Router-language
From Alessandro's Wiki
Foundry
enable
- when logged in, the "enable" command give you the administration rights
- in this status we can monitor e check configuration.
$ enable
password...
# _
- entering in "edit configuration" mode, you can edit the configuration, live! be very careful
config [te]
password...
(config)#
- after making changes, you can check them with this command (because "show config" will give you the configuration saved in memory, not the running one that you just modified.
(config)# show running-config
[...]
- after all your checks, this is the command to save the changes permanently.
(config)# write memory
#
- an option to backup the configuration is to copy it by TFTP to a server.
#copy running-config tftp 1.2.3.123 router-config-20122112.txt
#Upload running-config to TFTP server done.
port status short
- show interface brief
Port Link State Dupl Speed Trunk Tag Priori MAC Name
1 Up Forward Full 1G None No level0 0012.f286....
2 Disable None None None None No level0 0012.f286....
Port Link State Dupl Speed Trunk Tag Priori MAC Name
ve10 Up N/A N/A N/A None N/A N/A 0012.f286....
MAC address table
show mac-address
Total active entries from all ports = 69
MAC-Address Port Type Index VLAN
0800.270c.ce47 5 Dynamic 30 113
0011.7800.9a44 8 Dynamic 14232 200
ethernet data flow statistics
- show rmon statistics
Ethernet statistics 1 is active, owned by monitor
Interface 1 (ifIndex 1) counters
Octets 62219423556
Drop events 0 Packets 74215428
Broadcast pkts 613 Multicast pkts 83808
CRC align errors 0 Undersize pkts 0
Oversize pkts 0 Fragments 0
Jabbers 0 Collisions 0
Packet size counters
64 8199939 65 to 127 21283872
128 to 255 2667477 256 to 511 1406813
512 to 1023 2001555 1024 to 1518 38655772
ethernet details
- show interface ethernet 1
GigabitEthernet1 is up, line protocol is up
Hardware is GigabitEthernet, address is 0012.f286.7e40 (bia 0012.f286.7e40)
Configured speed auto, actual 1Gbit, configured duplex fdx, actual fdx
Configured mdi mode AUTO, actual MDI
Member of L2 VLAN ID 10, port is untagged, port state is FORWARDING
BPDU guard is Disabled, ROOT protect is Disabled
Link Error Dampening is Disabled
STP configured to ON, priority is level0
Flow Control is config enabled, oper enabled, negotiation disabled
mirror disabled, monitor disabled
Not member of any active trunks
Not member of any configured trunks
No port name
IPG MII 96 bits-time, IPG GMII 96 bits-time
IP MTU 1500 bytes, encapsulation ethernet
300 second input rate: 262016 bits/sec, 119 packets/sec, 0.02% utilization
300 second output rate: 1558744 bits/sec, 178 packets/sec, 0.15% utilization
35819040 packets input, 31760156880 bytes, 0 no buffer
Received 559 broadcasts, 83280 multicasts, 35735201 unicasts
0 input errors, 0 CRC, 0 frame, 0 ignored
0 runts, 0 giants
38293277 packets output, 30371035971 bytes, 0 underruns
Transmitted 53 broadcasts, 0 multicasts, 38293224 unicasts
0 output errors, 0 collisions
ip routes
show ip
Global Settings
ttl: 64, arp-age: 10, bootp-relay-max-hops: 4
router-id : 0.0.0.0
enabled : UDP-Broadcast-Forwarding Source-Route Load-Sharing RARP
disabled: Route-Only Directed-Broadcast-Forwarding IRDP Proxy-ARP RIP DVMRP VRRP VRRP-Extended
Static Routes
Index IP Address Subnet Mask Next Hop Router Metric Distance
1 0.0.0.0 0.0.0.0 145.145.24.140 1 1 0
2 192.168.251.0 255.255.255.0 192.168.252.1 1 1 0
VLAN detail
- show vlans
Total PORT-VLAN entries: 19
Maximum PORT-VLAN entries: 4095
PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree Off
Untagged Ports: 2 3 4 19 20
Tagged Ports: None
Uplink Ports: None
DualMode Ports: None
virtual ethernet configuration
- is the ip configuration of the vlan subnet
interface ve 300
port-name v-secondary
ip access-group 300 in
ip address 1.2.1.1 255.255.255.240
!
interface ve 100
port-name v-primary
ip address 1.2.3.1 255.255.252.0
access list per IP
- access list used by virtual ethernet
access-list 10 permit 1.2.3.0 0.0.3.255
access-list 10 permit 1.2.1.0 0.0.0.255
access-list 10 deny any log
access-list 300 deny ip any 1.2.3.0 0.0.3.255 log
access-list 300 deny ip any 1.2.1.0 0.0.0.255 log
access-list 300 permit ip any any
access-list 103 permit ip any 1.2.5.0 0.0.0.255
set DNS
- add 3 DNS servers:
ip dns server-address 1.2.3.4 10.11.12.13 101.102.103.104
- del 1 DNS server:
no ip dns server-address 10.11.12.13
SSH management config
ip ssh key-authentication no
ip ssh source-interface ve 200
add port to VLAN
* add tagged port:
# vlan 4
(vlan-4)# tag ethe 11
# end
* add untagged port
(vlan-4)# untag ethe 11
# end
remove port from VLAN
* remove un-tagged port:
#vlan 4
(vlan-4)# no untag ethe 11
# end
* tagged port
(vlan-4)# no tag ethe 11
# end
change temperature warning level
# temperature warning 47
# temperature shutdown 57