Loading, please wait ...
- Home
- About this document
- Introduction to the ArubaOS-CX CLI
- Service OS CLI commands
- ACL commands
- ACL application
access-list copyaccess-list ipaccess-list ipv6access-list log-timeraccess-list macaccess-list resequenceaccess-list resetapply access-list control-planeapply access-list(to interface or LAG)apply access-list(to VLAN)-
clear access-list hitcounts -
clear access-list hitcounts control-plane show access-listshow access-list control-planeshow access-list hitcountsshow access-list hitcounts control-planeshow capacitiesshow capacities-status
- ACL and Policy hardware resource commands
- ARP commands
- Banner commands
- Boot commands
- Cable diagnostic command
- CDP commands
- Checkpoint commands
checkpoint autocheckpoint auto confirmcheckpoint diffcheckpoint post-configurationcheckpoint post-configuration timeoutcheckpoint renamecheckpoint rollbackcopy checkpoint <CHECKPOINT-NAME> <REMOTE-URL>copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config}copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL>copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME>copy <REMOTE-URL> {running-config | startup-config}copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>}copy {running-config | startup-config} <REMOTE-URL>copy {running-config | startup-config} <STORAGE-URL>copy startup-config running-configcopy <STORAGE-URL> running-configerase {checkpoint <CHECKPOINT-NAME> | startup-config | all}show checkpoint <CHECKPOINT-NAME>show checkpoint post-configurationshow checkpoint listwrite memory
- Classifier policy commands
- CLI session commands
- CLI user session management commands
- Clock commands
- CoPP commands
- Debug logging
- Device profile commands
aaa authentication port-access allow-cdp-bpduaaa authentication port-access allow-lldp-bpduassociate cdp-groupassociate lldp-groupassociate mac-groupassociate roledisableenableignore(for CDP groups)ignore(for LLDP groups)ignore(for MAC groups)mac-groupmatch(for CDP groups)match(for LLDP groups)match(for MAC groups)port-access cdp-groupport-access device-profileport-access device-profile mode block-until-profile-appliedport-access lldp-groupshow port-access device-profile
- DHCP client commands
- DNS client commands
- Fault monitor commands
- Command for creating a fault monitoring profile
- Commands for enabling and disabling the faults
- Commands for applying or changing the action and configuring auto-enable for a fault
- Commands for configuring the threshold for the fault
- Command for applying a fault monitoring profile to a port
- Command for configuring VSX synchronization for a fault monitoring profile
show fault-monitor profileshow interface fault-monitor profileshow interface fault-monitor statusshow running-configshow running-config all
- Firmware management commands
- HTTPS server commands
- ICMP commands
- IGMP commands
ip igmpip igmp apply access-listip igmp last-member-query-intervalip igmp querierip igmp querier intervalip igmp querier query-max-response-timeip igmp robustnessip igmp static-groupip igmp versionip igmp version strictno ip igmpshow ip igmpshow ip igmp countersshow ip igmp groupshow ip igmp groupsshow ip igmp interfaceshow ip igmp interface countersshow ip igmp interface groupshow ip igmp interface groupsshow ip igmp interface statisticsshow ip igmp static-groupsshow ip igmp statistics
- In-System Programming commands
- Interface commands
allow-unsupported-transceiverdefault interfacedescriptionenergy-efficient-ethernetflow-controlinterfaceinterface vlanip addressip mtuip source-interfaceipv6 addressipv6 source-interfacemtushow allow-unsupported-transceivershow interfaceshow interface domshow interface energy-efficient ethernetshow interface transceivershow ip interfaceshow ip source-interfaceshow ipv6 interfaceshow ipv6 source-interfaceshutdown
- IP Client Tracker commands
- IP-SLA commands
- IP tunnels commands
- IPv4 source lockdown commands
- IPv6 source lockdown commands
- IPv6 RA commands
ipv6 address <global-unicast-address>ipv6 address autoconfigipv6 address link-localipv6 nd cache-limitipv6 nd dad attemptsipv6 nd hop-limitipv6 nd mtuipv6 nd ns-intervalipv6 nd prefixipv6 nd ra dns search-listipv6 nd ra dns serveripv6 nd ra lifetimeipv6 nd ra managed-config-flagipv6 nd ra max-intervalipv6 nd ra min-intervalipv6 nd ra other-config-flagipv6 nd ra reachable-timeipv6 nd ra retrans-timeripv6 nd router-preferenceipv6 nd suppress-rashow ipv6 nd global trafficshow ipv6 nd interfaceshow ipv6 nd interface prefixshow ipv6 nd ra dns search-listshow ipv6 nd ra dns server
- IRDP commands
- Key chain commands
- L1-100Mbps downshift commands
- LACP and LAG commands
- LLDP commands
clear lldp neighborsclear lldp statisticslldplldp dot3lldp holdtimelldp management-ipv4-addresslldp management-ipv6-addresslldp medlldp med-locationlldp receivelldp reinitlldp select-tlvlldp timerlldp transmitlldp txdelayshow lldp configurationshow lldp local-deviceshow lldp neighbor-infoshow lldp neighbor-info detailshow lldp statisticsshow lldp tlv
- Local AAA commands
aaa accounting all-mgmtaaa authentication limit-login-attemptsaaa authentication loginaaa authentication minimum-password-lengthaaa authorization commandsshow aaa accountingshow aaa authenticationshow aaa authorization-
show ssh authentication-method -
show user ssh password-authenticationssh public-key-authenticationuser authorized-key
- Log rotation commands
- Loop protect commands
- Loopback commands
- MAC address table commands
- Management interface commands
- Mirroring commands
- MLD snooping commands
- MLD snooping functionality
- MLD snooping global configuration commands
- MLD snooping VLAN configuration commands
ipv6 mld snoopingipv6 mld snooping fastlearnipv6 mld snooping fastleaveipv6 mld snooping forced fastleaveipv6 mld snooping [version <ver>]ipv6 mld snooping apply access-listipv6 mld snooping [auto <port-list>]ipv6 mld snooping [blocked <port-list>]ipv6 mld snooping [forward <port-list>]ipv6 mld snooping [static-group <X:X::X:X>]
- MLD snooping show commands
show ipv6 mld snoopingshow ipv6 mld snooping [counters]show ipv6 mld snooping [groups]show ipv6 mld snooping [statistics]show ipv6 mld snooping [vlan <vlan-id> [counters]]show ipv6 mld snooping [vlan <vlan-id> [statistics]]show ipv6 mld snooping [vlan <vlan-id> [group [<group-ip>] [source <source-ip>]]]show ipv6 mld snooping [vlan <vlan-id> [group [port <port_id>]]show ipv6 mld snooping [static-groups]
- MLD configuration commands for interface VLAN
ipv6 mld {enable | disable}ipv6 mld apply access-listno ipv6 mldipv6 mld querieripv6 mld querier [interval <interval-value>]ipv6 mld last-member-query-interval <interval-value>ipv6 mld querier query-max-response-time <response-time>ipv6 mld robustnessipv6 mld static-group <multicast-group-ip>ipv6 mld version <version>ipv6 mld version <version> [strict]
- MLD show commands for interface VLAN
show ipv6 mldshow ipv6 mld [interface <intf_id> | vlan <vlan-id>]show ipv6 mld [all-vrfs ]show ipv6 mld [interface <intf-id> | vlan <vlan-id>] [counters]]show ipv6 mld [interface <intf-id> | vlan <vlan-id>] [groups]]show ipv6 mld [interface (<intf-id> | vlan <vlan-id>) [group <group_ip>] [source <source_ip>]]]]show ipv6 mld [groups]show ipv6 mld groups [all-vrfs]show ipv6 mld [interface <intf-id> [counters]]show ipv6 mld [interface <intf-id> [statistics]]show ipv6 mld [interface <intf-id> [groups]]show ipv6 mld [interface (<intf-id> | vlan <vlan-id>) [group <group_ip>] [source <source_ip>]]]]show ipv6 mld [group <group_ip> [all-vrfs]]show ipv6 mld [group <group_ip> [source <source_ip> [all-vrfs]]]show ipv6 mld [interface vlan <vlan-id> [statistics]]show ipv6 mld [static-groups [all-vrfs]]show ipv6 mld counters
- MLD configuration commands for interface
- MSTP commands
show spanning-treeshow spanning-tree detailshow spanning-tree inconsistent-portsshow spanning-tree mstshow spanning-tree mst-configshow spanning-tree mst detailshow spanning-tree mst <INSTANCE-ID>show spanning-tree mst <INSTANCE-ID> detailshow spanning-tree mst interfaceshow spanning-tree summary portshow spanning-tree summary rootspanning-treespanning-tree bdpu-filterspanning-tree bpdu-guardspanning-tree bpdu-guard timeoutspanning-tree config-namespanning-tree config-revisionspanning-tree costspanning-tree forward-delayspanning-tree hello-timespanning-tree instance costspanning-tree instance port-priorityspanning-tree instance priorityspanning-tree instance vlanspanning-tree link-typespanning-tree loop-guardspanning-tree max-agespanning-tree max-hopsspanning-tree modespanning-tree port-priorityspanning-tree port-typespanning-tree priorityspanning-tree root-guardspanning-tree rpvst-filterspanning-tree rpvst-guardspanning-tree rpvst-mstp interconnect vlanspanning-tree tcn-guardspanning-tree transmit-hold-countspanning-tree trap
- MVRP commands
- ND snooping commands
clear nd-snooping bindingclear nd-snooping statisticsnd-snoopingnd-snooping(inconfig-vlancontext)nd-snooping mac-checknd-snooping prefix-listnd-snooping max-bindingsnd-snooping nd-guardnd-snooping ra-guardnd-snooping ra-dropnd-snooping trustshow nd-snoopingshow nd-snooping bindingshow nd-snooping prefix-listshow nd-snooping statistics
- NTP commands
- Ping commands
- PKI commands
crypto pki application-
crypto pki certificate crypto pki ta-profileenroll self-signedenroll terminalimport(CA-signed leaf certificate)import(self-signed leaf certificate)key-typeocsp disable-nonceocsp enforcement-levelocsp urlocsp vrfrevocation-check ocspshow crypto pki applicationshow crypto pki certificateshow crypto pki ta-profileta-certificatesubject
- PKI EST commands
- PoE commands
lldp dot3 poelldp med poepower-over-ethernetpower-over-ethernet allocate-bypower-over-ethernet always-onpower-over-ethernet assigned-classpower-over-ethernet pre-std-detectpower-over-ethernet prioritypower-over-ethernet quick-poepower-over-ethernet thresholdpower-over-ethernet priorityshow lldp localshow lldp neighborshow power-over-ethernet
- Port access general commands
aaa authentication port-access auth-modeaaa authentication port-access auth-precedenceaaa authentication port-access auth-priorityaaa authentication port-access client-limitaaa authentication port-access(role)port-access allow-flood-trafficport-access fallback-roleport-access log-off clientport-access onboarding-method precedenceport-access onboarding-method concurrentport-access reauthenticate interfaceport-access security violation actionport-access security violation action shutdown auto-recoveryport-access security violation action shutdown recovery-timershow aaa authentication port-access interface client-statusshow port-access clientsshow port-access clients detailshow port-access clients onboarding-methodshow port-access security violation client-limit-exceeded interface
- Port access 802.1X authentication commands
aaa authentication port-access dot1x authenticatoraaa authentication port-access dot1x authenticator auth-methodaaa authentication port-access dot1x authenticator cached-reauthaaa authentication port-access dot1x authenticator cached-reauth-periodaaa authentication port-access dot1x authenticator discovery-periodaaa authentication port-access dot1x authenticator eapol-timeoutaaa authentication port-access dot1x authenticator max-eapol-requestsport-access dot1x authenticator max-retriesaaa authentication port-access dot1x authenticator quiet-periodaaa authentication port-access dot1x authenticator radius server-groupaaa authentication port-access dot1x authenticator reauthaaa authentication port-access dot1x authenticator reauth-periodclear dot1x authenticator statistics interfaceshow aaa authentication port-access dot1x authenticator interface client-statusshow aaa authentication port-access dot1x authenticator interface port-statistics
- Port access MAC authentication commands
aaa authentication port-access mac-authaaa authentication port-access mac-auth addr-formataaa authentication port-access mac-auth auth-methodaaa authentication port-access mac-auth cached-reauthaaa authentication port-access mac-auth cached-reauth-periodaaa authentication port-access mac-auth passwordaaa authentication port-access mac-auth quiet-periodaaa authentication port-access mac-auth radius server-groupaaa authentication port-access mac-auth reauthaaa authentication port-access mac-auth reauth-periodclear mac-auth statisticsshow aaa authentication port-access mac-auth interface client-statusshow aaa authentication port-access mac-auth interface port-statistics
- Port access policy commands
- Port access role commands
- Port security commands
- Port filtering commands
- QoS commands
- RADIUS dynamic authorization commands
- Remote AAA (TACACS+, RADIUS) commands
aaa accounting all-mgmtaaa authentication allow-fail-throughaaa authentication loginaaa authorization commandsaaa group serverradius-server auth-typeradius-server hostradius-server host secure ipsecradius-server keyradius-server retriesradius-server timeoutradius-server trackingservershow aaa accountingshow aaa authenticationshow aaa authorizationshow aaa server-groupsshow accounting logshow radius-servershow radius-server secure ipsecshow tacacs-servershow tacacs-server statisticsshow tech aaatacacs-server auth-typetacacs-server hosttacacs-server keytacacs-server timeouttacacs-server tracking
- Remote syslog commands
- RPVST+ commands
show spanning-treeshow spanning-tree inconsistent-portsshow spanning-tree summary portshow spanning-tree summary rootshow spanning-tree vlanspanning-tree bpdu-guard timeoutspanning-tree extend-system-idspanning-tree ignore-pvid-inconsistencyspanning-tree link-typespanning-tree modespanning-tree pathcost-typespanning-tree rpvst-mstp interconnect vlanspanning-tree tcn-guardspanning-tree vlanspanning-tree vlan costspanning-tree vlan port-priorityspanning-tree trap
- Runtime diagnostic commands
- Selftest commands
- sFlow agent commands
- SNMP commands
rmon alarmshow rmon alarmshow snmp agent-portshow snmp communityshow snmp systemshow snmp trapshow snmp vrfshow snmpv3 contextshow snmpv3 engine-idshow snmpv3 security-levelshow snmpv3 userssnmp-server agent-portsnmp-server communitysnmp-server hostsnmp-server system-contactsnmp-server system-descriptionsnmp-server system-locationsnmp-server vrfsnmpv3 contextsnmpv3 engine-idsnmpv3 security-levelsnmpv3 user
- SSH client commands
- SSH server commands
- Static routing commands
- Supportability copy commands
- Switch system and hardware commands
clear eventsdomain-namehostnameled locatorshow capacitiesshow capacities-statusshow core-dumpshow domain-nameshow environment fanshow environment ledshow environment power-supplyshow environment temperatureshow eventsshow hostnameshow imagesshow moduleshow running-configshow running-config current-contextshow startup-configshow systemshow system resource-utilizationshow techshow usbshow usb file-systemshow versionsystem resource-utilization poll-intervaltop cputop memoryusbusb mount | unmount
- Terminal monitor commands
- Traceroute commands
- UDLD commands
- UDP commands
- User and group commands
- VLAN commands
- Zeroization commands
- ZTP commands
- Support and other resources