Vous êtes sur la page 1sur 52

3COM SWITCH 4500G FAMILY QUICK REFERENCE GUIDE

Overview
This Command Reference applies to the following Switch 4500G models:
Switch 4500G 24-Port (3CR17761-91) Switch 4500G 24-Port PWR (3CR17771-91) Switch 4500G 48-Port (3CR17762-91) Switch 4500G 48-Port PWR (3C17772-91)

About the Command Line Interface


To use and navigate the command line interface of your unit, please refer to the following points for assistance:

When initially accessing the command line interface, press Enter when prompted. The User View menu for the unit is

displayed. This is indicated by the chevron brackets around the name of the unit at the prompt, for example, <4500G>.

When in the System View menu, square brackets appear around the name of the unit at the prompt, for example,

[4500G].

You must be in the System View menu to access the configurable CLI commands. Some commands can be entered directly at any prompt from anywhere in the interface.
If you enter part of a command followed by a ? (with no space between), the CLI will show you all the commands

that begin in that way.


The term view may be used interchangeably with the term menu.
The undo command is placed before the command you wish to undo, for example, undo setauthentication password.

<CTRL-A> places the cursor back to the start of the command line.
Enter the first few characters of a command and press TAB to enter the full command without having to input the

entire command (where there is only one command that starts with the entered characters).

Use the Up Arrow key at the prompt to repeat the previous command string.
Use the Delete key to delete the character after the cursor; the Backspace key deletes the character before the cursor. When entering physical port numbers, Enter the port number as x/0/z, where x is the unit number and z is the

physical port number.

Copyright 2006-2008, 3Com Corporation. All rights reserved. www.3Com.com Part Number: 10014902 Rev. AB Published: February 2008

3Com Switch 4500G Family Command Reference

Displaying Command Parameters


At the prompt, enter the name of the command followed by a space and ?. For example:
<4500G>boot ?

The following parameters are displayed:


attribute-switch boot-loader bootrom web-package

Exchange the file main-attribute and backup-attribute. Select a file to boot at the next time Update Bootrom Set web resource package

To specify boot loader, enter the command as follows:


<4500G>boot boot-loader ?

You only need to enter ? if parameters exist for the command.

Displaying Parent Menus


At the prompt, enter quit.

Displaying the User View Menu


Press <CTRL-Z>.

Obtaining Help
At the prompt, enter ?.

Further Information
For further information about how to use the command line interface, refer to the Command Reference Guide and the Configuration Guide, which are both available as PDF documents on the CD that accompanied the unit.

Commands
access-limit

Use the access-limit command to set the maximum number of access users that can be contained in current ISP domain. ISP Domain view
accounting

Use the accounting command to configure the accounting action for the traffic behavior. Traffic Behavior view
accounting default

Use the accounting default command to configure an accounting scheme for all users. ISP Domain view
accounting lan-access

Use the accounting lan-access command to configure accounting for a lan-access user. ISP Domain view
accounting login

Use the accounting login command to configure accounting for the login user. ISP Domain view
accounting optional

Use the accounting optional command to open the accounting-optional switch. ISP Domain view

3Com Switch 4500G Family Command Reference

acl

Use the acl command enter ACL view. If the ACL does not exist, it is created first. System view
acl

Use the acl command to apply an ACL to filter Telnet users. User Interface view
activation-key

Use the activation-key command to define a shortcut key for starting a terminal session. User Interface view
active region-configuration

Use the active region-configuration command to activate the settings of an MST (multiple spanning tree) region. MST Region view
add-member

Use the add-member command to add a candidate device to a cluster. Cluster view
administrator-address

Use the administrator-address command to set the MAC address of the management device on a member device. Cluster view
apply cost

Use the apply cost command to set the cost for routing information. Routing Policy view
apply cost apply ip-address next-hop

Use the apply ip-address next-hop command to set the next hop for IPv4 routing information. Routing Policy view
apply ipv6 next-hop apply poe-profile

Use the apply poe-profile command to apply the existing PoE Profile configuration to the specified Ethernet port. PoE Interface view
apply poe-profile interface

Use the apply poe-profile interface command to apply the PoE configuration file to one or more PoE interfaces. System view
apply preference

Use the apply preference command to set preference for routing protocol. Routing Policy view
apply preference apply tag

Use the apply tag command to set specified tag value of routing information. Routing Policy view
apply tag arp check enable

Use the arp check enable command to enable ARP entry checking, preventing the device from learning multicast MAC addresses. System view
arp max-learning-num

Use the arp max-learning-num command to set the maximum number of ARP entries that an interface can learn. VLAN Interface view
arp static

Use the arp static command to configure the static ARP entry in the ARP mapping table. System view
arp timer aging

Use the arp timer aging command to set the aging timer for dynamic ARP entries. System view

3Com Switch 4500G Family Command Reference

ascii

Use the ascii command to configure data transmission mode as ASCII mode. FTP Client view
attribute

Use the attribute command to set the attributes of a user whose service type is lan-access. Local User view
attribute

Use the attribute command to configure attribute rules of certificate issuers, certificate subject names, or alternate certificate subject names. Certificate Attribute Group view
authentication default

Use the authentication default command to configure authentication scheme for all users. ISP Domain view
authentication lan-access

Use the authentication lan-access command to configure authentication scheme for a lan-access user. ISP Domain view
authentication login

Use the authentication login command to configure authentication for a login user. ISP Domain view
authentication-mode

Use the command authentication-mode to specify the authentication mode. User Interface view
authorization command

Use the authorization command command to configure the authorization scheme for a CLI user. ISP Domain view
authorization default

Use the authorization default command to configure the default authorization for all users. ISP Domain view
authorization lan-access

Use the authorization lan-access command to configure authorization for a lan-access user. ISP Domain view
authorization login

Use the authorization login command to configure authorization for a login user. ISP Domain view
auto-build

Use the auto-build command to automatically build a cluster. Cluster view


auto-execute command

Use the auto-execute command command to set the command that is executed automatically after a user logs in. VTY User Interface view
backup startup-configuration

Use the backup startup-configuration command to back up the configuration file for next startup with the destination file name. User view
binary

Use the binary command to specify that files be transferred in binary mode. That is, data is transferred in binary streams. FTP Client view
black-list add-mac

Use the black-list add-mac command to add a device into the blacklist. Cluster view
black-list delete-mac

Use the black-list delete-mac command to delete a device from the blacklist. Cluster view
boot-loader

Use the boot-loader command to configure the .app file to be used the next time the switch is booted. User view

3Com Switch 4500G Family Command Reference

bootrom

Use the bootrom command to upgrade the Bootrom of device. User view
bootrom-update security-check enable

Use the bootrom-update security-check enable command to enable file validity check for upgrading. System view
broadcast-suppression

Use the broadcast-suppression command to configure broadcast storm suppression ratio. Ethernet Interface view Port Group view
build

Use the build command to configure or modify the cluster name. Cluster view
bye

Use the bye command to disconnect from the remote FTP server and exit to user view. FTP Client view
bye

Use the bye command to terminate the connection to the remote SFTP server and return to system view. SFTP Client view
ca identifier

Use the ca identifier command to specify the CA this device trusts and have the "name" CA bound with this device. PKI Domain view
car

Use the car command to configure TP for the traffic behavior. Traffic Behavior view
cd

Use the cd command to change the current directory. User view


cd

Use the cd command to change the current working directory path on the remote FTP server. FTP Client view
cd

Use the cd command to change the current path on the remote SFTP server. SFTP Client view
cdup

Use the cdup command to return from the current working directory path to the upper directory. FTP Client view
cdup

Use the cdup command to change the working path and return to the upper-level directory. SFTP Client view
certificate request entity

Use the certificate request entity command to specify the name of the entity for certificate request. PKI Domain view
certificate request from

Use the certificate request from command to choose between CA and RA to register for certificate request. PKI Domain view
certificate request mode

Use the certificate request mode command to decide between the manual or the auto request mode. PKI Domain view
certificate request polling

Use the certificate request polling command to specify the interval between two polls and the retry times. PKI Domain view
certificate request url

Use the certificate request url command to specify the server URL for certificate request through SCEP protocol. SCEP is a protocol specialized in the communication with authentication authorities. PKI Domain view

3Com Switch 4500G Family Command Reference

check region-configuration

Use the check region-configuration command to view all the MST region configuration information, including the region name, VLAN-to-instance mapping and revision level settings. MST Region view
checkzero

Use the checkzero command to check the zero field of RIP-1 packet. RIP view
checkzero ciphersuite

Use the ciphersuite command to configure the cipher suite supported by an SSL server policy. SSL Server Policy view
classifier behavior

Use the classifier behavior command to specify the behavior for the class in the policy. Policy view
client-verify enable

Use the client-verify enable command to enable certificate-based SSL client authentication, meaning the server needs to perform certificate-based authentication to the client. SSL Server Policy view
clock datetime

Use the clock datetime command to set the current system time and date. User view
clock summer-time

Use the clock summer-time command to set the name, starting and ending time of the daylight saving time. User view
clock timezone

Use the clock timezone command to set local time zone information. User view
close

Use the close command to terminate the connection to the FTP server, but remain in FTP client view. FTP Client view
close-mode wait

Use the close-mode wait command to configure the close mode for an SSL connection to wait, meaning after sending a close-notify alert message to the client, the server does not close a session until it receives a close-notify alert message from the client. SSL Server Policy view
cluster

Use the cluster command to enter cluster view. System view


cluster enable

Use the cluster enable command to enable the cluster function on a switch. System view
cluster switch-to

Use the cluster switch-to command to switch between the management device and member devices for configuration and management. User view
command-privilege level

Use the command-privilege level command to set the level of the specified command in a specified view. System view
common-name

Use the common-name command to specify the common name of an entity, take User name for example. PKI Entity view
copy

Use the copy command to copy a file. User view


copy configuration

Use the copy configuration command to copy configurations on a specific interface to other interface(s). The configuration can be copied include speed/duplex configuration, GVRP, STP, Port-isolate, VLAN, LACP, and QoS. System view

3Com Switch 4500G Family Command Reference

count

Use the count command to configure the number of probes in a test. NQA Test Group view
country

Use the country command to specify the code of the country to which the entity belongs. It is a standard 2-byte code, for example, CN for China. PKI Entity view
crl check

Use the crl check command to enable or disable CRL checking. PKI Domain view
crl update-period

Use the crl update-period command to specify the update period of CRL, which is the interval between local downloads of CRLs from CRL access server. PKI Domain view
crl url

Use the crl url command to specify the distribution point URL for CRL. PKI Domain view
cut connection

Use the cut connection command to cut down one user connection or one type of user connections forcibly. System view
databits

Use the databits command to set the databits for the user interface. AUX User Interface view
datafill

Use the datafill command to configure a string of fill characters for a test packet. NQA Test Group view
datasize

Use the datasize command to configure the size of a test packet, namely, an echo request packet (IP header and ICMP header excluded). NQA Test Group view
debugging

Use the debugging command to enable specific type of debugging or all types of debugging. User view
default cost

Use the default cost command to define a value for the default metric of the redistributed route. RIP view
default-route originate

Use the default-route originate cost command to enable the current router to originate a default route to RIP neighbors when the router needs to generate a default route with the specified cost. RIP view
delete

Use the delete command to remove a file from the storage device to the recycle bin, where you can restore the file with the undelete command or permanently delete it with the reset recycle-bin command. User view
delete

Use the delete command to delete a file on the remote FTP server. FTP Client view
delete

Use the delete command to delete a specified file from a server. SFTP Client view
delete ipv6 static-routes all

Use the display ip routing-table command to display summary information about active routes in the routing table. Any view
delete-member

Use the delete-member command to remove a member device from the cluster. Cluster view

3Com Switch 4500G Family Command Reference

delete static-routes all

Use the delete static-routes all command to delete all the static routes. System view
description

Use the description command to assign a description string to the current VLAN or VLAN interface.

VLAN view VLAN Interface view


description

Use the description command to enter a description of an Ethernet port. Ethernet Interface view
description

Use the description command to create an ACL description, to describe the purpose of the ACL for example.

Basic IPv4 ACL view Advanced IPv4 ACL view Ethernet Frame Header ACL view
description

Use the description command to give a brief description of a test group, usually, the test type or test purpose of a test group. NQA Test Group view
destination-ip

Use the destination-ip command to configure the destination IP address in the test request packet. NQA Test Group view
destination-port

Use the destination-port command to configure the destination port number for a test request packet. NQA Test Group view
dhcp enable

Use the dhcp enable command to enable DHCP. System view


dhcp relay address-check

Use the dhcp relay address-check enable command to enable IP address match checking on the relay agent. VLAN Interface view
dhcp relay information enable

Use the dhcp relay information enable command to enable the relay agent to support option 82. VLAN Interface view
dhcp relay information format

Use the dhcp relay information format command to specify a padding format for option 82. Interface view
dhcp relay information strategy

Use the dhcp relay information strategy command to configure DHCP relay agent handling strategy for messages containing option 82. Interface view
dhcp relay release

Use the dhcp relay release command to send a DHCP RELEASE request to a specified DHCP server or server groups for releasing a specified client IP address. VLAN Interface view System view
dhcp relay security static

Use the dhcp relay security static command to configure a manual IP-to-MAC binding on the relay agent. System view
dhcp relay security tracker

Use the dhcp relay security tracker command to set a refreshing interval at which the relay agent contacts the DHCP server for refreshing dynamic bindings. System view
dhcp relay server-detect

Use the dhcp relay server-detect command to enable pseudo DHCP server detection on the DHCP relay agent. System view

3Com Switch 4500G Family Command Reference

dhcp relay server-group

Use the dhcp relay server-group command to specify a DHCP server for a DHCP server group. System view
dhcp relay server-select

Use the dhcp relay server-select command to correlate specified interface(s) to a specified DHCP server group. VLAN Interface view
dhcp select relay

Use the dhcp select relay command to enable the relay agent on the current interface, specified or all interfaces. Upon receiving requests from an enabled interface, the relay agent will forward these requests to outside DHCP servers for IP address allocation. VLAN Interface view
dhcp-snooping

Use the dhcp-snooping command to enable the DHCP snooping. System view
dhcp-snooping trust

Use the dhcp-snooping trust command to set a port as trusted. Ethernet Interface view
dir

Use the dir command to display information about all files and folders in the current directory, excluding those moved to the recycle bin. User view
dir

Use the dir command to query for the details of all files and directories in the current directory. FTP Client view
dir

Use the dir command to query files under a specified directory. SFTP Client view
disconnect

Use the disconnect command to terminate a FTP connection without quitting FTP client view. FTP Client view
display acl

Use the display acl command to display information about the specified or all IPv4 ACLs. This command displays ACL rules in the matching order. Any view
display arp

Use the display arp command to display information about ARP entries in the ARP mapping table. Any view
display arp ip-address

Use the display arp ip address command to display information about the ARP entry for a specified IP address. Any view
display arp timer aging

Use the display arp timer aging command to display the aging time for dynamic ARP entries. Any view
display boot-loader

Use the display boot-loader command to display the host software (.app file) that is adopted when the switch reboots. Any view
display bootp client

Use the display bootp client command to display relative information of a BOOTP client, including MAC address of the BOOTP client and obtained IP address. Any view
display brief interface

Use the display brief interface command to display brief interface information, including simple interface name, link state, protocol link state, protocol type, and main IP address. Any view

10

3Com Switch 4500G Family Command Reference

display channel

Use the display channel command to display the details channel information. Any view
display clipboard

Use the display clipboard command to view the contents of the clipboard. Any view
display clock

Use the display clock command to display the current date and time of the system, so that you can adjust them if they are wrong. Any view
display cluster

Use the display cluster command to display the state and statistics of the cluster to which the current switch belongs. Any view
display cluster base-topology

Use the display cluster topology command to display the standard topology view of the cluster. Any view
display cluster black-list

Use the display cluster black-list command to display the current blacklist of the cluster. Any view
display cluster candidates

Use the display cluster candidates command to display the information about the candidate devices of a cluster. Any view
display cluster current-topology

Use the display cluster current topology command to display the current topology view or the topology path between two points. Any view
display cluster members

Use the display cluster members command to display the information about cluster members. Any view
display connection

Use the display connection command to display information about specified or all user connections. Any view
display cpu-usage

Use the display cpu-usage command to display the statistics of CPU usage entries. Any view
display current-configuration

Use the display current-configuration command to display the current configuration of a switch. Any view
display current-configuration

Use the display current-configuration command to display the current configuration of a switch. Any view
display debugging

Use the display debugging command to display the enabled debugging on a specified device. Any view
display device

Use the display device command to view module type and working status information of each card. Any view
display dhcp client

Use the display dhcp client command to display DHCP client information. Any view
display dhcp relay

Use the display dhcp relay command to display information about DHCP server groups correlated to an interface or all interfaces. Any view

3Com Switch 4500G Family Command Reference

11

display dhcp relay security

Use the display dhcp relay security command to display information about bindings of DHCP relay agents. If no parameter is specified, information about all bindings will be displayed. Any view
display dhcp relay security statistics

Use the display dhcp relay security statistics command to display statistics information about bindings of DHCP relay agents. Any view
display dhcp relay security tracker

Use the display dhcp relay security tracker command to display the interval for refreshing dynamic bindings on the relay agent. Any view
display dhcp relay server-group

Use the display dhcp relay server-group command to display the configuration information of a specified or all DHCP server groups. Any view
display dhcp relay statistics

Use the display dhcp relay statistics command to display DHCP packet statistics related to a specified or all DHCP groups, information including the number of erroneous packets, packets received from clients and servers, packets sent to clients and servers (both broadcasts and unicasts). Any view
display dns domain

Use the display dns domain command to display DNS domain names (suffixes) that are manually configured. Any view
display dns dynamic host

Use the display dns dynamic-host command to display the dynamic domain name resolution cache information. Any view
display dns server

Use the display dns server command to view the DNS server addresses manually configured. Any view
display domain

Use the display domain command to display the configuration information about one specific or all ISP domains. Any view
display diagnostic-information

Use the display diagnostic-information command to display the current configuration of all the running modules. Any view
display dot1x

Use the display dot1x command to display 802.1x session information, statistics, or configuration information of specified or all ports. Any view
display environment

Use the display environment command to display the temperature information, including the current temperature and temperature thresholds of cards. Any view
display fan

Use the display fan command to check the state of all built-in fans. Any view
display fib

Use the display fib command to display FIB forward information. If no parameters are specified, all FIB forward information will display. Any view
display fib ip-address

Use the display fib ip-address command to display forward information items that match the specified destination IP address. Each line in the export information stands for a FIB item. Any view

12

3Com Switch 4500G Family Command Reference

display fib statistics

Use the display fib statistics command to view the total number of FIB entries. Any view
display ftp-server

Use the display ftp-server command to display the FTP server-related settings of a switch when it operates as an FTP server. Any view
display ftp-user

Use the display ftp-user command to display the parameter settings of current FTP users. Any view
display garp statistics

Use the display garp statistics command to display the GARP statistics on specified (or all) ports. Any view
display garp timer

Use the display garp timer command to display the values of the GARP timers on specified or all ports. Any view
display gvrp statistics

Use the display gvrp statistics command to display the GVRP statistics about specified (or all) Trunk ports. Any view
display gvrp status

Use the display gvrp status command to display the enable/disable status of GVRP. Any view
display habp

Use the display habp command to display HABP configuration and status information. Any view
display habp table

Use the display habp table command to display the MAC address table maintained by HABP. Any view
display habp traffic

Use the display habp traffic command to display statistics on HABP packets. Any view
display history-command

Use the display history-command command to view the history commands. Any view
display hotkey

Use the display hotkey command to display the shortcut key allocation information Any view
display hwtacacs

Use the display hwtacacs command to view configuration or statistics information of specified or all TACACS+ schemes. Any view
display icmp statistics

Use the display icmp statistics command to display statistics of ICMP flows. Any view
display igmp-snooping group

Use the display igmp-snooping group command to view the multicast group information learned by IGMP Snooping. Any view
display igmp-snooping statistics

Use the display igmp-snooping statistics command to view the statistics information of IGMP messages learned by IGMP Snooping. Any view
display info-center

Use the display info-center command to display configurations for all channels (except channel 6 to 8) of the information center. Any view

3Com Switch 4500G Family Command Reference

13

display interface

Use the display interface command to display the current state of a specified interface and related information. Any view
display interface vlan-interface

Use the display interface vlan-interface command to display the information about the management VLAN interface. Any view
display ip host

Use the display ip host command to display the host names and corresponding IP addresses in the static domain name resolution resolving list. Any view
display ip host

Use the display ip host command to display the host names and corresponding IP addresses in the static domain name resolution resolving list. Any view
display ip https

Use the display ip https command to display the status information about the HTTPS server. Any view
display ip interface

Use the display ip interface command to display detailed information about IP for the specified interface. Any view
display ip interface brief

Use the display ip interface brief command to display brief information about the basic IP configuration on the specified or all interfaces. Any view
display ip ip-prefix

Use the display ip ip-prefix command to display the statistics of IPv4 address prefix list. If no ip-prefix-name is specified, statistics of all the address prefix lists will be displayed. Any view
display ip routing-table

Use the display ip routing-table command to display summary information about active routes in the routing table. Any view
display ip routing-table acl

Use the display ip routing-table acl command to display the routes permitted by the specified basic ACL. Any view.
display ip routing-table ip-address

Use the display ip routing-table ip-address command to display information about routes to a specific destination address. Any view
display ip routing-table ip-address1 ip-address2

Use the display ip routing-table ip-address1 ip-address2 command to display the information about the routes with their destinations within the specified destination IP address range. Any view
display ip routing-table ip-prefix

Use the display ip routing-table ip-prefix command to display the information about the routes matching a specified IP prefix list. Any view
display ip routing-table protocol

Use the display ip routing-table protocol command to display the information about specific routes with a specified origin. Any view
display ip routing-table statistics

Use the display ip routing-table statistics command to display statistics about the public network routing table. Any view

14

3Com Switch 4500G Family Command Reference

display ip socket

Use the display ip socket command to display the information about the sockets in the current system. Any view
display ip statistics

Use the display ip statistics command to view the statistics information about IP packets. Any view
display ip ipv6-prefix display ipv6 routing-table display ipv6 routing-table acl display ipv6 routing-table ipv6-address display ipv6 routing-table ipv6-prefix display ipv6 routing-table protocol display ipv6 routing-table statistics display ipv6 routing-table verbose display lacp system-id

Use the display lacp system-id command to display the local system ID, which comprises system LACP priority and system MAC address. Any view
display link-aggregation interface

Use the display link-aggregation interface command to display the following information about link aggregation on the specified port or ports. Any view
display link-aggregation summary

Use the display link-aggregation summary command to display a summary for all link aggregation groups. which includes: Local system ID, Link aggregation group ID, Link aggregation type, Remote system ID, Number of selected ports, Number of unselected ports, Load sharing type, and Master port number. Any view
display link-aggregation verbose

Use the display link-aggregation verbose command to display detailed information about the specified or all link aggregation groups. Any view
display local-proxy-arp

Use the display local-proxy-arp command to display whether local proxy ARP is enabled. Any view
display local-server statistics

Use the display local-server statistics command to view the statistics about all local RADIUS authentication server. Any view
display local-user

Use the display local-user command to display information about specified or all local users. Any view
display logbuffer

Use the display logbuffer command to display the status of the log buffer and the records in the log buffer. Any view
display logbuffer summary

Use the display logbuffer summary command to display the summary of the log buffer. Any view
display-loopback-detection

Use the display loopback-detection command to display the loopback detection status on the port. Any view
display mac-address

Use the display mac-address command to display MAC address table information. Any view
display mac-address aging-time

Use the display mac-address aging-time command to display the aging time of the dynamic entry in the MAC address table. Any view

3Com Switch 4500G Family Command Reference

15

display mac-authentication

Use the display mac-authentication command to display the global MAC authentication information or the MAC authentication information about specified interfaces. Any view
display memory

Use the display memory command to display the memory usage of a specified switch. Any view
display mirroring-group

Use the display mirroring-group command to display the information of a mirroring group. Any view
display ndp

Use the display ndp command to display the global NDP configuration information, including the interval to send NDP packets, the holdtime of NDP information, and the information about the neighbors of all the ports. Any view
display nqa

Use the display nqa to display results of an NQA test or tests. Any view
display ntdp

Use the display ntdp command to display the global NTDP information. Any view
display ntdp device-list

Use the display ntdp device-list command to display the device information collected through NTDP. Any view
display ntp-service sessions

Use the display ntp-service sessions command to view the information of all NTP sessions. Without the verbose keyword, this command displays the brief information of all NTP service sessions Any view
display ntp-service status

Use the command display ntp-service status command to view the NTP service status information. Any view
display ntp-service trace

Use the display ntp-service trace command view the brief information of each NTP server along the NTP server chain from the local device back to the primary reference source. Any view
display pki certificate

Use the display pki certificate command to display and browse through the certificate. Any view
display pki certificate access-control-policy

Use the display pki certificate access-control-policy command to display the information about a certificate attribute access control policy. Any view
display pki certificate attribute-group

Use the display pki certificate attribute-group command to display the information about a certificate attribute group. Any view
display pki crl domain

Use the display pki crl domain command to display and browse through the locally saved CRL. Any view
display poe device

Use the display poe device command to display the mapping between ID, module, and slot of the power sourcing equipment (PSE). Any view
display poe interface

Use the display poe interface command display the power information of the specified interface. Any view

16

3Com Switch 4500G Family Command Reference

display poe interface power

Use the display poe interface power command, you can view the power information of a specific port or all ports on the Switch. Any view
display poe-profile

Use the display poe-profile command to display all information of the configurations and applications of the PoE configuration file. Any view
display poe-profile interface

Use the display poe-profile interface command to display all information of the configurations and applications of the PoE configuration file that currently take effect on the specified PoE interface. Any view
display poe pse

Use the display poe pse command to display the information of the power sourcing equipment (PSE). Any view
display port

Use the display port command to display information on the current ports of a specified type. Any view
display port-group manual

Use the display port-group manual command to display information on a specified manual port group. Any view
display port-isolate group

Use the display port-isolate group command to display the information about the Ethernet ports added to an isolation group. Any view
display power

Use the display power command to check the state of the built-in power supply module. Any view
display proxy-arp

Use the display proxy-arp command to display whether proxy ARP is enabled. Any view
display qos lr interface

Use the display qos lr interface command to view LR configuration and statistics information of a certain interface or all interfaces. Any view
display qos map-table

Use the display qos map-table command to display the configuration of the specified priority mapping table. Any view
display qos policy

Use the display qos policy command to display the configuration information of the specified class or all the classes in the specified policy or all policies and the configuration information of behavior(s) associated with the class(es). Any view
display qos policy interface

Use the display qos policy interface command to display the configuration and running status of the policy on the specified ports or all ports. Any view
display qos policy user-defined

Use the display qos policy user-defined command to display the configuration information of one or all user-defined QoS policies. Any view
display qos sp

Use the display qos sp interface command to display the strict priority (SP) queuing configuration on a specified port. Any view
display qos vlan-policy

Use the display qos vlan-policy command to display information about QoS policies applied on VLAN(s). Any view

3Com Switch 4500G Family Command Reference

17

display qos wrr interface

Use the display qos wrr interface command to display the configuration of weighted round robin (WRR) queues of a port. Any view
display radius

Use the display radius command to display the configuration information about one specific or all RADIUS schemes. Any view
display radius statistics

Use the display radius statistics command to display the statistics about RADIUS packets. Any view
display rip

Use the display rip command to view the current RIP running state and its configuration information. Any view
display rip database

Use the display rip database command to display the active routes in the RIP announced database, which are send in regular RIP updating messages. Any view
display rip interface

Use the display rip interface command to display the RIP interface information. Any view
display rip route

Use the display rip route command to display all active or inactive RIP routes and timers associate to each route. Any view
display rmon alarm

Use the display rmon alarm command to display the configuration of the specified or all RMON alarm entries. Any view
display rmon event

Use the display rmon event command to display the configuration of the specified or all RMON event entries. Any view
display rmon eventlog

Use the display rmon eventlog command to display the log information for the specified or all event entries. Any view
display rmon history

Use the display rmon history command to display RMON history control information and last history sampling information, including bandwidth utilization, number of bad packets, and total packet number. Any view
display rmon prialarm

Use the display rmon prialarm command to display the configuration of the specified or all private alarm entries. Any view
display rmon statistics

Use the display rmon statistics command to display RMON statistics. Any view
display route-policy

Use the display route-policy command to view the configured route-policy Any view

18

3Com Switch 4500G Family Command Reference

display route-policy display ripng display ripng database display ripng interface display ripng route display rsa local-key-pair public

Use the display rsa local-key-pair public command to display the public keys of the server host key pair and server key pair on the server. If no key is generated, "RSA keys not found" will be displayed. Any view
display rsa peer-public-key

Use the display rsa peer-public-key command to display the peer RSA public keys. If no keyname is specified, all peer public keys are displayed. Any view
display saved-configuration

Use the display saved-configuration command to display the content of the main configuration file in the flash memory of a switch. Any view
display saved-configuration

Use the display saved-configuration command to display the startup configuration file. Any view
display schedule reboot

Use the display schedule reboot command to display the device reboot time set by the user. Any view
display sftp client source

Use the display sftp client source command to display the source IP address or source interface currently set for the SFTP client. Any view
display snmp-agent

Use the display snmp-agent command to display the engine ID of an SNMP entity. Any view
display snmp-agent community

Use the display snmp-agent community command to view the information about the currently configured community names for SNMPv1 or SNMPv2c. Any view
display snmp-agent group

Use the display snmp-agent group command to display information for the SNMP agent group. Any view
display snmp-agent mib-view

The display snmp-agent mib-view command to display SNMP agent MIB view information. Any view
display snmp-agent statistics

Use the display snmp-agent statistics command to display SNMP statistics Any view
display snmp-agent sys-info

Use the display snmp-agent sys-info command to display the system information of the current SNMP device Any view
display snmp-agent usm-user

Use the display snmp-agent usm-user command to display SNMPv3 user information. Any view
display ssh client source

Use the display ssh client source command to display the source IP address or source interface currently set for the SSH client. Any view
display ssh server

Use the display ssh server command to display the status or session information about the SSH server Any view

3Com Switch 4500G Family Command Reference

19

display ssh server-info

Use the display ssh server-info command to display the mapping between the host public key and the SSH server saved on the client. Any view
display ssh user-information

Use the display ssh user-information command to display information about the current SSH users, including user name, authentication mode, key name and authorized service types. Any view
display ssl client-policy

Use the display ssl client-policy command to view information for an SSL client policy. Any view
display ssl server-policy

Use the display ssl server-policy command to view information of an SSL server policy. Any view
display startup

Use the display startup command to display the configuration file used at this startup and the one used for next startup. User view
display stop-accounting-buffer

Use the display stop-accounting-buffer command to display the no-response stop-accounting request packets buffered in the device. Any views
display stop-accounting-buffer

Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the switch. Any view
display stp

Use the display stp command to display the state and statistical information about one or all spanning trees. Any view
display stp region-configuration

Use the display stp region-configuration command to view the currently effective configuration information of the MST region, including the region name, revision level, and user-configured VLAN-to-instance mappings. Any view
display tcp statistics

Use the display tcp statistics command to view the statistics information about TCP packets. Any view
display tcp status

Use the display tcp status command to display status of all TCP connection and thus allow a user to monitor TCP connections at all times. Any view
display this

Use the display this command to display the current configuration performed in the current view of the system. Any view
display this

Use the display this command to display the current configuration performed in the current view of the system. Any view
display time-range

Use the display time-range command to display the configuration and state of a specified or all time ranges. The state of a time range is either active or inactive. Any view
display traffic behavior

Use the display traffic behavior command to display the configured traffic behavior information. Any view

20

3Com Switch 4500G Family Command Reference

display traffic behavior user-defined

Use the display traffic behavior user-defined command to display the configuration information of one or all user-defined traffic behaviors. Any view
display traffic classifier

Use the display traffic classifier command to view the configuration information about class of the router. Any view
display trapbuffer

Use the display trapbuffer command to display the state and the trap information recorded. Any view
display udp-helper server

Use the display udp-helper server command to display the information of the destination server to which UDP packets are forwarded and the number of packets forwarded. Any view
display udp statistics

Use the display udp statistics command to view UDP traffic statistic information. Any view
display user-interface

Use the display user-interface command to view information about the specified or all user interfaces. Any view
display users

Use the display users command to display the information about user interfaces. . Any view
display version

Use the display version command to system version information. Any view
display vlan

Use the display vlan command to display VLAN information, including VLAN ID, VLAN type (static versus dynamic), VLAN route interface (if enabled, displays the main IP address and mask), VLAN descriptive string, ports in the VLAN, and so on. Any view
display voice vlan oui

Use the display voice vlan oui command to display the currently supported OUI addresses and the related information. Any view
display voice vlan state

Use the display voice vlan status command to display voice VLAN-related information, including voice VLAN operation mode, port mode (manual mode or automatic mode), and so on. Any view
display web users

Use the display web users command to display information about web users. Any view
dns domain

Use the dns domain command to configure a DNS domain name. System view
dns resolve

Use the dns resolve command to enable dynamic domain name resolution. System view
dns server

Use the dns server command to configure IP address of a DNS server. System view
domain

Use the domain command to create an ISP domain and enter its view, or enter the view of an existing ISP domain, or configure the default ISP domain. System view

3Com Switch 4500G Family Command Reference

21

dot1x

Use the dot1x command in system view to enable 802.1x globally. Use the dot1x interface interface-list command in system view or the dot1x command in Ethernet interface view to enable 802.1x for specified ports. System view Ethernet Port view
dot1x authentication-method

Use the dot1x authentication-method command to set the 802.1x authentication method. System view
dot1x guest-vlan

Use the dot1x guest-vlan command to configure GuestVlan on a specified port. System view Ethernet Port view
dot1x handshake

Use the dot1x handshake command to enable the online user handshake function. Ethernet Interface view
dot1x max-user

Use the dot1x max-user command to set the maximum number of accessing users for specified or all ports. System view Ethernet Interface view
dot1x port-control

Use the dot1x port-control command to set the access control mode for specified or all ports. System view Ethernet Interface view
dot1x port-method

Use the dot1x port-method command to set the access control method for specified or all ports. System view Ethernet Interface view
dot1x quiet-period

Use the dot1x quiet-period command to enable the quiet-period timer. System view
dot1x retry

Use the dot1x retry command to set the maximum number of attempts for sending authentication requests to an accessing user. System view
dot1x timer

Use the dot1x timer command to set the 802.1x timers. System view
duplex

Use the duplex command to configure the duplex mode for an Ethernet interface. Ethernet Interface view
enable snmp trap updown

Use the enable snmp trap updown command to enable the sending of linkup and linkDown SNMP traps. System view
escape-key

Use the escape-key command to define a shortcut key for aborting tasks. User Interface view
execute

Use the execute command to execute the specified batch file. System view
exit

Use the exit command to terminate the connection to the remote SFTP server and return to system view. SFTP Client view
fast-leave

Use the fast-leave command to enable the fast leave function for ports globally. IGMP Snooping view
filename

Use the filename command to specify a file to be transferred between the FPT server and the FTP client. NQA Test Group view

22

3Com Switch 4500G Family Command Reference

file prompt

Use the file prompt command to modify the prompt mode of file operations on the Switch. System view
filter

Use the filter command to configure the traffic filter action for the traffic behavior. Traffic Behavior view
filter-policy export

Use the filter-policy export command to define the export filtering policy, which are announced in the updating messages. Only filtered routes can be added to the RIP routing table. RIP view
filter-policy export filter-policy import

Use the filter-policy gateway import command to filter the imported routes so that only the routes passing the filter are added to the routing table. RIP view
filter-policy import fixdisk

Use the fixdisk command to restore the space of a storage device when it becomes unavailable because of some abnormal operation. Any view
flow-control

Using flow-control command, you can configure the flow control mode on AUX port. AUX User Interface view.
flow-control

Use the flow-control command to turn on flow control on an Ethernet interface. Ethernet Interface view
format

Use the format command to format a storage device. User view


fqdn

Use the fqdn command to specify the FQDN of an entity. PKI Entity view
free user-interface

Use the free user-interface command to clear a specified user interface. If you execute this command, the corresponding user interface will be disconnected. User view
free web-users

Use the free web-users command to disconnect a specified Web user or all Web users by force. User view
frequency

Use the frequency command to configure the interval of performing a cyclic test. NQA Test Group view
ftp

Use the ftp command to establish a control connection with an FTP server and enter FTP client view. User view
ftp-operation

Use the ftp-operation command to configure the FTP operation type. NQA Test Group view
ftp server

Use the ftp server command to configure an FTP server on the management device for the member devices in the cluster. Cluster view
ftp server enable

Use the ftp server enable command to enable FTP server and allow FTP users to log in. System view
ftp timeout

Use the ftp timeout command to configure connection timeout interval. System view

3Com Switch 4500G Family Command Reference

23

ftp update

Use the ftp update command to set the file update mode that the FTP server uses while receiving data. System view
garp timer

Use the garp timer command to set a GARP timer for an Ethernet port or all ports in a port-group in compliance with the dependencies shown in Table 166. Ethernet Port view
garp timer leaveall

Use the garp timer leaveall command to set the GARP LeaveAll timer to a specified value. System view
get

Use the get command to FTP a file from a remote server and save it. SFTP Client view
get

Use the get command to download a file from a remote SFTP server and save it locally. SFTP Client view
gratuitous-arp-learning enable

Use the gratuitous-arp-learning enable command to enable the gratuitous ARP packet learning function. System view
gratuitous-arp-sending enable

Use the gratuitous-arp-sending enable command to enable a device to send gratuitous ARP packets. System view
group-member

Use the group-member command to add an Ethernet interface to a specified manual port group. Port Group view
group-policy

Use the group-policy command to configure a global multicast group filter. IGMP Snooping view
gvrp

Use the gvrp command to enable GVRP globally, on a port, or on all ports in a port-group. System view Ethernet Port view Port-Group view
gvrp registration

Use the gvrp registration command to configure the GVRP registration type on a port or all ports in a port-group. Ethernet Port view Port-Group view
habp enable

Use the habp enable command to enable HABP for a switch. System view
habp server vlan

Use the habp server vlan command to configure a switch to operate as an HABP server and HABP packets to be broadcast in a specified VLAN. System view
habp timer

Use the habp timer command to set the interval for a switch to send HABP request packets. System view
handshake timeout

Use the handshake timeout command to configure handshake timeout time in an SSL server policy. SSL Server Policy view
header

Use the header command to set the banners that are displayed when a user logs into a switch. System view
header

Using header command, you can configure to display header when user login. System view

24

3Com Switch 4500G Family Command Reference

help

Use the help command to display the help information of SFTP client commands. SFTP Client view
history-command max-size

Use the history-command max-size command to set the size of history command buffer. User Interface view
history-records

Use the history-records command to configure the maximum number of history records that can be saved in a test group. NQA Test Group view
holdtime

Use the holdtime command to configure the holdtime of a switch. Cluster view Use the holdtime command to configure the holdtime of a switch.
host-aging-time

Use the host-aging-time command to configure the global aging time of group member ports. IGMP Snooping view
host-route

Use the host-route command to enable the router to receive host routes. RIP view
hotkey

Use the hotkey command to assign a hot key to a command line. System view
http-operation

Use the http-operation command to configure an HTTP operation type. NQA Test Group view
http-string

Use the http-string command to configure an HTTP operation string. The HTTP operation string specifies the accessed web page and the HTTP version used. NQA Test Group view
hwtacacs nas-ip

Use the hwtacacs nas-ip command to specify the source address of the TACACS+ packet sent from NAS. System view
hwtacacs scheme

Use the hwtacacs scheme command to create an TACACS+ scheme and enter its view. System view
idle-cut

Use the idle-cut command to set the user idle-cut function in current ISP domain. ISP Domain view
idle-timeout

Use the idle-timeout command to configure the amount of time you want to allow a user interface to remain idle before it is disconnected. User Interface view
if-match

Use the if-match command to define a rule for all the packets matching the specified rule. Class view
if-match { acl | ip-prefix }

Use the if-match { acl | ip-prefix } command to match destination IP addresses of routes against the specified ACL or the IP prefix list. Routing Policy view
if-match cost

Use the if-match cost command to configure one of the matching rules of route-policy to match the cost of the routing information. Routing Policy view
if-match cost if-match interface

Use the if-match interface command to match outbound interfaces of routing information to specified interfaces. Routing Policy view

3Com Switch 4500G Family Command Reference

25

if-match interface if-match ipv6 if-match ip

Use the if-match ip command to match IPv4 routing information (next hop or source address). Routing Policy view
if-match tag

Use the if-match tag command to match the tag field of routes with the specified tag. Routing Policy view
if-match tag igmp-snooping

Use the igmp-snooping command to enable IGMP Snooping globally and enter IGMP Snooping view. System view
igmp-snooping drop-unknown

Use the igmp-snooping drop-unknown command to enable the function of silently dropping unknown multicast data in the current VLAN. VLAN view
igmp-snooping enable

Use the igmp-snooping enable command to enable IGMP Snooping in the current VLAN. VLAN view
igmp-snooping fast-leave

Use the igmp-snooping fast-leave command to enable the fast leave function on the current port. Ethernet Port view Port Group view
igmp-snooping general-query source-ip

Use the igmp-snooping general-query source-ip command to configure the source address of IGMP general queries. VLAN view
igmp-snooping group-limit

Use the igmp-snooping group-limit command to configure the maximum number of multicast groups that can pass the port(s). Ethernet Port view Port Group view
igmp-snooping group-policy

Use the igmp-snooping group-policy command to configure a multicast group filter on the current port(s). Ethernet Port view Port Group view
igmp-snooping host-aging-time

Use the igmp-snooping host-aging-time command to configure the aging time of group member ports in the current VLAN. VLAN view
igmp-snooping host join

Use the igmp-snooping host-join command to enable a simulated host to join a multicast group or a multicast source/group. Ethernet Port view Port Group view
igmp-snooping last-member-query-interval

Use the igmp-snooping last-member-query-interval command to configure the interval of sending IGMP last-member queries in the VLAN. VLAN view
igmp-snooping max-response-time

Use the igmp-snooping max-response-time command to configure the maximum response time to IGMP general queries in the VLAN. VLAN view
igmp-snooping overflow-replace

Use the igmp-snooping overflow-replace command to enable the multicast group replacement function on the current port(s). Ethernet Port view Port Group view

26

3Com Switch 4500G Family Command Reference

igmp-snooping querier

Use the igmp-snooping querier command to enable the IGMP Snooping querier. VLAN view
igmp-snooping query-interval

Use the igmp-snooping query-interval command to configure the interval of sending IGMP general queries. VLAN view
igmp-snooping report-aggregation

Use the igmp-snooping report-aggregation command to enable IGMP report suppression. IGMP Snooping view
igmp-snooping router-aging-time

Use the igmp-snooping router-aging-time command to configure the aging time of router ports in the current VLAN. VLAN view
igmp-snooping source-deny

Use the igmp-snooping source-deny command to enable multicast source port filtering. Ethernet Port view Port Group view
igmp-snooping special-query source-ip

Use the igmp-snooping special-query source-ip command to configure the source IP address of IGMP group-specific queries. VLAN view
igmp-snooping static-group

Use the igmp-snooping static-group command to enable the static member port function, namely to configure a port or ports as static member port(s) of a multicast group or multicast source/group. Ethernet Port view Port Group view
igmp-snooping static-router-port

Use the igmp-snooping static-router-port command to enable the static router port function. Ethernet Port view Port Group view
igmp-snooping version

Use the igmp-snooping version command to configure the IGMP Snooping version. VLAN view
import-route

Use the import-route command to import routes and set route attributes. You can set the routing policy to import specified routes. RIP view
import-route info-center channel name

Use the info-center channel name command to name the channel of the specified number. System view
info-center console channel

Use the info-center console channel command to specify the channel to output system information to the console. System view
info-center enable

Use the info-center enable command to enable the information center. System view
info-center logbuffer

Use the info-center logbuffer command to enable information output to the log buffer through the specified channel (you can also set the size of the log buffer in this command). System view
info-center loghost

Use the info-center loghost command to specify a log host and to configure the related parameters. System view
info-center loghost source

Use the info-center loghost source command to configure the source interface through to output log information to the log host. System view

3Com Switch 4500G Family Command Reference

27

info-center monitor channel

Use the info-center monitor channel command to configure the channel to output system information to the monitor. System view
info-center snmp channel

Use the info-center snmp channel command to configure the channel to output system information to the SNMP NMS. System view
info-center source

Use the info-center source command to specify the information source for a specified channel. System view
info-center synchronous

Use the info-center synchronous command to enable synchronous terminal output. System view
info-center timestamp loghost

Use the info-center timestamp loghost command to configure whether to include the year information in the output log information to the log host. System view
info-center timestamp

Use the info-center timestamp command to configure the time stamp format. System view
info-center trapbuffer

Use the info-center trapbuffer command to enable information output to the trap buffer. System view
instance

Use the instance command to map specified VLANs to a specified spanning tree instance. MST Region view
interface VLAN-interface

Use the interface Vlan-interface command to create a VLAN interface or enter VLAN interface view. System view
interface

Use the command interface command to enter the related interface view. System view
ip

Use the ip command to specify the IP address of an entity. PKI Entity view
ip address

Use the ip address command to specify the IP address and subnet mask for a VLAN interface. VLAN Interface view
ip address

Use the ip address command to assign an IP address (and mask) to a management VLAN interface. Interface view
ip address bootp-alloc

Use the ip address bootp-alloc command to enable an interface to obtain IP address through BOOTP protocol. Interface view
ip address dhcp-alloc

Use the ip address dhcp-alloc command to configure an interface to use DHCP for IP address acquisition. Interface view
ip forward-broadcast

Use the ip forward-broadcast command to enable the device to receive directed broadcast packets. System view
ip forward-broadcast [acl-number]

Use the ip forward-broadcast [ acl-number ] command in interface view to enable an interface to forward directed broadcast packets. VLAN Interface view Loopback Interface view

28

3Com Switch 4500G Family Command Reference

ip host

Use the ip host command to create a mapping between host name and IP address in the static resolving list. System view
ip http acl

Use the ip http acl command to apply an ACL to filter Web users. System view
ip http acl

Use the ip https acl command to associate the HTTPS server with an ACL. System view
ip http enable

Use the ip http enable command to launch the Web server System view
ip https certificate access-control-policy

Use the ip https certificate access-control-policy command to associate the HTTPS server with a certificate access control policy. System view
ip https enable

Use the ip https enable command to enable the HTTPS server function. System view
ip https ssl-server-policy

Use the ip https ssl-server-policy command to associate the HTTPS server with an SSL server-end policy. System view
ip ip-prefix

Use the ip ip-prefix command to configure an IP prefix list or an item. System view
ip-pool

Use the ip-pool command to configure a private IP address range for cluster members on the switch to be set as the management device. Cluster view
ip redirects enable

Use the ip redirects enable command to enable sending a devices ICMP redirection packet. System view
ip route-static

Use the ip route-static command to configure a unicast static route. System view
ip route-static default-preference

Use the ip route-static default-preference command to configure the default preference for static routes. System view
ip ttl-expires enable

Use the ip ttl-expires enable command to enable sending a devices ICMP timeout packet. System view
ip unreachables enable

Use the ip unreachables enable command to enable sending a devices ICMP destination unreachable packet. System view
ip ipv6-prefix ipv6 route-static jitter-interval

Use the jitter-interval command to configure the interval of sending jitter test packets. NQA Test Group view
jitter-packetnum

Use the jitter-packetnum command to configure the number of packets to be sent in a jitter test. NQA Test Group view

3Com Switch 4500G Family Command Reference

29

jumboframe enable

Use the jumboframe enable command to allow jumbo frames that are not larger than 9216 bytes to pass through the current Ethernet port. Ethernet Interface view Port Group view
key

Use the key command to set a shared key for the RADIUS authentication/authorization packets or accounting packets. RADIUS Scheme view
key

Use the key command to configure a shared key for TACACS+ authentication, authorization or accounting. TACACS+ Scheme view
lacp port-priority

Use the lacp port priority command to assign an LACP priority to the port or ports in the port group. Ethernet Interface view Port-Group view
lacp system-priority

Use the lacp system-priority command to assign an LACP priority to the local system. System view
language-mode

Use the language-mode command to toggle between the language modes (that is, language environments) of the command line interface (CLI) to meet your requirement. User view
last-member-query-interval

Use the last-member-query-interval command to configure the global interval of sending IGMP last-member queries. IGMP Snooping view
lcd

Use the lcd command to display the local work directory on the FTP client. FTP Client view
ldap-server

Use the ldap-server ip command to configure the LDAP server IP address and the port. PKI Domain view
level

Use the level command to set the priority level of the user. Local User view
link-aggregation group description

Use the link-aggregation group description command to configure a name or a description for the specified link aggregation group. System view
link-aggregation group mode

Use the link-aggregation group mode command to create a manual or static LACP link aggregation group. System view
local-proxy-arp enable

Use the local-proxy-arp enable command to enable local proxy ARP. VLAN Interface view
local-server

Use the local-server command to create a local RADIUS authentication server (that is, set the related parameters of the server). System view
local-user

Use the local-user command to add a local user and enter local user view. System view
local-user password-display mode

Use the local-user password-display-mode command to set the password display mode of all users. System view

30

3Com Switch 4500G Family Command Reference

locality

Use the locality command to name the geographical locality of an entity, by a city for example. PKI Entity view
lock

Use the lock command to lock the current user interface and prevent unauthorized users from accessing it. User view
logging-host

Use the logging-host command to configure a public logging host on the management device for member devices in the cluster. Cluster view
loopback

Use the loopback command to enable Ethernet Interface loopback testing. Ethernet Interface view
loopback-detection control enable

Use the loopback-detection control enable command to enable loopback detection for a Trunk port or Hybrid port. Ethernet Interface view
loopback-detection enable

Use the loopback-detection enable command to enable the loopback detection function globally or for a specific port. System view Ethernet Interface view
loopback-detection interval-time

Use the loopback-detection interval-time command to configure time interval for external loopback detection. System view
loopback-detection per-vlan enable

Use the loopback-detection per-vlan enable command to enable loopback detection in all VLANs with Trunk ports or Hybrid ports. Ethernet Port view
ls

Use the ls command to query for the name of all files and directories in the current directory. FTP Client view
ls

Use the ls command to display the files in the specified directory. This command functions as the dir command does. SFTP Client view
mac-address (Ethernet Port view)

Use the mac-address command to add or modify the MAC address table entry on a specified interface. Ethernet Port view
mac-address (System view)

Use the mac-address command to add or modify the MAC address table entry. System view
mac-address max-mac-count

Use the mac-address max-mac-count command to configure the maximum number of MAC addresses that can be learned by a specified Ethernet port, and whether to forward packets when the number of learned MAC addresses has reached the maximum number. Ethernet Port view Port Group view
mac-address timer

Use the mac-address timer command to configure the aging time of the dynamic address table entry. System view
mac-authentication

Use the mac-authentication command to enable MAC authentication globally. System view Ethernet Port view
mac-authentication domain

Use the mac-authentication domain command to specify the ISP domain for MAC authentication. System view

3Com Switch 4500G Family Command Reference

31

mac-authentication timer

Use the mac-authentication timer command to set the MAC authentication timers. System view
management-vlan

Use the management-vlan command to specify the management VLAN on the switch. Cluster view
max-response-time

Use the max-response-time command to configure the global value of the maximum response time to IGMP general queries. IGMP Snooping view
mdi

Use the mdi command to configure the cable type for an Ethernet interface. Ethernet Interface view
mirror-to interface

Use the mirror-to interface command to configure the action of mirroring traffic to a specified port. Traffic Behavior view
mirroring group

Use the mirroring-group command to create the port mirroring group. System view
mirroring-group mirroring-port

Use the mirroring-group mirroring-port command to add a source port to a mirroring group already created. System view
mirroring-group monitor-port

Use the mirroring-group monitor-port command to add a destination port to a mirroring group already created. System view
mirroring-port

Use the mirroring-port command to configure the present port as a mirroring port under interface view. Interface view
mkdir

Use the mkdir command to create a directory in a specified directory of a specified storage device. User view
mkdir

Use the mkdir command to create a directory on the remote FTP server. FTP Client view
mkdir

Use the mkdir command to create a directory on the remote SFTP server. SFTP Client view
more

Use the more command to display the content of a specified file. User view
move

Use the move command to move a file to a specified directory. You can also assign a new name for the file. User view
multicast-suppression

Use the multicast-suppression command to configure multicast storm suppression ratio. Ethernet Interface view Port Group view
multicast-vlan enable

Use the multicast-vlan enable command to configure the VLAN as a multicast VLAN. System view
multicast-vlan subvlan

Use the multicast-vlan subvlan command to configure a group of VLANs as the sub-VLANs of a multicast VLAN. System view
nas-ip

Use the nas-ip command to set the source IP address used by the switch to send RADIUS packets. RADIUS Scheme view

32

3Com Switch 4500G Family Command Reference

nas-ip

Use the nas-ip command to specify the source address for sending TACACS+ packets. TACACS+ Scheme view
ndp enable

Use the ndp enable command to enable NDP globally or on a port System view Ethernet Interface view
ndp timer aging

Use the ndp timer aging command to set the holdtime of the NDP information sent by the local switch, that is, to specify how long a device will hold the NDP packets received from the local device. After the aging timer expires, the device removes the received NDP neighbor node information. System view
ndp timer hello

Use the ndp timer hello command to set the interval to send NDP packets. System view
network

Use the network command to enable RIP on a specified network. RIP view
nm-interface vlan-interface

Use the nm-interface vlan-interface command to configure an NMS interface of the management device. Cluster view
nqa

Use the nqa command to create an NQA test group and enter NQA test group view. System view
nqa-agent enable

Use the nqa-agent enable command to enable the NQA client. System view
nqa-agent max-requests

Use the nqa-agent max-requests command to set the maximum number of tests that the NQA client can simultaneously perform. System view
nqa-server enable

Use the nqa-server enable command to enable the NQA server. System view
nqa-server tcpconnect

Use the nqa-server tcpconnect command to create a TCP listening service. System view
nqa-server udpecho

Use the nqa-server udpecho command to create a UDP connection. System view
ntdp enable

Use the ntdp enable command enable NTDP globally or on a port. System view Ethernet Port view
ntdp explore

Use the ntdp explore command to start topology information collection manually. User view
ntdp hop

Use the ntdp hop command to set a range (in terms of hop count) for topology information collection. System view
ntdp timer

Use the ntdp timer command to configure the interval to collect topology information. System view
ntdp timer hop-delay

Use the ntdp timer hop-delay command to set the delay time for a switch to forward topology-collection request packets. System view

3Com Switch 4500G Family Command Reference

33

ntdp timer port-delay

Use the ntdp timer port-delay command to set the delay time for a switch to forward a received topology-collection request packet through its successive ports. System view
ntp-service access

Use the ntp-service access command to set the authority to access the local equipment. System view
ntp-service authentication enable

Use the ntp-service authentication enable command to enable the NTP-service authentication. System view
ntp-service authentication-keyid

Use the ntp-service authentication-keyid command to configure an NTP authentication key. System view
ntp-service broadcast-client

Use the ntp-service broadcast-client command to configure an Ethernet switch to operate in NTP broadcast client mode. VLAN Interface view
ntp-service broadcast-server

Use the ntp-service broadcast-server command to configure the device to work in the NTP broadcast server mode. VLAN Interface view
ntp-service in-interface disable

Use the ntp-service in-interface disable command to disable an interface to receive NTP message. VLAN Interface view
ntp-service max-dynamic sessions

Use the ntp-service max-dynamic-sessions command to set the maximum number of dynamic NTP sessions. System view
ntp-service multicast-client

Use the ntp-service multicast-client command to configure the device to work in the NTP multicast client mode. VLAN Interface view
ntp-service multicast-server

Use the ntp-service multicast-server command to configure an Ethernet switch to operate in NTP multicast server mode. VLAN Interface view
ntp-service reliable authentication-keyid

Use the ntp-service reliable authentication-keyid command to specify that the created authentication key is a trusted key. When NTP authentication enabled, a client can be synchronized only to a server that can provide a trusted authentication key. System view
ntp-service source-interface

Use the ntp-service source-interface command to designate an interface to transmit NTP message. System view
ntp-service unicast-peer

Use the ntp-service unicast-peer command to designate a symmetric-passive peer for the device. System view
ntp-service unicast-server

Use the ntp-service unicast-server command to designate an NTP server for the device. System view
open

Use the open command to log onto the IPv4 FTP server under the FTP client view. FTP Client view
organization

Use the organization command to specify the name of the organization to which the entity belongs. PKI Entity view

34

3Com Switch 4500G Family Command Reference

organizational-unit

Use the organizational-unit command to specify the name of the organization unit to which this entity belongs. PKI Entity view
overflow-replace

Use the overflow-replace command to enable the multicast group replacement function globally. IGMP Snooping view
parity

Use the parity command to set the check mode of the user interface. AUX User Interface view only
passive

Use the passive command to set the data transmission mode to passive mode. FTP Client view
password

Use the password command to set a password for the local user. Local User view
password

Use the password command to configure a password used to log in to the FTP server. NQA Test Group view
peer

Use the peer command to define IP addresses of RIP neighboring routers in the NBMA (Non-Broadcast Multi-Access) network. After configuring this command, updating messages are unicast to the peer rather than multicast or broadcast. RIP view
peer-public-key end

Use the peer-public-key end command to return to system view from public key view. Public Key view
ping

Use the ping command to check the IP network connection and the reachability of the host. Any view
pki certificate access-control-policy

Use the pki certificate access-control-policy command to create a certificate attribute access control policy. System view
pki certificate attribute-group

Use the pki certificate attribute-group command to create a certificate attribute group. This command also leads you to certificate attribute group view. System view
pki delete-certificate

Use the pki delete-certificate command to delete the locally stored certificates. System view
pki-domain

Use the pki-domain command to configure the PKI domain to which an SSL server policy or SSL client policy belongs. SSL Server Policy view SSL Client Policy view
pki domain

Use the pki domain command to enter PKI domain view, and configure the parameters of LDAP server and for certificate request and authentication. System view
pki entity

Use the pki entity command to name a PKI entity and enter PKI entity view. System view
pki import-certificate

Use the pki import-certificate command to import an existing CA certificate or local certificate. System view

3Com Switch 4500G Family Command Reference

35

pki request-certificate

Use the pki request-certificate command to deliver certificate request through SCEP to CA for the generated RSA key pair. System view
pki retrieval-certificate

Use the pki retrieval-certificate command to download a certificate from the certificate issuing server. System view
pki retrieval-crl domain

Use the pki retrieval-crl command to obtain the latest CRL from CRL server for the verification of the validity of a current certificate. System view
pki validate-certificate

Use the pki validate-certificate command to verify the validity of a certificate. System view
poe disconnect

Use the poe disconnect command to configure a PD disconnection detection mode. System view
poe enable

Use the poe enable command to enable PoE on a PoE interface. PoE Interface view PoE-Profile File view
poe legacy enable

Use the poe legacy enable command to enable the PSE to supply power to the detected non-standard PDs. System view
poe max power

Use the poe max-power command to configure the maximum power for a PoE interface. PoE Interface view PoE-Profile File view
poe mode

Use the poe mode command to configure a PoE mode. Ethernet Port view
poe pd-description

Use the poe pd-description command to configure a description for the PD connected to a PoE interface. PoE Interface view
poe pd-policy priority

Use the poe pd-policy priority command to configure a PD power management priority policy. System view
poe priority

Use the poe priority command to configure the power supply priority on a port. PoE Interface view PoE-Profile File view
poe-profile

Use the poe-profile profile-name command to create a PoE configuration file and enter PoE-profile view. System view
poe update

Use the poe update command to upgrade the PSE processing software online System view
poe utilization-threshold

Use the poe utilization-threshold command to configure a power alarm threshold for the PSE. System view
port

Use the port command to add one Access port or a group of Access ports to a VLAN. VLAN view
port access vlan

Use the port access vlan command to add the current Access port to a specified VLAN. Ethernet Port view Port Group view

36

3Com Switch 4500G Family Command Reference

port-group

Use the port-group manual command to enter a specified manual port group view. If the manual port group does not exist, create it before entering its view. Use the port-group aggregation command to enter a port group aggregation view. System view
port-group aggregation

Use the port-group aggregation command to enter aggregation port group view. System view
port hybrid pvid vlan

Use the port hybrid pvid vlan command to configure the default VLAN ID of the hybrid port. Ethernet Port view Port Group view
port hybrid vlan

Use the port hybrid vlan command to add the current Hybrid port to the specified VLAN(s). Ethernet Port view Port Group view
port-isolate enable

Use the port isolate command to add an Ethernet port to the isolation group. Ethernet Port view Port Group view
port link-aggregation group

Use the port link-aggregation group agg_id command to assign the Ethernet port to the specified link aggregation group (manual or static LACP). Ethernet Interface view
port trunk permit vlan

Use the port trunk permit vlan command to add a trunk port to one VLAN, a selection of VLANs, or all VLANs. Ethernet Port view Port Group view
port trunk pvid vlan

Use the port trunk pvid vlan command to configure the default VLAN ID for a trunk port. Ethernet Port view Port Group view
prefer-cipher

Use the prefer-cipher command to configure the preferred cipher suite for SSL client policy. SSL Client Policy view
preference

Use the preference command to define the route priority. RIP view
preference primary accounting

Use the primary accounting command to set the IP address and port number of the primary RADIUS accounting server. RADIUS Scheme view
primary accounting

Use the primary accounting command to configure a primary TACACS+ accounting server. TACACS+ Scheme view
primary authentication

Use the primary authentication command to set the IP address and port number of the primary RADIUS authentication/authorization server. RADIUS Scheme view
primary authentication

Use the primary authentication command to configure a primary TACACS+ authentication server. TACACS+ Server Group view
primary authorization

Use the primary authorization command to configure a primary TACACS+ authorization server. TACACS+ Scheme view

3Com Switch 4500G Family Command Reference

37

probe-failtimes

Use the probe-failtimes command to set the number of consecutive probe failures in an NQA test before a trap message is sent to the network management server to indicate a probe failure. NQA Test Group view
protocol inbound

Use the protocol inbound command to configure the protocols supported in the current user interface. VTY User Interface view only
protocol inbound

Use the protocol inbound command to enable the current user interface to support Telnet, PAD, SSH, or all of them. VTY User Interface view
proxy-arp enable

Use the proxy-arp enable command to enable proxy ARP. VLAN Interface view
public-key-code begin

Use the public-key-code begin command to enter RSA key code view. Public Key view
public-key-code end

Use the public-key-code end command to return from public key code view to public key view and to save the configured public key. RSA Key Code view
put

Use the put command to upload a local file to the remote SFTP server. FTP Client view
put

Use the put command to upload a local file to the remote SFTP server. SFTP Client view
pwd

Use the pwd command to display the current path. User view
pwd

Use the pwd command to display the current directory on the FTP server. FTP Client view
pwd

Use the pwd command to display working directories on a remote SFTP server. SFTP Client view
qos apply policy

Use the qos apply policy command to apply the associated policy on the port. Gigabit Ethernet Port view
qos lr

Use the qos lr command to limit the rate of inbound or outbound traffic via physical interfaces. Interface view
qos map-table

Use the qos map-table command to enter the specified priority mapping view. System view
qos policy

Use the qos policy command to define a policy and enter policy view. System view
qos priority

Use the qos priority command to configure the port priority of the current port. Gigabit Ethernet Port view
qos sp

Use the qos sp command to configure SP queuing on the current port. Ethernet Port view
qos vlan-policy

Use the qos vlan-policy command to apply a QoS policy to specified VLANs. System view

38

3Com Switch 4500G Family Command Reference

qos wrr

Use the qos wrr weight command to configure the WRR queue or modify the parameters of the WRR queue on the port. Gigabit Ethernet Port view
quit

Use the quit command to return from current view to lower level view, or exit the system if current view is user view. Any view
quit

Use the quit command to terminate the connection to the remote FTP server. FTP client view
quit

Use the quit command to terminate the connection to the remote SFTP server and return to system view.. User view
radius nas-ip

Use the radius nas-ip command to set the source IP address used by the switch to send RADIUS packets. System view
radius scheme

Use the radius scheme command to create a RADIUS scheme and enter its view. System view
reboot

Use the reboot command to reset the entire system. User view
reboot member

Use the reboot member command to reboot a specified member device on the management device. Cluster view
redirect

Use the redirect command to configure the traffic redirect action for the traffic behavior. Traffic Behavior view
region-name

Use the region-name command to set an MST region name to a switch. MST Region view
remark dot1p

Use the remark dot1p command to configure the 802.1p priority value in the VLAN packets of a class. Traffic Behavior view
remark dsc

Use the remark dscp command to configure the DSCP value of a packet. Traffic Behavior view
remark ip-precedence

Use the remark ip-precedence command to configure the IP priority of a packet. Traffic Behavior view
remark local-precedence

Use the remark local-precedence command to configure the local precedence of a packet. Traffic Behavior view
remotehelp

Use the remotehelp command to display help information about the FTP protocol command. FTP Client view
rmdir

Use the rmdir command to delete a specified directory from a remote SFTP server. SFTP Client view
remove

Use the remove command to delete the specified file from a remote server. SFTP Client view
rename

Use the rename command to rename a file or a directory. User view

3Com Switch 4500G Family Command Reference

39

rename

Use the rename command to change a specified file name or directory name on an SFTP server. SFTP Client view
reset acl counter

Use the reset acl counters command to clear statistics about specified or all IPv4 ACLs. User view
reset arp

Use the reset arp command to clear the ARP entries from the ARP mapping table. User view
reset counters interface

Use the reset counters interface command to reset statistics for a specified interface. User view
reset dhcp relay statistics

Use the reset dhcp relay statistics command to remove statistics from the relay agent. User view
reset dns dynamic-host

Use the reset dns dynamic-host command to clear the cache. User view
reset dot1x statistics

Use the reset dot1x statistics command to clear the statistics of 802.1x. User view
reset garp statistics

Use the reset garp statistics command to clear the GARP statistics (such as the information about the packets received/sent/discarded by GVRP/GMRP) on specified (or all) ports. User view
reset hwatacs statistics

Use the reset hwtacacs statistics command to clear TACACS+ protocol statistics.reset hwtacacs statistics User view
reset igmp-snooping group

Use the reset igmp-snooping group command to clear IGMP Snooping entries. User view
reset igmp-snooping statistics

Use the reset igmp-snooping statistics command to clear the statistics information of IGMP messages learned by IGMP Snooping. User view
reset ip ip-prefix

Use the reset ip ip-prefix command to delete statistics of a specified IPv4 address prefix. If no ip-prefix-name is specified, the statistics of all the IPv4 address prefixes will be deleted. User view
reset ip routing-table

Use the reset ip routing-table command to reset routing table statistics for the routing table. User view
reset ip statistics

Use the reset ip statistics command to clear the IP statistics information. User view
reset ip ipv6-prefix reset ipv6 routing-table statistics reset lacp statistics

Use the reset lacp statistics command to clear statistics about LACP on specified or all ports. User view
reset logbuffer

Use the reset logbuffer command to reset the log buffer contents. User view
reset ndp statistics

Use the reset ndp statistics command to clear NDP statistics. User view

40

3Com Switch 4500G Family Command Reference

reset qos vlan-policy

Use the reset qos vlan-policy command to clear QoS policy statistics on VLAN(s). User view
reset radius statistics

Use the reset radius statistics command to clear the statistics about the RADIUS protocol. User view
reset recycle-bin

Use the reset recycle-bin command to completely delete file(s) in the recycle bin in the Flash. User view
reset rip statistics

Use the reset rip statistics command to clear the statistics information in specified RIP process. User view
reset saved-configuration

Use the reset saved-configuration command to erase the startup configuration file. User view
reset stop-accounting-buffer

Use the reset stop-accounting-buffer command to delete the buffered no-response stop-accounting request packets. User view
reset stop-accounting-buffer

Use the reset stop-accounting-buffer command to clear the stop-accounting requests that have no response and are buffered on the switch. User view
reset stp

Use the reset stp command to clear the MSTP statistics of specified Ethernet ports. User view
reset tcp statistics

Use the reset tcp statistics command to clear the TCP statistics information. User view
reset trapbuffer

Use the reset trapbuffer command to reset the trap buffer contents. User view
reset udp-helper packet

Use the reset udp-helper packet command to clear statistics about the packets forwarded. User view
reset udp statistics

Use the reset udp statistics command to clear the UDP statistics information. User view
reset unused porttag

User the command reset unused porttag to clear the unused 16-bit interface index in the current system User view
restore startup-configuration

Use the restore startup-configuration command to download a configuration file from the specified TFTP server and set it as the configuration file for next startup. User view
retry

Use the retry command to set the maximum number of transmission attempts of RADIUS requests. RADIUS Scheme view
retry realtime-accounting

Use the retry realtime-accounting command to set the maximum number of real-time accounting request attempts. RADIUS Scheme view
retry stop-accounting

Use the retry stop-accounting command to set the maximum number of transmission attempts of the stop-accounting requests buffered due to no response. RADIUS Scheme view

3Com Switch 4500G Family Command Reference

41

retry stop-accounting

Use the retry stop-accounting command to enable stop-accounting packet retransmission and configure the maximum number of stop-accounting request attempts. TACACS+ Scheme view
return

Use the return command to return to user view from any other view. System view or higher level views
revision-level

Use the revision-level command to set the MSTP revision level for a switch. MST Region view
rip

Use the rip command to create a RIP process in system view. System view
rip authentication-mode

Use the rip authentication-mode command to configure RIP-2 authentication mode and corresponding parameters. Interface view
rip input

Use the rip input command to allow an interface to receive RIP packets. Interface view
rip metricin

Use the rip metricin command to add an additional metric to the received routes. Interface view
rip metricout

Use the rip metricout value command to add an additional metric to the outgoing routes. Interface view
rip output

Use the rip output command to enable an interface to receive RIP messages. Interface view
rip poison-reverse

Use the rip poison-reverse command to enable the poison reverse function for RIP. Interface view
rip split-horizon

Use the rip split-horizon command to enable the split horizon function for RIP. Interface view
rip summary-address

Use the rip summary-address command to assign a summary IP address Interface view
rip version

Use the rip version command to configure the version of RIP packets on an interface. Interface view
rmdir

Use the rmdir command to delete a directory. User view


rmdir

Use the rmdir command to delete the specified directory from the remote FTP server. FTP Client view
rmon alarm

Use the rmon alarm command to create an entry in the RMON alarm table. System view
rmon event

Use the rmon event command to create an entry in the RMON event table. System view
rmon history

Use the rmon history command to create an entry in the RMON history control table. Ethernet Port view

42

3Com Switch 4500G Family Command Reference

rmon prialarm

Use the rmon prialarm command to create an entry in the private alarm table of RMON. System view
rmon statistics

Use the rmon statistics command to create an entry in the RMON statistics table. Ethernet Port view
root-certificate fingerprint

Use the root-certificate fingerprint command to configure the fingerprint for authenticating the CA root certificate. PKI Domain view
route-policy

Use the route-policy command to create a routing policy and enter its view. System view
route-policy router-aging-time

Use the router-aging-time command to configure the global aging time of router ports. IGMP Snooping view
ripng ripng default-route ripng enable ripng poison-reverse ripng split-horizon ripng summary-address rsa local-key-pair create

Use the rsa local-key-pair create command to create the RSA host key pair and server key pair. System view
rsa local-key-pair destroy

Use the rsa local-key-pair destroy command to destroy the RSA host key pair and server key pair. System view
rsa local-key-pair export

Use the rsa local-key-pair create command to create the RSA host key pair and server key pair. System view
rsa peer-public-key

Use the rsa peer-public-key command to enter public key view. Use the rsa peer-public-key import sshkey command to import a public key from a public key file and name the public key. System view
rule

Use the rule command to create a certificate attribute access control rule. Certificate Attribute Access Control Policy view
rule (advanced IPv4 ACL)

Use the rule command to define or modify an ACL rule. If the rule does not exist, it is created first. Advanced IPv4 ACL view
rule (basic IPv4 ACL)

Use the rule command to create an IPv4 ACL rule or modify the rule if it has existed. Basic IPv4 ACL view
rule (Ethernet frame header ACL)

Use the rule command to create an ACL rule or modify the rule if it has existed. Ethernet frame header ACL view
rule comment

Use the rule comment command to create or modify an ACL rule description, for example to describe the purpose of the ACL rule or its attributes. Advanced ACL view / Layer 2 ACL view
save

Use the save command to save the current configuration to a configuration file in the flash memory. Any view

3Com Switch 4500G Family Command Reference

43

schedule reboot at

Use the schedule reboot at command to enable the scheduled reboot function of the router and schedule the reboot time and date. User view
schedule reboot delay

Use the schedule reboot delay command to enable the timing reboot switch function and set the waiting time. User view
screen-length

Use the screen-length command to set the number of lines the terminal screen can contain. User Interface view
secondary accounting

Use the secondary accounting command to set the IP address and port number of the secondary RADIUS accounting server. RADIUS Scheme view
secondary accounting

Use the secondary accounting command to configure a secondary TACACS+ accounting server. TACACS+ Scheme view
secondary authentication

Use the secondary authentication command to set the IP address and port number of the secondary RADIUS authentication/authorization server. RADIUS Scheme view
secondary authentication

Use the secondary authentication command to configure a secondary TACACS+ authentication server. TACACS+ Scheme view
secondary authorization

Use the secondary authorization command to configure a secondary TACACS+ authorization server. TACACS+ Scheme view
self-service-url

Use the self-service-url command to enable the self-service server location function. Use the self-service-url disable command to disable the self-service server location function ISP Domain view
send

Use the send command to send messages to a specified user interface or all user interfaces. User view
send-trap

Use the send-trap command to enable the Trap debugging (A Trap message is sent to the network management server). NQA Test Group view
sendpacket passroute

Use the sendpacket passroute command to enable routing table bypass function to test the direct connectivity to the destination. NQA Test Group view
server-type

Use the server-type command to configure the RADIUS server type supported by the Switch. RADIUS Scheme view
service-type

Use the command service-type to specify the login type and the corresponding available command level. Local User view
service-type

Use the command service-type to authorize a user access to the specified services. Local User view
service-type ftp

Use the service-type ftp command to configure the FTP service type and accessible directories for users. Local User view

44

3Com Switch 4500G Family Command Reference

session

Use the session command to configure the maximum number of sessions that can be buffered and the session timeout time. SSL Server Policy view
set authentication password

Use the set authentication password command to set the local password. User Interface view
sftp

Use the sftp command to initiate a connection to the remote SFTP server and enter SFTP client view. System view
sftp client source

Use the sftp client source command to specify the source IP address or interface of the SFTP client. System view
sftp server enable

Use the sftp server enable command to enable the secure FTP (SFTP) server. System view
sftp server idle time-out

Use the sftp server idle-timeout command to set the idle timeout period for SFTP user connections. System view
shell

Use the shell command to make terminal services available for the user interface. User Interface view
shutdown

Use the shutdown command to disable the VLAN interface. VLAN Interface view
shutdown

Use the shutdown command to shut down an Ethernet interface. Ethernet Interface view
silent-interface

Use the silent-interface command to disable an interface from sending RIP route update messages. RIP view
snmp-agent

Use the snmp-agent command to enable SNMP Agent. System view


snmp-agent community

Use the snmp-agent community command to set a community name and to enable users to access the switch through SNMP. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent community

Use the snmp-agent community command to configure a new SNMP community. System view
snmp-agent group

Use the snmp-agent group command to configure a SNMP group. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent group

Use the snmp-agent group command to configure a new SNMP group and specify its access right. System view
snmp-agent local-engineid

Use the snmp-agent local-engineid command to configure a local engine ID for an SNMP entity. System view
snmp-agent mib-view

Use the snmp-agent mib-view command to create or update MIB view information so that MIB objects can be specified. System view

3Com Switch 4500G Family Command Reference

45

snmp-agent packet max-size

Use the snmp-agent packet max-size command to configure the maximum number of bytes in an SNMP packet that can be received or sent by an agent. System view
snmp-agent sys-info

Use the snmp-agent sys-info command to configure system information, including the contact information, the location information, and the SNMP version in use. System view
snmp-agent target-host

Use the snmp-agent target-host command to command to configure the related settings for a Trap target host. System view
snmp-agent trap enable

Use the snmp-agent trap enable command to enable the device to send Trap packets. System view
snmp-agent trap life

Use the snmp-agent trap life command to configure the life time for Trap packets. Traps will be discarded when their life time expires. System view
snmp-agent trap queue-size

Use the snmp-agent trap queue-size command to configure the size of the Trap queue. System view
snmp-agent trap source

Use the snmp-agent trap source command to specify the source IP address to send Trap packets. System view
snmp-agent usm-user

Use the snmp-agent usm-user command to add a new user to an SNMP group. You can also optionally use this command to apply an ACL to filter network management users. System view
snmp-agent usm-user

Use the snmp-agent usm-user command to add a user to an SNMP group. System view
snmp-host

Use the snmp-host command to configure an SNMP host for the member devices inside a cluster on the management device. Cluster view
source-deny

Use the source-deny command to enable multicast source port filtering. IGMP Snooping view
source-interface

Use the source-interface command to configure the source interface from which a test request packet is sent. In this case, the routing table is not searched. NQA Test Group view
source-ip

Use the source-ip command to configure a source IP address for a test request packet. NQA Test Group view
source-port

Use the source-port command to configure a source port number for a test request packet. NQA Test Group view
speed

Use the speed command to set the transmission speed of the user interface. AUX User Interface view
speed

Use the speed command to configure Ethernet interface data rate. Ethernet Interface view
ssh client authentication server

Use the ssh client assign rsa-key command to configure the host public key of the server so that the client can determine whether the server is reliable. System view

46

3Com Switch 4500G Family Command Reference

ssh client first-time enable

Use the ssh client first-time enable command to configure the client to run the initial authentication. System view
ssh client source

Use the ssh client source command to specify the source IP address or source interface of the SSH client. System view
ssh server authentication-retries

Use the ssh server authentication-retries command to set the maximum number of SSH connection authentication attempts, which is validated at next login. System view
ssh server authentication time-out

Use the ssh server authentication-timeout command to set the SSH user authentication timeout period on the SSH server. System view
ssh server compatible-ssh1x enable

Use the ssh server compatible-ssh1x command to enable the SSH server to work with SSH1.x clients. System view
ssh server enable

Use the ssh server enable command to enable SSH server. System view
ssh server rekey-interval

Use the ssh server rekey-interval command to set the interval for updating the server key pair. System view
ssh user assign rsa-key

Use the ssh user assign rsa-key command to assign an existing public key to a user. If the user does not exist, the command creates the user with the authentication method of RSA and the default service type of stelnet at first. System view
ssh user authentication-type

Use the ssh user authentication-type command to specify the authentication method for an SSH user. If the specified user does not exist, the command creates the user with the default service type of stelnet at first. System view
ssh user service-type

Use the ssh user service-type command to specify service type for a user. System view
ssh2

Use the ssh2 command to enable the connection between SSH client and server, define key exchange algorithm preference, encryption algorithm preference and HMAC algorithm preference on the server and client. System view
ssl client-policy

Use the ssl client-policy command to create an SSL policy and enter its view. System view
ssl server-policy

Use the ssl server-policy command to create an SSL server policy and enter its view. System view
startup saved-configuration

Use the startup saved-configuration command to specify a main configuration file for next startup. The specified file must be ended with a .cfg extension and saved in the root directory of the storage device. User view
state

Use the state command to configure the state of the current ISP domain/current user. ISP Domain view Local User view
state

Use the state command to set the status of a RADIUS server. RADIUS Scheme view

3Com Switch 4500G Family Command Reference

47

state

Use the state command to clarify the name of the state where an entity lies. PKI Entity view
step

Use the step command to set a rule numbering step. Basic IPv4 ACL view Advanced IPv4 ACL view Ethernet Frame Header ACL view
stop-accounting-buffer enable

Use the stop-accounting-buffer enable command to enable the switch to buffer the stop-accounting requests that bring no response. RADIUS Scheme view
stop-accounting-buffer enable

Use the stop-accounting-buffer enable command to enable the switch to buffer the stop-accounting requests that bring no response. TACACS+ Scheme view
stp

Use the stp command to enable or disable the MSTP feature globally or for a port or a group of ports. System view Ethernet Port view Port Group view
stp bpdu-protection

Use the stp bpdu-protection command to enable the BPDU protection function. System view
stp bridge-diameter

Use the stp bridge-diameter command to set the network diameter of a switched network, which is represented in terms of the maximum number of switches between any two terminals in a switched network. System view
stp compliance

Use the stp compliance command to configure the MSTP packet format for a port or a group of ports Ethernet Port view Port Group view
stp cost

Use the stp cost command to set the path cost of a port or a group or ports in the specified MST instance. Ethernet Port view Port Group view
stp edged-port

Use the stp edged-port command to configure the current Ethernet port as either an edge port or a non-edge port. Ethernet Port view Port Group view
stp loop-protection

Use the stp loop-protection command to enable the loop guard function for a port or a group of ports. Ethernet Port view Port Group view
stp max-hops

Use the stp max-hops command to set the maximum hop count of the MST region to which the switch belongs. System view
stp mcheck

Use the stp mcheck command to carry out the mCheck operation globally or on a port. Ethernet Port view System view
stp mode

Use the stp mode command to set the MSTP operation mode of the switch. System view
stp pathcost-standard

Use the stp pathcost-standard command to set the standard used for calculating the default path costs of ports. System view

48

3Com Switch 4500G Family Command Reference

stp point-to-point

Use the stp point-to-point command to specify whether the current port connects to a point-to-point link. Ethernet Port view
stp port priority

Use the stp port priority command to set the priority of a port or a group or ports in the specified MST instance. Ethernet Port view Port Group view
stp priority

Use the stp priority command to set the priority of a switch in a spanning tree instance. System view
stp region-configuration

Use the stp region-configuration command to enter MST region view. System view
stp root primary

Use the stp root primary command to configure the current switch to be the root bridge of a specified spanning tree instance. System view
stp root-protection

Use the stp root-protection command to enable the root guard function for a port or a group of ports. Ethernet Port view Port Group view
stp root secondary

Use the stp root secondary command to configure the current switch as a secondary root bridge of a specified spanning tree instance. System view
stp tc-protection

Use the stp tc-protection command to enable or disable the TC-BPDU attack prevention function for the switch. System view
stp timer-factor

Use the stp timer-factor command to configure the timeout time of the device by setting the timeout factor. Timeout time = timeout factor 3 hello time. System view
stp timer forward-delay

Use the stp timer forward-delay command to set the Forward delay for a switch. System view
stp timer hello

Use the stp timer hello command to set the Hello time for a switch. System view
stp timer max-age

Use the stp timer max-age command to set the max age timer of the device. System view
stp transmit-limit

Use the stp transmit-limit command to set the maximum transmission rate of a port or a group of ports. Ethernet Port view
stopbits

Use the stopbits command to set the stop bits of the user interface. AUX User Interface view
summary

Use the summary command to enable RIP summarization. Summarized routes are advertised as routes with natural masks. RIP view
super password

Using super password command, you can configure the password for changing the user from a lower level to a higher level. System view

3Com Switch 4500G Family Command Reference

49

sysname

Use the sysname command to set the system name of the Switch. System view
sysname

Use the sysname command to set the system name of the Switch. System view
system-view

Enter system-view to enter the system view from the user view. User view
tcp timer fin-timeout

Use the tcp timer fin-timeout command to configure the TCP finwait timer. System view
tcp timer syn-timeout

Use the tcp timer syn-timeout command to configure the TCP synwait timer. System view
tcp window

Use the tcp window command to configure the size of the transmission and receiving buffers of the connection-oriented socket. System view
telnet

Use the telnet command to Telnet to another switch from the current switch to manage the former remotely. You can terminate a Telnet connection by pressing <Ctrl + K>. User view
terminal debugging

Use the terminal debugging command to configure to display the debugging information on the terminal. User view
terminal debugging

Use the terminal debugging command to enable the display of debug information on the current terminal. User view
terminal logging

Use the terminal logging command to enable the display of log information on the current terminal. User view
terminal monitor

Use the terminal monitor command to enable the monitoring of system information on the current terminal. User view
terminal trapping

Use the terminal trapping command to enable the display of trap information on the current terminal. User view
terminal type

Use the terminal type command to set the terminal type. User interface view
test-enable

Use the test-enable command to enable the NQA test. NQA Test Group view
test-failtimes

Use the test-failtimes command to configure the minimum number of probe failures in a test before a Trap message is sent to the network management server to indicate a test failure. NQA Test Group view
test-type

Use the test-type command to configure the type of the test. NQA Test Group view
tftp get

Use the tftp get command to download a file from a TFTP server to this switch. User view
tftp put

Use the tftp put command to upload a file from the switch to the specified directory on the TFTP server. User view

50

3Com Switch 4500G Family Command Reference

tftp sget

Use the tftp sget command to download in security mode the file from the specified directory on the TFTP server and save it on the local device. User view
tftp-server

Use the tftp-server command to configure a TFTP server for cluster members on the management device. Cluster view
tftp-server acl

Use the tftp-server acl command to reference an ACL to control access to the TFTP server. System view
timeout

Use the timeout command to configure the probe time-out time. If no response packet is received within the time-out time of a request packet, the probe fails. NQA Test Group view
time-range

Use the time-range command to create a time range. System view


timer

Use the timer command to set the interval to send handshake packets. Cluster view
timers timer quiet

Use the timer quiet command to set the wait time for the primary server to restore the active state. RADIUS Scheme view
timer quiet

Use the timer quiet command to set the duration that a primary server must wait before it can resume the active state. TACACS+ Scheme view
timer realtime-accounting

Use the timer realtime-accounting command to set the real-time accounting interval. RADIUS Scheme view
timer realtime-accounting

Use the timer realtime-accounting command to configure a real-time accounting interval. TACACS+ Scheme view
timer response-timeout

Use the timer response-timeout command to set the response timeout time of RADIUS servers. RADIUS Scheme view
timer response-timeout

Use the timer response-timeout command to set the response timeout time of TACACS servers. TACACS+ Scheme view
timers

Use the timers command to adjust RIP timers. RIP view


topology accept

Use the topology accept command to confirm the current topology information of the cluster and save that as a standard topology. Cluster view
topology restore-from

Use the topology restore-from command to obtain and restore the standard topology information from the local flash. Cluster view
topology save-to

Use the topology save-to command to save the standard topology information into the local flash. Cluster view
tos

Use the tos command to assign a value to the ToS field in the header of HWPing test packets. NQA Test Group view

3Com Switch 4500G Family Command Reference

51

tracert

Use the tracert command to trace the gateways the test packets passes through during its journey from the source to the destination. Any view
traffic behavior

Use the traffic behavior command you can define a traffic behavior and enter the behavior view. System view
traffic classifier

Use the traffic classifier command to define a class and enter the class view. System view
ttl

Use the ttl command to configure the maximum number of hops a test request packet traverses in the network. NQA Test Group view
udp-helper enable

Use the udp-helper enable command to enable the UDP Helper, allowing the device to convert a UDP broadcast packet into a unicast packet and send it to the specified server. System view
udp-helper port

Use the udp-helper port command to specify the port whose UDP packets are to be forwarded. System view
udp-helper server

Use the udp-helper server command to specify the destination server for the UDP packets to be forwarded. Interface view
undelete

Use the undelete command to restore a file from the recycle bin. User view
unicast-suppression

Use the unicast-suppression command to configure unicast storm suppression ratio. Ethernet Interface view Port Group view
user

Use the user command to log onto the FTP server as a particular user. FTP Client view
user-interface

Using user-interface command to enter one or more user interface views to perform configuration. System view
username

Use the username command to configure a name used for logging onto the FTP server. NQA Test Group view
user-name-format

Use the user-name-format command to set the format of the user names to be sent to RADIUS server. RADIUS Scheme view
user-name-format

Use the user-name-format command to configure the username format sent to the TACACS server. TACACS+ Scheme view
user privilege level

Use the user privilege level level command to configure the command level that a user can access from the specified user interface. User Interface view
validate source address

Use the validate-source-address command to enable the source address validation for received RIP updating routes. RIP view
verbose

Use the verbose command to enable the verbose function, which displays execution and response information of other related commands. FTP Client view

52

3Com Switch 4500G Family Command Reference

version

Use the version command to define a global RIP version. RIP view
version

Use the version command to configure the SSL protocol version adopted by an SSL client policy. SSL Client Policy view
virtual-cable-test

Use the virtual-cable-test command to enable the system to test the cable connected to a specific port and to display the results. Ethernet Interface view
vlan

Use the vlan command to create a VLAN. Use the vlan vlan-id command to enter a VLAN interface view. The VLAN interface must be created first before entering its view. System view
vlan-mapping modulo

Use the vlan-mapping modulo command to map VLANs to specific spanning tree instances. MST Region view
voice vlan

Use the voice vlan command to enable the voice VLAN function globally. System view
voice vlan aging

Use the voice vlan aging command to set the aging time for a voice VLAN. System view
voice vlan enable

Use the voice vlan enable command to enable the voice VLAN function for a port. Ethernet Port view
voice vlan mac-address

Use the voice vlan mac-address command to set a MAC address used for a voice VLAN to identify voice devices. System view
voice vlan mode auto

Use the voice vlan mode auto command to configure an Ethernet port to operate in the automatic voice VLAN mode. Ethernet Port view
voice vlan security enable

Use the voice vlan security enable command to enable the voice VLAN security mode. System view

Vous aimerez peut-être aussi