Common Commands

Displays the contents of various text files that may be created, edited, or otherwise visible in the user-visible file system.

{dynamic} counter {countername} {any | ports port_list | vlan vlan_name} {ingress | egress}

meter {meter_name} [any | ports [all | port_list ] | vlan vlan_name]

Clears the specified access list counters.

Re-enables an account that has been locked out (disabled) for exceeding the permitted number failed login attempts. This was configured by using the configure account [all | name] password-policy lockout-on-login-failures [on | off] command.

Clears information about a snooped IPv6 delegate prefix on a or all VLANs.

neighbor [device id device_id | all]

counters {ports ports_list}

Clears the CDP neighbor information.

vr vpn-vrf-name

Clears all switch statistics and port counters, including port packet statistics, bridging statistics, IP statistics, and log event counters.

session missed-hellos { domain_name { association_name { {ports port_list} { end-point [up|down] } } } } {current | history | both}

segment segment_name

segment all frame-delay

segment all frame-loss

egment segment_name frame-loss mep mep_id

This command clears counters for current or historical cfm session missed-hellos.

Clears the counters associated with .

Clears the event counters for the MAC-tracking feature.

This command clears all groups.

Clears the identity management feature counters.

Clears all the IPARP counters.

Clears MVRP statistics.

Clears policy rule usage statistics.

{port_list | all}

{port_list | all} protocol filter

Clears the counters associated with the ports.

Clears, resets all statistics and counters.

Clears Explicit Congestion Notification (ECN) counters statistics for all ports.

Clears the statistics counters.

Clears, resets the CPU utilization history and statistics stored in the switch.

Clears the Domain Name System (DNS) cache entries.

Clears the Domain Name System (DNS) cache analytics entries for a virtual router (VR).

port_listauto-restart

port_list} counters

Clears one or more ELSM-enabled ports that are in the Down-Stuck state.

counters

esrpDomain sticky

esrpDomain neighbor

Clears the statistics gathered by for all ESRP domains on the switch.

group {grpipaddress} {{vlan} name}

snooping {{vlan} name}

Clears Internet Group Management Protocol (IGMP) counters.

Clears the inline statistics for the selected port to zero.

Removes dynamic entries in the IP ARP table.

Clears the Network Address Translation (NAT) VLAN counters.

dhcp-snooping entries { vlan } vlan_name

source-ip-lockdown entries ports [ ports | all ]

arp validation violations

anomaly-protection notify cache {slot [slot | all ]}

Clears the binding entries present on a .

Clears the counters for the DAD feature.

{vlan vlan_name {ports port_list}}

{vman vman_name {ports port_list}}

{[vlan vlan_name {{vxlan{vr vr_name} rtep rtep_ipv4}}}

{[vpls vpls_name {peer ipaddress} | vpws vpws_name]}

Clears L2PT counters.

Clears the counters associated with Link Aggregations Control Protocol (LACP).

Clears the neighbor information collected for one or all ports on the switch.

Clears the log messages in memory and NVRAM.

Clears MAC lock station information.

Clears MLD statistics counters.

cache ipv6 {ipv6address {vr vr_name} | vlan vlan_name | vr vr_name} refresh

{ipv6address {vr vr_name} | vlan vlan_name | vr vr_name} refresh

Deletes a dynamic entry from the neighbor cache.

Clears and initializes the network login sessions on a port.

This command clears alias entries out of the Node Alias feature database. You can clear information by specified port(s) or alias ID. Node Alias discovers information about the end systems on a per-port basis. Information from packets from end systems, such as VLANID, source MAC address, source IP address, protocol, etc. are captured in a database that can be queried.

[port_list | all] link-flap-detection counters

[port_list | all] link-flap-detection status

[all | port_list | port_group ] rate-limit flood out-of-profile {disabled-ports} {status | counter}

Clears the counters related to port link-flapping.

Clears a slot of a previously assigned module type.

Clears either all paired Bluetooth devices or a particular paired device.

Resets the partner Spanning Tree Protocol version to the configured version.

Removes addresses from the allocation table.

[all | name] password-policy lockout-on-login-failures [on | off]

[all | name] password-policy lockout-time-period [num_mins | until-cleared]

Configures a user account password.

Passwords can have a minimum of 0 character and can have a maximum of 32 characters. Passwords are case-sensitive. User names are not case-sensitive.

Configures the either the virtual router or the IP address for the Cloud Connector to use.

This command allows you to configure prompting (with no echo) for all passwords, secrets, or keys.

This command configures the user privilege level needed to view diagnositc results.

Adds a domain suffix to the domain suffix list or a name server to the available server list for the DNS client.

Deletes a domain suffix from the domain suffix list or a name server from the available server list for the DNS client.

Specifies the VLAN advertised to Fabric Attach clients for them to use as the management VLAN.

Configures the Fabric Attach management VLAN propagation on a specific port.

Configures the Fabric Attach state per port.

Configures Fabric Attach authentication.

Configures the uplink port for and enables Fabric Attach standalone proxy operation.

Configures the Fabric Attach Zero Touch Client.

Configures the time-out for idle console, SSH2, and Telnet sessions.

Configures an Instant Port profile.

Configures the IQ Agent HTTP Proxy server IP and port, and defines the username and password if required.

Configures the optional user-defined virtual router (VR) and address for the server for ExtremeCloud™ IQ Agent to connect to.

Deletes a default gateway from the routing table.

Enables the relay agent option (option 82) checking in the server-originated packets.

Configures the port information portion of the circuit ID.

Configures the info portion of the circuit ID of a VLAN.

Enables the relay agent option (option 82).

Configures the relay agent option (option 82) policy.

Configures the member port of an LACP to ensure the order that ports are added to the aggregator. The lower value you configure for the port‘s priority, the higher priority that port has to be added to the aggregator.

Configures the real-time log-level message to display.

This command configures the minimum user account level needed to view logs.

Associates a filter to a target.

In a stack, this command is applicable only to Master and Backup nodes. This command is not applicable to standby nodes.

For console display, session, memory buffer, and NVRAM targets:

For Syslog targets:

Configures the formats of the displayed message, on a per-target basis.

In a stack, this command is applicable only to Master and Backup nodes and not applicable to the standby nodes.

This command specifies the source-ip-address to use when sending log messages to the Syslog server. The Syslog server's IP address along with the ipPort and local facility (a tuple) identify which Syslog server target is to be configured.

Associates a match expression to a target.

In a stack, this command is applicable only on a Master and Backup nodes. This command is not applicable for standby nodes.

Specifies mirror source filters for an instance.

Mirrors detected anomaly traffic to the mirror port.

Deletes mirror source filters for an instance.

Specifies whether an NTP key is trusted or not trusted.

Removes the internal local clock from the clock source list.

Configures the internal local clock with a stratum number. The stratum number defines the distance from the reference clock. The lower the number, the closer the switch is to the reference clock.

Restricts a host or block of client IP addresses from getting NTP service. When NTP is enabled over a , an NTP server is configured, or a broadcast NTP server is in a VLAN, the VLAN's IP block or NTP server's IP address is automatically added into the system with a permit action.

Configures an NTP server or peer.

Removes an NTP server or peer from external clock source lists.

Configures the default 1 Gbps auto-negotiation mode to enabled or disabled (the default) when 1 Gbps optics are inserted in 10 Gbps ports.

Manually configures port speed and duplex setting configuration on one or more ports on a switch.

Enables autonegotiation for the particular port type.

Configures a description string setting up to 255 characters.

Configures a user-defined string for a port or group of ports.

Enables/disables IEEE Forward Error Correction (FEC) Clause 74 or 91 modes.

Partitions 100G and 40G ports into multiple partition speeds, and partitions 25G ports into a single 10G port for supported Universal platforms.

Configures virtual ports for limited or locked MAC address learning.

Adds ports to a load-sharing, or link aggregation, group. By using link aggregation, you use multiple ports as a single logical port. Link aggregation also provides redundancy because traffic is redistributed to the remaining ports in the if one port in the group goes down.

Adds or removes a descriptive name to a slot.

Configures a slot for a particular type of node.

Configures the number of times a slot can be restarted on a failure before it is shut down.

Adds a read or read/write community string.

Deletes a read or read/write community string.

Configures the name of the system contact.

Creates (and modifies) a group and its access rights.

Adds an SNMPv3 community entry.

Adds a filter to a filter profile.

Associates a filter profile with a parameter name.

Adds a user name (security name) to a group.

Adds (and modifies) a MIB view.

Adds an entry to the snmpNotifyTable.

Adds and configures an SNMPv3 target address and associates filtering, security, and notifications with that address.

Adds and configures SNMPv3 target parameters.

Adds (and modifies) an SNMPv3 user.

Creates a new user by cloning from an existing SNMPv3 user.

Deletes access rights for a group.

Deletes an SNMPv3 community entry.

Deletes a user name (security name) from a group.

Deletes a MIB view.

Deletes an entry from the snmpNotifyTable.

Deletes a filter from a filter profile.

Removes the association of a filter profile with a parameter name.

Deletes SNMPv3 target addresses.

Deletes SNMPv3 target parameters.

Deletes an existing SNMPv3 user.

Configures the SNMPv3 snmpEngineID.

Configures SNMPv3 INFORM notification retries.

Configures an NTP server for the switch to obtain time information.

Configures SSH2 to use an policy or ACL rule for access control.

Configures the minimal supported Diffie-Hellman group.

Disables ciphers/Message Authentication Codes (MACs) for use with SSHv2.

Disables DSA/RSA X509v3 public key algorithms.

Configures the required ciphers/Message Authentication Codes (MACs) with SSHv2.

Enables DSA/RSA X509v3 public key algorithms.

This command configures idle-timeout for SSH/SFTP connections.

Generates the Secure Shell 2 (SSH2) server host key.

For the SSH server, configures a timeout period for a login attempt.

Sets SSHv2 session rekeying interval by specifying a time interval value and/or amount of transferred data.

This command (secure-mode on) disables the weak ciphers and macs in SSH server and client.

Enables or disables Online Certificate Status Protocol (OCSP) check for SSH2 x509v3 authentication.

Enables or disables the Online Certificate Status Protocol (OCSP) nonce for SSH2 x509v3 authentication.

This command configures one HTTP Online Certificate Status Protocol (OCSP) override URL for an SSH2 x509v3 authentication.

Enables or disables Online Certificate Status Protocol (OCSP) signer's ocsp-nocheck for SSH2 x509v3 authentication.

Enables or disables password authentication using RADIUS for SSH2 x509v3 publication-key authentication.

Enables or disables authentication username configuration to use the Principal Name in the certificate as the username.

Enables or disables authentication username configuration to strip the domain name for SSH2 x509v3 publication-key authentication.

Enables or disables authentication username configuration with a domain name using RADIUS for SSH2 x509v3 publication-key authentication.

This command configures the hash algorithm.

Obtains the pre-generated private key from the user.

Obtains the pre-generated certificate from the user.

Creates a self-signed certificate and private key that can be saved in the EEPROM.

Generates certificate signing request (CSR) and private key.

Configures an alternate management IP address, subnetwork, and gateway.

This command provides an easy way to initially configure the stacking parameters of all nodes in a new stack.

Allows you to restrict the license level at which the node operates.

Selects a node in the stack whose factory assigned MAC address is to be used to form the stack MAC address.

The formed address is then configured on every node in the stack topology.

The command configures a node to be allowed to operate as either a backup or master, or prevents a node from operating as either.

The command controls the setting on the specified node only.

Configures a priority value to be used to influence master and backup election.

Configures a slot number on one or all nodes in the stack topology.

Enables or disables stacking auto-discovery.

Selects the switch ports and speed for stack communications.

Adds all ports or a list of ports within a to a specified .

Deletes one or more ports in the specified from an .

Configures the operational mode for the specified domain.

Allows a port to be selected as an alternate or backup port.

Prevents a port from becoming an alternate or backup port.

Enables and disables auto-edge detection.

Disables the edge safeguard loop prevention on the specified RSTP or edge port.

Enables the edge safeguard loop prevention on the specified RSTP or edge port.

Configures BPDU Restrict.

Specifies the path cost of the port in the specified .

Configures the ports in the specified as auto, broadcast, edge, or point-to-point link types.

Enables and disables loop protect on a port.

Configures whether the link partner is capable of the loop protect feature.

Configures the encapsulation mode for the specified port list.

Specifies the port priority of the port in the specified .

Specifies the port priority of the port in the specified .

Specifies the bridge priority of the .

Sets bridge priority values.

Disables restricted role on the specified port inside the core network.

Enables restricted role on the specified port inside the core network.

Restricts the propagation of Topology Change Notification (TCN) BPDUs on the specified port.

Assigns an StpdID to an .

Configures the remote Syslog server host address, and filters messages to be sent to the remote Syslog target.

configure syslog delete host name/ip {: udp-port} [local0...local7]

Deletes a remote Syslog server address.

Specifies the remote Syslog server certificate reference identifier.

Enables or disables Online Certificate Status Protocol (OCSP) check for Transport Layer Security (TLS) connections to remote Syslog servers.

Enables or disables Online Certificate Status Protocol (OCSP) nonce for Transport Layer Security (TLS) connections to remote Syslog servers.

This command configures one HTTP Online Certificate Status Protocol (OCSP) override URL for Transport Layer Security (TLS) connections to a remote Syslog server.

Enables or disables Online Certificate Status Protocol (OCSP) signer's ocsp-nocheck for Transport Layer Security (TLS) connections to remote Syslog servers.

Specifies the maximum time that transmitted data may remain unacknowledged before TCP closes the connection to avoid loss of logging to TLS Syslog server.

The time uses a 24-hour clock format. You cannot set the year earlier than 2003 or past 2036.

Configures the time zone information to the configured offset from GMT time. The format of GMT_offset is ± minutes from GMT time. The autodst and noautodst options enable and disable automatic Daylight Saving Time change based on the North American standard.

Additional options are described in the Switch Engine 32.7.1 Command Reference Guide

Adds one or more ports in a .

Translation from network tag to each subscriber VLAN tag is done by default in a private VLAN.

Deletes one or more ports in a .

Assigns a unique 802.1Q tag to the .

Assigns an IPv4 address and an optional subnet mask or an IPv6 address to the . Beginning with ExtremeXOS 11.2, you can specify IPv6 addresses. You can assign either an IPv4 address, and IPv6 address, or both to the VLAN. Beginning with ExtremeXOS 11.3, you can use this command to assign an IP address to a specified VMAN and enable multicasting on that VMAN.

Copies a file from the specified file system or relative to the current working directory to another file on the specified file system or relative to the current working directory.

This command logs an event using the text provided as the message.

Creates a named .

Deletes an instant-port profile.

Disables the auto provision capability.

Stops the Cloud Connector process on the switch.

Disables the generation and processing of BOOTP packets on a to obtain an IP address for the VLAN from a BOOTP server.

Disables access to the full CLI on 4120 Series and 4220 Series switches.

Disables the snooping fast leave feature on the specified .

Disables snooping.

Shuts down power currently provided to all ports or to specified ports.

Disables routing for one or all interfaces. If no argument is provided, disables routing for all interfaces on the current VR or VRF.

Disables snooping on the switch.

Disables the ExtremeCloud™ IQ Agent.

Disables the front panel LEDs from flashing on a switch.

Disables the sending of messages to the console display.

In a stack, this command is applicable only to Master and Backup nodes and not applicable to the standby nodes.

Stops sending log messages to the specified target.

In a stack, this command is applicable only to Master and Backup nodes and not applicable to the standby nodes.

Disallows a to be placed in the UP state without an external active port. This allows (disallows) the VLANs routing interface to become active.

Disables MAC locking globally on the switch.

Disables a mirror instance.

Disables MLD snooping.

Disables network login on a specified port for a particular method.

Disables network login modes.

Disables NTP authentication globally on the switch.

Disables an NTP broadcast client on the switch.

Prevents NTP from sending broadcast messages to a .

Disables NTP on a .

This command disables NTP from the specified VR.

Disables a load-sharing group of ports, also known as a .

Selectively disables on the switch.

Selectively disables access on virtual routers.

Disables community strings on the switch.

This command disables a community entry specified by the community index.

Selectively disables on the switch.

Disables the client.

This command disables the stacking on one or all nodes in the stack topology.

This command disables the stacking-support option on a switch with dual-purpose hardware.

Disables the protocol on a particular or for all STPDs.

Disables the ability to automatically add ports to an when they are added to a member .

Disables on one or more ports for a given .

Disables the tech support feature.

Disables external Telnet services on the system.

Disables the hypertext transfer protocol (HTTP) access to the switch on the default port (80).

Disables the secure socket layer (SSL) access to the switch on the default port (443).

To download an image to a stack: download image [[hostname | ipaddress] filename {{vr} vrname} {block-size block_size}] {partition} {install {reboot}}

Downloads a new version of the ExtremeXOS software image or a new VOSS image when changing the switch's network operating system.

The image file can be downloaded using TFTP (which is not a secure method), or SFTP and SCP2 (which are secure methods). The procedure using TFTP begins above and using SFTP/SCP2.

certificate {ssl-cert | trusted-ca | ocsp-signature-ca | {csr-cert {ocsp [on | off]}} file_name

privkey key_file

Permits downloading of certificate file(s) from files stored on a TFTP server.

Permits downloading of a private key from files stored in a TFTP server.

Ensures that USB 2.0 storage device can be safely removed from the switch.

Starts the Cloud Connector process on the switch.

{forward-mcrouter-only | {vlan} name | with-proxy vr vrname}

{vlan} name fast-leave

Enables snooping on one or all s.

Enables power currently provided to all ports or to specified ports.

{ipv4 | broadcast} {vlan vlan_name}

{ipv4 | broadcast} {vlan vlan_list}

{ipv4 tunneltunnel_name}

{ipv4 | ipv6(vr vr_name)}

{ipv6 (vlan vlan_list)}

{ipv6 (vlan vlan_name | tunneltunnel_name)}

Enables IPv4 routing or IPv4 broadcast forwarding for one or all s. If no argument is provided, enables IPv4 routing for all s that have been configured with an IP address on the current VR or VRF.

Enables the ExtremeCloud™ IQ Agent.

Enables DHCP snooping for the specified VLAN and ports.

Configures the front panel LEDs to flash so a switch can be easily located in a crowded lab/data center.

install license file filename {slot slot} (for universal platforms only)

The command unconfigure switch {all} does not clear licensing information. This license cannot be disabled once it is enabled on the switch.

Enables a running real-time display of log messages on the console display. In a stack, this command is applicable only to Primary and Backup nodes. You cannot run this command on standby nodes.

Starts sending log messages to the specified target.

Allows a to be placed in the UP state without an external active port. This allows (disallows) the VLANs routing interface to become active.

Enables MAC locking globally on the switch.

Enables a mirror instance.

Enables MLD snooping on the switch.

Enables network login authentication modes.

Enables NetLogin on a specified port for a particular authentication method.

Enables NTP authentication globally on the switch.

Enables an NTP broadcast client on the switch.

Enables NTP to send broadcast messages with or without a key to a .

Enables NTP on a .

This command enables and configures NTP for the specified VR.

Enables the switch to configure port link aggregation, or load sharing. By using link aggregation, you use multiple ports as a single logical port. Link aggregation also provides redundancy because traffic is redistributed to the remaining ports in the if one port in the group goes down. LACP allows the system to dynamically configure the LAGs.

Selectively enables access on the switch.

Selectively enables access on virtual routers.

Enables community strings.

This command enables a community entry specified by the community index.

Enables the client.

This command enables stacking on one or all nodes.

ports [all | port_list]

auto-bind [ {vlan} vlan_name | vlan vlan_list]

Enables the protocol for one or all STPDs.

Enables the tech support feature.

Enables hypertext transfer protocol (HTTP) access to the switch on the default HTTP port (80).

Enables secure socket layer (SSL) access to the switch on the default port (443).

This command upgrades the ExtremeSwitching Universal platforms using images from the installed Switch Engine package.

Installs a new version of the ExtremeXOS software image.

Moves a file from the specified file system or relative to the current working directory to another file on the specified file system or relative to the current working directory.

The ping, or loopback message (LBM), goes from the MEP configured on the port toward the given MAC address.

Allows you to ping on the Layer 2 level throughout the specified domain and MA.

Reboots the switch, bridge port extenders (BPEs), or SummitStack in the specified slot at a specified date and time.

Resets autonegotiation for one or more ports by resetting the physical link.

Runs normal or extended diagnostics on the switch or node, and stacking ports.

This command is not supported in stacking mode, but if you issue the show diagnostics command from the master node, it will show the diagnostic results for all the nodes.

Causes a user-specified node failover.

Allows you to change management access to your device and to enhance security.

{primary | secondary | existing-config | new-config}

automatic {every minutes {primary | secondary | existing-config | new-config} | never}

Saves the current configuration from the switch's runtime memory to non-volatile memory.

or scp2 {cipher cipher} {macmac} {compression [on | off]} {port portnum} {vr vr_name} local_file user [hostname | ipaddress]:remote_file

The first command initiates an SCP2 client session to a remote SCP2 server and copies a configuration or policy file from the remote system to the switch.

The second command initiates an SCP2 client session to a remote SCP2 server and copies a configuration or policy file from the switch to a remote system.

Initiates an SSH2 client session to a remote SSH2 server.

The synchronize command replicates all saved images and configurations from the master node to the backup or target node on a SummitStack.

This command copies certain NVRAM based configuration parameters to the target node.

Allows you to send out a Link Trace Message (LTM) for the specified MA from the MEP configured on the port for the specified MAC address to the end of the MA.

Disables the relay agent option (option 82).

Disables the relay agent option (option 82) checking in the server-originated packets.

Unconfigures the port information portion of the circuit ID.

Unconfigures the info portion of the circuit ID of a VLAN.

Unconfigures the relay agent option (option 82) policy.

Removes the relay agent remote ID.

Resets the log target format to its default values.

port_list description string

port_list display-string

Clears the user-defined display string from one or more ports.

Clears a slot of a previously assigned module type.

Removes a trusted CA certificate or OCSP response signature CA certificate from the switch.

This command resets most stacking parameters to the default or unconfigured values.

This command resets the stacking parameters configured with commands that use the stacking-support keyword.

Restores default values to a particular or all STPDs.

or

unconfigure switch erase all | nvram

Resets all switch parameters (with the exception of defined user accounts, and date and time information) to the factory defaults.

If you specify the keyword all, the switch erases the currently selected configuration image in flash memory and reboots. As a result, all parameters are reset to default settings.

Removes the IP address of the or a VMAN. With no parameters, the command removes the primary IPv4 address on the specified VLAN. Using the IPv6 parameters, you can remove specified IPv6 addresses from the specified VLAN.

On a SummitStack, use:

Uninstalls an ExtremeXOS software package. Also uninstalls a VOSS image when staged for installation on the next reboot.

Uploads the current configuration in ASCII format to a TFTP server on your network.

Configures the switch to use a previously saved configuration on the next reboot.

Configures the switch to use a saved image on the next reboot.