Loading, please wait ...
- Home
- About this document
- Introduction to the ArubaOS-CX CLI
- Service OS CLI commands
- ACL commands
- ACL application
access-list copyaccess-list ipaccess-list ipv6access-list log-timeraccess-list macaccess-list resequenceaccess-list resetapply access-list control-planeapply access-list(to interface or LAG)apply access-list(to interface VLAN)apply access-list(to VLAN)-
clear access-list hitcounts -
clear access-list hitcounts control-plane object-group address resequenceobject-group address resetobject-group all resetobject-group ip addressobject-group ipv6 addressobject-group portobject-group port resequenceobject-group port resetshow access-listshow access-list control-planeshow access-list hitcountsshow access-list hitcounts control-planeshow capacitiesshow capacities-statusshow object-group
- ACL and Policy hardware resource commands
- ARP commands
arp cache-limitarp inspectionarp inspection trustarp ipv4 macclear arpip local-proxy-arpipv6 neighbor macip proxy-arpshow arpshow arp inspectionshow arp inspection interfaceshow arp inspection statisticsshow arp stateshow arp summaryshow arp timeoutshow arp vrfshow ipv6 neighborsshow ipv6 neighbors state
- Aruba Central Commands
- Banner commands
- BFD commands
bfdbfd <IPV4-ADDR>bfd all-interfacesbfd detect-multiplierbfd disablebfd enable(Context:config-hsc)bfd disable(Context:config-hsc)bfd echo disablebfd echo-src-ip-addressbfd min-echo-receive-intervalbfd min-receive-intervalbfd min-transmit-intervalclear bfd statisticsip ospf bfdip ospf bfd disableip route bfdipv6 ospfv3 bfdipv6 ospfv3 bfd disableneighbor fall-over bfdshow bfdshow bfd interfaceshow hsc
- BGP commands
address-familyaggregate-addressbgp always-compare-medbgp asnotation dottedbgp asnotation dotted-plusbgp bestpath as-path ignorebgp bestpath as-path multipath-relaxbgp bestpath compare-routeridbgp bestpath med confedbgp bestpath med missing-as-worstbgp cluster idbgp confederationbgp confederation peersbgp dampeningbgp default local-preferencebgp deterministic-medbgp fast-external-falloverbgp graceful-restart restart-timebgp graceful-restart stalepath-timebgp log-neighbor-changesbgp maxas-limitbgp router-idclear bgpdisable|enabledistance bgpmaximum-pathsneighbor activateneighbor advertisement-intervalneighbor add-pathsneighbor add-paths advertise-bestneighbor allowas-inneighbor capability orf prefix-listneighbor default-originateneighbor ebgp-multihopneighbor fall-overneighbor fall-over bfdneighbor graceful-shutdownneighbor local-asneighbor maximum-prefixneighbor next-hop-selfneighbor next-hop-unchanged-
neighbor orf prefix-list in neighbor passiveneighbor passwordneighbor portneighbor remote-asneighbor remove-private-ASneighbor route-mapneighbor route-reflector-clientneighbor send-communityneighbor shutdownneighbor soft-reconfiguration inboundneighbor timersneighbor ttl-security-hopsneighbor update-sourceneighbor weightnetworkredistributerouter bgpshow bgpshow bgp <PREFIX>show bgp communityshow bgp flap-statisticsshow bgp neighborsshow bgp neighbor advertised-routesshow bgp neighbor pathsshow bgp neighbor received orf-prefix-listshow bgp neighbor received-routesshow bgp neighbor routesshow bgp neighborsshow bgp pathsshow bgp peer-group summaryshow bgp summaryshow bgp l2vpn evpn vni route-typeshow bgp l2vpn evpn vtepshow bgp l2vpn evpn vtep route-typeshow bgp l2vpn evpn vtep vnishow bgp l2vpn evpn vtep vni route-typeshow running-config bgptimers bgpvrf
- Boot commands
- Cable diagnostic command
- Captive portal (RADIUS) commands
- CDP commands
- Checkpoint commands
checkpoint autocheckpoint auto confirmcheckpoint diffcheckpoint post-configurationcheckpoint post-configuration timeoutcheckpoint renamecheckpoint rollbackcopy checkpoint <CHECKPOINT-NAME> <REMOTE-URL>copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config}copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL>copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME>copy <REMOTE-URL> {running-config | startup-config}copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>}copy {running-config | startup-config} <REMOTE-URL>copy {running-config | startup-config} <STORAGE-URL>copy startup-config running-configcopy <STORAGE-URL> running-configerase {checkpoint <CHECKPOINT-NAME> | startup-config | all}show checkpoint <CHECKPOINT-NAME>show checkpoint post-configurationshow checkpoint listwrite memory
- Classifier policy commands
- CLI session commands
- CLI user session management commands
- Clock commands
- CoPP commands
- Debug logging
- Device profile commands
aaa authentication port-access allow-cdp-bpduaaa authentication port-access allow-lldp-bpduassociate cdp-groupassociate lldp-groupassociate mac-groupassociate roledisableenableignore(for CDP groups)ignore(for LLDP groups)ignore(for MAC groups)mac-groupmatch(for CDP groups)match(for LLDP groups)match(for MAC groups)port-access cdp-groupport-access device-profileport-access device-profile mode block-until-profile-appliedport-access lldp-groupshow port-access device-profile
- DHCP client commands
- DHCPv4 relay commands
- DHCP relay (IPv6) commands
- DHCP server IPv4 commands
- DHCP server IPv6 commands
- DHCPv4 snooping commands
clear dhcpv4-snooping bindingclear dhcpv4-snooping statisticsdhcpv4-snoopingdhcpv4-snooping(inconfig-vlancontext)dhcpv4-snooping allow-overwrite-bindingdhcpv4-snooping authorized-serverdhcpv4-snooping external-storagedhcpv4-snooping max-bindingsdhcpv4-snooping option 82dhcpv4-snooping trustdhcpv4-snooping verify macshow dhcpv4-snoopingshow dhcpv4-snooping bindingshow dhcpv4-snooping statistics
- DHCPv6 snooping commands
clear dhcpv6-snooping bindingclear dhcpv6-snooping statisticsdhcpv6-snoopingdhcpv6-snooping(inconfig-vlancontext)dhcpv6-snooping authorized-serverdhcpv6-snooping external-storagedhcpv6-snooping max-bindingsdhcpv6-snooping trustshow dhcpv6-snoopingshow dhcpv6-snooping bindingshow dhcpv6-snooping statistics
- DNS client commands
- ECMP commands
- ERPS commands
clear erps ring <ringid> instance <id>clear erps statisticserps ringerps ring <ringid> <port0|port1> interfaceerps ring <ringid> descriptionerps ring <ringid> guard-intervalerps ring <ringid> hold-off-intervalerps ring <ringid> instanceerps ring <ringid> instance <id> control-vlanerps ring <ringid> instance <id> descriptionerps ring <ringid> instance <id> enableerps ring <ringid> instance <id> protected-vlanserps ring <ringid> instance <id> protection-switch {{manual|force} <port0>|<port1>}erps ring <ringid> instance <id> revertiveerps ring <ringid> instance <id> roleerps ring <ringid> instance <id> rplerps ring <ringid> meg-levelerps ring <ringid> parent-ringerps ring <ringid> sub-ringerps ring <ringid> tcn-propogationerps ring <ringid> transmission-intervalerps ring <ringid> wtr-intervalshow erps statisticsshow erps statusshow erps summary
- EVPN commands
- External storage commands
- Fault monitor commands
- Command for creating a fault monitoring profile
- Commands for enabling and disabling the faults
- Commands for applying or changing the action and configuring auto-enable for a fault
- Commands for configuring the threshold for the fault
- Command for applying a fault monitoring profile to a port
- Command for configuring VSX synchronization for a fault monitoring profile
show fault-monitor profileshow interface fault-monitor profileshow interface fault-monitor statusshow running-configshow running-config all
- Firmware management commands
- High availability commands
- HTTPS server commands
- ICMP commands
- IGMP commands
ip igmpip igmp apply access-listip igmp last-member-query-intervalip igmp querierip igmp querier intervalip igmp querier query-max-response-timeip igmp robustnessip igmp static-groupip igmp versionip igmp version strictno ip igmpshow ip igmpshow ip igmp countersshow ip igmp groupshow ip igmp groupsshow ip igmp interfaceshow ip igmp interface countersshow ip igmp interface groupshow ip igmp interface groupsshow ip igmp interface statisticsshow ip igmp static-groupsshow ip igmp statistics
- IGMP Snooping commands
ip igmp snooping {enable|disable}ip igmp snooping apply access-listip igmp snooping autoip igmp snooping blockedip igmp snooping drop-unknownip igmp snooping fastlearnip igmp snooping fastleaveip igmp snooping forced fastleaveip igmp snooping forwardip igmp snooping static-groupip igmp snooping versionno ip igmp snoopingshow ip igmp snoopingshow ip igmp snooping countersshow ip igmp snooping groupsshow ip igmp snooping static-groupsshow ip igmp snooping statisticsshow ip igmp snooping vlan <VLAN-ID>show ip igmp snooping vlan <VLAN-ID> countersshow ip igmp snooping vlan <VLAN-ID> group portshow ip igmp snooping vlan <VLAN-ID> statistics
- In-System Programming commands
- Interface commands
allow-unsupported-transceiverdefault interfacedescriptionenergy-efficient-ethernetflow-controlinterfaceinterface loopbackinterface vlanip addressip mtuip source-interfaceipv6 addressipv6 source-interfacel3-countersmturoutingshow allow-unsupported-transceivershow interfaceshow interface domshow interface energy-efficient ethernetshow interface transceivershow ip interfaceshow ip source-interfaceshow ipv6 interfaceshow ipv6 source-interfaceshutdown
- IP Client Tracker commands
- IP Directed Broadcast commands
- IP-SLA commands
- IP tunnels commands
- IPv4 source lockdown commands
- IPv6 source lockdown commands
- IPv6 RA commands
ipv6 address <global-unicast-address>ipv6 address autoconfigipv6 address link-localipv6 nd cache-limitipv6 nd dad attemptsipv6 nd hop-limitipv6 nd mtuipv6 nd ns-intervalipv6 nd prefixipv6 nd ra dns search-listipv6 nd ra dns serveripv6 nd ra lifetimeipv6 nd ra managed-config-flagipv6 nd ra max-intervalipv6 nd ra min-intervalipv6 nd ra other-config-flagipv6 nd ra reachable-timeipv6 nd ra retrans-timeripv6 nd router-preferenceipv6 nd suppress-rashow ipv6 nd global trafficshow ipv6 nd interfaceshow ipv6 nd interface prefixshow ipv6 nd ra dns search-listshow ipv6 nd ra dns server
- IRDP commands
- IVRF commands
- Key chain commands
- L1-100Mbps downshift commands
- LACP and LAG commands
- LLDP commands
clear lldp neighborsclear lldp statisticslldplldp dot3lldp holdtimelldp management-ipv4-addresslldp management-ipv6-addresslldp medlldp med-locationlldp receivelldp reinitlldp select-tlvlldp timerlldp transmitlldp txdelayshow lldp configurationshow lldp configuration mgmtshow lldp tlvshow lldp statisticsshow lldp statistics mgmtshow lldp neighbor-infoshow lldp neighbor-info detailshow lldp neighbor-info mgmtshow lldp local-device
- Local AAA commands
aaa accounting all-mgmtaaa authentication limit-login-attemptsaaa authentication loginaaa authentication minimum-password-lengthaaa authorization commandsshow aaa accountingshow aaa authenticationshow aaa authorization-
show ssh authentication-method -
show user ssh password-authenticationssh public-key-authenticationuser authorized-key
- Log rotation commands
- Loop protect commands
- Loopback commands
- MAC address table commands
- Management interface commands
- mDNS gateway commands
debug mdnsdescriptionidmdns-sdmdns-sd apply-profile txmdns-sd enablemdns-sd profilemdns-sd serviceclear mdns-sd statistics<sequence-number>show mdns-sd service-entriesshow mdns-sd statisticsshow mdns-sd statistics profileshow mdns-sd summaryshow running-config interfaceshow running-config mdns-sd profileshow running-config mdns-sd service
- Mirroring commands
- MLD snooping commands
- MLD snooping functionality
- MLD snooping global configuration commands
- MLD snooping VLAN configuration commands
ipv6 mld snoopingipv6 mld snooping fastlearnipv6 mld snooping fastleaveipv6 mld snooping forced fastleaveipv6 mld snooping [version <ver>]ipv6 mld snooping apply access-listipv6 mld snooping [auto <port-list>]ipv6 mld snooping [blocked <port-list>]ipv6 mld snooping [forward <port-list>]ipv6 mld snooping [static-group <X:X::X:X>]
- MLD snooping show commands
show ipv6 mld snoopingshow ipv6 mld snooping [counters]show ipv6 mld snooping [groups]show ipv6 mld snooping [statistics]show ipv6 mld snooping [vlan <vlan-id> [counters]]show ipv6 mld snooping [vlan <vlan-id> [statistics]]show ipv6 mld snooping [vlan <vlan-id> [group [<group-ip>] [source <source-ip>]]]show ipv6 mld snooping [vlan <vlan-id> [group [port <port_id>]]show ipv6 mld snooping [static-groups]
- MLD configuration commands for interface VLAN
ipv6 mld {enable | disable}ipv6 mld apply access-listno ipv6 mldipv6 mld querieripv6 mld querier [interval <interval-value>]ipv6 mld last-member-query-interval <interval-value>ipv6 mld querier query-max-response-time <response-time>ipv6 mld robustness <value>ipv6 mld static-group <multicast-group-ip>ipv6 mld version <version>ipv6 mld version <version> [strict]
- MLD show commands for interface VLAN
show ipv6 mldshow ipv6 mld [interface <intf_id> | vlan <vlan-id>]show ipv6 mld [vrf <vrf_name> | all-vrfs ]show ipv6 mld [interface <intf-id> | vlan <vlan-id>] [counters]]show ipv6 mld [interface <intf-id> | vlan <vlan-id>] [groups]]show ipv6 mld [interface (<intf-id> | vlan <vlan-id>) [group <group_ip>] [source <source_ip>]]]]show ipv6 mld [groups]show ipv6 mld groups [all-vrfs | vrf <vrf_name>]show ipv6 mld [interface <intf-id> [counters]]show ipv6 mld [interface <intf-id> [statistics]]show ipv6 mld [interface <intf-id> [groups]]show ipv6 mld [interface (<intf-id> | vlan <vlan-id>) [group <group_ip>] [source <source_ip>]]]]show ipv6 mld [group <group_ip> [all-vrfs | vrf <vrf_name>]]show ipv6 mld [group <group_ip> [source <source_ip> [all-vrfs | vrf <vrf_name>]]]show ipv6 mld [interface vlan <vlan-id> [statistics]]show ipv6 mld [static-groups [vrf <vrf_name> | all-vrfs]]show ipv6 mld counters
- MLD configuration commands for interface
ipv6 mld {enable | disable}ipv6 mld apply access-listno ipv6 mldipv6 mld querieripv6 mld querier [interval <interval-value>]ipv6 mld last-member-query-interval <interval-value>ipv6 mld querier query-max-response-time <response-time>ipv6 mld robustness <value>ipv6 mld static-group <multicast-group-ip>ipv6 mld version <version>ipv6 mld version <version> [strict]
- MSDP commands
- MSTP commands
show spanning-treeshow spanning-tree detailshow spanning-tree inconsistent-portsshow spanning-tree mstshow spanning-tree mst-configshow spanning-tree mst detailshow spanning-tree mst <INSTANCE-ID>show spanning-tree mst <INSTANCE-ID> detailshow spanning-tree mst interfaceshow spanning-tree summary portshow spanning-tree summary rootspanning-treespanning-tree bdpu-filterspanning-tree bpdu-guardspanning-tree bpdu-guard timeoutspanning-tree config-namespanning-tree config-revisionspanning-tree costspanning-tree forward-delayspanning-tree hello-timespanning-tree instance costspanning-tree instance port-priorityspanning-tree instance priorityspanning-tree instance vlanspanning-tree link-typespanning-tree loop-guardspanning-tree max-agespanning-tree max-hopsspanning-tree modespanning-tree port-priorityspanning-tree port-typespanning-tree priorityspanning-tree root-guardspanning-tree rpvst-filterspanning-tree rpvst-guardspanning-tree tcn-guardspanning-tree transmit-hold-countspanning-tree trap
- MVRP commands
- ND snooping commands
clear nd-snooping bindingclear nd-snooping statisticsnd-snoopingnd-snooping(inconfig-vlancontext)nd-snooping mac-checknd-snooping prefix-listnd-snooping max-bindingsnd-snooping nd-guardnd-snooping ra-guardnd-snooping ra-dropnd-snooping trustshow nd-snoopingshow nd-snooping bindingshow nd-snooping prefix-listshow nd-snooping statistics
- Network Analytics Engine commands
- NTP commands
- OSPFv2 commands
areaarea default-metricarea nssaarea rangearea stubarea virtual-linkauthenticationauthentication-keyclear ip ospf neighborsclear ip ospf statisticsdead-intervaldefault-information originatedefault-information originate alwaysdefault-metricdisabledistanceenablegraceful-restarthello-intervalip ospf areaip ospf authenticationip ospf authentication-keyip ospf costip ospf dead-intervalip ospf hello-intervalip ospf keychainip ospf message-digest-key md5ip ospf networkip ospf passiveip ospf priorityip ospf retransmit-intervalip ospf shutdownip ospf transit-delaykeychainmax-metric router-lsamaximum-pathsmessage-digest-key md5passive-interface defaultredistributereference-bandwidthretransmit-intervalrfc1583-compatibilityrouter ospfrouter-idshow ip ospfshow ip ospf border-routersshow ip ospf interfaceshow ip ospf lsdbshow ip ospf neighborsshow ip ospf routesshow ip ospf statisticsshow ip ospf statistics interfaceshow ip ospf virtual-linkssummary-addresstimers lsa-arrivaltimers throttle lsatimers throttle spftransit-delaytrap-enable
- OSPFv3 commands
areaarea authentication ipsecarea encryption ipsecarea nssaarea rangearea stubarea virtual-linkarea default-metricauthentication ipsec spiclear ipv6 ospfv3 neighborsclear ipv6 ospfv3 statisticsdead-intervaldefault-metricdisabledistanceenableencryption ipsec spidefault-information originatedefault-information originate alwaysgraceful-restarthello-intervalipv6 ospfv3 areaipv6 ospfv3 authentication nullipv6 ospfv3 authentication ipsecipv6 ospfv3 costipv6 ospfv3 dead-intervalipv6 ospfv3 encryption ipsecipv6 ospfv3 encryption nullipv6 ospfv3 hello-intervalipv6 ospfv3 networkipv6 ospfv3 passiveipv6 ospfv3 priorityipv6 ospfv3 retransmit-intervalipv6 ospfv3 shutdownipv6 ospfv3 transit-delaymaximum-pathsmax-metric router-lsapassive-interface defaultredistributereference-bandwidthretransmit-intervalrouter-idrouter ospfv3show ipv6 ospfv3show ipv6 ospfv3 border-routersshow ipv6 ospfv3 interfaceshow ipv6 ospfv3 neighborsshow ipv6 ospfv3 routesshow ipv6 ospfv3 statisticsshow ipv6 ospfv3 statistics interfaceshow ipv6 ospfv3 virtual-linkssummary-addresstimers lsa-arrivaltimers throttle lsatimers throttle spftransit-delaytrap-enable
- PBR commands
- PIM-SM commands for IPv4
accept-register access-listaccept-rpactive-activebfd all-interfacesbsr-candidate bsm-intervalbsr-candidate hash-mask-lengthbsr-candidate prioritybsr-candidate source-ip-interfacedisableenableip pim-sparse {enable|disable}ip pim-sparse bfdip pim-sparse dr-priorityip pim-sparse hello-delayip pim-sparse hello-intervalip pim-sparse ip-addrip pim-sparse lan-prune-delayip pim-sparse override-intervalip pim-sparse propagation-delayjoin-prune-intervalmulticast-route-limitno ip pim-sparseregister-rate-limitrouter pimrp-address <IP-ADDR>rp-candidate group-prefixrp-candidate hold-timerp-candidate priorityrp-candidate source-ip-interfacerpf-overrideshow ip mrouteshow ip mroute briefshow ip mroute <GROUP-ADDR>show ip pimshow ip pim bsrshow ip pim bsr electedshow ip pim bsr localshow ip pim interfaceshow ip pim interface <INTERFACE-NAME>show ip pim interface <INTERFACE-NAME> countersshow ip pim neighborshow ip pim pendingshow ip pim rp-candidateshow ip pim rp-setshow ip pim rp-set learnedshow ip pim rp-set staticshow ip pim rpf-overrideshow ip pim rpf-override sourcesources-per-groupspt-threshold
- PIM-SM commands for IPv6
accept-register access-listaccept-rpbsr-candidate bsm-intervalbsr-candidate hash-mask-lengthbsr-candidate prioritybsr-candidate source-ip-interfacedisableenableipv6 pim6-sparse {enable|disable}ipv6 pim6-sparse bfdipv6 pim6-sparse dr-priorityipv6 pim6-sparse hello-delayipv6 pim6-sparse hello-intervalipv6 pim6-sparse ipv6-addripv6 pim6-sparse lan-prune-delayipv6 pim6-sparse override-intervalipv6 pim6-sparse propagation-delayjoin-prune-intervalno ipv6 pim6-sparserouter pim6rp-address <IPv6-ADDR>rp-candidate group-prefixrp-candidate hold-timerp-candidate priorityrp-candidate source-ip-interfacerpf-overrideshow ipv6 mroute <GROUP-ADDR>show ipv6 mrouteshow ipv6 mroute briefshow ipv6 pim6show ipv6 pim6 bsrshow ipv6 pim6 bsr electedshow ipv6 pim6 bsr localshow ipv6 pim6 interface <INTERFACE-NAME>show ipv6 pim6 interfaceshow ipv6 pim6 neighborshow ipv6 pim6 pendingshow ipv6 pim6 rp-candidateshow ipv6 pim6 rpf-overrideshow ipv6 pim6 rpf-override sourceshow ipv6 pim6 rp-setshow ipv6 pim6 rp-set learnedshow ipv6 pim6 rp-set staticspt-threshold
- PIM-DM commands for IPv4
disableenableno ip pim-dense {enable|disable}ip pim-dense bfdip pim-dense graft-retry-intervalip pim-dense hello-delayip pim-dense hello-intervalip pim-dense ip-addrip pim-dense lan-prune-delayip pim-dense max-graft-retriesip pim-dense override-intervalip pim-dense propagation-delayip pim-dense ttl-thresholdrouter pimshow ip mrouteshow ip mroute <GROUP-ADDR>show ip mroute briefshow ip pimshow ip pim interfaceshow ip pim interface <INTERFACE-NAME>show ip pim interface <INTERFACE-NAME> countersshow ip pim neighborstate-refresh-interval
- PIM-DM commands for IPv6
disableenableipv6 pim6-dense {enable|disable}ipv6 pim6-dense bfdipv6 pim6-dense graft-retry-intervalipv6 pim6-dense hello-delayipv6 pim6-dense hello-intervalipv6 pim6-dense ipv6-addripv6 pim6-dense lan-prune-delayipv6 pim6-dense max-graft-retriesipv6 pim6-dense override-intervalipv6 pim6-dense propagation-delayipv6 pim6-dense ttl-thresholdno ipv6 pim6-denseshow ipv6 pim6show ipv6 pim6 interfaceshow ipv6 pim6 interface <INTERFACE-NAME>show ipv6 mrouteshow ipv6 mroute briefshow ipv6 mroute <GROUP-ADDR>show ipv6 pim6 neighborrouter pim6state-refresh-interval
- Ping commands
- PKI EST commands
- PKI commands
crypto pki application-
crypto pki certificate crypto pki ta-profileenroll self-signedenroll terminalimport(CA-signed leaf certificate)import(self-signed leaf certificate)key-typeocsp disable-nonceocsp enforcement-levelocsp urlocsp vrfrevocation-check ocspshow crypto pki applicationshow crypto pki certificateshow crypto pki ta-profileta-certificatesubject
- PoE commands
lldp dot3 poelldp med poepower-over-ethernetpower-over-ethernet allocate-bypower-over-ethernet always-onpower-over-ethernet assigned-classpower-over-ethernet pre-std-detectpower-over-ethernet prioritypower-over-ethernet quick-poepower-over-ethernet thresholdpower-over-ethernet priorityshow lldp localshow lldp neighborshow power-over-ethernet
- Port access general commands
aaa authentication port-access auth-modeaaa authentication port-access auth-precedenceaaa authentication port-access auth-priorityaaa authentication port-access client-limitaaa authentication port-access(role)port-access allow-flood-trafficport-access fallback-roleport-access log-off client macport-access onboarding-method precedenceport-access onboarding-method concurrentport-access reauthenticate interfaceport-access security violation actionport-access security violation action shutdown auto-recoveryport-access security violation action shutdown recovery-timershow aaa authentication port-access interface client-status macshow port-access clientsshow port-access clients detailshow port-access security violation client-limit-exceeded interface
- Port access 802.1X authentication commands
aaa authentication port-access dot1x authenticatoraaa authentication port-access dot1x authenticator auth-methodaaa authentication port-access dot1x authenticator cached-reauthaaa authentication port-access dot1x authenticator cached-reauth-periodaaa authentication port-access dot1x authenticator discovery-periodaaa authentication port-access dot1x authenticator eapol-timeoutaaa authentication port-access dot1x authenticator max-eapol-requestsport-access dot1x authenticator max-retriesaaa authentication port-access dot1x authenticator quiet-periodaaa authentication port-access dot1x authenticator radius server-groupaaa authentication port-access dot1x authenticator reauthaaa authentication port-access dot1x authenticator reauth-periodclear dot1x authenticator statistics interfaceshow aaa authentication port-access dot1x authenticator interface client-statusshow aaa authentication port-access dot1x authenticator interface port-statistics
- Port access MAC authentication commands
aaa authentication port-access mac-authaaa authentication port-access mac-auth addr-formataaa authentication port-access mac-auth auth-methodaaa authentication port-access mac-auth cached-reauthaaa authentication port-access mac-auth cached-reauth-periodaaa authentication port-access mac-auth passwordaaa authentication port-access mac-auth quiet-periodaaa authentication port-access mac-auth radius server-groupaaa authentication port-access mac-auth reauthaaa authentication port-access mac-auth reauth-periodclear mac-auth statisticsshow aaa authentication port-access mac-auth interface client-statusshow aaa authentication port-access mac-auth interface port-statistics
- Port access policy commands
- Port access role commands
associate captive-portal-profileassociate policyauth-modecached-reauth-periodclient-inactivity timeoutdescriptiongateway-zone zone gateway-rolemtupoe-priorityport-access rolereauth-periodsession timeoutshow aaa authentication port-access interface client-statusshow port-access rolestp-admin-edge-porttrust-modevlan
- Port security commands
- Port filtering commands
- QoS commands
apply qosdwrr queuemap queuename queue-
qos cos qos cos-map-
qos dscp qos dscp-mapqos queue-profileqos schedule-profile-
qos shape qos trustrate-limitshow interface queuesshow interface qosshow qos cos-mapshow qos dscp-mapshow qos queue-profileshow qos schedule-profileshow qos truststrict queue
- RADIUS dynamic authorization commands
- Remote AAA (TACACS+, RADIUS) commands
aaa accounting all-mgmtaaa accounting port-access(RADIUS only)aaa authentication allow-fail-throughaaa authentication loginaaa authorization commandsaaa group serverradius-server auth-typeradius-server hostradius-server host(ClearPass)radius-server host secure ipsecradius-server host tls (RadSec)radius-server keyradius-server retriesradius-server timeoutradius-server tls timeout (RadSec)radius-server trackingservershow aaa accountingshow aaa accounting port-access(RADIUS only)show aaa authenticationshow aaa authorizationshow aaa server-groupsshow accounting logshow accounting log port-accessshow radius-servershow radius-server secure ipsecshow radius-server statisticsshow radius-server statistics hostshow tacacs-servershow tacacs-server statisticsshow tech aaatacacs-server auth-typetacacs-server hosttacacs-server keytacacs-server timeouttacacs-server tracking
- Remote syslog commands
- RIPv2 (IPv4) commands
- RIPng (IPv6) commands
- Route policy and route map commands
- RPVST+ commands
show spanning-treeshow spanning-tree inconsistent-portsshow spanning-tree summary portshow spanning-tree summary rootshow spanning-tree vlanspanning-tree bpdu-guard timeoutspanning-tree extend-system-idspanning-tree ignore-pvid-inconsistencyspanning-tree link-typespanning-tree modespanning-tree pathcost-typespanning-tree tcn-guardspanning-tree vlanspanning-tree vlan costspanning-tree vlan port-priorityspanning-tree trap
- Runtime diagnostic commands
- Selftest commands
- sFlow agent commands
- SNMP commands
rmon alarmshow rmon alarmshow snmp agent-portshow snmp communityshow snmp systemshow snmp trapshow snmp vrfshow snmpv3 contextshow snmpv3 engine-idshow snmpv3 security-levelshow snmpv3 userssnmp-server agent-portsnmp-server communitysnmp-server hostsnmp-server system-contactsnmp-server system-descriptionsnmp-server system-locationsnmp-server vrfsnmpv3 contextsnmpv3 engine-idsnmpv3 security-levelsnmpv3 user
- SSH client commands
- SSH server commands
- Static routing commands
- Supportability copy commands
copy command-outputcopy core-dump [<MEMBER/SLOT>] daemoncopy core-dump [<MEMBER/SLOT>] kernelcopy core-dump [<MEMBER/SLOT>] kernel <STORAGE-URL>copy core-dump vsf member daemoncopy core-dump vsf member kernelcopy diag-dump feature <FEATURE>copy diag-dump local-filecopy diag-dump vsf member local-filecopy show-tech featurecopy show-tech local-filecopy show-tech vsf member local-filecopy support-filescopy support-files vsf membercopy support-logcopy support-log vsf member
- Switch system and hardware commands
bluetooth disablebluetooth enableclear eventsclear ip errorsdomain-namehostnameled locatormodule admin-statemodule product-numbermtraceshow bluetoothshow boot-historyshow capacitiesshow capacities-statusshow core-dumpshow domain-nameshow environment fanshow environment ledshow environment power-consumptionshow environment power-supplyshow environment rear-display-moduleshow environment temperatureshow eventsshow fabricshow hostnameshow imagesshow ip errorsshow moduleshow running-configshow running-config current-contextshow startup-configshow systemshow system error-counter-monitorshow system resource-utilizationshow techshow usbshow usb file-systemshow versionsystem resource-utilization poll-intervaltop cputop memoryusbusb mount | unmount
- Terminal monitor commands
- Traceroute commands
- UDLD commands
- UDP commands
- User and group commands
- User-based tunneling commands
- VRF commands
- VRRP commands
- VSF commands
- VSX commands
active-gatewayconfig-sync disableinter-switch-link {<PORT-NUM> | lag <LAG-ID>}inter-switch-link dead-intervalinter-switch-link hello-intervalinter-switch-link hold-timeinter-switch-link peer-detect-intervalinterface lag multi-chassisip icmp redirectkeepalive dead-intervalkeepalive hello-intervalkeepalive peerkeepalive udp-portlacp fallbacklinkup-delay-timerlinkup-delay-timer exclude lag-listneighbor <IP-ADDRESS> vsx-sync-excluderole {primary | secondary}show active-gatewayshow active-gateway <IFNAME>show interface <VLAN-NAME>show lacp aggregatesshow lacp interfacesshow lacp interfaces multi-chassisshow running-config interfaceshow running-config vsxshow running-config vsx-syncshow running-config vsx-sync peer-diffshow vsx active-forwardingshow vsx briefshow vsx config-consistencyshow vsx config-consistency lacpshow vsx configurationshow vsx configuration split-recoveryshow vsx ip data-pathshow vsx ip routeshow vsx ipv6 data-pathshow vsx ipv6 routeshow vsx statusshow vsx status config-syncsplit recoverysystem-macvsxvsx active-forwardingvsx-syncvsx-sync {[access-lists] [qos] [rate-limits] [vlans] [policies] [irdp] [portfilter]}vsx-sync {[active-gateways] [policies]}vsx-sync aaavsx-sync acl-log-timervsx-sync arp-securityvsx-sync bfd-globalvsx-sync bgpvsx-sync copp-policyvsx-sync dcb-global(8325 and 8360 series switches only)vsx-sync dhcp-relayvsx-sync dhcp-servervsx-sync dhcpv6-servervsx-sync dnsvsx-sync evpnvsx-sync icmp-tcpvsx-sync keychainvsx-sync lldpvsx-sync loop-protect-globalvsx-sync mac-lockoutvsx-sync mclag-interfacesvsx-sync nd-snoopingvsx-sync neighborvsx-sync ospfvsx-sync policy-globalvsx-sync qos-globalvsx-sync route-mapvsx-sync sflowvsx-sync sflow-globalvsx-sync snmpvsx-sync sshvsx-sync static-routesvsx-sync stp-globalvsx-sync timevsx-sync udp-forwardervsx-sync vrfvsx-sync vrrpvsx-sync vsx-globalvsx update-softwarevsx update-software boot-bank
- VXLAN commands
- Zeroization commands
- ZTP commands
- Support and other resources