ArubaOS-Switch, Comware and Cisco IOS CLI Reference …

1 arubaos - switch , Comware and Cisco IOS CLI Reference Guide Version of Contents Introduction .. 5 Revisions Status .. 7 Version .. 7 Version .. 7 Version .. 7 Version .. 7 Comware 5 and Comware 7 Integration .. 9 Using This Guide .. 11 Comware Differences .. 11 Navigation Differences Among CLIs .. 11 Configuration Differences Among CLIs .. 11 Terminology Differences .. 12 Disclaimer .. 12 Comparing View and Configuration Prompts .. 13 Comparing Frequently Used Commands .. 13 Chapter 1 Basic switch Management .. 14 a) Management Access .. 14 b) Configuration Access .. 15 c) Console Access Baud Rate .. 16 d) Console and Virtual Terminal Access Timeout .. 17 e) Reload & Timed Reload .. 18 f) USB .. 23 g) System and Environment .. 24 h) Remote Management Sessions Viewing .. 29 i) Remote Management Sessions Terminating.

2 32 j) Tech Support Information Output 35 k) Filtering Output show running-config and display 36 l) Motd .. 37 m) Source Interface for Management Communications .. 38 Chapter 2 switch User ID and Password, and Console Access .. 42 1 a) Local User ID and Password, and console access .. 42 b) Recover Lost Password .. 56 c) Protect Local Password .. 58 d) Role based management .. 61 e) Password complexity .. 73 Chapter 3 Image or Operating System File Management .. 83 Chapter 4 Configuration File Management .. 99 Chapter 5 Syslog Services .. 116 Chapter 6 Time Service .. 123 a) NTP .. 123 b) SNTP .. 133 Chapter 7 SNMP .. 138 a) SNMP Version 1 and Version 2c .. 139 b) SNMP Version 3 .. 152 Chapter 8 CLI Management Access Telnet and SSH .. 164 a) Telnet .. 164 b) SSH .. 171 Chapter 9 GUI Management Access HTTP and HTTPS.

3 182 a) HTTP .. 182 b) HTTPS - SSL (Self-Signed Certificates) .. 187 Chapter 10 RADIUS Authentication for switch Management .. 194 a) Basic Configuration .. 195 b) Privilege Mode .. 216 c) Commands 220 d) RADIUS Accounting .. 222 Chapter 11 TACACS+/HWTACACS Authentication for switch Management .. 226 a) Basic Configuration .. 226 b) Privilege Mode .. 241 c) TACACS Accounting .. 244 Chapter 12 Discovery Protocols LLDP and CDP .. 248 a) LLDP .. 248 2 b) CDP .. 255 Chapter 13 Out-of-Band Management .. 263 Chapter 14 Job Schedule .. 279 Chapter 15 Interface or Port Information and Nomenclature .. 287 Chapter 16 VLAN Management .. 304 a) Creating and Naming VLANs .. 304 b) Assigning Ports or Interfaces to VLANs .. 311 c) Assigning an IP Address to a VLAN .. 328 d) IP Helper to Relay / Forward DHCP Requests .. 330 Chapter 17 Advanced VLAN Features.

4 336 a) Private 336 b) MVRP .. 353 c) VxLAN .. 360 d) MDNS, IPv6 ND snooping, BFD .. 363 e) RIPNG .. 364 f) IP-SLA, Portscan detection .. 365 g) Federal Govt Certification, Netdestination .. 370 Chapter 18 PoE (Power over Ethernet) .. 373 Chapter 19 VoIP Support .. 380 Chapter 20 Link Aggregation LACP and Trunk .. 387 a) Link Aggregation Control Protocol (LACP) .. 387 b) Trunk .. 395 Chapter 21 RSTP .. 400 Chapter 22 MSTP .. 412 Chapter 23 PVST/PVST+/RPVST/RPVST+.. 436 Chapter 24 RIP v1 and 449 Chapter 25 OSPFv2 .. 453 a) Single Area .. 453 b) Multiple Areas .. 456 c) Stub .. 458 d) Totally Stubby .. 459 3 e) Show or Display OSPF Commands .. 460 Chapter 26 BGP version 4 .. 467 a) eBGP .. 468 b) iBGP .. 479 Chapter 27 VRRP .. 485 Chapter 28 ACLs .. 493 a) Definitions of Standard or Basic ACLs and Extended or Advanced ACLs.

5 493 b) ACL Fundamental Configuration Options .. 494 Standard/Basic .. 494 494 c) Routed/Layer 3 ACL (RACL) .. 504 Standard or Basic ACL .. 504 Extended or Advanced ACL .. 504 d) VLAN/Layer 2 Based ACL (VACL) .. 510 Standard or Basic ACL .. 510 Extended or Advanced ACL .. 510 e) Port ACL (PACL) .. 517 Standard or Basic ACL .. 517 Extended or Advanced ACL .. 517 Chapter 29 QoS .. 521 QoS Operational Characteristics .. 521 a) QoS .. 522 b) Rate Limiting .. 533 Chapter 30 IP Multicast .. 539 a) PIM Dense .. 540 b) PIM Sparse .. 543 c) IGMP .. 554 Chapter 31 Spanning Tree Hardening .. 556 a) UDLD and DLDP .. 558 b) BPDU Protection and BPDU Guard .. 562 4 c) Loop Protection .. 563 d) Root Guard .. 565 Chapter 32 DHCP Snooping .. 566 Chapter 33 ARP Protection, ARP Detection, and Dynamic ARP Inspection .. 575 Chapter 34 Connection Rate Filtering.

6 584 Chapter 35 Authentication .. 590 a) Authentication .. 590 b) MAC 611 c) Web or Portal Authentication .. 620 Chapter 36 Port Mirroring or Port Span .. 634 a) Local Mirror or SPAN .. 634 b) Remote Mirror or RSPAN .. 640 Chapter 37 Tunneled Node, Trust QoS, Clear Pass Intergration .. 647 Chapter 38 HP 3800 Stacking / HP IRF / Cisco switch Stacks .. 651 Appendix A Comware Platforms Default configuration .. 659 Appendix B Comware CLI Commands in arubaos - switch Software .. 660 a) Fundamental Commands .. 660 b) Display Commands .. 662 Index .. 667 5 Introduction Aruba designed this CLI Reference Guide to help Hewlett Packard Enterprise partners and customers who: Manage multi-vendor networks that include HPE and Cisco switches Have experience deploying Cisco switches and are now deploying HPE switches This CLI Reference Guide compares many of the common commands in three switch operating systems: HPE arubaos - switch (now the Aruba OS), HPE Comware version 5 and version 7, and Cisco IOS operating systems.

7 In this guide, we refer to HPE ProVision as arubaos - switch , HPE Comware version 5 as Comware5, HPE Comware version 7 as Comware7, and Cisco IOS is referenced as Cisco . The HPE arubaos - switch operating system runs on 2530, 2920, 2930F, 3810M, 5400r , HPE 2620, HPE 3500, HPE 5400 and HPE 3800 switch platforms, where the image file starts with the letter W . In addition, the HPE 3800 uses the same foundation arubaos - switch operating system, but the image file starts with the letters KA . The HPE 5400r zl2 also uses the same foundation arubaos - switch operating system, but the image file starts with the letters KB . The HPE Comware5 operating system runs on HPE 12500, HPE 10500, HPE 7500, HPE 5920, HPE 5900, HPE 5830, HPE 5820, HPE 5800, HPE 5500 HI, HPE 5500 EI, HPE 5500 SI, HPE 4800G, HPE 3610, HPE 3600 EI, and HPE 3600SI switch platforms, and the HPE 8800, HPE 6600, HPE MSR50, HPE MSR30, HPE MSR20, HPE MSR20-1x, and HPE MSR900 router platforms.

8 The HPE Comware7 operating system runs on HPE FF 12900, HPE 12500, HPE 10500, HPE FF 7900, HPE 5930, HPE 5920, HEP 5900, HPE FF 5700, and HPE 5130 switch platforms, the HPE MSR2000 series router platforms, and the VSR100x series Virtual Services Router E-LTU. The commands included in this guide were tested on the following: HPE 3800-24G-PoE+-2 SFP+ switch running arubaos - switch HPE A5500-24G-PoE+ EI switch running Comware , Release 2221P07 HPE 5900AF-48G-4XG-2 QSFP+ switch running Comware , Release 2416 Cisco WS-C3750E-24TD switch running Cisco IOS Software C3750E Software (C3750E-UNIVERSALK9-M), (1)SE 6 Additional HPE and Cisco switches and/or routers were used to provide systems connectivity and operational support as necessary. Likewise, various computers and Voice over IP (VoIP) phones were used to help test functionality and provide output for commands such as show or display.

9 7 Revisions Status Version Version released in early 2015 and was a major update to include Comware 7. Version Version released in late 2015 and included minor typographical changes. Version Version released in mid-2016 and included the following content additions and changes: Title change to: Aruba HPE Networking and Cisco CLI Reference Guide New section in Chapter 2: d Role Based Management New section in Chapter 2: e Password Complexity Updates in Chapter 6: arubaos - switch supports NTP New Chapter 13: Out-of-band management New Chapter 14: Job Schedule New Chapter 17: Advanced VLAN Capabilities The commands included in Version update were tested on the following: HP 3800-24G-PoE+-2 SFP+ switch running arubaos - switch HP 5500-24G-PoE+ EI switch running Comware , Release 2221P25 HP 5900AF-48G-4XG-2 QSFP+ switch running Comware , Release 2422P01 Cisco WS-C3750E-24TD switch running Cisco IOS Software C3750E Software (C3750E-UNIVERSALK9-M), (2)SE7 Version Version released in Feb-2017 and included the following content additions and changes: Title change to: arubaos - switch , Comware and Cisco IOS CLI Reference guide New enhancements in Chapter 2: d Role Based Management New enhancements in Chapter 2: e Password Complexity Updates in Chapter 6: arubaos - switch supports NTP New updates in Chapter17: c: VxLAN New updates in Chapter17: d: MDNS, IPv6 ND Snooping, BFD New updates in Chapter17: e: RIPNG New updates in Chapter17: f.

10 IP-SLA, Portscan Detection New updates in Chapter17: g: Federal Govt Certification, Netdestination New enhancements in Chapter 28: ACLs New chapter 37: Tunneled Node, Trust QoS, Clear Pass Integration 8 The commands included in Version update were tested on the following: HP 3800-24G-PoE+-2 SFP+ switch running arubaos - switch 9 Comware 5 and Comware 7 Integration In order to preserve the 3-column format of the document for legability, Comware7 has been integrated with Comware5 into a single column. The following details the three options of this integration: 1. Where Comware5 & Comware7 have the same commands and same options within commands the Comware box color is dark blue and is depicted as Comware : arubaos - switch Comware Cisco arubaos - switch (config)# console inactivity-timer ? [ Comware ]user-interface aux 0 Cisco (config)#line console 0 2.