Académique Documents
Professionnel Documents
Culture Documents
Overview
This Command Reference applies to the following Switch 4500G models:
Switch 4500G 24-Port (3CR17761-91) Switch 4500G 24-Port PWR (3CR17771-91) Switch 4500G 48-Port (3CR17762-91) Switch 4500G 48-Port PWR (3C17772-91)
When initially accessing the command line interface, press Enter when prompted. The User View menu for the unit is
displayed. This is indicated by the chevron brackets around the name of the unit at the prompt, for example, <4500G>.
When in the System View menu, square brackets appear around the name of the unit at the prompt, for example,
[4500G].
You must be in the System View menu to access the configurable CLI commands. Some commands can be entered directly at any prompt from anywhere in the interface.
If you enter part of a command followed by a ? (with no space between), the CLI will show you all the commands
The term view may be used interchangeably with the term menu.
The undo command is placed before the command you wish to undo, for example, undo setauthentication password.
<CTRL-A> places the cursor back to the start of the command line.
Enter the first few characters of a command and press TAB to enter the full command without having to input the
entire command (where there is only one command that starts with the entered characters).
Use the Up Arrow key at the prompt to repeat the previous command string.
Use the Delete key to delete the character after the cursor; the Backspace key deletes the character before the cursor. When entering physical port numbers, Enter the port number as x/0/z, where x is the unit number and z is the
Copyright 2006-2008, 3Com Corporation. All rights reserved. www.3Com.com Part Number: 10014902 Rev. AB Published: February 2008
Exchange the file main-attribute and backup-attribute. Select a file to boot at the next time Update Bootrom Set web resource package
Obtaining Help
At the prompt, enter ?.
Further Information
For further information about how to use the command line interface, refer to the Command Reference Guide and the Configuration Guide, which are both available as PDF documents on the CD that accompanied the unit.
Commands
access-limit
Use the access-limit command to set the maximum number of access users that can be contained in current ISP domain. ISP Domain view
accounting
Use the accounting command to configure the accounting action for the traffic behavior. Traffic Behavior view
accounting default
Use the accounting default command to configure an accounting scheme for all users. ISP Domain view
accounting lan-access
Use the accounting lan-access command to configure accounting for a lan-access user. ISP Domain view
accounting login
Use the accounting login command to configure accounting for the login user. ISP Domain view
accounting optional
Use the accounting optional command to open the accounting-optional switch. ISP Domain view
acl
Use the acl command enter ACL view. If the ACL does not exist, it is created first. System view
acl
Use the acl command to apply an ACL to filter Telnet users. User Interface view
activation-key
Use the activation-key command to define a shortcut key for starting a terminal session. User Interface view
active region-configuration
Use the active region-configuration command to activate the settings of an MST (multiple spanning tree) region. MST Region view
add-member
Use the add-member command to add a candidate device to a cluster. Cluster view
administrator-address
Use the administrator-address command to set the MAC address of the management device on a member device. Cluster view
apply cost
Use the apply cost command to set the cost for routing information. Routing Policy view
apply cost apply ip-address next-hop
Use the apply ip-address next-hop command to set the next hop for IPv4 routing information. Routing Policy view
apply ipv6 next-hop apply poe-profile
Use the apply poe-profile command to apply the existing PoE Profile configuration to the specified Ethernet port. PoE Interface view
apply poe-profile interface
Use the apply poe-profile interface command to apply the PoE configuration file to one or more PoE interfaces. System view
apply preference
Use the apply preference command to set preference for routing protocol. Routing Policy view
apply preference apply tag
Use the apply tag command to set specified tag value of routing information. Routing Policy view
apply tag arp check enable
Use the arp check enable command to enable ARP entry checking, preventing the device from learning multicast MAC addresses. System view
arp max-learning-num
Use the arp max-learning-num command to set the maximum number of ARP entries that an interface can learn. VLAN Interface view
arp static
Use the arp static command to configure the static ARP entry in the ARP mapping table. System view
arp timer aging
Use the arp timer aging command to set the aging timer for dynamic ARP entries. System view
ascii
Use the ascii command to configure data transmission mode as ASCII mode. FTP Client view
attribute
Use the attribute command to set the attributes of a user whose service type is lan-access. Local User view
attribute
Use the attribute command to configure attribute rules of certificate issuers, certificate subject names, or alternate certificate subject names. Certificate Attribute Group view
authentication default
Use the authentication default command to configure authentication scheme for all users. ISP Domain view
authentication lan-access
Use the authentication lan-access command to configure authentication scheme for a lan-access user. ISP Domain view
authentication login
Use the authentication login command to configure authentication for a login user. ISP Domain view
authentication-mode
Use the command authentication-mode to specify the authentication mode. User Interface view
authorization command
Use the authorization command command to configure the authorization scheme for a CLI user. ISP Domain view
authorization default
Use the authorization default command to configure the default authorization for all users. ISP Domain view
authorization lan-access
Use the authorization lan-access command to configure authorization for a lan-access user. ISP Domain view
authorization login
Use the authorization login command to configure authorization for a login user. ISP Domain view
auto-build
Use the auto-execute command command to set the command that is executed automatically after a user logs in. VTY User Interface view
backup startup-configuration
Use the backup startup-configuration command to back up the configuration file for next startup with the destination file name. User view
binary
Use the binary command to specify that files be transferred in binary mode. That is, data is transferred in binary streams. FTP Client view
black-list add-mac
Use the black-list add-mac command to add a device into the blacklist. Cluster view
black-list delete-mac
Use the black-list delete-mac command to delete a device from the blacklist. Cluster view
boot-loader
Use the boot-loader command to configure the .app file to be used the next time the switch is booted. User view
bootrom
Use the bootrom command to upgrade the Bootrom of device. User view
bootrom-update security-check enable
Use the bootrom-update security-check enable command to enable file validity check for upgrading. System view
broadcast-suppression
Use the broadcast-suppression command to configure broadcast storm suppression ratio. Ethernet Interface view Port Group view
build
Use the build command to configure or modify the cluster name. Cluster view
bye
Use the bye command to disconnect from the remote FTP server and exit to user view. FTP Client view
bye
Use the bye command to terminate the connection to the remote SFTP server and return to system view. SFTP Client view
ca identifier
Use the ca identifier command to specify the CA this device trusts and have the "name" CA bound with this device. PKI Domain view
car
Use the car command to configure TP for the traffic behavior. Traffic Behavior view
cd
Use the cd command to change the current working directory path on the remote FTP server. FTP Client view
cd
Use the cd command to change the current path on the remote SFTP server. SFTP Client view
cdup
Use the cdup command to return from the current working directory path to the upper directory. FTP Client view
cdup
Use the cdup command to change the working path and return to the upper-level directory. SFTP Client view
certificate request entity
Use the certificate request entity command to specify the name of the entity for certificate request. PKI Domain view
certificate request from
Use the certificate request from command to choose between CA and RA to register for certificate request. PKI Domain view
certificate request mode
Use the certificate request mode command to decide between the manual or the auto request mode. PKI Domain view
certificate request polling
Use the certificate request polling command to specify the interval between two polls and the retry times. PKI Domain view
certificate request url
Use the certificate request url command to specify the server URL for certificate request through SCEP protocol. SCEP is a protocol specialized in the communication with authentication authorities. PKI Domain view
check region-configuration
Use the check region-configuration command to view all the MST region configuration information, including the region name, VLAN-to-instance mapping and revision level settings. MST Region view
checkzero
Use the checkzero command to check the zero field of RIP-1 packet. RIP view
checkzero ciphersuite
Use the ciphersuite command to configure the cipher suite supported by an SSL server policy. SSL Server Policy view
classifier behavior
Use the classifier behavior command to specify the behavior for the class in the policy. Policy view
client-verify enable
Use the client-verify enable command to enable certificate-based SSL client authentication, meaning the server needs to perform certificate-based authentication to the client. SSL Server Policy view
clock datetime
Use the clock datetime command to set the current system time and date. User view
clock summer-time
Use the clock summer-time command to set the name, starting and ending time of the daylight saving time. User view
clock timezone
Use the clock timezone command to set local time zone information. User view
close
Use the close command to terminate the connection to the FTP server, but remain in FTP client view. FTP Client view
close-mode wait
Use the close-mode wait command to configure the close mode for an SSL connection to wait, meaning after sending a close-notify alert message to the client, the server does not close a session until it receives a close-notify alert message from the client. SSL Server Policy view
cluster
Use the cluster enable command to enable the cluster function on a switch. System view
cluster switch-to
Use the cluster switch-to command to switch between the management device and member devices for configuration and management. User view
command-privilege level
Use the command-privilege level command to set the level of the specified command in a specified view. System view
common-name
Use the common-name command to specify the common name of an entity, take User name for example. PKI Entity view
copy
Use the copy configuration command to copy configurations on a specific interface to other interface(s). The configuration can be copied include speed/duplex configuration, GVRP, STP, Port-isolate, VLAN, LACP, and QoS. System view
count
Use the count command to configure the number of probes in a test. NQA Test Group view
country
Use the country command to specify the code of the country to which the entity belongs. It is a standard 2-byte code, for example, CN for China. PKI Entity view
crl check
Use the crl check command to enable or disable CRL checking. PKI Domain view
crl update-period
Use the crl update-period command to specify the update period of CRL, which is the interval between local downloads of CRLs from CRL access server. PKI Domain view
crl url
Use the crl url command to specify the distribution point URL for CRL. PKI Domain view
cut connection
Use the cut connection command to cut down one user connection or one type of user connections forcibly. System view
databits
Use the databits command to set the databits for the user interface. AUX User Interface view
datafill
Use the datafill command to configure a string of fill characters for a test packet. NQA Test Group view
datasize
Use the datasize command to configure the size of a test packet, namely, an echo request packet (IP header and ICMP header excluded). NQA Test Group view
debugging
Use the debugging command to enable specific type of debugging or all types of debugging. User view
default cost
Use the default cost command to define a value for the default metric of the redistributed route. RIP view
default-route originate
Use the default-route originate cost command to enable the current router to originate a default route to RIP neighbors when the router needs to generate a default route with the specified cost. RIP view
delete
Use the delete command to remove a file from the storage device to the recycle bin, where you can restore the file with the undelete command or permanently delete it with the reset recycle-bin command. User view
delete
Use the delete command to delete a file on the remote FTP server. FTP Client view
delete
Use the delete command to delete a specified file from a server. SFTP Client view
delete ipv6 static-routes all
Use the display ip routing-table command to display summary information about active routes in the routing table. Any view
delete-member
Use the delete-member command to remove a member device from the cluster. Cluster view
Use the delete static-routes all command to delete all the static routes. System view
description
Use the description command to assign a description string to the current VLAN or VLAN interface.
Use the description command to enter a description of an Ethernet port. Ethernet Interface view
description
Use the description command to create an ACL description, to describe the purpose of the ACL for example.
Basic IPv4 ACL view Advanced IPv4 ACL view Ethernet Frame Header ACL view
description
Use the description command to give a brief description of a test group, usually, the test type or test purpose of a test group. NQA Test Group view
destination-ip
Use the destination-ip command to configure the destination IP address in the test request packet. NQA Test Group view
destination-port
Use the destination-port command to configure the destination port number for a test request packet. NQA Test Group view
dhcp enable
Use the dhcp relay address-check enable command to enable IP address match checking on the relay agent. VLAN Interface view
dhcp relay information enable
Use the dhcp relay information enable command to enable the relay agent to support option 82. VLAN Interface view
dhcp relay information format
Use the dhcp relay information format command to specify a padding format for option 82. Interface view
dhcp relay information strategy
Use the dhcp relay information strategy command to configure DHCP relay agent handling strategy for messages containing option 82. Interface view
dhcp relay release
Use the dhcp relay release command to send a DHCP RELEASE request to a specified DHCP server or server groups for releasing a specified client IP address. VLAN Interface view System view
dhcp relay security static
Use the dhcp relay security static command to configure a manual IP-to-MAC binding on the relay agent. System view
dhcp relay security tracker
Use the dhcp relay security tracker command to set a refreshing interval at which the relay agent contacts the DHCP server for refreshing dynamic bindings. System view
dhcp relay server-detect
Use the dhcp relay server-detect command to enable pseudo DHCP server detection on the DHCP relay agent. System view
Use the dhcp relay server-group command to specify a DHCP server for a DHCP server group. System view
dhcp relay server-select
Use the dhcp relay server-select command to correlate specified interface(s) to a specified DHCP server group. VLAN Interface view
dhcp select relay
Use the dhcp select relay command to enable the relay agent on the current interface, specified or all interfaces. Upon receiving requests from an enabled interface, the relay agent will forward these requests to outside DHCP servers for IP address allocation. VLAN Interface view
dhcp-snooping
Use the dhcp-snooping command to enable the DHCP snooping. System view
dhcp-snooping trust
Use the dhcp-snooping trust command to set a port as trusted. Ethernet Interface view
dir
Use the dir command to display information about all files and folders in the current directory, excluding those moved to the recycle bin. User view
dir
Use the dir command to query for the details of all files and directories in the current directory. FTP Client view
dir
Use the dir command to query files under a specified directory. SFTP Client view
disconnect
Use the disconnect command to terminate a FTP connection without quitting FTP client view. FTP Client view
display acl
Use the display acl command to display information about the specified or all IPv4 ACLs. This command displays ACL rules in the matching order. Any view
display arp
Use the display arp command to display information about ARP entries in the ARP mapping table. Any view
display arp ip-address
Use the display arp ip address command to display information about the ARP entry for a specified IP address. Any view
display arp timer aging
Use the display arp timer aging command to display the aging time for dynamic ARP entries. Any view
display boot-loader
Use the display boot-loader command to display the host software (.app file) that is adopted when the switch reboots. Any view
display bootp client
Use the display bootp client command to display relative information of a BOOTP client, including MAC address of the BOOTP client and obtained IP address. Any view
display brief interface
Use the display brief interface command to display brief interface information, including simple interface name, link state, protocol link state, protocol type, and main IP address. Any view
10
display channel
Use the display channel command to display the details channel information. Any view
display clipboard
Use the display clipboard command to view the contents of the clipboard. Any view
display clock
Use the display clock command to display the current date and time of the system, so that you can adjust them if they are wrong. Any view
display cluster
Use the display cluster command to display the state and statistics of the cluster to which the current switch belongs. Any view
display cluster base-topology
Use the display cluster topology command to display the standard topology view of the cluster. Any view
display cluster black-list
Use the display cluster black-list command to display the current blacklist of the cluster. Any view
display cluster candidates
Use the display cluster candidates command to display the information about the candidate devices of a cluster. Any view
display cluster current-topology
Use the display cluster current topology command to display the current topology view or the topology path between two points. Any view
display cluster members
Use the display cluster members command to display the information about cluster members. Any view
display connection
Use the display connection command to display information about specified or all user connections. Any view
display cpu-usage
Use the display cpu-usage command to display the statistics of CPU usage entries. Any view
display current-configuration
Use the display current-configuration command to display the current configuration of a switch. Any view
display current-configuration
Use the display current-configuration command to display the current configuration of a switch. Any view
display debugging
Use the display debugging command to display the enabled debugging on a specified device. Any view
display device
Use the display device command to view module type and working status information of each card. Any view
display dhcp client
Use the display dhcp client command to display DHCP client information. Any view
display dhcp relay
Use the display dhcp relay command to display information about DHCP server groups correlated to an interface or all interfaces. Any view
11
Use the display dhcp relay security command to display information about bindings of DHCP relay agents. If no parameter is specified, information about all bindings will be displayed. Any view
display dhcp relay security statistics
Use the display dhcp relay security statistics command to display statistics information about bindings of DHCP relay agents. Any view
display dhcp relay security tracker
Use the display dhcp relay security tracker command to display the interval for refreshing dynamic bindings on the relay agent. Any view
display dhcp relay server-group
Use the display dhcp relay server-group command to display the configuration information of a specified or all DHCP server groups. Any view
display dhcp relay statistics
Use the display dhcp relay statistics command to display DHCP packet statistics related to a specified or all DHCP groups, information including the number of erroneous packets, packets received from clients and servers, packets sent to clients and servers (both broadcasts and unicasts). Any view
display dns domain
Use the display dns domain command to display DNS domain names (suffixes) that are manually configured. Any view
display dns dynamic host
Use the display dns dynamic-host command to display the dynamic domain name resolution cache information. Any view
display dns server
Use the display dns server command to view the DNS server addresses manually configured. Any view
display domain
Use the display domain command to display the configuration information about one specific or all ISP domains. Any view
display diagnostic-information
Use the display diagnostic-information command to display the current configuration of all the running modules. Any view
display dot1x
Use the display dot1x command to display 802.1x session information, statistics, or configuration information of specified or all ports. Any view
display environment
Use the display environment command to display the temperature information, including the current temperature and temperature thresholds of cards. Any view
display fan
Use the display fan command to check the state of all built-in fans. Any view
display fib
Use the display fib command to display FIB forward information. If no parameters are specified, all FIB forward information will display. Any view
display fib ip-address
Use the display fib ip-address command to display forward information items that match the specified destination IP address. Each line in the export information stands for a FIB item. Any view
12
Use the display fib statistics command to view the total number of FIB entries. Any view
display ftp-server
Use the display ftp-server command to display the FTP server-related settings of a switch when it operates as an FTP server. Any view
display ftp-user
Use the display ftp-user command to display the parameter settings of current FTP users. Any view
display garp statistics
Use the display garp statistics command to display the GARP statistics on specified (or all) ports. Any view
display garp timer
Use the display garp timer command to display the values of the GARP timers on specified or all ports. Any view
display gvrp statistics
Use the display gvrp statistics command to display the GVRP statistics about specified (or all) Trunk ports. Any view
display gvrp status
Use the display gvrp status command to display the enable/disable status of GVRP. Any view
display habp
Use the display habp command to display HABP configuration and status information. Any view
display habp table
Use the display habp table command to display the MAC address table maintained by HABP. Any view
display habp traffic
Use the display habp traffic command to display statistics on HABP packets. Any view
display history-command
Use the display history-command command to view the history commands. Any view
display hotkey
Use the display hotkey command to display the shortcut key allocation information Any view
display hwtacacs
Use the display hwtacacs command to view configuration or statistics information of specified or all TACACS+ schemes. Any view
display icmp statistics
Use the display icmp statistics command to display statistics of ICMP flows. Any view
display igmp-snooping group
Use the display igmp-snooping group command to view the multicast group information learned by IGMP Snooping. Any view
display igmp-snooping statistics
Use the display igmp-snooping statistics command to view the statistics information of IGMP messages learned by IGMP Snooping. Any view
display info-center
Use the display info-center command to display configurations for all channels (except channel 6 to 8) of the information center. Any view
13
display interface
Use the display interface command to display the current state of a specified interface and related information. Any view
display interface vlan-interface
Use the display interface vlan-interface command to display the information about the management VLAN interface. Any view
display ip host
Use the display ip host command to display the host names and corresponding IP addresses in the static domain name resolution resolving list. Any view
display ip host
Use the display ip host command to display the host names and corresponding IP addresses in the static domain name resolution resolving list. Any view
display ip https
Use the display ip https command to display the status information about the HTTPS server. Any view
display ip interface
Use the display ip interface command to display detailed information about IP for the specified interface. Any view
display ip interface brief
Use the display ip interface brief command to display brief information about the basic IP configuration on the specified or all interfaces. Any view
display ip ip-prefix
Use the display ip ip-prefix command to display the statistics of IPv4 address prefix list. If no ip-prefix-name is specified, statistics of all the address prefix lists will be displayed. Any view
display ip routing-table
Use the display ip routing-table command to display summary information about active routes in the routing table. Any view
display ip routing-table acl
Use the display ip routing-table acl command to display the routes permitted by the specified basic ACL. Any view.
display ip routing-table ip-address
Use the display ip routing-table ip-address command to display information about routes to a specific destination address. Any view
display ip routing-table ip-address1 ip-address2
Use the display ip routing-table ip-address1 ip-address2 command to display the information about the routes with their destinations within the specified destination IP address range. Any view
display ip routing-table ip-prefix
Use the display ip routing-table ip-prefix command to display the information about the routes matching a specified IP prefix list. Any view
display ip routing-table protocol
Use the display ip routing-table protocol command to display the information about specific routes with a specified origin. Any view
display ip routing-table statistics
Use the display ip routing-table statistics command to display statistics about the public network routing table. Any view
14
display ip socket
Use the display ip socket command to display the information about the sockets in the current system. Any view
display ip statistics
Use the display ip statistics command to view the statistics information about IP packets. Any view
display ip ipv6-prefix display ipv6 routing-table display ipv6 routing-table acl display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-prefix display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose display lacp system-id
Use the display lacp system-id command to display the local system ID, which comprises system LACP priority and system MAC address. Any view
display link-aggregation interface
Use the display link-aggregation interface command to display the following information about link aggregation on the specified port or ports. Any view
display link-aggregation summary
Use the display link-aggregation summary command to display a summary for all link aggregation groups. which includes: Local system ID, Link aggregation group ID, Link aggregation type, Remote system ID, Number of selected ports, Number of unselected ports, Load sharing type, and Master port number. Any view
display link-aggregation verbose
Use the display link-aggregation verbose command to display detailed information about the specified or all link aggregation groups. Any view
display local-proxy-arp
Use the display local-proxy-arp command to display whether local proxy ARP is enabled. Any view
display local-server statistics
Use the display local-server statistics command to view the statistics about all local RADIUS authentication server. Any view
display local-user
Use the display local-user command to display information about specified or all local users. Any view
display logbuffer
Use the display logbuffer command to display the status of the log buffer and the records in the log buffer. Any view
display logbuffer summary
Use the display logbuffer summary command to display the summary of the log buffer. Any view
display-loopback-detection
Use the display loopback-detection command to display the loopback detection status on the port. Any view
display mac-address
Use the display mac-address command to display MAC address table information. Any view
display mac-address aging-time
Use the display mac-address aging-time command to display the aging time of the dynamic entry in the MAC address table. Any view
15
display mac-authentication
Use the display mac-authentication command to display the global MAC authentication information or the MAC authentication information about specified interfaces. Any view
display memory
Use the display memory command to display the memory usage of a specified switch. Any view
display mirroring-group
Use the display mirroring-group command to display the information of a mirroring group. Any view
display ndp
Use the display ndp command to display the global NDP configuration information, including the interval to send NDP packets, the holdtime of NDP information, and the information about the neighbors of all the ports. Any view
display nqa
Use the display nqa to display results of an NQA test or tests. Any view
display ntdp
Use the display ntdp command to display the global NTDP information. Any view
display ntdp device-list
Use the display ntdp device-list command to display the device information collected through NTDP. Any view
display ntp-service sessions
Use the display ntp-service sessions command to view the information of all NTP sessions. Without the verbose keyword, this command displays the brief information of all NTP service sessions Any view
display ntp-service status
Use the command display ntp-service status command to view the NTP service status information. Any view
display ntp-service trace
Use the display ntp-service trace command view the brief information of each NTP server along the NTP server chain from the local device back to the primary reference source. Any view
display pki certificate
Use the display pki certificate command to display and browse through the certificate. Any view
display pki certificate access-control-policy
Use the display pki certificate access-control-policy command to display the information about a certificate attribute access control policy. Any view
display pki certificate attribute-group
Use the display pki certificate attribute-group command to display the information about a certificate attribute group. Any view
display pki crl domain
Use the display pki crl domain command to display and browse through the locally saved CRL. Any view
display poe device
Use the display poe device command to display the mapping between ID, module, and slot of the power sourcing equipment (PSE). Any view
display poe interface
Use the display poe interface command display the power information of the specified interface. Any view
16
Use the display poe interface power command, you can view the power information of a specific port or all ports on the Switch. Any view
display poe-profile
Use the display poe-profile command to display all information of the configurations and applications of the PoE configuration file. Any view
display poe-profile interface
Use the display poe-profile interface command to display all information of the configurations and applications of the PoE configuration file that currently take effect on the specified PoE interface. Any view
display poe pse
Use the display poe pse command to display the information of the power sourcing equipment (PSE). Any view
display port
Use the display port command to display information on the current ports of a specified type. Any view
display port-group manual
Use the display port-group manual command to display information on a specified manual port group. Any view
display port-isolate group
Use the display port-isolate group command to display the information about the Ethernet ports added to an isolation group. Any view
display power
Use the display power command to check the state of the built-in power supply module. Any view
display proxy-arp
Use the display proxy-arp command to display whether proxy ARP is enabled. Any view
display qos lr interface
Use the display qos lr interface command to view LR configuration and statistics information of a certain interface or all interfaces. Any view
display qos map-table
Use the display qos map-table command to display the configuration of the specified priority mapping table. Any view
display qos policy
Use the display qos policy command to display the configuration information of the specified class or all the classes in the specified policy or all policies and the configuration information of behavior(s) associated with the class(es). Any view
display qos policy interface
Use the display qos policy interface command to display the configuration and running status of the policy on the specified ports or all ports. Any view
display qos policy user-defined
Use the display qos policy user-defined command to display the configuration information of one or all user-defined QoS policies. Any view
display qos sp
Use the display qos sp interface command to display the strict priority (SP) queuing configuration on a specified port. Any view
display qos vlan-policy
Use the display qos vlan-policy command to display information about QoS policies applied on VLAN(s). Any view
17
Use the display qos wrr interface command to display the configuration of weighted round robin (WRR) queues of a port. Any view
display radius
Use the display radius command to display the configuration information about one specific or all RADIUS schemes. Any view
display radius statistics
Use the display radius statistics command to display the statistics about RADIUS packets. Any view
display rip
Use the display rip command to view the current RIP running state and its configuration information. Any view
display rip database
Use the display rip database command to display the active routes in the RIP announced database, which are send in regular RIP updating messages. Any view
display rip interface
Use the display rip interface command to display the RIP interface information. Any view
display rip route
Use the display rip route command to display all active or inactive RIP routes and timers associate to each route. Any view
display rmon alarm
Use the display rmon alarm command to display the configuration of the specified or all RMON alarm entries. Any view
display rmon event
Use the display rmon event command to display the configuration of the specified or all RMON event entries. Any view
display rmon eventlog
Use the display rmon eventlog command to display the log information for the specified or all event entries. Any view
display rmon history
Use the display rmon history command to display RMON history control information and last history sampling information, including bandwidth utilization, number of bad packets, and total packet number. Any view
display rmon prialarm
Use the display rmon prialarm command to display the configuration of the specified or all private alarm entries. Any view
display rmon statistics
Use the display rmon statistics command to display RMON statistics. Any view
display route-policy
Use the display route-policy command to view the configured route-policy Any view
18
display route-policy display ripng display ripng database display ripng interface display ripng route display rsa local-key-pair public
Use the display rsa local-key-pair public command to display the public keys of the server host key pair and server key pair on the server. If no key is generated, "RSA keys not found" will be displayed. Any view
display rsa peer-public-key
Use the display rsa peer-public-key command to display the peer RSA public keys. If no keyname is specified, all peer public keys are displayed. Any view
display saved-configuration
Use the display saved-configuration command to display the content of the main configuration file in the flash memory of a switch. Any view
display saved-configuration
Use the display saved-configuration command to display the startup configuration file. Any view
display schedule reboot
Use the display schedule reboot command to display the device reboot time set by the user. Any view
display sftp client source
Use the display sftp client source command to display the source IP address or source interface currently set for the SFTP client. Any view
display snmp-agent
Use the display snmp-agent command to display the engine ID of an SNMP entity. Any view
display snmp-agent community
Use the display snmp-agent community command to view the information about the currently configured community names for SNMPv1 or SNMPv2c. Any view
display snmp-agent group
Use the display snmp-agent group command to display information for the SNMP agent group. Any view
display snmp-agent mib-view
The display snmp-agent mib-view command to display SNMP agent MIB view information. Any view
display snmp-agent statistics
Use the display snmp-agent statistics command to display SNMP statistics Any view
display snmp-agent sys-info
Use the display snmp-agent sys-info command to display the system information of the current SNMP device Any view
display snmp-agent usm-user
Use the display snmp-agent usm-user command to display SNMPv3 user information. Any view
display ssh client source
Use the display ssh client source command to display the source IP address or source interface currently set for the SSH client. Any view
display ssh server
Use the display ssh server command to display the status or session information about the SSH server Any view
19
Use the display ssh server-info command to display the mapping between the host public key and the SSH server saved on the client. Any view
display ssh user-information
Use the display ssh user-information command to display information about the current SSH users, including user name, authentication mode, key name and authorized service types. Any view
display ssl client-policy
Use the display ssl client-policy command to view information for an SSL client policy. Any view
display ssl server-policy
Use the display ssl server-policy command to view information of an SSL server policy. Any view
display startup
Use the display startup command to display the configuration file used at this startup and the one used for next startup. User view
display stop-accounting-buffer
Use the display stop-accounting-buffer command to display the no-response stop-accounting request packets buffered in the device. Any views
display stop-accounting-buffer
Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the switch. Any view
display stp
Use the display stp command to display the state and statistical information about one or all spanning trees. Any view
display stp region-configuration
Use the display stp region-configuration command to view the currently effective configuration information of the MST region, including the region name, revision level, and user-configured VLAN-to-instance mappings. Any view
display tcp statistics
Use the display tcp statistics command to view the statistics information about TCP packets. Any view
display tcp status
Use the display tcp status command to display status of all TCP connection and thus allow a user to monitor TCP connections at all times. Any view
display this
Use the display this command to display the current configuration performed in the current view of the system. Any view
display this
Use the display this command to display the current configuration performed in the current view of the system. Any view
display time-range
Use the display time-range command to display the configuration and state of a specified or all time ranges. The state of a time range is either active or inactive. Any view
display traffic behavior
Use the display traffic behavior command to display the configured traffic behavior information. Any view
20
Use the display traffic behavior user-defined command to display the configuration information of one or all user-defined traffic behaviors. Any view
display traffic classifier
Use the display traffic classifier command to view the configuration information about class of the router. Any view
display trapbuffer
Use the display trapbuffer command to display the state and the trap information recorded. Any view
display udp-helper server
Use the display udp-helper server command to display the information of the destination server to which UDP packets are forwarded and the number of packets forwarded. Any view
display udp statistics
Use the display udp statistics command to view UDP traffic statistic information. Any view
display user-interface
Use the display user-interface command to view information about the specified or all user interfaces. Any view
display users
Use the display users command to display the information about user interfaces. . Any view
display version
Use the display version command to system version information. Any view
display vlan
Use the display vlan command to display VLAN information, including VLAN ID, VLAN type (static versus dynamic), VLAN route interface (if enabled, displays the main IP address and mask), VLAN descriptive string, ports in the VLAN, and so on. Any view
display voice vlan oui
Use the display voice vlan oui command to display the currently supported OUI addresses and the related information. Any view
display voice vlan state
Use the display voice vlan status command to display voice VLAN-related information, including voice VLAN operation mode, port mode (manual mode or automatic mode), and so on. Any view
display web users
Use the display web users command to display information about web users. Any view
dns domain
Use the dns domain command to configure a DNS domain name. System view
dns resolve
Use the dns resolve command to enable dynamic domain name resolution. System view
dns server
Use the dns server command to configure IP address of a DNS server. System view
domain
Use the domain command to create an ISP domain and enter its view, or enter the view of an existing ISP domain, or configure the default ISP domain. System view
21
dot1x
Use the dot1x command in system view to enable 802.1x globally. Use the dot1x interface interface-list command in system view or the dot1x command in Ethernet interface view to enable 802.1x for specified ports. System view Ethernet Port view
dot1x authentication-method
Use the dot1x authentication-method command to set the 802.1x authentication method. System view
dot1x guest-vlan
Use the dot1x guest-vlan command to configure GuestVlan on a specified port. System view Ethernet Port view
dot1x handshake
Use the dot1x handshake command to enable the online user handshake function. Ethernet Interface view
dot1x max-user
Use the dot1x max-user command to set the maximum number of accessing users for specified or all ports. System view Ethernet Interface view
dot1x port-control
Use the dot1x port-control command to set the access control mode for specified or all ports. System view Ethernet Interface view
dot1x port-method
Use the dot1x port-method command to set the access control method for specified or all ports. System view Ethernet Interface view
dot1x quiet-period
Use the dot1x quiet-period command to enable the quiet-period timer. System view
dot1x retry
Use the dot1x retry command to set the maximum number of attempts for sending authentication requests to an accessing user. System view
dot1x timer
Use the dot1x timer command to set the 802.1x timers. System view
duplex
Use the duplex command to configure the duplex mode for an Ethernet interface. Ethernet Interface view
enable snmp trap updown
Use the enable snmp trap updown command to enable the sending of linkup and linkDown SNMP traps. System view
escape-key
Use the escape-key command to define a shortcut key for aborting tasks. User Interface view
execute
Use the execute command to execute the specified batch file. System view
exit
Use the exit command to terminate the connection to the remote SFTP server and return to system view. SFTP Client view
fast-leave
Use the fast-leave command to enable the fast leave function for ports globally. IGMP Snooping view
filename
Use the filename command to specify a file to be transferred between the FPT server and the FTP client. NQA Test Group view
22
file prompt
Use the file prompt command to modify the prompt mode of file operations on the Switch. System view
filter
Use the filter command to configure the traffic filter action for the traffic behavior. Traffic Behavior view
filter-policy export
Use the filter-policy export command to define the export filtering policy, which are announced in the updating messages. Only filtered routes can be added to the RIP routing table. RIP view
filter-policy export filter-policy import
Use the filter-policy gateway import command to filter the imported routes so that only the routes passing the filter are added to the routing table. RIP view
filter-policy import fixdisk
Use the fixdisk command to restore the space of a storage device when it becomes unavailable because of some abnormal operation. Any view
flow-control
Using flow-control command, you can configure the flow control mode on AUX port. AUX User Interface view.
flow-control
Use the flow-control command to turn on flow control on an Ethernet interface. Ethernet Interface view
format
Use the fqdn command to specify the FQDN of an entity. PKI Entity view
free user-interface
Use the free user-interface command to clear a specified user interface. If you execute this command, the corresponding user interface will be disconnected. User view
free web-users
Use the free web-users command to disconnect a specified Web user or all Web users by force. User view
frequency
Use the frequency command to configure the interval of performing a cyclic test. NQA Test Group view
ftp
Use the ftp command to establish a control connection with an FTP server and enter FTP client view. User view
ftp-operation
Use the ftp-operation command to configure the FTP operation type. NQA Test Group view
ftp server
Use the ftp server command to configure an FTP server on the management device for the member devices in the cluster. Cluster view
ftp server enable
Use the ftp server enable command to enable FTP server and allow FTP users to log in. System view
ftp timeout
Use the ftp timeout command to configure connection timeout interval. System view
23
ftp update
Use the ftp update command to set the file update mode that the FTP server uses while receiving data. System view
garp timer
Use the garp timer command to set a GARP timer for an Ethernet port or all ports in a port-group in compliance with the dependencies shown in Table 166. Ethernet Port view
garp timer leaveall
Use the garp timer leaveall command to set the GARP LeaveAll timer to a specified value. System view
get
Use the get command to FTP a file from a remote server and save it. SFTP Client view
get
Use the get command to download a file from a remote SFTP server and save it locally. SFTP Client view
gratuitous-arp-learning enable
Use the gratuitous-arp-learning enable command to enable the gratuitous ARP packet learning function. System view
gratuitous-arp-sending enable
Use the gratuitous-arp-sending enable command to enable a device to send gratuitous ARP packets. System view
group-member
Use the group-member command to add an Ethernet interface to a specified manual port group. Port Group view
group-policy
Use the group-policy command to configure a global multicast group filter. IGMP Snooping view
gvrp
Use the gvrp command to enable GVRP globally, on a port, or on all ports in a port-group. System view Ethernet Port view Port-Group view
gvrp registration
Use the gvrp registration command to configure the GVRP registration type on a port or all ports in a port-group. Ethernet Port view Port-Group view
habp enable
Use the habp enable command to enable HABP for a switch. System view
habp server vlan
Use the habp server vlan command to configure a switch to operate as an HABP server and HABP packets to be broadcast in a specified VLAN. System view
habp timer
Use the habp timer command to set the interval for a switch to send HABP request packets. System view
handshake timeout
Use the handshake timeout command to configure handshake timeout time in an SSL server policy. SSL Server Policy view
header
Use the header command to set the banners that are displayed when a user logs into a switch. System view
header
Using header command, you can configure to display header when user login. System view
24
help
Use the help command to display the help information of SFTP client commands. SFTP Client view
history-command max-size
Use the history-command max-size command to set the size of history command buffer. User Interface view
history-records
Use the history-records command to configure the maximum number of history records that can be saved in a test group. NQA Test Group view
holdtime
Use the holdtime command to configure the holdtime of a switch. Cluster view Use the holdtime command to configure the holdtime of a switch.
host-aging-time
Use the host-aging-time command to configure the global aging time of group member ports. IGMP Snooping view
host-route
Use the host-route command to enable the router to receive host routes. RIP view
hotkey
Use the hotkey command to assign a hot key to a command line. System view
http-operation
Use the http-operation command to configure an HTTP operation type. NQA Test Group view
http-string
Use the http-string command to configure an HTTP operation string. The HTTP operation string specifies the accessed web page and the HTTP version used. NQA Test Group view
hwtacacs nas-ip
Use the hwtacacs nas-ip command to specify the source address of the TACACS+ packet sent from NAS. System view
hwtacacs scheme
Use the hwtacacs scheme command to create an TACACS+ scheme and enter its view. System view
idle-cut
Use the idle-cut command to set the user idle-cut function in current ISP domain. ISP Domain view
idle-timeout
Use the idle-timeout command to configure the amount of time you want to allow a user interface to remain idle before it is disconnected. User Interface view
if-match
Use the if-match command to define a rule for all the packets matching the specified rule. Class view
if-match { acl | ip-prefix }
Use the if-match { acl | ip-prefix } command to match destination IP addresses of routes against the specified ACL or the IP prefix list. Routing Policy view
if-match cost
Use the if-match cost command to configure one of the matching rules of route-policy to match the cost of the routing information. Routing Policy view
if-match cost if-match interface
Use the if-match interface command to match outbound interfaces of routing information to specified interfaces. Routing Policy view
25
Use the if-match ip command to match IPv4 routing information (next hop or source address). Routing Policy view
if-match tag
Use the if-match tag command to match the tag field of routes with the specified tag. Routing Policy view
if-match tag igmp-snooping
Use the igmp-snooping command to enable IGMP Snooping globally and enter IGMP Snooping view. System view
igmp-snooping drop-unknown
Use the igmp-snooping drop-unknown command to enable the function of silently dropping unknown multicast data in the current VLAN. VLAN view
igmp-snooping enable
Use the igmp-snooping enable command to enable IGMP Snooping in the current VLAN. VLAN view
igmp-snooping fast-leave
Use the igmp-snooping fast-leave command to enable the fast leave function on the current port. Ethernet Port view Port Group view
igmp-snooping general-query source-ip
Use the igmp-snooping general-query source-ip command to configure the source address of IGMP general queries. VLAN view
igmp-snooping group-limit
Use the igmp-snooping group-limit command to configure the maximum number of multicast groups that can pass the port(s). Ethernet Port view Port Group view
igmp-snooping group-policy
Use the igmp-snooping group-policy command to configure a multicast group filter on the current port(s). Ethernet Port view Port Group view
igmp-snooping host-aging-time
Use the igmp-snooping host-aging-time command to configure the aging time of group member ports in the current VLAN. VLAN view
igmp-snooping host join
Use the igmp-snooping host-join command to enable a simulated host to join a multicast group or a multicast source/group. Ethernet Port view Port Group view
igmp-snooping last-member-query-interval
Use the igmp-snooping last-member-query-interval command to configure the interval of sending IGMP last-member queries in the VLAN. VLAN view
igmp-snooping max-response-time
Use the igmp-snooping max-response-time command to configure the maximum response time to IGMP general queries in the VLAN. VLAN view
igmp-snooping overflow-replace
Use the igmp-snooping overflow-replace command to enable the multicast group replacement function on the current port(s). Ethernet Port view Port Group view
26
igmp-snooping querier
Use the igmp-snooping querier command to enable the IGMP Snooping querier. VLAN view
igmp-snooping query-interval
Use the igmp-snooping query-interval command to configure the interval of sending IGMP general queries. VLAN view
igmp-snooping report-aggregation
Use the igmp-snooping report-aggregation command to enable IGMP report suppression. IGMP Snooping view
igmp-snooping router-aging-time
Use the igmp-snooping router-aging-time command to configure the aging time of router ports in the current VLAN. VLAN view
igmp-snooping source-deny
Use the igmp-snooping source-deny command to enable multicast source port filtering. Ethernet Port view Port Group view
igmp-snooping special-query source-ip
Use the igmp-snooping special-query source-ip command to configure the source IP address of IGMP group-specific queries. VLAN view
igmp-snooping static-group
Use the igmp-snooping static-group command to enable the static member port function, namely to configure a port or ports as static member port(s) of a multicast group or multicast source/group. Ethernet Port view Port Group view
igmp-snooping static-router-port
Use the igmp-snooping static-router-port command to enable the static router port function. Ethernet Port view Port Group view
igmp-snooping version
Use the igmp-snooping version command to configure the IGMP Snooping version. VLAN view
import-route
Use the import-route command to import routes and set route attributes. You can set the routing policy to import specified routes. RIP view
import-route info-center channel name
Use the info-center channel name command to name the channel of the specified number. System view
info-center console channel
Use the info-center console channel command to specify the channel to output system information to the console. System view
info-center enable
Use the info-center enable command to enable the information center. System view
info-center logbuffer
Use the info-center logbuffer command to enable information output to the log buffer through the specified channel (you can also set the size of the log buffer in this command). System view
info-center loghost
Use the info-center loghost command to specify a log host and to configure the related parameters. System view
info-center loghost source
Use the info-center loghost source command to configure the source interface through to output log information to the log host. System view
27
Use the info-center monitor channel command to configure the channel to output system information to the monitor. System view
info-center snmp channel
Use the info-center snmp channel command to configure the channel to output system information to the SNMP NMS. System view
info-center source
Use the info-center source command to specify the information source for a specified channel. System view
info-center synchronous
Use the info-center synchronous command to enable synchronous terminal output. System view
info-center timestamp loghost
Use the info-center timestamp loghost command to configure whether to include the year information in the output log information to the log host. System view
info-center timestamp
Use the info-center timestamp command to configure the time stamp format. System view
info-center trapbuffer
Use the info-center trapbuffer command to enable information output to the trap buffer. System view
instance
Use the instance command to map specified VLANs to a specified spanning tree instance. MST Region view
interface VLAN-interface
Use the interface Vlan-interface command to create a VLAN interface or enter VLAN interface view. System view
interface
Use the command interface command to enter the related interface view. System view
ip
Use the ip command to specify the IP address of an entity. PKI Entity view
ip address
Use the ip address command to specify the IP address and subnet mask for a VLAN interface. VLAN Interface view
ip address
Use the ip address command to assign an IP address (and mask) to a management VLAN interface. Interface view
ip address bootp-alloc
Use the ip address bootp-alloc command to enable an interface to obtain IP address through BOOTP protocol. Interface view
ip address dhcp-alloc
Use the ip address dhcp-alloc command to configure an interface to use DHCP for IP address acquisition. Interface view
ip forward-broadcast
Use the ip forward-broadcast command to enable the device to receive directed broadcast packets. System view
ip forward-broadcast [acl-number]
Use the ip forward-broadcast [ acl-number ] command in interface view to enable an interface to forward directed broadcast packets. VLAN Interface view Loopback Interface view
28
ip host
Use the ip host command to create a mapping between host name and IP address in the static resolving list. System view
ip http acl
Use the ip http acl command to apply an ACL to filter Web users. System view
ip http acl
Use the ip https acl command to associate the HTTPS server with an ACL. System view
ip http enable
Use the ip http enable command to launch the Web server System view
ip https certificate access-control-policy
Use the ip https certificate access-control-policy command to associate the HTTPS server with a certificate access control policy. System view
ip https enable
Use the ip https enable command to enable the HTTPS server function. System view
ip https ssl-server-policy
Use the ip https ssl-server-policy command to associate the HTTPS server with an SSL server-end policy. System view
ip ip-prefix
Use the ip ip-prefix command to configure an IP prefix list or an item. System view
ip-pool
Use the ip-pool command to configure a private IP address range for cluster members on the switch to be set as the management device. Cluster view
ip redirects enable
Use the ip redirects enable command to enable sending a devices ICMP redirection packet. System view
ip route-static
Use the ip route-static command to configure a unicast static route. System view
ip route-static default-preference
Use the ip route-static default-preference command to configure the default preference for static routes. System view
ip ttl-expires enable
Use the ip ttl-expires enable command to enable sending a devices ICMP timeout packet. System view
ip unreachables enable
Use the ip unreachables enable command to enable sending a devices ICMP destination unreachable packet. System view
ip ipv6-prefix ipv6 route-static jitter-interval
Use the jitter-interval command to configure the interval of sending jitter test packets. NQA Test Group view
jitter-packetnum
Use the jitter-packetnum command to configure the number of packets to be sent in a jitter test. NQA Test Group view
29
jumboframe enable
Use the jumboframe enable command to allow jumbo frames that are not larger than 9216 bytes to pass through the current Ethernet port. Ethernet Interface view Port Group view
key
Use the key command to set a shared key for the RADIUS authentication/authorization packets or accounting packets. RADIUS Scheme view
key
Use the key command to configure a shared key for TACACS+ authentication, authorization or accounting. TACACS+ Scheme view
lacp port-priority
Use the lacp port priority command to assign an LACP priority to the port or ports in the port group. Ethernet Interface view Port-Group view
lacp system-priority
Use the lacp system-priority command to assign an LACP priority to the local system. System view
language-mode
Use the language-mode command to toggle between the language modes (that is, language environments) of the command line interface (CLI) to meet your requirement. User view
last-member-query-interval
Use the last-member-query-interval command to configure the global interval of sending IGMP last-member queries. IGMP Snooping view
lcd
Use the lcd command to display the local work directory on the FTP client. FTP Client view
ldap-server
Use the ldap-server ip command to configure the LDAP server IP address and the port. PKI Domain view
level
Use the level command to set the priority level of the user. Local User view
link-aggregation group description
Use the link-aggregation group description command to configure a name or a description for the specified link aggregation group. System view
link-aggregation group mode
Use the link-aggregation group mode command to create a manual or static LACP link aggregation group. System view
local-proxy-arp enable
Use the local-proxy-arp enable command to enable local proxy ARP. VLAN Interface view
local-server
Use the local-server command to create a local RADIUS authentication server (that is, set the related parameters of the server). System view
local-user
Use the local-user command to add a local user and enter local user view. System view
local-user password-display mode
Use the local-user password-display-mode command to set the password display mode of all users. System view
30
locality
Use the locality command to name the geographical locality of an entity, by a city for example. PKI Entity view
lock
Use the lock command to lock the current user interface and prevent unauthorized users from accessing it. User view
logging-host
Use the logging-host command to configure a public logging host on the management device for member devices in the cluster. Cluster view
loopback
Use the loopback command to enable Ethernet Interface loopback testing. Ethernet Interface view
loopback-detection control enable
Use the loopback-detection control enable command to enable loopback detection for a Trunk port or Hybrid port. Ethernet Interface view
loopback-detection enable
Use the loopback-detection enable command to enable the loopback detection function globally or for a specific port. System view Ethernet Interface view
loopback-detection interval-time
Use the loopback-detection interval-time command to configure time interval for external loopback detection. System view
loopback-detection per-vlan enable
Use the loopback-detection per-vlan enable command to enable loopback detection in all VLANs with Trunk ports or Hybrid ports. Ethernet Port view
ls
Use the ls command to query for the name of all files and directories in the current directory. FTP Client view
ls
Use the ls command to display the files in the specified directory. This command functions as the dir command does. SFTP Client view
mac-address (Ethernet Port view)
Use the mac-address command to add or modify the MAC address table entry on a specified interface. Ethernet Port view
mac-address (System view)
Use the mac-address command to add or modify the MAC address table entry. System view
mac-address max-mac-count
Use the mac-address max-mac-count command to configure the maximum number of MAC addresses that can be learned by a specified Ethernet port, and whether to forward packets when the number of learned MAC addresses has reached the maximum number. Ethernet Port view Port Group view
mac-address timer
Use the mac-address timer command to configure the aging time of the dynamic address table entry. System view
mac-authentication
Use the mac-authentication command to enable MAC authentication globally. System view Ethernet Port view
mac-authentication domain
Use the mac-authentication domain command to specify the ISP domain for MAC authentication. System view
31
mac-authentication timer
Use the mac-authentication timer command to set the MAC authentication timers. System view
management-vlan
Use the management-vlan command to specify the management VLAN on the switch. Cluster view
max-response-time
Use the max-response-time command to configure the global value of the maximum response time to IGMP general queries. IGMP Snooping view
mdi
Use the mdi command to configure the cable type for an Ethernet interface. Ethernet Interface view
mirror-to interface
Use the mirror-to interface command to configure the action of mirroring traffic to a specified port. Traffic Behavior view
mirroring group
Use the mirroring-group command to create the port mirroring group. System view
mirroring-group mirroring-port
Use the mirroring-group mirroring-port command to add a source port to a mirroring group already created. System view
mirroring-group monitor-port
Use the mirroring-group monitor-port command to add a destination port to a mirroring group already created. System view
mirroring-port
Use the mirroring-port command to configure the present port as a mirroring port under interface view. Interface view
mkdir
Use the mkdir command to create a directory in a specified directory of a specified storage device. User view
mkdir
Use the mkdir command to create a directory on the remote FTP server. FTP Client view
mkdir
Use the mkdir command to create a directory on the remote SFTP server. SFTP Client view
more
Use the more command to display the content of a specified file. User view
move
Use the move command to move a file to a specified directory. You can also assign a new name for the file. User view
multicast-suppression
Use the multicast-suppression command to configure multicast storm suppression ratio. Ethernet Interface view Port Group view
multicast-vlan enable
Use the multicast-vlan enable command to configure the VLAN as a multicast VLAN. System view
multicast-vlan subvlan
Use the multicast-vlan subvlan command to configure a group of VLANs as the sub-VLANs of a multicast VLAN. System view
nas-ip
Use the nas-ip command to set the source IP address used by the switch to send RADIUS packets. RADIUS Scheme view
32
nas-ip
Use the nas-ip command to specify the source address for sending TACACS+ packets. TACACS+ Scheme view
ndp enable
Use the ndp enable command to enable NDP globally or on a port System view Ethernet Interface view
ndp timer aging
Use the ndp timer aging command to set the holdtime of the NDP information sent by the local switch, that is, to specify how long a device will hold the NDP packets received from the local device. After the aging timer expires, the device removes the received NDP neighbor node information. System view
ndp timer hello
Use the ndp timer hello command to set the interval to send NDP packets. System view
network
Use the network command to enable RIP on a specified network. RIP view
nm-interface vlan-interface
Use the nm-interface vlan-interface command to configure an NMS interface of the management device. Cluster view
nqa
Use the nqa command to create an NQA test group and enter NQA test group view. System view
nqa-agent enable
Use the nqa-agent enable command to enable the NQA client. System view
nqa-agent max-requests
Use the nqa-agent max-requests command to set the maximum number of tests that the NQA client can simultaneously perform. System view
nqa-server enable
Use the nqa-server enable command to enable the NQA server. System view
nqa-server tcpconnect
Use the nqa-server tcpconnect command to create a TCP listening service. System view
nqa-server udpecho
Use the nqa-server udpecho command to create a UDP connection. System view
ntdp enable
Use the ntdp enable command enable NTDP globally or on a port. System view Ethernet Port view
ntdp explore
Use the ntdp explore command to start topology information collection manually. User view
ntdp hop
Use the ntdp hop command to set a range (in terms of hop count) for topology information collection. System view
ntdp timer
Use the ntdp timer command to configure the interval to collect topology information. System view
ntdp timer hop-delay
Use the ntdp timer hop-delay command to set the delay time for a switch to forward topology-collection request packets. System view
33
Use the ntdp timer port-delay command to set the delay time for a switch to forward a received topology-collection request packet through its successive ports. System view
ntp-service access
Use the ntp-service access command to set the authority to access the local equipment. System view
ntp-service authentication enable
Use the ntp-service authentication enable command to enable the NTP-service authentication. System view
ntp-service authentication-keyid
Use the ntp-service authentication-keyid command to configure an NTP authentication key. System view
ntp-service broadcast-client
Use the ntp-service broadcast-client command to configure an Ethernet switch to operate in NTP broadcast client mode. VLAN Interface view
ntp-service broadcast-server
Use the ntp-service broadcast-server command to configure the device to work in the NTP broadcast server mode. VLAN Interface view
ntp-service in-interface disable
Use the ntp-service in-interface disable command to disable an interface to receive NTP message. VLAN Interface view
ntp-service max-dynamic sessions
Use the ntp-service max-dynamic-sessions command to set the maximum number of dynamic NTP sessions. System view
ntp-service multicast-client
Use the ntp-service multicast-client command to configure the device to work in the NTP multicast client mode. VLAN Interface view
ntp-service multicast-server
Use the ntp-service multicast-server command to configure an Ethernet switch to operate in NTP multicast server mode. VLAN Interface view
ntp-service reliable authentication-keyid
Use the ntp-service reliable authentication-keyid command to specify that the created authentication key is a trusted key. When NTP authentication enabled, a client can be synchronized only to a server that can provide a trusted authentication key. System view
ntp-service source-interface
Use the ntp-service source-interface command to designate an interface to transmit NTP message. System view
ntp-service unicast-peer
Use the ntp-service unicast-peer command to designate a symmetric-passive peer for the device. System view
ntp-service unicast-server
Use the ntp-service unicast-server command to designate an NTP server for the device. System view
open
Use the open command to log onto the IPv4 FTP server under the FTP client view. FTP Client view
organization
Use the organization command to specify the name of the organization to which the entity belongs. PKI Entity view
34
organizational-unit
Use the organizational-unit command to specify the name of the organization unit to which this entity belongs. PKI Entity view
overflow-replace
Use the overflow-replace command to enable the multicast group replacement function globally. IGMP Snooping view
parity
Use the parity command to set the check mode of the user interface. AUX User Interface view only
passive
Use the passive command to set the data transmission mode to passive mode. FTP Client view
password
Use the password command to set a password for the local user. Local User view
password
Use the password command to configure a password used to log in to the FTP server. NQA Test Group view
peer
Use the peer command to define IP addresses of RIP neighboring routers in the NBMA (Non-Broadcast Multi-Access) network. After configuring this command, updating messages are unicast to the peer rather than multicast or broadcast. RIP view
peer-public-key end
Use the peer-public-key end command to return to system view from public key view. Public Key view
ping
Use the ping command to check the IP network connection and the reachability of the host. Any view
pki certificate access-control-policy
Use the pki certificate access-control-policy command to create a certificate attribute access control policy. System view
pki certificate attribute-group
Use the pki certificate attribute-group command to create a certificate attribute group. This command also leads you to certificate attribute group view. System view
pki delete-certificate
Use the pki delete-certificate command to delete the locally stored certificates. System view
pki-domain
Use the pki-domain command to configure the PKI domain to which an SSL server policy or SSL client policy belongs. SSL Server Policy view SSL Client Policy view
pki domain
Use the pki domain command to enter PKI domain view, and configure the parameters of LDAP server and for certificate request and authentication. System view
pki entity
Use the pki entity command to name a PKI entity and enter PKI entity view. System view
pki import-certificate
Use the pki import-certificate command to import an existing CA certificate or local certificate. System view
35
pki request-certificate
Use the pki request-certificate command to deliver certificate request through SCEP to CA for the generated RSA key pair. System view
pki retrieval-certificate
Use the pki retrieval-certificate command to download a certificate from the certificate issuing server. System view
pki retrieval-crl domain
Use the pki retrieval-crl command to obtain the latest CRL from CRL server for the verification of the validity of a current certificate. System view
pki validate-certificate
Use the pki validate-certificate command to verify the validity of a certificate. System view
poe disconnect
Use the poe disconnect command to configure a PD disconnection detection mode. System view
poe enable
Use the poe enable command to enable PoE on a PoE interface. PoE Interface view PoE-Profile File view
poe legacy enable
Use the poe legacy enable command to enable the PSE to supply power to the detected non-standard PDs. System view
poe max power
Use the poe max-power command to configure the maximum power for a PoE interface. PoE Interface view PoE-Profile File view
poe mode
Use the poe mode command to configure a PoE mode. Ethernet Port view
poe pd-description
Use the poe pd-description command to configure a description for the PD connected to a PoE interface. PoE Interface view
poe pd-policy priority
Use the poe pd-policy priority command to configure a PD power management priority policy. System view
poe priority
Use the poe priority command to configure the power supply priority on a port. PoE Interface view PoE-Profile File view
poe-profile
Use the poe-profile profile-name command to create a PoE configuration file and enter PoE-profile view. System view
poe update
Use the poe update command to upgrade the PSE processing software online System view
poe utilization-threshold
Use the poe utilization-threshold command to configure a power alarm threshold for the PSE. System view
port
Use the port command to add one Access port or a group of Access ports to a VLAN. VLAN view
port access vlan
Use the port access vlan command to add the current Access port to a specified VLAN. Ethernet Port view Port Group view
36
port-group
Use the port-group manual command to enter a specified manual port group view. If the manual port group does not exist, create it before entering its view. Use the port-group aggregation command to enter a port group aggregation view. System view
port-group aggregation
Use the port-group aggregation command to enter aggregation port group view. System view
port hybrid pvid vlan
Use the port hybrid pvid vlan command to configure the default VLAN ID of the hybrid port. Ethernet Port view Port Group view
port hybrid vlan
Use the port hybrid vlan command to add the current Hybrid port to the specified VLAN(s). Ethernet Port view Port Group view
port-isolate enable
Use the port isolate command to add an Ethernet port to the isolation group. Ethernet Port view Port Group view
port link-aggregation group
Use the port link-aggregation group agg_id command to assign the Ethernet port to the specified link aggregation group (manual or static LACP). Ethernet Interface view
port trunk permit vlan
Use the port trunk permit vlan command to add a trunk port to one VLAN, a selection of VLANs, or all VLANs. Ethernet Port view Port Group view
port trunk pvid vlan
Use the port trunk pvid vlan command to configure the default VLAN ID for a trunk port. Ethernet Port view Port Group view
prefer-cipher
Use the prefer-cipher command to configure the preferred cipher suite for SSL client policy. SSL Client Policy view
preference
Use the preference command to define the route priority. RIP view
preference primary accounting
Use the primary accounting command to set the IP address and port number of the primary RADIUS accounting server. RADIUS Scheme view
primary accounting
Use the primary accounting command to configure a primary TACACS+ accounting server. TACACS+ Scheme view
primary authentication
Use the primary authentication command to set the IP address and port number of the primary RADIUS authentication/authorization server. RADIUS Scheme view
primary authentication
Use the primary authentication command to configure a primary TACACS+ authentication server. TACACS+ Server Group view
primary authorization
Use the primary authorization command to configure a primary TACACS+ authorization server. TACACS+ Scheme view
37
probe-failtimes
Use the probe-failtimes command to set the number of consecutive probe failures in an NQA test before a trap message is sent to the network management server to indicate a probe failure. NQA Test Group view
protocol inbound
Use the protocol inbound command to configure the protocols supported in the current user interface. VTY User Interface view only
protocol inbound
Use the protocol inbound command to enable the current user interface to support Telnet, PAD, SSH, or all of them. VTY User Interface view
proxy-arp enable
Use the proxy-arp enable command to enable proxy ARP. VLAN Interface view
public-key-code begin
Use the public-key-code begin command to enter RSA key code view. Public Key view
public-key-code end
Use the public-key-code end command to return from public key code view to public key view and to save the configured public key. RSA Key Code view
put
Use the put command to upload a local file to the remote SFTP server. FTP Client view
put
Use the put command to upload a local file to the remote SFTP server. SFTP Client view
pwd
Use the pwd command to display the current path. User view
pwd
Use the pwd command to display the current directory on the FTP server. FTP Client view
pwd
Use the pwd command to display working directories on a remote SFTP server. SFTP Client view
qos apply policy
Use the qos apply policy command to apply the associated policy on the port. Gigabit Ethernet Port view
qos lr
Use the qos lr command to limit the rate of inbound or outbound traffic via physical interfaces. Interface view
qos map-table
Use the qos map-table command to enter the specified priority mapping view. System view
qos policy
Use the qos policy command to define a policy and enter policy view. System view
qos priority
Use the qos priority command to configure the port priority of the current port. Gigabit Ethernet Port view
qos sp
Use the qos sp command to configure SP queuing on the current port. Ethernet Port view
qos vlan-policy
Use the qos vlan-policy command to apply a QoS policy to specified VLANs. System view
38
qos wrr
Use the qos wrr weight command to configure the WRR queue or modify the parameters of the WRR queue on the port. Gigabit Ethernet Port view
quit
Use the quit command to return from current view to lower level view, or exit the system if current view is user view. Any view
quit
Use the quit command to terminate the connection to the remote FTP server. FTP client view
quit
Use the quit command to terminate the connection to the remote SFTP server and return to system view.. User view
radius nas-ip
Use the radius nas-ip command to set the source IP address used by the switch to send RADIUS packets. System view
radius scheme
Use the radius scheme command to create a RADIUS scheme and enter its view. System view
reboot
Use the reboot command to reset the entire system. User view
reboot member
Use the reboot member command to reboot a specified member device on the management device. Cluster view
redirect
Use the redirect command to configure the traffic redirect action for the traffic behavior. Traffic Behavior view
region-name
Use the region-name command to set an MST region name to a switch. MST Region view
remark dot1p
Use the remark dot1p command to configure the 802.1p priority value in the VLAN packets of a class. Traffic Behavior view
remark dsc
Use the remark dscp command to configure the DSCP value of a packet. Traffic Behavior view
remark ip-precedence
Use the remark ip-precedence command to configure the IP priority of a packet. Traffic Behavior view
remark local-precedence
Use the remark local-precedence command to configure the local precedence of a packet. Traffic Behavior view
remotehelp
Use the remotehelp command to display help information about the FTP protocol command. FTP Client view
rmdir
Use the rmdir command to delete a specified directory from a remote SFTP server. SFTP Client view
remove
Use the remove command to delete the specified file from a remote server. SFTP Client view
rename
39
rename
Use the rename command to change a specified file name or directory name on an SFTP server. SFTP Client view
reset acl counter
Use the reset acl counters command to clear statistics about specified or all IPv4 ACLs. User view
reset arp
Use the reset arp command to clear the ARP entries from the ARP mapping table. User view
reset counters interface
Use the reset counters interface command to reset statistics for a specified interface. User view
reset dhcp relay statistics
Use the reset dhcp relay statistics command to remove statistics from the relay agent. User view
reset dns dynamic-host
Use the reset dns dynamic-host command to clear the cache. User view
reset dot1x statistics
Use the reset dot1x statistics command to clear the statistics of 802.1x. User view
reset garp statistics
Use the reset garp statistics command to clear the GARP statistics (such as the information about the packets received/sent/discarded by GVRP/GMRP) on specified (or all) ports. User view
reset hwatacs statistics
Use the reset hwtacacs statistics command to clear TACACS+ protocol statistics.reset hwtacacs statistics User view
reset igmp-snooping group
Use the reset igmp-snooping group command to clear IGMP Snooping entries. User view
reset igmp-snooping statistics
Use the reset igmp-snooping statistics command to clear the statistics information of IGMP messages learned by IGMP Snooping. User view
reset ip ip-prefix
Use the reset ip ip-prefix command to delete statistics of a specified IPv4 address prefix. If no ip-prefix-name is specified, the statistics of all the IPv4 address prefixes will be deleted. User view
reset ip routing-table
Use the reset ip routing-table command to reset routing table statistics for the routing table. User view
reset ip statistics
Use the reset ip statistics command to clear the IP statistics information. User view
reset ip ipv6-prefix reset ipv6 routing-table statistics reset lacp statistics
Use the reset lacp statistics command to clear statistics about LACP on specified or all ports. User view
reset logbuffer
Use the reset logbuffer command to reset the log buffer contents. User view
reset ndp statistics
Use the reset ndp statistics command to clear NDP statistics. User view
40
Use the reset qos vlan-policy command to clear QoS policy statistics on VLAN(s). User view
reset radius statistics
Use the reset radius statistics command to clear the statistics about the RADIUS protocol. User view
reset recycle-bin
Use the reset recycle-bin command to completely delete file(s) in the recycle bin in the Flash. User view
reset rip statistics
Use the reset rip statistics command to clear the statistics information in specified RIP process. User view
reset saved-configuration
Use the reset saved-configuration command to erase the startup configuration file. User view
reset stop-accounting-buffer
Use the reset stop-accounting-buffer command to delete the buffered no-response stop-accounting request packets. User view
reset stop-accounting-buffer
Use the reset stop-accounting-buffer command to clear the stop-accounting requests that have no response and are buffered on the switch. User view
reset stp
Use the reset stp command to clear the MSTP statistics of specified Ethernet ports. User view
reset tcp statistics
Use the reset tcp statistics command to clear the TCP statistics information. User view
reset trapbuffer
Use the reset trapbuffer command to reset the trap buffer contents. User view
reset udp-helper packet
Use the reset udp-helper packet command to clear statistics about the packets forwarded. User view
reset udp statistics
Use the reset udp statistics command to clear the UDP statistics information. User view
reset unused porttag
User the command reset unused porttag to clear the unused 16-bit interface index in the current system User view
restore startup-configuration
Use the restore startup-configuration command to download a configuration file from the specified TFTP server and set it as the configuration file for next startup. User view
retry
Use the retry command to set the maximum number of transmission attempts of RADIUS requests. RADIUS Scheme view
retry realtime-accounting
Use the retry realtime-accounting command to set the maximum number of real-time accounting request attempts. RADIUS Scheme view
retry stop-accounting
Use the retry stop-accounting command to set the maximum number of transmission attempts of the stop-accounting requests buffered due to no response. RADIUS Scheme view
41
retry stop-accounting
Use the retry stop-accounting command to enable stop-accounting packet retransmission and configure the maximum number of stop-accounting request attempts. TACACS+ Scheme view
return
Use the return command to return to user view from any other view. System view or higher level views
revision-level
Use the revision-level command to set the MSTP revision level for a switch. MST Region view
rip
Use the rip command to create a RIP process in system view. System view
rip authentication-mode
Use the rip authentication-mode command to configure RIP-2 authentication mode and corresponding parameters. Interface view
rip input
Use the rip input command to allow an interface to receive RIP packets. Interface view
rip metricin
Use the rip metricin command to add an additional metric to the received routes. Interface view
rip metricout
Use the rip metricout value command to add an additional metric to the outgoing routes. Interface view
rip output
Use the rip output command to enable an interface to receive RIP messages. Interface view
rip poison-reverse
Use the rip poison-reverse command to enable the poison reverse function for RIP. Interface view
rip split-horizon
Use the rip split-horizon command to enable the split horizon function for RIP. Interface view
rip summary-address
Use the rip summary-address command to assign a summary IP address Interface view
rip version
Use the rip version command to configure the version of RIP packets on an interface. Interface view
rmdir
Use the rmdir command to delete the specified directory from the remote FTP server. FTP Client view
rmon alarm
Use the rmon alarm command to create an entry in the RMON alarm table. System view
rmon event
Use the rmon event command to create an entry in the RMON event table. System view
rmon history
Use the rmon history command to create an entry in the RMON history control table. Ethernet Port view
42
rmon prialarm
Use the rmon prialarm command to create an entry in the private alarm table of RMON. System view
rmon statistics
Use the rmon statistics command to create an entry in the RMON statistics table. Ethernet Port view
root-certificate fingerprint
Use the root-certificate fingerprint command to configure the fingerprint for authenticating the CA root certificate. PKI Domain view
route-policy
Use the route-policy command to create a routing policy and enter its view. System view
route-policy router-aging-time
Use the router-aging-time command to configure the global aging time of router ports. IGMP Snooping view
ripng ripng default-route ripng enable ripng poison-reverse ripng split-horizon ripng summary-address rsa local-key-pair create
Use the rsa local-key-pair create command to create the RSA host key pair and server key pair. System view
rsa local-key-pair destroy
Use the rsa local-key-pair destroy command to destroy the RSA host key pair and server key pair. System view
rsa local-key-pair export
Use the rsa local-key-pair create command to create the RSA host key pair and server key pair. System view
rsa peer-public-key
Use the rsa peer-public-key command to enter public key view. Use the rsa peer-public-key import sshkey command to import a public key from a public key file and name the public key. System view
rule
Use the rule command to create a certificate attribute access control rule. Certificate Attribute Access Control Policy view
rule (advanced IPv4 ACL)
Use the rule command to define or modify an ACL rule. If the rule does not exist, it is created first. Advanced IPv4 ACL view
rule (basic IPv4 ACL)
Use the rule command to create an IPv4 ACL rule or modify the rule if it has existed. Basic IPv4 ACL view
rule (Ethernet frame header ACL)
Use the rule command to create an ACL rule or modify the rule if it has existed. Ethernet frame header ACL view
rule comment
Use the rule comment command to create or modify an ACL rule description, for example to describe the purpose of the ACL rule or its attributes. Advanced ACL view / Layer 2 ACL view
save
Use the save command to save the current configuration to a configuration file in the flash memory. Any view
43
schedule reboot at
Use the schedule reboot at command to enable the scheduled reboot function of the router and schedule the reboot time and date. User view
schedule reboot delay
Use the schedule reboot delay command to enable the timing reboot switch function and set the waiting time. User view
screen-length
Use the screen-length command to set the number of lines the terminal screen can contain. User Interface view
secondary accounting
Use the secondary accounting command to set the IP address and port number of the secondary RADIUS accounting server. RADIUS Scheme view
secondary accounting
Use the secondary accounting command to configure a secondary TACACS+ accounting server. TACACS+ Scheme view
secondary authentication
Use the secondary authentication command to set the IP address and port number of the secondary RADIUS authentication/authorization server. RADIUS Scheme view
secondary authentication
Use the secondary authentication command to configure a secondary TACACS+ authentication server. TACACS+ Scheme view
secondary authorization
Use the secondary authorization command to configure a secondary TACACS+ authorization server. TACACS+ Scheme view
self-service-url
Use the self-service-url command to enable the self-service server location function. Use the self-service-url disable command to disable the self-service server location function ISP Domain view
send
Use the send command to send messages to a specified user interface or all user interfaces. User view
send-trap
Use the send-trap command to enable the Trap debugging (A Trap message is sent to the network management server). NQA Test Group view
sendpacket passroute
Use the sendpacket passroute command to enable routing table bypass function to test the direct connectivity to the destination. NQA Test Group view
server-type
Use the server-type command to configure the RADIUS server type supported by the Switch. RADIUS Scheme view
service-type
Use the command service-type to specify the login type and the corresponding available command level. Local User view
service-type
Use the command service-type to authorize a user access to the specified services. Local User view
service-type ftp
Use the service-type ftp command to configure the FTP service type and accessible directories for users. Local User view
44
session
Use the session command to configure the maximum number of sessions that can be buffered and the session timeout time. SSL Server Policy view
set authentication password
Use the set authentication password command to set the local password. User Interface view
sftp
Use the sftp command to initiate a connection to the remote SFTP server and enter SFTP client view. System view
sftp client source
Use the sftp client source command to specify the source IP address or interface of the SFTP client. System view
sftp server enable
Use the sftp server enable command to enable the secure FTP (SFTP) server. System view
sftp server idle time-out
Use the sftp server idle-timeout command to set the idle timeout period for SFTP user connections. System view
shell
Use the shell command to make terminal services available for the user interface. User Interface view
shutdown
Use the shutdown command to disable the VLAN interface. VLAN Interface view
shutdown
Use the shutdown command to shut down an Ethernet interface. Ethernet Interface view
silent-interface
Use the silent-interface command to disable an interface from sending RIP route update messages. RIP view
snmp-agent
Use the snmp-agent community command to set a community name and to enable users to access the switch through SNMP. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent community
Use the snmp-agent community command to configure a new SNMP community. System view
snmp-agent group
Use the snmp-agent group command to configure a SNMP group. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent group
Use the snmp-agent group command to configure a new SNMP group and specify its access right. System view
snmp-agent local-engineid
Use the snmp-agent local-engineid command to configure a local engine ID for an SNMP entity. System view
snmp-agent mib-view
Use the snmp-agent mib-view command to create or update MIB view information so that MIB objects can be specified. System view
45
Use the snmp-agent packet max-size command to configure the maximum number of bytes in an SNMP packet that can be received or sent by an agent. System view
snmp-agent sys-info
Use the snmp-agent sys-info command to configure system information, including the contact information, the location information, and the SNMP version in use. System view
snmp-agent target-host
Use the snmp-agent target-host command to command to configure the related settings for a Trap target host. System view
snmp-agent trap enable
Use the snmp-agent trap enable command to enable the device to send Trap packets. System view
snmp-agent trap life
Use the snmp-agent trap life command to configure the life time for Trap packets. Traps will be discarded when their life time expires. System view
snmp-agent trap queue-size
Use the snmp-agent trap queue-size command to configure the size of the Trap queue. System view
snmp-agent trap source
Use the snmp-agent trap source command to specify the source IP address to send Trap packets. System view
snmp-agent usm-user
Use the snmp-agent usm-user command to add a new user to an SNMP group. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent usm-user
Use the snmp-agent usm-user command to add a user to an SNMP group. System view
snmp-host
Use the snmp-host command to configure an SNMP host for the member devices inside a cluster on the management device. Cluster view
source-deny
Use the source-deny command to enable multicast source port filtering. IGMP Snooping view
source-interface
Use the source-interface command to configure the source interface from which a test request packet is sent. In this case, the routing table is not searched. NQA Test Group view
source-ip
Use the source-ip command to configure a source IP address for a test request packet. NQA Test Group view
source-port
Use the source-port command to configure a source port number for a test request packet. NQA Test Group view
speed
Use the speed command to set the transmission speed of the user interface. AUX User Interface view
speed
Use the speed command to configure Ethernet interface data rate. Ethernet Interface view
ssh client authentication server
Use the ssh client assign rsa-key command to configure the host public key of the server so that the client can determine whether the server is reliable. System view
46
Use the ssh client first-time enable command to configure the client to run the initial authentication. System view
ssh client source
Use the ssh client source command to specify the source IP address or source interface of the SSH client. System view
ssh server authentication-retries
Use the ssh server authentication-retries command to set the maximum number of SSH connection authentication attempts, which is validated at next login. System view
ssh server authentication time-out
Use the ssh server authentication-timeout command to set the SSH user authentication timeout period on the SSH server. System view
ssh server compatible-ssh1x enable
Use the ssh server compatible-ssh1x command to enable the SSH server to work with SSH1.x clients. System view
ssh server enable
Use the ssh server enable command to enable SSH server. System view
ssh server rekey-interval
Use the ssh server rekey-interval command to set the interval for updating the server key pair. System view
ssh user assign rsa-key
Use the ssh user assign rsa-key command to assign an existing public key to a user. If the user does not exist, the command creates the user with the authentication method of RSA and the default service type of stelnet at first. System view
ssh user authentication-type
Use the ssh user authentication-type command to specify the authentication method for an SSH user. If the specified user does not exist, the command creates the user with the default service type of stelnet at first. System view
ssh user service-type
Use the ssh user service-type command to specify service type for a user. System view
ssh2
Use the ssh2 command to enable the connection between SSH client and server, define key exchange algorithm preference, encryption algorithm preference and HMAC algorithm preference on the server and client. System view
ssl client-policy
Use the ssl client-policy command to create an SSL policy and enter its view. System view
ssl server-policy
Use the ssl server-policy command to create an SSL server policy and enter its view. System view
startup saved-configuration
Use the startup saved-configuration command to specify a main configuration file for next startup. The specified file must be ended with a .cfg extension and saved in the root directory of the storage device. User view
state
Use the state command to configure the state of the current ISP domain/current user. ISP Domain view Local User view
state
Use the state command to set the status of a RADIUS server. RADIUS Scheme view
47
state
Use the state command to clarify the name of the state where an entity lies. PKI Entity view
step
Use the step command to set a rule numbering step. Basic IPv4 ACL view Advanced IPv4 ACL view Ethernet Frame Header ACL view
stop-accounting-buffer enable
Use the stop-accounting-buffer enable command to enable the switch to buffer the stop-accounting requests that bring no response. RADIUS Scheme view
stop-accounting-buffer enable
Use the stop-accounting-buffer enable command to enable the switch to buffer the stop-accounting requests that bring no response. TACACS+ Scheme view
stp
Use the stp command to enable or disable the MSTP feature globally or for a port or a group of ports. System view Ethernet Port view Port Group view
stp bpdu-protection
Use the stp bpdu-protection command to enable the BPDU protection function. System view
stp bridge-diameter
Use the stp bridge-diameter command to set the network diameter of a switched network, which is represented in terms of the maximum number of switches between any two terminals in a switched network. System view
stp compliance
Use the stp compliance command to configure the MSTP packet format for a port or a group of ports Ethernet Port view Port Group view
stp cost
Use the stp cost command to set the path cost of a port or a group or ports in the specified MST instance. Ethernet Port view Port Group view
stp edged-port
Use the stp edged-port command to configure the current Ethernet port as either an edge port or a non-edge port. Ethernet Port view Port Group view
stp loop-protection
Use the stp loop-protection command to enable the loop guard function for a port or a group of ports. Ethernet Port view Port Group view
stp max-hops
Use the stp max-hops command to set the maximum hop count of the MST region to which the switch belongs. System view
stp mcheck
Use the stp mcheck command to carry out the mCheck operation globally or on a port. Ethernet Port view System view
stp mode
Use the stp mode command to set the MSTP operation mode of the switch. System view
stp pathcost-standard
Use the stp pathcost-standard command to set the standard used for calculating the default path costs of ports. System view
48
stp point-to-point
Use the stp point-to-point command to specify whether the current port connects to a point-to-point link. Ethernet Port view
stp port priority
Use the stp port priority command to set the priority of a port or a group or ports in the specified MST instance. Ethernet Port view Port Group view
stp priority
Use the stp priority command to set the priority of a switch in a spanning tree instance. System view
stp region-configuration
Use the stp region-configuration command to enter MST region view. System view
stp root primary
Use the stp root primary command to configure the current switch to be the root bridge of a specified spanning tree instance. System view
stp root-protection
Use the stp root-protection command to enable the root guard function for a port or a group of ports. Ethernet Port view Port Group view
stp root secondary
Use the stp root secondary command to configure the current switch as a secondary root bridge of a specified spanning tree instance. System view
stp tc-protection
Use the stp tc-protection command to enable or disable the TC-BPDU attack prevention function for the switch. System view
stp timer-factor
Use the stp timer-factor command to configure the timeout time of the device by setting the timeout factor. Timeout time = timeout factor 3 hello time. System view
stp timer forward-delay
Use the stp timer forward-delay command to set the Forward delay for a switch. System view
stp timer hello
Use the stp timer hello command to set the Hello time for a switch. System view
stp timer max-age
Use the stp timer max-age command to set the max age timer of the device. System view
stp transmit-limit
Use the stp transmit-limit command to set the maximum transmission rate of a port or a group of ports. Ethernet Port view
stopbits
Use the stopbits command to set the stop bits of the user interface. AUX User Interface view
summary
Use the summary command to enable RIP summarization. Summarized routes are advertised as routes with natural masks. RIP view
super password
Using super password command, you can configure the password for changing the user from a lower level to a higher level. System view
49
sysname
Use the sysname command to set the system name of the Switch. System view
sysname
Use the sysname command to set the system name of the Switch. System view
system-view
Enter system-view to enter the system view from the user view. User view
tcp timer fin-timeout
Use the tcp timer fin-timeout command to configure the TCP finwait timer. System view
tcp timer syn-timeout
Use the tcp timer syn-timeout command to configure the TCP synwait timer. System view
tcp window
Use the tcp window command to configure the size of the transmission and receiving buffers of the connection-oriented socket. System view
telnet
Use the telnet command to Telnet to another switch from the current switch to manage the former remotely. You can terminate a Telnet connection by pressing <Ctrl + K>. User view
terminal debugging
Use the terminal debugging command to configure to display the debugging information on the terminal. User view
terminal debugging
Use the terminal debugging command to enable the display of debug information on the current terminal. User view
terminal logging
Use the terminal logging command to enable the display of log information on the current terminal. User view
terminal monitor
Use the terminal monitor command to enable the monitoring of system information on the current terminal. User view
terminal trapping
Use the terminal trapping command to enable the display of trap information on the current terminal. User view
terminal type
Use the terminal type command to set the terminal type. User interface view
test-enable
Use the test-enable command to enable the NQA test. NQA Test Group view
test-failtimes
Use the test-failtimes command to configure the minimum number of probe failures in a test before a Trap message is sent to the network management server to indicate a test failure. NQA Test Group view
test-type
Use the test-type command to configure the type of the test. NQA Test Group view
tftp get
Use the tftp get command to download a file from a TFTP server to this switch. User view
tftp put
Use the tftp put command to upload a file from the switch to the specified directory on the TFTP server. User view
50
tftp sget
Use the tftp sget command to download in security mode the file from the specified directory on the TFTP server and save it on the local device. User view
tftp-server
Use the tftp-server command to configure a TFTP server for cluster members on the management device. Cluster view
tftp-server acl
Use the tftp-server acl command to reference an ACL to control access to the TFTP server. System view
timeout
Use the timeout command to configure the probe time-out time. If no response packet is received within the time-out time of a request packet, the probe fails. NQA Test Group view
time-range
Use the timer command to set the interval to send handshake packets. Cluster view
timers timer quiet
Use the timer quiet command to set the wait time for the primary server to restore the active state. RADIUS Scheme view
timer quiet
Use the timer quiet command to set the duration that a primary server must wait before it can resume the active state. TACACS+ Scheme view
timer realtime-accounting
Use the timer realtime-accounting command to set the real-time accounting interval. RADIUS Scheme view
timer realtime-accounting
Use the timer realtime-accounting command to configure a real-time accounting interval. TACACS+ Scheme view
timer response-timeout
Use the timer response-timeout command to set the response timeout time of RADIUS servers. RADIUS Scheme view
timer response-timeout
Use the timer response-timeout command to set the response timeout time of TACACS servers. TACACS+ Scheme view
timers
Use the topology accept command to confirm the current topology information of the cluster and save that as a standard topology. Cluster view
topology restore-from
Use the topology restore-from command to obtain and restore the standard topology information from the local flash. Cluster view
topology save-to
Use the topology save-to command to save the standard topology information into the local flash. Cluster view
tos
Use the tos command to assign a value to the ToS field in the header of HWPing test packets. NQA Test Group view
51
tracert
Use the tracert command to trace the gateways the test packets passes through during its journey from the source to the destination. Any view
traffic behavior
Use the traffic behavior command you can define a traffic behavior and enter the behavior view. System view
traffic classifier
Use the traffic classifier command to define a class and enter the class view. System view
ttl
Use the ttl command to configure the maximum number of hops a test request packet traverses in the network. NQA Test Group view
udp-helper enable
Use the udp-helper enable command to enable the UDP Helper, allowing the device to convert a UDP broadcast packet into a unicast packet and send it to the specified server. System view
udp-helper port
Use the udp-helper port command to specify the port whose UDP packets are to be forwarded. System view
udp-helper server
Use the udp-helper server command to specify the destination server for the UDP packets to be forwarded. Interface view
undelete
Use the undelete command to restore a file from the recycle bin. User view
unicast-suppression
Use the unicast-suppression command to configure unicast storm suppression ratio. Ethernet Interface view Port Group view
user
Use the user command to log onto the FTP server as a particular user. FTP Client view
user-interface
Using user-interface command to enter one or more user interface views to perform configuration. System view
username
Use the username command to configure a name used for logging onto the FTP server. NQA Test Group view
user-name-format
Use the user-name-format command to set the format of the user names to be sent to RADIUS server. RADIUS Scheme view
user-name-format
Use the user-name-format command to configure the username format sent to the TACACS server. TACACS+ Scheme view
user privilege level
Use the user privilege level level command to configure the command level that a user can access from the specified user interface. User Interface view
validate source address
Use the validate-source-address command to enable the source address validation for received RIP updating routes. RIP view
verbose
Use the verbose command to enable the verbose function, which displays execution and response information of other related commands. FTP Client view
52
version
Use the version command to define a global RIP version. RIP view
version
Use the version command to configure the SSL protocol version adopted by an SSL client policy. SSL Client Policy view
virtual-cable-test
Use the virtual-cable-test command to enable the system to test the cable connected to a specific port and to display the results. Ethernet Interface view
vlan
Use the vlan command to create a VLAN. Use the vlan vlan-id command to enter a VLAN interface view. The VLAN interface must be created first before entering its view. System view
vlan-mapping modulo
Use the vlan-mapping modulo command to map VLANs to specific spanning tree instances. MST Region view
voice vlan
Use the voice vlan command to enable the voice VLAN function globally. System view
voice vlan aging
Use the voice vlan aging command to set the aging time for a voice VLAN. System view
voice vlan enable
Use the voice vlan enable command to enable the voice VLAN function for a port. Ethernet Port view
voice vlan mac-address
Use the voice vlan mac-address command to set a MAC address used for a voice VLAN to identify voice devices. System view
voice vlan mode auto
Use the voice vlan mode auto command to configure an Ethernet port to operate in the automatic voice VLAN mode. Ethernet Port view
voice vlan security enable
Use the voice vlan security enable command to enable the voice VLAN security mode. System view