Loading, please wait ...
- Home
- About this guide
- Time synchronization
- NTP
- Elements of time synchronization
- Time synchronization protocols
- Setting a time protocol on the switch
- The SNTP protocol
- Selecting and configuring SNTP
- Viewing SNTP parameters
- Enabling SNTP client authentication
- SNTP poll interval
- SNTP server priority
- SNTP software version
- SNTP server address
- SNTP authentication trusted keys
- Configuration files and the include-credentials command
- Configuring the key-identifier, authentication mode, and key-value
- SNTP messages in the event log
- Storing security information in the running-config file
- The TimeP Protocol
- Disable time synchronization protocols
- Other time protocol commands
- Viewing current resource usage
- Viewing information on resource usage
- Services
- Transceiver status
- Configuring the type of a module
- Clearing the module configuration
- Configuring transceivers and modules that have not been inserted
- Power consumption
- Fans
- System boot diagnostics
- Port status and configuration
- Viewing port status and configuration
- Viewing transceiver information
- The port VLAN tagged status
- Dynamically updating the show interfaces command
- Customizing the show interfaces command
- Enabling or disabling ports and configuring port mode
- Basic USB port commands
- Enabling or disabling flow control
- Configuring auto-MDIX
- Configuring friendly port names
- Listing all ports or selected ports with their friendly port names
- Configuring uni-directional link detection
- Port status and Port parameters
- Auto-MDIX configurations
- About using friendly port names
- Uni-directional link detection (UDLD)
- Uplink failure detection
- Port Shutdown with Broadcast Storm
- Multicast Storm Control
- Power over ethernet (PoE/PoE+) operation
- PoE
- Planning and implementing a PoE configuration
- PoE operation
- About configuring PoE
- Disabling or re-enabling PoE port operation
- Enabling support for pre-standard devices
- Configuring the PoE port priority
- Controlling PoE allocation
- Manually configuring PoE power levels
- Configuring PoE redundancy (chassis switches only)
- Changing the threshold for generating a power notice
- Enabling or disabling ports for allocating power using LLDP
- Enabling PoE detection via LLDP TLV advertisement
- Negotiating power using the DLL
- Initiating advertisement of PoE+ TLVs
- Viewing PoE when using LLDP information
- Viewing the global PoE power status of the switch
- Viewing PoE status on all ports
- Viewing the PoE status on specific ports
- Configuring thresholds for generating a power notice
- PoE/PoE+ allocation using LLDP
- Port trunking
- Port trunking overview
- Viewing and configuring port trunk groups
- Viewing static trunk type and group for all ports or for selected ports
- Viewing static LACP and dynamic LACP trunk data
- Configuring a static trunk or static LACP trunk group
- Removing ports from a static trunk group
- Enabling dynamic LACP trunk groups
- Remove ports from a dynamic LACP trunk group
- Set the LACP key
- Viewing and configuring a static trunk group (Menu)
- Enable L4-based trunk load balancing
- Viewing trunk load balancing
- Distributed trunking
- Port trunk operations
- Trunk configuration methods
- Dynamic LACP trunk
- Dynamic LACP Standby Links
- Viewing LACP Local Information
- Viewing LACP Peer Information
- Viewing LACP Counters
- Using keys to control dynamic LACP trunk configuration
- Static trunk
- Static or dynamic trunk group overview
- Enabling a dynamic LACP trunk group
- Dynamic LACP standby links
- Viewing LACP local information
- Viewing LACP peer information
- Viewing LACP counters
- Trunk group operation using LACP
- Default port operation
- LACP operating notes and restrictions
- 802.1X (Port-based access control) configured on a port
- Port security
- Changing trunking methods
- Static LACP trunks
- Dynamic LACP trunks
- VLANs and dynamic LACP
- Blocked ports with older devices.
- Spanning Tree and IGMP
- Half-duplex, different port speeds, or both not allowed in LACP trunks
- Dynamic/static LACP interoperation
- Trunk group operation using the "trunk" option
- Viewing trunk data on the switch
- Outbound traffic distribution across trunked links
- Trunk load balancing using Layer 4 ports
- Distributed trunking overview
- Configuring peer-keepalive links
- Updating software versions with DT
- Port Traffic Controls
- ICMP rate-limiting
- Guidelines for configuring ICMP rate-limiting
- Configuring ICMP rate-limiting
- Using both ICMP rate-limiting and all-traffic rate-limiting on the same interface
- Viewing the current ICMP rate-limit configuration
- Operating notes for ICMP rate-limiting
- ICMP rate-limiting trap and Event Log messages
- Configuring inbound rate-limiting for broadcast and multicast traffic
- Guaranteed minimum bandwidth (GMB)
- Rate-limiting Unknown Unicast Traffic
- Jumbo frames
- Fault Finder
- ICMP rate-limiting
- Configuring for Network Management Applications
- Configuring the switch to filter untagged traffic
- Viewing configuration file change information
- Minimal interval for successive data change notifications
- Viewing the current port speed and duplex configuration on a switch port
- Viewing the configuration
- RMON advanced management
- Configuring UDLD verify before forwarding
- MAC configurations
- Configuring sFlow
- Configuring SNMP
- Network security notifications
- Group access levels
- SNMPv2c informs
- SNMP notifications
- SNMPv3 users
- SNMP tools for switch management
- Enabling SNMPv3
- Configuring users in SNMPv3
- Switch access from SNMPv3 agents
- Restrict access from SNMPv3 agents
- Restrict non-SNMPv3 agents to read-only access
- Operating status of SNMPv3
- Non-SNMPv3 message reception status
- Non-SNMPv3 write message status
- Viewing and configuring non-version-3 SNMP communities (Menu)
- SNMP trap receiver configuration
- SNMPv2c inform option
- Configuring SNMPv3 notifications (CLI)
- SNMPv3 community mapping
- Running configuration changes and SNMP traps
- Startup configuration changes and SNMP traps
- Source IP address for SNMP notifications
- SNMP replies and traps configuration
- SNMP notification configuration
- Assign users to groups
- snmp-server community
- Community names and values
- Enabling or disabling notification/traps for network security failures and other security events (CLI)
- Viewing the current configuration for network security notifications (CLI)
- Link-Change Traps
- Viewing SNMP notification configuration (CLI)
- Listening mode
- CDP configuration
- LLDP configuration
- LLDP and CDP data management
- LLDP
- LLDP operations
- Packet boundaries in a network topology
- LLDP operation configuration options
- Transmit and receive mode
- Options for reading LLDP information collected by the switch
- LLDP and LLDP-MED standards compatibility
- Port trunking
- IP address advertisements
- Spanning-tree blocking
- 802.1X blocking
- LLDP operation on the switch
- Time-to-Live for transmitted advertisements
- Delay interval between advertisements
- Re-initialize delay interval
- SNMP notification support
- Changing the minimum interval
- Basic LLDP per-port advertisement content
- Port VLAN ID TLV support on LLDP
- LLDP-MED
- Configuring per-port transmit and receive modes
- Remote management address for outbound LLDP advertisements
- Port speed and duplex advertisement support
- Location data for LLDP-MED devices
- LLDP data change notification for SNMP trap receivers
- LLDP operation on the switch
- LLDP-MED fast start control
- Changing the packet transmission interval
- Changing the time-to-live for transmitted advertisements
- Delay interval
- Changing the reinitialization delay interval
- PVID mismatch log messages
- Viewing port configuration details
- Available switch information available outbound advertisements
- LLDP statistics
- Global LLDP, port admin, and SNMP notification status
- LLDP-MED connects and disconnects—topology change notification
- Device capability, network policy, PoE status and location data
- Advertisements currently in the neighbors MIB
- PoE advertisements
- Overview
- Commands
- Show commands
- TVL configuration
- Generic header ID in configuration file
- DHCPv4 server
- Overview
- IP pools
- DHCP options
- BootP support
- Authoritative server and support for DHCP inform packets
- Authoritative pools
- Authoritative dummy pools
- Change in server behavior
- DHCPv4 configuration commands
- DHCPv4 server
- DHCP address pool name
- DHCP client boot file
- DHCP client default router
- DNS IP servers
- Configure a domain name
- Configure lease time
- NetBIOS WINS servers
- NetBIOS node type
- Subnet and mask
- DHCP server options
- IP address range
- Static bindings
- TFTP server domain name
- Configure the TFTP server address
- Number of ping packets
- Save DHCP server automatic bindings
- DHCP server and SNMP notifications
- Conflict logging on a DHCP server
- Enable the DHCP server on a VLAN
- Clear commands
- Reset all DHCP server and BOOTP counters
- Delete an automatic address binding
- Show commands
- Event log
- DHCPv6 server
- DHCPv6 hardware address
- DHCPv6 snooping and relay
- dhcpv6–snooping
- dhcpv6 snooping trust
- dhcpv6–snooping authorized-server
- ddhcpv6–snooping database file
- dhcpv6–snooping max-bindings
- dhcpv6–relay option 79
- snmp-server enable traps dhcpv6-snooping
- clear dhcpv6–snooping stats
- debug security dhcpv6–snooping
- ipv6 source-lockdown ethernet
- ipv6 source-binding
- snmp-server enable traps dyn-ipv6-lockdown
- debug security dynamic-ipv6-lockdown
- Show commands for DHCPv6–snooping
- DHCPv6 event log
- DHCPv6 event messages
- Captive portal for ClearPass
- Requirements
- Best Practices
- Limitations
- Features
- Captive Portal when disabled
- Configuring Captive Portal on CPPM
- Configuring the switch
- Configuring a certificate for Captive Portal usage
- Displaying the Captive Portal configuration
- Showing certificate information
- Troubleshooting
- ClearPass captive portal authentication commands
- Zero Touch Provisioning with AirWave and Central
- Zero Touch Provisioning
- ZTP with AirWave
- IPsec for AirWave Connectivity
- ZTP with Aruba Central
- HTTP Proxy support with ZTP overview
- Auto configuration upon Aruba AP detection
- File transfers
- File transfer methods
- TFTP
- SCP and SFTP
- Xmodem
- USB
- Switch to Switch
- Copying
- Transferring
- Switch software download
- Single copy command
- Monitoring and Analyzing Switch Operation
- Switch and network operations
- Status and counters data
- Compatibility mode for v2 zl and zl modules
- Port status
- Accessing port and trunk group statistics
- MAC address tables
- MSTP data
- IP IGMP status
- VLAN information
- WebAgent status information
- Configuring local mirroring
- Remote mirroring destination on a remote switch
- Remote mirroring destination on a local switch
- Local mirroring destination on the local switch
- Monitored traffic
- Configuring local mirroring (Menu)
- Destination mirror on a remote switch
- Source mirror on the local switch
- Traffic-direction criteria
- Configure ACL criteria to select inbound
- Mirror policy for inbound traffic
- Configuring a destination switch in a remote mirroring session
- Configuring a source switch in a local mirroring session
- Configuring a source switch in a remote mirroring session
- Selecting all traffic on a port interface for mirroring according to traffic direction
- Selecting all traffic on a VLAN interface for mirroring according to traffic direction
- Configuring a MAC address to filter mirrored traffic on an interface
- Configuring classifier-based mirroring
- Viewing a classifier-based mirroring configuration
- Viewing all mirroring sessions configured on the switch
- Viewing the remote endpoints configured on the switch
- Viewing the mirroring configuration for a specific session
- Viewing a remote mirroring session
- Viewing a MAC-based mirroring session
- Viewing a local mirroring session
- Viewing information on a classifier-based mirroring session
- Viewing information about a classifier-based mirroring configuration
- Viewing information about a classifier-based mirroring configuration
- Viewing information about statistics on one or more mirroring policies
- Viewing resource usage for mirroring policies
- Viewing the mirroring configurations in the running configuration file
- Compatibility mode
- Port and trunk group statistics and flow control status
- Traffic mirroring overview
- Mirroring overview
- Mirroring destinations
- Mirroring sources and sessions
- Mirroring sessions
- Mirrored traffic destinations
- Monitored traffic sources
- Criteria for selecting mirrored traffic
- Mirroring configuration
- Remote mirroring endpoint and intermediate devices
- Migration to release K.12.xx
- Migration to release K.14.01 or greater
- Using the Menu to configure local mirroring
- Remote mirroring overview
- High-level overview of the mirror configuration process
- About selecting all inbound/outbound traffic to mirror
- Classifier-based mirroring configuration
- Maximum supported frame size
- Effect of downstream VLAN tagging on untagged, mirrored traffic
- Troubleshooting traffic mirroring
- Virtual Technician
- Scalability: IP Address, VLAN, and Routing Maximum Values
- Troubleshooting
- Overview
- Troubleshooting approaches
- Browser or Telnet access problems
- Unusual network activity
- General problems
- 802.1Q Prioritization problems
- Addressing ACL problems
- ACLs are properly configured and assigned to VLANs, but the switch is not using the ACLs to filter IP layer 3 packets
- The switch does not allow management access from a device on the same VLAN
- Error (Invalid input) when entering an IP address
- Apparent failure to log all "deny" matches
- The switch does not allow any routed access from a specific host, group of hosts, or subnet
- The switch is not performing routing functions on a VLAN
- Routing through a gateway on the switch fails
- IGMP-related problems
- LACP-related problems
- Port-based access control (802.1X)-related problems
- The switch does not receive a response to RADIUS authentication requests
- The switch does not authenticate a client even though the RADIUS server is properly configured and providing a response to the authentication request
- During RADIUS-authenticated client sessions, access to a VLAN on the port used for the client sessions is lost
- The switch appears to be properly configured as a supplicant, but cannot gain access to the intended authenticator port on the switch to which it is connected
- The supplicant statistics listing shows multiple ports with the same authenticator MAC address
- The show port-access authenticator <port-list> command shows one or more ports remain open after they have been configured with control unauthorized
- RADIUS server fails to respond to a request for service, even though the server's IP address is correctly configured in the switch
- The authorized MAC address on a port that is configured for both 802.1X and port security either changes or is re-acquired after execution of aaa port-access authenticator <port-list> initialize
- A trunked port configured for 802.1X is blocked
- QoS-related problems
- Radius-related problems
- MSTP and fast-uplink problems
- SSH-related problems
- Switch access refused to a client
- Executing IP SSH does not enable SSH on the switch
- Switch does not detect a client's public key that does appear in the switch's public key file (show ip client-public-key)
- An attempt to copy a client public-key file into the switch has failed and the switch lists one of the following messages
- Client ceases to respond ("hangs") during connection phase
- TACACS-related problems
- Event Log
- All users are locked out of access to the switch
- No communication between the switch and the TACACS+ server application
- Access is denied even though the username/password pair is correct
- Unknown users allowed to login to the switch
- System allows fewer login attempts than specified in the switch configuration
- TimeP, SNTP, or Gateway problems
- VLAN-related problems
- Fan failure
- Mitigating flapping transceivers
- Viewing transceiver information
- Using the Event Log for troubleshooting switch problems
- Debug/syslog operation
- Debug/syslog messaging
- Hostname in syslog messages
- Debug/syslog destination devices
- Debug/syslog configuration commands
- Configuring debug/syslog operation
- Debug command
- Logging command
- Adding a description for a Syslog server
- Adding a priority description
- Configuring the severity level for Event Log messages sent to a syslog server
- Enabling local command logging
- Operating notes for debug and Syslog
- Diagnostic tools
- Viewing switch configuration and operation
- Restoring the factory-default configuration
- Restoring a flash image
- DNS resolver
- Job Scheduler
- Configuration backup and restore without reboot
- Overview
- Recommended scenarios
- Use cases
- Commands used in switch configuration restore without reboot
- Configuration backup
- Configuration restore without reboot
- Show commands to show the SHA of a configuration
- Scenarios that block the configuration restoration process
- Limitations
- Troubleshooting and support
- Virtual Switching Framework (VSF)
- Overview of VSF
- Benefits of VSF
- Member roles
- Management module
- VSF member ID
- VSF link
- Physical VSF ports
- VSF domain ID
- VSF split
- VSF merge
- Member priority
- Interface naming conventions
- Running-configuration synchronization
- VSF deployment methods
- Configuration commands
- Show commands
- OOBM-MAD commands
- LLDP-MAD
- VSF restrictions
- Updates for a VSF virtual chassis
- VSF Fast Software Upgrade
- Simplifying Wireless and IoT Deployments
- IP Service Level Agreement
- Overview
- How IP SLA works
- Configuration commands
- [no] ip-sla <ID>
- ip-sla <ID> clear
- [no] ip-sla <ID> history-size
- [no] ip-sla <ID> icmp-echo
- [no] ip-sla <ID> udp-echo
- [no] ip-sla <ID> tcp-connect
- [no] ip-sla <ID> monitor threshold-config
- [no] ip-sla <ID> monitor packet-loss
- [no] ip-sla <ID> monitor test-completion
- [no] ip-sla <ID> schedule
- [no] ip-sla <ID> tos
- [no] ip-sla responder
- [no] ip-sla <ID> udp-jitter
- [no] ip-sla <ID> udp-jitter-voip
- Show commands
- clear ip-sla responder statistics
- Validation rules
- Event log messages
- Interoperability
- IP SLA UDP Jitter and Jitter for VoIP
- User roles
- Port QoS Trust Mode
- Tunneled node
- Cable Diagnostics
- Link Layer Discovery Protocol bypass authentication
- Overview of Monitoring Static IP Devices
- Network Out-of-Band Management (OOBM)
- OOBM concepts
- OOBM Configuration
- Entering the OOBM configuration context from the general configuration context
- Enabling and disabling OOBM
- Enabling and disabling the OOBM port
- Setting the OOBM port speed
- Configuring an OOBM IPv4 address
- Configuring an OOBM IPv4 default gateway
- Configuring an IPv6 default gateway for OOBM devices
- IPv6 default router preferences
- OOBM show commands
- Application server commands
- Application client commands
- Websites
- Support and other resources
- Chassis Redundancy (5400R Switches)
- Overview of chassis management redundancy
- About using redundant management
- Preferred management module
- Determining active module
- Hotswapping management modules
- About turning off redundant management
- Active management module commands
- Using the WebAgent for redundant management
- Enabling or disabling redundant management
- Transitioning from no redundancy to nonstop switching
- Directing the standby module to become active
- Setting the active management module for next boot
- Resetting the management module
- Viewing management information
- Viewing information about the management and fabric modules
- Viewing information about the redundancy role of each management module
- Viewing which software version is in each flash image
- Viewing system software image information for both management modules
- Viewing the status of the switch and its management modules
- Standby management module commands
- Setting the default flash for boot
- Displaying module events
- Enabling and disabling fabric modules
- Nonstop switching features
- About downloading a new software version
- Unsupported zl modules
- Task Usage Reporting
- LACP-MAD Passthrough
- Smart Rate Technology
- Networking 6th Generation Switch ASIC
- MAC Address Management
- Configuration backup and restore without reboot