Commands A and B

In this section:

  1. 100-fx
    Enables 100Base-FX on chassis-based and stackable devices.
  2. 100-tx
    Configures a 1000Base-TX small form-factor pluggable (SFP) transceiver to operate at a speed of 100 Mbps.
  3. aaa accounting commands
    Configures the AAA accounting configuration parameters for EXEC commands.
  4. aaa accounting dot1x
    Enables 802.1X accounting.
  5. aaa accounting exec
    Configures the AAA accounting configuration parameters for SSH and Telnet access.
  6. aaa accounting mac-auth
    Enables or disables RADIUS accounting for MAC authentication sessions.
  7. aaa accounting system
    Configures AAA accounting to record when system events occur on the device.
  8. aaa authentication dot1x
    Enables 802.1X and MAC authentication.
  9. aaa authentication enable
    Configures the AAA authentication method for securing access to the Privileged EXEC level and global configuration levels of the CLI.
  10. aaa authentication login
    Configures the AAA authentication method for securing access to Telnet or SSH access to the CLI.
  11. aaa authentication snmp-server
    Configures the AAA authentication method for SNMP server access.
  12. aaa authentication web-server
    Configures the AAA authentication method to access the device through the Web Management Interface.
  13. aaa authorization coa enable
    Enables RADIUS Change of Authorization (CoA).
  14. aaa authorization coa ignore
    Discards the specified RADIUS Change of Authorization (CoA) messages.
  15. aaa authorization commands
    Configures the AAA authorization configuration parameters for EXEC commands.
  16. aaa authorization exec
    Determines the user privilege level when users are authenticated.
  17. accept-lifetime
    Configures the time period during which the key on a keychain becomes active and is received as valid.
  18. accept-mode
    Enables a backup Virtual Router Redundancy Protocol (VRRP) device to respond to ping, traceroute, and Telnet packets if the backup device becomes the master VRRP device.
  19. accept-register
    Configures the register message filter rule for Protocol Independent Multicast (PIM) and IPv6 Protocol Independent Multicast (PIMv6).
  20. access-control vlan
    Enables the VLAN containment for Network Time Protocol (NTP).
  21. access-list accounting timer
    Sets frequency of ACL accounting statistics collection.
  22. accounting
    Enables RADIUS accounting for Web Authentication.
  23. acl-mirror-port
    Configures ACL-based inbound mirroring.
  24. activate (VRRP)
    Activates the configured Virtual Router Redundancy Protocol (VRRP) virtual routing instance.
  25. activate (VSRP)
    Activates the Virtual Switch Redundancy Protocol (VSRP) Virtual Router ID (VRID) for a port-based VLAN.
  26. add mac
    Permanently authenticates certain hosts.
  27. add-vlan
    Adds individual VLANs or a range of VLANs.
  28. address-family
    Enables IPv4 or IPv6 address-family configuration mode.
  29. address-family unicast (BGP)
    Enables the IPv4 or IPv6 address family configuration mode to configure a variety of Border Gateway Protocol Version 4 (BGP4) unicast routing options.
  30. advertise backup
    Advertises a Virtual Router Redundancy Protocol (VRRP) backup router to a VRRP master router.
  31. advertise backup (VSRP)
    Enables a backup to send Hello messages to the master.
  32. age
    Configures the device to age out secure MAC addresses after a specified amount of time.
  33. aggregate-address (BGP)
    Configures the device to aggregate routes from a range of networks into a single network prefix.
  34. aggregated-vlan
    Enables support for larger Ethernet frames.
  35. alias
    An alias serves as a shorthand version of a longer CLI command.
  36. all-client
    Restricts all remote management access methods expect for a specified host.
  37. always-compare-med
    Configures the device always to compare the Multi-Exit Discriminators (MEDs), regardless of the autonomous system (AS) information in the paths.
  38. always-propagate
    Enables the device to reflect BGP routes even though they are not installed in the Routing Table Manager (RTM).
  39. anycast-rp
    Configures PIM anycast rendezvous points (RPs) in IPv4 and IPv6 multicast domains.
  40. area (OSPFv2)
    Configures an Open Shortest Path First Version 2 (OSPFv2) area.
  41. area (OSPFv3)
    Configures an Open Shortest Path First Version 3 (OSPFv3) area.
  42. area authentication (IPsec)
    Enables IPSec authentication for an OSPF Version 3 (OSPFv3) area.
  43. area authentication (OSPFv3)
    Configures HMAC-SHA-1 or HMAC-SHA-256 authentication for an Open Shortest Path First version 3 (OSPFv3) area.
  44. area authentication keychain (OSPFv3)
    Configures keychain authentication for an Open Shortest Path First version 3 (OSPFv3) area.
  45. area nssa (OSPFv2)
    Creates a not-so-stubby area (NSSA) or modifies its parameters.
  46. area nssa (OSPFv3)
    Creates a not-so-stubby area (NSSA) or modifies its parameters.
  47. area range (OSPFv2)
    Specifies area range parameters on an area border router (ABR).
  48. area range (OSPFv3)
    Specifies area range parameters on an area border router (ABR).
  49. area stub (OSPFv2)
    Creates or deletes a stub area or modifies its parameters.
  50. area stub (OSPFv3)
    Creates or deletes a stub area or modifies its parameters.
  51. area virtual-link (OSPFv2)
    Creates or modifies virtual links for an Open Shortest Path First version 2 (OSPFv2) area.
  52. area virtual-link (OSPFv3)
    Creates or modifies virtual links for an area.
  53. area virtual-link authentication (OSPFv2)
    Configures MD5, HMAC-SHA-1 or HMAC-SHA-256 authentication for an Open Shortest Path First version 2 (OSPFv2) area virtual link.
  54. area virtual-link authentication (OSPFv3)
    Enables HMAC-SHA-1 or HMAC-SHA-256 authentication for virtual links in an OSPFv3 area.
  55. area virtual-link authentication ipsec (OSPFv3)
    Enables IPsec (IP Security) authentication for virtual links in an OSPFv3 area.
  56. area virtual-link authentication key-activation-wait-time (OSPFv2)
    Configures the time before an authentication key change is activated for an Open Shortest Path First version 2 (OSPFv2) area virtual link.
  57. area virtual-link authentication key-activation-wait-time (OSPFv3)
    Configures the time before an authentication key change is activated for an Open Shortest Path First version 3 (OSPFv3) area virtual link.
  58. area virtual-link authentication keychain (OSPFv2)
    Configures keychain authentication for Open Shortest Path First version 2 (OSPFv2) area virtual link.
  59. area virtual-link authentication keychain (OSPFv3)
    Configures keychain authentication for Open Shortest Path First version 3 (OSPFv3) area virtual link.
  60. area virtual-link authentication plain-text (OSPFv2)
    Configures simple password-based authentication for an Open Shortest Path First version 2 (OSPFv2) area.
  61. area virtual-link authentication rfc6506 (OSPFv3)
    Configures keychain authentication in accordance with RFC 6506 for an Open Shortest Path First version 3 (OSPFv3) area virtual link.
  62. arp
    Creates static ARP entry.
  63. arp inspection trust
    Enables dynamic ARP inspection (DAI) trust on a port.
  64. arp-internal-priority
    Configures the priority of ingress ARP packets.
  65. as-path-ignore
    Disables the comparison of the autonomous system (AS) path lengths of otherwise equal paths.
  66. atalk-proto
    Configures the AppleTalk protocol-based VLAN.
  67. attempt-max-num
    Configures the number of times a user can enter an invalid username and password; that is, the number of Web Authentication attempts during the specified cycle time.
  68. auth allow-tagged enable
    Allows tagged packets to be processed when the port is not tagged in the incoming tagged VLAN.
  69. auth auth-mode
    Configures Flexible authentication mode at the interface level.
  70. auth-default-vlan
    Specifies the auth-default VLAN globally.
  71. auth-fail-action (Flexible Authentication)
    Configures, at a global level, the action taken after 802.1X and MAC authentication failure.
  72. auth-mode
    Specifies the authentication mode, for example, single-host, multiple-hosts, or multiple-untagged.
  73. auth-mode captive-portal
    Authenticates the users in a VLAN through external Web Authentication (Captive Portal user authentication mode).
  74. auth-mode none
    Enables automatic Web Authentication.
  75. auth-mode passcode
    Enables Web Authentication to use dynamically created passcodes to authenticate users in the VLAN.
  76. auth-mode username-password
    Enables the username and password Web Authentication mode.
  77. auth-order
    Specifies the sequence of authentication methods, 802.1X authentication and MAC authentication at the global level.
  78. auth-timeout-action
    Configures, at a global level, the action taken when external server authentication times out.
  79. auth-vlan-mode
    Enables the Flexible authentication-enabled ports to be member of multiple untagged VLANs.
  80. authenticate
    Enables Network Time Protocol (NTP) strict authentication.
  81. authenticated-mac-age-time
    Configures the time duration after which the user-associated MAC address is aged out and reauthentication is enforced.
  82. authentication
    Enters the authentication mode.
  83. authentication (IKEv2)
    Configures an authentication proposal for an Internet Key Exchange version 2 (IKEv2) profile.
  84. authentication auth-default-vlan
    Specifies the authentication default VLAN at the interface level.
  85. authentication auth-order
    Specifies the sequence of authentication methods, 802.1X authentication and MAC authentication, on a specific interface.
  86. authentication auth-vlan-mode
    Enables multiple-untagged mode on a specific Flexible authentication-enabled port and allows it to be member of multiple untagged VLANs.
  87. authentication disable-aging
    Disables aging of MAC sessions at the interface level.
  88. authentication dos-protection
    Enables denial of service (DoS) authentication protection on the interface.
  89. authentication fail-action
    Specifies the authentication failure action to move the client port to the restricted VLAN after authentication failure for both MAC authentication and 802.1X authentication on an interface.
  90. authentication filter
    Applies an 802.1X authentication override filter to permit or deny traffic from a specified MAC address or set of MAC addresses.
  91. authentication filter-strict-security
    Enables or disables strict filter security for 802.1X and MAC-authentication enabled interfaces.
  92. authentication mac-authentication lldp-override
    Configures the switch to replace the authenticated MAC address on a FlexAuth-enabled port with the MAC address received in an LLDP frame.
  93. authentication max-sessions
    Specifies the maximum number of MAC sessions that can be authenticated per device or per port for MAC authentication and 802.1X authentication.
  94. authentication reauth-timeout
    Sets the time to wait before reauthenticating a client that has timed out and a timeout action has been applied. This command is applicable for MAC authentication and 802.1X authentication.
  95. authentication source-guard-protection enable
    Enables Source Guard Protection along with authentication on a specified interface.
  96. authentication timeout-action
    Configures the authentication timeout actions to specify the action for the RADIUS server if an authentication timeout occurs.
  97. authentication voice-vlan
    Creates a voice VLAN ID for a port or for a group of ports.
  98. authentication-algorithm
    Specifies the cryptographic algorithm to be used for the key in the keychain.
  99. authentication-algorithm (MKA)
    Specifies the cryptographic algorithm to be used for the specified key in the MKA (MACsec) keychain.
  100. authentication-key
    Defines an authentication key for Network Time Protocol (NTP).
  101. auto-cost reference-bandwidth (OSPFv2)
    Configures reference bandwidth.
  102. auto-cost reference-bandwidth (OSPFv3)
    Configures reference bandwidth.
  103. auto-enroll (PKI)
    Sends enrollment message to the CA and local auto-enroll certificates.
  104. auto-lacp
    Configures the auto-LACP (Link Aggregation Control Protocol) deployment for a specific port or a range of ports.
  105. autosave
    Automatically saves learned secure MAC addresses to the startup configuration at specified intervals.
  106. backup
    Designates a virtual router as a Virtual Router Redundancy Protocol (VRRP) or VRRP Extended (VRRP-E) backup device and configures priority and track values.
  107. backup (VSRP)
    Configures the device as a Virtual Switch Redundancy Protocol (VSRP) backup for the Virtual Routing ID (VRID) or changes the backup priority and the track priority.
  108. backup-hello-interval
    Configures the interval at which backup Virtual Router Redundancy Protocol (VRRP) routers advertise their existence to the master router.
  109. backup-hello-interval (VSRP)
    Configures the time interval during which Hello messages are sent by the backup.
  110. bandwidth (Interface)
    Sets and communicates bandwidth value for an interface to higher-level protocols such as OSPFv2 and OSPFv3, so this setting can be used to influence the routing cost for routes learned on these interfaces.
  111. banner
    Defines a login banner.
  112. batch buffer
    Creates a group of CLI commands per batch ID that is used in the automatic execution of commands in batches.
  113. bfd
    Enables Bidirectional Forwarding Detection (BFD).
  114. bfd holdover-interval
    Configures the time interval for which Border Gateway Protocol (BGP) or Open Shortest Path First (OSPF) routes are withdrawn after a Bidirectional Forwarding Detection (BFD) session is declared down.
  115. bfd min-tx
    Configures Bidirectional Forwarding Detection (BFD) session parameters for Border Gateway Protocol (BGP).
  116. bfd per-link
    Enables micro-Bidirectional Forwarding Detection (micro-BFD) on each member link of a Link Aggregation Group (LAG) interface.
  117. bgp-redistribute-internal
    Causes the device to allow the redistribution of IBGP routes from BGP into OSPF for non-default VRF instances.
  118. block
    Configures the time users must wait before the next cycle of Web Authentication begins after they have exceeded the limit for Web Authentication attempts.
  119. block unknown-unicast
    Blocks the unknown unicast traffic on ports, including Link Aggregation Group (LAG) ports.
  120. boot system flash
    Configures the device to boot from the image stored in the flash memory.
  121. bootfile
    Specifies the boot image to be used by the client.
  122. bootfile-url
    Specifies the URL of the bootfile that the DHCPv6 client downloads during the boot process.
  123. bootp-relay-max-hops
    Modifies the maximum number of BootP or DHCP hops.
  124. bpdu-flood-enable
    Configures the MCT cluster devices to flood the SSTP or MSTP BPDUs in the SSTP or MSTP domain.
  125. breakout ethernet
    Configures sub-ports from 40-Gbps or 100-Gbps ports.
  126. broadcast client
    Configures a device to receive Network Time Protocol (NTP) broadcast messages on a specified interface.
  127. broadcast destination
    Configures Network Time Protocol (NTP) broadcast destination options.
  128. broadcast limit
    Configures the maximum number of broadcast packets allowed per second and generates infralogs for pps packets.
  129. bsicloud enable
    Enables BSI cloud mode on the ICX device.
  130. bsr-candidate
    Configures a bootstrap router (BSR) as a candidate to distribute rendezvous point (RP) information to the other PIM Sparse devices within a PIM Sparse domain.
  131. bsr-msg-interval
    Sets the PIM BSR message interval timer.
  132. buffer-profile port-region
    Configures a buffer profile on a device.
  133. buffer-sharing-full
    Removes the buffer allocation limits on all ports and all traffic classes globally.