAB Mode........................... Disabled
VLAN Id........................................ 0
VLAN Assigned Reason........................... Not Assigned
Reauthentication Period (secs)................. 3600
Reauthentication Enabled....................... FALSE
Key Transmission Enabled....................... FALSE
EAPOL flood Mode Enabled....................... FALSE
Control Direction.............................. both
Maximum Users.................................. 16
Unauthenticated VLAN ID........................ 0
Session Timeout................................ 0
Session Termination Action..................... Default

If you use the optional parameter statistics unit/slot/port, the following dot1x statistics for
the specified port appear.

TERM DEFINITION

Port The interface whose statistics are displayed.

EAPOL Frames The number of valid EAPOL frames of any type that have been received by this authenticator.
Received

EAPOL Frames The number of EAPOL frames of any type that have been transmitted by this authenticator.
Transmitted

EAPOL Start Frames The number of EAPOL start frames that have been received by this authenticator.
Received

EAPOL Logoff Frames The number of EAPOL logoff frames that have been received by this authenticator.
Received

Last EAPOL Frame The protocol version number carried in the most recently received EAPOL frame.
Version

Last EAPOL Frame The source MAC address carried in the most recently received EAPOL frame.
Source

541 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

EAP Response/Id The number of EAP response/identity frames that have been received by this authenticator.
Frames Received

EAP Response Frames The number of valid EAP response frames (other than resp/id frames) that have been
Received received by this authenticator.

EAP Request/Id The number of EAP request/identity frames that have been transmitted by this authenticator.
Frames Transmitted

EAP Request Frames The number of EAP request frames (other than request/identity frames) that have been
Transmitted transmitted by this authenticator.

Invalid EAPOL Frames The number of EAPOL frames that have been received by this authenticator in which the
Received frame type is not recognized.

EAP Length Error The number of EAPOL frames that have been received by this authenticator in which the
Frames Received frame type is not recognized.

show dot1x authentication-history

This command displays 802.1X authentication events and information during successful and
unsuccessful Dot1x authentication process for all interfaces or the specified interface. Use the
optional keywords to display only failure authentication events in summary or in detail.

Default N/A

Format show dot1x authentication-history {unit/slot/port | all} [failed-auth-

only] [detail]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

542 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Time Stamp The exact time at which the event occurs.

Interface Physical Port on which the event occurs.

Mac-Address The supplicant/client MAC address.

VLAN assigned The VLAN assigned to the client/port on authentication.

VLAN assigned Reason The type of VLAN ID assigned, which can be Guest VLAN, Unauth, Default, RADIUS Assigned,
or Montior Mode VLAN ID.

Auth Status The authentication status.

Reason The actual reason behind the successful or failed authentication.

show dot1x clients

This command displays 802.1X client information. This command also displays information
about the number of clients that are authenticated using Monitor mode and using 802.1X.

Default N/A

Format show dot1x clients {unit/slot/port | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

543 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Clients Authenticated Indicates the number of the Dot1x clients authenticated using Monitor mode.
using Monitor Mode

Clients Authenticated Indicates the number of Dot1x clients authenticated using 802.1x authentication process.
using Dot1x

Logical Interface The logical port number associated with a client.

Interface The physical port to which the supplicant is associated.

User Name The user name used by the client to authenticate to the server.

Supplicant MAC The supplicant device MAC address.

Address

Session Time The time since the supplicant is logged on.

Filter ID Identifies the Filter ID returned by the RADIUS server when the client was authenticated.
This is a configured DiffServ policy name on the switch.

VLAN ID The VLAN assigned to the port.

VLAN Assigned The reason the VLAN identified in the VLAN ID field has been assigned to the port. Possible
values are RADIUS, Unauthenticated VLAN, Monitor Mode, or Default. When the VLAN
Assigned reason is Default, it means that the VLAN was assigned to the port because the P-
VID of the port was that VLAN ID.

Session Timeout This value indicates the time for which the given session is valid. The time period in seconds
is returned by the RADIUS server on authentication of the port.

Session Termination This value indicates the action to be taken once the session timeout expires. Possible values
Action are Default and Radius-Request. If the value is Default, the session is terminated and client
details are cleared. If the value is Radius-Request, then a reauthentication of the client is

544 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 performed.

show dot1x users

This command displays 802.1X port security user information for locally configured users.

Default N/A

Format show dot1x users unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Users Users configured locally to have access to the specified port.

802.1X Supplicant Commands

DM1200E supports 802.1X (“dot1x”) supplicant functionality on point-to-point ports. The
administrator can configure the user name and password used in authentication and capabilities
of the supplicant port.

dot1x pae
This command sets the port’s dot1x role. The port can serve as either a supplicant or an
authenticator.

Default authenticator

545 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format dot1x pae {supplicant | authenticator}

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x supplicant port-control

This command sets the ports authorization state (Authorized or Unauthorized) either manually
or by setting the port to auto-authorize upon startup. By default all the ports are authenticators.
If the port’s attribute needs to be moved from <authenticator to supplicant> or <supplicant to
authenticator>, use this command.

Default auto

Format dot1x supplicant port-control {auto | force-authorized |

force_unauthorized}

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

auto The port is in the Unauthorized state until it presents its user name and password credentials
to an authenticator. If the authenticator authorizes the port, then it is placed in the
Authorized state.

force-authorized Sets the authorization state of the port to Authorized, bypassing the authentication process.

546 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

force-unauthorized Sets the authorization state of the port to Unauthorized, bypassing the authentication
process.

no dot1x supplicant port-control

This command sets the port-control mode to the default, auto.

Default auto

Format no dot1x supplicant port-control

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x supplicant max-start

This command configures the number of attempts that the supplicant makes to find the
authenticator before the supplicant assumes that there is no authenticator.

Default 3

Format dot1x supplicant max-start <1-10>

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x supplicant max-start

This command sets the max-start value to the default.

547 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 3

Format no dot1x supplicant max-start

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x supplicant timeout start-period

This command configures the start period timer interval to wait for the EAP identity request
from the authenticator.

Default 30 seconds

Format dot1x supplicant timeout start-period <1-65535 seconds>

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x supplicant timeout start-period

This command sets the start-period value to the default.

Default 30 seconds

Format no dot1x supplicant timeout start-period

Mode Interface Config

548 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

dot1x supplicant timeout held-period

This command configures the held period timer interval to wait for the next authentication on
previous authentication fail.

Default 60 seconds

Format dot1x supplicant timeout held-period <1-65535 seconds>

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x supplicant timeout held-period

This command sets the held-period value to the default value.

Default 60 seconds

Format no dot1x supplicant timeout held-period

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x supplicant timeout auth-period

This command configures the authentication period timer interval to wait for the next EAP
request challenge from the authenticator.

549 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 30 seconds

Format dot1x supplicant timeout auth-period <1-65535 seconds>

Mode Interface Config

Command Added in firmware release 1.0

History

no dot1x supplicant timeout auth-period

This command sets the auth-period value to the default value.

Default 30 seconds

Format no dot1x supplicant timeout auth-period

Mode Interface Config

Command Added in firmware release 1.0

History

dot1x supplicant user

Use this command to map the given user to the port.

Default no associated user

Format dot1x supplicant user

Mode Interface Config

550 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show dot1x statistics

This command displays the dot1x port statistics in detail.

Default N/A

Format show dot1x statistics slot/port

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

EAPOL Frames Received Displays the number of valid EAPOL frames received on the port.

EAPOL Frames Displays the number of EAPOL frames transmitted via the port.
Transmitted

EAPOL Start Frames Displays the number of EAPOL Start frames transmitted via the port.
Transmitted

EAPOL Logoff Frames Displays the number of EAPOL Log off frames that have been received on the port.
Received

EAP Resp/ID Frames Displays the number of EAP Respond ID frames that have been received on the port.
Received

551 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

EAP Response Frames Displays the number of valid EAP Respond frames received on the port.
Received

EAP Req/ID Frames Displays the number of EAP Requested ID frames transmitted via the port.
Transmitted

EAP Req Frames Displays the number of EAP Request frames transmitted via the port.
Transmitted

Invalid EAPOL Frames Displays the number of unrecognized EAPOL frames received on this port.
Received

EAP Length Error Frames Displays the number of EAPOL frames with an invalid Packet Body Length received on
Received this port.

Last EAPOL Frames Displays the protocol version number attached to the most recently received EAPOL
Version frame.

Last EAPOL Frames Source Displays the source MAC Address attached to the most recently received EAPOL frame.

Example: The following shows example CLI display output for the command.
(DM1200E) #show dot1x statistics 1/0/1
Port........................................... 1/0/1
EAPOL Frames Received.......................... 0
EAPOL Frames Transmitted....................... 0
EAPOL Start Frames Transmitted................. 3
EAPOL Logoff Frames Received................... 0
EAP Resp/Id frames transmitted................. 0
EAP Response frames transmitted................ 0
EAP Req/Id frames transmitted.................. 0
EAP Req frames transmitted..................... 0
Invalid EAPOL frames received.................. 0
EAP length error frames received............... 0
Last EAPOL Frame Version....................... 0
Last EAPOL Frame Source........................ 00:00:00:00:02:01

Storm-Control Commands
This section describes commands you use to configure storm-control and view storm-control
configuration information. A traffic storm is a condition that occurs when incoming packets flood

552 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

the LAN, which creates performance degradation in the network. The Storm-Control feature
protects against this condition.
DM1200E provides broadcast, multicast, and unicast story recovery for individual interfaces.
Unicast Storm-Control protects against traffic whose MAC addresses are not known by the
system. For broadcast, multicast, and unicast storm-control, if the rate of traffic ingressing on
an interface increases beyond the configured threshold for that type, the traffic is dropped.
To configure storm-control, you will enable the feature for all interfaces or for individual
interfaces, and you will set the threshold (storm-control level) beyond which the broadcast,
multicast, or unicast traffic will be dropped. The Storm-Control feature allows you to limit the
rate of specific types of packets through the switch on a per-port, per-type, basis.
Configuring a storm-control level also enables that form of storm-control. Disabling a storm-
control level (using the “no” version of the command) sets the storm-control level back to the
default value and disables that form of storm-control. Using the “no” version of the “storm-
control” command (not stating a “level”) disables that form of storm-control but maintains the
configured “level” (to be active the next time that form of storm-control is enabled.)

Note! The actual rate of ingress traffic required to activate storm-control is based on the size
of incoming packets and the hard-coded average packet size of 512 bytes - used to calculate a
packet-per-second (pps) rate - as the forwarding-plane requires pps versus an absolute rate
kbps. For example, if the configured limit is 10%, this is converted to ~25000 pps, and this pps
limit is set in forwarding plane (hardware). You get the approximate desired output when
512bytes packets are used.

storm-control broadcast
Use this command to enable broadcast storm recovery mode for all interfaces (Global Config
mode) or one or more interfaces (Interface Config mode). If the mode is enabled, broadcast
storm recovery is active and, if the rate of L2 broadcast traffic ingressing on an interface
increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of
broadcast traffic will be limited to the configured threshold.

Default disabled

553 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format storm-control broadcast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control broadcast
Use this command to disable broadcast storm recovery mode for all interfaces (Global Config
mode) or one or more interfaces (Interface Config mode).

Default disabled

Format no storm-control broadcast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control broadcast level

Use this command to configure the broadcast storm recovery threshold for all interfaces (Global
Config mode) or one or more interfaces (Interface Config mode) as a percentage of link speed
and enable broadcast storm recovery. If the mode is enabled, broadcast storm recovery is
active, and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the
configured threshold, the traffic is dropped. Therefore, the rate of broadcast traffic is limited to
the configured threshold.

Default 5

554 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format storm-control broadcast level 0-100

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control broadcast level

This command sets the broadcast storm recovery threshold to the default value for all
interfaces (Global Config mode) or one or more interfaces (Interface Config mode) and disables
broadcast storm recovery.

Default 5

Format no storm-control broadcast level

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control broadcast rate

Use this command to configure the broadcast storm recovery threshold for all interfaces (Global
Config mode) or one or more interfaces (Interface Config mode) in packets per second. If the
mode is enabled, broadcast storm recovery is active, and if the rate of L2 broadcast traffic
ingressing on an interface increases beyond the configured threshold, the traffic is dropped.
Therefore, the rate of broadcast traffic is limited to the configured threshold.

555 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0

Format storm-control broadcast rate 0-33554431

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control broadcast rate

This command sets the broadcast storm recovery threshold to the default value for all
interfaces (Global Config mode) or one or more interfaces (Interface Config mode) and disables
broadcast storm recovery.

Default 0

Format no storm-control broadcast rate

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control multicast
This command enables multicast storm recovery mode for all interfaces (Global Config mode) or
one or more interfaces (Interface Config mode). If the mode is enabled, multicast storm
recovery is active, and if the rate of L2 multicast traffic ingressing on an interface increases
beyond the configured threshold, the traffic will be dropped. Therefore, the rate of multicast
traffic will be limited to the configured threshold.

556 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format storm-control multicast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control multicast
This command disables multicast storm recovery mode for all interfaces (Global Config mode)
or one or more interfaces (Interface Config mode).

Default disabled

Format no storm-control multicast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control multicast level

This command configures the multicast storm recovery threshold for all interfaces (Global
Config mode) or one or more interfaces (Interface Config mode) as a percentage of link speed
and enables multicast storm recovery mode. If the mode is enabled, multicast storm recovery is
active, and if the rate of L2 multicast traffic ingressing on an interface increases beyond the
configured threshold, the traffic will be dropped. Therefore, the rate of multicast traffic will be
limited to the configured threshold.

557 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 5

Format storm-control multicast level 0-100

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control multicast level

This command sets the multicast storm recovery threshold to the default value for all interfaces
(Global Config mode) or one or more interfaces (Interface Config mode) and disables multicast
storm recovery.

Default 5

Format no storm-control multicast level 0-100

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control multicast rate

Use this command to configure the multicast storm recovery threshold for all interfaces (Global
Config mode) or one or more interfaces (Interface Config mode) in packets per second. If the
mode is enabled, multicast storm recovery is active, and if the rate of L2 broadcast traffic
ingressing on an interface increases beyond the configured threshold, the traffic is dropped.
Therefore, the rate of multicast traffic is limited to the configured threshold.

558 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0

Format storm-control multicast rate 0-33554431

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control multicast rate

This command sets the multicast storm recovery threshold to the default value for all interfaces
(Global Config mode) or one or more interfaces (Interface Config mode) and disables multicast
storm recovery.

Default 0

Format no storm-control multicast rate

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control unicast
This command enables unicast storm recovery mode for all interfaces (Global Config mode) or
one or more interfaces (Interface Config mode). If the mode is enabled, unicast storm recovery
is active, and if the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on
an interface increases beyond the configured threshold, the traffic will be dropped. Therefore,
the rate of unknown unicast traffic will be limited to the configured threshold.

559 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format storm-control unicast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control unicast
This command disables unicast storm recovery mode for all interfaces (Global Config mode) or
one or more interfaces (Interface Config mode).

Default disabled

Format no storm-control unicast

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control unicast level

This command configures the unicast storm recovery threshold for all interfaces (Global Config
mode) or one or more interfaces (Interface Config mode) as a percentage of link speed, and
enables unicast storm recovery. If the mode is enabled, unicast storm recovery is active, and if
the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface
increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of

560 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

unknown unicast traffic will be limited to the configured threshold. This command also enables
unicast storm recovery mode for an interface.

Default 5

Format storm-control unicast level 0-100

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control unicast level

This command sets the unicast storm recovery threshold to the default value for all interfaces
(Global Config mode) or one or more interfaces (Interface Config mode) and disables unicast
storm recovery.

Default 5

Format no storm-control unicast level

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

storm-control unicast rate

Use this command to configure the unicast storm recovery threshold for all interfaces (Global
Config mode) or one or more interfaces (Interface Config mode) in packets per second. If the
mode is enabled, unicast storm recovery is active, and if the rate of L2 broadcast traffic

561 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ingressing on an interface increases beyond the configured threshold, the traffic is dropped.
Therefore, the rate of unicast traffic is limited to the configured threshold.

Default 0

Format storm-control unicast rate 0-33554431

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no storm-control unicast rate

This command sets the unicast storm recovery threshold to the default value for all interfaces
(Global Config mode) or one or more interfaces (Interface Config mode) and disables unicast
storm recovery.

Default 0

Format no storm-control unicast rate

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

show storm-control
This command displays switch configuration information. If you do not use any of the optional
parameters, this command displays global storm control configuration parameters:

562 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Broadcast Storm Recovery Mode may be enabled or disabled. The factory default is
disabled.
Use the all keyword to display the per-port configuration parameters for all interfaces, or
specify the unit/slot/port to display information about a specific interface.

Default N/A

Format show storm-control [all | unit/slot/port]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DEFINITION

Bcast Mode Shows whether the broadcast storm control mode is enabled or disabled. The factory default
is disabled.

Bcast Level The broadcast storm control level.

Mcast Mode Shows whether the multicast storm control mode is enabled or disabled.

Mcast Level The multicast storm control level.

Ucast Mode Shows whether the Unknown Unicast or DLF (Destination Lookup Failure) storm control mode
is enabled or disabled.

Ucast Level The Unknown Unicast or DLF (Destination Lookup Failure) storm control level.

Example: The following shows example CLI display output for the command.
(DM1200E) #show storm-control

563 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Broadcast Storm Control Mode................... Disable
Broadcast Storm Control Level.................. 5 percent
Multicast Storm Control Mode................... Disable
Multicast Storm Control Level.................. 5 percent
Unicast Storm Control Mode..................... Disable
Unicast Storm Control Level.................... 5 percent

Example: The following shows example CLI display output for the command.
(DM1200E) #show storm-control 1/0/1

Bcast Bcast Mcast Mcast Ucast Ucast

Intf Mode Level Mode Level Mode Level
------ ------- -------- ------- -------- ------- --------
1/0/1 Disable 5% Disable 5% Disable 5%

Example: The following shows an example of part of the CLI display output for the command.
(DM1200E) #show storm-control all

Bcast Bcast Mcast Mcast Ucast Ucast

Intf Mode Level Mode Level Mode Level
------ ------- -------- ------- -------- ------- --------
1/0/1 Disable 5% Disable 5% Disable 5%
1/0/2 Disable 5% Disable 5% Disable 5%
1/0/3 Disable 5% Disable 5% Disable 5%
1/0/4 Disable 5% Disable 5% Disable 5%
1/0/5 Disable 5% Disable 5% Disable 5%
1/0/6 Disable 5% Disable 5% Disable 5%
1/0/7 Disable 5% Disable 5% Disable 5%
1/0/8 Disable 5% Disable 5% Disable 5%
1/0/9 Disable 5% Disable 5% Disable 5%
1/0/10 Disable 5% Disable 5% Disable 5%
1/0/11 Disable 5% Disable 5% Disable 5%
1/0/12 Disable 5% Disable 5% Disable 5%
1/0/13 Disable 5% Disable 5% Disable 5%
1/0/14 Disable 5% Disable 5% Disable 5%
1/0/15 Disable 5% Disable 5% Disable 5%
1/0/16 Disable 5% Disable 5% Disable 5%
1/0/17 Disable 5% Disable 5% Disable 5%
1/0/18 Disable 5% Disable 5% Disable 5%
1/0/19 Disable 5% Disable 5% Disable 5%
--More-- or (q)uit

Port-Channel/LAG (802.3ad) Commands

This section describes the commands you use to configure port-channels, which is defined in
the 802.3ad specification, and that are also known as link aggregation groups (LAGs). Link
aggregation allows you to combine multiple full-duplex Ethernet links into a single logical link.
Network devices treat the aggregation as if it were a single link, which increases fault tolerance
and provides load sharing. The LAG feature initially load shares traffic based upon the source

564 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

and destination MAC address. Assign the port-channel (LAG) VLAN membership after you create
a port-channel. If you do not assign VLAN membership, the port-channel might become a
member of the management VLAN which can result in learning and switching issues.
A port-channel (LAG) interface can be either static or dynamic, but not both. All members of a
port channel must participate in the same protocols. A static port-channel interface does not
require a partner system to be able to aggregate its member ports.

Note! If you configure the maximum number of dynamic port-channels (LAGs) that your
platform supports, additional port-channels that you configure are automatically static.

port-channel
This command configures a new port-channel (LAG) and generates a logical unit/slot/port
number for the port-channel. The name field is a character string which allows the dash “-”
character as well as alphanumeric characters. Use the show port channel command to display
the unit/slot/port number for the logical interface. Instead of unit/slot/port, lag lag-
intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can

also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Note! Before you include a port in a port-channel, set the port physical mode. For more
information, see speed.

Default The following logical port-channels are already created:

 0/3/1 to 0/3/6

Format port-channel name

Mode Global Config

Command Added in firmware release 1.0

History

565 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

addport
This command adds one port to the port-channel (LAG). The first interface is a logical
unit/slot/port number of a configured port-channel. You can add a range of ports by

specifying the port range when you enter Interface Config mode (for example: interface
1/0/1-1/0/4). Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way

to specify the LAG interface. lag lag-intf-num can also be used to specify the LAG interface
where lag-intf-num is the LAG port number.

Note! Before adding a port to a port-channel, set the physical mode of the port. For more
information, see speed.

Default no port as a member of port-channel

Format addport logical unit/slot/port

Mode Interface Config

Command Added in firmware release 1.0

History

deleteport (Interface Config)

This command deletes a port or a range of ports from the port-channel (LAG). The interface is a
logical unit/slot/port number of a configured port-channel (or range of port-channels).
Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the
LAG interface. lag lag-intf-num can also be used to specify the LAG interface where lag-
intf-num is the LAG port number.

Default no port as a member of port-channel

Format deleteport logical unit/slot/port

566 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

deleteport (Global Config)

This command deletes all configured ports from the port-channel (LAG). The interface is a
logical unit/slot/port number of a configured port-channel. Instead of unit/slot/port, lag
lag-intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num

can also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default no port as a member of port-channel

Format deleteport {logical unit/slot/port | all}

Mode Global Config

Command Added in firmware release 1.0

History

lacp admin key

Use this command to configure the administrative value of the key for the port-channel. The
value range of key is 0 to 65535.

Default 0x8000

Format lacp admin key key

Mode Interface Config

Command Added in firmware release 1.0

567 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

Note! This command is applicable only to port-channel interfaces.

This command can be used to configure a single interface or a range of interfaces.

no lacp admin key
Use this command to configure the default administrative value of the key for the port-channel.

Default 0x8000

Format no lacp admin key

Mode Interface Config

Command Added in firmware release 1.0

History

lacp collector max-delay

Use this command to configure the port-channel collector max delay. This command can be
used to configure a single interface or a range of interfaces. The valid range of delay is 0-
65535.

Default 0x8000

Format lacp collector max delay delay

Mode Interface Config

Command Added in firmware release 1.0

History

568 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! This command is applicable only to port-channel interfaces.

no lacp collector max delay

Use this command to configure the default port-channel collector max delay.

Default 0x8000

Format no lacp collector max delay

Mode Interface Config

Command Added in firmware release 1.0

History

lacp actor admin key

Use this command to configure the administrative value of the LACP actor admin key on an
interface or range of interfaces. The valid range for key is 0-65535.

Default Internal Interface Number of this Physical Port

Format lacp actor admin key key

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

569 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no lacp actor admin key
Use this command to configure the default administrative value of the key.

Default Internal Interface Number of this Physical Port

Format no lacp actor admin key

Mode Interface Config

Command Added in firmware release 1.0

History

lacp actor admin state individual

Use this command to set LACP actor admin state to individual.

Format lacp actor admin state individual

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp actor admin state individual

Use this command to set the LACP actor admin state to aggregation.

Format no lacp actor admin state individual

Mode Interface Config

570 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

lacp actor admin state longtimeout

Use this command to set LACP actor admin state to longtimeout.

Format lacp actor admin state longtimeout

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp actor admin state longtimeout

Use this command to set the LACP actor admin state to short timeout.

Format no lacp actor admin state longtimeout

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

571 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

lacp actor admin state passive
Use this command to set the LACP actor admin state to passive.

Format lacp actor admin state passive

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp actor admin state passive

Use this command to set the LACP actor admin state to active.

Format no lacp actor admin state passive

Mode Interface Config

Command Added in firmware release 1.0

History

lacp actor admin state

Use this command to configure the administrative value of actor state as transmitted by the
Actor in LACPDUs. This command can be used to configure a single interfaces or a range of
interfaces.

Default 0x07

Format lacp actor admin state {individual|longtimeout|passive}

572 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp actor admin state

Use this command the configure the default administrative values of actor state as transmitted
by the Actor in LACPDUs.

Note! Both the no portlacptimeout and the no lacp actor admin state commands set the
values back to default, regardless of the command used to configure the ports. Consequently,
both commands will display in show running-config.

Default 0x07

Format no lacp actor admin state {individual|longtimeout|passive}

Mode Interface Config

Command Added in firmware release 1.0

History

lacp actor port priority

Use this command to configure the priority value assigned to the Aggregation Port for an
interface or range of interfaces. The valid range for priority is 0 to 65535.

573 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0x80

Format lacp actor port priority 0-65535

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp actor port priority

Use this command to configure the default priority value assigned to the Aggregation Port.

Default 0x80

Format no lacp actor port priority

Mode Interface Config

Command Added in firmware release 1.0

History

lacp partner admin key

Use this command to configure the administrative value of the Key for the protocol partner.
This command can be used to configure a single interface or a range of interfaces. The valid
range for key is 0 to 65535.

Default 0x0

574 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format lacp partner admin key key

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner admin key

Use this command to set the administrative value of the Key for the protocol partner to the
default.

Default 0x0

Format no lacp partner admin key

Mode Interface Config

Command Added in firmware release 1.0

History

lacp partner admin state individual

Use this command to set LACP partner admin state to individual.

Format lacp partner admin state individual

Mode Interface Config

575 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

Note! This command is applicable only to physical interfaces.

no lacp partner admin state individual

Use this command to set the LACP partner admin state to aggregation.

Format no lacp partner admin state individual

Mode Interface Config

Command Added in firmware release 1.0

History

lacp partner admin state longtimeout

Use this command to set LACP partner admin state to longtimeout.

Format lacp partner admin state longtimeout

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

576 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no lacp partner admin state longtimeout
Use this command to set the LACP partner admin state to short timeout.

Format no lacp partner admin state longtimeout

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

lacp partner admin state passive

Use this command to set the LACP partner admin state to passive.

Format lacp partner admin state passive

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner admin state passive

Use this command to set the LACP partner admin state to active.

Format no lacp partner admin state passive

577 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

lacp partner port id

Use this command to configure the LACP partner port id. This command can be used to
configure a single interface or a range of interfaces. The valid range for port-id is 0 to 65535.

Default 0x80

Format lacp partner port-id port-id

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner port id

Use this command to set the LACP partner port id to the default.

Default 0x80

Format no lacp partner port-id

Mode Interface Config

578 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

lacp partner port priority

Use this command to configure the LACP partner port priority. This command can be used to
configure a single interface or a range of interfaces. The valid range for priority is 0 to 65535.

Default 0x0

Format lacp partner port priority priority

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner port priority

Use this command to configure the default LACP partner port priority.

Default 0x0

Format no lacp partner port priority

Mode Interface Config

Command Added in firmware release 1.0

History

579 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

lacp partner system-id
Use this command to configure the 6-octet MAC Address value representing the administrative
value of the Aggregation Port’s protocol Partner’s System ID. This command can be used to
configure a single interface or a range of interfaces. The valid range of system-id is
00:00:00:00:00:00 - FF:FF:FF:FF:FF.

Default 00:00:00:00:00:00

Format lacp partner system-id system-id

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner system-id

Use this command to configure the default value representing the administrative value of the
Aggregation Port’s protocol Partner’s System ID.

Default 00:00:00:00:00:00

Format no lacp partner system-id

Mode Interface Config

Command Added in firmware release 1.0

History

580 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

lacp partner system priority
Use this command to configure the administrative value of the priority associated with the
Partner’s System ID. This command can be used to configure a single interface or a range of
interfaces. The valid range for priority is 0 to 65535.

Default 0x0

Format lacp partner system priority 0-65535

Mode Interface Config

Command Added in firmware release 1.0

History

Note! This command is applicable only to physical interfaces.

no lacp partner system priority

Use this command to configure the default administrative value of priority associated with the
Partner’s System ID.

Default 0x0

Format no lacp partner system priority

Mode Interface Config

Command Added in firmware release 1.0

History

581 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

interface lag
Use this command to enter Interface configuration mode for the specified LAG.

Default N/A

Format interface lag lag-interface-number

Mode Global Config

Command Added in firmware release 1.0

History

port-channel static
This command enables the static mode on a port-channel (LAG) interface or range of interfaces.
By default the static mode for a new port-channel is enabled, which means the port-channel is
static. If the maximum number of allowable dynamic port-channels are already present in the
system, the static mode for a new port-channel is enabled, which means the port-channel is
static. You can only use this command on port-channel interfaces.

Default enabled

Format port-channel static

Mode Interface Config

Command Added in firmware release 1.0

History

no port-channel static
This command sets the static mode on a particular port-channel (LAG) interface to the default
value. This command will be executed only for interfaces of type port-channel (LAG).

582 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default enabled

Format no port-channel static

Mode Interface Config

Command Added in firmware release 1.0

History

port lacpmode
This command enables Link Aggregation Control Protocol (LACP) on a port or range of ports.

Default enabled

Format port lacpmode

Mode Interface Config

Command Added in firmware release 1.0

History

no port lacpmode
This command disables Link Aggregation Control Protocol (LACP) on a port.

Default enabled

Format no port lacpmode

Mode Interface Config

Command Added in firmware release 1.0

583 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

port lacpmode enable all

This command enables Link Aggregation Control Protocol (LACP) on all ports.

Default enabled

Format port lacpmode enable all

Mode Global Config

Command Added in firmware release 1.0

History

no port lacpmode enable all

This command disables Link Aggregation Control Protocol (LACP) on all ports.

Default enabled

Format no port lacpmode enable all

Mode Global Config

Command Added in firmware release 1.0

History

port lacptimeout (Interface Config)

This command sets the timeout on a physical interface or range of interfaces of a particular
device type (actor or partner) to either long or short timeout.

Default long

584 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format port lacptimeout {actor | partner} {long | short}

Mode Interface Config

Command Added in firmware release 1.0

History

no port lacptimeout
This command sets the timeout back to its default value on a physical interface of a particular
device type (actor or partner).

Default long

Format no port lacptimeout {actor | partner}

Mode Interface Config

Command Added in firmware release 1.0

History

Note! Both the no portlacptimeout and the no lacp actor admin state commands set the
values back to default, regardless of the command used to configure the ports. Consequently,
both commands will display in show running-config.

port lacptimeout (Global Config)

This command sets the timeout for all interfaces of a particular device type (actor or partner) to
either long or short timeout.

Default long

585 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format port lacptimeout {actor | partner} {long | short}

Mode Global Config

Command Added in firmware release 1.0

History

no port lacptimeout
This command sets the timeout for all physical interfaces of a particular device type (actor or
partner) back to their default values.

Default long

Format no port lacptimeout {actor | partner}

Mode Global Config

Command Added in firmware release 1.0

History

Note! Both the no portlacptimeout and the no lacp actor admin state commands set the
values back to default, regardless of the command used to configure the ports. Consequently,
both commands will display in show running-config.

port-channel adminmode
This command enables all configured port-channels with the same administrative mode setting.

Default enabled

Format port-channel adminmode all

586 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

no port-channel adminmode
This command disables all configured port-channels with the same administrative mode setting.

Default enabled

Format no port-channel adminmode all

Mode Global Config

Command Added in firmware release 1.0

History

port-channel linktrap
This command enables link trap notifications for the port-channel (LAG). The interface is a
logical unit/slot/port for a configured port-channel. The option all sets every configured
port-channel with the same administrative mode setting. Instead of unit/slot/port, lag lag-
intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can

also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default enabled

Format port-channel linktrap {logical unit/slot/port | all}

Mode Global Config

Command Added in firmware release 1.0

587 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no port-channel linktrap
This command disables link trap notifications for the port-channel (LAG). The interface is a
logical slot and port for a configured port-channel. The option all sets every configured port-
channel with the same administrative mode setting.

Default enabled

Format no port-channel linktrap {logical unit/slot/port | all}

Mode Global Config

Command Added in firmware release 1.0

History

port-channel load-balance
This command selects the load-balancing option used on a port-channel (LAG). Traffic is
balanced on a port-channel (LAG) by selecting one of the links in the channel over which to
transmit specific packets. The link is selected by creating a binary pattern from selected fields in
a packet, and associating that pattern with a particular link.
Load-balancing is not supported on every device. The range of options for load-balancing may
vary per device.
This command can be configured for a single interface, a range of interfaces, or all interfaces.
Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the
LAG interface. lag lag-intf-num can also be used to specify the LAG interface where lag-
intf-num is the LAG port number.

Default 3

588 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format port-channel load-balance {1 | 2 | 3 | 4 | 5 | 6 | 7} {unit/slot/port |
all}

Mode Interface Config

Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

1 Source MAC, VLAN, EtherType, and incoming port associated with the packet

2 Destination MAC, VLAN, EtherType, and incoming port associated with the packet

3 Source/Destination MAC, VLAN, EtherType, and incoming port associated with the packet

4 Source IP and Source TCP/UDP fields of the packet

5 Destination IP and Destination TCP/UDP Port fields of the packet

6 Source/Destination IP and source/destination TCP/UDP Port fields of the packet

7 Enhanced hashing mode

unit/slot/port| all Global Config Mode only: The interface is a logical unit/slot/port number of a configured port-
channel. All applies the command to all currently configured port-channels.

no port-channel load-balance
This command reverts to the default load balancing configuration.

589 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 3

Format no port-channel load-balance {unit/slot/port | all}

Mode Interface Config

Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

unit/slot/port| Global Config Mode only: The interface is a logical unit/slot/port number of a
all configured port-channel. All applies the command to all currently configured port-channels.

port-channel local-preference
This command enables the local-preference mode on a port-channel (LAG) interface or range of
interfaces. By default, the local-preference mode for a port-channel is disabled. This command
can be used only on port-channel interfaces.

Default disabled

Format port-channel local-preference

Mode Interface Config

Command Added in firmware release 1.0

History

590 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no port-channel local-preference
This command disables the local-preference mode on a port-channel.

Default disabled

Format no port-channel local-preference

Mode Interface Config

Command Added in firmware release 1.0

History

port-channel min-links
This command configures the port-channel’s minimum links for lag interfaces.

Default 1

Format port-channel min-links 1-8

Mode Interface Config

Command Added in firmware release 1.0

History

port-channel name
This command defines a name for the port-channel (LAG). The interface is a logical
unit/slot/port for a configured port-channel, and name is an alphanumeric string up to 15

characters. Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to

specify the LAG interface. lag lag-intf-num can also be used to specify the LAG interface
where lag-intf-num is the LAG port number.

591 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default The following logical port-channels are already created:

 0/3/1 to 0/3/6

Format port-channel name {logical unit/slot/port} name

Mode Global Config

Command Added in firmware release 1.0

History

port-channel system priority

Use this command to configure port-channel system priority. The valid range of priority is 0-
65535.

Default 0x8000

Format port-channel system priority priority

Mode Global Config

Command Added in firmware release 1.0

History

no port-channel system priority

Use this command to configure the default port-channel system priority value.

Default 0x8000

Format no port-channel system priority

Mode Global Config

592 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show lacp actor

Use this command to display LACP actor attributes. Instead of unit/slot/port, lag lag-intf-
num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can also be

used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

Format show lacp actor {unit/slot/port|all}

Mode Global Config

Command Added in firmware release 1.0

History

The following output parameters are displayed.

PARAMETER DESCRIPTION

System Priority The administrative value of the Key.

Actor Admin Key The administrative value of the Key.

Port Priority The priority value assigned to the Aggregation Port.

Admin State The administrative values of the actor state as transmitted by the Actor in LACPDUs.

593 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show lacp partner
Use this command to display LACP partner attributes. Instead of unit/slot/port, lag lag-
intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can

also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

Format show lacp actor {unit/slot/port|all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

The following output parameters are displayed.

PARAMETER DESCRIPTION

System Priority The administrative value of priority associated with the Partner’s System ID.

System-ID Represents the administrative value of the Aggregation Port’s protocol Partner’s System ID.

Admin Key The administrative value of the Key for the protocol Partner.

Port Priority The administrative value of the Key for protocol Partner.

Port-ID The administrative value of the port number for the protocol Partner.

Admin State The administrative values of the actor state for the protocol Partner.

594 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show port-channel brief
This command displays the static capability of all port-channel (LAG) interfaces on the device as
well as a summary of individual port-channel interfaces. Instead of unit/slot/port, lag lag-
intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num can

also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

Format show port-channel brief

Mode  User EXEC

Command Added in firmware release 1.0

History

For each port-channel the following information is displayed:

TERM DEFINITION

Logical Interface The unit/slot/port of the logical interface.

Port-channel Name The name of port-channel (LAG) interface.

Link-State Shows whether the link is up or down.

Trap Flag Shows whether trap flags are enabled or disabled.

Type Shows whether the port-channel is statically or dynamically maintained.

Mbr Ports The members of this port-channel.

595 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Active Ports The ports that are actively participating in the port-channel.

show port-channel
This command displays an overview of all port-channels (LAGs) on the switch. Instead of
unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the LAG

interface. lag lag-intf-num can also be used to specify the LAG interface where lag-intf-num
is the LAG port number.

Default N/A

Format show port-channel {lag-intf-num | unit/slot/port | all}

Mode  Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Logical Interface The valid unit/slot/port number.

Port-Channel Name The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric
characters.

Link State Indicates whether the Link is up or down.

Admin Mode May be enabled or disabled. The factory default is enabled.

Type The status designating whether a particular port-channel (LAG) is statically or dynamically
maintained.

596 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Static - The port-channel is statically maintained.

 Dynamic - The port-channel is dynamically maintained.

Load Balance Option The load balance option associated with this LAG. See port-channel load-balance.

Local Preference Mode Indicates whether the local preference mode is enabled or disabled.

Mbr Ports A listing of the ports that are members of this port-channel (LAG), in unit/slot/port
notation. There can be a maximum of eight ports assigned to a given port-channel (LAG).

Device Timeout For each port, lists the timeout (long or short) for Device Type (actor or partner).

Port Speed Speed of the port-channel port.

Active Ports This field lists ports that are actively participating in the port-channel (LAG).

Example: The following shows example CLI display output for the command.
(DM1200E) #show port-channel 0/3/1

Local Interface................................ 0/3/1

Channel Name................................... ch1
Link State..................................... Up
Admin Mode..................................... Enabled
Type........................................... Static
Load Balance Option............................ 3
(Src/Dest MAC, VLAN, EType, incoming port)
Local Preference Mode.......................... Enabled

Mbr Device/ Port Port

Ports Timeout Speed Active
------ ------------- --------- -------
1/0/1 actor/long Auto True
partner/long
1/0/2 actor/long Auto True
partner/long
1/0/3 actor/long Auto False
partner/long
1/0/4 actor/long Auto False
partner/long

show port-channel system priority

Use this command to display the port-channel system priority.

597 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show port-channel system priority

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show port-channel counters

Use this command to display port-channel counters for the specified port.

Default N/A

Format show port-channel unit/slot/port counters

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Local Interface The valid slot/port number.

Channel Name The name of this port-channel (LAG).

Link State Indicates whether the Link is up or down.

Admin Mode May be enabled or disabled. The factory default is enabled.

598 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Port Channel Flap The number of times the port-channel was inactive.
Count

Mbr Ports The slot/port for the port member.

Mbr Flap Counters The number of times a port member is inactive, either because the link is down, or the admin
state is disabled.

Example: The following shows example CLI display output for the command.
(DM1200E) #show port-channel 0/3/1 counters

Local Interface................................ 0/3/1

Channel Name................................... ch1
Link State..................................... Down
Admin Mode..................................... Enabled
Port Channel Flap Count........................ 0

Mbr Mbr Flap

Ports Counters
------ ---------
1/0/1 0
1/0/2 0
1/0/3 1
1/0/4 0
1/0/5 0
1/0/6 0
1/0/7 0
1/0/8 0

clear port-channel counters

Use this command to clear and reset specified port-channel and member flap counters for the
specified interface.

Default N/A

Format clear port-channel {lag-intf-num | unit/slot/port} counters

Mode Privileged EXEC

Command Added in firmware release 1.0

599 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

clear port-channel all counters

Use this command to clear and reset all port-channel and member flap counters for the
specified interface.

Default N/A

Format clear port-channel all counters

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Port Mirroring Commands

Port mirroring, which is also known as port monitoring, selects network traffic that you can
analyze with a network analyzer, such as a SwitchProbe device or other Remote Monitoring
(RMON) probe.

monitor session
This command configures a probe port and a monitored port for monitor session (port
monitoring). Use the source interface unit/slot/port parameter to specify the interface to
monitor. Use rx to monitor only ingress packets, or use tx to monitor only egress packets. If
you do not specify an {rx | tx} option, the destination port monitors both ingress and egress
packets.
A VLAN can be configured as the source to a session (all member ports of that VLAN are
monitored). Remote port mirroring is configured by adding the RSPAN VLAN ID. At the source
switch, the destination is configured as the RSPAN VLAN and at the destination switch, the
source is configured as the RSPAN VLAN.

600 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! The source and destination cannot be configured as remote on the same device.

The reflector-port is configured at the source switch. The reflector-port forwards the
mirrored traffic towards the destination switch.

Note! This port must be configured with RSPAN VLAN membership.

IP/MAC ACL can be attached to a session by giving the access list number/name.
Use the destination interface unit/slot/port to specify the interface to receive the
monitored traffic.
Use the mode parameter to enable the administrative mode of the session. If enabled, the probe
port monitors all the traffic received and transmitted on the physical monitored port.
Use the filter parameter to filter a specified access group either by IP address or MAC address.

Default none

Format monitor session session-id {source {interface unit/slot/port | [{rx |

tx}] | destination {interface unit/slot/port | mode | filter }

Mode Global Config

Command Added in firmware release 1.0

History

Example: To configure the RSPAN VLAN source:

monitor session session-id source {interface unit/slot/port | vlan vlan-id |
remote vlan vlan-id }[rx/tx]

Example: To the configure RSPAN VLAN destination:

monitor session session-id destination {interface unit/slot/port |remote vlan
vlan-id reflector-port unit/slot/port}

601 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: To attach an ACL:
monitor session session-id filter {ip access-group acl-id/aclname |mac access-
group acl-name}

no monitor session
Use this command without optional parameters to remove the monitor session (port
monitoring) designation from the source probe port, the destination monitored port and all
VLANs. Once the port is removed from the VLAN, you must manually add the port to any
desired VLANs. Use the source interface unit/slot/port parameter or destination
interface to remove the specified interface from the port monitoring session. Use the mode

parameter to disable the administrative mode of the session.

Note! Since the current version of the software only supports one session, if you do not supply
optional parameters, the behavior of this command is similar to the behavior of the no monitor
command.

Default none

Format no monitor session session-id [{source interface unit/slot/port |

destination interface | mode |filter {ip access-group |mac access-
group}}]

Mode Global Config

Command Added in firmware release 1.0

History

no monitor
This command removes all the source ports and a destination port for the and restores the
default value for mirroring session mode for all the configured sessions.

602 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! This is a stand-alone “no” command. This command does not have a “normal” form.

Default enabled

Format no monitor

Mode Global Config

Command Added in firmware release 1.0

History

show monitor session

This command displays the Port monitoring information for a particular mirroring session.

Note! The session-id parameter is an integer value used to identify the session. In the
current version of the software, the session-id parameter is always one (1).

Default N/A

Format show monitor session session-id

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

603 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Session ID An integer value used to identify the session. Its value can be anything between 1 and the
maximum number of mirroring sessions allowed on the platform.

Monitor Session Mode Indicates whether the Port Mirroring feature is enabled or disabled for the session identified
with session-id. The possible values are Enabled and Disabled.

Probe Port Probe port (destination port) for the session identified with session-id. If probe port is not
set then this field is blank.

Source Port The port, which is configured as mirrored port (source port) for the session identified with
session-id. If no source port is configured for the session then this field is blank.

Type Direction in which source port configured for port mirroring.Types are tx for transmitted
packets and rx for receiving packets.

Src VLAN All member ports of this VLAN are mirrored. If the source VLAN is not configured, this field is
blank.

Ref. Port This port carries all the mirrored traffic at the source switch.

Src Remote VLAN The source VLAN is configured at the destination switch. If the remote VLAN is not
configured, this field is blank.

Dst Remote VLAN The destination VLAN is configured at the source switch. If the remote VLAN is not
configured, this field is blank.

IP ACL The IP access-list id or name attached to the port mirroring session.

MAC ACL The MAC access-list name attached to the port mirroring session.

show vlan remote-span

This command displays the configured RSPAN VLAN.

Default N/A

604 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show vlan remote-span

Mode Privileged Exec Mode

Command Added in firmware release 1.0

History

Example: The following shows example output for the command.

(DM1200E)# show vlan remote-span

Remote SPAN VLAN

------------------------------------------------------------------------
100

Static MAC Filtering Commands

The commands in this section describe how to configure static MAC filtering. Static MAC filtering
allows you to configure destination ports for a static multicast MAC filter irrespective of the
platform.

macfilter
This command adds a static MAC filter entry for the MAC address macaddr on the VLAN vlanid.
The value of the macaddr parameter is a 6-byte hexadecimal number in the format of
b1:b2:b3:b4:b5:b6. The restricted MAC Addresses are: 00:00:00:00:00:00, 01:80:C2:00:00:00
to 01:80:C2:00:00:0F, 01:80:C2:00:00:20 to 01:80:C2:00:00:21, and FF:FF:FF:FF:FF:FF. The
vlanid parameter must identify a valid VLAN.

The number of static mac filters supported on the system is different for MAC filters where
source ports are configured and MAC filters where destination ports are configured.
 For unicast MAC address filters and multicast MAC address filters with source port lists,
the maximum number of static MAC filters supported is 20.
 For multicast MAC address filters with destination ports configured, the maximum
number of static filters supported is 256.
i.e., you can configure the following combinations at DM1200E:

605 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Unicast MAC and source port (max = 20)
 Multicast MAC and source port (max = 20)
 Multicast MAC and destination port (only) (max = 256)
 Multicast MAC and source ports and destination ports (max = 20)

Default Not configured

Format macfilter macaddr vlanid

Mode Global Config

Command Added in firmware release 1.0

History

no macfilter
This command removes all filtering restrictions and the static MAC filter entry for the MAC
address macaddr on the VLAN vlanid. The macaddr parameter must be specified as a 6-byte
hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
The vlanid parameter must identify a valid VLAN.

Default Not configured

Format no macfilter macaddr vlanid

Mode Global Config

Command Added in firmware release 1.0

History

macfilter adddest
Use this command to add the interface or range of interfaces to the destination filter set for the
MAC filter with the given macaddr and VLAN of vlanid. The macaddr parameter must be

606 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid
parameter must identify a valid VLAN.

Note! Configuring a destination port list is only valid for multicast MAC addresses.

Default Not configured

Format macfilter adddest macaddr

Mode Interface Config

Command Added in firmware release 1.0

History

no macfilter adddest
This command removes a port from the destination filter set for the MAC filter with the given
macaddr and VLAN of vlanid. The macaddr parameter must be specified as a 6-byte

hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid parameter must identify a
valid VLAN.

Default Not configured

Format no macfilter adddest macaddr

Mode Interface Config

Command Added in firmware release 1.0

History

607 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

macfilter adddest all
This command adds all interfaces to the destination filter set for the MAC filter with the given
macaddr and VLAN of vlanid. The macaddr parameter must be specified as a 6-byte

hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid parameter must identify a
valid VLAN.

Note! Configuring a destination port list is only valid for multicast MAC addresses.

Default Not configured

Format macfilter adddest all macaddr

Mode Global Config

Command Added in firmware release 1.0

History

no macfilter adddest all

This command removes all ports from the destination filter set for the MAC filter with the given
macaddr and VLAN of vlanid. The macaddr parameter must be specified as a 6-byte

hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid parameter must identify a
valid VLAN.

Default Not configured

Format no macfilter adddest all macaddr

Mode Global Config

Command Added in firmware release 1.0

608 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

macfilter addsrc
This command adds the interface or range of interfaces to the source filter set for the MAC filter
with the MAC address of macaddr and VLAN of vlanid. The macaddr parameter must be
specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid
parameter must identify a valid VLAN.

Default Not configured

Format macfilter addsrc macaddr vlanid

Mode Interface Config

Command Added in firmware release 1.0

History

no macfilter addsrc
This command removes a port from the source filter set for the MAC filter with the MAC address
of macaddr and VLAN of vlanid. The macaddr parameter must be specified as a 6-byte
hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid parameter must identify
a valid VLAN.

Default Not configured

Format no macfilter addsrc macaddr vlanid

Mode Interface Config

Command Added in firmware release 1.0

History

609 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

macfilter addsrc all
This command adds all interfaces to the source filter set for the MAC filter with the MAC
address of macaddr and vlanid. You must specify the macaddr parameter as a 6-byte
hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The vlanid parameter must identify a
valid VLAN.

Default Not configured

Format macfilter addsrc all macaddr vlanid

Mode Global Config

Command Added in firmware release 1.0

History

no macfilter addsrc all

This command removes all interfaces to the source filter set for the MAC filter with the MAC
address of macaddr and VLAN of vlanid. You must specify the macaddr parameter as a 6-byte
hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
The vlanid parameter must identify a valid VLAN.

Default Not configured

Format no macfilter addsrc all macaddr vlanid

Mode Global Config

Command Added in firmware release 1.0

History

610 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show mac-address-table static
This command displays the Static MAC Filtering information for all Static MAC Filters. If you
specify all, all the Static MAC Filters in the system are displayed. If you supply a value for
macaddr, you must also enter a value for vlanid, and the system displays Static MAC Filter

information only for that MAC address and VLAN.

Default N/A

Format show mac-address-table static {macaddr vlanid | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address The MAC Address of the static MAC filter entry.

VLAN ID The VLAN ID of the static MAC filter entry.

Source Port(s) The source port filter set's slot and port(s).

Note! Only multicast address filters will have destination port lists.

show mac-address-table staticfiltering

This command displays the Static Filtering entries in the Multicast Forwarding Database (MFDB)
table.

611 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show mac-address-table staticfiltering

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

VLAN ID The VLAN in which the MAC Address is learned.

MAC Address A unicast MAC address for which the switch has forwarding and or filtering information. As
the data is gleaned from the MFDB, the address will be a multicast address. The format is 6
two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB.

Type The type of the entry. Static entries are those that are configured by the end user. Dynamic
entries are added to the table as a result of a learning process or protocol.

Description The text description of this multicast table entry.

Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:).

DHCP Client Commands

DM1200E can include vendor and configuration information in DHCP client requests relayed to a
DHCP server. This information is included in DHCP Option 60, Vendor Class Identifier. The
information is a string of 128 octets.

612 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dhcp client vendor-id-option
This command enables the inclusion of DHCP Option-60, Vendor Class Identifier included in the
requests transmitted to the DHCP server by the DHCP client operating in the DM1200E switch.

Default default

Format dhcp client vendor-id-option string

Mode Global Config

Command Added in firmware release 1.0

History

no dhcp client vendor-id-option

This command disables the inclusion of DHCP Option-60, Vendor Class Identifier included in the
requests transmitted to the DHCP server by the DHCP client operating in the DM1200E switch.

Default default

Format no dhcp client vendor-id-option

Mode Global Config

Command Added in firmware release 1.0

History

dhcp client vendor-id-option-string

This parameter sets the DHCP Vendor Option-60 string to be included in the requests
transmitted to the DHCP server by the DHCP client operating in the DM1200E switch.

Default not configured

613 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format dhcp client vendor-id-option-string string

Mode Global Config

Command Added in firmware release 1.0

History

no dhcp client vendor-id-option-string

This parameter clears the DHCP Vendor Option-60 string.

Default not configured

Format no dhcp client vendor-id-option-string

Mode Global Config

Command Added in firmware release 1.0

History

show dhcp client vendor-id-option

This command displays the configured administration mode of the vendor-id-option and the
vendor-id string to be included in Option-43 in DHCP requests.

Default N/A

Format show dhcp client vendor-id-option

Mode Privileged EXEC

Command Added in firmware release 1.0

History

614 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show dhcp client vendor-id-option

DHCP Client Vendor Identifier Option Disabled

DHCP Client Vendor Identifier Option string Not configured

DHCP Snooping Configuration Commands

This section describes commands you use to configure DHCP Snooping.

ip dhcp snooping
Use this command to enable DHCP Snooping globally.

Default disabled

Format ip dhcp snooping

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp snooping
Use this command to disable DHCP Snooping globally.

Default disabled

Format no ip dhcp snooping

Mode Global Config

Command Added in firmware release 1.0

History

615 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip dhcp snooping vlan
Use this command to enable DHCP Snooping on a list of comma-separated VLAN ranges.

Default disabled

Format ip dhcp snooping vlan vlan-list

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp snooping vlan

Use this command to disable DHCP Snooping on VLANs.

Default disabled

Format no ip dhcp snooping vlan vlan-list

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp snooping verify mac-address

Use this command to enable verification of the source MAC address with the client hardware
address in the received DCHP message.

Default enabled

616 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format ip dhcp snooping verify mac-address

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp snooping verify mac-address

Use this command to disable verification of the source MAC address with the client hardware
address.

Default enabled

Format no ip dhcp snooping verify mac-address

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp snooping database

Use this command to configure the persistent location of the DHCP Snooping database. This
can be local or a remote file on a given IP machine.

Default local

Format ip dhcp snooping database {local|tftp://hostIP/filename}

Mode Global Config

Command Added in firmware release 1.0

617 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

ip dhcp snooping database write-delay

Use this command to configure the interval in seconds at which the DHCP Snooping database
will be persisted. The interval value ranges from 15 to 86400 seconds.

Default 300 seconds

Format ip dhcp snooping database write-delay in seconds

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp snooping database write-delay

Use this command to set the write delay value to the default value.

Default 300 seconds

Format no ip dhcp snooping database write-delay

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp snooping binding

Use this command to configure static DHCP Snooping binding.

Default N/A

618 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format ip dhcp snooping binding mac-address vlan vlan id ip address interface
interface id

Mode Global Config

Command Added in firmware release 1.0

History

no ip dhcp snooping binding

Use this command to remove the DHCP static entry from the DHCP Snooping database.

Default N/A

Format no ip dhcp snooping binding mac-address

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp filtering trust

Use this command to enable trusted mode on the interface if the previously saved configuration
or applied script contains this command.

Default disable

Format ip dhcp filtering trust interface id

Mode Global Config

Command Added in firmware release 1.0

619 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no ip dhcp filtering trust

Use this command to disable trusted mode on the interface.

Default disable

Format no ip dhcp filtering trust interface id

Mode Global Config

Command Added in firmware release 1.0

History

ip dhcp snooping limit

Use this command to control the rate at which the DHCP Snooping messages come on an
interface or range of interfaces. By default, rate limiting is disabled. When enabled, the rate can
range from 0 to 300 packets per second. The burst level range is 1 to 15 seconds.

Default disabled (no limit)

Format ip dhcp snooping limit {rate pps [burst interval seconds]}

Mode Interface Config

Command Added in firmware release 1.0

History

no ip dhcp snooping limit

Use this command to set the rate at which the DHCP Snooping messages come, and the burst
level, to the defaults.

620 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default Disabled (no limit)

Format no ip dhcp snooping limit

Mode Interface Config

Command Added in firmware release 1.0

History

ip dhcp snooping log-invalid

Use this command to control the logging DHCP messages filtration by the DHCP Snooping
application. This command can be used to configure a single interface or a range of interfaces.

Default disabled

Format ip dhcp snooping log-invalid

Mode Interface Config

Command Added in firmware release 1.0

History

no ip dhcp snooping log-invalid

Use this command to disable the logging DHCP messages filtration by the DHCP Snooping
application.

Default disabled

Format no ip dhcp snooping log-invalid

Mode Interface Config

621 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip dhcp snooping trust

Use this command to configure an interface or range of interfaces as trusted.

Default disabled

Format ip dhcp snooping trust

Mode Interface Config

Command Added in firmware release 1.0

History

no ip dhcp snooping trust

Use this command to configure the port as untrusted.

Default disabled

Format no ip dhcp snooping trust

Mode Interface Config

Command Added in firmware release 1.0

History

show ip dhcp snooping

Use this command to display the DHCP Snooping global configurations and per port
configurations.

622 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show ip dhcp snooping

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface for which data is displayed.

Trusted If it is enabled, DHCP snooping considers the port as trusted. The factory default is disabled.

Log Invalid Pkts If it is enabled, DHCP snooping application logs invalid packets on the specified interface.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip dhcp snooping

DHCP snooping is Disabled

DHCP snooping source MAC verification is enabled
DHCP snooping is enabled on the following VLANs:
11 - 30, 40

Interface Trusted Log Invalid Pkts

--------- -------- ----------------
1/0/1 Yes No
1/0/2 No Yes
1/0/3 No Yes
1/0/4 No No
1/0/6 No No

623 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip dhcp snooping binding
Use this command to display the DHCP Snooping binding entries. To restrict the output, use the
following options:
 Dynamic: Restrict the output based on DCHP snooping.
 Interface: Restrict the output based on a specific interface.
 Static: Restrict the output based on static entries.
 VLAN: Restrict the output based on VLAN.

Default N/A

Format show ip dhcp snooping binding [{static/dynamic}] [interface

unit/slot/port] [vlan id]

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address Displays the MAC address for the binding that was added. The MAC address is the key to the
binding database.

IP Address Displays the valid IP address for the binding rule.

VLAN The VLAN for the binding rule.

Interface The interface to add a binding into the DHCP snooping interface.

Type Binding type; statically configured from the CLI or dynamically learned.

624 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Lease (sec) The remaining lease time for the entry.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip dhcp snooping binding

Total number of bindings: 2

MAC Address IP Address VLAN Interface Type Lease time (Secs)

------------------ ------------ ---- --------- ---- ------------------
00:02:B3:06:60:80 210.1.1.3 10 0/1 86400
00:0F:FE:00:13:04 210.1.1.4 10 0/1 86400

show ip dhcp snooping database

Use this command to display the DHCP Snooping configuration related to the database
persistency.

Default N/A

Format show ip dhcp snooping database

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Agent URL Bindings database agent URL.

Write Delay The maximum write time to write the database into local or remote.

Example: The following shows example CLI display output for the command.

625 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #show ip dhcp snooping database

agent url: /10.131.13.79:/sai1.txt

write-delay: 5000

show ip dhcp snooping interfaces

Use this command to show the DHCP Snooping status of the interfaces.

Default N/A

Format show ip dhcp snooping interfaces

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip dhcp snooping interfaces

Interface Trust State Rate Limit Burst Interval

(pps) (seconds)
----------- ---------- ---------- --------------
1/0/1 No 15 1
1/0/2 No 15 1
1/0/3 No 15 1

(DM1200E) #show ip dhcp snooping interfaces 1/0/15

Interface Trust State Rate Limit Burst Interval

(pps) (seconds)
----------- ---------- ---------- --------------
1/0/15 Yes 15 1

show ip dhcp snooping statistics

Use this command to list statistics for DHCP Snooping security violations on untrusted ports.

Default N/A

Format show ip dhcp snooping statistics

626 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The IP address of the interface in unit/slot/port format.

MAC Verify Failures Represents the number of DHCP messages that were filtered on an untrusted interface
because of source MAC address and client HW address mismatch.

Client Ifc Mismatch Represents the number of DHCP release and Deny messages received on the different ports
than learned previously.

DHCP Server Msgs Represents the number of DHCP server messages received on Untrusted ports.
Rec’d

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip dhcp snooping statistics

Interface MAC Verify Client Ifc DHCP Server

Failures Mismatch Msgs Rec'd
----------- ---------- ---------- -----------
1/0/2 0 0 0
1/0/3 0 0 0
1/0/4 0 0 0
1/0/5 0 0 0
1/0/6 0 0 0
1/0/7 0 0 0
1/0/8 0 0 0
1/0/9 0 0 0
1/0/10 0 0 0
1/0/11 0 0 0
1/0/12 0 0 0
1/0/13 0 0 0
1/0/14 0 0 0
1/0/15 0 0 0
1/0/16 0 0 0

627 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 1/0/17 0 0 0
1/0/18 0 0 0
1/0/19 0 0 0
1/0/20 0 0 0

clear ip dhcp snooping binding

Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific
interface.

Default N/A

Format clear ip dhcp snooping binding [interface unit/slot/port]

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

clear ip dhcp snooping statistics

Use this command to clear all DHCP Snooping statistics.

Default N/A

Format clear ip dhcp snooping statistics

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

628 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IGMP Snooping Configuration Commands
This section describes the commands you use to configure IGMP snooping. DM1200E software
supports IGMP Versions 1, 2, and 3. The IGMP snooping feature can help conserve bandwidth
because it allows the switch to forward IP multicast traffic only to connected hosts that request
multicast traffic. IGMPv3 adds source filtering capabilities to IGMP versions 1 and 2.

Note! This note clarifies the prioritization of MGMD Snooping Configurations. Many of the
IGMP commands are available both in the Interface and VLAN modes. Operationally the system
chooses or prefers the VLAN configured values over the Interface configured values for most
configurations when the interface participates in the VLAN.

set igmp
This command enables IGMP Snooping on the system (Global Config Mode), an interface, or a
range of interfaces. This command also enables IGMP snooping on a particular VLAN (VLAN
Config Mode) and can enable IGMP snooping on all interfaces participating in a VLAN.
If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it
as a member of a port-channel (LAG), IGMP Snooping functionality is disabled on that interface.
IGMP Snooping functionality is re-enabled if you disable routing or remove port-channel (LAG)
membership from an interface that has IGMP Snooping enabled.
The IGMP application supports the following activities:
 Validation of the IP header checksum (as well as the IGMP header checksum) and
discarding of the frame upon checksum error.
 Maintenance of the forwarding table entries based on the MAC address versus the IP
address.
 Flooding of unregistered multicast data packets to all ports in the VLAN.

Default disabled

Format set igmp [vlan_id]

629 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

no set igmp
This command disables IGMP Snooping on the system, an interface, a range of interfaces, or a
VLAN.

Default disabled

Format no set igmp [vlan_id]

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

set igmp interfacemode

This command enables IGMP Snooping on all interfaces. If an interface has IGMP Snooping
enabled and you enable this interface for routing or enlist it as a member of a port-channel
(LAG), IGMP Snooping functionality is disabled on that interface. IGMP Snooping functionality is
re-enabled if you disable routing or remove port-channel (LAG) membership from an interface
that has IGMP Snooping enabled.

Default disabled

Format set igmp interfacemode

630 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

no set igmp interfacemode

This command disables IGMP Snooping on all interfaces.

Default disabled

Format no set igmp interfacemode

Mode Global Config

Command Added in firmware release 1.0

History

set igmp fast-leave

This command enables or disables IGMP Snooping fast-leave admin mode on a selected
interface, a range of interfaces, or a VLAN. Enabling fast-leave allows the switch to immediately
remove the layer 2 LAN interface from its forwarding table entry upon receiving an IGMP leave
message for that multicast group without first sending out MAC-based general queries to the
interface.
You should enable fast-leave admin mode only on VLANs where only one host is connected to
each layer 2 LAN port. This prevents the inadvertent dropping of the other hosts that were
connected to the same layer 2 LAN port but were still interested in receiving multicast traffic
directed to that group. Also, fast-leave processing is supported only with IGMP version 2 hosts.

Default disabled

Format set igmp fast-leave [vlan_id]

631 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Interface Range

VLAN Config

Command Added in firmware release 1.0

History

no set igmp fast-leave

This command disables IGMP Snooping fast-leave admin mode on a selected interface.

Default disabled

Format no set igmp fast-leave [vlan_id]

Mode Interface Config

Interface Range

VLAN Config

Command Added in firmware release 1.0

History

set igmp groupmembership-interval

This command sets the IGMP Group Membership Interval time on a VLAN, one interface, a
range of interfaces, or all interfaces. The Group Membership Interval time is the amount of time
in seconds that a switch waits for a report from a particular group on a particular interface
before deleting the interface from the entry. This value must be greater than the IGMPv3
Maximum Response time value. The range is 2 to 3600 seconds.

Default 260 seconds

632 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format set igmp groupmembership-interval [vlan_id] 2-3600

Mode  Interface Config

 Global Config

 VLAN Config

Command Added in firmware release 1.0

History

no set igmp groupmembership-interval

This command sets the IGMPv3 Group Membership Interval time to the default value.

Default 260 seconds

Format no set igmp groupmembership-interval [vlan_id]

Mode  Interface Config

 Global Config

 VLAN Config

Command Added in firmware release 1.0

History

set igmp maxresponse

This command sets the IGMP Maximum Response time for the system, on a particular interface
or VLAN, or on a range of interfaces. The Maximum Response time is the amount of time in
seconds that a switch will wait after sending a query on an interface because it did not receive
a report for a particular group in that interface. This value must be less than the IGMP Query
Interval time value. The range is 1 to 25 seconds.

Default 10 seconds

633 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format set igmp maxresponse [vlan_id] 1-25

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

no set igmp maxresponse

This command sets the max response time (on the interface or VLAN) to the default value.

Default 10 seconds

Format no set igmp maxresponse [vlan_id]

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

set igmp mcrtrexpiretime

This command sets the Multicast Router Present Expiration time. The time is set for the system,
on a particular interface or VLAN, or on a range of interfaces. This is the amount of time in
seconds that a switch waits for a query to be received on an interface before the interface is
removed from the list of interfaces with multicast routers attached. The range is 0 to 3600
seconds. A value of 0 indicates an infinite time-out, i.e. no expiration.

Default 0

634 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format set igmp mcrtrexpiretime [vlan_id] 0-3600

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

no set igmp mcrtrexpiretime

This command sets the Multicast Router Present Expiration time to 0. The time is set for the
system, on a particular interface or a VLAN.

Default 0

Format no set igmp mcrtrexpiretime [vlan_id]

Mode  Global Config

 Interface Config

 VLAN Config

Command Added in firmware release 1.0

History

Default 0

Format no set igmp mcrtrexpiretime vlan_id

Mode VLAN Config

635 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

set igmp mrouter

This command configures the VLAN ID (vlan_id) that has the multicast router mode enabled.

Default none

Format set igmp mrouter vlan_id

Mode Interface Config

Command Added in firmware release 1.0

History

no set igmp mrouter

This command disables multicast router mode for a particular VLAN ID (vlan_id).

Default none

Format no set igmp mrouter vlan_id

Mode Interface Config

Command Added in firmware release 1.0

History

set igmp mrouter interface

This command configures the interface or range of interfaces as a multicast router interface.
When configured as a multicast router interface, the interface is treated as a multicast router
interface in all VLANs.

636 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format set igmp mrouter interface

Mode Interface Config

Command Added in firmware release 1.0

History

no set igmp mrouter interface

This command disables the status of the interface as a statically configured multicast router
interface.

Default disabled

Format no set igmp mrouter interface

Mode Interface Config

Command Added in firmware release 1.0

History

set igmp report-suppression

Use this command to suppress the IGMP reports on a given VLAN ID. In order to optimize the
number of reports traversing the network with no added benefits, a Report Suppression
mechanism is implemented. When more than one client responds to an MGMD query for the
same Multicast Group address within the max-response-time, only the first response is
forwarded to the query and others are suppressed at the switch.

Default Disabled

637 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format set igmp report-suppression vlan-id

Mode VLAN Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

vlan-id A valid VLAN ID. Range is 1 to 4093.

Example: The following shows an example of the command.

(DM1200E) #vlan database
(DM1200E) (Vlan)#set igmp report-suppression ?

<1-4093> Enter VLAN ID.

(DM1200E) (Vlan)#set igmp report-suppression 1

no set igmp report-suppression

Use this command to return the system to the default.

Default disabled

Format no set igmp report-suppression

Mode VLAN Config

Command Added in firmware release 1.0

History

638 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show igmpsnooping
This command displays IGMP Snooping information for a given unit/slot/port or VLAN.
Configured information is displayed whether or not IGMP Snooping is enabled.

Default N/A

Format show igmpsnooping [unit/slot/port | vlan_id]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

When the optional arguments unit/slot/port or vlan_id are not used, the command displays
the following information:

TERM DEFINITION

Admin Mode Indicates whether or not IGMP Snooping is active on the switch.

Multicast Control Frame The number of multicast control frames that are processed by the CPU.
Count

Interface Enabled for IGMP The list of interfaces on which IGMP Snooping is enabled.
Snooping

VLANS Enabled for IGMP The list of VLANS on which IGMP Snooping is enabled.
Snooping

When you specify the unit/slot/port values, the following information appears:

TERM DEFINITION

639 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IGMP Snooping Admin Indicates whether IGMP Snooping is active on the interface.
Mode

Fast Leave Mode Indicates whether IGMP Snooping Fast-leave is active on the interface.

Group Membership The amount of time in seconds that a switch will wait for a report from a particular group on
Interval a particular interface before deleting the interface from the entry. This value may be
configured.

Maximum Response The amount of time the switch waits after it sends a query on an interface because it did not
Time receive a report for a particular group on that interface. This value may be configured.

Multicast Router The amount of time to wait before removing an interface from the list of interfaces with
Expiry Time multicast routers attached. The interface is removed if a query is not received. This value may
be configured.

When you specify a value for vlan_id, the following information appears:

TERM DEFINITION

VLAN ID The VLAN ID.

IGMP Snooping Admin Indicates whether IGMP Snooping is active on the VLAN.
Mode

Fast Leave Mode Indicates whether IGMP Snooping Fast-leave is active on the VLAN.

Group Membership The amount of time in seconds that a switch will wait for a report from a particular group on
Interval (secs) a particular interface, which is participating in the VLAN, before deleting the interface from
the entry. This value may be configured.

Maximum Response The amount of time the switch waits after it sends a query on an interface, participating in
Time (secs) the VLAN, because it did not receive a report for a particular group on that interface. This
value may be configured.

640 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Multicast Router The amount of time to wait before removing an interface that is participating in the VLAN
Expiry Time (secs) from the list of interfaces with multicast routers attached. The interface is removed if a query
is not received. This value may be configured.

Report Suppression Indicates whether IGMP reports (set by the command set igmp report-suppression) in
Mode enabled or not.

Example: The following shows example CLI display output for the command.
(DM1200E) #show igmpsnooping 1

VLAN ID........................................ 1
IGMP Snooping Admin Mode....................... Disabled
Fast Leave Mode................................ Disabled
Group Membership Interval (secs)............... 260
Max Response Time (secs)....................... 10
Multicast Router Expiry Time (secs)............ 0
Report Suppression Mode........................ Enabled

show igmpsnooping mrouter interface

This command displays information about statically configured ports.

Default N/A

Format show igmpsnooping mrouter interface unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The port on which multicast router information is being displayed.

Multicast Router Indicates whether multicast router is statically enabled on the interface.

641 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Attached

VLAN ID The list of VLANs of which the interface is a member.

show igmpsnooping mrouter vlan

This command displays information about statically configured ports.

Default N/A

Format show igmpsnooping mrouter vlan unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The port on which multicast router information is being displayed.

VLAN ID The list of VLANs of which the interface is a member.

show mac-address-table igmpsnooping

This command displays the IGMP Snooping entries in the MFDB table.

Default N/A

Format show mac-address-table igmpsnooping

Mode Privileged EXEC

642 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

VLAN ID The VLAN in which the MAC address is learned.

MAC Address A multicast MAC address for which the switch has forwarding or filtering information. The
format is 6 two-digit hexadecimal numbers that are separated by colons, for example
01:23:45:67:89:AB.

Type The type of the entry, which is either static (added by the user) or dynamic (added to the
table as a result of a learning process or protocol).

Description The text description of this multicast table entry.

Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:).

IGMP Snooping Querier Commands

IGMP Snooping requires that one central switch or router periodically query all end-devices on
the network to announce their multicast memberships. This central device is the “IGMP Querier”.
The IGMP query responses, known as IGMP reports, keep the switch updated with the current
multicast group membership on a port-by-port basis. If the switch does not receive updated
membership information in a timely fashion, it will stop forwarding multicasts to the port where
the end device is located.
This section describes commands used to configure and display information on IGMP Snooping
Queriers on the network and, separately, on VLANs.

643 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! This note clarifies the prioritization of MGMD Snooping Configurations. Many of the
IGMP commands are available both in the Interface and VLAN modes. Operationally the system
chooses or prefers the VLAN configured values over the Interface configured values for most
configurations when the interface participates in the VLAN.

set igmp querier

Use this command to enable IGMP Snooping Querier on the system, using Global Config mode,
or on a VLAN. Using this command, you can specify the IP Address that the Snooping Querier
switch should use as the source address while generating periodic queries.
If a VLAN has IGMP Snooping Querier enabled and IGMP Snooping is operationally disabled on
it, IGMP Snooping Querier functionality is disabled on that VLAN. IGMP Snooping functionality is
re-enabled if IGMP Snooping is operational on the VLAN.

Note! The Querier IP Address assigned for a VLAN takes preference over global configuration.

The IGMP Snooping Querier application supports sending periodic general queries on the VLAN
to solicit membership reports.

Default disabled

Format set igmp querier [vlan-id] [address ipv4_address]

Mode  Global Config

 VLAN Mode

Command Added in firmware release 1.0

History

644 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no set igmp querier
Use this command to disable IGMP Snooping Querier on the system. Use the optional address
parameter to reset the querier address to 0.0.0.0.

Default disabled

Format no set igmp querier [vlan-id] [address]

Mode  Global Config

 VLAN Mode

Command Added in firmware release 1.0

History

set igmp querier query-interval

Use this command to set the IGMP Querier Query Interval time. It is the amount of time in
seconds that the switch waits before sending another general query.

Default disabled

Format set igmp querier query-interval 1-1800

Mode Global Config

Command Added in firmware release 1.0

History

no set igmp querier query-interval

Use this command to set the IGMP Querier Query Interval time to its default value.

Default disabled

645 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no set igmp querier query-interval

Mode Global Config

Command Added in firmware release 1.0

History

set igmp querier timer expiry

Use this command to set the IGMP Querier timer expiration period. It is the time period that the
switch remains in Non-Querier mode once it has discovered that there is a Multicast Querier in
the network.

Default 60 seconds

Format set igmp querier timer expiry 60-300

Mode Global Config

Command Added in firmware release 1.0

History

no set igmp querier timer expiry

Use this command to set the IGMP Querier timer expiration period to its default value.

Default 60 seconds

Format no set igmp querier timer expiry

Mode Global Config

Command Added in firmware release 1.0

646 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

set igmp querier version

Use this command to set the IGMP version of the query that the snooping switch is going to
send periodically.

Default 1

Format set igmp querier version 1-2

Mode Global Config

Command Added in firmware release 1.0

History

no set igmp querier version

Use this command to set the IGMP Querier version to its default value.

Default 1

Format no set igmp querier version

Mode Global Config

Command Added in firmware release 1.0

History

set igmp querier election participate

Use this command to enable the Snooping Querier to participate in the Querier Election process
when it discovers the presence of another Querier in the VLAN. When this mode is enabled, if
the Snooping Querier finds that the other Querier’s source address is better (less) than the

647 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Snooping Querier’s address, it stops sending periodic queries. If the Snooping Querier wins the
election, then it will continue sending periodic queries.

Default disabled

Format set igmp querier election participate

Mode VLAN Config

Command Added in firmware release 1.0

History

no set igmp querier election participate

Use this command to set the Snooping Querier not to participate in querier election but go into
non-querier mode as soon as it discovers the presence of another querier in the same VLAN.

Default disabled

Format no set igmp querier election participate

Mode VLAN Config

Command Added in firmware release 1.0

History

show igmpsnooping querier

Use this command to display IGMP Snooping Querier information. Configured information is
displayed whether or not IGMP Snooping Querier is enabled.

Default N/A

Format show igmpsnooping querier [{detail | vlan vlanid}]

648 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

When the optional argument vlanid is not used, the command displays the following
information.

FIELD DESCRIPTION

Admin Mode Indicates whether or not IGMP Snooping Querier is active on the switch.

Admin Version The version of IGMP that will be used while sending out the queries.

Querier Address The IP Address which will be used in the IPv4 header while sending out IGMP queries. It can
be configured using the appropriate command.

Query Interval The amount of time in seconds that a Snooping Querier waits before sending out the periodic
general query.

Querier Timeout The amount of time to wait in the Non-Querier operational state before moving to a Querier
state.

When you specify a value for vlanid, the following additional information appears.

FIELD DESCRIPTION

VLAN Admin Mode Indicates whether iGMP Snooping Querier is active on the VLAN.

VLAN Operational Indicates whether IGMP Snooping Querier is in “Querier” or “Non-Querier” state. When the
State switch is in Querier state, it will send out periodic general queries. When in Non-Querier
state, it will wait for moving to Querier state and does not send out any queries.

649 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

VLAN Operational Max Indicates the time to wait before removing a Leave from a host upon receiving a Leave
Response Time request. This value is calculated dynamically from the Queries received from the network. If
the Snooping Switch is in Querier state, then it is equal to the configured value.

Querier Election Indicates whether the IGMP Snooping Querier participates in querier election if it discovers
Participation the presence of a querier in the VLAN.

Querier VLAN Address The IP address will be used in the IPv4 header while sending out IGMP queries on this VLAN.
It can be configured using the appropriate command.

Operational Version The version of IPv4 will be used while sending out IGMP queries on this VLAN.

Last Querier Address Indicates the IP address of the most recent Querier from which a Query was received.

Last Querier Version Indicates the IGMP version of the most recent Querier from which a Query was received on
this VLAN.

When the optional argument detail is used, the command shows the global information and
the information for all Querier-enabled VLANs.

Port Security Commands

This section describes the command you use to configure Port Security on the switch. Port
security, which is also known as port MAC locking, allows you to secure the network by locking
allowable MAC addresses on a given port. Packets with a matching source MAC address are
forwarded normally, and all other packets are discarded.

Note! To enable the SNMP trap specific to port security, see snmp-server enable traps
violation.

port-security
This command enables port locking on an interface, a range of interfaces, or at the system level.

Default disabled

650 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format port-security

Mode  Global Config (to enable port locking globally)

 Interface Config (to enable port locking on an interface or range of interfaces)

Command Added in firmware release 1.0

History

no port-security
This command disables port locking for one (Interface Config) or all (Global Config) ports.

Default disabled

Format no port-security

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

port-security max-dynamic
This command sets the maximum number of dynamically locked MAC addresses allowed on a
specific port. The valid range is 0-600.

Default 600

Format port-security max-dynamic maxvalue

Mode Interface Config

651 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no port-security max-dynamic
This command resets the maximum number of dynamically locked MAC addresses allowed on a
specific port to its default value.

Default 600

Format no port-security max-dynamic

Mode Interface Config

Command Added in firmware release 1.0

History

port-security max-static
This command sets the maximum number of statically locked MAC addresses allowed on a port.
The valid range is 0–20.

Default 1

Format port-security max-static maxvalue

Mode Interface Config

Command Added in firmware release 1.0

History

no port-security max-static
This command sets maximum number of statically locked MAC addresses to the default value.

652 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 1

Format no port-security max-static

Mode Interface Config

Command Added in firmware release 1.0

History

port-security mac-address
This command adds a MAC address to the list of statically locked MAC addresses for an
interface or range of interfaces. The vid is the VLAN ID.

Default No mac addresses statically configured

Format port-security mac-address mac-address vid

Mode Interface Config

Command Added in firmware release 1.0

History

no port-security mac-address
This command removes a MAC address from the list of statically locked MAC addresses.

Default No mac addresses statically configured

Format no port-security mac-address mac-address vid

Mode Interface Config

653 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

port-security mac-address move

This command converts dynamically locked MAC addresses to statically locked addresses for an
interface or range of interfaces.

Default N/A

Format port-security mac-address move

Mode Interface Config

Command Added in firmware release 1.0

History

port-security mac-address sticky

This command enables sticky mode Port MAC Locking on a port. If accompanied by a MAC
address and a VLAN id (for interface config mode only), it adds a sticky MAC address to the list
of statically locked MAC addresses. These sticky addresses are converted back to dynamically
locked addresses if sticky mode is disabled on the port. The <vid> is the VLAN ID. The Global
command applies the “sticky” mode to all valid interfaces (physical and LAG). There is no global
sticky mode as such.
Sticky addresses that are dynamically learned will appear in show running-config as “port-
security mac-address sticky <mac> <vid>” entries. This distinguishes them from static entries.

Default N/A

Format port-security mac-address sticky [<mac-address> <vid>]

Mode  Global Config

654 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Interface Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E)(Config)# port-security mac-address sticky
(DM1200E)(Interface)# port-security mac-address sticky
(DM1200E)(Interface)# port-security mac-address sticky
00:00:00:00:00:01 2

no port-security mac-address sticky

The no form removes the sticky mode. The sticky MAC address can be deleted by using the
command “no port-security mac-address <mac-address> <vid>”.

Default N/A

Format no port-security mac-address sticky [<mac-address> <vid>]

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

show port-security
This command displays the port-security settings for the port(s). If you do not use a parameter,
the command displays the Port Security Administrative mode. Use the optional parameters to
display the settings on a specific interface or on all interfaces. Instead of unit/slot/port, lag
lag-intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-num

can also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

655 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show port-security [{unit/slot/port | all}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Admin Mode Port Locking mode for the entire system. This field displays if you do not supply any
parameters.

For each interface, or for the interface you specify, the following information appears:

TERM DEFINITION

Admin Mode Port Locking mode for the Interface.

Dynamic Limit Maximum dynamically allocated MAC Addresses.

Static Limit Maximum statically allocated MAC Addresses.

Violation Trap Mode Whether violation traps are enabled.

Sticky Mode The administrative mode of the port security Sticky Mode feature on the interface.

Example: The following shows example CLI display output for the command.
(DM1200E) #show port-security 1/0/1

Admin Dynamic Static Violation Sticky

Intf Mode Limit Limit Trap Mode Mode
------ ------- ---------- --------- --------- --------

656 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 1/0/1 Disabled 1 1 Disabled Enabled

show port-security dynamic

This command displays the dynamically locked MAC addresses for the port. Instead of
unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the LAG

interface. lag lag-intf-num can also be used to specify the LAG interface where lag-intf-num
is the LAG port number.

Default N/A

Format show port-security dynamic unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address MAC Address of dynamically locked MAC.

show port-security static

This command displays the statically locked MAC addresses for port. Instead of unit/slot/port,
lag lag-intf-num can be used as an alternate way to specify the LAG interface. lag lag-intf-

num can also be used to specify the LAG interface where lag-intf-num is the LAG port number.

Default N/A

Format show port-security static {unit/slot/port | lag lag-intf-num}

657 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Statically Configured The statically configured MAC address.

MAC Address

VLAN ID The ID of the VLAN that includes the host with the specified MAC address.

Sticky Indicates whether the static MAC address entry is added in sticky mode.

Example: The following shows example CLI display output for the command.
(DM1200E) #show port-security static 1/0/1

Number of static MAC addresses configured: 2

Statically configured MAC Address VLAN ID Sticky

--------------------------------- ------- ------
00:00:00:00:00:01 2 Yes
00:00:00:00:00:02 2 No

show port-security violation

This command displays the source MAC address of the last packet discarded on a locked port.
Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the
LAG interface. lag lag-intf-num can also be used to specify the LAG interface where lag-
intf-num is the LAG port number.

Default N/A

Format show port-security violation {unit/slot/port | lag lag-id}

658 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address The source MAC address of the last frame that was discarded at a locked port.

VLAN ID The VLAN ID, if applicable, associated with the MAC address of the last frame that was
discarded at a locked port.

LLDP (802.1AB) Commands

This section describes the command you use to configure Link Layer Discovery Protocol (LLDP),
which is defined in the IEEE 802.1AB specification. LLDP allows stations on an 802 LAN to
advertise major capabilities and physical descriptions. The advertisements allow a network
management system (NMS) to access and display this information.

lldp transmit
Use this command to enable the LLDP advertise capability on an interface or a range of
interfaces.

Default disabled

Format lldp transmit

Mode Interface Config

Command Added in firmware release 1.0

659 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no lldp transmit
Use this command to return the local data transmission capability to the default.

Default disabled

Format no lldp transmit

Mode Interface Config

Command Added in firmware release 1.0

History

lldp receive
Use this command to enable the LLDP receive capability on an interface or a range of interfaces.

Default disabled

Format lldp receive

Mode Interface Config

Command Added in firmware release 1.0

History

no lldp receive
Use this command to return the reception of LLDPDUs to the default value.

Default disabled

660 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no lldp receive

Mode Interface Config

Command Added in firmware release 1.0

History

lldp timers
Use this command to set the timing parameters for local data transmission on ports enabled for
LLDP. The interval-seconds determines the number of seconds to wait between transmitting
local data LLDPDUs. The range is 1-32768 seconds. The hold-value is the multiplier on the
transmit interval that sets the TTL in local data LLDPDUs. The multiplier range is 2-10. The
reinit-seconds is the delay before reinitialization, and the range is 1--0 seconds.

Default  interval—30 seconds

 hold—4

 reinit—2 seconds

Format lldp timers [interval interval-seconds] [hold hold-value] [reinit

reinit-seconds]

Mode Global Config

Command Added in firmware release 1.0

History

no lldp timers
Use this command to return any or all timing parameters for local data transmission on ports
enabled for LLDP to the default values.

Default  interval—30 seconds

661 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  hold—4

 reinit—2 seconds

Format no lldp timers [interval] [hold] [reinit]

Mode Global Config

Command Added in firmware release 1.0

History

lldp transmit-tlv
Use this command to specify which optional type length values (TLVs) in the 802.1AB basic
management set are transmitted in the LLDPDUs from an interface or range of interfaces. Use
sys-name to transmit the system name TLV. To configure the system name, see snmp-server.

Use sys-desc to transmit the system description TLV. Use sys-cap to transmit the system
capabilities TLV. Use port-desc to transmit the port description TLV. To configure the port
description, see description.

Default no optional TLVs are included

Format lldp transmit-tlv [sys-desc] [sys-name] [sys-cap] [port-desc]

Mode Interface Config

Command Added in firmware release 1.0

History

no lldp transmit-tlv
Use this command to remove an optional TLV from the LLDPDUs. Use the command without
parameters to remove all optional TLVs from the LLDPDU.

662 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default no optional TLVs are included

Format no lldp transmit-tlv [sys-desc] [sys-name] [sys-cap] [port-desc]

Mode Interface Config

Command Added in firmware release 1.0

History

lldp transmit-mgmt
Use this command to include transmission of the local system management address information
in the LLDPDUs. This command can be used to configure a single interface or a range of
interfaces.

Default disabled

Format lldp transmit-mgmt

Mode Interface Config

Command Added in firmware release 1.0

History

no lldp transmit-mgmt
Use this command to cancel inclusion of the management information in LLDPDUs.

Default disabled

Format no lldp transmit-mgmt

Mode Interface Config

663 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

lldp notification
Use this command to enable remote data change notifications on an interface or a range of
interfaces.

Default disabled

Format lldp notification

Mode Interface Config

Command Added in firmware release 1.0

History

no lldp notification
Use this command to disable notifications.

Default disabled

Format no lldp notification

Mode Interface Config

Command Added in firmware release 1.0

History

664 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

lldp notification-interval
Use this command to configure how frequently the system sends remote data change
notifications. The interval parameter is the number of seconds to wait between sending
notifications. The valid interval range is 5-3600 seconds.

Default 5

Format lldp notification-interval interval

Mode Global Config

Command Added in firmware release 1.0

History

no lldp notification-interval
Use this command to return the notification interval to the default value.

Default 5

Format no lldp notification-interval

Mode Global Config

Command Added in firmware release 1.0

History

clear lldp statistics

Use this command to reset all LLDP statistics, including MED-related information.

Default N/A

665 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format clear lldp statistics

Mode Privileged Exec

Command Added in firmware release 1.0

History

clear lldp remote-data

Use this command to delete all information from the LLDP remote data table, including MED-
related information.

Default N/A

Format clear lldp remote-data

Mode Global Config

Command Added in firmware release 1.0

History

show lldp
Use this command to display a summary of the current LLDP configuration.

Default N/A

Format show lldp

Mode Privileged Exec

Command Added in firmware release 1.0

History

666 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Transmit Interval How frequently the system transmits local data LLDPDUs, in seconds.

Transmit Hold The multiplier on the transmit interval that sets the TTL in local data LLDPDUs.
Multiplier

Re-initialization Delay The delay before reinitialization, in seconds.

Notification Interval How frequently the system sends remote data change notifications, in seconds.

show lldp interface

Use this command to display a summary of the current LLDP configuration for a specific
interface or for all interfaces.

Default N/A

Format show lldp interface {unit/slot/port | all}

Mode Privileged Exec

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface in a unit/slot/port format.

667 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Link Shows whether the link is up or down.

Transmit Shows whether the interface transmits LLDPDUs.

Receive Shows whether the interface receives LLDPDUs.

Notify Shows whether the interface sends remote data change notifications.

TLVs Shows whether the interface sends optional TLVs in the LLDPDUs. The TLV codes can be 0
(Port Description), 1 (System Name), 2 (System Description), or 3 (System Capability).

Mgmt Shows whether the interface transmits system management address information in the
LLDPDUs.

show lldp statistics

Use this command to display the current LLDP traffic and remote table statistics for a specific
interface or for all interfaces.

Default N/A

Format show lldp statistics {unit/slot/port | all}

Mode Privileged Exec

Command Added in firmware release 1.0

History

TERM DEFINITION

Last Update The amount of time since the last update to the remote table in days, hours, minutes, and
seconds.

668 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Total Inserts Total number of inserts to the remote data table.

Total Deletes Total number of deletes from the remote data table.

Total Drops Total number of times the complete remote data received was not inserted due to insufficient
resources.

Total Ageouts Total number of times a complete remote data entry was deleted because the Time to Live
interval expired.

The table contains the following column headings:

TERM DEFINITION

Interface The interface in unit/slot/port format.

TX Total Total number of LLDP packets transmitted on the port.

RX Total Total number of LLDP packets received on the port.

Discards Total number of LLDP frames discarded on the port for any reason.

Errors The number of invalid LLDP frames received on the port.

Ageouts Total number of times a complete remote data entry was deleted for the port because the
Time to Live interval expired.

TVL Discards The number of TLVs discarded.

TVL Unknowns Total number of LLDP TLVs received on the port where the type value is in the reserved
range, and not recognized.

669 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TLV MED The total number of LLDP-MED TLVs received on the interface.

TLV 802.1 The total number of LLDP TLVs received on the interface which are of type 802.1.

TLV 802.3 The total number of LLDP TLVs received on the interface which are of type 802.3.

show lldp remote-device

Use this command to display summary information about remote devices that transmit current
LLDP data to the system. You can show information about LLDP remote data received on all
ports or on a specific port.

Default N/A

Format show lldp remote-device {unit/slot/port | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Local Interface The interface that received the LLDPDU from the remote device.

RemID An internal identifier to the switch to mark each remote device to the system.

Chassis ID The ID that is sent by a remote device as part of the LLDP message, it is usually a MAC
address of the device.

Port ID The port number that transmitted the LLDPDU.

670 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

System Name The system name of the remote device.

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp remote-device all

LLDP Remote Device Summary

Local
Interface RemID Chassis ID Port ID System Name
------- ------- -------------------- ------------------ ------------------
1/0/1
1/0/2
1/0/3
1/0/4
1/0/5
1/0/6
1/0/7 2 00:FC:E3:90:01:0F 00:FC:E3:90:01:11
1/0/7 3 00:FC:E3:90:01:0F 00:FC:E3:90:01:12
1/0/7 4 00:FC:E3:90:01:0F 00:FC:E3:90:01:13
1/0/7 5 00:FC:E3:90:01:0F 00:FC:E3:90:01:14
1/0/7 1 00:FC:E3:90:01:0F 00:FC:E3:90:03:11
1/0/7 6 00:FC:E3:90:01:0F 00:FC:E3:90:04:11
1/0/8
1/0/9
1/0/10
1/0/11
1/0/12
--More-- or (q)uit

show lldp remote-device detail

Use this command to display detailed information about remote devices that transmit current
LLDP data to an interface on the system.

Default N/A

Format show lldp remote-device detail unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

671 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Local Interface The interface that received the LLDPDU from the remote device.

Remote Identifier An internal identifier to the switch to mark each remote device to the system.

Chassis ID Subtype The type of identification used in the Chassis ID field.

Chassis ID The chassis of the remote device.

Port ID Subtype The type of port on the remote device.

Port ID The port number that transmitted the LLDPDU.

System Name The system name of the remote device.

System Description Describes the remote system by identifying the system name and versions of hardware,
operating system, and networking software supported in the device.

Port Description Describes the port in an alpha-numeric format. The port description is configurable.

System Capabilities Indicates the primary function(s) of the device.

Supported

System Capabilities Shows which of the supported system capabilities are enabled.
Enabled

Management Address For each interface on the remote device with an LLDP agent, lists the type of address the
remote LLDP agent uses and specifies the address used to obtain information related to the
device.

Time To Live The amount of time (in seconds) the remote device's information received in the LLDPDU
should be treated as valid information.

672 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp remote-device detail 1/0/7

LLDP Remote Device Detail

Local Interface: 1/0/7

Remote Identifier: 2
Chassis ID Subtype: MAC Address
Chassis ID: 00:FC:E3:90:01:0F
Port ID Subtype: MAC Address
Port ID: 00:FC:E3:90:01:11
System Name:
System Description:
Port Description:
System Capabilities Supported:
System Capabilities Enabled:
Time to Live: 24 seconds

show lldp local-device

Use this command to display summary information about the advertised LLDP local data. This
command can display summary information or detail for each interface.

Default N/A

Format show lldp local-device {unit/slot/port | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface in a unit/slot/port format.

Port ID The port ID associated with this interface.

673 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Port Description The port description associated with the interface.

show lldp local-device detail

Use this command to display detailed information about the LLDP data a specific interface
transmits.

Default N/A

Format show lldp local-device detail unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface that sends the LLDPDU.

Chassis ID Subtype The type of identification used in the Chassis ID field.

Chassis ID The chassis of the local device.

Port ID Subtype The type of port on the local device.

Port ID The port number that transmitted the LLDPDU.

System Name The system name of the local device.

System Description Describes the local system by identifying the system name and versions of hardware,

674 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 operating system, and networking software supported in the device.

Port Description Describes the port in an alpha-numeric format.

System Capabilities Indicates the primary function(s) of the device.

Supported

System Capabilities Shows which of the supported system capabilities are enabled.
Enabled

Management Address The type of address and the specific address the local LLDP agent uses to send and receive
information.

LLDP-MED Commands
Link Layer Discovery Protocol - Media Endpoint Discovery (LLDP-MED) (ANSI-TIA-1057)
provides an extension to the LLDP standard. Specifically, LLDP-MED provides extensions for
network configuration and policy, device location, Power over Ethernet (PoE) management and
inventory management.

lldp med
Use this command to enable MED on an interface or a range of interfaces. By enabling MED,
you will be effectively enabling the transmit and receive function of LLDP.

Default disabled

Format lldp med

Mode Interface Config

Command Added in firmware release 1.0

History

675 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no lldp med
Use this command to disable MED.

Default disabled

Format no lldp med

Mode Interface Config

Command Added in firmware release 1.0

History

lldp med confignotification

Use this command to configure an interface or a range of interfaces to send the topology
change notification.

Default disabled

Format lldp med confignotification

Mode Interface Config

Command Added in firmware release 1.0

History

no ldp med confignotification

Use this command to disable notifications.

Default disabled

Format no lldp med confignotification

676 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

lldp med transmit-tlv

Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set
will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs) from this
interface or a range of interfaces.

Default By default, the capabilities and network policy TLVs are included.

Format lldp med transmit-tlv [capabilities] [ex-pd] [ex-pse] [inventory]

[location] [network-policy]

Mode Interface Config

Command Added in firmware release 1.0

History

TERM DEFINITION

capabilities Transmit the LLDP capabilities TLV.

ex-pd Transmit the LLDP extended PD TLV.

ex-pse Transmit the LLDP extended PSE TLV.

inventory Transmit the LLDP inventory TLV.

677 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

location Transmit the LLDP location TLV.

network-policy Transmit the LLDP network policy TLV.

no lldp med transmit-tlv

Use this command to remove a TLV.

Default By default, the capabilities and network policy TLVs are included.

Format no lldp med transmit-tlv [capabilities] [network-policy] [ex-pse] [ex-

pd] [location] [inventory]

Mode Interface Config

Command Added in firmware release 1.0

History

lldp med all

Use this command to configure LLDP-MED on all the ports.

Default disabled

Format lldp med all

Mode Global Config

Command Added in firmware release 1.0

History

lldp med confignotification all

Use this command to configure all the ports to send the topology change notification.

678 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format lldp med confignotification all

Mode Global Config

Command Added in firmware release 1.0

History

lldp med faststartrepeatcount

Use this command to set the value of the fast start repeat count. [count] is the number of
LLDP PDUs that will be transmitted when the product is enabled. The range is 1 to 10.

Default 3

Format lldp med faststartrepeatcount [count]

Mode Global Config

Command Added in firmware release 1.0

History

no lldp med faststartrepeatcount

Use this command to return to the factory default value.

Default 3

Format no lldp med faststartrepeatcount

Mode Global Config

679 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

lldp med transmit-tlv all

Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set
will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs).

Default By default, the capabilities and network policy TLVs are included.

Format lldp med transmit-tlv all [capabilities] [ex-pd] [ex-pse] [inventory]

[location] [network-policy]

Mode Global Config

Command Added in firmware release 1.0

History

TERM DEFINITION

capabilities Transmit the LLDP capabilities TLV.

ex-pd Transmit the LLDP extended PD TLV.

ex-pse Transmit the LLDP extended PSE TLV.

inventory Transmit the LLDP inventory TLV.

location Transmit the LLDP location TLV.

network-policy Transmit the LLDP network policy TLV.

680 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no lldp med transmit-tlv
Use this command to remove a TLV.

Default By default, the capabilities and network policy TLVs are included.

Format no lldp med transmit-tlv [capabilities] [network-policy] [ex-pse] [ex-

pd] [location] [inventory]

Mode Global Config

Command Added in firmware release 1.0

History

show lldp med

Use this command to display a summary of the current LLDP MED configuration.

Default N/A

Format show lldp med

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp med
LLDP MED Global Configuration

Fast Start Repeat Count: 3

Device Class: Network Connectivity

(DM1200E) #

681 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show lldp med interface
Use this command to display a summary of the current LLDP MED configuration for a specific
interface. unit/slot/port indicates a specific physical interface. all indicates all valid LLDP
interfaces.

Default N/A

Format show lldp med interface {unit/slot/port | all}

Mode Privileged Exec

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp med interface all

Interface Link configMED operMED ConfigNotify TLVsTx

--------- ------ --------- -------- ------------ -----------
1/0/1 Down Disabled Disabled Disabled 0,1
1/0/2 Up Disabled Disabled Disabled 0,1
1/0/3 Down Disabled Disabled Disabled 0,1
1/0/4 Down Disabled Disabled Disabled 0,1
1/0/5 Down Disabled Disabled Disabled 0,1
1/0/6 Down Disabled Disabled Disabled 0,1
1/0/7 Down Disabled Disabled Disabled 0,1
1/0/8 Down Disabled Disabled Disabled 0,1
1/0/9 Down Disabled Disabled Disabled 0,1
1/0/10 Down Disabled Disabled Disabled 0,1
1/0/11 Down Disabled Disabled Disabled 0,1
1/0/12 Down Disabled Disabled Disabled 0,1
1/0/13 Down Disabled Disabled Disabled 0,1
1/0/14 Down Disabled Disabled Disabled 0,1

TLV Codes: 0- Capabilities, 1- Network Policy

2- Location, 3- Extended PSE
4- Extended Pd, 5- Inventory
--More-- or (q)uit
(DM1200E) #show lldp med interface 1/0/2

Interface Link configMED operMED ConfigNotify TLVsTx

--------- ------ --------- -------- ------------ -----------
1/0/2 Up Disabled Disabled Disabled 0,1

TLV Codes: 0- Capabilities, 1- Network Policy

2- Location, 3- Extended PSE

682 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 4- Extended Pd, 5- Inventory

(DM1200E) #

show lldp med local-device detail

Use this command to display detailed information about the LLDP MED data that a specific
interface transmits. unit/slot/port indicates a specific physical interface.

Default N/A

Format show lldp med local-device detail unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp med local-device detail 1/0/8

LLDP MED Local Device Detail

Interface: 1/0/8

Network Policies
Media Policy Application Type : voice
Vlan ID: 10
Priority: 5
DSCP: 1
Unknown: False
Tagged: True

Media Policy Application Type : streamingvideo

Vlan ID: 20
Priority: 1
DSCP: 2
Unknown: False
Tagged: True

Inventory
Hardware Rev: xxx xxx xxx
Firmware Rev: xxx xxx xxx
Software Rev: xxx xxx xxx
Serial Num: xxx xxx xxx
Mfg Name: xxx xxx xxx
Model Name: xxx xxx xxx

683 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Asset ID: xxx xxx xxx

Location
Subtype: elin
Info: xxx xxx xxx

Extended POE
Device Type: pseDevice

Extended POE PSE

Available: 0.3 Watts
Source: primary
Priority: critical

Extended POE PD

Required: 0.2 Watts

Source: local
Priority: low

show lldp med remote-device

Use this command to display the summary information about remote devices that transmit
current LLDP MED data to the system. You can show information about LLDP MED remote data
received on all valid LLDP interfaces or on a specific physical interface.

Default N/A

Format show lldp med remote-device {unit/slot/port | all}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Local Interface The interface that received the LLDPDU from the remote device.

Remote ID An internal identifier to the switch to mark each remote device to the system.

684 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Device Class Device classification of the remote device.

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp med remote-device all

LLDP MED Remote Device Summary

Local
Interface Remote ID Device Class
--------- --------- ------------
1/0/8 1 Class I
1/0/9 2 Not Defined
1/0/10 3 Class II
1/0/11 4 Class III
1/0/12 5 Network Con

show lldp med remote-device detail

Use this command to display detailed information about remote devices that transmit current
LLDP MED data to an interface on the system.

Default N/A

Format show lldp med remote-device detail unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows example CLI display output for the command.
(DM1200E) #show lldp med remote-device detail 1/0/8

LLDP MED Remote Device Detail

Local Interface: 1/0/8

Remote Identifier: 18
Capabilities
MED Capabilities Supported: capabilities, networkpolicy, location, extendedpse
MED Capabilities Enabled: capabilities, networkpolicy
Device Class: Endpoint Class I

685 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Network Policies
Media Policy Application Type : voice
Vlan ID: 10
Priority: 5
DSCP: 1
Unknown: False
Tagged: True

Media Policy Application Type : streamingvideo

Vlan ID: 20
Priority: 1
DSCP: 2
Unknown: False
Tagged: True

Inventory
Hardware Rev: xxx xxx xxx
Firmware Rev: xxx xxx xxx
Software Rev: xxx xxx xxx
Serial Num: xxx xxx xxx
Mfg Name: xxx xxx xxx
Model Name: xxx xxx xxx
Asset ID: xxx xxx xxx

Location
Subtype: elin
Info: xxx xxx xxx

Extended POE
Device Type: pseDevice

Extended POE PSE

Available: 0.3 Watts
Source: primary
Priority: critical

Extended POE PD

Required: 0.2 Watts

Source: local
Priority: low

Denial of Service Commands

This section describes the commands you use to configure Denial of Service (DoS) Control. The
DM1200E provides support for classifying and blocking specific types of Denial of Service
attacks. You can configure your system to monitor and block these types of attacks:
 SIP = DIP: Source IP address = Destination IP address.
 TCP Fragment: Allows the device to drop packets that have a TCP payload where the
IP payload length minus the IP header size is less than the minimum allowed TCP
header size.

686 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  TCP Flag: TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0 and TCP
Sequence Number = 0 or TCP Flags FIN, URG, and PSH set and TCP Sequence Number
= 0 or TCP Flags SYN and FIN set.
 L4 Port: Source TCP/UDP Port = Destination TCP/UDP Port.
 ICMP: Limiting the size of ICMP Ping packets.
 SMAC = DMAC: Source MAC address = Destination MAC address
 TCP Port: Source TCP Port = Destination TCP Port
 UDP Port: Source UDP Port = Destination UDP Port
 TCP Flag & Sequence: TCP Flag SYN set and Source Port < 1024 or TCP Control Flags
= 0 and TCP Sequence Number = 0 or TCP Flags FIN, URG, and PSH set and TCP
Sequence Number = 0 or TCP Flags SYN and FIN set.
 TCP Offset: Allows the device to drop packets that have a TCP header Offset set to 1.
 TCP FIN & URG & PSH: TCP Flags FIN and URG and PSH set and TCP Sequence
Number = 0.

dos-control all
This command enables Denial of Service protection checks globally.

Default disabled

Format dos-control all

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control all
This command disables Denial of Service prevention checks globally.

Default disabled

687 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no dos-control all

Mode Global Config

Command Added in firmware release 1.0

History

dos-control sipdip
This command enables Source IP address = Destination IP address (SIP = DIP) Denial of
Service protection. If the mode is enabled, Denial of Service prevention is active for this type of
attack. If packets ingress with SIP = DIP, the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control sipdip

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control sipdip
This command disables Source IP address = Destination IP address (SIP = DIP) Denial of
Service prevention.

Default disabled

Format no dos-control sipdip

Mode Global Config

688 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having
a TCP Header Size smaller then the configured value, the packets will be dropped if the mode is
enabled. The default is disabled. If you enable dos-control firstfrag, but do not provide a
Minimum TCP Header Size, the system sets that value to 20.

Default disabled (20)

Format dos-control firstfrag [0-255]

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control firstfrag
This command sets Minimum TCP Header Size Denial of Service protection to the default value
of disabled.

Default disabled (20)

Format no dos-control firstfrag

Mode Global Config

Command Added in firmware release 1.0

History

689 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dos-control tcpfrag
This command enables TCP Fragment Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack and packets that have a TCP
payload in which the IP payload length minus the IP header size is less than the minimum
allowed TCP header size are dropped.

Default disabled

Format dos-control tcpfrag

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpfrag
This command disables TCP Fragment Denial of Service protection.

Default disabled

Format no dos-control tcpfrag

Mode Global Config

Command Added in firmware release 1.0

History

dos-control tcpflag
This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of
Service prevention is active for this type of attacks. If packets ingress having TCP Flag SYN set
and a source port less than 1024 or having TCP Control Flags set to 0 and TCP Sequence

690 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence Number set to
0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control tcpflag

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpflag
This command sets disables TCP Flag Denial of Service protections.

Default disabled

Format no dos-control tcpflag

Mode Global Config

Command Added in firmware release 1.0

History

dos-control l4port
This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial of
Service prevention is active for this type of attack. If packets ingress having Source TCP/UDP
Port Number equal to Destination TCP/UDP Port Number, the packets will be dropped if the
mode is enabled.

Note! Some applications mirror source and destination L4 ports - RIP for example uses 520 for
both. If you enable dos-control l4port, applications such as RIP may experience packet loss

691 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

which would render the application inoperable.

Default disabled

Format dos-control l4port

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control l4port
This command disables L4 Port Denial of Service protections.

Default disabled

Format no dos-control l4port

Mode Global Config

Command Added in firmware release 1.0

History

dos-control smacdmac
This command enables Source MAC address = Destination MAC address (SMAC = DMAC) Denial
of Service protection. If the mode is enabled, Denial of Service prevention is active for this type
of attack. If packets ingress with SMAC = DMAC, the packets will be dropped if the mode is
enabled.

692 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default disabled

Format dos-control smacdmac

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control smacdmac
This command disables Source MAC address = Destination MAC address (SMAC = DMAC) DoS
protection.

Default disabled

Format no dos-control smacdmac

Mode Global Config

Command Added in firmware release 1.0

History

dos-control tcpport
This command enables TCP L4 source = destination port number (Source TCP Port =
Destination TCP Port) Denial of Service protection. If the mode is enabled, Denial of Service
prevention is active for this type of attack. If packets ingress with Source TCP Port =
Destination TCP Port, the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control tcpport

693 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpport
This command disables TCP L4 source = destination port number (Source TCP Port =
Destination TCP Port) Denial of Service protection.

Default disabled

Format no dos-control tcpport

Mode Global Config

Command Added in firmware release 1.0

History

dos-control udpport
This command enables UDP L4 source = destination port number (Source UDP Port =
Destination UDP Port) DoS protection. If the mode is enabled, Denial of Service prevention is
active for this type of attack. If packets ingress with Source UDP Port = Destination UDP Port,
the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control udpport

Mode Global Config

Command Added in firmware release 1.0

694 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no dos-control udpport
This command disables UDP L4 source = destination port number (Source UDP Port =
Destination UDP Port) Denial of Service protection.

Default disabled

Format no dos-control udpport

Mode Global Config

Command Added in firmware release 1.0

History

dos-control tcpflagseq
This command enables TCP Flag and Sequence Denial of Service protections. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having
TCP Flag SYN set and a source port less than 1024 or having TCP Control Flags set to 0 and
TCP Sequence Number set to 0 or having TCP Flags FIN, URG, and PSH set and TCP Sequence
Number set to 0 or having TCP Flags SYN and FIN both set, the packets will be dropped if the
mode is enabled.

Default disabled

Format dos-control tcpflagseq

Mode Global Config

Command Added in firmware release 1.0

History

695 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no dos-control tcpflagseq
This command sets disables TCP Flag and Sequence Denial of Service protection.

Default disabled

Format no dos-control tcpflagseq

Mode Global Config

Command Added in firmware release 1.0

History

dos-control tcpoffset
This command enables TCP Offset Denial of Service protection. If the mode is enabled, Denial
of Service prevention is active for this type of attack. If packets ingress having TCP Header
Offset equal to one (1), the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control tcpoffset

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpoffset
This command disabled TCP Offset Denial of Service protection.

Default disabled

696 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no dos-control tcpoffset

Mode Global Config

Command Added in firmware release 1.0

History

dos-control tcpsyn
This command enables TCP SYN and L4 source = 0-1023 Denial of Service protection. If the
mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress
having TCP flag SYN set and an L4 source port from 0 to 1023, the packets will be dropped if
the mode is enabled.

Default disabled

Format dos-control tcpsyn

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpsyn
This command sets disables TCP SYN and L4 source = 0-1023 Denial of Service protection.

Default disabled

Format no dos-control tcpsyn

Mode Global Config

697 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

dos-control tcpsynfin
This command enables TCP SYN and FIN Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack. If packets ingress having TCP flags
SYN and FIN set, the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control tcpsynfin

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control tcpsynfin
This command sets disables TCP SYN & FIN Denial of Service protection.

Default disabled

Format no dos-control tcpsynfin

Mode Global Config

Command Added in firmware release 1.0

History

698 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dos-control tcpfinurgpsh
This command enables TCP FIN and URG and PSH and SEQ = 0 checking Denial of Service
protections. If the mode is enabled, Denial of Service prevention is active for this type of attack.
If packets ingress having TCP FIN, URG, and PSH all set and TCP Sequence Number set to 0,
the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control tcpfinurgpsh

Mode Global Config

Command History Added in firmware release 1.0

no dos-control tcpfinurgpsh
This command sets disables TCP FIN and URG and PSH and SEQ = 0 checking Denial of Service
protections.

Default disabled

Format no dos-control tcpfinurgpsh

Mode Global Config

Command Added in firmware release 1.0

History

dos-control icmpv4
This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode
is enabled, Denial of Service prevention is active for this type of attack. If ICMPv4 Echo Request

699 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

(PING) packets ingress having a size greater than the configured value, the packets will be
dropped if the mode is enabled.

Default disabled (512)

Format dos-control icmpv4 [0-16376]

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control icmpv4
This command disables Maximum ICMP Packet Size Denial of Service protections.

Default disabled (512)

Format no dos-control icmpv4

Mode Global Config

Command Added in firmware release 1.0

History

dos-control icmpv6
This command enables Maximum ICMPv6 Packet Size Denial of Service protections. If the mode
is enabled, Denial of Service prevention is active for this type of attack. If ICMPv6 Echo Request
(PING) packets ingress having a size greater than the configured value, the packets will be
dropped if the mode is enabled.

Default disabled (512)

700 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format dos-control icmpv6 0-16376

Mode Global Config

Command Added in firmware release 1.0

History

no dos-control icmpv6
This command disables Maximum ICMP Packet Size Denial of Service protections.

Default disabled (512)

Format no dos-control icmpv6

Mode Global Config

Command Added in firmware release 1.0

History

dos-control icmpfrag
This command enables ICMP Fragment Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack. If packets ingress having
fragmented ICMP packets, the packets will be dropped if the mode is enabled.

Default disabled

Format dos-control icmpfrag

Mode Global Config

Command Added in firmware release 1.0

701 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no dos-control icmpfrag
This command disabled ICMP Fragment Denial of Service protection.

Default disabled

Format no dos-control icmpfrag

Mode Global Config

Command Added in firmware release 1.0

History

show dos-control
This command displays Denial of Service configuration information.

Default N/A

Format show dos-control

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

First Fragment Mode The administrative mode of First Fragment DoS prevention. When enabled, this causes
the switch to drop packets that have a TCP header smaller then the configured Min TCP
Hdr Size.

702 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Min TCP Hdr Size The minimum TCP header size the switch will accept if First Fragment DoS prevention is
enabled.

ICMPv4 Mode The administrative mode of ICMPv4 DoS prevention. When enabled, this causes the
switch to drop ICMP packets that have a type set to ECHO_REQ (ping) and a size
greater than the configured ICMPv4 Payload Size.

Max ICMPv4 Payload Size The maximum ICMPv4 payload size to accept when ICMPv4 DoS protection is enabled.

ICMPv6 Mode The administrative mode of ICMPv6 DoS prevention. When enabled, this causes the
switch to drop ICMP packets that have a type set to ECHO_REQ (ping) and a size
greater than the configured ICMPv6 Payload Size.

Max ICMPv6 Payload Size The maximum ICMPv6 payload size to accept when ICMPv6 DoS protection is enabled.

ICMPv4 Fragment Mode The administrative mode of ICMPv4 Fragment DoS prevention. When enabled, this
causes the switch to drop fragmented ICMPv4 packets.

TCP Port Mode The administrative mode of TCP Port DoS prevention. When enabled, this causes the
switch to drop packets that have the TCP source port equal to the TCP destination port.

UDP Port Mode The administrative mode of UDP Port DoS prevention. When enabled, this causes the
switch to drop packets that have the UDP source port equal to the UDP destination port.

SIPDIP Mode The administrative mode of SIP=DIP DoS prevention. Enabling this causes the switch to
drop packets that have a source IP address equal to the destination IP address. The
factory default is disabled.

SMACDMAC Mode The administrative mode of SMAC=DMAC DoS prevention. Enabling this causes the
switch to drop packets that have a source MAC address equal to the destination MAC
address.

TCP FIN&URG& PSH Mode The administrative mode of TCP FIN & URG & PSH DoS prevention. Enabling this causes
the switch to drop packets that have TCP flags FIN, URG, and PSH set and TCP
Sequence Number = 0.

TCP Flag & Sequence Mode The administrative mode of TCP Flag DoS prevention. Enabling this causes the switch to

703 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 drop packets that have TCP control flags set to 0 and TCP sequence number set to 0.

TCP SYN Mode The administrative mode of TCP SYN DoS prevention. Enabling this causes the switch to
drop packets that have TCP Flags SYN set.

TCP SYN & FIN Mode The administrative mode of TCP SYN & FIN DoS prevention. Enabling this causes the
switch to drop packets that have TCP Flags SYN and FIN set.

TCP Fragment Mode The administrative mode of TCP Fragment DoS prevention. Enabling this causes the
switch to drop packets that have a TCP payload in which the IP payload length minus
the IP header size is less than the minimum allowed TCP header size.

TCP Offset Mode The administrative mode of TCP Offset DoS prevention. Enabling this causes the switch
to drop packets that have a TCP header Offset equal to 1.

MAC Database Commands

This section describes the commands you use to configure and view information about the MAC
databases.

bridge aging-time
This command configures the forwarding database address aging timeout in seconds. The
seconds parameter must be within the range of 10 to 1,000,000 seconds. In an SVL system, the

[fdbid/all] parameter is not used and will be ignored if entered.

Default 300

Format bridge aging-time 10-1,000,000

Mode Global Config

Command Added in firmware release 1.0

History

704 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no bridge aging-time
This command sets the forwarding database address aging timeout to the default value. In an
SVL system, the [fdbid/all] parameter is not used and will be ignored if entered.

Default 300

Format no bridge aging-time

Mode Global Config

Command Added in firmware release 1.0

History

show forwardingdb agetime

This command displays the timeout for address aging.

Default N/A

Format show forwardingdb agetime

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Address Aging Displays the system's address aging timeout value in seconds.
Timeout

705 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show mac-address-table multicast
This command displays the Multicast Forwarding Database (MFDB) information. If you enter the
command with no parameter, the entire table is displayed. You can display the table entry for
one MAC Address by specifying the MAC address as an optional parameter.

Default N/A

Format show mac-address-table multicast macaddr

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

VLAN ID The VLAN in which the MAC address is learned.

MAC Address A multicast MAC address for which the switch has forwarding or filtering information. The
format is 6 two-digit hexadecimal numbers that are separated by colons, for example
01:23:45:67:89:AB.

Source The component that is responsible for this entry in the Multicast Forwarding Database. The
source can be IGMP Snooping, GMRP, and Static Filtering.

Type The type of the entry. Static entries are those that are configured by the end user. Dynamic
entries are added to the table as a result of a learning process or protocol.

Description The text description of this multicast table entry.

Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:).

706 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Fwd Interface The resultant forwarding list is derived from combining all the component’s forwarding
interfaces and removing the interfaces that are listed as the static filtering interfaces.

Example: If one or more entries exist in the multicast forwarding table, the command output
looks similar to the following:
(DM1200E) #show mac-address-table multicast

Fwd
VLAN ID MAC Address Source Type Description Interface Interface
------- ----------------- ------- ------- --------------- --------- ---------
1 01:00:5E:01:02:03 Filter Static Mgmt Config Fwd: Fwd:
1/0/1, 1/0/1,
1/0/2, 1/0/2,
1/0/3, 1/0/3,
1/0/4, 1/0/4,
1/0/5, 1/0/5,
1/0/6, 1/0/6,
1/0/7, 1/0/7,
1/0/8, 1/0/8,
1/0/9, 1/0/9,
1/0/10, 1/0/10,
--More-- or (q)uit

show mac-address-table stats

This command displays the Multicast Forwarding Database (MFDB) statistics.

Default N/A

Format show mac-address-table stats

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

707 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Total Entries The total number of entries that can possibly be in the Multicast Forwarding Database table.

Most MFDB Entries The largest number of entries that have been present in the Multicast Forwarding Database
Ever Used table. This value is also known as the MFDB high-water mark.

Current Entries The current number of entries in the MFDB.

Section 7: Routing Commands

This chapter describes the routing commands available in the DM1200E CLI.
The Routing Commands chapter contains the following sections:

 Address Resolution Protocol Commands  Virtual LAN Routing Commands

 IP Routing Commands  DHCP and BOOTP Relay Commands
 Erro! Fonte de referência não  IP Helper Commands
encontrada.  ICMP Throttling Commands
 Router Discovery Protocol Commands

Caution! The commands in this chapter are in one of three functional groups:
 Show commands display switch settings, statistics, and other information.
 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.
 Clear commands clear some or all of the settings to factory defaults.

Address Resolution Protocol Commands

This section describes the commands you use to configure Address Resolution Protocol (ARP)
and to view ARP information on the switch. ARP associates IP addresses with MAC addresses
and stores the information as ARP entries in the ARP cache.

708 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

arp
This command creates an ARP entry. The value for ipaddress is the IP address of a device on a
subnet attached to an existing routing interface. The parameter macaddr is a unicast MAC
address for that device.
The format of the MAC address is 6 two-digit hexadecimal numbers that are separated by
colons, for example 00:06:29:32:81:40.

Default N/A

Format arp ipaddress macaddr

Mode Global Config

Command Added in firmware release 1.0

History

no arp
This command deletes an ARP entry. The value for arpentry is the IP address of the interface.
The value for ipaddress is the IP address of a device on a subnet attached to an existing
routing interface. The parameter macaddr is a unicast MAC address for that device.

Default N/A

Format no arp ipaddress macaddr

Mode Global Config

Command Added in firmware release 1.0

History

arp cachesize
This command configures the ARP cache size.

709 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 238

Format arp cachesize 47-238

Mode Global Config

Command Added in firmware release 1.0

History

no arp cachesize
This command configures the default ARP cache size.

Default 238

Format no arp cachesize

Mode Global Config

Command Added in firmware release 1.0

History

arp dynamicrenew
This command enables the ARP component to automatically renew dynamic ARP entries when
they age out. When an ARP entry reaches its maximum age, the system must decide whether
to retain or delete the entry. If the entry has recently been used to forward data packets, the
system will renew the entry by sending an ARP request to the neighbor. If the neighbor
responds, the age of the ARP cache entry is reset to 0 without removing the entry from the
hardware. Traffic to the host continues to be forwarded in hardware without interruption. If the
entry is not being used to forward data packets, then the entry is deleted from the ARP cache,
unless the dynamic renew option is enabled. If the dynamic renew option is enabled, the
system sends an ARP request to renew the entry. When an entry is not renewed, it is removed

710 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

from the hardware and subsequent data packets to the host trigger an ARP request. Traffic to
the host may be lost until the router receives an ARP reply from the host. Gateway entries,
entries for a neighbor router, are always renewed. The dynamic renew option applies only to
host entries.
The disadvantage of enabling dynamic renew is that once an ARP cache entry is created, that
cache entry continues to take space in the ARP cache as long as the neighbor continues to
respond to ARP requests, even if no traffic is being forwarded to the neighbor. In a network
where the number of potential neighbors is greater than the ARP cache capacity, enabling
dynamic renew could prevent some neighbors from communicating because the ARP cache is
full.

Default disabled

Format arp dynamicrenew

Mode Privileged EXEC

Command Added in firmware release 1.0

History

no arp dynamicrenew
This command prevents dynamic ARP entries from renewing when they age out.

Default disabled

Format no arp dynamicrenew

Mode Privileged EXEC

Command Added in firmware release 1.0

History

711 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

arp purge
This command causes the specified IP address to be removed from the ARP cache. Only entries
of type dynamic or gateway are affected by this command.

Default N/A

Format arp purge ipaddr

Mode Privileged EXEC

Command Added in firmware release 1.0

History

arp resptime
This command configures the ARP request response timeout.
The value for seconds is a valid positive integer, which represents the IP ARP entry response
timeout time in seconds. The range for seconds is between 1-10 seconds.

Default 1

Format arp resptime 1-10

Mode Global Config

Command Added in firmware release 1.0

History

no arp resptime
This command configures the default ARP request response timeout.

Default 1

712 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no arp resptime

Mode Global Config

Command Added in firmware release 1.0

History

arp retries
This command configures the ARP count of maximum request for retries.
The value for retries is an integer, which represents the maximum number of request for
retries. The range for retries is an integer between 0-10 retries.

Default 4

Format arp retries 0-10

Mode Global Config

Command Added in firmware release 1.0

History

no arp retries
This command configures the default ARP count of maximum request for retries.

Default 4

Format no arp retries

Mode Global Config

Command Added in firmware release 1.0

713 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

arp timeout
This command configures the ARP entry ageout time.
The value for seconds is a valid positive integer, which represents the IP ARP entry ageout time
in seconds. The range for seconds is between 15-21600 seconds.

Default 1200

Format arp timeout 15-21600

Mode Global Config

Command Added in firmware release 1.0

History

no arp timeout
This command configures the default ARP entry ageout time.

Default 1200

Format no arp timeout

Mode Global Config

Command Added in firmware release 1.0

History

clear arp-cache
This command causes all ARP entries of type dynamic to be removed from the ARP cache. If
the gateway keyword is specified, the dynamic entries of type gateway are purged as well.

714 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format clear arp-cache [gateway]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

clear arp-switch
Use this command to clear the contents of the switch’s Address Resolution Protocol (ARP) table
that contains entries learned through the Management port. To observe whether this command
is successful, ping from the remote system to the DUT. Issue the show arp switch command to
see the ARP entries. Then issue the clear arp-switch command and check the show arp
switch entries. There will be no more arp entries.

Default N/A

Format clear arp-switch

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show arp
This command displays the Address Resolution Protocol (ARP) cache. The displayed results are
not the total ARP entries. To view the total ARP entries, the operator should view the show arp
results in conjunction with the show arp switch results.

Default N/A

715 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show arp

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Age Time (seconds) The time it takes for an ARP entry to age out. This is configurable. Age time is measured in
seconds.

Response Time The time it takes for an ARP request timeout. This value is configurable. Response time is
(seconds) measured in seconds.

Retries The maximum number of times an ARP request is retried. This value is configurable.

Cache Size The maximum number of entries in the ARP table. This value is configurable.

Dynamic Renew Mode Displays whether the ARP component automatically attempts to renew dynamic ARP entries
when they age out.

Total Entry Count The total entries in the ARP table and the peak entry count in the ARP table.
Current / Peak

Static Entry Count The static entry count in the ARP table and maximum static entry count in the ARP table.
Current / Max

The following are displayed for each ARP entry:

TERM DEFINITION

716 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IP Address The IP address of a device on a subnet attached to an existing routing interface.

MAC Address The hardware MAC address of that device.

Interface The routing unit/slot/port associated with the device ARP entry.

Type The type that is configurable. The possible values are Local, Gateway, Dynamic and Static.

Age The current age of the ARP entry since last refresh (in hh:mm:ss format)

show arp brief

This command displays the brief Address Resolution Protocol (ARP) table information.

Default N/A

Format show arp brief

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Age Time (seconds) The time it takes for an ARP entry to age out. This value is configurable. Age time is
measured in seconds.

Response Time The time it takes for an ARP request timeout. This value is configurable. Response time is
(seconds) measured in seconds.

717 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Retries The maximum number of times an ARP request is retried. This value is configurable.

Cache Size The maximum number of entries in the ARP table. This value is configurable.

Dynamic Renew Mode Displays whether the ARP component automatically attempts to renew dynamic ARP entries
when they age out.

Total Entry Count The total entries in the ARP table and the peak entry count in the ARP table.
Current / Peak

Static Entry Count The static entry count in the ARP table and maximum static entry count in the ARP table.
Current / Max

show arp switch

This command displays the contents of the switch’s Address Resolution Protocol (ARP) table.

Default N/A

Format show arp switch

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

IP Address The IP address of a device on a subnet attached to the switch.

MAC Address The hardware MAC address of that device.

718 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Interface The routing unit/slot/port associated with the device’s ARP entry.

IP Routing Commands
This section describes the commands you use to enable and configure IP routing on the switch.

routing
This command enables IPv4 and IPv6 routing for an interface or range of interfaces. You can
view the current value for this function with the show ip brief command. The value is labeled
as “Routing Mode.”

Default disabled

Format routing

Mode Interface Config

Command Added in firmware release 1.0

History

no routing
This command disables routing for an interface.
You can view the current value for this function with the show ip brief command. The value is
labeled as “Routing Mode.”

Default disabled

Format no routing

Mode Interface Config

719 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip routing
This command enables the IP Router Admin Mode for the master switch.

Default disabled

Format ip routing

Mode Global Config

Command Added in firmware release 1.0

History

no ip routing
This command disables the IP Router Admin Mode for the master switch.

Default disabled

Format no ip routing

Mode Global Config

Command Added in firmware release 1.0

History

ip address
This command configures an IP address on an interface or range of interfaces. The command
supports RFC 3021 and accepts using 31-bit prefixes on IPv4 point-to-point links. This
command adds the label IP address in the command show ip interface.

720 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! The 31-bit subnet mask is only supported on routing interfaces. The feature is not
supported on network ports because DM1200E acts as a host, not a router, on these
interfaces.

Default N/A

Format ip address ipaddr {subnetmask | /masklen}

Mode Interface Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

ipaddr The IP address of the interface.

subnetmask A 4-digit dotted-decimal number which represents the subnet mask of the interface.

masklen Implements RFC 3021. Using the / notation of the subnet mask, this is an integer that
indicates the length of the subnet mask. Range is 5 to 32 bits.

Example: The following example of the command shows the configuration of the subnet mask
with an IP address in the dotted decimal format on interface 0/4/1.
(DM1200E) #config

(DM1200E) (Config)#interface 0/4/1

(DM1200E) (Interface 0/4/1)#ip address 192.168.10.1 255.255.255.254

Example: The next example of the command shows the configuration of the subnet mask with
an IP address in the / notation on interface 0/4/1.
(DM1200E) #config

721 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) (Config)#interface 0/4/1

(DM1200E) (Interface 0/4/1)#ip address 192.168.10.1 /31

no ip address
This command deletes an IP address from an interface. The value for ipaddr is the IP address
of the interface in a.b.c.d format where the range for a, b, c, and d is 1-255. The value for
subnetmask is a 4-digit dotted-decimal number which represents the Subnet Mask of the

interface.

Default N/A

Format no ip address [{ipaddr subnetmask}]

Mode Interface Config

Command Added in firmware release 1.0

History

ip address dhcp
This command enables the DHCPv4 client on an in-band interface so that it can acquire network
information, such as the IP address, subnet mask, and default gateway, from a network DHCP
server. When DHCP is enabled on the interface, the system automatically deletes all manually
configured IPv4 addresses on the interface.
To enable the DHCPv4 client on an in-band interface and send DHCP client messages with the
client identifier option, use the ip address dhcp client-id configuration command in interface
configuration mode.

Default disabled

Format ip address dhcp [client-id]

722 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

Example: In the following example, DHCPv4 is enabled on interface 0/4/1.

(DM1200E) #config
(DM1200E) (Config)#interface 0/4/1
(DM1200E) (Interface 0/4/1)#ip address dhcp

no ip address dhcp
The no ip address dhcp command releases a leased address and disables DHCPv4 on an
interface. The no form of the ip address dhcp client-id command removes the client-id
option and also disables the DHCP client on the in-band interface.

Default disabled

Format no ip address dhcp [client-id]

Mode Interface Config

Command Added in firmware release 1.0

History

ip default-gateway
This command manually configures a default gateway for the switch. Only one default gateway
can be configured. If you invoke this command multiple times, each command replaces the
previous value.
When the system does not have a more specific route to a packet’s destination, it sends the
packet to the default gateway. The system installs a default IPv4 route with the gateway
address as the next hop address. The route preference is 253. A default gateway configured
with this command is more preferred than a default gateway learned from a DHCP server.

723 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0.0.0.0

Format ip default-gateway ipaddr

Mode Global Config

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

ipaddr The IPv4 address of an attached router.

Example: The following example sets the default gateway to 10.1.1.1.

(DM1200E) #config
(DM1200E) (Config)#ip default-gateway 10.1.1.1

no ip default-gateway
This command removes the default gateway address from the configuration.

Default 0.0.0.0

Format no ip default-gateway ipaddr

Mode Interface Config

Command Added in firmware release 1.0

History

724 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

release dhcp
Use this command to force the DHCPv4 client to release the leased address from the specified
interface. The DHCP client sends a DHCP Release message telling the DHCP server that it no
longer needs the IP address, and that the IP address can be reassigned to another

renew dhcp
Use this command to force the DHCPv4 client to immediately renew an IPv4 address lease on
the specified interface.

Default N/A

Format renew dhcp unit/slot/port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

renew dhcp network-port

Use this command to renew an IP address on a network port.

Default N/A

Format renew dhcp network-port

Mode Privileged EXEC

Command Added in firmware release 1.0

History

725 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip route
This command configures a static route. The ipaddr parameter is a valid IP address, and
subnetmask is a valid subnet mask. The nexthopip parameter is a valid IP address of the next

hop router. The optional preference parameter is an integer (value from 1 to 255) that allows
you to specify the preference value (sometimes called “administrative distance”) of an individual
static route. Among routes to the same destination, the route with the lowest preference value
is the route entered into the forwarding database. By specifying the preference of a static route,
you control whether a static route is more or less preferred than routes from dynamic routing
protocols. The preference also controls whether a static route is more or less preferred than
other static routes to the same destination. A route with a preference of 255 cannot be used to
forward traffic.
For the static routes to be visible, you must perform the following steps:
 Enable ip routing globally.
 Enable ip routing for the interface.
 Confirm that the associated link is also up.

Default preference—1

Format ip route ipaddr subnetmask [nexthopip] [preference]

Mode Global Config

Command Added in firmware release 1.0

History

no ip route
This command deletes a single next hop to a destination static route. If you use the nexthopip
parameter, the next hop is deleted. If you use the preference value, the preference value of
the static route is reset to its default.

Default preference—1

726 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no ip route ipaddr subnetmask [{nexthopip [preference]}]

Mode Global Config

Command Added in firmware release 1.0

History

ip route default
This command configures the default route. The value for nexthopip is a valid IP address of the
next hop router. The preference is an integer value from 1 to 255. A route with a preference of
255 cannot be used to forward traffic.

Default preference—1

Format ip route default nexthopip [preference]

Mode Global Config

Command Added in firmware release 1.0

History

no ip route default
This command deletes all configured default routes. If the optional nexthopip parameter is
designated, the specific next hop is deleted from the configured default route and if the optional
preference value is designated, the preference of the configured default route is reset to its
default.

Default preference—1

Format no ip route default [{nexthopip | preference}]

727 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

ip route distance
This command sets the default distance (preference) for static routes. Lower route distance
values are preferred when determining the best route. The ip route and ip route default
commands allow you to optionally set the distance (preference) of an individual static route.
The default distance is used when no distance is specified in these commands. Changing the
default distance does not update the distance of existing static routes, even if they were
assigned the original default distance. The new default distance will only be applied to static
routes created after invoking the ip route distance command.

Default 1

Format ip route distance 1-255

Mode Global Config

Command Added in firmware release 1.0

History

no ip route distance
This command sets the default static route preference value in the router. Lower route
preference values are preferred when determining the best route.

Default 1

Format no ip route distance

728 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command Added in firmware release 1.0

History

ip netdirbcast
This command enables the forwarding of network-directed broadcasts on an interface or range
of interfaces. When enabled, network directed broadcasts are forwarded. When disabled they
are dropped.

Default disabled

Format ip netdirbcast

Mode Interface Config

Command Added in firmware release 1.0

History

no ip netdirbcast
This command disables the forwarding of network-directed broadcasts. When disabled, network
directed broadcasts are dropped.

Default disabled

Format no ip netdirbcast

Mode Interface Config

Command Added in firmware release 1.0

History

729 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip mtu
This command sets the IP Maximum Transmission Unit (MTU) on a routing interface or range of
interfaces. The IP MTU is the size of the largest IP packet that can be transmitted on the
interface without fragmentation. Forwarded packets are dropped if they exceed the IP MTU of
the outgoing interface.
Packets originated on the router may be fragmented by the IP stack.

Note! The IP MTU size refers to the maximum size of the IP packet (IP Header + IP payload).
It does not include any extra bytes that may be required for Layer-2 headers. To receive and
process packets, the Ethernet MTU (see mtu) must take into account the size of the Ethernet
header.

Default 1500 bytes

Format ip mtu 68-<Interface MTU value-18>

Mode Interface Config

Command Added in firmware release 1.0

History

no ip mtu
This command resets the ip mtu to the default value.

Default 1500 bytes

Format no ip mtu

Mode Interface Config

730 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

encapsulation
This command configures the link layer encapsulation type for the packet on an interface or
range of interfaces. The encapsulation type can be ethernet or snap.

Default ethernet

Format encapsulation {ethernet | snap}

Mode Interface Config

Command Added in firmware release 1.0

History

Note! Routed frames are always ethernet encapsulated when a frame is routed to a VLAN.

show dhcp lease

This command displays a list of IPv4 addresses currently leased from a DHCP server on a
specific in-band interface or all in-band interfaces. This command does not apply to service or
network ports.

Default N/A

Format show dhcp lease [interface unit/slot/port]

Modes Privileged EXEC

731 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

IP address, Subnet mask The IP address and network mask leased from the DHCP server

DHCP Lease server The IPv4 address of the DHCP server that leased the address.

State State of the DHCPv4 Client on this interface

DHCP transaction ID The transaction ID of the DHCPv4 Client

Lease The time (in seconds) that the IP address was leased by the server

Renewal The time (in seconds) when the next DHCP renew Request is sent by DHCPv4 Client to
renew the leased IP address

Rebind The time (in seconds) when the DHCP Rebind process starts

Retry count Number of times the DHCPv4 client sends a DHCP REQUEST message before the server
responds

show ip brief
This command displays all the summary information of the IP, including the ICMP rate limit
configuration and the global ICMP Redirect configuration.

Default N/A

Format show ip brief

732 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Default Time to Live The computed TTL (Time to Live) of forwarding a packet from the local router to the final
destination.

Routing Mode Shows whether the routing mode is enabled or disabled.

Maximum Next Hops The maximum number of next hops the packet can travel.

Maximum Routes The maximum number of routes the packet can travel.

ICMP Rate Limit Shows how often the token bucket is initialized with burst-size tokens. Burst-interval is from
Interval 0 to 2147483647 milliseconds. The default burst-interval is 1000 msec.

ICMP Rate Limit Burst Shows the number of ICMPv4 error messages that can be sent during one burst-interval.
Size The range is from 1 to 200 messages. The default value is 100 messages.

ICMP Echo Replies Shows whether ICMP Echo Replies are enabled or disabled.

ICMP Redirects Shows whether ICMP Redirects are enabled or disabled.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip brief

Default Time to Live........................... 64

Routing Mode................................... Disabled
Maximum Next Hops.............................. 4
Maximum Routes................................. 128

733 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 ICMP Rate Limit Interval....................... 1000 msec
ICMP Rate Limit Burst Size..................... 100 messages
ICMP Echo Replies.............................. Enabled
ICMP Redirects................................. Enabled

show ip interface
This command displays all pertinent information about the IP interface. The argument
unit/slot/port corresponds to a physical routing interface or VLAN routing interface. The
keyword vlan is used to specify the VLAN ID of the routing VLAN directly instead of in a
unit/slot/port format.

Default N/A

Format show ip interface {unit/slot/port|vlan 1-4093}

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Routing Interface Determine the operational status of IPv4 routing Interface. The possible values are Up or
Status Down.

Primary IP Address The primary IP address and subnet masks for the interface. This value appears only if you
configure it.

Method Shows whether the IP address was configured manually or acquired from a DHCP server.

Helper IP Address The helper IP addresses configured by the command ip helper-address (Interface Config).

734 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Routing Mode The administrative mode of router interface participation. The possible values are enable or
disable. This value is configurable.

Administrative Mode The administrative mode of the specified interface. The possible values of this field are enable
or disable. This value is configurable.

Forward Net Directed Displays whether forwarding of network-directed broadcasts is enabled or disabled. This value
Broadcasts is configurable.

Proxy ARP Displays whether Proxy ARP is enabled or disabled on the system.

Local Proxy ARP Displays whether Local Proxy ARP is enabled or disabled on the interface.

Active State Displays whether the interface is active or inactive. An interface is considered active if its link
is up and it is in forwarding state.

Link Speed Data Rate An integer representing the physical link data rate of the specified interface. This is measured
in Megabits per second (Mbps).

MAC Address The burned in physical address of the specified interface. The format is 6 two-digit
hexadecimal numbers that are separated by colons.

Encapsulation Type The encapsulation type for the specified interface. The types are: Ethernet or SNAP.

IP MTU The maximum transmission unit (MTU) size of a frame, in bytes.

Bandwidth Shows the bandwidth of the interface.

Destination Displays whether ICMP Destination Unreachables may be sent (enabled or disabled).
Unreachables

ICMP Redirects Displays whether ICMP Redirects may be sent (enabled or disabled).

DHCP Client Identifier The client identifier is displayed in the output of the command only if DHCP is enabled with

735 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 the client-id option on the in-band interface. See ip address dhcp.

Example: The following shows example CLI display output for the command.
(DM1200E)#show ip interface 1/0/2

Routing Interface Status....................... Down

Primary IP Address............................. 1.2.3.4/255.255.255.0
Method......................................... Manual
Helper IP Address.............................. 1.2.3.4
............................................... 1.2.3.5
Routing Mode................................... Disable
Administrative Mode............................ Enable
Forward Net Directed Broadcasts................ Disable
Proxy ARP...................................... Enable
Local Proxy ARP................................ Disable
Active State................................... Inactive
Link Speed Data Rate........................... Inactive
MAC Address.................................... 00:10:18:82:0C:68
Encapsulation Type............................. Ethernet
IP MTU......................................... 1500
Bandwidth...................................... 100000 kbps
Destination Unreachables....................... Enabled
ICMP Redirects................................. Enabled

Example: In the following example the DHCP client is enabled on a VLAN routing interface.
(DM1200E) #show ip interface vlan 10

Routing Interface Status................. Up

Method................................... DHCP
Routing Mode............................. Enable
Administrative Mode...................... Enable
Forward Net Directed Broadcasts.......... Disable
Active State............................. Inactive
Link Speed Data Rate..................... 10 Half
MAC address.............................. 00:10:18:82:16:0E
Encapsulation Type....................... Ethernet
IP MTU................................... 1500
Bandwidth................................ 10000 kbps
Destination Unreachables................. Enabled
ICMP Redirects........................... Enabled
Interface Suppress Status................ Unsuppressed
DHCP Client Identifier................... 0-0010.1882.160E-vl10

show ip interface brief

This command displays summary information about IP configuration settings for all ports in the
router, and indicates how each IP address was assigned.

736 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default N/A

Format show ip interface brief

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface Valid slot and port number separated by a forward slash.

State Routing operational state of the interface.

IP Address The IP address of the routing interface in 32-bit dotted decimal format.

IP Mask The IP mask of the routing interface in 32-bit dotted decimal format.

Method Indicates how each IP address was assigned. The field contains one of the following values:

 DHCP - The address is leased from a DHCP server.

 Manual - The address is manually configured.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip interface brief

Interface State IP Address IP Mask Method

---------- ----- --------------- --------------- --------
1/0/17 Up 192.168.75.1 255.255.255.0 DHCP

737 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip route
This command displays the routing table. The ip-address specifies the network for which the
route is to be displayed and displays the best matching best-route for the address. The mask
specifies the subnet mask for the given ip-address. When you use the longer-prefixes
keyword, the ip-address and mask pair becomes the prefix, and the command displays the
routes to the addresses that match that prefix. Use the protocol parameter to specify the
protocol that installed the routes. The value for protocol can be connected or static. Use the
all parameter to display all routes including best and nonbest routes. If you do not use the all

parameter, the command displays only the best route.

Note! If you use the connected keyword for protocol, the all option is not available because
there are no best or nonbest connected routes.

Note! If you use the static keyword for protocol, the description option is also available,
for example: show ip route ip-address static description. This command shows the
description configured with the specified static route(s).

Default N/A

Format show ip route [{ip-address [protocol] | {ip-address mask [longer-

prefixes] [protocol] | protocol} [all] | all}]

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

738 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Route Codes The key for the routing protocol codes that might appear in the routing table output.

The show ip route command displays the routing tables in the following format:
Code IP-Address/Mask [Preference/Metric] via Next-Hop, Route-
Timestamp, Interface, Truncated

The columns for the routing table display the following information:

TERM DEFINITION

Code The codes for the routing protocols that created the routes.

Default Gateway The IP address of the default gateway. When the system does not have a more specific route
to a packet's destination, it sends the packet to the default gateway.

IP-Address/Mask The IP-Address and mask of the destination network corresponding to this route.

Preference The administrative distance associated with this route. Routes with low values are preferred
over routes with higher values.

Metric The cost associated with this route.

via Next-Hop The outgoing router IP address to use when forwarding traffic to the next router (if any) in
the path toward the destination.

Route-Timestamp The last updated time for dynamic routes. The format of Route-Timestamp will be

 Days:Hours:Minutes if days > = 1

 Hours:Minutes:Seconds if days < 1

Interface The outgoing router interface to use when forwarding traffic to the next destination. For

739 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 reject routes, the next hop interface would be Null0 interface.

T A flag appended to a route to indicate that it is an ECMP route, but only one of its next hops
has been installed in the forwarding table. The forwarding table may limit the number of
ECMP routes or the number of ECMP groups. When an ECMP route cannot be installed
because such a limit is reached, the route is installed with a single next hop. Such truncated
routes are identified by a T after the interface name.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip route

Route Codes: C - Connected, S - Static

Default gateway is 1.1.1.2

C 1.1.1.0/24 [0/1] directly connected, 1/0/11

C 2.2.2.0/24 [0/1] directly connected, 1/0/1
C 5.5.5.0/24 [0/1] directly connected, 1/0/5
S 7.0.0.0/8 [1/0] directly connected, Null0
C 11.11.11.0/24 [0/1] directly connected, 1/0/11
S 12.0.0.0/8 [5/0] directly connected, Null0
S 23.0.0.0/8 [3/0] directly connected, Null0
C 1.1.1.0/24 [0/1] directly connected, 1/0/11
C 2.2.2.0/24 [0/1] directly connected, 1/0/1
C 5.5.5.0/24 [0/1] directly connected, 1/0/5
C 11.11.11.0/24 [0/1] directly connected, 1/0/11
S 10.3.2.0/24 [1/0] via 1.1.1.2, 1/0/11

show ip route ecmp-groups

This command reports all current ECMP groups in the IPv4 routing table. An ECMP group is a
set of two or more next hops used in one or more routes. The groups are numbered arbitrarily
from 1 to n. The output indicates the number of next hops in the group and the number of
routes that use the set of next hops. The output lists the IPv4 address and outgoing interface of
each next hop in each group.

Default N/A

Format show ip route ecmp-groups

Mode Privileged Exec

740 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip route ecmp-groups

ECMP Group 1 with 2 next hops (used by 1 route)

172.20.33.100 on interface 2/33
172.20.34.100 on interface 2/34

ECMP Group 2 with 3 next hops (used by 1 route)

172.20.32.100 on interface 2/32
172.20.33.100 on interface 2/33
172.20.34.100 on interface 2/34

ECMP Group 3 with 4 next hops (used by 1 route)

172.20.31.100 on interface 2/31
172.20.32.100 on interface 2/32
172.20.33.100 on interface 2/33
172.20.34.100 on interface 2/34

show ip route summary

This command displays a summary of the state of the routing table. When the optional all
keyword is given, some statistics, such as the number of routes from each source, include
counts for alternate routes. An alternate route is a route that is not the most preferred route to
its destination and therefore is not installed in the forwarding table. To include only the number
of best routes, do not use the optional keyword.

Default N/A

Format show ip route summary [all]

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

741 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Connected Routes The total number of connected routes in the routing table.

Static Routes Total number of static routes in the routing table.

Total Routes Total number of routes in the routing table.

Best Routes (High) The number of best routes currently in the routing table. This number only counts the best
route to each destination. The value in parentheses indicates the highest count of unique best
routes since counters were last cleared.

Alternate Routes The number of alternate routes currently in the routing table. An alternate route is a route
that was not selected as the best route to its destination.

Route Adds The number of routes that have been added to the routing table.

Route Modifies The number of routes that have been changed after they were initially added to the routing
table.

Route Deletes The number of routes that have been deleted from the routing table.

Unresolved Route The number of route adds that failed because none of the route’s next hops were on a local
Adds subnet. Note that static routes can fail to be added to the routing table at startup because
the routing interfaces are not yet up. This counter gets incremented in this case. The static
routes are added to the routing table when the routing interfaces come up.

Invalid Route Adds The number of routes that failed to be added to the routing table because the route was
invalid. A log message is written for each of these failures.

Failed Route Adds The number of routes that failed to be added to the routing table because of a resource
limitation in the routing table.

Reserved Locals The number of routing table entries reserved for a local subnet on a routing interface that is
down. Space for local routes is always reserved so that local routes can be installed when a

742 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 routing interface bounces.

Unique Next Hops The number of distinct next hops used among all routes currently in the routing table. These
(High) include local interfaces for local routes and neighbors for indirect routes. The value in
parentheses indicates the highest count of unique next hops since counters were last cleared.

Next Hop Groups The current number of next hop groups in use by one or more routes. Each next hop group
(High) includes one or more next hops. The value in parentheses indicates the highest count of next
hop groups since counters were last cleared.

ECMP Groups (High) The number of next hop groups with multiple next hops. The value in parentheses indicates
the highest count of next hop groups since counters were last cleared.

ECMP Groups The number of next hop groups with multiple next hops.

ECMP Routes The number of routes with multiple next hops currently in the routing table.

Truncated ECMP The number of ECMP routes that are currently installed in the forwarding table with just one
Routes next hop. The forwarding table may limit the number of ECMP routes or the number of ECMP
groups. When an ECMP route cannot be installed because such a limit is reached, the route is
installed with a single next hop.

ECMP Retries The number of ECMP routes that have been installed in the forwarding table after initially
being installed with a single next hop.

Routes with n Next The current number of routes with each number of next hops.
Hops

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip route summary
Connected Routes............................... 7
Static Routes.................................. 1
Total routes................................... 1032
Best Routes (High)............................. 1032 (1032)
Alternate Routes............................... 0
Route Adds..................................... 1010
Route Modifies................................. 1
Route Deletes.................................. 10
Unresolved Route Adds.......................... 0
Invalid Route Adds............................. 0
Failed Route Adds.............................. 0

743 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Reserved Locals................................ 0

Unique Next Hops (High)........................ 13 (13)

Next Hop Groups (High)......................... 13 (14)
ECMP Groups (High)............................. 2 (3)
ECMP Routes.................................... 1001
Truncated ECMP Routes.......................... 0
ECMP Retries................................... 0
Routes with 1 Next Hop......................... 31
Routes with 2 Next Hops........................ 1
Routes with 4 Next Hops........................ 1000

clear ip route counters

The command resets to zero the IPv4 routing table counters reported in the command show ip
route summary. The command only resets event counters. Counters that report the current
state of the routing table, such as the number of routes of each type, are not reset.

Default N/A

Format clear ip route counters

Mode Privileged Exec

Command Added in firmware release 1.0

History

show ip route preferences

This command displays detailed information about the route preferences for each type of route.
Route preferences are used in determining the best route. Lower router preference values are
preferred over higher router preference values. A route with a preference of 255 cannot be
used to forward traffic.

Default N/A

Format show ip route preferences

744 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Local The local route preference value.

Static The static route preference value.

Configured Default The route preference value of the statically-configured default gateway
Gateway

DHCP Default Gateway The route preference value of the default gateway learned from the DHCP server.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip route preferences

Local.......................................... 0
Static......................................... 1
Configured Default Gateway..................... 253
DHCP Default Gateway........................... 254

show ip stats
This command displays IP statistical information. Refer to RFC 1213 for more information about
the fields that are displayed.

Default N/A

Format show ip stats

745 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

show routing heap summary

This command displays a summary of the memory allocation from the routing heap. The routing
heap is a chunk of memory set aside when the system boots for use by the routing applications.

Default N/A

Format show routing heap summary

Mode Privileged Exec

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

Heap Size The amount of memory, in bytes, allocated at startup for the routing heap.

Memory In Use The number of bytes currently allocated.

Memory on Free List The number of bytes currently on the free list. When a chunk of memory from the routing
heap is freed, it is placed on a free list for future reuse.

Memory Available in The number of bytes in the original heap that have never been allocated.
Heap

746 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

In Use High Water The maximum memory in use since the system last rebooted.
Mark

Example: The following shows example CLI display output for the command.
(DM1200E) #show routing heap summary

Heap Size ..................................... 3478456

Memory In Use ................................. 54100 ( 1% )
Memory on Free List ........................... 47 ( 0% )
Memory Available in Heap ...................... 3424340 ( 98% )
In Use High Water Mark ........................ 54100 ( 1% )

ip prefix-list
To create a prefix list or add a prefix list entry, use the ip prefix-list command in Global
Configuration mode. Prefix lists allow matching of route prefixes with those specified in the
prefix list. Each prefix list includes of a sequence of prefix list entries ordered by their sequence
numbers. A router sequentially examines each prefix list entry to determine if the route’s prefix
matches that of the entry. An empty or nonexistent prefix list permits all prefixes. An implicit
deny is assume if a given prefix does not match any entries of a prefix list. Once a match or
deny occurs the router does not go through the rest of the list. A prefix list may be used within
a route map to match a route’s prefix using the command match ip address.
Up to 128 prefix lists may be configured. The maximum number of statements allowed in prefix
list is 64.

Default No prefix lists are configured by default. When neither the ge nor the le option is configured, the
destination prefix must match the network/length exactly. If the ge option is configured without
the le option, any prefix with a network mask greater than or equal to the ge value is considered a
match. Similarly, if the le option is configured without the ge option, a prefix with a network mask
less than or equal to the le value is considered a match.

Format ip prefix-list list-name {[seq number] {permit | deny} network/length

[ge length] [le length] | renumber renumber-interval first-statement-
number}

Mode Global Configuration

747 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

list-name The text name of the prefix list. Up to 32 characters.

seq number (Optional) The sequence number for this prefix list statement. Prefix list statements are
ordered from lowest sequence number to highest and applied in that order. If you do not
specify a sequence number, the system will automatically select a sequence number five
larger than the last sequence number in the list. Two statements may not be configured with
the same sequence number. The value ranges from 1 to 4,294,967,294.

permit Permit routes whose destination prefix matches the statement.

deny Deny routes whose destination prefix matches the statement.

network/length Specifies the match criteria for routes being compared to the prefix list statement. The
network can be any valid IP prefix. The length is any IPv4 prefix length from 0 to 32.

ge length (Optional) If this option is configured, then a prefix is only considered a match if its network
mask length is greater than or equal to this value. This value must be longer than the
network length and less than or equal to 32.

le length (Optional) If this option is configured, then a prefix is only considered a match if its network
mask length is less than or equal to this value. This value must be longer than the ge length
and less than or equal to 32.

renumber (Optional) Provides the option to renumber the sequence numbers of the IP prefix list
statements with a given interval starting from a particular sequence number. The valid range
for renumber-interval is 1 – 100, and the valid range for first-statement-number is 1 –
1000.

Example: The following example configures a prefix list that allows routes with one of two
specific destination prefixes, 172.20.0.0/16 and 192.168.1.0/24:

748 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E)(config)# ip prefix-list apple seq 10 permit 172.20.0.0/16
(DM1200E)(config)# ip prefix-list apple seq 20 permit 192.168.10/24

Example: The following example disallows only the default route.

(DM1200E)(config)# ip prefix-list orange deny 0.0.0.0/0
(DM1200E)(config)# ip prefix-list orange permit 0.0.0.0/0 ge 1

no ip prefix-list
To delete a prefix list or a statement in a prefix list, use the no form of this command. The
command no ip prefix-list list-name deletes the entire prefix list. To remove an individual
statement from a prefix list, you must specify the statement exactly, with all its options.

Default No prefix lists are configured by default. When neither the ge nor the le option is configured, the
destination prefix must match the network/length exactly. If the ge option is configured without
the le option, any prefix with a network mask greater than or equal to the ge value is considered a
match. Similarly, if the le option is configured without the ge option, a prefix with a network mask
less than or equal to the le value is considered a match.

Format no ip prefix-list list-name [seq number] { permit | deny }

network/length [ge length] [le length]

Mode Global Configuration

Command Added in firmware release 1.0

History

ip prefix-list description
To apply a text description to a prefix list, use the ip prefix-list description command in
Global Configuration mode.

Default No description is configured by default.

Format ip prefix-list list-name description text

Mode Global Configuration

749 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

list-name The text name of the prefix list.

description text Text description of the prefix list. Up to 80 characters.

no ip prefix-list description
To remove the text description, use the no form of this command.

Default No description is configured by default.

Format no ip prefix-list list-name description

Mode Global Configuration

Command History Added in firmware release 1.0

route-map
To create a route map and enter Route Map Configuration mode, use the route-map
command in Global Configuration mode. One use of a route map is to limit the redistribution of
routes to a specified range of route prefixes. The redistribution command specifies a route map
which refers to a prefix list. The prefix list identifies the prefixes that may be redistributed.
DM1200E accepts up to 64 route maps.

Default No route maps are configured by default. If no permit or deny tag is given, permit is the default.

750 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format route-map map-tag [permit|deny] [sequence-number]

Mode Global Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

map-tag Text name of the route map. Route maps with the same name are grouped together in order
of their sequence numbers. A route map name may be up to 32 characters long.

permit (Optional) Permit routes that match all of the match conditions in the route map.

deny (Optional) Deny routes that match all of the match conditions in the route map.

sequence-number (Optional) An integer used to order the set of route maps with the same name. Route maps
are ordered from lowest to greatest sequence number, with lower sequence numbers being
considered first. If no sequence number is specified, the system assigns a value ten greater
than the last statement in the route map. The range is 0 to 65,535.

no route-map
To delete a route map or one of its statements, use the no form of this command.

Default No route maps are configured by default. If no permit or deny tag is given, permit is the default.

Format no route-map map-tag [permit|deny] [sequence-number]

Mode Global Configuration

Command Added in firmware release 1.0

751 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

match ip address
To configure a route map to match based on a destination prefix, use the match ip address
command in Route Map Configuration mode. If you specify multiple prefix lists in one statement,
then a match occurs if a prefix matches any one of the prefix lists. If you configure a match ip
address statement within a route map section that already has a match ip address statement,
the new prefix lists are added to the existing set of prefix lists, and a match occurs if any prefix
list in the combined set matches the prefix.

Default No match criteria are defined by default.

Format match ip address prefix-list prefix-list-name [prefix-list-name...]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

prefix-list-name The name of a prefix list used to identify the set of matching routes. Up to eight prefix lists
may be specified.

no match ip address
To delete a match statement from a route map, use the no form of this command.

Default No match criteria are defined by default.

Format no match ip address [prefix-list prefix-list-name [prefix-list-name...]]

752 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Route Map Configuration

Command Added in firmware release 1.0

History

match ip address <access-list-number | access-list-name>

Use this command to configure a route map in order to match based on the match criteria
configured in an IP access-list.
Note that an IP ACL must be configured before it is linked to a route-map. Actions present in an
IP ACL configuration are applied with other actions involved in route-map. If an IP ACL
referenced by a route-map is removed or rules are added or deleted from that ACL, the
configuration is rejected.
If there are a list of IP access-lists specified in this command and the packet matches at least
one of these access-list match criteria, the corresponding set of actions in route-map are
applied to packet.
If there are duplicate IP access-list numbers/names in this command, the duplicate
configuration is ignored.

Default No match criteria are defined by default.

Format match ip address access-list-number | access-list-name [...access-list-

number | name ]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

753 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Access-list-number The access-list number that identifies an access-list configured through access-list CLI
configuration commands. This number is 1 to 99 for standard access list number. This
number is 100 to 199 for extended access list number.

Access-list-name The access-list name that identifies named IP ACLs. Access-list name can be up to 31
characters in length.

A maximum of 16 ACLs can be specified in this ‘match’ clause.

Example: The following sequence shows creating a route-map with “match” clause on ACL
number and applying that route-map on an interface.
(DM1200E) (config)#access-list 1 permit ip 10.1.0.0 0.0.255.255
(DM1200E) (config)#access-list 2 permit ip 10.2.0.0 0.0.255.255
(DM1200E) (config)#route-map equal-access permit 10
(DM1200E) (config-route-map)#match ip address 1
(DM1200E) (config-route-map)#set ip default next-hop 192.168.6.6
(DM1200E) (config-route-map)#route-map equal-access permit 20
(DM1200E) (config-route-map)#match ip address 2
(DM1200E) (config-route-map)#set ip default next-hop 172.16.7.7
(DM1200E) (config)#interface 1/0/1
(DM1200E) (Interface 1/0/1)#ip address 10.1.1.1 255.255.255.0
(DM1200E) (Interface 1/0/1)#ip policy route-map equal-access
(DM1200E) (config)#interface 1/0/2
(DM1200E) (Interface 1/0/2)#ip address 192.168.6.5 255.255.255.0
(DM1200E) (config)#interface 1/0/3
(DM1200E) (Interface 1/0/3)#ip address 172.16.7.6 255.255.255.0

The ip policy route-map equal-access command is applied to interface 1/0/1. All packets coming
inside 1/0/1 are policy-routed.
Sequence number 10 in route map equal-access is used to match all packets sourced from any
host in subnet 10.1.0.0. If there is a match, and if the router has no explicit route for the
packet’s destination, it is sent to next-hop address 192.168.6.6 .
Sequence number 20 in route map equal-access is used to match all packets sourced from any
host in subnet 10.2.0.0. If there is a match, and if the router has no explicit route for the
packet’s destination, it is sent to next-hop address 172.16.7.7.
Rest all packets are forwarded as per normal L3 destination-based routing.

Example: This example illustrates the scenario where IP ACL referenced by a route-map is
removed or rules are added or deleted from that ACL, this is how configuration is rejected:

754 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) #show ip access-lists

Current number of ACLs: 9 Maximum number of ACLs: 100

ACL ID/Name Rules Direction Interface(s) VLAN(s)

------------------------------- ----- --------- ---------------- ----------
1 1
2 1
3 1
4 1
5 1
madan 1

(DM1200E Routing) #show mac access-lists

Current number of all ACLs: 9 Maximum number of all ACLs: 100

MAC ACL Name Rules Direction Interface(s) VLAN(s)

------------------------------- ----- --------- ---------------- ----------
madan 1
mohan 1
goud 1

(DM1200E) #
(DM1200E) #
(DM1200E) #configure

(DM1200E) (Config)#route-map madan

(DM1200E) (route-map)#match ip address 1 2 3 4 5 madan

(DM1200E) (route-map)#match mac-list madan mohan goud

(DM1200E) (route-map)#exit

(DM1200E) (Config)#exit

(DM1200E) #show route-map

route-map madan permit 10

Match clauses:
ip address (access-lists) : 1 2 3 4 5 madan
mac-list (access-lists) : madan mohan goud
Set clauses:

(DM1200E) (Config)#access-list 2 permit every

Request denied. Another application using this ACL restricts the number of rules
allowed.

(DM1200E) (Config)#ip access-list madan

(DM1200E) (Config-ipv4-acl)#permit udp any any

Request denied. Another application using this ACL restricts the number of rules
allowed.

755 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no match ip address
To delete a match statement from a route map, use the no form of this command.

Default No match criteria are defined by default.

Format no match ip address [access-list-number | access-list-name]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

match length
Use this command to configure a route map to match based on the Layer 3 packet length
between specified minimum and maximum values. min specifies the packet’s minimum Layer 3
length, inclusive, allowed for a match.
max specifies the packet’s maximum Layer 3 length, inclusive, allowed for a match. Each route-

map statement can contain one ‘match’ statement on packet length range.

Default No match criteria are defined by default.

Format match length min max

Mode Route Map Configuration

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) (config-route-map)# match length 64 1500

756 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no match length
Use this command to delete a match statement from a route map.

Default No match criteria are defined by default.

Format no match length

Mode Route Map Configuration

Command Added in firmware release 1.0

History

match mac-list
Use this command to configure a route map in order to match based on the match criteria
configured in an MAC access-list.
A MAC ACL is configured before it is linked to a route-map. Actions present in MAC ACL
configuration are applied with other actions involved in route-map. When a MAC ACL referenced
by a route-map is removed, the route-map rule is also removed and the corresponding rule is
not effective.
When a MAC ACL referenced by a route-map is removed or rules are added or deleted from
that ACL, the configuration is rejected.

Default No match criteria are defined by default.

Format match mac-list mac-list-name [mac-list-name]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

757 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

mac-list-name The mac-list name that identifies MAC ACLs. MAC Access-list name can be up to 31
characters in length.

Example: The following is an example of the command.

(DM1200E) (config-route-map)# match mac-list MacList1

Example 2:
This example illustrates the scenario where MAC ACL referenced by a route-map is removed or
rules are added or deleted from that ACL, this is how configuration is rejected:
(DM1200E) #show mac access-lists

Current number of all ACLs: 9 Maximum number of all ACLs: 100

MAC ACL Name Rules Direction Interface(s) VLAN(s)

------------------------------- ----- --------- ---------------- ----------
madan 1
mohan 1
goud 1

(DM1200E) #
(DM1200E) #
(DM1200E) #configure

(DM1200E) (Config)#route-map madan

(DM1200E) (route-map)#match mac-list madan mohan goud

(DM1200E) (route-map)#exit

(DM1200E) (Config)#exit

(DM1200E) #show route-map

route-map madan permit 10

Match clauses:
mac-list (access-lists) : madan mohan goud
Set clauses:

(DM1200E) (Config)#mac access-list extended madan

(DM1200E) (Config-mac-access-list)#permit 00:00:00:00:00:01 ff:ff:ff:ff:ff:ff any

Request denied. Another application using this ACL restricts the number of rules
allowed.

758 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no match mac-list
To delete a match statement from a route map, use the no form of this command.

Default No match criteria are defined by default.

Format no match mac-list […mac-list-name]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

set interface
If network administrator does not want to revert to normal forwarding but instead want to drop
a packet that does not match the specified criteria, a set statement needs to be configured to
route the packets to interface null 0 as the last entry in the route-map.
set interface null0 needs to be configured in a separate statement. It should not be added

along with any other statement having other match/set terms.

A route-map statement that is used for PBR is configured as permit or deny. If the statement is
marked as deny, traditional destination-based routing is performed on the packet meeting the
match criteria. If the statement is marked as permit, and if the packet meets all the match
criteria, then set commands in the route-map statement are applied. If no match is found in the
route-map, the packet is not dropped, instead the packet is forwarded using the routing
decision taken by performing destination-based routing.

Default As described above, the packet is not dropped

Format set interface null0

Mode Route Map Configuration

759 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

set ip next-hop
Use this command to specify the adjacent next-hop router in the path toward the destination to
which the packets should be forwarded. If more than one IP address is specified, the first IP
address associated with a currently up-connected interface is used to route the packets.
This command affects all incoming packet types and is always used if configured. If configured
next-hop is not present in the routing table, an ARP request is sent from the router.
In a route-map statement, ‘set ip next-hop’ and ‘set ip default next-hop’ terms are mutually
exclusive. However, a ‘set ip default next-hop’ can be configured in a separate route-map
statement.

Default If no other next-hop is configured, the system uses the default gateway as the next-hop.

Format set ip next-hop ip-address [...ip-address]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

ip-address The IP address of the next hop to which packets are output. It must be the

address of an adjacent router.

A maximum of 16 next-hop IP addresses can be specified in this ‘set’ clause.

760 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no set ip next-hop
Use this command to remove a set command from a route map.

Default If no other next-hop is configured, the system uses the default gateway as the next-hop.

Format no set ip next-hop ip-address [...ip-address]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

set ip default next-hop

Use this command to set a list of default next-hop IP addresses. If more than one IP address is
specified, the first next hop specified that appears to be adjacent to the router is used. The
optional specified IP addresses are tried in turn.
A packet is routed to the next hop specified by this command only if there is no explicit route
for the packet’s destination address in the routing table. A default route in the routing table is
not considered an explicit route for an unknown destination address.
In a route-map statement, ‘set ip next-hop’ and ‘set ip default next-hop’ terms are mutually
exclusive. However, a ‘set ip next-hop’ can be configured in a separate route-map statement

Default If no other next-hop is configured, the system uses the default gateway as the next-hop.

Format set ip default next-hop ip-address [...ip-address]

Mode Route Map Configuration

Command Added in firmware release 1.0

History

761 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

ip-address The IP address of the next hop to which packets are output. It must be the

address of an adjacent router.

A maximum of 16 next-hop IP addresses can be specified in this ‘set’ clause.

no set ip default next-hop

Use this command to remove a set command from a route map.

Default If no other next-hop is configured, the system uses the default gateway as the next-hop.

Format no set ip default next-hop ip-address [...ip-address]

Mode Route Map Configuration

Command History Added in firmware release 1.0

set ip precedence
Use this command to set the three IP precedence bits in the IP packet header. With three bits,
you have eight possible values for the IP precedence; values 0 through 7 are defined. This
command is used when implementing QoS and can be used by other QoS services, such as
weighted fair queuing (WFQ) and weighted random early detection (WRED).

Default IP Precedence will not be changed based on route-map rules.

Format set ip precedence 0-7

Mode Route Map Configuration

762 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

0 Sets the routine precedence

1 Sets the priority precedence

2 Sets the immediate precedence

3 Sets the Flash precedence

4 Sets the Flash override precedence

5 Sets the critical precedence

6 Sets the internetwork control precedence

7 Sets the network control precedence

no set ip precedence
Use this command to reset the three IP precedence bits in the IP packet header to the default.

Default IP Precedence will not be changed based on route-map rules.

Format no set ip precedence

Mode Route Map Configuration

763 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show ip policy
This command lists the route map associated with each interface.

Default N/A

Format show ip policy

Mode Privileged Exec

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface.

Route-map The route map

show ip prefix-list
This command displays configuration and status for a prefix list.

Default N/A

Format show ip prefix-list [detail | summary] prefix-list-name [network/length] [seq sequence-number]

[longer] [first-match]

Mode Privileged EXEC

764 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

detail | summary (Optional) Displays detailed or summarized information about all prefix lists.

prefix-list-name (Optional) The name of a specific prefix list.

network/length (Optional) The network number and length (in bits) of the network mask.

seq (Optional) Applies the sequence number to the prefix list entry.

sequence-number (Optional) The sequence number of the prefix list entry.

longer (Optional) Displays all entries of a prefix list that are more specific than the given
network/length.

first-match (Optional) Displays the entry of a prefix list that matches the given network/length.

Acceptable forms of this command are as follows:

 show ip prefix-list prefix-list-name network/length first-match
 show ip prefix-list prefix-list-name network/length longer
 show ip prefix-list prefix-list-name network/length
 show ip prefix-list prefix-list-name seq sequence-number
 show ip prefix-list prefix-list-name
 show ip prefix-list summary
 show ip prefix-list summary prefix-list-name
 show ip prefix-list detail
 show ip prefix-list detail prefix-list-name

765 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip prefix-list fred

ip prefix-list fred:
count: 3, range entries: 3, sequences: 5 - 15, refcount: 0
seq 5 permit 10.10.1.1/20 ge 22
seq 10 permit 10.10.1.2/20 le 30
seq 15 permit 10.10.1.2/20 ge 29 le 30

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip prefix-list summary fred

ip prefix-list fred:
count: 3, range entries: 3, sequences: 5 - 15, refcount: 0

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip prefix-list detail fred

ip prefix-list fred:
count: 3, range entries: 3, sequences: 5 - 15, refcount: 0
seq 5 permit 10.10.1.1/20 ge 22 (hitcount: 0)
seq 10 permit 10.10.1.2/20 le 30 (hitcount: 0)
seq 15 permit 10.10.1.2/20 ge 29 le 30 (hitcount: 0)

show route-map
To display a route map, use the show route-map command in Privileged EXEC mode.

Default N/A

Format show route-map [map-name]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

766 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

map-name (Optional) Name of a specific route map.

Example: The following shows example CLI display output for the command.
(DM1200E) # show route-map test
route-map test, permit, sequence 10
Match clauses:
ip address prefix-lists: orange
Set clauses:
set metric 50

clear ip prefix-list
To reset IP prefix-list counters, use the clear ip prefix-list command in Privileged EXEC mode.
This command is used to clear prefix-list hit counters. The hit count is a value indicating the
number of matches to a specific prefix list entry.

Default N/A

Format clear ip prefix-list [[prefix-list-name] [network/length]]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

prefix-list-name (Optional) Name of the prefix list from which the hit count is to be cleared.

network/length (Optional) Network number and length (in bits) of the network mask. If this option is
specified, hit counters are only cleared for the matching statement.

Example: The following shows an example of the command.

767 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 (DM1200E) # clear ip prefix-list orange 20.0.0.0/8

Router Discovery Protocol Commands

This section describes the commands you use to view and configure Router Discovery Protocol
settings on the switch. The Router Discovery Protocol enables a host to discover the IP address
of routers on the subnet.

ip irdp
This command enables Router Discovery on an interface or range of interfaces.

Default disabled

Format ip irdp

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp
This command disables Router Discovery on an interface.

Default disabled

Format no ip irdp

Mode Interface Config

Command Added in firmware release 1.0

History

768 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip irdp address
This command configures the address that the interface uses to send the router discovery
advertisements. The valid values for ipaddr is 255.255.255.255, which is the limited broadcast
address.

Default 224.0.0.1

Format ip irdp address ipaddr

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp address
This command configures the default address used to advertise the router for the interface.

Default 224.0.0.1

Format no ip irdp address

Mode Interface Config

Command Added in firmware release 1.0

History

ip irdp holdtime
This command configures the value, in seconds, of the holdtime field of the router
advertisement sent from this interface. The holdtime range is the value of 4 to 9000 seconds.

Default 3 * maxinterval

769 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format ip irdp holdtime 4-9000

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp holdtime
This command configures the default value, in seconds, of the holdtime field of the router
advertisement sent from this interface.

Default 3 * maxinterval

Format no ip irdp holdtime

Mode Interface Config

Command Added in firmware release 1.0

History

ip irdp maxadvertinterval
This command configures the maximum time, in seconds, allowed between sending router
advertisements from the interface. The range for maxadvertinterval is 4 to 1800 seconds.

Default 600

Format ip irdp maxadvertinterval 4-1800

Mode Interface Config

Command Added in firmware release 1.0

770 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no ip irdp maxadvertinterval
This command configures the default maximum time, in seconds.

Default 600

Format no ip irdp maxadvertinterval

Mode Interface Config

Command Added in firmware release 1.0

History

ip irdp minadvertinterval
This command configures the minimum time, in seconds, allowed between sending router
advertisements from the interface. The range for minadvertinterval is 3–1800.

Default 0.75 * maxadvertinterval

Format ip irdp minadvertinterval 3-1800

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp minadvertinterval
This command sets the default minimum time to the default.

Default 0.75 * maxadvertinterval

771 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no ip irdp minadvertinterval

Mode Interface Config

Command Added in firmware release 1.0

History

ip irdp multicast
This command configures the destination IP address for router advertisements as 224.0.0.1,
which is the default address. The no form of the command configures the IP address as
255.255.255.255 to instead send router advertisements to the limited broadcast address.

Default 224.0.0.1

Format ip irdp multicast

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp multicast
By default, router advertisements are sent to 224.0.0.1. To instead send router advertisements
to the limited broadcast address, 255.255.255.255, use the no form of this command.

Default 224.0.0.1

Format no ip irdp multicast

Mode Interface Config

772 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ip irdp preference
This command configures the preferability of the address as a default router address, relative to
other router addresses on the same subnet.

Default 0

Format ip irdp preference -2147483648 to 2147483647

Mode Interface Config

Command Added in firmware release 1.0

History

no ip irdp preference
This command configures the default preferability of the address as a default router address,
relative to other router addresses on the same subnet.

Default 0

Format no ip irdp preference

Mode Interface Config

Command Added in firmware release 1.0

History

773 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip irdp
This command displays the router discovery information for all interfaces, a specified interface,
or specified VLAN. The argument unit/slot/port corresponds to a physical routing interface or
VLAN routing interface. The keyword vlan is used to specify the VLAN ID of the routing VLAN
directly instead of in a unit/slot/port format.

Default N/A

Format show ip irdp {unit/slot/port|vlan 1-4093|all}

Modes Privileged EXEC

User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The unit/slot/port that corresponds to a physical routing interface or vlan routing
interface.

vlan Use this keyword to specify the VLAN ID of the routing VLAN directly instead of in a
unit/slot/port format.

Ad Mode The advertise mode, which indicates whether router discovery is enabled or disabled on this
interface.

Dest Address The destination IP address for router advertisements.

Max Int The maximum advertise interval, which is the maximum time, in seconds, allowed between
sending router advertisements from the interface.

774 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Min Int The minimum advertise interval, which is the minimum time, in seconds, allowed between
sending router advertisements from the interface.

Hold Time The amount of time, in seconds, that a system should keep the router advertisement before
discarding it.

Preference The preference of the address as a default router address, relative to other router addresses
on the same subnet.

Virtual LAN Routing Commands

This section describes the commands you use to view and configure VLAN routing and to view
VLAN routing status information.

vlan routing
This command enables routing on a VLAN. The vlanid value has a range from 1 to 4093. The
[interface ID] value has a range from 1 to 15. Typically, you will not supply the interface ID

argument, and the system automatically selects the interface ID. However, if you specify an
interface ID, the interface ID becomes the port number in the unit/slot/port for the VLAN
routing interface. If you select an interface ID that is already in use, the CLI displays an error
message and does not create the VLAN interface. For products that use text-based
configuration, including the interface ID in the vlan routing command for the text configuration
ensures that the unit/slot/port for the VLAN interface stays the same across a restart.
Keeping the unit/slot/port the same ensures that the correct interface configuration is applied
to each interface when the system restarts.

Default Routing is disabled on all VLANs.

Format vlan routing vlanid [interface ID]

Mode VLAN Config

775 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

Example: Example 1 shows the command specifying a vlanid value. The interface ID argument
is not used.
(DM1200E)(Vlan)#vlan 14
(DM1200E)(Vlan)#vlan routing 14 ?
<cr> Press enter to execute the command.
<1-15> Enter interface ID

Typically, you press <Enter> without supplying the Interface ID value; the system
automatically selects the interface ID.

Example: In Example 2, the command specifies interface ID 12 for VLAN 14 interface. The
interface ID becomes the port number in the unit/slot/port for the VLAN routing interface. In
this example, unit/slot/port is 4/12 for VLAN 14 interface.
(DM1200E)(Vlan)#vlan 14 12
(DM1200E)(Vlan)#
(DM1200E)#show ip vlan
MAC Address used by Routing VLANs: 00:04:DF:59:47:36

Logical
VLAN ID Interface IP Address Subnet Mask
------- -------------- --------------- ---------------
10 0/4/1 172.16.10.1 255.255.255.0
11 0/4/2 172.16.11.1 255.255.255.0
12 0/4/3 172.16.12.1 255.255.255.0
13 0/4/4 172.16.13.1 255.255.255.0
14 0/4/12 0.0.0.0 0.0.0.0 <--u/s/p is 0/4/12 for VLAN 14
interface

Example: In Example 3, you select an interface ID that is already in use. In this case, the CLI
displays an error message and does not create the VLAN interface.
(DM1200E)#show ip vlan
MAC Address used by Routing VLANs: 00:04:DF:59:47:36
Logical
VLAN ID Interface IP Address Subnet Mask
------- -------------- --------------- ---------------
10 0/4/1 172.16.10.1 255.255.255.0
11 0/4/2 172.16.11.1 255.255.255.0
12 0/4/3 172.16.12.1 255.255.255.0
13 0/4/4 172.16.13.1 255.255.255.0

776 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 14 0/4/12 0.0.0.0 0.0.0.0

(DM1200E)#config

(DM1200E)(Config)#exit

(DM1200E)#vlan database

(DM1200E)(Vlan)#vlan 15

(DM1200E)(Vlan)#vlan routing 15 1

Interface ID 1 is already assigned to another interface

no vlan routing
This command deletes routing on a VLAN.

Default Routing is disabled on all VLANs.

Format no vlan routing vlanid

Mode VLAN Config

Command Added in firmware release 1.0

History

interface vlan
Use this command to enter Interface configuration mode for the specified VLAN. The vlan-id
range is 1 to 4093.

Default 1

Format interface vlan vlan-id

Mode Global Config

Command Added in firmware release 1.0

History

777 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip vlan
This command displays the VLAN routing information for all VLANs with routing enabled.

Default N/A

Format show ip vlan

Modes  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address used by The MAC Address associated with the internal bridge-router interface (IBRI). The same
Routing VLANs MAC Address is used by all VLAN routing interfaces. It will be displayed above the per-
VLAN information.

VLAN ID The identifier of the VLAN.

Logical Interface The logical unit/slot/port associated with the VLAN routing interface.

IP Address The IP address associated with this VLAN.

Subnet Mask The subnet mask that is associated with this VLAN.

778 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

DHCP and BOOTP Relay Commands
This section describes the commands you use to configure BootP/DHCP Relay on the switch. A
DHCP relay agent operates at Layer 3 and forwards DHCP requests and replies between clients
and servers when they are not on the same physical subnet.

bootpdhcprelay cidoptmode
This command enables the circuit ID option mode for BootP/DHCP Relay on the system.

Default disabled

Format bootpdhcprelay cidoptmode

Mode Global Config

Command Added in firmware release 1.0

History

no bootpdhcprelay cidoptmode
This command disables the circuit ID option mode for BootP/DHCP Relay on the system.

Default disabled

Format no bootpdhcprelay cidoptmode

Mode Global Config

Command Added in firmware release 1.0

History

779 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

bootpdhcprelay maxhopcount
This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on
the system. The hops parameter has a range of 1 to 16.

Default 4

Format bootpdhcprelay maxhopcount 1-16

Mode Global Config

Command Added in firmware release 1.0

History

no bootpdhcprelay maxhopcount
This command configures the default maximum allowable relay agent hops for BootP/DHCP
Relay on the system.

Default 4

Format no bootpdhcprelay maxhopcount

Mode Global Config

Command Added in firmware release 1.0

History

bootpdhcprelay minwaittime
This command configures the minimum wait time in seconds for BootP/DHCP Relay on the
system. When the BOOTP relay agent receives a BOOTREQUEST message, it MAY use the
seconds-since-client-began-booting field of the request as a factor in deciding whether to relay
the request or not. The parameter has a range of 0 to 100 seconds.

780 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default 0

Format bootpdhcprelay minwaittime 0-100

Mode Global Config

Command Added in firmware release 1.0

History

no bootpdhcprelay minwaittime
This command configures the default minimum wait time in seconds for BootP/DHCP Relay on
the system.

Default 0

Format no bootpdhcprelay minwaittime

Mode Global Config

Command Added in firmware release 1.0

History

show bootpdhcprelay
This command displays the BootP/DHCP Relay information.

Default N/A

Format show bootpdhcprelay

Modes  Privileged EXEC

 User EXEC

781 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

TERM DEFINITION

Maximum Hop Count The maximum allowable relay agent hops.

Minimum Wait Time The minimum wait time.

(Seconds)

Admin Mode Indicates whether relaying of requests is enabled or disabled.

Circuit Id Option Mode The DHCP circuit Id option which may be enabled or disabled.

IP Helper Commands
This section describes the commands to configure and monitor the IP Helper agent. IP Helper
relays DHCP and other broadcast UDP packets from a local client to one or more servers which
are not on the same network at the client.
The IP Helper feature provides a mechanism that allows a router to forward certain configured
UDP broadcast packets to a particular IP address. This allows various applications to reach
servers on nonlocal subnets, even if the application was designed to assume a server is always
on a local subnet and uses broadcast packets (with either the limited broadcast address
255.255.255.255, or a network directed broadcast address) to reach the server.
The network administrator can configure relay entries both globally and on routing interfaces.
Each relay entry maps an ingress interface and destination UDP port number to a single IPv4
address (the helper address). The network administrator may configure multiple relay entries
for the same interface and UDP port, in which case the relay agent relays matching packets to
each server address. Interface configuration takes priority over global configuration. That is, if a
packet’s destination UDP port matches any entry on the ingress interface, the packet is handled

782 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

according to the interface configuration. If the packet does not match any entry on the ingress
interface, the packet is handled according to the global IP helper configuration.
The network administrator can configure discard relay entries, which direct the system to
discard matching packets. Discard entries are used to discard packets received on a specific
interface when those packets would otherwise be relayed according to a global relay entry.
Discard relay entries may be configured on interfaces, but are not configured globally.
In addition to configuring the server addresses, the network administrator also configures which
UDP ports are forwarded. Certain UDP port numbers can be specified by name in the UI as a
convenience, but the network administrator can configure a relay entry with any UDP port
number. The network administrator may configure relay entries that do not specify a
destination UDP port. The relay agent relays assumes these entries match packets with the UDP
destination ports listed in Table 10: Default Ports - UDP Port Numbers Implied by Wildcard. This
is the list of default ports.

Table 10: Default Ports - UDP Port Numbers Implied by Wildcard

PROTOCOL UDP PORT NUMBER

IEN-116 Name Service 42

DNS 53

NetBIOS Name Server 137

NetBIOS Datagram Server 138

TACACS Server 49

Time Service 37

DHCP 67

783 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Trivial File Transfer Protocol 69
(TFTP)

The system limits the number of relay entries to four times the maximum number of routing
interfaces. The network administrator can allocate the relay entries as he likes. There is no limit
to the number of relay entries on an individual interface, and no limit to the number of servers
for a given {interface, UDP port} pair.

The relay agent relays DHCP packets in both directions. It relays broadcast packets from the
client to one or more DHCP servers, and relays to the client packets that the DHCP server
unicasts back to the relay agent. For other protocols, the relay agent only relays broadcast
packets from the client to the server. Packets from the server back to the client are assumed to
be unicast directly to the client. Because there is no relay in the return direction for protocols
other than DHCP, the relay agent retains the source IP address from the original client packet.
The relay agent uses a local IP address as the source IP address of relayed DHCP client packets.
When a switch receives a broadcast UDP packet on a routing interface, the relay agent checks if
the interface is configured to relay the destination UDP port. If so, the relay agent unicasts the
packet to the configured server IP addresses. Otherwise, the relay agent checks if there is a
global configuration for the destination UDP port. If so, the relay agent unicasts the packet to
the configured server IP addresses. Otherwise the packet is not relayed. Note that if the packet
matches a discard relay entry on the ingress interface, then the packet is not forwarded,
regardless of the global configuration.
The relay agent only relays packets that meet the following conditions:

 The destination MAC address must be the all-ones broadcast address

(FF:FF:FF:FF:FF:FF)
 The destination IP address must be the limited broadcast address (255.255.255.255) or
a directed broadcast address for the receive interface.
 The IP time-to-live (TTL) must be greater than 1.
 The protocol field in the IP header must be UDP (17).
 The destination UDP port must match a configured relay entry.

784 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clear ip helper statistics
Use this command to reset to zero the statistics displayed in the show ip helper statistics
command.

Default N/A

Format clear ip helper statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E) #clear ip helper statistics

ip helper-address (Global Config)

Use this command to configure the relay of certain UDP broadcast packets received on any
interface. This command can be invoked multiple times, either to specify multiple server
addresses for a given UDP port number or to specify multiple UDP port numbers handled by a
specific server.

Default No helper addresses are configured.

Format ip helper-address server-address [dest-udp-port | dhcp | domain | isakmp

| mobile-ip | nameserver | netbios-dgm | netbios-ns | ntp | pim-auto-rp
| rip | tacacs | tftp | time]

Mode Global Config

Command Added in firmware release 1.0

History

785 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PARAMETER DESCRIPTION

server-address The IPv4 unicast or directed broadcast address to which relayed UDP broadcast packets are
sent. The server address cannot be an IP address configured on any interface of the local
router.

dest-udp-port A destination UDP port number from 0 to 65535.

port-name The destination UDP port may be optionally specified by its name. Whether a port is specified
by its number or its name has no effect on behavior. The names recognized are as follows:

 dhcp (port 67)

 domain (port 53)

 isakmp (port 500)

 mobile-ip (port 434)

 nameserver (port 42)

 netbios-dgm (port 138)

 netbios-ns (port 137)

 ntp (port 123)

 pim-auto-rp (port 496)

 rip (port 520)

 tacacs (port 49)

 tftp (port 69)

 time (port 37)

Other ports must be specified by number.

Example: To relay DHCP packets received on any interface to two DHCP servers, 10.1.1.1 and
10.1.2.1, use the following commands:
(DM1200E)#config
(DM1200E)(config)#ip helper-address 10.1.1.1 dhcp
(DM1200E)(config)#ip helper-address 10.1.2.1 dhcp

786 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: To relay UDP packets received on any interface for all default ports to the server at
20.1.1.1, use the following commands:
(DM1200E)#config
(DM1200E)(config)#ip helper-address 20.1.1.1

no ip helper-address (Global Config)

Use the no form of the command to delete an IP helper entry. The command no ip helper-
address with no arguments clears all global IP helper addresses.

Default No helper addresses are configured.

Format no ip helper-address [server-address [dest-udp-port | dhcp | domain |

isakmp | mobile-ip | nameserver | netbios-dgm | netbios-ns | ntp | pim-
auto-rp | rip | tacacs | tftp | time]

Mode Global Config

Command Added in firmware release 1.0

History

ip helper-address (Interface Config)

Use this command to configure the relay of certain UDP broadcast packets received on a
specific interface or range of interfaces. This command can be invoked multiple times on a
routing interface, either to specify multiple server addresses for a given port number or to
specify multiple port numbers handled by a specific server.

Default No helper addresses are configured.

Format ip helper-address {server-address | discard} [dest-udp-port | dhcp |

domain | isakmp | mobile ip | nameserver | netbios-dgm | netbios-ns |
ntp | pim-auto-rp | rip | tacacs | tftp | time]

Mode Interface Config

787 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

PARAMETER DESCRIPTION

server-address The IPv4 unicast or directed broadcast address to which relayed UDP broadcast packets are
sent. The server address cannot be in a subnet on the interface where the relay entry is
configured, and cannot be an IP address configured on any interface of the local router.

discard Matching packets should be discarded rather than relayed, even if a global ip helper-address
configuration matches the packet.

dest-udp-port A destination UDP port number from 0 to 65535.

port-name The destination UDP port may be optionally specified by its name. Whether a port is specified
by its number or its name has no effect on behavior. The names recognized are as follows:

 dhcp (port 67)

 domain (port 53)

 isakmp (port 500)

 mobile-ip (port 434)

 nameserver (port 42)

 netbios-dgm (port 138)

 netbios-ns (port 137)

 ntp (port 123)

 pim-auto-rp (port 496)

 rip (port 520)

 tacacs (port 49)

 tftp (port 69)

 time (port 37)

Other ports must be specified by number.

788 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: To relay DHCP packets received on interface 1/0/2 to two DHCP servers,
192.168.10.1 and 192.168.20.1, use the following commands:
(DM1200E)#config
(DM1200E)(config)#interface 1/0/2
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.10.1 dhcp
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.20.1 dhcp

Example: To relay both DHCP and DNS packets to 192.168.30.1, use the following commands:
(DM1200E)#config
(DM1200E)(config)#interface 1/0/2
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.30.1 dhcp
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.30.1 dns

Example: This command takes precedence over an ip helper-address command given in global
configuration mode. With the following configuration, the relay agent relays DHCP packets
received on any interface other than 1/0/2 and 1/0/17 to 192.168.40.1, relays DHCP and DNS
packets received on 1/0/2 to 192.168.40.2, relays SNMP traps (port 162) received on interface
1/0/17 to 192.168.23.1, and drops DHCP packets received on 1/0/17:
(DM1200E)#config
(DM1200E)(config)#ip helper-address 192.168.40.1 dhcp
(DM1200E)(config)#interface 1/0/2
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.40.2 dhcp
(DM1200E)(interface 1/0/2)#ip helper-address 192.168.40.2 domain
(DM1200E)(interface 1/0/2)#exit
(DM1200E)(config)#interface 1/0/17
(DM1200E)(interface 1/0/17)#ip helper-address 192.168.23.1 162
(DM1200E)(interface 1/0/17)#ip helper-address discard dhcp

no ip helper-address (Interface Config)

Use this command to delete a relay entry on an interface. The no command with no arguments
clears all helper addresses on the interface.

Default No helper addresses are configured.

Format no ip helper-address [server-address | discard ][dest-udp-port | dhcp |

domain | isakmp | mobile ip | nameserver | netbios-dgm | netbios-ns |
ntp | pim-auto-rp | rip | tacacs | tftp | time]

789 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

ip helper enable
Use this command to enable relay of UDP packets. This command can be used to temporarily
disable IP helper without deleting all IP helper addresses. This command replaces the
bootpdhcprelay enable command, but affects not only relay of DHCP packets, but also relay of

any other protocols for which an IP helper address has been configured.

Default disabled

Format ip helper enable

Mode Global Config

Command Added in firmware release 1.0

History

Example: The following shows an example of the command.

(DM1200E)(config)#ip helper enable

no ip helper enable
Use the no form of this command to disable relay of all UDP packets.

Default disabled

Format no ip helper enable

Mode Global Config

790 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

show ip helper-address
Use this command to display the IP helper address configuration. The argument
unit/slot/port corresponds to a physical routing interface or VLAN routing interface. The

keyword vlan is used to specify the VLAN ID of the routing VLAN directly instead of a
unit/slot/port format.

Default N/A

Format show ip helper-address [{unit/slot/port|vlan 1-4093}]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

interface The relay configuration is applied to packets that arrive on this interface. This field is set to
any for global IP helper entries.

UDP Port The relay configuration is applied to packets whose destination UDP port is this port. Entries
whose UDP port is identified as any are applied to packets with the destination UDP ports
listed in Table 4.

Discard If Yes, packets arriving on the given interface with the given destination UDP port are
discarded rather than relayed. Discard entries are used to override global IP helper address
entries which otherwise might apply to a packet.

Hit Count The number of times the IP helper entry has been used to relay or discard a packet.

791 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Server Address The IPv4 address of the server to which packets are relayed.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip helper-address

IP helper is enabled

Interface UDP Port Discard Hit Count Server Address

--------------- ----------- -------- ---------- ---------------
1/0/1 dhcp No 10 10.100.1.254
10.100.2.254
1/0/17 any Yes 2
any dhcp No 0 10.200.1.254

show ip helper statistics

Use this command to display the number of DHCP and other UDP packets processed and
relayed by the UDP relay agent.

Default N/A

Format show ip helper statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

DHCP client messages The number of valid messages received from a DHCP client. The count is only incremented if
received IP helper is enabled globally, the ingress routing interface is up, and the packet passes a
number of validity checks, such as having a TTL>1 and having valid source and destination IP
addresses.

DHCP client messages The number of DHCP client messages relayed to a server. If a message is relayed to multiple

792 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

relayed servers, the count is incremented once for each server.

DHCP server The number of DHCP responses received from the DHCP server. This count only includes
messages received messages that the DHCP server unicasts to the relay agent for relay to the client.

DHCP server The number of DHCP server messages relayed to a client.

messages relayed

UDP clients messages The number of valid UDP packets received. This count includes DHCP messages and all other
received protocols relayed. Conditions are similar to those for the first statistic in this table.

UDP clients messages The number of UDP packets relayed. This count includes DHCP messages relayed as well as
relayed all other protocols. The count is incremented for each server to which a packet is sent.

DHCP message hop The number of DHCP client messages received whose hop count is larger than the maximum
count exceeded max allowed. The maximum hop count is a configurable value listed in show bootpdhcprelay. A log
message is written for each such failure. The DHCP relay agent does not relay these packets.

DHCP message with The number of DHCP client messages received whose secs field is less than the minimum
secs field below min value. The minimum secs value is a configurable value and is displayed in show
bootpdhcprelay. A log message is written for each such failure. The DHCP relay agent does
not relay these packets.

DHCP message with The number of DHCP client messages received whose gateway address, giaddr, is already set
giaddr set to local to an IP address configured on one of the relay agent’s own IP addresses. In this case,
address another device is attempting to spoof the relay agent’s address. The relay agent does not
relay such packets. A log message gives details for each occurrence.

Packets with expired The number of packets received with TTL of 0 or 1 that might otherwise have been relayed.
TTL

Packets that matched The number of packets ignored by the relay agent because they match a discard relay entry.
a discard entry

Example: The following shows example CLI display output for the command.
(DM1200E)#show ip helper statistics

DHCP client messages received.................. 8

793 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 DHCP client messages relayed................... 2
DHCP server messages received.................. 2
DHCP server messages relayed................... 2
UDP client messages received................... 8
UDP client messages relayed.................... 2
DHCP message hop count exceeded max............ 0
DHCP message with secs field below min......... 0
DHCP message with giaddr set to local address.. 0
Packets with expired TTL....................... 0
Packets that matched a discard entry........... 0

ICMP Throttling Commands

This section describes the commands you use to configure options for the transmission of
various types of ICMP messages.

ip unreachables
Use this command to enable the generation of ICMP Destination Unreachable messages on an
interface or range of interfaces. By default, the generation of ICMP Destination Unreachable
messages is enabled.

Default enabled

Format ip unreachables

Mode Interface Config

Command Added in firmware release 1.0

History

no ip unreachables
Use this command to prevent the generation of ICMP Destination Unreachable messages.

Default disabled

Format no ip unreachables

794 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Interface Config

Command Added in firmware release 1.0

History

ip redirects
Use this command to enable the generation of ICMP Redirect messages by the router. By
default, the generation of ICMP Redirect messages is enabled. You can use this command to
configure an interface, a range of interfaces, or all interfaces.

Default enabled

Format ip redirects

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no ip redirects
Use this command to prevent the generation of ICMP Redirect messages by the router.

Default disabled

Format no ip redirects

Mode  Global Config

 Interface Config

Command Added in firmware release 1.0

795 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

ip icmp echo-reply
Use this command to enable the generation of ICMP Echo Reply messages by the router. By
default, the generation of ICMP Echo Reply messages is enabled.

Default enabled

Format ip icmp echo-reply

Mode Global Config

Command Added in firmware release 1.0

History

no ip icmp echo-reply
Use this command to prevent the generation of ICMP Echo Reply messages by the router.

Default disabled

Format no ip icmp echo-reply

Mode Global Config

Command Added in firmware release 1.0

History

ip icmp error-interval
Use this command to limit the rate at which IPv4 ICMP error messages are sent. The rate limit
is configured as a token bucket, with two configurable parameters, burst-size and burst-interval.

796 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

The burst-interval specifies how often the token bucket is initialized with burst-size tokens.
burst-interval is from 0 to 2147483647 milliseconds (msec). The burst-size is the number of
ICMP error messages that can be sent during one burst-interval. The range is from 1 to 200
messages. To disable ICMP rate limiting, set burst-interval to zero (0).

Default  burst-interval of 1000 msec.

 burst-size of 100 messages

Format ip icmp error-interval burst-interval [burst-size]

Mode Global Config

Command Added in firmware release 1.0

History

no ip icmp error-interval
Use the no form of the command to return burst-interval and burst-size to their default values.

Default  burst-interval of 1000 msec.

 burst-size of 100 messages

Format no ip icmp error-interval

Mode Global Config

Command Added in firmware release 1.0

History

Section 8: IPv6 Management Commands

This chapter describes the IPv6 commands available in the DM1200E.
This chapter contains the following sections:
 IPv6 Management Commands

797 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  DHCPv6 Commands
 DHCPv6 Snooping Configuration Commands

Caution! The commands in this chapter are in one of three functional groups:
 Show commands display switch settings, statistics, and other information.
 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.
 Clear commands clear some or all of the settings to factory defaults.

IPv6 Management Commands

IPv6 Management commands allow a device to be managed via an IPv6 address in a switch or
IPv4 routing (i.e., independent from the IPv6 Routing package). DM1200E has capabilities such
as:
 Static assignment of IPv6 addresses and gateways for the network ports.
 The ability to ping an IPv6 link-local address over the network port.
 Using IPv6 Management commands, you can send SNMP traps and queries via the
network port.
 The user can manage a device via the network port (in addition to a Routing Interface).

network ipv6 enable

Use this command to enable IPv6 operation on the network port. By default, IPv6 operation is
enabled on the network port.

Default enabled

Format network ipv6 enable

Mode Privileged EXEC

798 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

no network ipv6 enable

Use this command to disable IPv6 operation on the network port.

Format no network ipv6 enable

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network ipv6 address

Use the options of this command to manually configure IPv6 global address, enable/disable
stateless global address autoconfiguration and to enable/disable dhcpv6 client protocol
information for the network port. Multiple IPv6 addresses can be configured on the network
port.

Format network ipv6 address {address/prefix-length [eui64] | autoconfig | dhcp}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

address IPv6 prefix in IPv6 global address format.

799 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

prefix-length IPv6 prefix length value.

eui64 Formulate IPv6 address in eui64 format.

autoconfig Configure stateless global address autoconfiguration capability.

dhcp Configure dhcpv6 client protocol.

no network ipv6 address

The command no network ipv6 address removes all configured IPv6 prefixes.
Use this command with the address option to remove the manually configured IPv6 global
address on the network port interface.
Use this command with the autoconfig option to disable the stateless global address
autoconfiguration on the network port.
Use this command with the dhcp option disables the dhcpv6 client protocol on the network port.

Format no network ipv6 address {address/prefix-length [eui64] | autoconfig |

dhcp}

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network ipv6 gateway

Use this command to configure IPv6 gateway (i.e. default routers) information for the network
port.

Format network ipv6 gateway gateway-address

800 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

gateway-address Gateway address in IPv6 global or link-local address format.

no network ipv6 gateway

Use this command to remove IPv6 gateways on the network port interface.

Format no network ipv6 gateway

Mode Privileged EXEC

Command Added in firmware release 1.0

History

network ipv6 neighbor

Use this command to manually add IPv6 neighbors to the IPv6 neighbor table for this network
port. If an IPv6 neighbor already exists in the neighbor table, the entry is automatically
converted to a static entry. Static entries are not modified by the neighbor discovery process.
They are, however, treated the same for IPv6 forwarding. Static IPv6 neighbor entries are
applied to the kernel stack and to the hardware when the corresponding interface is
operationally active.

Format network ipv6 neighbor ipv6-address macaddr

801 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

PARAMETER DESCRIPTION

ipv6-address The IPv6 address of the neighbor or interface.

macaddr The link-layer address.

no network ipv6 neighbor

Use this command to remove IPv6 neighbors from the neighbor table.

Format no network ipv6 neighbor ipv6-address macaddr

Mode Privileged EXEC

Command Added in firmware release 1.0

History

show network ipv6 neighbors

Use this command to display the information about the IPv6 neighbor entries cached on the
network port. The information is updated to show the type of the entry.

Default N/A

Format show network ipv6 neighbors

802 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

IPv6 Address The IPv6 address of the neighbor.

MAC Address The MAC Address of the neighbor.

isRtr Shows if the neighbor is a router. If TRUE, the neighbor is a router; FALSE it is not a router.

Neighbor State The state of the neighbor cache entry. Possible values are: Incomplete, Reachable, Stale,
Delay, Probe, and Unknown

Age The time in seconds that has elapsed since an entry was added to the cache.

Last Updated The time in seconds that has elapsed since an entry was added to the cache.

Type The type of neighbor entry. The type is Static if the entry is manually configured and Dynamic
if dynamically resolved.

Example: The following is an example of the command.

(DM1200E) #show network ipv6 neighbors

Neighbor Age
IPv6 Address MAC Address isRtr State (Secs) Type
------------------------ ----------------- ----- --------- ------ ------
FE80::5E26:AFF:FEBD:852C 5c:26:0a:bd:85:2c FALSE Reachable 0 Static

803 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ping ipv6
Use this command to determine whether another computer is on the network. Ping provides a
synchronous response when initiated from the CLI and Web interfaces. To use the command,
configure the switch for network (in-band) connection. The source and target devices must
have the ping utility enabled and running on top of TCP/IP. The switch can be pinged from any
IP workstation with which the switch is connected through the default VLAN (VLAN 1), as long
as there is a physical path between the switch and the workstation. The terminal interface
sends three pings to the target station. Use the ipv6-address|hostname parameter to ping an
interface by using the global IPv6 address of the interface. The argument unit/slot/port
corresponds to a physical routing interface or VLAN routing interface. The keyword vlan is used
to specify the VLAN ID of the routing VLAN directly instead of a unit/slot/port format. Use the
optional size keyword to specify the size of the ping packet.

You can utilize the ping or traceroute facilities over the network ports when using an IPv6
global address ipv6-global-address|hostname. Any IPv6 global address or gateway
assignments to these interfaces will cause IPv6 routes to be installed within the IP stack such
that the ping or traceroute request is routed out the network port properly. When referencing
an IPv6 link-local address, you must also specify the network port interface by using the
network parameter.

Default  The default count is 1.

 The default interval is 3 seconds.

 The default size is 0 bytes.

Format ping ipv6 {ipv6-global-address|hostname | {interface

{unit/slot/port|vlan 1-4093| network} link-local-address} [size
datagram-size]}

Mode  Privileged EXEC

 User Exec

Command Added in firmware release 1.0

History

804 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

DHCPv6 Commands
This section describes the commands you use to view DHCPv6 information.

show network ipv6 dhcp statistics

This command displays the statistics of the DHCPv6 client running on the network management
interface.

Default N/A

Format show network ipv6 dhcp statistics

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

FIELD DESCRIPTION

DHCPv6 Advertisement The number of DHCPv6 Advertisement packets received on the network interface.
Packets Received

DHCPv6 Reply Packets The number of DHCPv6 Reply packets received on the network interface.
Received

Received DHCPv6 The number of DHCPv6 Advertisement packets discarded on the network interface.
Advertisement Packets
Discarded

805 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Received DHCPv6 Reply The number of DHCPv6 Reply packets discarded on the network interface.
Packets Discarded

DHCPv6 Malformed The number of DHCPv6 packets that are received malformed on the network interface.
Packets Received

Total DHCPv6 Packets The total number of DHCPv6 packets received on the network interface.
Received

DHCPv6 Solicit Packets The number of DHCPv6 Solicit packets transmitted on the network interface.
Transmitted

DHCPv6 Request The number of DHCPv6 Request packets transmitted on the network interface.
Packets Transmitted

DHCPv6 Renew Packets The number of DHCPv6 Renew packets transmitted on the network interface.
Transmitted

DHCPv6 Rebind Packets The number of DHCPv6 Rebind packets transmitted on the network interface.
Transmitted

DHCPv6 Release Packets The number of DHCPv6 Release packets transmitted on the network interface.
Transmitted

Total DHCPv6 Packets The total number of DHCPv6 packets transmitted on the network interface.
Transmitted

Example: The following shows example CLI display output for the command.
(DM1200E)#show network ipv6 dhcp statistics
DHCPv6 Client Statistics
-------------------------

DHCPv6 Advertisement Packets Received................. 0

DHCPv6 Reply Packets Received......................... 0
Received DHCPv6 Advertisement Packets Discarded....... 0
Received DHCPv6 Reply Packets Discarded............... 0
DHCPv6 Malformed Packets Received..................... 0
Total DHCPv6 Packets Received......................... 0

DHCPv6 Solicit Packets Transmitted.................... 0

806 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 DHCPv6 Request Packets Transmitted.................... 0
DHCPv6 Renew Packets Transmitted...................... 0
DHCPv6 Rebind Packets Transmitted..................... 0
DHCPv6 Release Packets Transmitted.................... 0
Total DHCPv6 Packets Transmitted...................... 0

clear network ipv6 dhcp statistics

Use this command to clear the DHCPv6 statistics on the network management interface.

Default N/A

Format clear network ipv6 dhcp statistics

Mode Privileged EXEC

Command Added in firmware release 1.0

History

DHCPv6 Snooping Configuration Commands

This section describes commands you use to configure IPv6 DHCP Snooping.

ipv6 dhcp snooping

Use this command to globally enable IPv6 DHCP Snooping.

Default disabled

Format ipv6 dhcp snooping

Mode Global Config

Command Added in firmware release 1.0

History

807 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no ipv6 dhcp snooping
Use this command to globally disable IPv6 DHCP Snooping.

Default disabled

Format no ipv6 dhcp snooping

Mode Global Config

Command Added in firmware release 1.0

History

ipv6 dhcp snooping vlan

Use this command to enable DHCP Snooping on a list of comma-separated VLAN ranges.

Default disabled

Format ipv6 dhcp snooping vlan vlan-list

Mode Global Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping vlan

Use this command to disable DHCP Snooping on VLANs.

Default disabled

Format no ipv6 dhcp snooping vlan vlan-list

Mode Global Config

808 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

ipv6 dhcp snooping verify mac-address

Use this command to enable verification of the source MAC address with the client hardware
address in the received DCHP message.

Default enabled

Format ipv6 dhcp snooping verify mac-address

Mode Global Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping verify mac-address

Use this command to disable verification of the source MAC address with the client hardware
address.

Default enabled

Format no ipv6 dhcp snooping verify mac-address

Mode Global Config

Command Added in firmware release 1.0

History

ipv6 dhcp snooping binding

Use this command to configure static DHCP Snooping binding.

809 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format ipv6 dhcp snooping binding mac-address vlan vlan id ip address interface
interface id

Mode Global Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping binding

Use this command to remove the DHCP static entry from the DHCP Snooping database.

Format no ipv6 dhcp snooping binding mac-address

Mode Global Config

Command Added in firmware release 1.0

History

ipv6 dhcp snooping trust

Use this command to configure an interface or range of interfaces as trusted.

Default disabled

Format ipv6 dhcp snooping trust

Mode Interface Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping trust

Use this command to configure the port as untrusted.

810 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no ipv6 dhcp snooping trust

Mode Interface Config

Command Added in firmware release 1.0

History

ipv6 dhcp snooping log-invalid

Use this command to control the logging DHCP messages filtration by the DHCP Snooping
application. This command can be used to configure a single interface or a range of interfaces.

Default disabled

Format ipv6 dhcp snooping log-invalid

Mode Interface Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping log-invalid

Use this command to disable the logging DHCP messages filtration by the DHCP Snooping
application.

Default disabled

Format no ipv6 dhcp snooping log-invalid

Mode Interface Config

Command Added in firmware release 1.0

811 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

ipv6 dhcp snooping limit

Use this command to control the rate at which the DHCP Snooping messages come on an
interface or range of interfaces. By default, rate limiting is disabled. When enabled, the rate can
range from 0 to 300 packets per second. The burst level range is 1 to 15 seconds. Rate limiting
is configured on a physical port and may be applied to trusted and untrusted ports.

Default disabled (no limit)

Format ipv6 dhcp snooping limit {rate pps [burst interval seconds]}

Mode Interface Config

Command Added in firmware release 1.0

History

no ipv6 dhcp snooping limit

Use this command to set the rate at which the DHCP Snooping messages come, and the burst
level, to the defaults.

Default disabled (no limit)

Format no ipv6 dhcp snooping limit

Mode Interface Config

Command Added in firmware release 1.0

History

812 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ipv6 dhcp snooping
Use this command to display the DHCP Snooping global configurations and per port
configurations.

Default N/A

Format show ipv6 dhcp snooping

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface The interface for which data is displayed.

Trusted If it is enabled, DHCP snooping considers the port as trusted. The factory default is disabled.

Log Invalid Pkts If it is enabled, DHCP snooping application logs invalid packets on the specified interface.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ipv6 dhcp snooping

DHCP snooping is Disabled

DHCP snooping source MAC verification is enabled
DHCP snooping is enabled on the following VLANs:
11 - 30, 40

Interface Trusted Log Invalid Pkts

--------- -------- ----------------
1/0/1 Yes No
1/0/2 No Yes
1/0/3 No Yes
1/0/4 No No
1/0/6 No No

813 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ipv6 dhcp snooping binding
Use this command to display the DHCP Snooping binding entries. To restrict the output, use the
following options:
 Dynamic: Restrict the output based on DCHP snooping.
 Interface: Restrict the output based on a specific interface.
 Static: Restrict the output based on static entries.
 VLAN: Restrict the output based on VLAN.

Default N/A

Format show ipv6 dhcp snooping binding [{static/dynamic}] [interface

unit/slot/port] [vlan id]

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

MAC Address Displays the MAC address for the binding that was added. The MAC address is the key to the
binding database.

IPv6 Address Displays the valid IPv6 address for the binding rule.

VLAN The VLAN for the binding rule.

Interface The interface to add a binding into the DHCP snooping interface.

814 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Type Binding type; statically configured from the CLI or dynamically learned.

Lease (sec) The remaining lease time for the entry.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ipv6 dhcp snooping binding

Total number of bindings: 2

MAC Address IPv6 Address VLAN Interface Type Lease time (Secs)
------------------ -------------- ---- --------- ---- ------------------
00:02:B3:06:60:80 2000::1/64 10 1/0/1 86400
00:0F:FE:00:13:04 3000::1/64 10 1/0/1 86400

show ipv6 dhcp snooping interfaces

Use this command to show the DHCP Snooping status of all interfaces or a specified interface.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ipv6 dhcp snooping interfaces

Interface Trust State Rate Limit Burst Interval

(pps) (seconds)
----------- ---------- ---------- --------------
1/0/1 No 15 1
1/0/2 No 15 1
1/0/3 No 15 1

(DM1200E) #show ip dhcp snooping interfaces 1/0/1

Interface Trust State Rate Limit Burst Interval

(pps) (seconds)
----------- ---------- ---------- --------------
1/0/1 Yes 15 1

show ipv6 dhcp snooping statistics

Use this command to list statistics for IPv6 DHCP Snooping security violations on untrusted
ports.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ipv6 dhcp snooping statistics

815 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Interface MAC Verify Client Ifc DHCP Server
Failures Mismatch Msgs Rec'd
----------- ---------- ---------- -----------
1/0/2 0 0 0
1/0/3 0 0 0
1/0/4 0 0 0
1/0/5 0 0 0
1/0/6 0 0 0
1/0/7 0 0 0
1/0/8 0 0 0
1/0/9 0 0 0
1/0/10 0 0 0
1/0/11 0 0 0
1/0/12 0 0 0
1/0/13 0 0 0
1/0/14 0 0 0
1/0/15 0 0 0
1/0/16 0 0 0
1/0/17 0 0 0
1/0/18 0 0 0
1/0/19 0 0 0
1/0/20 0 0 0

clear ipv6 dhcp snooping binding

Use this command to clear all DHCPv6 Snooping bindings on all interfaces or on a specific
interface.

clear ipv6 dhcp snooping statistics

Use this command to clear all DHCPv6 Snooping statistics.

Default N/A

Format clear ipv6 dhcp snooping statistics

Mode  Privileged EXEC

 User EXEC

Command Added in firmware release 1.0

History

816 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Section 9: Quality of Service Commands
This chapter describes the Quality of Service (QoS) commands available in the DM1200E.
The QoS Commands chapter contains the following sections:

 Class of Service Commands  MAC Access Control List Commands

 Differentiated Services Commands  IP Access Control List Commands
 DiffServ Class Commands PoE Power Management Commands
 DiffServ Policy Commands

 DiffServ Service Commands
 DiffServ Show Commands
PoE Detection Commands


Note! The commands in this chapter are in one of two functional groups:

 Show commands display switch settings, statistics, and other information.

 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.

Class of Service Commands

This section describes the commands you use to configure and view Class of Service (CoS)
settings for the switch. The commands in this section allow you to control the priority and
transmission rate of traffic.

Note! Commands you issue in the Interface Config mode only affect a single interface.
Commands you issue in the Global Config mode affect all interfaces.

classofservice dot1p-mapping
This command maps an 802.1p priority to an internal traffic class. The userpriority values can
range from 0-7. The trafficclass values range from 0-6.

817 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format classofservice dot1p-mapping userpriority trafficclass

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no classofservice dot1p-mapping
This command maps each 802.1p priority to its default internal traffic class value.

Format no classofservice dot1p-mapping

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

classofservice ip-dscp-mapping
This command maps an IP DSCP value to an internal traffic class. The ipdscp value is specified
as either an integer from 0 to 63, or symbolically through one of the following keywords: af11,
af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5,
cs6, cs7, ef.
The trafficclass values can range from 0-6.

Format classofservice ip-dscp-mapping ipdscp trafficclass

Mode Global Config

Command Added in firmware release 1.0

818 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

History

no classofservice ip-dscp-mapping
This command maps each IP DSCP value to its default internal traffic class value.

Format no classofservice ip-dscp-mapping

Mode Global Config

Command Added in firmware release 1.0

History

classofservice trust
This command sets the class of service trust mode of an interface or range of interfaces. You
can set the mode to trust one of the Dot1p (802.1p), IP DSCP, or IP Precedence packet
markings. You can also set the interface mode to untrusted. If you configure an interface to use
Dot1p, the mode does not appear in the output of the show running-config command because
Dot1p is the default.

Default dot1p

Format classofservice trust {dot1p | ip-dscp | untrusted}

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no classofservice trust
This command sets the interface mode to the default value.

819 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default dot1p

Format no classofservice trust

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

cos-queue min-bandwidth
This command specifies the minimum transmission bandwidth guarantee for each interface
queue on an interface, a range of interfaces, or all interfaces. The total number of queues
supported per interface is platform specific. A value from 0-100 (percentage of link rate) must
be specified for each supported queue, with 0 indicating no guaranteed minimum bandwidth.
The sum of all values entered must not exceed 100.

Format cos-queue min-bandwidth bw-0 bw-1 … bw-6

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no cos-queue min-bandwidth
This command restores the default for each queue's minimum bandwidth value.

Format no cos-queue min-bandwidth

Modes  Global Config

820 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Interface Config

Command Added in firmware release 1.0

History

cos-queue strict
This command activates the strict priority scheduler mode for each specified queue for an
interface queue on an interface, a range of interfaces, or all interfaces.

Format cos-queue strict queue-id-1 [queue-id-2 … queue-id-n]

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no cos-queue strict
This command restores the default weighted scheduler mode for each specified queue.

Format no cos-queue strict queue-id-1 [queue-id-2 … queue-id-n]

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

traffic-shape
This command specifies the maximum transmission bandwidth limit for the interface as a whole.
The bandwidth values are from 0-100 in increments of 1. You can also specify this value for a

821 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

range of interfaces or all interfaces. Also known as rate shaping, traffic shaping has the effect
of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded.

Format traffic-shape bw

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

no traffic-shape
This command restores the interface shaping rate to the default value.

Format no traffic-shape

Modes  Global Config

 Interface Config

Command Added in firmware release 1.0

History

show classofservice dot1p-mapping

This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes
for a specific interface. The unit/slot/port parameter is optional. If specified, the 802.1p
mapping table of the interface is displayed. If omitted, the most recent global configuration
settings are displayed. For more information, see Voice VLAN Commands.

Default N/A

Format show classofservice dot1p-mapping [unit/slot/port]

822 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command Added in firmware release 1.0

History

The following information is repeated for each user priority.

TERM DEFINITION

User Priority The 802.1p user priority value.

Traffic Class The traffic class internal queue identifier to which the user priority value is mapped.

show classofservice ip-dscp-mapping

This command displays the current IP DSCP mapping to internal traffic classes for the global
configuration settings.

Default N/A

Format show classofservice ip-dscp-mapping

Mode Privileged EXEC

Command Added in firmware release 1.0

History

The following information is repeated for each user priority.

TERM DEFINITION

823 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IP DSCP The IP DSCP value.

Traffic Class The traffic class internal queue identifier to which the IP DSCP value is mapped.

show classofservice trust

This command displays the current trust mode setting for a specific interface. The
unit/slot/port parameter is optional. If you specify an interface, the command displays the

port trust mode of the interface. If you do not specify an interface, the command displays the
most recent global configuration settings.

Default N/A

Format show classofservice trust [unit/slot/port]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Class of Service Trust The the trust mode, which is either Dot1P, IP DSCP, or Untrusted.
Mode

Non-IP Traffic Class (IP DSCP mode only) The traffic class used for non-IP traffic.

Untrusted Traffic Class (Untrusted mode only) The traffic class used for all untrusted traffic.

824 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show interfaces cos-queue
This command displays the class-of-service queue configuration for the specified interface. The
unit/slot/port parameter is optional. If specified, the class-of-service queue configuration of

the interface is displayed. If omitted, the most recent global configuration settings are displayed.

Default N/A

Format show interfaces cos-queue [unit/slot/port]

Mode Privileged EXEC

Command Added in firmware release 1.0

History

TERM DEFINITION

Interface Shaping Rate The global interface shaping rate value.

Queue Id Each interface supports 7 queues numbered 0 to 6.

Minimum Bandwidth The minimum transmission bandwidth guarantee for the queue, expressed as a
percentage. A value of 0 means bandwidth is not guaranteed and the queue operates
using best-effort. This is a configured value.

Scheduler Type Indicates whether this queue is scheduled for transmission using a strict priority or a
weighted scheme. This is a configured value.

Queue Management The queue depth management technique used for this queue (tail drop).
Type

If you specify the interface, the command also displays the following information.

825 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

TERM DEFINITION

Interface The unit/slot/port of the interface. If displaying the global configuration, this output
line is replaced with a Global Config indication.

Interface Shaping Rate The maximum transmission bandwidth limit for the interface as a whole. It is independent of
any per-queue maximum bandwidth value(s) in effect for the interface. This is a configured
value.

Differentiated Services Commands

This section describes the commands you use to configure QOS Differentiated Services
(DiffServ).
You configure DiffServ in several stages by specifying three DiffServ components:
1) Class
a) Creating and deleting classes.
b) Defining match criteria for a class.
2) Policy
c) Creating and deleting policies
d) Associating classes with a policy
e) Defining policy statements for a policy/class combination
3) Service
f) Adding and removing a policy to/from an inbound interface
The DiffServ class defines the packet filtering criteria. The attributes of a DiffServ policy define
the way the switch processes packets. You can define policy attributes on a per-class instance
basis. The switch applies these attributes when a match occurs.
Packet processing begins when the switch tests the match criteria for a packet. The switch
applies a policy to a packet when it finds a class match within that policy.
The following rules apply when you create a DiffServ class:
 Each class can contain a maximum of one referenced (nested) class

826 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

  Class definitions do not support hierarchical service policies
A given class definition can contain a maximum of one reference to another class. You can
combine the reference with other match criteria. The referenced class is truly a reference and
not a copy since additions to a referenced class affect all classes that reference it. Changes to
any class definition currently referenced by any other class must result in valid class definitions
for all derived classes, otherwise the switch rejects the change. You can remove a class
reference from a class definition.
The only way to remove an individual match criterion from an existing class definition is to
delete the class and re-create it.

Note! The mark possibilities for policing include CoS, IP DSCP, and IP Precedence. While the
latter two are only meaningful for IP packet types, CoS marking is allowed for both IP and non-
IP packets, since it updates the 802.1p user priority field contained in the VLAN tag of the layer
2 packet header.

diffserv
This command sets the DiffServ operational mode to active. While disabled, the DiffServ
configuration is retained and can be changed, but it is not activated. When enabled, DiffServ
services are activated.

Format diffserv

Mode Global Config

Command Added in firmware release 1.0

History

827 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no diffserv
This command sets the DiffServ operational mode to inactive. While disabled, the DiffServ
configuration is retained and can be changed, but it is not activated. When enabled, DiffServ
services are activated.

Format no diffserv

Mode Global Config

Command Added in firmware release 1.0

History

DiffServ Class Commands

Use the DiffServ class commands to define traffic classification. To classify traffic, you specify
Behavior Aggregate (BA), based on DSCP and Multi-Field (MF) classes of traffic (name, match
criteria)
This set of commands consists of class creation/deletion and matching, with the class match
commands specifying Layer 3, Layer 2, and general match criteria. The class match criteria are
also known as class rules, with a class definition consisting of one or more rules to identify the
traffic that belongs to the class.

Note! Once you create a class match criterion for a class, you cannot change or delete the
criterion. To change or delete a class match criterion, you must delete and re-create the entire
class.

The CLI command root is class-map.

class-map
This command defines a DiffServ class of type match-all. When used without any match
condition, this command enters the class-map mode. The class-map-name is a case sensitive
alphanumeric string from 1 to 31 characters uniquely identifying an existing DiffServ class.

828 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! The class-map-name 'default' is reserved and must not be used.

The class type of match-all indicates all of the individual match conditions must be true for a
packet to be considered a member of the class. This command may be used without specifying
a class type to enter the Class-Map Config mode for an existing DiffServ class.

Note! The optional keyword ipv4 specifies the Layer 3 protocol for this class. If not specified,
this parameter defaults to ipv4.

Note! The CLI mode is changed to Class-Map Config when this command is successfully
executed depending on the keyword specified.

Format class-map match-all class-map-name [{ipv4 | ipv6}]

Mode Global Config

Command Added in firmware release 1.0

History

no class-map
This command eliminates an existing DiffServ class. The class-map-name is the name of an
existing DiffServ class. (The class name default is reserved and is not allowed here.) This
command may be issued at any time; if the class is currently referenced by one or more policies
or by any other class, the delete action fails.

Format no class-map class-map-name

Mode Global Config

829 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

class-map rename
This command changes the name of a DiffServ class. The class-map-name is the name of an
existing DiffServ class. The new-class-map-name parameter is a case-sensitive alphanumeric
string from 1 to 31 characters uniquely identifying the class.

Default none

Format class-map rename class-map-name new-class-map-name

Mode Global Config

Command Added in firmware release 1.0

History

match ethertype
This command adds to the specified class definition a match condition based on the value of the
ethertype. The ethertype value is specified as one of the following keywords: appletalk, arp,
ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp or as a custom

EtherType value in the range of 0x0600-0xFFFF.

Format match ethertype {keyword | custom 0x0600-0xFFFF}

Mode Class-Map Config

Command Added in firmware release 1.0

History

830 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

match any
This command adds to the specified class definition a match condition whereby all packets are
considered to belong to the class.

Default none

Format match any

Mode  Class-Map Config

 IPv6-Class-Map Config

Command Added in firmware release 1.0

History

match class-map
This command adds to the specified class definition the set of match conditions defined for
another class. The refclassname is the name of an existing DiffServ class whose match
conditions are being referenced by the specified class definition.

Default none

Format match class-map refclassname

Mode  Class-Map Config

 IPv6-Class-Map Config

Command Added in firmware release 1.0

History

831 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note!
 The parameters refclassname and class-map-name can not be the same.
 Only one other class may be referenced by a class.
 Any attempts to delete the refclassname class while the class is still referenced by any
class-map-name fails.

 The combined match criteria of class-map-name and refclassname must be an allowed

combination based on the class type.
 Any subsequent changes to the refclassname class match criteria must maintain this
validity, or the change attempt fails.
 The total number of class rules formed by the complete reference class chain (including
both predecessor and successor classes) must not exceed a platform-specific maximum.
In some cases, each removal of a refclass rule reduces the maximum number of
available rules in the class definition by one.

no match class-map
This command removes from the specified class definition the set of match conditions defined
for another class. The refclassname is the name of an existing DiffServ class whose match
conditions are being referenced by the specified class definition.

Default none

Format no match class-map refclassname

Mode Class-Map Config

Command Added in firmware release 1.0

History

832 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

match cos
This command adds to the specified class definition a match condition for the Class of Service
value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN
tagged packet). The value may be from 0 to 7.

Default none

Format match cos 0-7

Mode Class-Map Config

Command Added in firmware release 1.0

History

match secondary-cos
This command adds to the specified class definition a match condition for the secondary Class
of Service value (the inner 802.1Q tag of a double VLAN tagged packet). The value may be
from 0 to 7.

Default none

Format match secondary-cos 0-7

Mode Class-Map Config

Command Added in firmware release 1.0

History

match destination-address mac

This command adds to the specified class definition a match condition based on the destination
MAC address of a packet. The macaddr parameter is any layer 2 MAC address formatted as six,
two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff). The macmask

833 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

parameter is a layer 2 MAC address bit mask, which need not be contiguous, and is formatted
as six, two-digit hexadecimal numbers separated by colons (e.g., ff:07:23:ff:fe:dc).

Default none

Format match destination-address mac macaddr macmask

Mode Class-Map Config

Command Added in firmware release 1.0

History

match dstip
This command adds to the specified class definition a match condition based on the destination
IP address of a packet. The ipaddr parameter specifies an IP address. The ipmask parameter
specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits.

Default None

Format match dstip ipaddr ipmask

Mode Class-Map Config

Command Added in firmware release 1.0

History

match dstl4port
This command adds to the specified class definition a match condition based on the destination
layer 4 port of a packet using a single keyword or numeric notation. To specify the match
condition as a single keyword, the value for portkey is one of the supported port name
keywords. The currently supported portkey values are: domain, echo, ftp, ftpdata, http, smtp,
snmp, telnet, tftp, www. Each of these translates into its equivalent port number. To specify the

834 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

match condition using a numeric notation, one layer 4 port number is required. The port
number is an integer from 0 to 65535.

Default none

Format match dstl4port {portkey | 0-65535}

Mode Class-Map Config

Command Added in firmware release 1.0

History

match ip dscp
This command adds to the specified class definition a match condition based on the value of the
IP DiffServ Code Point (DSCP) field in a packet, which is defined as the high-order six bits of the
Service Type octet in the IP header (the low-order two bits are not checked).
The dscpval value is specified as either an integer from 0 to 63, or symbolically through one of
the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be,
cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.

Note! The ip dscp, ip precedence, and ip tos match conditions are alternative ways to specify a
match criterion for the same Service Type field in the IP header, but with a slightly different
user notation.

Default none

Format match ip dscp dscpval

Mode Class-Map Config

835 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 1.0
History

match ip precedence
This command adds to the specified class definition a match condition based on the value of the
IP Precedence field in a packet, which is defined as the high-order three bits of the Service
Type octet in the IP header (the low-order five bits are not checked). The precedence value is
an integer from 0 to 7.

Note! The IP DSCP, IP Precedence, and IP ToS match conditions are alternative ways to
specify a match criterion for the same Service Type field in the IP header, but with a slightly
different user notation.

Default none

Format match ip precedence 0-7

Mode Class-Map Config

Command Added in firmware release 1.0

History

match ip tos
This command adds to the specified class definition a match condition based on the value of the
IP TOS field in a packet, which is defined as all eight bits of the Service Type octet in the IP
header. The value of tosbits is a two-digit hexadecimal number from 00 to ff. The value of
tosmask is a two-digit hexadecimal number from 00 to ff. The tosmask denotes the bit positions

in tosbits that are used for comparison against the IP TOS field in a packet. For example, to
check for an IP TOS value having bits 7 and 5 set and bit 1 clear, where bit 7 is most significant,
use a tosbits value of a0 (hex) and a tosmask of a2 (hex).

836 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! The IP DSCP, IP Precedence, and IP ToS match conditions are alternative ways to
specify a match criterion for the same Service Type field in the IP header, but with a slightly
different user notation.

Note! This “free form” version of the IP DSCP/Precedence/TOS match specification gives the
user complete control when specifying which bits of the IP Service Type field are checked.

Default none

Format match ip tos tosbits tosmask

Mode Class-Map Config

Command Added in firmware release 1.0

History

match protocol
This command adds to the specified class definition a match condition based on the value of the
IP Protocol field in a packet using a single keyword notation or a numeric value notation.
To specify the match condition using a single keyword notation, the value for protocol-name is
one of the supported protocol name keywords. The currently supported values are: icmp, igmp,
ip, tcp, udp. A value of ip matches all protocol number values.

To specify the match condition using a numeric value notation, the protocol number is a
standard value assigned by IANA and is interpreted as an integer from 0 to 255.

Note! This command does not validate the protocol number value against the current list
defined by IANA.

837 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format match protocol {protocol-name | 0-255}

Mode Class-Map Config

Command Added in firmware release 1.0

History

match source-address mac

This command adds to the specified class definition a match condition based on the source MAC
address of a packet. The address parameter is any layer 2 MAC address formatted as six, two-
digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff). The macmask
parameter is a layer 2 MAC address bit mask, which may not be contiguous, and is formatted as
six, two-digit hexadecimal numbers separated by colons (e.g., ff:07:23:ff:fe:dc).

Default none

Format match source-address mac address macmask

Mode Class-Map Config

Command Added in firmware release 1.0

History

match srcip
This command adds to the specified class definition a match condition based on the source IP
address of a packet. The ipaddr parameter specifies an IP address. The ipmask parameter
specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits.

Default none

838 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format match srcip ipaddr ipmask

Mode Class-Map Config

Command Added in firmware release 1.0

History

match srcip6
This command adds to the specified class definition a match condition based on the source IP
address of a packet.

Default none

Format match srcip6 source-ipv6-prefix/prefix-length

Mode Ipv6-Class-Map Config

Command Added in firmware release 1.0

History

match srcl4port
This command adds to the specified class definition a match condition based on the source
layer 4 port of a packet using a single keyword or numeric notation. To specify the match
condition as a single keyword notation, the value for portkey is one of the supported port name
keywords (listed below). The currently supported portkey values are: domain, echo, ftp, ftpdata,
http, smtp, snmp, telnet, tftp, www. Each of these translates into its equivalent port number,
which is used as both the start and end of a port range.
To specify the match condition as a numeric value, one layer 4 port number is required. The
port number is an integer from 0 to 65535.

839 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default none

Format match srcl4port {portkey | 0-65535}

Mode  Class-Map Config

 IPv6-Class-Map Config

Command Added in firmware release 1.0

History

match vlan
This command adds to the specified class definition a match condition based on the value of the
layer 2 VLAN Identifier field (the only tag in a single tagged packet or the first or outer tag of a
double VLAN tagged packet). The VLAN ID is an integer from 0 to 4093.

Default none

Format match vlan 0-4093

Mode Class-Map Config

Command Added in firmware release 1.0

History

match secondary-vlan
This command adds to the specified class definition a match condition based on the value of the
layer 2 secondary VLAN Identifier field (the inner 802.1Q tag of a double VLAN tagged packet).
The secondary VLAN ID is an integer from 0 to 4093.

Default none

840 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format match secondary-vlan 0-4093

Mode Class-Map Config

Command Added in firmware release 1.0

History

DiffServ Policy Commands

Use the DiffServ policy commands to specify traffic conditioning actions, such as policing and
marking, to apply to traffic classes
Use the policy commands to associate a traffic class that you define by using the class
command set with one or more QoS policy attributes. Assign the class/policy association to an
interface to form a service. Specify the policy name when you create the policy.
Each traffic class defines a particular treatment for packets that match the class definition. You
can associate multiple traffic classes with a single policy. When a packet satisfies the conditions
of more than one class, preference is based on the order in which you add the classes to the
policy. The first class you add has the highest precedence.
This set of commands consists of policy creation/deletion, class addition/removal, and individual
policy attributes.

Note! The only way to remove an individual policy attribute from a class instance within a
policy is to remove the class instance and re-add it to the policy. The values associated with an
existing policy attribute can be changed without removing the class instance.

The CLI command root is policy-map.

assign-queue
This command modifies the queue id to which the associated traffic stream is assigned. The
queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the

device.

841 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format assign-queue queueid

Mode Policy-Class-Map Config

Incompatibiliti Drop
es

Command Added in firmware release 1.0

History

drop
This command specifies that all packets for the associated traffic stream are to be dropped at
ingress.

Format drop

Mode Policy-Class-Map Config

Incompatibiliti Assign Queue, Mark (all forms), Mirror, Police, Redirect

es

Command Added in firmware release 1.0

History

mirror
This command specifies that all incoming packets for the associated traffic stream are copied to
a specific egress interface (physical port or LAG).

Format mirror unit/slot/port

842 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Policy-Class-Map Config

Incompatibiliti Drop, Redirect

es

Command Added in firmware release 1.0

History

redirect
This command specifies that all incoming packets for the associated traffic stream are
redirected to a specific egress interface (physical port or port-channel).

Format redirect unit/slot/port

Mode Policy-Class-Map Config

Incompatibiliti Drop, Mirror

es

Command Added in firmware release 1.0

History

conform-color
Use this command to enable color-aware traffic policing and define the conform-color class map.
Used in conjunction with the police command where the fields for the conform level are
specified. The class-map-name parameter is the name of an existing DiffServ class map.

Note! This command may only be used after specifying a police command for the policy-class
instance.

843 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format conform-color class-map-name

Mode Policy-Class-Map Config

Command Added in firmware release 1.0

History

class
This command creates an instance of a class definition within the specified policy for the
purpose of defining treatment of the traffic class through subsequent policy attribute
statements. The classname is the name of an existing DiffServ class.

Note! This command causes the specified policy to create a reference to the class definition.

Note! The CLI mode is changed to Policy-Class-Map Config when this command is successfully
executed.

Format class classname

Mode Policy-Map Config

Command Added in firmware release 1.0

History

no class
This command deletes the instance of a particular class and its defined treatment from the
specified policy. classname is the names of an existing DiffServ class.

844 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! This command removes the reference to the class definition for the specified policy.

Format no class classname

Mode Policy-Map Config

Command Added in firmware release 1.0

History

mark cos
This command marks all packets for the associated traffic stream with the specified class of
service (CoS) value in the priority field of the 802.1p header (the only tag in a single tagged
packet or the first or outer 802.1Q tag of a double VLAN tagged packet). If the packet does not
already contain this header, one is inserted. The CoS value is an integer from 0 to 7.

Default 1

Format mark-cos 0-7

Mode Policy-Class-Map Config

Incompatibilities Drop, Mark IP DSCP, IP Precedence, Police

Command History Added in firmware release 1.0

mark cos-as-sec-cos
This command marks outer VLAN tag priority bits of all packets as the inner VLAN tag priority,
marking Cos as Secondary CoS. This essentially means that the inner VLAN tag CoS is copied to
the outer VLAN tag CoS.

845 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format mark-cos-as-sec-cos

Mode Policy-Class-Map Config

Incompatibilities Drop, Mark IP DSCP, IP Precedence, Police

Command History Added in firmware release 1.0

Example: The following shows an example of the command.

(DM1200E) (Config-policy-classmap)#mark cos-as-sec-cos

mark ip-dscp
This command marks all packets for the associated traffic stream with the specified IP DSCP
value.
The dscpval value is specified as either an integer from 0 to 63, or symbolically through one of
the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be,
cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.

Format mark ip-dscp dscpval

Mode Policy-Class-Map Config

Incompatibilities Drop, Mark CoS, Mark IP Precedence, Police

Command History Added in firmware release 1.0

mark ip-precedence
This command marks all packets for the associated traffic stream with the specified IP
Precedence value. The IP Precedence value is an integer from 0 to 7.

846 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! This command may not be used on IPv6 classes. IPv6 does not have a precedence field.

Format mark ip-precedence 0-7

Mode Policy-Class-Map Config

Incompatibilities Drop, Mark CoS, Mark IP Precedence, Police

Policy Type In

Command History Added in firmware release 1.0

police-simple
This command is used to establish the traffic policing style for the specified class. The simple
form of the police command uses a single data rate and burst size, resulting in two outcomes:
conform and violate. The conforming data rate is specified in kilobits-per-second (Kbps) and is
an integer from 1 to 4294967295. The conforming burst size is specified in kilobytes (KB) and is
an integer from 1 to 128.
For each outcome, the only possible actions are drop, set-cos-as-sec-cos, set-cos-transmit, set-
sec-cos-transmit, set-dscp-transmit, set-prec-transmit, or transmit. In this simple form of the
police command, the conform action defaults to transmit and the violate action defaults to
drop. These actions can be set with this command once the style has been configured.
For set-dscp-transmit, a dscpval value is required and is specified as either an integer from 0 to
63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23,
af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
For set-prec-transmit, an IP Precedence value is required and is specified as an integer from 0-7.
For set-cos-transmit an 802.1p priority value is required and is specified as an integer from 0-7.

847 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format police-simple {1-4294967295 1-128 conform-action {drop | set-cos-
as-sec-cos | set-cos-transmit 0-7 | set-sec-cos-transmit 0-7 |
set-prec-transmit 0-7 | set-dscp-transmit 0-63 | transmit}
[violate-action {drop | set-cos-as-sec-cos | set-cos-transmit 0-7
| set-sec-cos-transmit 0-7 | set-prec-transmit 0-7 | set-dscp-
transmit 0-63 | transmit}]}

Mode Policy-Class-Map Config

Incompatibilities Drop, Mark (all forms)

Command History Added in firmware release 1.0

Example: The following shows an example of the command.

(DM1200E) (Config-policy-classmap)#police-simple 1 128 conform-action transmit violate-
action drop

police-single-rate
This command is the single-rate form of the police command and is used to establish the
traffic policing style for the specified class. For each outcome, the only possible actions are drop,
set-cos-as-sec-cost, set-cos-transmit, set-sec-cos-transmit, set-dscp-transmit, set-prec-transmit,
or transmit. In this single-rate form of the police command, the conform action defaults to
send, the exceed action defaults to drop, and the violate action defaults to drop. These actions
can be set with this command once the style has been configured.

Format police-single-rate {1-4294967295 1-128 1-128 conform-action {drop

| set-cos-as-sec-cos | set-cos-transmit 0-7 | set-sec-cos-transmit
0-7 | set-prec-transmit 0-7 | set-dscp-transmit 0-63 | transmit}
exceed-action {drop | set-cos-as-sec-cos | set-cos-transmit 0-7 |
set-sec-cos-transmit 0-7 | set-prec-transmit 0-7 | set-dscp-
transmit 0-63 | transmit} [violate-action {drop | set-cos-as-sec-
cos-transmit | set-cos-transmit 0-7 | set-sec-cos-transmit 0-7 |
set-prec-transmit 0-7 | set-dscp-transmit 0-63 | transmit}]}

Mode Policy-Class-Map Config

848 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command History Added in firmware release 1.0

police-two-rate
This command is the two-rate form of the police command and is used to establish the traffic
policing style for the specified class. For each outcome, the only possible actions are drop, set-
cos-as-sec-cos, set-cos-transmit, set-sec-cos-transmit, set-dscp-transmit, set-prec-transmit, or
transmit. In this two-rate form of the police command, the conform action defaults to send,
the exceed action defaults to drop, and the violate action defaults to drop. These actions can be
set with this command once the style has been configured.

Format police-two-rate {1-4294967295 1-4294967295 1-128 1-128 conform-

action {drop | set-cos-as-sec-cos | set-cos-transmit 0-7 | set-
sec-cos-transmit 0-7 | set-prec-transmit 0-7 | set-dscp-transmit
0-63 | transmit} exceed-action {drop | set-cos-as-sec-cos | set-
cos-transmit 0-7 | set-sec-cos-transmit 0-7 | set-prec-transmit 0-
7 | set-dscp-transmit 0-63 | transmit} [violate-action {drop |
set-cos-as-sec-cos | set-cos-transmit 0-7 | set-sec-cos-transmit
0-7 | set-prec-transmit 0-7 | set-dscp-transmit 0-63 | transmit}]}

Mode Policy-Class-Map Config

Command History Added in firmware release 1.0

policy-map
This command establishes a new DiffServ policy. The policyname parameter is a case-sensitive
alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is
specific to the inbound traffic direction as indicated by the in parameter, or the outbound traffic
direction as indicated by the out parameter, respectively.

Note! The CLI mode is changed to Policy-Map Config when this command is successfully
executed.

849 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format policy-map policyname {in|out}

Mode Global Config

Command History Added in firmware release 1.0

no policy-map
This command eliminates an existing DiffServ policy. The policyname parameter is the name of
an existing DiffServ policy. This command may be issued at any time. If the policy is currently
referenced by one or more interface service attachments, this delete attempt fails.

Format no policy-map policyname

Mode Global Config

Command History Added in firmware release 1.0

policy-map rename
This command changes the name of a DiffServ policy. The policyname is the name of an
existing DiffServ class. The newpolicyname parameter is a case-sensitive alphanumeric string
from 1 to 31 characters uniquely identifying the policy.

Format policy-map rename policyname newpolicyname

Mode Global Config

Command History Added in firmware release 1.0

850 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

DiffServ Service Commands
Use the DiffServ service commands to assign a DiffServ traffic conditioning policy, which you
specified by using the policy commands, to an interface in the incoming direction.
The service commands attach a defined policy to a directional interface. You can assign only
one policy at any one time to an interface in the inbound direction. DiffServ is not used in the
outbound direction.
This set of commands consists of service addition/removal.
The CLI command root is service-policy.
service-policy
This command attaches a policy to an interface in the inbound direction as indicated by the in
parameter, or the outbound direction as indicated by the out parameter, respectively. The
policyname parameter is the name of an existing DiffServ policy. This command causes a

service to create a reference to the policy.

Note! This command effectively enables DiffServ on an interface in the inbound direction.
There is no separate interface administrative 'mode' command for DiffServ.

Note! This command fails if any attributes within the policy definition exceed the capabilities of
the interface. Once a policy is successfully attached to an interface, any attempt to change the
policy definition, that would result in a violation of the interface capabilities, causes the policy
change attempt to fail.

Format service-policy {in|out} policymapname

Modes  Global Config

 Interface Config

Command History Added in firmware release 1.0

851 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! Each interface can have one policy attached.

no service-policy
This command detaches a policy from an interface in the inbound direction as indicated by the
in parameter, or the outbound direction as indicated by the out parameter, respectively. The

policyname parameter is the name of an existing DiffServ policy.

Note! This command causes a service to remove its reference to the policy. This command
effectively disables DiffServ on an interface in the inbound direction or an interface in the
outbound direction. There is no separate interface administrative 'mode' command for DiffServ.

Format no service-policy {in|out} policymapname

Modes  Global Config

 Interface Config

Command History Added in firmware release 1.0

DiffServ Show Commands

Use the DiffServ show commands to display configuration and status information for classes,
policies, and services. You can display DiffServ information in summary or detailed formats. The
status information is only shown when the DiffServ administrative mode is enabled.

show class-map
This command displays all configuration information for the specified class. The class-name is
the name of an existing DiffServ class.

Default N/A

852 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show class-map [class-name]

Modes  Privileged EXEC

 User EXEC

Command History Added in firmware release 1.0

If the class-name is specified the following fields are displayed:

TERM DEFINITION

Class Name The name of this class.

Class Type A class type of all means every match criterion defined for the class is evaluated
simultaneously and must all be true to indicate a class match.

Class Layer3 Protocol The Layer 3 protocol for this class. Possible value is IPv4.

Match Criteria The Match Criteria fields are only displayed if they have been configured. They are displayed
in the order entered by the user. The fields are evaluated in accordance with the class type.
The possible Match Criteria fields are: Destination IP Address, Destination Layer 4 Port,
Destination MAC Address, Ethertype, Source MAC Address, VLAN, Class of Service, Every, IP
DSCP, IP Precedence, IP TOS, Protocol Keyword, Reference Class, Source IP Address, and
Source Layer 4 Port.

Values The values of the Match Criteria.

If you do not specify the Class Name, this command displays a list of all defined DiffServ classes.
The following fields are displayed:

TERM DEFINITION

853 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Class Name The name of this class. (Note that the order in which classes are displayed is not necessarily
the same order in which they were created.)

Class Type A class type of all means every match criterion defined for the class is evaluated
simultaneously and must all be true to indicate a class match.

Ref Class Name The name of an existing DiffServ class whose match conditions are being referenced by the
specified class definition.

show diffserv
This command displays the DiffServ General Status Group information, which includes the
current administrative mode setting as well as the current and maximum number of rows in
each of the main DiffServ private MIB tables. This command takes no options.

Default N/A

Format show diffserv

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

DiffServ Admin mode The current value of the DiffServ administrative mode.

Class Table Size The current and maximum number of entries (rows) in the Class Table.
Current/Max

Class Rule Table Size The current and maximum number of entries (rows) in the Class Rule Table.
Current/Max

854 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Policy Table Size The current and maximum number of entries (rows) in the Policy Table.
Current/Max

Policy Instance Table Size The current and maximum number of entries (rows) in the Policy Instance Table.
Current/Max

Policy Instance Table Max The current and maximum number of entries (rows) for the Policy Instance Table.
Current/Max

Policy Attribute Table Max The current and maximum number of entries (rows) for the Policy Attribute Table.
Current/Max

Service Table Size The current and maximum number of entries (rows) in the Service Table.
Current/Max

show policy-map
This command displays all configuration information for the specified policy. The policyname is
the name of an existing DiffServ policy.

Default N/A

Format show policy-map [policyname]

Mode Privileged EXEC

Command History Added in firmware release 1.0

If the Policy Name is specified the following fields are displayed:

TERM DEFINITION

Policy Name The name of this policy.

855 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Policy Type The policy type (only inbound policy definitions are supported for this platform.)

Class Members The class that is a member of the policy.

The following information is repeated for each class associated with this policy (only those
policy attributes actually configured are displayed):

TERM DEFINITION

Assign Queue Directs traffic stream to the specified QoS queue. This allows a traffic classifier to specify
which one of the supported hardware queues are used for handling packets belonging to the
class.

Class Name The name of this class.

Committed Burst Size The committed burst size, used in simple policing.
(KB)

Committed Rate The committed rate, used in simple policing.

(Kbps)

Conform Action The current setting for the action taken on a packet considered to conform to the policing
parameters. This is not displayed if policing is not in use for the class under this policy.

Conform Color Mode The current setting for the color mode. Policing uses either color blind or color aware mode.
Color blind mode ignores the coloration (marking) of the incoming packet. Color aware mode
takes into consideration the current packet marking when determining the policing outcome.

Conform COS The CoS mark value if the conform action is set-cos-transmit.

Conform DSCP Value The DSCP mark value if the conform action is set-dscp-transmit.

Conform IP The IP Precedence mark value if the conform action is set-prec-transmit.

Precedence Value

856 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Drop Drop a packet upon arrival. This is useful for emulating access control list operation using
DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface.

Exceed Action The action taken on traffic that exceeds settings that the network administrator specifies.

Exceed Color Mode The current setting for the color of exceeding traffic that the user may optionally specify.

Mark CoS The class of service value that is set in the 802.1p header of inbound packets. This is not
displayed if the mark cos was not specified.

Mark CoS as The secondary 802.1p priority value (second/inner VLAN tag. Same as CoS (802.1p) marking,
Secondary CoS but the dot1p value used for remarking is picked from the dot1p value in the secondary (i.e.
inner) tag of a double-tagged packet.

Mark IP DSCP The mark/re-mark value used as the DSCP for traffic matching this class. This is not displayed
if mark ip description is not specified.

Mark IP Precedence The mark/re-mark value used as the IP Precedence for traffic matching this class. This is not
displayed if mark ip precedence is not specified.

Mirror Copies a classified traffic stream to a specified egress port (physical port or LAG). This can
occur in addition to any marking or policing action. It may also be specified along with a QoS
queue assignment.

Non-Conform Action The current setting for the action taken on a packet considered to not conform to the policing
parameters. This is not displayed if policing not in use for the class under this policy.

Non-Conform COS The CoS mark value if the non-conform action is set-cos-transmit.

Non-Conform DSCP The DSCP mark value if the non-conform action is set-dscp-transmit.
Value

Non-Conform IP The IP Precedence mark value if the non-conform action is set-prec-transmit.

Precedence Value

Peak Rate Guarantees a committed rate for transmission, but also transmits excess traffic bursts up to a

857 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 user-specified peak rate, with the understanding that a downstream network element (such
as the next hop’s policer) might drop this excess traffic. Traffic is held in queue until it is
transmitted or dropped (per type of queue depth management.) Peak rate shaping can be
configured for the outgoing transmission stream for an AP traffic class (although average rate
shaping could also be used.)

Peak Burst Size (PBS). The network administrator can set the PBS as a means to limit the damage expedited
forwarding traffic could inflict on other traffic (e.g., a token bucket rate limiter) Traffic that
exceeds this limit is discarded.

Policing Style The style of policing, if any, used (simple).

Redirect Forces a classified traffic stream to a specified egress port (physical port or LAG). This can
occur in addition to any marking or policing action. It may also be specified along with a QoS
queue assignment.

If the Policy Name is not specified this command displays a list of all defined DiffServ policies.
The following fields are displayed:

TERM DEFINITION

Policy Name The name of this policy. (The order in which the policies are displayed is not necessarily the
same order in which they were created.)

Policy Type The policy type (Only inbound is supported).

Class Members List of all class names associated with this policy.

Example: The following shows example CLI display output including the mark-cos-as-sec-cos
option specified in the policy action.
(DM1200E) #show policy-map p1
Policy Name.................................... p1
Policy Type.................................... In
Class Name..................................... c1
Mark CoS as Secondary CoS...................... Yes

858 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows example CLI display output including the mark-cos-as-sec-cos
action used in the policing (simple-police, police-single-rate, police two-rate) command.
(DM1200E) #show policy-map p2
Policy Name....................... p2
Policy Type....................... In
Class Name........................ c2
Policing Style.................... Police Two Rate
Committed Rate.................... 1
Committed Burst Size.............. 1
Peak Rate......................... 1
Peak Burst Size................... 1
Conform Action.................... Mark CoS as Secondary CoS
Exceed Action..................... Mark CoS as Secondary CoS
Non-Conform Action................ Mark CoS as Secondary CoS
Conform Color Mode................ Blind
Exceed Color Mode................. Blind

show diffserv service

This command displays policy service information for the specified interface and direction. The
unit/slot/port parameter specifies a valid unit/slot/port number for the system.

Default N/A

Format show diffserv service unit/slot/port in

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

DiffServ Admin Mode The current setting of the DiffServ administrative mode. An attached policy is only in effect on
an interface while DiffServ is in an enabled mode.

Interface unit/slot/port

Direction The traffic direction of this interface service.

859 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Operational Status The current operational status of this DiffServ service interface.

Policy Name The name of the policy attached to the interface in the indicated direction.

Policy Details Attached policy details, whose content is identical to that described for the show policy-map
policymapname command (content not repeated here for brevity).

show diffserv service brief

This command displays all interfaces in the system to which a DiffServ policy has been attached.
The inbound direction parameter is optional.

Default N/A

Format show diffserv service brief [in]

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

DiffServ Mode The current setting of the DiffServ administrative mode. An attached policy is only active on
an interface while DiffServ is in an enabled mode.

The following information is repeated for interface and direction (only those interfaces
configured with an attached policy are shown):

TERM DEFINITION

860 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Interface unit/slot/port

Direction The traffic direction of this interface service.

OperStatus The current operational status of this DiffServ service interface.

Policy Name The name of the policy attached to the interface in the indicated direction.

show policy-map interface

This command displays policy-oriented statistics information for the specified interface and
direction. The unit/slot/port parameter specifies a valid interface for the system. Instead of
unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the LAG

interface. lag lag-intf-num can also be used to specify the LAG interface where lag-intf-num
is the LAG port number.

Note! This command is only allowed while the DiffServ administrative mode is enabled.

Default N/A

Format show policy-map interface unit/slot/port [in]

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

861 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Interface unit/slot/port

Direction The traffic direction of this interface service.

Operational Status The current operational status of this DiffServ service interface.

Policy Name The name of the policy attached to the interface in the indicated direction.

The following information is repeated for each class instance within this policy:

TERM DEFINITION

Class Name The name of this class instance.

In Discarded Packets A count of the packets discarded for this class instance for any reason due to DiffServ
treatment of the traffic class.

show service-policy
This command displays a summary of policy-oriented statistics information for all interfaces in
the specified direction.

Default N/A

Format show service-policy in

Mode Privileged EXEC

Command History Added in firmware release 1.0

862 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

The following information is repeated for each interface and direction (only those interfaces
configured with an attached policy are shown):

TERM DEFINITION

Interface unit/slot/port

Operational Status The current operational status of this DiffServ service interface.

Policy Name The name of the policy attached to the interface.

MAC Access Control List Commands

This section describes the commands you use to configure MAC Access Control List (ACL)
settings. MAC ACLs ensure that only authorized users have access to specific resources and
block any unwarranted attempts to reach network resources.
The following rules apply to MAC ACLs:

 The maximum number of ACLs you can create is 50. The limit applies to all ACLs,
regardless of type.
 The system supports only Ethernet II frame types.
 The maximum number of rules per MAC ACL is 10.

mac access-list extended

This command creates a MAC Access Control List (ACL) identified by name, consisting of
classification fields defined for the Layer 2 header of an Ethernet frame. The name parameter is
a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC
access list. The rate-limit attribute configures the committed rate and the committed burst size.
If a MAC ACL by this name already exists, this command enters Mac-Access-List config mode to
allow updating the existing MAC ACL.

863 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! The CLI mode changes to Mac-Access-List Config mode when you successfully execute
this command.

Format mac access-list extended name

Mode Global Config

Command History Added in firmware release 1.0

no mac access-list extended

This command deletes a MAC ACL identified by name from the system.

Format no mac access-list extended name

Mode Global Config

Command History Added in firmware release 1.0

mac access-list extended rename

This command changes the name of a MAC Access Control List (ACL). The name parameter is
the name of an existing MAC ACL. The newname parameter is a case-sensitive alphanumeric
string from 1 to 31 characters uniquely identifying the MAC access list.
This command fails if a MAC ACL by the name newname already exists.

Format mac access-list extended rename name newname

Mode Global Config

Command History Added in firmware release 1.0

864 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

{deny | permit} (MAC ACL)

This command creates a new rule for the current MAC access list. Each rule is appended to the
list of configured rules for the list. A rule may either deny or permit traffic according to the
specified classification fields. At a minimum, the source and destination MAC value must be
specified, each of which may be substituted using the keyword any to indicate a match on any
value in that field. The remaining command parameters are all optional, but the most frequently
used parameters appear in the same relative order as shown in the command format.

Format {deny|permit} {srcmac | any} {dstmac | any} [ethertypekey | 0x0600-0xFFFF]

[vlan {eq 0-4095}] [cos 0-7] [[log] [time-range time-range-name] [assign-queue queue-
id]] [{mirror | redirect} unit/slot/port][rate-limit rate burst-size]

Mode Mac-Access-List Config

Command History Added in firmware release 1.0

Note! The no form of this command is not supported, since the rules within a MAC ACL cannot
be deleted individually. Rather, the entire MAC ACL must be deleted and respecified.

Note! An implicit deny all MAC rule always terminates the access list.

The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from
0x0600-0xFFFF. The currently supported ethertypekey values are: appletalk, arp, ibmsna, ipv4,
ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp. Each of these translates into its
equivalent Ethertype value(s).
Table 11: Ethertype Keyword and 4-digit Hexadecimal Vale

ETHERTYPE KEYWORD CORRESPONDING VALUE

865 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

appletalk 0x809B

arp 0x0806

ibmsna 0x80D5

ipv4 0x0800

ipv6 0x86DD

ipx 0x8037

mplsmcast 0x8848

mplsucast 0x8847

netbios 0x8191

novell 0x8137, 0x8138

pppoe 0x8863, 0x8864

rarp 0x8035

The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields,
respectively, of the VLAN tag. For packets containing a double VLAN tag, this is the first (or
outer) tag.
The time-range parameter allows imposing time limitation on the MAC ACL rule as defined by
the parameter time-range-name. If a time range with the specified name does not exist and the
MAC ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL
rule is applied immediately. If a time range with specified name exists and the MAC ACL

866 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is
applied when the time-range with specified name becomes active. The ACL rule is removed
when the time-range with specified name becomes inactive. For information about configuring
time ranges, see PoE Power Management Commands

The assign-queue parameter allows specification of a particular hardware queue for handling
traffic that matches this rule. The allowed queue-id value is 0-6. The assign-queue parameter
is valid only for a permit rule.

The mirror parameter allows the traffic matching this rule to be copied to the specified
unit/slot/port, while the redirect parameter allows the traffic matching this rule to be

forwarded to the specified unit/slot/port. The assign-queue and redirect parameters are
only valid for a permit rule.

Note! The special command form {deny | permit} any any is used to match all Ethernet layer
2 packets, and is the equivalent of the IP access list “match every” rule.

The permit command’s optional attribute rate-limit allows you to permit only the allowed rate
of traffic as per the configured rate in kbps, and burst-size in kbytes.
Example: The following shows an example of the command.
(DM1200E) (Config)#mac access-list extended mac1
(DM1200E) (Config-mac-access-list)#permit 00:00:00:00:aa:bb ff:ff:ff:ff:00:00 any rate-
limit 32 16
(DM1200E) (Config-mac-access-list)#exit

mac access-group
This command either attaches a specific MAC Access Control List (ACL) identified by name to an
interface or range of interfaces, or associates it with a VLAN ID, in a given direction. The name
parameter must be the name of an existing MAC ACL.
An optional sequence number may be specified to indicate the order of this mac access list
relative to other mac access lists already assigned to this interface and direction. A lower
number indicates higher precedence order. If a sequence number is already in use for this

867 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

interface and direction, the specified mac access list replaces the currently attached mac access
list using that sequence number. If the sequence number is not specified for this command, a
sequence number that is one greater than the highest sequence number currently in use for
this interface and direction is used.
This command specified in 'Interface Config' mode only affects a single interface, whereas the
'Global Config' mode setting is applied to all interfaces. The VLAN keyword is only valid in the
'Global Config' mode. The 'Interface Config' mode command is only available on platforms that
support independent per-port class of service queue configuration.
An optional control-plane is specified to apply the MAC ACL on CPU port. The control packets
like BPDU are also dropped because of the implicit deny all rule added to the end of the list. To
overcome this, permit rules must be added to allow the control packets.

Note! The keyword control-plane is only available in Global Config mode.

Format mac access-group name {{control-plane|in|out} vlan vlan-id {in|out}} [sequence 1–

4294967295]

Modes  Global Config

 Interface Config

Command History Added in firmware release 1.0

PARAMETER DESCRIPTION

name The name of the Access Control List.

sequence A optional sequence number that indicates the order of this IP access list relative to the other
IP access lists already assigned to this interface and direction. The range is 1 to 4294967295.

868 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

vlan-id A VLAN ID associated with a specific IP ACL in a given direction.

Example: The following shows an example of the command.

(DM1200E)(Config)#mac access-group mac1 control-plane

no mac access-group
This command removes a MAC ACL identified by name from the interface in a given direction.

Format no mac access-group name {{control-plane|in|out} vlan vlan-id {in|out}}

Modes  Global Config

 Interface Config

Command History Added in firmware release 1.0

Example: The following shows an example of the command.

(DM1200E)(Config)#no mac access-group mac1 control-plane

show mac access-lists

This command displays a MAC access list and all of the rules that are defined for the MAC ACL.
Use the [name] parameter to identify a specific MAC ACL to display. The rate-limit attribute
displays committed rate and committed burst size.

Note! The command output varies based on the match criteria configured within the rules of
an ACL.

Default N/A

Format show mac access-lists [name]

869 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

Rule Number The ordered rule number identifier defined within the MAC ACL.

Action The action associated with each rule. The possible values are Permit or Deny.

Source MAC Address The source MAC address for this rule.

Source MAC Mask The source MAC mask for this rule.

Committed Rate The committed rate defined by the rate-limit attribute.

Committed Burst Size The committed burst size defined by the rate-limit attribute.

Destination MAC The destination MAC address for this rule.

Address

Ethertype The Ethertype keyword or custom value for this rule.

VLAN ID The VLAN identifier value or range for this rule.

COS The COS (802.1p) value for this rule.

Log Displays when you enable logging for the rule.

Assign Queue The queue identifier to which packets matching this rule are assigned.

870 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mirror Interface The unit/slot/port to which packets matching this rule are copied.

Redirect Interface The unit/slot/port to which packets matching this rule are forwarded.

Time Range Name Displays the name of the time-range if the MAC ACL rule has referenced a time range.

Rule Status Status (Active/Inactive) of the MAC ACL rule.

Example: The following shows example CLI display output for the command.
(DM1200E) #show mac access-lists mac1

ACL Name: mac1

Outbound Interface(s): control-plane

Rule Number: 1
Action......................................... permit
Source MAC Address............................. 00:00:00:00:AA:BB
Source MAC Mask................................ FF:FF:FF:FF:00:00
Committed Rate................................. 32
Committed Burst Size........................... 16

IP Access Control List Commands

This section describes the commands you use to configure IP Access Control List (ACL) settings.
IP ACLs ensure that only authorized users have access to specific resources and block any
unwarranted attempts to reach network resources.
The following rules apply to IP ACLs:
 DM1200E does not support IP ACL configuration for IP packet fragments.
 The maximum number of ACLs you can create is 50. The limit applies to all ACLs,
regardless of type.
 The maximum number of rules per IP ACL is 10.
 Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is
in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's)
in the bit positions that are used for the network address, and has zeros (0's) for the bit
positions that are not used. In contrast, a wildcard mask has (0's) in a bit position that

871 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 must be checked. A 1 in a bit position of the ACL mask indicates the corresponding bit
can be ignored.

access-list
This command creates an IP Access Control List (ACL) that is identified by the access list
number, which is 1-99 for standard ACLs or 100-199 for extended ACLs. Table 12: ACL
Command Paramete describes the parameters for the access-list command.
IP Standard ACL:

Format access-list 1-99 {deny | permit} {every | srcip srcmask} [log]

[time-range time-range-name][assign-queue queue-id] [{mirror |
redirect} unit/slot/port]

Mode Global Config

Command History Added in firmware release 1.0

IP Extended ACL:

Format access-list 100-199 {deny | permit} {every | {{eigrp | gre | icmp |

igmp | ip | ipinip | ospf | pim | tcp | udp | 0 -255} {srcip
srcmask|any|host srcip}[range {portkey|startport} {portkey|endport}
{eq|neq|lt|gt} {portkey|0-65535}{dstip dstmask|any|host
dstip}[{range {portkey|startport} {portkey|endport} | {eq | neq |
lt | gt} {portkey | 0-65535} ] [flag [+fin | -fin] [+syn | -syn]
[+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg]
[established]] [icmp-type icmp-type [icmp-code icmp-code] | icmp-
message icmp-message] [igmp-type igmp-type] [fragments] [precedence
precedence | tos tos [ tosmask] | dscp dscp]}} [time-range time-
range-name] [log] [assign-queue queue-id] [{mirror | redirect}
unit/slot/port] [rate-limit rate burst-size]

Mode Global Config

Command History Added in firmware release 1.0

872 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! IPv4 extended ACLs have the following limitations for egress ACLs:

 Match on port ranges is not supported.

 The rate-limit command is not supported.

Table 12: ACL Command Parameters

PARAMETER DESCRIPTION

1-99 or 100-199 Range 1 to 99 is the access list number for an IP standard ACL. Range 100 to 199 is the
access list number for an IP extended ACL.

{deny | permit} Specifies whether the IP ACL rule permits or denies an action.

Assign-queue, redirect, and mirror attributes are configurable for a deny rule, but they
have no operational effect.

every Match every packet.

{eigrp | gre | icmp | igmp | Specifies the protocol to filter for an extended IP ACL rule.
ip | ipinip | ospf | pim | tcp
| udp | 0 -255}

srcip srcmask|any|host Specifies a source IP address and source netmask for match condition of the IP ACL
scrip rule.

Specifying any specifies srcip as 0.0.0.0 and srcmask as 255.255.255.255.

Specifying host A.B.C.D specifies srcip as A.B.C.D and srcmask as 0.0.0.0.

{{range{portkey|startport} This option is available only if the protocol is TCP or UDP.

{portkey|endport}|{eq|neq
|lt|gt} {portkey | 0- Specifies the source layer 4 port match condition for the IP ACL rule. You can use the
65535}] port number, which ranges from 0-65535, or you specify the portkey, which can be
one of the following keywords:

For TCP: bgp, domain, echo, ftp, ftp-data, http, smtp, telnet, www, pop2,

873 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 pop3.

For UDP: domain, echo, ntp, rip, snmp, tftp, time, and who.

For both TCP and UDP, each of these keywords translates into its equivalent port
number, which is used as both the start and end of a port range.

If range is specified, the IP ACL rule matches only if the layer 4 port number falls
within the specified portrange. The startport and endport parameters identify the
first and last ports that are part of the port range. They have values from 0 to 65535.
The ending port must have a value equal or greater than the starting port. The starting
port, ending port, and all ports in between will be part of the layer 4 port range.

When eq is specified, the IP ACL rule matches only if the layer 4 port number is equal to
the specified port number or portkey.

When lt is specified, IP ACL rule matches if the layer 4 port number is less than the
specified port number or portkey. It is equivalent to specifying the range as 0 to
<specified port number – 1>.

When gt is specified, the IP ACL rule matches if the layer 4 port number is greater than
the specified port number or portkey. It is equivalent to specifying the range as
<specified port number + 1> to 65535.

When neq is specified, IP ACL rule matches only if the layer 4 port number is not equal
to the specified port number or portkey.

Two rules are added in the hardware one with range equal to 0 to <specified port
number _- 1> and one with range equal to <<specified port number _+ 1 to 65535>>

Port number matches only apply to unfragmented or first fragments.

dstip dstmask|any|host Specifies a destination IP address and netmask for match condition of the IP ACL rule.
dstip
Specifying any implies specifying dstip as 0.0.0.0 and dstmask as 255.255.255.255.

Specifying host A.B.C.D implies dstip as A.B.C.D and dstmask as 0.0.0.0.

874 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

[precedence precedence Specifies the TOS for an IP ACL rule depending on a match of precedence or DSCP
| tos tos [tosmask] | values using the parameters dscp, precedence, tos/tosmask.
dscp dscp]
tosmask is an optional parameter.

flag [+fin | -fin] [+syn | - This option is available only if the protocol is tcp.
syn] [+rst | -rst] [+psh | -
psh] [+ack | -ack] [+urg | - Specifies that the IP ACL rule matches on the TCP flags.
urg] [established]

When +<tcpflagname> is specified, a match occurs if the specified <tcpflagname> flag

is set in the TCP header.

When -<tcpflagname> is specified, a match occurs if the specified <tcpflagname> flag

is *NOT* set in the TCP header.

When established is specified, a match occurs if the specified RST or ACK bits are set in
the TCP header. Two rules are installed in the hardware when the established option is
specified.

[icmp-type icmp-type This option is available only if the protocol is icmp.

[icmp-code icmp-code] |
Specifies a match condition for ICMP packets.
icmp-message icmp-
message] When icmp-type is specified, the IP ACL rule matches on the specified ICMP message
type, a number from 0 to 255.

When icmp-code is specified, the IP ACL rule matches on the specified ICMP message
code, a number from 0 to 255.

Specifying icmp-message implies that both icmp-type and icmp-code are

specified. The following icmp-messages are supported: echo, echo-reply, host-
redirect, mobile-redirect, net-redirect, net-unreachable, redirect,
packet-too-big, port-unreachable, source-quench, router-
solicitation, router-advertisement, time-exceeded, ttl-exceeded and
unreachable.

igmp-type igmp-type This option is available only if the protocol is igmp.

When igmp-type is specified, the IP ACL rule matches on the specified IGMP message
type, a number from 0 to 255.

875 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

fragments Specifies that the IP ACL rule matches on fragmented IP packets.

[log] Specifies that this rule is to be logged.

[time-range time-range- Allows imposing time limitation on the ACL rule as defined by the parameter time-range-
name] name. If a time range with the specified name does not exist and the ACL containing
this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied
immediately. If a time range with specified name exists and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, the ACL rule is applied when the
time-range with specified name becomes active. The ACL rule is removed when the
time-range with specified name becomes inactive. For information about configuring
time ranges, see PoE Power Management Commands

[assign-queue queue-id] Specifies the assign-queue, which is the queue identifier to which packets matching this
rule are assigned.

[{mirror | redirect} Specifies the mirror or redirect interface which is the unit/slot/port to which
unit/slot/port] packets matching this rule are copied or forwarded, respectively.

[rate-limit rate burst- Specifies the allowed rate of traffic as per the configured rate in kbps, and burst-size in
size] kbytes.

no access-list
This command deletes an IP ACL that is identified by the parameter accesslistnumber from the
system. The range for accesslistnumber 1-99 for standard access lists and 100-199 for
extended access lists.

Format no access-list accesslistnumber

Mode Global Config

Command History Added in firmware release 1.0

876 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip access-list
This command creates an extended IP Access Control List (ACL) identified by name, consisting
of classification fields defined for the IP header of an IPv4 frame. The name parameter is a
case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list.
The rate-limit attribute configures the committed rate and the committed burst size.
If an IP ACL by this name already exists, this command enters IPv4-Access_List config mode to
allow updating the existing IP ACL.

Note! The CLI mode changes to IPv4-Access-List Config mode when you successfully execute
this command.

Format ip access-list name

Mode Global Config

Command History Added in firmware release 1.0

no ip access-list
This command deletes the IP ACL identified by name from the system.

Format no ip access-list name

Mode Global Config

Command History Added in firmware release 1.0

ip access-list rename
This command changes the name of an IP Access Control List (ACL). The name parameter is
the names of an existing IP ACL. The newname parameter is a case-sensitive alphanumeric
string from 1 to 31 characters uniquely identifying the IP access list.

877 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

This command fails is an IP ACL by the name newname already exists.

Format ip access-list rename name newname

Mode Global Config

Command History Added in firmware release 1.0

{deny | permit} (IP ACL)

This command creates a new rule for the current IP access list. Each rule is appended to the list
of configured rules for the list. A rule may either deny or permit traffic according to the
specified classification fields. At a minimum, either the every keyword or the protocol, source
address, and destination address values must be specified. The source and destination IP
address fields may be specified using the keyword any to indicate a match on any value in that
field. The remaining command parameters are all optional, but the most frequently used
parameters appear in the same relative order as shown in the command format.

Format {deny | permit} {every | {{eigrp | gre | icmp | igmp | ip | ipinip | ospf | pim | tcp | udp | 0
-255} {srcip srcmask | any | host srcip} [{range {portkey | startport} {portkey
| endport} | {eq | neq | lt | gt} {portkey | 0-65535} ] {dstip dstmask | any | host
dstip} [{range {portkey | startport} {portkey | endport} | {eq | neq | lt | gt}
{portkey | 0-65535} ] [flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh | -psh] [+ack |
-ack] [+urg | -urg] [established]] [icmp-type icmp-type [icmp-code icmp-code] | icmp-
message icmp-message] [igmp-type igmp-type] [fragments] [precedence precedence |
tos tos [ tosmask] | dscp dscp]}} [time-range time-range-name] [log] [assign-queue
queue-id] [{mirror | redirect} unit/slot/port] [rate-limit rate burst-size]

Mode Ipv4-Access-List Config

Command History Added in firmware release 1.0

Note! The no form of this command is not supported, since the rules within an IP ACL cannot
be deleted individually. Rather, the entire IP ACL must be deleted and respecified.

878 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Note! An implicit deny all IP rule always terminates the access list.

Note! For IPv4, the following are not supported for egress ACLs:
 A match on port ranges.
 The rate-limit command.

The time-range parameter allows imposing time limitation on the IP ACL rule as defined by the
specified time range. If a time range with the specified name does not exist and the ACL
containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is
applied immediately. If a time range with specified name exists and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-
range with specified name becomes active. The ACL rule is removed when the time-range with
specified name becomes inactive. For information about configuring time ranges, see PoE
Power Management Commands
.
The assign-queue parameter allows specification of a particular hardware queue for handling
traffic that matches this rule. The allowed queue-id value is 0-6. The assign-queue parameter
is valid only for a permit rule.
The permit command’s optional attribute rate-limit allows you to permit only the allowed rate
of traffic as per the configured rate in kbps, and burst-size in kbytes.

PARAMETER DESCRIPTION

{deny | permit} Specifies whether the IP ACL rule permits or denies the matching traffic.

Every Match every packet.

879 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

{eigrp | gre | icmp | Specifies the protocol to match for the IP ACL rule.
igmp | ip | ipinip | ospf
| pim | tcp | udp | 0 -
255}

srcip srcmask | any | host Specifies a source IP address and source netmask to match for the IP ACL rule.
srcip

Specifying “any” implies specifying srcip as “0.0.0.0” and srcmask as

“255.255.255.255”.

Specifying “host A.B.C.D” implies srcip as “A.B.C.D” and srcmask as “0.0.0.0”.

[{range {portkey | This option is available only if the protocol is tcp or udp.
startport} {portkey |
endport} | {eq | neq | lt | gt}
{portkey | 0-65535} ] Specifies the layer 4 port match condition for the IP ACL rule. Port number can be
used, which ranges from 0-65535, or the portkey, which can be one of the following
keywords:

For tcp protocol: bgp, domain, echo, ftp, ftp-data, http, smtp, telnet, www, pop2,
pop3

For udp protocol: domain, echo, ntp, rip, snmp, tftp, time, who

Each of these keywords translates into its equivalent port number.

When range is specified, the IP ACL rule matches only if the layer 4 port number falls
within the specified port range. The startport and endport parameters identify the
first and last ports that are part of the port range. They have values from 0 to
65535. The ending port must have a value equal to or greater than the starting port.
The starting port, ending port, and all ports in between will be part of the layer 4
port range.

When eq is specified, IP ACL rule matches only if the layer 4 port number is equal to
the specified port number or portkey.

When lt is specified, IP ACL rule matches if the layer 4 port number is less than the
specified port number or portkey. It is equivalent to specifying the range as 0 to
<specified port number – 1>.

880 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 When gt is specified, IP ACL rule matches if the layer 4 port number is greater than
the specified port number or portkey. It is equivalent to specifying the range as
<specified port number + 1> to 65535.

When neq is specified, IP ACL rule matches only if the layer 4 port number is not
equal to the specified port number or port key. Two rules are added in the hardware
one with range equal to 0 to <specified port number _- 1> and one with range equal
to <<specified port number _+ 1 to 65535>>.

Port number matches only apply to unfragmented or first fragments.

dstip dstmask | any | host Specifies a destination IP address and netmask for match condition of the IP ACL
dstip rule.

Specifying any implies specifying dstip as 0.0.0.0 and dstmask as 255.255.255.255.

Specifying host A.B.C.D implies dstip as A.B.C.D and dstmask as 0.0.0.0.

[precedence precedence | Specifies the TOS for an IP ACL rule depending on a match of precedence or DSCP
tos tos [tosmask] | dscp values using the parameters dscp, precedence, tos/tosmask.
dscp]
tosmask is an optional parameter.

flag [+fin | -fin] [+syn | -syn] Specifies that the IP ACL rule matches on the tcp flags.
[+rst | -rst] [+psh | -psh]
[+ack | -ack] [+urg | -urg]
[established]
When +<tcpflagname> is specified, a match occurs if specified <tcpflagname> flag
is set in the TCP header.

When -<tcpflagname> is specified, a match occurs if specified <tcpflagname> flag is

NOT set in the TCP header.

When established is specified, a match occurs if either the specified RST or ACK bits
are set in the TCP header. Two rules are installed in hardware to when the
established option is specified.

This option is available only if protocol is tcp.

[icmp-type icmp-type This option is available only if the protocol is ICMP.

[icmp-code icmp-code] |
Specifies a match condition for ICMP packets.
icmp-message icmp-
message] When icmp-type is specified, IP ACL rule matches on the specified ICMP message

881 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 type, a number from 0 to 255.

When icmp-code is specified, IP ACL rule matches on the specified ICMP message
code, a number from 0 to 255.

Specifying icmp-message implies both icmp-type and icmp-code are specified. The
following icmp-messages are supported: echo, echo-reply, host-redirect, mobile-
redirect, net-redirect, net-unreachable, redirect, packet-too-big, port-unreachable,
source-quench, router-solicitation, router-advertisement, time-exceeded, ttl-
exceeded and unreachable.

The ICMP message is decoded into corresponding ICMP type and ICMP code within
that ICMP type.

igmp-type igmp-type This option is visible only if the protocol is IGMP.

When igmp-type is specified, the IP ACL rule matches on the specified IGMP
message type, a number from 0 to 255.

fragments Specifies that IP ACL rule matches on fragmented IP packets.

log Specifies that this rule is to be logged.

time-range time-range-name

Allows imposing a time limitation on the ACL rule as defined by the parameter time-
range-name. If a time range with the specified name does not exist and the ACL
containing this ACL rule is applied to an interface or bound to a VLAN, the ACL rule is
applied immediately. If a time range with specified name exists and the ACL
containing this ACL rule is applied to an interface or bound to a VLAN, the ACL rule is
applied when the time-range with specified name becomes active. The ACL rule is
removed when the time-range with specified name becomes inactive.

assign-queue queue-id Specifies the assign-queue, which is the queue identifier to which packets matching
this rule are assigned.

{mirror | redirect} unit/slot/ Specifies the mirror or redirect interface which is the unit/slot/port to which packets
port matching this rule are copied or forwarded, respectively.

rate-limit rate burst-size Specifies the allowed rate of traffic as per the configured rate in kbps, and burst-size
in kbytes.

882 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following shows an example of the command.
(DM1200E) (Config)#ip access-list ip1

(DM1200E) (Config-ipv4-acl)#permit icmp any any rate-limit 32 16

(DM1200E) (Config-ipv4-acl)#exit

ip access-group
This command either attaches a specific IP Access Control List (ACL) identified by
accesslistnumber or name to an interface, range of interfaces, or all interfaces; or associates it

with a VLAN ID in a given direction. The parameter name is the name of the Access Control List.

An optional sequence number may be specified to indicate the order of this IP access list
relative to other IP access lists already assigned to this interface and direction. A lower number
indicates higher precedence order. If a sequence number is already in use for this interface and
direction, the specified access list replaces the currently attached IP access list using that
sequence number. If the sequence number is not specified for this command, a sequence
number that is one greater than the highest sequence number currently in use for this interface
and direction is used.
An optional control-plane is specified to apply the ACL on CPU port. The IPv4 control packets
like RADIUS and TACACS+ are also dropped because of the implicit deny all rule added at the
end of the list. To overcome this, permit rules must be added to allow the IPv4 control packets.

Note! The keyword control-plane is only available in Global Config mode.

Default none

Format ip access-group {accesslistnumber|name} {{control-plane|in|out}|vlan vlan-id

{in|out}} [sequence 1-4294967295]

Modes  Interface Config

 Global Config

883 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command History Added in firmware release 1.0

PARAMETER DESCRIPTION

accesslistnumber Identifies a specific IP ACL. The range is 1 to 199.

sequence A optional sequence number that indicates the order of this IP access list relative to the other
IP access lists already assigned to this interface and direction. The range is 1 to 4294967295.

vlan-id A VLAN ID associated with a specific IP ACL in a given direction.

name The name of the Access Control List.

Example: The following shows an example of the command.

(DM1200E) (Config)#ip access-group ip1 control-plane

no ip access-group
This command removes a specified IP ACL from an interface.

Default none

Format no ip access-group {accesslistnumber|name} {{control-plane|in|out}|vlan vlan-id

{in|out}}

Mode  Interface Config

 Global Config

Command History Added in firmware release 1.0

Example: The following shows an example of the command.

(DM1200E)(Config)#no ip access-group ip1 control-plane

884 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

acl-trapflags
This command enables the ACL trap mode.

Default disabled

Format acl-trapflags

Mode Global Config

Command History Added in firmware release 1.0

no acl-trapflags
This command disables the ACL trap mode.

Default disabled

Format no acl-trapflags

Mode Global Config

Command History Added in firmware release 1.0

show ip access-lists
Use this command to view summary information about all IP ACLs configured on the switch. To
view more detailed information about a specific access list, specify the ACL number or name
that is used to identify the IP ACL. The rate-limit attribute displays committed rate and
committed burst size.

Default N/A

885 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format show ip access-lists [accesslistnumber | name]

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

ACL ID/Name Identifies the configured ACL number or name.

Rules Identifies the number of rules configured for the ACL.

Direction Shows whether the ACL is applied to traffic coming into the interface (ingress) or leaving
the interface (egress).

Interface(s) Identifies the interface(s) to which the ACL is applied (ACL interface bindings).

VLAN(s) Identifies the VLANs to which the ACL is applied (ACL VLAN bindings).

If you specify an IP ACL number or name, the following information displays:

Note! Only the access list fields that you configure are displayed. Thus, the command output
varies based on the match criteria configured within the rules of an ACL.

TERM DEFINITION

Rule Number The number identifier for each rule that is defined for the IP ACL.

886 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Action The action associated with each rule. The possible values are Permit or Deny.

Match All Indicates whether this access list applies to every packet. Possible values are True or
False.

Protocol The protocol to filter for this rule.

ICMP Type Note! This is shown only if the protocol is ICMP.

The ICMP message type for this rule.

Starting Source L4 port The starting source layer 4 port.

Ending Source L4 port The ending source layer 4 port.

Starting Destination L4 The starting destination layer 4 port.

port

Ending Destination L4 The ending destination layer 4 port.

port

ICMP Code Note! This is shown only if the protocol is ICMP.

The ICMP message code for this rule.

Fragments If the ACL rule matches on fragmented IP packets.

Committed Rate The committed rate defined by the rate-limit attribute.

Committed Burst Size The committed burst size defined by the rate-limit attribute.

Source IP Address The source IP address for this rule.

Source IP Mask The source IP Mask for this rule.

887 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Source L4 Port Keyword The source port for this rule.

Destination IP Address The destination IP address for this rule.

Destination IP Mask The destination IP Mask for this rule.

Destination L4 Port The destination port for this rule.

Keyword

IP DSCP The value specified for IP DSCP.

IP Precedence The value specified IP Precedence.

IP TOS The value specified for IP TOS.

Log Displays when you enable logging for the rule.

Assign Queue The queue identifier to which packets matching this rule are assigned.

Mirror Interface The unit/slot/port to which packets matching this rule are copied.

Redirect Interface The unit/slot/port to which packets matching this rule are forwarded.

Time Range Name Displays the name of the time-range if the IP ACL rule has referenced a time range.

Rule Status Status (Active/Inactive) of the IP ACL rule.

Example: The following shows example CLI display output for the command.
(DM1200E) #show ip access-lists ip1

ACL Name: ip1

Inbound Interface(s): 1/0/30

Rule Number: 1

888 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Action......................................... permit
Match All...................................... FALSE
Protocol....................................... 1(icmp)
Committed Rate................................. 32
Committed Burst Size........................... 16

show access-lists
This command displays IP ACLs, IPv6 ACLs, and MAC access control lists information for a
designated interface and direction. Instead of unit/slot/port, lag lag-intf-num can be used
as an alternate way to specify the LAG interface. lag lag-intf-num can also be used to specify
the LAG interface where lag-intf-num is the LAG port number. Use the control-plane
keyword to display the ACLs applied on the CPU port.

Default N/A

Format show access-lists interface {unit/slot/port in|out | control-plane}

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

ACL Type Type of access list (IP or MAC).

ACL ID Access List name for a MAC or the numeric identifier for an IP access list.

Sequence Number An optional sequence number may be specified to indicate the order of this access list relative
to other access lists already assigned to this interface and direction. A lower number indicates
higher precedence order. If a sequence number is already in use for this interface and
direction, the specified access list replaces the currently attached access list using that
sequence number. If the sequence number is not specified by the user, a sequence number
that is one greater than the highest sequence number currently in use for this interface and
direction is used. Valid range is (1 to 4294967295).

889 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

in|out  in – Display Access List information for a particular interface and the in direction.

 out – Display Access List information for a particular interface and the out direction.

Example: The following shows an example of the command.

(DM1200E) #show access-lists interface control-plane

ACL Type ACL ID Sequence Number

-------- ------------------------------- ---------------
IPv6 ip61 1

show access-lists vlan

This command displays Access List information for a particular VLAN ID. The vlan-id
parameter is the VLAN ID of the VLAN with the information to view. The {in | out} options
specifies the direction of the VLAN ACL information to view.

Default N/A

Format show access-lists vlan vlan-id in|out

Mode Privileged EXEC

Command History Added in firmware release 1.0

TERM DEFINITION

ACL Type Type of access list (IP, IPv6, or MAC).

ACL ID Access List name for a MAC or IPv6 access list or the numeric identifier for an IP access list.

Sequence Number An optional sequence number may be specified to indicate the order of this access list relative
to other access lists already assigned to this interface and direction. A lower number indicates
higher precedence order. If a sequence number is already in use for this interface and
direction, the specified access list replaces the currently attached access list using that

890 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 sequence number. If the sequence number is not specified by the user, a sequence number
that is one greater than the highest sequence number currently in use for this interface and
direction is used. Valid range is (1 to 4294967295).

Time Range Commands for Time-Based ACLs

Time-based ACLs allow one or more rules within an ACL to be based on time. Each ACL rule
within an ACL except for the implicit deny all rule can be configured to be active and operational
only during a specific time period. The time range commands allow you to define specific times
of the day and week in order to implement time-based ACLs. The time range is identified by a
name and can then be referenced by an ACL rule defined with in an ACL.

time-range
Use this command to create a time range identified by name, consisting of one absolute time
entry and/or one or more periodic time entries. The name parameter is a case-sensitive,
alphanumeric string from 1 to 31 characters that uniquely identifies the time range. An alpha-
numeric string is defined as consisting of only alphabetic, numeric, dash, underscore, or space
characters.
If a time range by this name already exists, this command enters Time-Range config mode to
allow updating the time range entries

Note! When you successfully execute this command, the CLI mode changes to Time-Range
Config mode.

Format time-range name

Mode Global Config

Command History Added in firmware release 1.0

891 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no time-range
This command deletes a time-range identified by name.

Format no time-range name

Mode Global Config

Command History Added in firmware release 1.0

absolute
Use this command to add an absolute time entry to a time range. Only one absolute time entry
is allowed per time-range. The time parameter is based on the currently configured time zone.
The [start time date] parameters indicate the time and date at which the configuration that
referenced the time range starts going into effect. The time is expressed in a 24-hour clock, in
the form of hours:minutes. For example, 8:00 is 8:00 am and 20:00 is 8:00 pm. The date is
expressed in the format day month year. If no start time and date are specified, the
configuration statement is in effect immediately.
The [end time date] parameters indicate the time and date at which the configuration that
referenced the time range is no longer in effect. The end time and date must be after the start
time and date. If no end time and date are specified, the configuration statement is in effect
indefinitely.

Format absolute [start time date] [end time date]

Mode Time-Range Config

Command History Added in firmware release 1.0

no absolute
This command deletes the absolute time entry in the time range

892 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format no absolute

Mode Time-Range Config

Command History Added in firmware release 1.0

periodic
Use this command to add a periodic time entry to a time range. The time parameter is based
off of the currently configured time zone.
The first occurrence of the days-of-the-week argument is the starting day(s) from which the
configuration that referenced the time range starts going into effect. The second occurrence is
the ending day or days from which the configuration that referenced the time range is no
longer in effect. If the end days-of-the-week are the same as the start, they can be omitted
This argument can be any single day or combinations of days: Monday, Tuesday, Wednesday,
Thursday, Friday, Saturday, Sunday. Other possible values are:
 daily — Monday through Sunday
 weekdays — Monday through Friday
 weekend — Saturday and Sunday
If the ending days of the week are the same as the starting days of the week, they can be
omitted.
The first occurrence of the time argument is the starting hours:minutes which the configuration
that referenced the time range starts going into effect. The second occurrence is the ending
hours:minutes at which the configuration that referenced the time range is no longer in effect.
The hours:minutes are expressed in a 24-hour clock. For example, 8:00 is 8:00 am and 20:00 is
8:00 pm.

Format periodic days-of-the-week time to time

Mode Time-Range Config

893 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command History Added in firmware release 1.0

no periodic
This command deletes a periodic time entry from a time range

Format no periodic days-of-the-week time to time

Mode Time-Range Config

Command History Added in firmware release 1.0

show time-range
Use this command to display a time range and all the absolute/periodic time entries that are
defined for the time range. Use the name parameter to identify a specific time range to display.
When name is not specified, all the time ranges defined in the system are displayed.

Default N/A

Format show time-range [name]

Mode Privileged EXEC

Command History Added in firmware release 1.0

The information in the following table displays when no time range name is specified.

TERM DEFINITION

Admin Mode The administrative mode of the time range feature on the switch

894 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Current number of all The number of time ranges currently configured in the system.
Time Ranges

Maximum number of all The maximum number of time ranges that can be configured in the system.
Time Ranges

Time Range Name Name of the time range.

Status Status of the time range (active/inactive)

Periodic Entry count The number of periodic entries configured for the time range.

Absolute Entry Indicates whether an absolute entry has been configured for the time range (Exists).

Auto-Voice over IP Commands

This section describes the commands you use to configure Auto-Voice over IP (VoIP)
commands. The Auto-VoIP feature explicitly matches VoIP streams in Ethernet switches and
provides them with a better class-of-service than ordinary traffic. When you enable the Auto-
VoIP feature on an interface, the interface scans incoming traffic for the following call-control
protocols:
 Session Initiation Protocol (SIP)
 H.323
 Skinny Client Control Protocol (SCCP)
When a call-control protocol is detected, the switch assigns the traffic in that session to the
highest CoS queue, which is generally used for time-sensitive traffic.

auto-voip
Use this command to configure auto VoIP mode. The supported modes are protocol-based and
oui-based. Protocol-based auto VoIP prioritizes the voice data based on the layer 4 port used
for the voice session. OUI based auto VoIP prioritizes the phone traffic based on the known OUI
of the phone.

895 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

When both modes are enabled, if the connected phone OUI is one of the configured OUI, then
the voice data is prioritized using OUI Auto VoIP, otherwise protocol-based Auto VoIP is used to
prioritize the voice data.
Active sessions are cleared if protocol-based auto VoIP is disabled on the port.

Default oui-based

Format auto-voip [protocol-based | oui-based]

Mode  Global Config

 Interface Config

Command History Added in firmware release 1.0

no auto-voip
Use the no form of the command to set the default mode.

auto-voip oui
Use this command to configure an OUI for Auto VoIP. The traffic from the configured OUI will
get the highest priority over the other traffic. The oui-prefix is a unique OUI that identifies
the device manufacturer or vendor. The OUI is specified in three octet values (each octets
represented as two hexadecimal digits) separated by colons. The string is a description of the
OUI that identifies the manufacturer or vendor associated with the OUI.

Default A list of known OUIs is present.

Format auto-voip oui oui-prefix oui-desc string

Mode Global Config

Command History Added in firmware release 1.0

896 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Example: The following example shows how to add an OUI to the table.

(DM1200E) (Config)#auto-voip oui 00:03:6B desc "Cisco VoIPPhone"

no auto-voip oui
Use the no form of the command to remove a configured OUI prefix from the table.

Default A list of known OUIs is present.

Format no auto-voip oui oui-prefix

Mode Global Config

Command History Added in firmware release 1.0

auto-voip oui-based priority

Use this command to configure the global OUI based auto VoIP priority. If the phone OUI is
matches one of the configured OUI, then the priority of traffic from the phone is changed to
OUI priority configured through this command. The priority-value is the 802.1p priority used
for traffic that matches a value in the known OUI list. If the interface detects an OUI match, the
switch assigns the traffic in that session to the traffic class mapped to this priority value. Traffic
classes with a higher value are generally used for time-sensitive traffic.

Default Highest available priority.

Format auto-voip oui-based priority priority-value

Mode Global Config

Command History Added in firmware release 1.0

897 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no auto-voip oui
Use the no form of the command to remove a configured OUI prefix from the table.

Default Highest available priority.

Format no auto-voip oui oui-prefix

Mode  Global Config

 Interface Config

Command History Added in firmware release 1.0

auto-voip protocol-based
Use this command to configure the global protocol-based auto VoIP remarking priority or traffic-
class. If remark priority is configured, the voice data of the session is remarked with the priority
configured through this command. The remark-priority is the 802.1p priority used for
protocol-based VoIP traffic. If the interface detects a call-control protocol, the device marks
traffic in that session with the specified 802.1p priority value to ensure voice traffic always gets
the highest priority throughout the network path.
The tc value is the traffic class used for protocol-based VoIP traffic. If the interface detects a
call-control protocol, the device assigns the traffic in that session to the configured Class of
Service (CoS) queue. Traffic classes with a higher value are generally used for time-sensitive
traffic. The CoS queue associated with the specified traffic class should be configured with the
appropriate bandwidth allocation to allow priority treatment for VoIP traffic.

Note! You must enable tagging on auto VoIP enabled ports to remark the voice data upon
egress.

Default Traffic class 7

898 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Format auto-voip protocol-based {remark remark-priority | traffic-class
tc}

Mode  Global Config

 Interface Config

Command History Added in firmware release 1.0

no auto-voip protocol-based
Use this command to reset the global protocol based auto VoIP remarking priority or traffic-
class to the default.

Default Traffic class 7

Format no auto-voip protocol-based {remark remark-priority | traffic-

class tc}

Mode  Global Config

 Interface Config

Command History Added in firmware release 1.0

auto-voip vlan
Use this command to configure the global Auto VoIP VLAN ID. The VLAN behavior is depend on
the configured auto VoIP mode. The auto-VoIP VLAN is the VLAN used to segregate VoIP traffic
from other non-voice traffic. All VoIP traffic that matches a value in the known OUI list gets
assigned to this VoIP VLAN.

Default none

Format auto-voip vlan vlan-id

899 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Mode Global Config

Command History Added in firmware release 1.0

no auto-voip vlan
Use the no form of the command to reset the auto-VoIP VLAN ID to the default value.

Default none

Format no auto-voip vlan

Mode Global Config

Command History Added in firmware release 1.0

show auto-voip
Use this command to display the auto VoIP settings on the interface or interfaces of the switch.

Default N/A

Format show auto-voip {protocol-based|oui-based} interface

{unit/slot/port|all}

Mode Privileged EXEC

Command History Added in firmware release 1.0

FIELD DESCRIPTION

900 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

VoIP VLAN ID The global VoIP VLAN ID.

Prioritization Type The type of prioritization used on voice traffic.

Class Value  If the Prioritization Type is configured as traffic-class, then this value is the
queue value.

 If the Prioritization Type is configured as remark, then this value is 802.1p

priority used to remark the voice traffic.

Priority The 802.1p priority. This field is valid for OUI auto VoIP.

AutoVoIP Mode The Auto VoIP mode on the interface.

Example: The following shows example CLI display output for the command.
(DM1200E)# show auto-voip protocol-based interface all

VoIP VLAN Id................................... 2

Prioritization Type............................ traffic-class
Class Value.................................... 7

Interface Auto VoIP Operational Status

Mode
--------- -------------- -----------------
1/0/1 Disabled Down
1/0/2 Disabled Down
1/0/3 Disabled Down
1/0/4 Disabled Down

Example: The following shows example CLI display output for the command.
(DM1200E)# show auto-voip oui-based interface all

VoIP VLAN Id................................... 2

Priority....................................... 7
Interface Auto VoIP Operational Status
Mode
--------- -------------- ------------------
1/0/1 Disabled Down
1/0/2 Disabled Down
1/0/3 Disabled Down
1/0/4 Disabled Down
1/0/5 Disabled Down

901 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show auto-voip oui-table
Use this command to display the VoIP oui-table information.

Default N/A

Format show auto-voip oui-table

Mode Privileged EXEC

Command History Added in firmware release 1.0

PARAMETER DESCRIPTION

OUI OUI of the source MAC address.

Status Default or configured entry.

OUI Description Description of the OUI.

Example: The following shows example CLI display output for the command.
(DM1200E)# show auto-voip oui-table

OUI Status Description

--------- ---------- ---------
00:01:E3 Default SIEMENS
00:03:6B Default CISCO1
00:01:01 Configured VoIP phone

Section 10: Power over Ethernet (PoE) Commands

This section describes the commands used to configure and monitor Power over Ethernet (PoE).
PoE allows IP telephones, wireless LAN access points, and other appliances to receive power as
well as data over existing LAN cabling without modifying the existing Ethernet infrastructure.

902 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PoE is only available on switches that contain a PoE controller and the following described
commands will only be available in PoE switch models.
PoE implements the PoE+ specification (IEEE 802.3at) for power sourcing equipment (PSE).
IEEE 802.3at allows power to be supplied to Class 4 PD devices that require power greater than
15.4 Watts and up to 34.2 Watts. This allows PoE+ enabled network switches and routers to be
used for deployment with devices that require more power than the 802.3AF specification
allows. PoE+ 802.3at is compatible with 802.1AF.
The PoE Commands chapter contains the following sections:

 PoE Detection Commands  PoE High-Power

 PoE Power Limits Commands  PoE Reset
 PoE Power Management Commands  PoE Traps
 PoE Priority  PoE UsageThreshold
 PoE Timer Schedule

Note! The commands in this chapter are in one of two functional groups:
 Show commands display switch settings, statistics, and other information.
 Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.

PoE Detection Commands

This commands are used to set the detection mode. Detection mode is used to set the type of
devices that will be allowed for powering up. You can configure the poe controller to detect only
standard devices or Legacy devices (which were pre-standard). “no poe detection” will bring the
detection mode back to default setting.

Note! Commands you issue in the Interface Config mode only affect a single interface.
Commands you issue in the Global Config mode affect all interfaces.

903 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

poe detection 4ptdot3af
This command detects only standard devices (802.3af and 802.3at).

Default 4ptdot3af+legacy.

Format poe detection 4ptdot3af

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

no poe detection
This command brings the detection mode back to default setting.

poe detection 4ptdot3af+legacy

This command is used to detect both standard and non-standard devices.

Default 4ptdot3af+legacy.

Format poe detection 4ptdot3af+legacy

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

no poe detection
This command brings the detection mode back to default setting.

904 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

poe detection legacy
This command is used to detect both standard and non-standard devices.

Default 4ptdot3af+legacy.

Format poe detection legacy

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

no poe detection
This command brings the detection mode back to default setting.

PoE Power Limits Commands

This command is used to configure the type of power limit for all ports in all units (Global
Configuration) or a specific port (Interface Configuration).

poe power limit dot3af

This command configure PoE class based Port Power limit.

Default 34.2 Watts.

Format poe power limit dot3af

Modes  Global Config

 Interface Config

905 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Command Added in firmware release 3.0
History

no poe power limit

This command brings the detection mode back to default setting.

poe power limit none

This command configure PoE Port Power limit to none.

Default 34.2 Watts.

Format poe power limit none

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

no poe power limit

This command brings the detection mode back to default setting.

poe power limit user-defined

This command configure PoE user-defined Port Power limit from 3000mW to 34200mW power
per port.

Default 34.2 Watts

Format poe power limit user-defined {3000 - 34200}

906 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

no poe power limit

This command brings the detection mode back to default value.

PoE Power Management Commands

This command is used to set up the power management type.

poe power management

This command is used to set up the power management type.

Default Dynamic.

Format poe power management [unit | all] {dynamic | static}

Mode Global Config

Command Added in firmware release 3.0

History

PARAMETER DESCRIPTION

unit Configures power management for an individual port.

all Configures power management for all ports.

907 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

dynamic Power management is done by the PoE controller and the maximum power for a port is not
reserved for each port.

static Power management is done by the PoE controller and maximum power for a port is reserved.

no poe power management

This command is used to set the management mode to the default.

PoE Priority
Use this command to configure the port priority level for the delivery of power to an attached
device. The switch may not be able to supply power to all connected devices, so the port
priority is used to determine which ports will supply power if adequate power capacity is not
available for all enabled ports. For ports that have the same priority level, the lower-numbered
port has higher priority.
For a system delivering peak power to a certain number of devices, if a new device is attached
to a high-priority port, power to a low-priority port is shut down and the new device is powered
up.
poe priority

Default Low

Format poe priority {crit | High | Low | Medium}

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

908 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

no poe priority
This command is used to return the port priority level to the default value.

PoE High-Power
This command is used to enable high power mode for all ports in all units (available only for the
first 10 ports) in Global Configuration, or to a specific unit in a Interface Configuration Mode. In
high-power mode, the switch negotiaties the power budget with the powered device. The
maximum power a PoE port is capable of delivering is 34.2W in dot3at mode.
poe high-power

Default Disabled

Format poe high-power {dot3at | legacy | pre-dot3at}

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

PARAMETER DESCRIPTION

dot3at High power device with LLDP support.

legacy Powered device with a high-inrush current.

pre-dot3at Powered device without LLDP support.

no poe high-power
This command disables high power mode.

909 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

PoE Reset
This command is used to reset PoE ports.
poe reset
This command is used to reset PoE ports.

Default Disabled

Format poe reset

Modes  Global Config

 Interface Config

Command Added in firmware release 3.0

History

poe reset auto

This command configure PoE Auto Reset mode to a specific device.

Default Disabled

Format poe reset auto <unit>

Modes  Global Config

Command Added in firmware release 3.0

History

poe reset auto all

This command is used to reset all PoE ports in all available units.

910 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Default Disabled

Format poe reset auto units

Modes  Global Config

Command Added in firmware release 3.0

History

PoE Traps
This command enables/disable traps that indicate changes in the PoE status for the port.
poe traps

Default Enabled

Format poe traps

Modes  Global Config

Command Added in firmware release 3.0

History

no poe traps
This command disable the traps sending.

PoE UsageThreshold
Use this command to configure the system power usage threshold level at which a trap is
gerenated. The threshold is configured as a percentage of the total available power.

911 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

poe usagethreshold

Default 90%

Format poe usagethreshold {unit | all} 1-99

Modes  Global Config

Command Added in firmware release 3.0

History

PARAMETER DESCRIPTION

unit Sets the threshold for the unit.

all Sets the threshold for all units.

1-99 The power threshold at which a trap is generated. The range is 1-99%.

no poe usagethreshold
This command sets the threshold to the default value.

PoE Timer Schedule

This command is used to attach a timer schedule (previously configured, as shown in sub-
section Time Range Commands for Time-Based ACLs) to a port. It is useful to allow ports to
automatically be configured to deliver power based on time intervals. For example, if a user
wants to allow ports to deliver power only on weekdays and not on weekends, a timer schedule
can be configured and attached to the port such that poe is disabled on the weekends
automatically.

912 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

poe timer schedule

Default Disabled

Format poe timer schedule <name>

Mode  Interface Configuration

Command Added in firmware release 3.0

History

no poe timer schedule

This command disable poe timer schedule in the given interface port.

Show PoE Commands

This command is used to display the global status of PoE controller. It displays all global options.
show poe

Default N/A

Format show poe

Mode  Global Config

 Interface Config

Command Added in firmware release 3.0

History

This command is used to see the configuration status for PoE in Global and Interface modes.

913 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show poe configuration

Default N/A

Format show poe configuration {unit | all}

Mode  Global Config

 Interface Config

Command Added in firmware release 3.0

History

This command is used to see the informational status for PoE in Global and Interface modes.
show poe info

Default N/A

Format show poe info {unit | all}

Mode  Global Config

 Interface Config

Command Added in firmware release 3.0

History

Section 11: DM1200E Log Messages

This chapter lists common log messages that are provided by DM1200E, along with information
regarding the cause of each message. There is no specific action that can be taken per
message. When there is a problem being diagnosed, a set of these messages in the event log,
along with an understanding of the system configuration and details of the problem will assist

914 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

DATACOM in determining the root cause of such a problem. The most recent log messages are
displayed first.

Note! This chapter is not a complete list of all syslog messages.

The Log Messages chapter includes the following sections:

 Core
 Utilities
 Management
 Switching
 QoS
 Stacking
 Technologies

Core
Table 13: BSP Log Messages

COMPONENT MESSAGE CAUSE

BSP Event(0xaaaaaaaa) Switch has restarted.

BSP Starting code... BSP initialization complete, starting DM1200E application.

Table 14: NIM Log Messages

COMPONENT MESSAGE CAUSE

NIM NIM: L7_ATTACH out of order for Interface creation out of order.
interface unit x slot x port x

NIM NIM: Failed to find interface at unit x There is no mapping between the USP and Interface

915 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 slot x port x for event(x) number.

NIM NIM: L7_DETACH out of order for Interface creation out of order.
interface unit x slot x port x

NIM NIM: L7_DELETE out of order for Interface creation out of order.
interface unit x slot x port x

NIM NIM: event(x),intf(x),component(x), in An event was issued to NIM during the wrong
wrong phase configuration phase (probably Phase 1, 2, or WMU).

NIM NIM: Failed to notify users of interface Event was not propagated to the system.
change

NIM NIM: failed to send message to NIM NIM message queue full or non-existent.
message Queue.

NIM NIM: Failed to notify the components of Interface not created.

L7_CREATE event

NIM NIM: Attempted event (x), on USP x.x.x A component issued an interface event during the
before phase 3 wrong initialization phase.

NIM NIM: incorrect phase for operation An API call was made during the wrong initialization
phase.

NIM NIM: Component(x) failed on event(x) A component responded with a fail indication for an
for interface interface event.

NIM NIM: Timeout event(x), interface A component did not respond before the NIM timeout
remainingMask = xxxx occurred.

Table 15: SIM Log Message

COMPONENT MESSAGE CAUSE

916 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SIM IP address conflict on service This message appears when an address conflict is
port/network port for IP address x.x.x.x. detected in the LAN for the service port/network
Conflicting host MAC address is port IP.
xx:xx:xx:xx:xx:xx

Table 16: System Log Messages

COMPONENT MESSAGE CAUSE

SYSTEM Configuration file DM1200E.cfg size is 0 The configuration file could not be read. This
(zero) bytes message may occur on a system for which no
configuration has ever been saved or for which
configuration has been erased.

SYSTEM could not separate The configuration file could not be read. This
SYSAPI_CONFIG_FILENAME message may occur on a system for which no
configuration has ever been saved or for which
configuration has been erased.

SYSTEM Building defaults for file file name Configuration did not exist or could not be read for
version version num the specified feature or file. Default configuration
values will be used. The file name and version are
indicated.

SYSTEM File filename: same version (version The configuration file which was loaded was of a
num) but the sizes (version size – different size than expected for the version number.
expected version size) differ This message indicates the configuration file
needed to be migrated to the version number
appropriate for the code image. This message may
appear after upgrading the code image to a more
current release.

SYSTEM Migrating config file filename fromThe configuration file identified was migrated from
version version num to version num a previous version number. Both the old and new
version number are specified. This message may
appear after upgrading the code image to a more
current release.

917 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SYSTEM Building Defaults Configuration did not exist or could not be read for
the specified feature. Default configuration values
will be used.

SYSTEM sysapiCfgFileGet failed size = expected Configuration did not exist or could not be read for
size of file version = expected the specified feature. This message is usually
version followed by a message indicating that default
configuration values will be used.

Utilities
Table 17: Trap Mgr Log Messages

COMPONENT MESSAGE CAUSE

Trap Mgr Link Up/Down: unit/slot/port An interface changed link state.

Table 18: DHCP Filtering Log Messages

COMPONENT MESSAGE CAUSE

DHCP Filtering Unable to create r/w lock for DHCP Filtering Unable to create semaphore used for dhcp
filtering configuration structure.

DHCP Filtering Failed to register with nv Store. Unable to register save and restore functions
for configuration save.

DHCP Filtering Failed to register with NIM Unable to register with NIM for interface
callback functions.

DHCP Filtering Error on call to sysapiCfgFileWrite file Error on trying to save configuration.

Table 19: NVStore Log Messages

918 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COMPONENT MESSAGE CAUSE

NVStore Building defaults for file XXX A component’s configuration file does not
exist or the file’s checksum is incorrect so the
component’s default configuration file is built.

NVStore Error on call to osapiFsWrite routine on file Either the file cannot be opened or the OS’s
XXX file I/O returned an error trying to write to the
file.

NVStore File XXX corrupted from file system. Checksum The calculated checksum of a component’s
mismatch. configuration file in the file system did not
match the checksum of the file in memory.

NVStore Migrating config file XXX from version Y to Z A configuration file version mismatch was
detected so a configuration file migration has
started.

Table 20: RADIUS Log Messages

COMPONENT MESSAGE CAUSE

RADIUS RADIUS: Invalid data length - xxx The RADIUS Client received an invalid
message from the server.

RADIUS RADIUS: Failed to send the request A problem communicating with the RADIUS
server.

RADIUS RADIUS: Failed to send all of the request A problem communicating with the RADIUS
server during transmit.

RADIUS RADIUS: Could not get the Task Sync Resource issue with RADIUS Client service.
semaphore!

RADIUS RADIUS: Buffer is too small for response RADIUS Client attempted to build a response

919 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 processing larger than resources allow.

RADIUS RADIUS: Could not allocate accounting Resource issue with RADIUS Client service.
requestInfo

RADIUS RADIUS: Could not allocate requestInfo Resource issue with RADIUS Client service.

RADIUS RADIUS: osapiSocketRecvFrom returned error Error while attempting to read data from the
RADIUS server.

RADIUS RADIUS: Accounting-Response failed to The RADIUS Client received an invalid

validate, id = xxx message from the server.

RADIUS RADIUS: User (xxx) needs to respond for An unexpected challenge was received for a
challenge configured user.

RADIUS RADIUS: Could not allocate a buffer for the Resource issue with RADIUS Client service.
packet

RADIUS RADIUS: Access-Challenge failed to validate, The RADIUS Client received an invalid
id = xxx message from the server.

RADIUS RADIUS: Failed to validate Message- The RADIUS Client received an invalid
Authenticator, id = xxx message from the server.

RADIUS RADIUS: Access-Accept failed to validate, The RADIUS Client received an invalid
id = xxx message from the server.

RADIUS RADIUS: Invalid packet length – xxx The RADIUS Client received an invalid
message from the server.

RADIUS RADIUS: Response is missing Message- The RADIUS Client received an invalid
Authenticator, id = xxx message from the server.

RADIUS RADIUS: Server address doesn't match RADIUS Client received a server response
configured server from an unconfigured server.

920 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Table 21: TACACS+ Log Messages

COMPONENT MESSAGE CAUSE

TACACS+ TACACS+: authentication error, no server to TACACS+ request needed, but no servers are
contact configured.

TACACS+ TACACS+: connection failed to server x.x.x.x TACACS+ request sent to server x.x.x.x but no
response was received.

TACACS+ TACACS+: no key configured to encrypt packet No key configured for the specified server.
for server x.x.x.x

TACACS+ TACACS+: received invalid packet type from Received packet type that is not supported.
server.

TACACS+ TACACS+: invalid major version in received Major version mismatch.

packet.

TACACS+ TACACS+: invalid minor version in received Minor version mismatch.

packet.

LLDP LOG MESSAGE

Component Message Cause

LLDP lldpTask(): invalid message type:xx. xxxxxx:xx Unsupported LLDP packet received.

Table 22: SNTP Log Message

COMPONENT MESSAGE CAUSE

921 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SNTP SNTP: system clock synchronized on %s UTC Indicates that SNTP has successfully
synchronized the time of the box with the
server.

Table 23: DHCPv6 Client Log Messages

COMPONENT MESSAGE CAUSE

DHCP6 Client ip6Map dhcp add failed. This message appears when the update of a
DHCP leased IP address to IP6Map fails.

DHCP6 Client osapiNetAddrV6Add failed on interface xxx. This message appears when the update of a
DHCP leased IP address to the kernel IP Stack
fails.

DHCP6 Client Failed to add DNS Server xxx to DNS Client. This message appears when the update of a
DNS6 Server address given by the DHCPv6
Server to the DNS6 Client fails.

DHCP6 Client Failed to add Domain name xxx to DNS Client. This message appears when the update of a
DNS6 Domain name info given by the DHCPv6
Server to the DNS6 Client fails.

Table 24: DHCPv4 Client Log Messages

COMPONENT MESSAGE CAUSE

DHCP4 Client Unsupported subOption (xxx) in Vendor This message appears when a message is
Specific Option in received DHCP pkt received from the DHCP Server that contains
an un-supported Vendor Option.

DHCP4 Client Failed to acquire an IP address on xxx; DHCP This message appears when the DHCP Client
Server did not respond. fails to lease an IP address from the DHCP
Server.

922 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

DHCP4 Client DNS name server entry add failed. This message appears when the update of a
DNS Domain name server info given by the
DHCP Server to the DNS Client fails.

DHCP4 Client DNS domain name list entry addition failed. This message appears when the update of a
DNS Domain name list info given by the DHCP
Server to the DNS Client fails.

DHCP4 Client Interface xxx Link State is Down. Connect the This message appears when the Network
port and try again. protocol is configured with DHCP without any
active links in the Management VLAN.

Management
Table 25: SNMP Log Message

COMPONENT MESSAGE CAUSE

SNMP EDB Callback: Unit Join: x. A new unit has joined the stack.

Table 26: EmWeb Log Messages

COMPONENT MESSAGE CAUSE

EmWeb EMWEB (Telnet): Max number of Telnet login A user attempted to connect via telnet when
sessions exceeded the maximum number of telnet sessions were
already active.

EmWeb EMWEB (SSH): Max number of SSH login A user attempted to connect via SSH when
sessions exceeded the maximum number of SSH sessions were
already active.

EmWeb Handle table overflow All the available EmWeb connection handles
are being used and the connection could not
be made.

923 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

EmWeb ConnectionType EmWeb socket accept() Socket accept failure for the specified
failed: errno connection type.

EmWeb ewsNetHTTPReceive failure in Socket receive failure.

NetReceiveLoop() - closing connection.

EmWeb EmWeb: connection allocation failed Memory allocation failure for the new
connection.

EmWeb EMWEB TransmitPending: EWOULDBLOCK Socket error on send.

error sending data

EmWeb ewaNetHTTPEnd: internal error - handle not in EmWeb handle index not valid.
Handle table

EmWeb ewsNetHTTPReceive:recvBufCnt exceeds The receive buffer limit has been reached. Bad
MAX_QUEUED_RECV_BUFS! request or DoS attack.

EmWeb EmWeb accept: XXXX Accept function for new SSH connection
failed. XXXX indicates the error info.

Table 27: CLI_UTIL Log Messages

COMPONENT MESSAGE CAUSE

CLI_UTIL Telnet Send Failed errno = 0x%x Failed to send text string to the telnet client.

CLI_UTIL osapiFsDir failed Failed to obtain the directory information from

a volume's directory.

Table 28: WEB Log Messages

COMPONENT MESSAGE CAUSE

924 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

WEB Max clients exceeded This message is shown when the maximum
allowed java client connections to the switch
is exceeded.

WEB Error on send to sockfd XXXX, closing Failed to send data to the java clients through
connection the socket.

WEB # (XXXX) Form Submission Failed. No Action The form submission failed and no action is
Taken. taken. XXXX indicates the file under
consideration.

WEB ewaFormServe_file_download() - WEB Unknown error returned while downloading

Unknown return code from tftp download file using TFTP from web interface.
result

WEB ewaFormServe_file_upload() - Unknown Unknown error returned while uploading file

return code from tftp upload result using TFTP from web interface.

WEB Web UI Screen with unspecified access Failed to get application-specific authorization
attempted to be brought up handle provided to EmWeb/Server by the
application in ewsAuthRegister(). The
specified web page will be served in read-only
mode.

Table 29: CLI_WEB_MGR Log Messages

COMPONENT MESSAGE CAUSE

CLI_WEB_MGR File size is greater than 2K The banner file size is greater than 2K bytes.

CLI_WEB_MGR No. of rows greater than allowed maximum of When the number of rows exceeds the
XXXX maximum allowed rows.

Table 30: SSHD Log Messages

925 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COMPONENT MESSAGE CAUSE

SSHD SSHD: Unable to create the global (data) Failed to create semaphore for global data
semaphore protection.

SSHD SSHD: Msg Queue is full, event = XXXX Failed to send the message to the SSHD
message queue as message queue is full.
XXXX indicates the event to be sent.

SSHD SSHD: Unknown UI event in message, Failed to dispatch the UI event to the
event = XXXX appropriate SSHD function as it’s an invalid
event. XXXX indicates the event to be
dispatched.

SSHD sshdApiCnfgrCommand: Failed calling Failed to send the message to the SSHD
sshdIssueCmd. message queue.

Table 31: SSLT Log Messages

COMPONENT MESSAGE CAUSE

SSLT SSLT: Exceeded maximum, Exceeded maximum allowed SSLT

ssltConnectionTask connections.

SSLT SSLT: Error creating Secure server socket6 Failed to create secure server socket for IPV6.

SSLT SSLT: Can't connect to unsecure server at Failed to open connection to unsecure server.
XXXX, result = YYYY, errno = ZZZZ XXXX is the unsecure server socket address.
YYYY is the result returned from connect
function and ZZZZ is the error code.

SSLT SSLT: Msg Queue is full, event = XXXX Failed to send the received message to the
SSLT message queue as message queue is
full. XXXX indicates the event to be sent.

926 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

SSLT SSLT: Unknown UI event in message, Failed to dispatch the received UI event to the
event = XXXX appropriate SSLT function as it’s an invalid
event. XXXX indicates the event to be
dispatched.

SSLT ssltApiCnfgrCommand: Failed calling Failed to send the message to the SSLT
ssltIssueCmd. message queue.

SSLT SSLT: Error loading certificate from file XXXX Failed while loading the SSLcertificate from
specified file. XXXX indicates the file from
where the certificate is being read.

SSLT SSLT: Error loading private key from file Failed while loading private key for SSL
connection.

SSLT SSLT: Error setting cipher list (no valid Failed while setting cipher list.
ciphers)

SSLT SSLT: Could not delete the SSL semaphores Failed to delete SSL semaphores during
cleanup.of all resources associated with the
OpenSSL Locking semaphores.

Table 32: User_Manager Log Messages

COMPONENT MESSAGE CAUSE

User_Manager User Login Failed for XXXX Failed to authenticate user login. XXXX
indicates the username to be authenticated.

User_Manager Access level for user XXXX could not be Invalid access level specified for the user. The
determined. Setting to READ_ONLY. access level is set to READ_ONLY. XXXX
indicates the username.

User_Manager Could not migrate config file XXXX from Failed to migrate the config file. XXXX is the
version YYYY to ZZZZ. Using defaults. config file name. YYYY is the old version
number and ZZZZ is the new version number.

927 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Switching
Table 33: Protected Ports Log Messages

COMPONENT MESSAGE CAUSE

Protected Ports Protected Port: failed to save configuration This appears when the protected port
configuration cannot be saved.

Protected Ports protectedPortCnfgrInitPhase1Process: Unable This appears when protectedPortCfgRWLock

to create r/w lock for protected Port Fails.

Protected Ports protectedPortCnfgrInitPhase2Process: Unable This appears when nimRegisterIntfChange

to register for VLAN change callback with VLAN fails.

Protected Ports Cannot add interface xxx to group yyy This appears when an interface could not be
added to a particular group.

Protected Ports unable to set protected port group This appears when a dtl call fails to add
interface mask at the driver level.

Protected Ports Cannot delete interface xxx from group yyy This appears when a dtl call to delete an
interface from a group fails.

Protected Ports Cannot update group YYY after deleting This message appears when an update group
interface XXX for a interface deletion fails.

Protected Ports Received an interface change callback while This appears when an interface change call
not ready to receive it back has come before the protected port
component is ready.

Table 34: IP Subnet VLANS Log Messages

COMPONENT MESSAGE CAUSE

928 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IP subnet VLANs ERROR vlanIpSubnetSubnetValid:Invalid This occurs when an invalid pair of subnet and
subnet netmask has come from the CLI.

IP subnet VLANs IP Subnet Vlans: failed to save configuration This message appears when save
configuration of subnet vlans failed.

IP subnet VLANs vlanIpSubnetCnfgrInitPhase1Process: Unable This appears when a read/write lock creations
to create r/w lock for vlanIpSubnet fails.

IP subnet VLANs vlanIpSubnetCnfgrInitPhase2Process: Unable This appears when this component unable to
to register for VLAN change callback register for vlan change notifications.

IP subnet VLANs vlanIpSubnetCnfgrFiniPhase1Process: could This appears when a semaphore deletion of

not delete avl semaphore this component fails.

IP subnet VLANs vlanIpSubnetDtlVlanCreate: Failed This appears when a dtl call fails to add an
entry into the table.

IP subnet VLANs vlanIpSubnetSubnetDeleteApply: Failed This appears when a dtl fails to delete an
entry from the table.

IP subnet VLANs vlanIpSubnetVlanChangeCallback: Failed to This appears when a dtl fails to add an entry
add an Entry for a vlan add notify event.

IP subnet VLANs vlanIpSubnetVlanChangeCallback: Failed to This appears when a dtl fails to delete an
delete an Entry entry for an vlan delete notify event.

Table 35: Mac-based VLANs Log Messages

COMPONENT MESSAGE CAUSE

MAC based VLANs MAC VLANs: Failed to save configuration This message appears when save
configuration of Mac vlans failed.

929 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

MAC based VLANs vlanMacCnfgrInitPhase1Process: Unable to This appears when a read/write lock creations
create r/w lock for vlanMac fails.

MAC based VLANs Unable to register for VLAN change callback This appears when this component unable to
register for vlan change notifications.

MAC based VLANs vlanMacCnfgrFiniPhase1Process: could not This appears when a semaphore deletion of
delete avl semaphore this component fails.

MAC based VLANs vlanMacAddApply: Failed to add an entry This appears when a dtl call fails to add an
entry into the table.

MAC based VLANs vlanMacDeleteApply: Unable to delete an This appears when a dtl fails to delete an
Entry entry from the table.

MAC based VLANs vlanMacVlanChangeCallback: Failed to add an This appears when a dtl fails to add an entry
entry for a vlan add notify event.

MAC based VLANs vlanMacVlanChangeCallback: Failed to delete This appears when a dtl fails to delete an
an entry entry for an vlan delete notify event.

Table 36: 802.1X Log Messages

COMPONENT MESSAGE CAUSE

802.1X function: Failed calling dot1xIssueCmd 802.1X message queue is full.

802.1X function: EAP message not received from RADIUS server did not send required EAP
server message.

802.1X function: Out of System buffers 802.1X cannot process/transmit message due
to lack of internal buffers.

802.1X function: could not set state to DTL call failed setting authorization state of

930 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 authorized/unauthorized, intf xxx the port.

802.1X dot1xApplyConfigData: Unable to DTL call failed enabling/disabling 802.1X.

enable/disable dot1x in driver

802.1X dot1xSendRespToServer: Failed sending message to RADIUS server.

dot1xRadiusAccessRequestSend failed

802.1X dot1xRadiusAcceptProcess: error calling Failed sending accounting start to RADIUS

radiusAccountingStart, ifIndex = xxx server.

802.1X function: failed sending terminate cause, intf Failed sending accounting stop to RADIUS
xxx server.

Table 37: IGMP Snooping Log Messages

COMPONENT MESSAGE CAUSE

IGMP Snooping function: osapiMessageSend failed IGMP Snooping message queue is full.

IGMP Snooping Failed to set global igmp snooping mode to Failed to set global IGMP Snooping mode due
xxx to message queue being full.

IGMP Snooping Failed to set igmp snooping mode xxx for Failed to set interface IGMP Snooping mode
interface yyy due to message queue being full.

IGMP Snooping Failed to set igmp mrouter mode xxx for Failed to set interface multicast router mode
interface yyy due to IGMP Snooping message queue being
full.

IGMP Snooping Failed to set igmp snooping mode xxx for vlan Failed to set VLAN IGM Snooping mode due to
yyy message queue being full.

IGMP Snooping Failed to set igmp mrouter mode%d for Failed to set VLAN multicast router mode due
interface xxx on Vlan yyy to IGMP Snooping message queue being full.

931 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

IGMP Snooping snoopCnfgrInitPhase1Process: Error allocating Could not allocate buffers for small IGMP
small buffers packets.

IGMP Snooping snoopCnfgrInitPhase1Process: Error allocating Could not allocate buffers for large IGMP
large buffers packets.

Table 38: GARP/GVRP/GMRP Log Messages

COMPONENT MESSAGE CAUSE

GARP/GVRP/ garpSpanState, garpIfStateChange, The garpQueue is full, logs specifics of the

GarpIssueCmd, garpDot1sChangeCallBack, message content like internal interface
GMRP garpApiCnfgrCommand, number, type of message, etc.
garpLeaveAllTimerCallback,
garpTimerCallback: QUEUE SEND FAILURE:

GARP/GVRP/ GarpSendPDU: QUEUE SEND FAILURE The garpPduQueue is full, logs specific of the
GPDU, internal interface number, vlan id,
GMRP buffer handle, etc.

GARP/GVRP/ garpMapIntfIsConfigurable, A default configuration does not exist for this

gmrpMapIntfIsConfigurable: Error accessing interface. Typically a case when a new
GMRP GARP/GMRP config data for interface %d in interface is created and has no
garpMapIntfIsConfigurable. preconfiguration.

GARP/GVRP/ garpTraceMsgQueueUsage: garpQueue usage Traces the build up of message queue. Helpful
has exceeded fifty/eighty/ninety percent in determining the load on GARP.
GMRP

GARP/GVRP/ gid_destroy_port: Error Removing port %d Mismatch between the gmd (gmrp database)
registration for vlan-mac %d - and MFDB.
GMRP %02X:%02X:%02X:%02X:%02X:%02X

GARP/GVRP/ gmd_create_entry: GMRP failure adding MFDB MFDB table is full.

entry: vlan %d and address %s
GMRP

932 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Table 39: 802.3ad Log Messages

COMPONENT MESSAGE CAUSE

802.3ad dot3adReceiveMachine: received default Received a LAG PDU and the RX state
event %x machine is ignoring this LAGPDU.

802.3ad dot3adNimEventCompletionCallback, The event sent to NIM was not completed

dot3adNimEventCreateCompletionCallback: successfully.
DOT3AD: notification failed for event(%d),
intf(%d), reason(%d)

Table 40: FDB Log Message

COMPONENT MESSAGE CAUSE

FDB fdbSetAddressAgingTimeOut: Failure setting Unable to set the age time in the hardware.
fid %d address aging timeout to %d

Table 41: MFDB Log Message

COMPONENT MESSAGE CAUSE

MFDB mfdbTreeEntryUpdate: entry does not exist Trying to update a non existing entry.

Table 42: 802.1Q Log Messages

COMPONENT MESSAGE CAUSE

802.1Q dot1qIssueCmd: Unable to send message %d to dot1qMsgQueue is full.

dot1qMsgQueue for vlan %d - %d msgs in
queue

933 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

802.1Q dot1qVlanCreateProcess: Attempt to create a This accommodates for reserved vlan ids. i.e.
vlan with an invalid vlan id %d ; 4094 - x.

VLAN %d not in range,

802.1Q dot1qMapIntfIsConfigurable: Error accessing A default configuration does not exist for this
DOT1Q config data for interface %d in interface. Typically a case when a new
dot1qMapIntfIsConfigurable. interface is created and has no
preconfiguration.

802.1Q dot1qVlanDeleteProcess: Deleting the default Typically encountered during clear Vlan and
VLAN clear config.

802.1Q dot1qVlanMemberSetModify, If this vlan is a learnt via GVRP then we

dot1qVlanTaggedMemberSetModify: Dynamic cannot modify its member set via
entry %d can only be modified after it is management.
converted to static

802.1Q dtl failure when adding ports to vlan id %d - Failed to add the ports to VLAN entry in
portMask = %s hardware.

802.1Q dtl failure when deleting ports from vlan id %d - Failed to delete the ports for a VLAN entry
portMask = %s from the hardware.

802.1Q dtl failure when adding ports to tagged list for Failed to add the port to the tagged list in
vlan id %d - portMask = %s hardware.

802.1Q dtl failure when deleting ports from tagged list Failed to delete the port to the tagged list
for vlan id %d - portMask = %s" from the hardware.

802.1Q dot1qTask: unsuccessful return code on receive Failed to receive the dot1q message from
from dot1qMsgQueue: %08x" dot1q message queue.

802.1Q Unable to apply VLAN creation request for VLAN Failed to create VLAN ID, VLAN Database
ID %d, Database reached MAX VLAN count! reached maximum values.

802.1Q Attempt to create a vlan (%d) that already Creation of the existing Dynamic VLAN ID
exists from the CLI.

934 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

802.1Q DTL call to create VLAN %d failed with rc %d" Failed to create VLAN ID in hardware.

802.1Q Problem unrolling data for VLAN %d Failed to delete VLAN from the VLAN
database after failure of VLAN hardware
creation.

802.1Q VLan %d does not exist Failed to delete VLAN entry.

802.1Q VLan %d requestor type %d does not exist Failed to delete dynamic VLAN ID if the given
requestor is not valid.

802.1Q Can not delete the VLAN, Some unknown Failed to delete, as some unknown
component has taken the ownership! component has taken the ownership.

802.1Q Not valid permission to delete the VLAN %d Failed to delete the VLAN ID as the given
requestor %d requestor and VLAN entry status are not
same.

802.1Q VLAN Delete Call failed in driver for vlan %d Failed to delete VLAN ID from the hardware.

802.1Q Problem deleting data for VLAN %d Failed to delete VLAN ID from the VLAN
database.

802.1Q Dynamic entry %d can only be modified after it Failed to modify the VLAN group filter
is converted to static

802.1Q Cannot find vlan %d to convert it to static Failed to convert Dynamic VLAN to static
VLAN. VLAN ID not exists.

802.1Q Only Dynamically created VLANs can be Error while trying to convert the static
converted created VLAN ID to static.

802.1Q Cannot modify tagging of interface %s to non Error for a given interface sets the tagging
existence vlan %d" property for all the VLANs in the vlan mask.

802.1Q Error in updating data for VLAN %d in VLAN Failed to add VLAN entry into VLAN

935 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 database database.

802.1Q DTL call to create VLAN %d failed with rc %d Failed to add VLAN entry in hardware.

802.1Q Not valid permission to delete the VLAN %d Failed to delete static VLAN ID. Invalid
requestor.

802.1Q Attempt to set access vlan with an invalid vlan Invalid VLAN ID.
id %d

802.1Q Attempt to set access vlan with (%d) that does VLAN ID not exists.
not exist

802.1Q VLAN create currently underway for VLAN Creating a VLAN which is already under
ID %d process of creation.

802.1Q VLAN ID %d is already exists as static VLAN Trying to create already existing static VLAN
ID.

802.1Q Cannot put a message on dot1q msg Queue, Failed to send Dot1q message on Dot1q
Returns:%d message Queue.

802.1Q Invalid dot1q Interface: %s Failed to add VLAN to a member of port.

802.1Q Cannot set membership for user interface %s Failed to add VLAN to a member of port.
on management vlan %d

802.1Q Incorrect tagmode for vlan tagging. Incorrect tagmode for VLAN tagging.
tagmode: %d Interface: %s

802.1Q Cannot set tagging for interface %d on non The VLAN ID does not exist.
existent VLAN %d"

802.1Q Cannot set tagging for interface %d which is Failure in Setting the tagging configuration
not a member of VLAN %d for a interface on a range of VLAN.

936 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

802.1Q VLAN create currently underway for VLAN Trying to create the VLAN ID which is
ID %d" already under process of creation.

802.1Q VLAN ID %d already exists Trying to create the VLAN ID which is

already exists.

802.1Q Failed to delete, Default VLAN %d cannot be Trying to delete Default VLAN ID.
deleted

802.1Q Failed to delete, VLAN ID %d is not a static Trying to delete Dynamic VLAN ID from CLI.
VLAN

802.1Q Requestor %d attempted to release internal -

VLAN %d: owned by %d

Table 43: 802.1S Log Messages

COMPONENT MESSAGE CAUSE

802.1S dot1sIssueCmd: Dot1s Msg Queue is The message Queue is full.

full!!!!Event: %u, on interface: %u, for
instance: %u

802.1S dot1sStateMachineRxBpdu(): Rcvd BPDU The current conditions, like port is not enabled
Discarded or we are currently not finished processing
another BPDU on the same interface, does not
allow us to process this BPDU.

802.1S dot1sBpduTransmit(): could not get a buffer Out of system buffers.

Table 44: Port Mac Locking Log Message

COMPONENT MESSAGE CAUSE

937 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Port Mac Locking pmlMapIntfIsConfigurable: Error accessing A default configuration does not exist for this
PML config data for interface %d in interface. Typically a case when a new
pmlMapIntfIsConfigurable. interface is created and has no
preconfiguration.

QoS
Table 45: ACL Log Messages

COMPONENT MESSAGE CAUSE

ACL Total number of ACL rules (x) exceeds max The combination of all ACLs applied to an
(y) on intf i. interface has resulted in requiring more rules
than the platform supports.

ACL ACL name, rule x: This rule is not being The ACL configuration has resulted in a
logged requirement for more logging rules than the
platform supports. The specified rule is
functioning normally except for the logging
action.

ACL aclLogTask: error logging ACL rule trap for The system was unable to send an SNMP trap
correlator number for this ACL rule which contains a logging
attribute.

ACL IP ACL number: Forced truncation of one or While processing the saved configuration, the
more rules during config migration system encountered an ACL with more rules
than is supported by the current version. This
may happen when code is updated to a
version supporting fewer rules per ACL than
the previous version.

Table 46: CoS Log Message

COMPONENT MESSAGE CAUSE

938 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

COS cosCnfgrInitPhase3Process: Unable to apply The COS component was unable to apply the
saved config -- using factory defaults saved configuration and has initialized to the
factory default settings.

Stacking
Table 47: EDB Log Message

COMPONENT MESSAGE CAUSE

EDB EDB Callback: Unit Join: num. Unit num has joined the stack.

Technologies
Table 48: Error Messages

COMPONENT MESSAGE CAUSE

Switch Core Invalid USP unit = x, slot = x, port = x A port was not able to be translated correctly
during the receive.

Switch Core In hapiBroadSystemMacAddress call to Failed to add an L2 address to the MAC table.
'bcm_l2_addr_add' - FAILED : x This should only happen when a hash collision
occurs or the table is full.

Switch Core Failed installing mirror action - rest of the A previously configured probe port is not
policy applied successfully being used in the policy. The release notes
state that only a single probe port can be
configured.

Switch Core Policy x does not contain rule x The rule was not added to the policy due to a
discrepancy in the rule count for this specific
policy. Additionally, the message can be
displayed when an old rule is being modified,
but the old rule is not in the policy.

939 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Switch Core ERROR: policy x, tmpPolicy x, size x, data x x An issue installing the policy due to a possible
xxxxxx duplicate hash.

Switch Core ACL x not found in internal table Attempting to delete a non-existent ACL.

Switch Core ACL internal table overflow Attempting to add an ACL to a full table.

Switch Core In hapiBroadQosCosQueueConfig, Failed to Attempting to configure the bandwidth

configure minimum bandwidth. Available beyond it’s capabilities.
bandwidth x

Switch Core USL: failed to put sync response on queue A response to a sync request was not
enqueued. This could indicate that a previous
sync request was received after it was timed
out.

Switch Core USL: failed to sync ipmc table on unit = x Either the transport failed or the message was
dropped.

Switch Core usl_task_ipmc_msg_send(): failed to send Either the transport failed or the message was
with x dropped.

Switch Core USL: No available entries in the STG table The Spanning Tree Group table is full in USL.

Switch Core USL: failed to sync stg table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: A Trunk doesn't exist in USL Attempting to modify a Trunk that doesn’t
exist.

Switch Core USL: A Trunk being created by bcmx already Possible synchronization issue between the
existed in USL application, hardware, and sync layer.

Switch Core USL: A Trunk being destroyed doesn't exist in Possible synchronization issue between the
USL application, hardware, and sync layer.

940 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Switch Core USL: A Trunk being set doesn't exist in USL Possible synchronization issue between the
application, hardware, and sync layer.

Switch Core USL: failed to sync trunk table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: Mcast entry not found on a join Possible synchronization issue between the
application, hardware, and sync layer.

Switch Core USL: Mcast entry not found on a leave Possible synchronization issue between the
application, hardware, and sync layer.

Switch Core USL: failed to sync dVLAN data on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync policy table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync VLAN table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core Invalid LAG id x Possible synchronization issue between the

BCM driver and HAPI.

Switch Core Invalid uport calculated from the BCM uport Uport not valid from BCM driver.
bcmx_l2_addr->lport = x

Switch Core Invalid USP calculated from the BCM USP not able to be calculated from the learn
uport\nbcmx_l2_addr->lport = x event for BCM driver.

Switch Core Unable to insert route R/P Route R with prefix P could not be inserted in
the hardware route table. A retry will be
issued.

941 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Switch Core Unable to Insert host H Host H could not be inserted in hardware host
table. A retry will be issued.

Switch Core USL: failed to sync L3 Intf table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync L3 Host table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync L3 Route table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync initiator table on unit = x Could not synchronize unit x due to a
transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync terminator table on Could not synchronize unit x due to a
unit = x transport failure or API issue on remote unit.
A synchronization retry will be issued.

Switch Core USL: failed to sync ip-multicast table on Could not synchronize unit x due to a
unit = x transport failure or API issue on remote unit.
A synchronization retry will be issued.

942 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

 Command Index
bootfile .................................................................... 349
bootpdhcprelay cidoptmode ........................... 779
A bootpdhcprelay maxhopcount......................... 780
bootpdhcprelay minwaittime ............................ 781
aaa accounting.................................................... 154
bridge aging-time ................................................. 705
aaa authentication dot1x default..................... 519
aaa authentication enable ................................ 119
aaa authentication login .................................... 117 C
aaa ias-user username ........................................ 152
aaa session-id ........................................................ 153 cablestatus ............................................................ 387
absolute .................................................................. 899 capture file size ..................................................... 381
access-list ............................................................... 878 capture file|remote|line .................................... 379
accounting ............................................................ 160 capture line wrap ................................................. 381
acl-trapflags........................................................... 892 capture remote port ............................................ 380
arp ........................................................................... 709 capture start .......................................................... 378
arp cachesize ........................................................ 710 capture stop .......................................................... 379
arp dynamicrenew ............................................... 711 class ......................................................................... 848
arp purge ............................................................... 712 class-map ............................................................... 831
arp resptime ........................................................... 713 class-map rename ................................................ 833
arp retries................................................................ 714 classofservice dot1p-mapping........................... 819
arp timeout ............................................................ 714 classofservice ip-dscp-mapping ........................ 820
assign-queue ......................................................... 845 classofservice trust ................................................ 821
authorization network radius .............................. 520 clear aaa ias-users................................................ 159
auto-negotiate ...................................................... 426 clear accounting statistics .................................. 163
auto-negotiate all ................................................. 427 clear arp-cache.................................................... 715
auto-voip ................................................................ 903 clear arp-switch .................................................... 716
auto-voip oui ......................................................... 904 clear counters ....................................................... 310
auto-voip oui-based priority ............................... 905 clear dot1x authentication-history .................... 521
auto-voip protocol-based................................... 906 clear dot1x statistics ............................................. 521
auto-voip vlan ....................................................... 907 clear host ................................................................ 373
clear igmpsnooping ............................................. 311
clear ip address-conflict-detect ........................ 377
B clear ip dhcp binding .......................................... 358
clear ip dhcp conflict .......................................... 359
boot auto-copy-sw ................................................. 75
clear ip dhcp server statistics.............................. 359
boot auto-copy-sw allow-downgrade ............... 76
clear ip dhcp snooping binding ........................ 628
boot auto-copy-sw trap ........................................ 75
clear ip dhcp snooping statistics ....................... 629
boot autoinstall ..................................................... 229
clear ip helper statistics........................................ 785
boot host autoreboot .......................................... 232
clear ip prefix-list.................................................... 768
boot host autosave .............................................. 231
clear ip route counters ........................................ 744
boot host dhcp ..................................................... 230
clear ipv6 dhcp snooping binding .................... 818
boot host retrycount............................................. 229
clear ipv6 dhcp snooping statistics ................... 818
boot system............................................................ 237
clear lldp remote-data ........................................ 666

943 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

clear lldp statistics ................................................. 666 dos-control icmpfrag ........................................... 702
clear logging buffered......................................... 294 dos-control icmpv4 ............................................... 700
clear logging email statistics............................... 303 dos-control icmpv6 ............................................... 701
clear network ipv6 dhcp statistics ..................... 808 dos-control l4port .................................................. 692
clear pass ............................................................... 311 dos-control sipdip ................................................. 689
clear port-channel all counters.......................... 600 dos-control smacdmac ....................................... 693
clear port-channel counters ............................... 600 dos-control tcpfinurgpsh ..................................... 699
clear radius statistics ............................................. 522 dos-control tcpflag ............................................... 691
clear traplog .......................................................... 311 dos-control tcpflagseq ........................................ 696
clear vlan................................................................ 312 dos-control tcpfrag .............................................. 690
client-identifier ....................................................... 342 dos-control tcpoffset ............................................ 697
client-name............................................................ 343 dos-control tcpport .............................................. 694
clock set ................................................................. 335 dos-control tcpsyn ................................................ 698
clock summer-time date ..................................... 335 dos-control tcpsynfin ............................................ 699
clock summer-time recurring .............................. 336 dos-control udpport ............................................. 695
clock timezone ...................................................... 338 dot1x dynamic-vlan enable ............................... 523
configure .................................................................. 85 dot1x eapolflood .................................................. 522
conform-color........................................................ 847 dot1x guest-vlan ................................................... 524
copy ........................................................................ 317 dot1x initialize ........................................................ 524
copy (pre-login banner) ...................................... 224 dot1x mac-auth-bypass ...................................... 527
cos-queue min-bandwidth ................................. 822 dot1x max-req ....................................................... 525
cos-queue strict..................................................... 823 dot1x pae ............................................................... 545
crypto certificate generate .................................. 98 dot1x port-control ................................................. 526
crypto key generate dsa....................................... 99 dot1x port-control all ............................................ 527
crypto key generate rsa ........................................ 99 dot1x re-authenticate .......................................... 528
dot1x re-authentication....................................... 529
dot1x supplicant max-start.................................. 547
D dot1x supplicant port-control ............................. 546
dot1x supplicant timeout auth-period .............. 549
default-router......................................................... 344 dot1x supplicant timeout held-period .............. 549
delete ...................................................................... 236 dot1x supplicant timeout start-period............... 548
deleteport (Global Config) ................................. 567 dot1x supplicant user ........................................... 550
deleteport (Interface Config) ............................. 566 dot1x system-auth-control .................................. 530
deny | permit (IP ACL) ........................................ 885 dot1x system-auth-control monitor .................... 530
deny | permit (MAC ACL) .................................. 870 dot1x timeout ........................................................ 531
description ............................................................. 428 dot1x unauthenticated-vlan .............................. 533
dhcp client vendor-id-option ............................. 613 dot1x user ............................................................... 534
dhcp client vendor-id-option-string .................. 614 drop ......................................................................... 845
diffserv ..................................................................... 830
disconnect ............................................................. 115
dns-server ............................................................... 345 E
do (Privileged EXEC commands) ......................... 79
domain-name ....................................................... 350 enable (Privileged EXEC access) ......................... 79
dos-control all ........................................................ 688 enable authentication......................................... 122
dos-control firstfrag ............................................... 690 enable password (Privileged EXEC) .................. 138

944 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

encapsulation ....................................................... 731 ip domain list .......................................................... 367
environment trap temperature .......................... 277 ip domain lookup.................................................. 365
erase startup-config ............................................. 233 ip domain name ................................................... 366
ip domain retry ...................................................... 372
ip domain timeout ................................................ 372
F ip helper enable.................................................... 790
ip helper-address (Global Config) ..................... 786
file verify .................................................................. 322 ip helper-address (Interface Config)................. 788
filedescr .................................................................. 238 ip host ...................................................................... 370
flowcontrol {symmetric|asymmetric} ............... 504 ip http accounting exec, ip https accounting
exec ........................................................................ 101
ip http authentication .......................................... 102
H
ip http java ............................................................. 106
ip http secure-port ................................................ 112
hardware-address ................................................ 345
ip http secure-protocol ........................................ 113
host .......................................................................... 346
ip http secure-server ............................................. 105
hostname ............................................................... 225
ip http secure-session hard-timeout .................. 110
ip http secure-session maxsessions .................... 110
I ip http secure-session soft-timeout .................... 111
ip http server .......................................................... 105
interface ................................................................. 425 ip http session hard-timeout ................................ 107
interface lag .......................................................... 582 ip http session maxsessions .................................. 108
interface vlan ........................................................ 778 ip http session soft-timeout .................................. 109
ip access-group .................................................... 890 ip https authentication ........................................ 103
ip access-list ........................................................... 883 ip icmp echo-reply ............................................... 796
ip access-list rename............................................ 884 ip icmp error-interval ............................................ 797
ip address ............................................................... 721 ip irdp ...................................................................... 769
ip address dhcp .................................................... 723 ip irdp address ....................................................... 769
ip address-conflict-detect run ............................ 376 ip irdp holdtime ..................................................... 770
ip default-gateway .............................................. 724 ip irdp maxadvertinterval .................................... 771
ip dhcp bootp automatic ................................... 357 ip irdp minadvertinterval ..................................... 772
ip dhcp conflict logging ...................................... 357 ip irdp multicast ..................................................... 773
ip dhcp excluded-address.................................. 354 ip irdp preference ................................................. 773
ip dhcp filtering trust ............................................. 620 ip mtu ...................................................................... 730
ip dhcp ping packets........................................... 355 ip name server ....................................................... 368
ip dhcp pool .......................................................... 341 ip name source-interface ................................... 369
ip dhcp snooping.................................................. 616 ip netdirbcast ........................................................ 729
ip dhcp snooping binding ................................... 619 ip prefix-list .............................................................. 747
ip dhcp snooping database............................... 618 ip prefix-list description ......................................... 750
ip dhcp snooping database write-delay ......... 618 ip redirects.............................................................. 795
ip dhcp snooping limit ......................................... 621 ip route.................................................................... 726
ip dhcp snooping log-invalid .............................. 622 ip route default...................................................... 728
ip dhcp snooping trust ......................................... 622 ip route distance ................................................... 728
ip dhcp snooping verify mac-address .............. 617 ip routing ................................................................ 721
ip dhcp snooping vlan ......................................... 616 ip ssh .......................................................................... 93

945 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

ip ssh protocol ......................................................... 94 l ldp med transmit-tlv ............................................ 678
ip ssh server enable ................................................ 94 l ldp med transmit-tlv all....................................... 680
ip telnet server enable ........................................... 89 l ldp notification .................................................... 664
ip unreachables .................................................... 795 l ldp notification-interval ...................................... 665
ipv6 dhcp snooping ............................................. 808 l ldp receive ........................................................... 661
ipv6 dhcp snooping binding............................... 811 l ldp timers .............................................................. 662
ipv6 dhcp snooping limit ..................................... 813 l ldp transmit........................................................... 660
ipv6 dhcp snooping log-invalid.......................... 812 l ldp transmit-mgmt............................................... 664
ipv6 dhcp snooping trust ..................................... 812 l ldp transmit-tlv ..................................................... 663
ipv6 dhcp snooping verify mac-address .......... 810 l ogging buffered .................................................. 280
ipv6 dhcp snooping vlan ..................................... 809 l ogging buffered wrap ....................................... 280
ipv6 host.................................................................. 371 l ogging cli-command ......................................... 281
l ogging console ................................................... 282
l ogging email ........................................................ 294
K l ogging email from-addr .................................... 297
l ogging email logtime ......................................... 298
key ........................................................................... 217 l ogging email message-type subject .............. 298
keystring .................................................................. 217 l ogging email message-type to-addr .............. 296
l ogging email test message-type ..................... 300
l ogging email urgent ........................................... 295
L
l ogging host .......................................................... 283
l ogging host reconfigure .................................... 284
l acp actor admin key ......................................... 569
l ogging host remove ........................................... 284
l acp actor admin state....................................... 573
l ogging persistent................................................. 383
l acp actor admin state individual .................... 570
l ogging port .......................................................... 285
l acp actor admin state longtimeout................ 571
l ogging syslog ....................................................... 285
l acp actor admin state passive ........................ 572
l ogging syslog port............................................... 286
l acp actor port priority ........................................ 574
l ogging syslog source-interface ........................ 287
l acp admin key .................................................... 567
l ogging traps ......................................................... 299
l acp collector max-delay................................... 568
l ogin authentication ............................................ 134
l acp partner admin key ...................................... 575
l ogout ..................................................................... 312
l acp partner admin state individual ................. 576
l acp partner admin state longtimeout ............ 577
l acp partner admin state passive ..................... 578 M
l acp partner port id ............................................. 578
l acp partner port priority .................................... 579 mac access-group ............................................... 873
l acp partner system priority................................ 581 mac access-list extended ................................... 869
l acp partner system-id ........................................ 580 mac access-list extended rename ................... 870
l ease ....................................................................... 347 macfilter.................................................................. 606
l ength value .......................................................... 274 macfilter adddest ................................................. 607
l ine ............................................................................ 85 macfilter adddest all ............................................ 608
l ldp med ................................................................ 676 macfilter addsrc .................................................... 609
l ldp med all ........................................................... 679 macfilter addsrc all ............................................... 610
l ldp med confignotification ............................... 677 mail-server .............................................................. 303
l ldp med confignotification all .......................... 679 mark cos ................................................................. 849
l ldp med faststartrepeatcount .......................... 680

946 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

mark cos-as-sec-cos............................................. 849 network parms ......................................................... 80
mark ip-dscp .......................................................... 850 network protocol .................................................... 80
mark ip-precedence ............................................ 851 network protocol dhcp.......................................... 81
match any.............................................................. 834 next-server .............................................................. 352
match class-map .................................................. 834 no flowcontrol {symmetric|asymmetric} .......... 505
match cos .............................................................. 836 no switchport access vlan................................... 489
match destination-address mac ....................... 836 no switchport mode ............................................. 486
match dstip ............................................................ 837 no switchport trunk allowed vlan ....................... 488
match dstl4port ..................................................... 837 no switchport trunk native vlan .......................... 488
match ethertype................................................... 833
match ip address .................................................. 752
match ip address <access-list-number | access- O
list-name> ............................................................... 753
match ip dscp ....................................................... 838 option ...................................................................... 353
match ip precedence ......................................... 839
match ip tos ........................................................... 839
P
match length ......................................................... 757
match mac-list ...................................................... 758
password ................................................................ 305
match protocol ..................................................... 840
password (aaa IAS User Config) ........................ 137
match secondary-cos.......................................... 836
password (AAA IAS User Configuration) ........... 157
match source-address mac ............................... 841
password (Line Configuration) ........................... 135
match srcip ............................................................ 842
password (User EXEC)........................................... 137
match srcip6 .......................................................... 842
passwords aging ................................................... 141
match srcl4port ..................................................... 842
passwords history .................................................. 140
match vlan .....................................................843, 844
passwords lock-out ............................................... 142
mbuf ........................................................................ 384
passwords min-length .......................................... 140
member .................................................................... 58
passwords strength exclude-keyword .............. 149
memory free low-watermark processor............ 276
passwords strength maximum consecutive-
mirror ....................................................................... 846
characters .............................................................. 144
monitor session ...................................................... 601
passwords strength maximum repeated-
movemanagement ................................................ 61
characters .............................................................. 144
mtu .......................................................................... 428
passwords strength minimum character-classes
.................................................................................. 149
N passwords strength minimum lowercase-letters
.................................................................................. 146
netbios-name-server ............................................ 350 passwords strength minimum numeric-characters
netbios-node-type ................................................ 351 .................................................................................. 147
network (DHCP Pool Config) .............................. 348 passwords strength minimum special-characters
network ipv6 address ........................................... 800 .................................................................................. 148
network ipv6 enable ............................................ 799 passwords strength minimum uppercase-letters
network ipv6 gateway ......................................... 801 .................................................................................. 145
network ipv6 neighbor ......................................... 802 passwords strength-check .................................. 143
network javamode ................................................. 82 periodic .................................................................. 900
network mgmt_vlan.............................................. 472 ping ......................................................................... 313
ping ipv6 ................................................................. 805

947 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

poe detection 4ptdot3af .................................... 911
Q
poe detection 4ptdot3af+legacy ..................... 912
poe detection legacy ......................................... 913
quit........................................................................... 316
poe high-power .................................................... 917
poe power limit ..................................................... 914
poe power limit dot3af ........................................ 913 R
poe power limit user-defined ............................. 914
poe power management ................................... 915 radius accounting mode .................................... 190
poe priority ............................................................. 916 radius server attribute 4 ....................................... 191
poe reset ................................................................ 918 radius server host................................................... 192
poe reset auto ....................................................... 918 radius server key .................................................... 195
poe reset auto all.................................................. 918 radius server msgauth .......................................... 196
poe timer schedule .............................................. 921 radius server primary ............................................ 197
poe traps ................................................................ 919 radius server retransmit ........................................ 198
poe usagethreshold ............................................. 920 radius server timeout ............................................ 200
police-simple ......................................................... 851 radius source-interface ........................................ 199
police-single-rate .................................................. 852 redirect ................................................................... 846
police-two-rate ..................................................... 853 release dhcp ......................................................... 725
policy-map ............................................................. 854 reload...................................................................... 316
policy-map rename ............................................. 855 reload (Stack) .......................................................... 66
port ..................................................................218, 304 renew dhcp ........................................................... 726
port lacpmode ...................................................... 584 renew dhcp network-port ................................... 726
port lacpmode enable all ................................... 584 renew dhcp XE "renew dhcp\ ........................... 726
port lacptimeout (Global Config) ..................... 586 rmon alarm............................................................. 389
port lacptimeout (Interface Config) ................. 585 rmon collection history ......................................... 395
port-channel .......................................................... 565 rmon event............................................................. 394
port-channel adminmode .................................. 587 rmon hcalarm ........................................................ 391
port-channel linktrap............................................ 588 route-map .............................................................. 751
port-channel load-balance................................ 589 routing ..................................................................... 720
port-channel local-preference .......................... 591
port-channel min-links .......................................... 592
port-channel name .............................................. 592 S
port-channel static ............................................... 583
port-channel system priority................................ 593 script apply ............................................................ 221
port-security ........................................................... 651 script delete ........................................................... 222
port-security mac-address .................................. 654 script list................................................................... 222
port-security mac-address move ....................... 654 script show.............................................................. 223
port-security mac-address sticky ....................... 655 script validate ........................................................ 223
port-security max-dynamic ................................. 652 security .................................................................... 304
port-security max-static ....................................... 653 serial baudrate ........................................................ 86
priority (TACACS Config) ..................................... 218 serial timeout ........................................................... 87
private-vlan ............................................................ 498 service dhcp .......................................................... 356
process cpu threshold.......................................... 264 service-policy......................................................... 856
session start unit ..................................................... 387
set clibanner .......................................................... 226

948 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

set gmrp adminmode .......................................... 515 show classofservice trust ...................................... 826
set gmrp interfacemode ..................................... 516 show clibanner ...................................................... 226
set gvrp adminmode ........................................... 512 show clock ............................................................. 339
set gvrp interfacemode....................................... 513 show clock detail .................................................. 340
set igmp .................................................................. 630 show dhcp client vendor-id-option ................... 615
set igmp fast-leave ............................................... 632 show dhcp lease ................................................... 732
set igmp groupmembership-interval ................. 633 show diffserv .......................................................... 859
set igmp interfacemode ..................................... 631 show diffserv service............................................. 864
set igmp maxresponse ......................................... 634 show diffserv service brief.................................... 865
set igmp mcrtrexpiretime .................................... 635 show dos-control ................................................... 703
set igmp mrouter ................................................... 637 show dot1x ............................................................. 536
set igmp mrouter interface ................................. 637 show dot1x authentication-history .................... 542
set igmp querier .................................................... 645 show dot1x clients................................................. 543
set igmp querier election participate ............... 648 show dot1x statistics ............................................. 551
set igmp querier query-interval .......................... 646 show dot1x users ................................................... 545
set igmp querier timer expiry .............................. 647 show environment ................................................ 278
set igmp querier version....................................... 647 show eventlog ....................................................... 240
set igmp report-suppression ................................ 638 show fiber-ports optical-transceiver .................. 259
set interface ........................................................... 760 show fiber-ports optical-transceiver-info .......... 260
set ip default next-hop......................................... 762 show flowcontrol ................................................... 505
set ip next-hop....................................................... 760 show forwardingdb agetime .............................. 706
set ip precedence ................................................ 763 show garp .............................................................. 511
set prompt .............................................................. 225 show gmrp configuration .................................... 517
set slot disable ......................................................... 64 show gvrp configuration ..................................... 514
set slot power ........................................................... 65 show hardware ..................................................... 241
show ........................................................................ 270 show hosts .............................................................. 374
show aaa ias-users................................................ 159 show igmpsnooping ............................................. 639
show access-lists ................................................... 896 show igmpsnooping mrouter interface ............ 642
show access-lists vlan ........................................... 897 show igmpsnooping mrouter vlan ..................... 643
show accounting .................................................. 161 show igmpsnooping querier ............................... 649
show accounting methods ................................. 162 show interface ....................................................... 244
show arp ................................................................. 716 show interface counters ...................................... 247
show arp brief ........................................................ 718 show interface ethernet ...................................... 249
show arp switch.............................................239, 719 show interface ethernet unit/slot/port switchport
show authentication methods ........................... 535 .................................................................................. 257
show auto-copy-sw ................................................ 77 show interface lag ................................................ 257
show autoinstall ..................................................... 233 show interfaces cos-queue................................. 827
show auto-voip...................................................... 908 show interfaces status .......................................... 246
show auto-voip oui-table .................................... 909 show interfaces switchport .........................490, 510
show bootpdhcprelay ......................................... 782 show ip access-lists ............................................... 892
show bootvar ......................................................... 237 show ip address-conflict ...................................... 377
show capture packets ......................................... 382 show ip brief ........................................................... 733
show class-map ..................................................... 858 show ip dhcp binding .......................................... 360
show classofservice dot1p-mapping ................ 825 show ip dhcp conflict .......................................... 364
show classofservice ip-dscp-mapping.............. 826 show ip dhcp global configuration ................... 360

949 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show ip dhcp pool configuration ...................... 361 show logging hosts ............................................... 291
show ip dhcp server statistics.............................. 363 show logging persistent ....................................... 292
show ip dhcp snooping ....................................... 623 show logging traplogs .......................................... 293
show ip dhcp snooping binding ........................ 624 show loginsession .................................................. 115
show ip dhcp snooping database .................... 626 show loginsession long ......................................... 116
show ip dhcp snooping interfaces .................... 626 show mac access-lists .......................................... 875
show ip dhcp snooping statistics ....................... 627 show mac-address-table gmrp .......................... 518
show ip helper statistics........................................ 793 show mac-address-table igmpsnooping ......... 643
show ip helper-address ........................................ 791 show mac-address-table multicast ................... 706
show ip http ........................................................... 113 show mac-address-table static .......................... 611
show ip interface .................................................. 734 show mac-address-table staticfiltering............. 612
show ip interface brief ......................................... 737 show mac-address-table stats ........................... 708
show ip irdp ............................................................ 774 show mac-addr-table .......................................... 262
show ip name source-interface ......................... 376 show mail-server config ....................................... 305
show ip policy ........................................................ 764 show mbuf .............................................................. 384
show ip prefix-list ................................................... 765 show mbuf total .................................................... 385
show ip route ......................................................... 738 show monitor session ............................................ 604
show ip route ecmp-groups ................................ 741 show network........................................................... 82
show ip route preferences .................................. 745 show network ipv6 dhcp statistics ..................... 806
show ip route summary ........................................ 742 show network ipv6 neighbors ............................. 804
show ip ssh................................................................ 97 show passwords configuration ........................... 150
show ip stats ........................................................... 746 show passwords result .......................................... 152
show ip vlan ........................................................... 778 show platform vpd................................................ 243
show ipv6 dhcp snooping ................................... 814 show poe ................................................................ 921
show ipv6 dhcp snooping binding .................... 815 show poe configuration ...................................... 922
show ipv6 dhcp snooping interfaces ................ 816 show poe info ........................................................ 922
show ipv6 dhcp snooping statistics ................... 817 show policy-map .................................................. 860
show lacp actor .................................................... 593 show policy-map interface ................................. 866
show lacp partner ................................................ 594 show port ................................................................ 432
show lldp................................................................. 667 show port advertise .............................................. 434
show lldp interface ............................................... 668 show port description........................................... 435
show lldp local-device......................................... 674 show port-channel ............................................... 596
show lldp local-device detail ............................. 674 show port-channel brief ...................................... 595
show lldp med ....................................................... 682 show port-channel counters ............................... 598
show lldp med interface ..................................... 682 show port-channel system priority ..................... 598
show lldp med local-device detail .................... 683 show port-security ................................................. 656
show lldp med remote-device ........................... 685 show port-security dynamic................................ 657
show lldp med remote-device detail ............... 686 show port-security static ...................................... 658
show lldp remote-device .................................... 670 show port-security violation ................................ 659
show lldp remote-device detail ......................... 672 show process app-list ........................................... 265
show lldp statistics ................................................. 669 show process cpu ................................................. 266
show logging ......................................................... 288 show process proc-list .......................................... 266
show logging buffered......................................... 290 show radius ............................................................ 201
show logging email config.................................. 300 show radius accounting ...................................... 205
show logging email statistics............................... 302 show radius accounting statistics ...................... 207

950 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

show radius servers ............................................... 203 show tacacs .......................................................... 219
show radius source-interface ............................. 209 show tacacs source-interface............................ 220
show radius statistics ............................................. 209 show tech-support ................................................ 273
show rmon .............................................................. 397 show telnetcon........................................................ 92
show rmon collection history .............................. 399 show terminal length ............................................ 275
show rmon events ................................................. 401 show time-range ................................................... 902
show rmon hcalarms ............................................ 411 show trapflags ....................................................... 189
show rmon history ................................................. 402 show users .............................................................. 130
show rmon log ....................................................... 407 show users accounts ............................................ 131
show rmon statistics interfaces ........................... 408 show users login-history [long] ............................ 133
show route-map .................................................... 767 show users login-history [username] .................. 133
show routing heap summary .............................. 746 show users long ..................................................... 131
show running-config ............................................. 267 show version........................................................... 241
show running-config interface ........................... 269 show vlan ............................................................... 491
show serial ................................................................ 87 show vlan brief ...................................................... 493
show service-policy .............................................. 868 show vlan internal usage ..................................... 493
show slot ................................................................... 66 show vlan port ....................................................... 494
show snmp ............................................................. 183 show vlan remote-span ....................................... 605
show snmp engineID ............................................ 185 show voice vlan .................................................... 502
show snmp filters ................................................... 185 show xxx|begin “string”....................................... 235
show snmp group ................................................. 186 show xxx|exclude “string” .................................. 234
show snmp source-interface .............................. 187 show xxx|include “string”.................................... 234
show snmp user ..................................................... 187 show xxx|include “string” exclude “string2” .... 234
show snmp views .................................................. 188 show xxx|section “string” .................................... 235
show sntp................................................................ 330 show xxx|section “string” “string2” .................... 236
show sntp client..................................................... 331 show xxx|section “string” include “string2” ..... 236
show sntp server .................................................... 332 shutdown ................................................................ 429
show sntp source-interface ................................. 334 shutdown all ........................................................... 430
show spanning-tree .............................................. 455 slot.............................................................................. 63
show spanning-tree brief ..................................... 457 snmp trap link-status ............................................. 168
show spanning-tree interface ............................ 458 snmp trap link-status all ........................................ 169
show spanning-tree mst detailed ...................... 460 snmp-server ............................................................ 164
show spanning-tree mst port detailed .............. 461 snmp-server community ...................................... 164
show spanning-tree mst port summary ............. 466 snmp-server community-group .......................... 166
show spanning-tree mst port summary active 467 snmp-server enable traps .................................... 168
show spanning-tree mst summary ..................... 468 snmp-server enable traps linkmode .................. 170
show spanning-tree summary ............................ 469 snmp-server enable traps multiusers ................. 171
show spanning-tree vlan ..................................... 471 snmp-server enable traps stpmode .................. 172
show stats flow-based .......................................... 422 snmp-server enable traps violation ................... 167
show stats group ................................................... 421 snmp-server engineID local ................................ 173
show supported cardtype .................................... 69 snmp-server filter ................................................... 174
show supported switchtype .................................. 73 snmp-server group ................................................ 175
show switch .............................................................. 70 snmp-server host ................................................... 177
show switchport protected ................................. 509 snmp-server user ................................................... 178
show sysinfo............................................................ 272 snmp-server v3-host .............................................. 181

951 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

snmp-server view .................................................. 180 storm-control broadcast rate ............................. 555
snmptrap source-interface ................................. 182 storm-control multicast ........................................ 556
sntp broadcast client poll-interval ..................... 323 storm-control multicast level ............................... 557
sntp client mode ................................................... 324 storm-control multicast rate ................................ 558
sntp client port....................................................... 325 storm-control unicast............................................ 559
sntp server .............................................................. 328 storm-control unicast level .................................. 560
sntp source-interface ........................................... 329 storm-control unicast rate ................................... 561
sntp unicast client poll-interval ........................... 326 switch priority ........................................................... 60
sntp unicast client poll-retry ................................ 327 switch renumber ..................................................... 60
sntp unicast client poll-timeout .......................... 327 switchport access vlan ........................................ 489
spanning-tree ........................................................ 437 switchport mode ................................................... 485
spanning-tree auto-edge ................................... 437 switchport mode private-vlan ............................ 497
spanning-tree bpdumigrationcheck................. 438 switchport mode trunk allowed vlan ................ 486
spanning-tree configuration name ................... 439 switchport private-vlan ........................................ 495
spanning-tree configuration revision................. 440 switchport protected (Global Config) .............. 507
spanning-tree cost................................................ 440 switchport protected (Interface Config).......... 508
spanning-tree edgeport ...................................... 441 switchport trunk native vlan ................................ 488
spanning-tree forward-time ................................ 443
spanning-tree guard loop ................................... 452
spanning-tree guard none .................................. 453 T
spanning-tree guard root .................................... 453
spanning-tree max-age ....................................... 444 tacacs-server host ................................................ 212
spanning-tree max-hops ..................................... 445 tacacs-server key.................................................. 213
spanning-tree mode ............................................ 442 tacacs-server keystring ........................................ 214
spanning-tree mst ................................................. 445 tacacs-server source-interface .......................... 214
spanning-tree mst instance ................................ 447 tacacs-server timeout .......................................... 216
spanning-tree mst priority .................................... 448 telnetcon maxsessions ........................................... 90
spanning-tree mst vlan ........................................ 449 telnetcon timeout ................................................... 91
spanning-tree port mode .................................... 450 terminal length ...................................................... 275
spanning-tree port mode all ............................... 451 timeout.................................................................... 219
spanning-tree tcnguard ...................................... 452 time-range ............................................................. 898
spanning-tree transmit ......................................... 454 traceroute .............................................................. 307
speed ...................................................................... 431 traffic-shape .......................................................... 824
speed all ................................................................. 431 transport input telnet .............................................. 89
sshcon maxsessions ................................................ 95
sshcon timeout ........................................................ 96
U
stack .......................................................................... 58
standby ..................................................................... 61
update bootcode ................................................ 238
stats flow-based .................................................... 416
username (Global Config) .................................. 123
stats flow-based (interface config) ................... 420
username (Mail Server Config) ........................... 305
stats flow-based reporting................................... 418
username name nopassword............................. 125
stats group.............................................................. 414
username name unlock ...................................... 126
stats group (interface config) ............................. 419
username snmpv3 accessmode ........................ 126
storm-control broadcast ...................................... 553
username snmpv3 authentication .................... 127
storm-control broadcast level ............................ 554
username snmpv3 encryption ............................ 128

952 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

username snmpv3 encryption encrypted ........ 129 vlan port priority all ............................................... 503
vlan port pvid all ................................................... 482
vlan port tagging all ............................................. 482
V vlan priority ............................................................. 504
vlan pvid ................................................................. 483
vlan .......................................................................... 473 vlan routing ............................................................ 776
vlan acceptframe ................................................ 474 vlan tagging .......................................................... 484
vlan database ....................................................... 472 voice vlan (Global Config) ................................. 500
vlan ingressfilter ..................................................... 475 voice vlan (Interface Config) ............................. 500
vlan internal allocation ........................................ 476 voice vlan data priority........................................ 502
vlan makestatic ..................................................... 476
vlan name .............................................................. 477
vlan participation ................................................. 478 W
vlan participation all ............................................ 479
vlan port acceptframe all ................................... 479 write memory ......................................................... 323
vlan port ingressfilter all ........................................ 481

953 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016

Phone: +55 51 3933 - 3000
Support: +55 51 3933 - 3122

www.datacom.ind.br
954 | 954 DM1200E Command Reference | Version 3.2 - Fabruary/2016