Commands I

In this section:

  1. icl-fwd-delay (MCT)
    Sets the delay time after an ICL link comes up before regular traffic is forwarded. During the delay, only BPDU forwarding is allowed.
  2. ignore-temp-shutdown
    Prevents shutdown of RUCKUS ICX devices at the threshold shutdown temperature.
  3. ike-profile
    Configures an IKEv2 profile for an IPsec profile.
  4. ikev2 auth-proposal
    Creates an Internet Key Exchange version 2 (IKEv2) authentication proposal and enters configuration mode for the proposal.
  5. ikev2 exchange-max-time
    Configures the maximum setup time for Internet Key Exchange version 2 (IKEv2) message exchange.
  6. ikev2 limit
    Configures limits for the number of Internet Key Exchange version 2 (IKEv2) security association (SA) sessions.
  7. ikev2 policy
    Creates an Internet Key Exchange version 2 (IKEv2) policy and enters IKEv2 policy configuration mode.
  8. ikev2 profile
    Creates an Internet Key Exchange version 2 (IKEv2) profile and enters IKEv2 profile configuration mode.
  9. ikev2 proposal
    Creates an Internet Key Exchange version 2 (IKEv2) proposal and enters IKEv2 proposal configuration mode.
  10. ikev2 retransmit-interval
    Configures the delay time for resending Internet Key Exchange version 2 (IKEv2) messages.
  11. ikev2 retry-count
    Configures the maximum number of attempts to retransmit an Internet Key Exchange version 2 (IKEv2) message.
  12. image-auto-copy disable
    Turns off the auto image copy function used in a stack configuration to restore all units to the same software image.
  13. import-users
    Imports a text file of user records from a TFTP server to the device.
  14. inactivity-timer
    Configures the time a forwarding entry can remain unused before the device deletes it.
  15. include-port
    Adds ports to the VSRP.
  16. initial-contact-payload
    Configures sending an initial contact message to a peer for an Internet Key Exchange version 2 (IKEv2) profile.
  17. initial-ttl
    Configures the Hello packet time to live (TTL) (the number of hops a Hello message can traverse after leaving the device and before the Hello message is dropped).
  18. inline power
    Configures inline power on Power over Ethernet (PoE) ports in interface configuration mode and link aggregation group (LAG) secondary ports in global configuration mode.
  19. inline power adjust class
    Use these commands when powered devices (PDs) are entering an overload state as a result of faulty PDs power requests.
  20. inline power allocation dynamic
    Enables the dynamic Power over Ethernet (PoE) power management (PM) method.
  21. inline power couple-datalink
    Links the behavior of PoE configuration with interface disable or interface enable configuration.
  22. inline power install-firmware
    Installs Power over Ethernet (PoE) firmware.
  23. inline power install-firmware scp
    Upgrades the PoE firmware of a FastIron stacking device by downloading a firmware file from an SCP server.
  24. inline power interface-mode-2pair-pse
    Corrects a condition where some non-standard powered devices (PD) are undetected on PoH ports due to difference in allowed capacitance between a 2-pair port and a 4-pair port.
  25. inline power non-pd-detection enable
    Enables detection for nonpowered endpoints or devices (non-PD).
  26. inline power overdrive
    Allows Ruckus PDs to negotiate for power greater than 30-watt allocation on PoE+ ports and greater than 60-watt on PoH ports.
  27. inline power poe-ha
    Enables perpetual PoE and fast boot PoE on a per-port basis.
  28. integrity
    Configures an integrity algorithm for an Internet Key Exchange version 2 (IKEv2) proposal.
  29. interface cpu active
    Enters configuration mode for the CPU of the active unit, either the active controller of a stack or a standalone unit.
  30. interface ethernet
    Enters interface configuration mode for the specified Ethernet interface.
  31. interface group-ve
    Associates the virtual interface routing group with a VLAN group.
  32. interface lag
    Configures LAG virtual interface that represents the entire LAG.
  33. interface loopback
    Configures a loopback interface and enters loopback interface configuration mode.
  34. interface management
    Specifies a management interface and enters management interface configuration mode.
  35. interface tunnel
    Configures a tunnel interface.
  36. interface ve
    Configures a virtual Ethernet (VE) interface.
  37. ip access-group
    Applies IPv4 access control lists (ACLs) to traffic entering or exiting an interface.
  38. ip access-group frag deny
    Allows strict filtering of fragmented packets.
  39. ip access-list
    Creates a named IPv4 standard or extended access control list (ACL) that permits or denies network traffic based on criteria that you specify.
  40. ip address
    Configures an IP address on an interface.
  41. ip-address
    Configures a virtual IP address for a Virtual Router Redundancy Protocol (VRRP) or VRRP Extended (VRRP-E) instance.
  42. ip-address (VSRP)
    Configures the IP address to back up.
  43. ip arp inspection syslog disable
    Disables the syslog messages for Dynamic ARP Inspection.
  44. ip arp inspection validate
    Enables validation of the ARP packet destination MAC, ARP Packet IP, and source MAC addresses.
  45. ip arp inspection vlan
    Enables dynamic ARP inspection (DAI) on a VLAN or a range of VLANs.
  46. ip arp learn-gratuitous-arp
    Enables learning gratuitous ARP.
  47. ip arp port-move-syslog
    Disables or re-enables Address Resolution Protocol (ARP) port movement syslog message generation.
  48. ip arp-age
    Configures ARP aging parameter.
  49. ip bootp-gateway
    Changes the IP address used for stamping BootP or DHCP requests received on the interface.
  50. ip bootp-use-intf-ip
    Configures a Dynamic Host Configuration Protocol (DHCP) relay agent to set the source IP address of a DHCP-client packet with the IP address of the interface in which the DHCP-client packet is received.
  51. ip broadcast-zero
    Enables the Layer 3 switch for zero-based IP subnet broadcasts in addition to ones-based IP subnet broadcasts.
  52. ip default-gateway
    Configures the default gateway for a Layer 2 switch.
  53. ip default-network
    Configures a default network route.
  54. ip dhcp-client auto-update enable
    Enables the DHCP auto-update functionality.
  55. ip dhcp-client enable
    Enables DHCP client.
  56. ip dhcp-client information enable
    Enables or disables Dynamic Host Configuration Protocol (DHCP) client visibility globally.
  57. ip dhcp-client ve
    Enables the DHCP client for a specific Virtual Ethernet (VE) port.
  58. ip dhcp relay information policy
    Configures the Dynamic Host Configuration Protocol (DHCP) relay information policy.
  59. ip dhcp-server arp-ping-timeout
    Sets the ARP-ping timeout value.
  60. ip dhcp-server bootp ignore
    Enables the Dynamic Host Configuration Protocol (DHCP) server to process the Bootstrap Protocol (BOOTP) request received from the BOOTP clients.
  61. ip dhcp-server enable
    Enables the DHCP server.
  62. ip dhcp-server mgmt
    Enables or disables the DHCP server on the management port.
  63. ip dhcp-server pool
    Creates a DHCP server address pool.
  64. ip dhcp-server relay-agent-echo enable
    Activates the DHCP option 82.
  65. ip dhcp-server server-identifier
    Specifies the IP address of the selected DHCP server.
  66. ip dhcp-server use-port-name
    Replaces the Dynamic Host Configuration Protocol (DHCP) client identifier with the port name for a DHCP server.
  67. ip dhcp snooping relay information disable
    Enables DHCP snooping relay information (DHCP option 82) on a specified VLAN, a range of VLANs, or for all VLANs.
  68. ip dhcp snooping verify mac-address
    Blocks the malformed DHCP packet by validating the Layer 2 source MAC of the DHCP packet against the client hardware address of the DHCP header.
  69. ip dhcp snooping vlan
    Enables DHCP snooping on a VLAN or a range of VLANs.
  70. ip directed-broadcast
    Enables directed broadcast forwarding.
  71. ip dns
    Configures the IPv4 Domain Name System (DNS).
  72. ip dns vrf
    Configures the IPv4 Domain Name System (DNS) server configuration through user-defined VRF and management VRF.
  73. ip dscp-remark
    Enables remarking of the differentiated services code point (DSCP) field for all IPv4 packets.
  74. ip encapsulation
    Changes the IP encapsulation type.
  75. ip follow ve
    Configures a virtual routing interface to share the IP address with other virtual routing interfaces.
  76. ip forward-protocol udp
    Configures the Layer 3 switch to forward client requests for UDP applications.
  77. ip helper-address
    Configures a helper address on the interface connected to the client to enable forwarding of client broadcast request for a UDP application when the client and server are on different networks.
  78. ip helper-use-responder-ip
    Configures the device so that a BOOTP or DHCP reply to a client contains the server IP address as the source address instead of the router IP address.
  79. ip hitless-route-purge-timer
    Configures the timer to set the duration for which the routes should be preserved after switchover.
  80. ip icmp attack-rate
    Configures the device to drop ICMP packets when an excessive packet rate is encountered.
  81. ip icmp burst-max
    Limits the rate of ICMP pings to the CPU
  82. ip icmp echo broadcast-request
    Enables an ICMP echo response caused by a broadcast echo request.
  83. ip icmp icmp-fragments
    Drops ICMP packet fragments.
  84. ip icmp redirects
    Enables IPv4 ICMP redirect messages.
  85. ip icmp unreachable
    Enables sending ICMP unreachable messages.
  86. ip igmp access-group
    Configures the Internet Group Management Protocol (IGMP) report filter policy globally, for a non-default virtual routing and forwarding (VRF) instance, or for an Interface.
  87. ip igmp group-membership-time
    Specifies how long an IGMP group remains active on an interface in the absence of a group report.
  88. ip igmp max-group-address
    Configures the maximum number of Internet Group Management Protocol (IGMP) group addresses.
  89. ip igmp max-response-time
    Defines how long a device waits for an Internet Group Management Protocol (IGMP) response from an interface before determining that the group member on that interface is down and removing the interface from the group.
  90. ip igmp port-version
    Configures an IGMP version recognized by a physical port that is a member of a virtual routing interface.
  91. ip igmp proxy
    Configures IGMP proxy on an interface
  92. ip igmp query-interval
    Defines how often a device queries an interface for IGMP group membership.
  93. ip igmp ssm-map
    Enables IGMPv2 SSM mapping and defines the SSM maps between IGMPv2 Group addresses and multicast source addresses.
  94. ip igmp static-group
    Configures one or more physical ports to be a permanent (static) member of an IGMP group based on the range or count. Manually adds a port to a multicast group.
  95. ip igmp tracking
    Enables tracking and fast leave on an interface.
  96. ip igmp version
    Specifies the IGMP version used by the device.
  97. ip interface loopback (VXLAN)
    Configures the loopback interface for a VXLAN overlay-gateway.
  98. ip irdp
    Enables ICMP Router Discovery Protocol (IRDP) globally.
  99. ip irdp (Interface)
    Enables ICMP Router Discovery Protocol (IRDP) on an interface and configures IRDP parameters.
  100. ip load-sharing
    Configures IPv4 load sharing.
  101. ip-mac
    Manually configures an IP MAC address on an IP interface.
  102. ip max-mroute
    Configures the maximum number of IPv4 multicast routes that are supported.
  103. ip mroute
    Configures a directly connected static IPv4 multicast route.
  104. ip mroute (Next Hop)
    Configures a static IPv4 multicast route (mroute) with a next hop..
  105. ip mroute next-hop-enable-default
    Enables the option to use the default multicast route (mroute) to resolve a static IPv4 mroute next hop.
  106. ip mroute next-hop-recursion
    Configures the recursion level when using static mroutes to resolve a static mroute next hop.
  107. ip mtu
    Changes the Maximum Transmission Unit (MTU) for a specific interface.
  108. ip multicast
    Sets IGMP globally on a device, and sets the IGMP mode as active or passive.
  109. ip multicast age-interval
    Configures the time that group entries can remain in an IGMP group table on a specific VLAN or on all VLANs.
  110. ip multicast disable-flooding
    Disables the flooding of unregistered IPv4 multicast frames in an IGMP-snooping-enabled VLAN.
  111. ip multicast edge-port
    Configures edge ports for IGMP-snooping-enabled interfaces.
  112. ip multicast flood-unregistered
    Enables the flooding of initial packets for unregistered IP multicast groups until hardware entries are programmed. Once the hardware entries are programmed, packets are dropped for unregistered multicast groups.
  113. ip multicast group upnp drop
    Blocks IP multicast traffic destined to specified Universal Plug and Play (UPnP) addresses.
  114. ip multicast leave-wait-time
    Configures the wait time before stopping traffic to a port when a leave message is received.
  115. ip multicast max-response-time
    Sets the maximum number of seconds a client (IPv4) can wait before responding to a query sent by the device.
  116. ip multicast mcache-age
    Configures the time for an mcache to age out when it does not receive traffic.
  117. ip multicast mvr
    Enables Multicast VLAN Registration (MVR) on the device.
  118. ip multicast optimization
    Enables or disables IP multicast (IPMC) entry optimization for Layer 2 IPv4 multicast flows.
  119. ip multicast query-interval
    Configures how often the device sends general queries when IP multicast traffic reduction is set to active mode.
  120. ip multicast report-control
    Limits report forwarding within the same multicast group to no more than once every 10 seconds.
  121. ip multicast static-mcache profile
    Adds multicast groups to a profile whose packets are always flooded or dropped in the hardware.
  122. ip multicast verbose-off
    Turns off the error or warning messages displayed by the device when it runs out of software resources or when it receives packets with the wrong checksum or groups.
  123. ip multicast version
    Configures the IGMP version for snooping globally.
  124. ip multicast-boundary
    Defines boundaries for PIM enabled interfaces.
  125. ip multicast-debug-mode
    Enables global multicast debug mode for all VRFs.
  126. ip multicast-nonstop-routing
    Globally enables multicast non-stop routing for all virtual routing and forwarding (VRF) instances.
  127. ip multicast-routing optimization
    Enables or disables IP multicast (IPMC) hardware entry optimization for Layer 3 IPv4 multicast flows.
  128. ip multicast-routing rpf-check mac-movement
    Triggers Reverse Path Forwarding (RPF) check on MAC movement for directly connected sources and sends a MAC address movement notification to the Protocol Independent Multicast (PIM) module which results in PIM convergence.
  129. ip options drop
    Configures the IPv4 drop packet rule so that IPv4 packets with an option, such as insert NOP, insert loose source route, and insert MTU probe, are dropped.
  130. ip ospf active
    Sets a specific OSPF interface to active.
  131. ip ospf area
    Enables OSPFv2 on an interface.
  132. ip ospf authentication
    Configures MD5, HMAC-SHA-1 or HMAC-SHA-256 authentication for Open Shortest Path First version 2 (OSPFv2).
  133. ip ospf authentication key-activation-wait-time
    Configures the time before an authentication key change is activated for an Open Shortest Path First version 2 (OSPFv2) interface.
  134. ip ospf authentication keychain
    Configures Open Shortest Path First version 2 (OSPFv2) authentication using the keychain authentication module.
  135. ip ospf authentication plain-text
    Configures simple password-based authentication for Open Shortest Path First version 2 (OSPFv2).
  136. ip ospf bfd
    Enables Bidirectional Forwarding Detection (BFD) sessions and configures BFD session parameters for an Open Shortest Path First Version 2 (OSPFv2) interface.
  137. ip ospf cost
    Configures cost for a specific interface.
  138. ip ospf database-filter
    Configures filters for different types of outgoing Link State Advertisements (LSAs).
  139. ip ospf dead-interval
    Configures the neighbor dead interval, which is the number of seconds that a neighbor router waits for a hello packet from the device before declaring the router down.
  140. ip ospf hello-interval
    Configures the hello interval, which is the length of time between the transmission of hello packets that this interface sends to neighbor routers.
  141. ip ospf mtu-ignore
    Enables or disables maximum transmission unit (MTU) match checking.
  142. ip ospf network
    Configures the network type for the interface. Point-to-point can support unnumbered links, which requires less processing by OSPF.
  143. ip ospf passive
    Sets a specific OSPFv2interface to passive.
  144. ip ospf priority
    Configures priority for designated router (DR) election.
  145. ip ospf retransmit-interval
    Configures the retransmit interval. The retransmit interval is the time between Link-State Advertisement (LSA) retransmissions to adjacent routers for a given interface.
  146. ip ospf transmit-delay
    Configures transmit delay for link-update packets. The transmit delay is the estimated time required for OSPFv2 to send link-state update packets on the interface to which you are connected.
  147. ip pcp-remark
    Enables remarking of the priority code point (PCP) field in the VLAN header for tagged packets received.
  148. ip pim
    Configures PIM in Dense mode on an interface.
  149. ip pim border
    Configures PIM parameters on an interface on a PIM Sparse border.
  150. ip pim dr-priority
    Configures the designated router (DR) priority on IPv4 interfaces.
  151. ip pim neighbor-filter
    Determines which devices can become PIM neighbors.
  152. ip pim-sparse
    Enables PIM Sparse on an interface that is connected to the PIM Sparse network.
  153. ip pimsm-snooping
    Enables PIM Sparse mode (SM) traffic snooping globally.
  154. ip policy route-map
    Enables policy-based routing (PBR).
  155. ip prefix-list
    Configures a RIP routing prefix list that can permit or deny specific routes. The prefix list can be applied globally or to individual interfaces, where they may apply to incoming (learned) our outgoing (advertised) routes.
  156. ip preserve-acl-user-input-format
    Preserves the user input format for ACL configuration.
  157. ip-proto
    Configures an IP protocol-based VLAN.
  158. ip proxy-arp
    Enables IP proxy ARP globally.
  159. ip proxy-arp (Interface)
    Enables IP proxy ARP on an interface.
  160. ip radius source-interface
    Configures an interface as the source IP address from which the RADIUS client sends RADIUS requests or receives responses.
  161. ip rarp
    Enables IP Reverse Address Resolution Protocol (RARP).
  162. ip redirect
    Enables IPv4 redirect messages on individual Virtual Ethernet (VE) interface.
  163. ip rip
    Configures Routing Information Protocol at the interface level. RIP must first be enabled globally on the device.
  164. ip rip metric-offset
    Increases the cost metric an interface applies to learned or advertised RIP routes.
  165. ip rip prefix-list
    Applies a pre-configured prefix-list to a RIP interface.
  166. ip rip route-map
    Applies a pre-configured route map to a RIP interface.
  167. ip route
    Adds a static route to the IP routing tables.
  168. ip route bfd
    Enables Bidirectional Forwarding Detection (BFD) and configures BFD session parameters for IP static routes.
  169. ip route bfd holdover-interval
    Configures the time interval for which the BFD session state is not conveyed to the static route application after the BFD session goes down. During this time period, the static route is not withdrawn from the route table manager (RTM).
  170. ip route next-hop
    Enables a device to use routes from a specified protocol to resolve a configured static route.
  171. ip route next-hop-enable-default
    Enables a device to use the default route (0.0.0.0/0) to resolve a static route.
  172. ip route next-hop-recursion
    Enables a device to use static routes to resolve another static route.
  173. ip router-id
    Configures an IPv4 router ID.
  174. ip sg-access-group
    Binds an ingress IPv4 access control list (ACL) meant for IP Source Guard (IPSG) ports (SG ACL) to a port or VLAN.
  175. ip sg-access-list
    Creates an IP Source Guard (IPSG) ACL.
  176. ip show-portname
    Displays interface names in syslog messages.
  177. ip show-service-number-in-log
    Displays TCP or UDP port numbers instead of the port names.
  178. ip show-subnet-length
    Enables CIDR format for displaying network masks.
  179. ip source-route
    Enables forwarding of IP source-routed packets.
  180. ip ssh authentication-retries
    Configures the number of SSH authentication retries.
  181. ip ssh client
    Restricts Secure Shell (SSH) access to a device based on the client IP address and MAC address.
  182. ip ssh delete-known-host-key
    When configured, the known host key for a server is deleted and if a user attempts to connect to the server again, they will be prompted to accept or reject the new key.
  183. ip ssh enable
    Enables inbound and outbound SSH access to the ICX devices.
  184. ip ssh encryption
    Enables the SSH encryption algorithms specified.
  185. ip ssh encryption aes-only
    Enables SSH AES encryption and disables support for 3des-cbc.
  186. ip ssh encryption disable-aes-cbc
    Disables the Advanced Encryption Standard - Cipher-Block Chaining (AES-CBC) encryption mode for the Secure Shell (SSH) protocol.
  187. ip ssh host-key-method
    Enables or disables one or more secure host key algorithms.
  188. ip ssh idle-time
    Configures the amount of time an SSH session can be inactive before the device closes it.
  189. ip ssh interactive-authentication
    Configures the keyboard-interactive authentication.
  190. ip ssh key-authentication
    Configures DSA or RSA challenge-response authentication.
  191. ip ssh key-exchange-method
    Configures the key-exchange methods that can be used to establish an SSH connection.
  192. ip ssh key-exchange-method dh-group1-sha1
    Disables or re-enables diffie-hellman-group1-sha1 as the key-exchange method to establish an SSH connection.
  193. ip ssh message-authentication-code
    Configures one or more message authentication code used for data integrity over the SSH connection.
  194. ip ssh message-authentication-code disable-hmac-sha1
    Removes system support for HMAC SHA1 message-authentication code.
  195. ip ssh password-authentication
    Configures password authentication.
  196. ip ssh permit-empty-password
    Allows a user with an SSH client to log in without being prompted for a password.
  197. ip ssh port
    Configures the port for SSH traffic.
  198. ip ssh pub-key-file
    Imports the authorized public keys into the active configuration of the device by loading the public key file from a TFTP server.
  199. ip ssh rekey
    Configures the Secure Shell (SSH) rekey interval, either in terms of the maximum number of minutes or the maximum amount of data.
  200. ip ssh scp
    Enables Secure Copy (SCP).
  201. ip ssh strict-management-vrf
    Allows incoming SSH connection requests only from the management VRF and not from the out-of-band (OOB) management port.
  202. ip ssh stricthostkeycheck ask
    When the command is configured, the switch prompts the user to confirm the authenticity of the remote host if the host key is not recognized.
  203. ip ssh timeout
    Configures the wait time for a response from the client when the SSH server attempts to negotiate a session key and encryption method with a connecting client.
  204. ip ssl
    Configures Secure Socket Layer (SSL) settings.
  205. ip ssl disable-weak-ciphers
    Disables weak SSL or TLS cipher.
  206. ip ssl min-version
    Configures the minimum TLS version to be used to establish the TLS connection.
  207. ip-subnet
    Configures an IP subnet VLAN within a VLAN.
  208. ip syslog source-interface
    Configures an interface as the source IP address from which the syslog module sends log messages.
  209. ip tacacs source-interface
    Configures an interface as the source IP address from which the TACACS+ client establishes connections with TACACS+ servers.
  210. ip tcp adjust-mss
    Configures the TCP MSS adjustment value on the IPv4 interface.
  211. ip tcp analytics rate
    Changes the TCP Syn DDoS analytics threshold rate to a value other than the default. TCP Syn DDoS refers to a type of distributed denial-of-service attack in which an abnormal influx of Synchronize packets at the TCP layer disrupts normal traffic to the switch.
  212. ip tcp burst-max
    Rate limits TCP SYN packets.
  213. ip tcp burst-normal
    Configures the threshold values for TCP SYN packets that are targeted at the router itself or that pass through an interface.
  214. ip tcp fin-urg-psh
    Drops TCP control packets with FIN URG and PSH flags set.
  215. ip tcp keepalive
    Configures the time interval between TCP keepalive messages.
  216. ip tcp-mtu-probing
    Enables Transmission Control Protocol (TCP) maximum transmission unit (MTU) probing so that a working path MTU can be discovered without relying on Internet Control Message Protocol (ICMP) messages.
  217. ip tcp over-mac-multicast
    Configures the ICX device to drop any control IPv4 of IPv6 TCP packets that have been sent using the MAC Multicast mechanism.
  218. ip tcp port-zero
    Drops TCP control packets that have either the source or destination port set to zero.
  219. ip tcp syn-fin
    Drops TCP control packets received with both SYN and FIN flags set.
  220. ip tcp syn-rst
    Drops TCP control packets with both SYN and RST flags set.
  221. ip tcp tcp-all
    Drops TCP control packets with irregularities that typically signal DDOS attacks.
  222. ip tcp zero-flags
    Drops TCP control packets received with all flags set to zero.
  223. ip-telephony data
    Specifies the Avaya IP telephony data options in the DHCP server pool.
  224. ip-telephony voice
    Specifies the Avaya IP telephony voice options in the DHCP server pool.
  225. ip telnet source-interface
    Sets the lowest-numbered IP address configured on an interface as the device source for all Telnet packets.
  226. ip tftp blocksize
    Specifies the size of Trivial File Transfer Protocol (TFTP) blocks.
  227. ip tftp source-interface
    Configures an interface as the source IP address from which TFTP sends and receives data and acknowledgments.
  228. ip ttl
    Modifies the time-to-live (TTL) threshold value.
  229. ip use-acl-on-arp
    Configures the ARP module to check the source IP address of the ARP request packets received on the interface before applying the specified ACL policies to the packet (ACL ARP filtering).
  230. ip vrrp auth-type
    Configures the type of authentication used on a Virtual Router Redundancy Protocol (VRRP) interface.
  231. ip vrrp vrid
    Configures an IPv4 Virtual Router Redundancy Protocol (VRRP) virtual router identifier (VRID).
  232. ip vrrp-extended auth-type
    Configures the type of authentication used on a Virtual Router Redundancy Protocol Extended (VRRP-E) interface.
  233. ip vrrp-extended vrid
    Configures an IPv4 Virtual Router Redundancy Protocol Extended (VRRP-E) virtual router identifier (VRID).
  234. ipsec profile
    Creates an IP security (IPsec) profile and enters IPsec profile configuration mode.
  235. ipsec proposal
    Creates an IP security (IPsec) proposal and enters IPsec proposal configuration mode.
  236. ipv6 access-group
    Applies an IPv6 ACL to an interface.
  237. ipv6 access-list
    Creates an IPv6 access control list (ACL) and enters IPv6 access-list configuration sub-mode.
  238. ipv6 address
    Configures an IPv6 address for an interface.
  239. ipv6 address autoconfig
    Enables automatic IPv6 address assignment and option retrieval using stateless or stateful autoconfiguration.
  240. ipv6 cache-lifetime
    Configures the IPv6 cache-aging lifetime.
  241. ipv6 default-gateway
    Configures the IPv6 address of the default gateway.
  242. ipv6 deny-undetermined-transport
    Configures the IPv6 drop rule where IPv6 fragment traffic is dropped if received with an incomplete header in the first fragment.
  243. ipv6 dhcp6-client auto-update enable
    Enables DHCPv6 auto-provisioning.
  244. ipv6 dhcp-relay accept-broadcast
    Enables the DHCPv6 relay agent to accept DHCPv6 client packets with a broadcast MAC address.
  245. ipv6 dhcp-relay destination
    Enables the IPv6 DHCP relay agent function and specifies the IPv6 address as a destination address to which the client messages are forwarded.
  246. ipv6 dhcp-relay distance
    Assigns the administrative distance to IPv6 DHCP static routes installed in the IPv6 route table for the delegated prefixes on the interface.
  247. ipv6 dhcp-relay include-options
    Includes the parameters on the IPv6 DHCP relay agent messages.
  248. ipv6 dhcp-relay maximum-delegated-prefixes
    Sets the number of delegated prefixes that can be learned at the global and interface levels.
  249. ipv6 dhcp6-server enable
    Enables the DHCPv6 server globally.
  250. ipv6 dhcp6 snooping vlan
    Enables DHCPv6 snooping on a VLAN or a range of VLANs
  251. ipv6 dns server-address
    Configures IPv6 DNS server address.
  252. ipv6 drop routing-type
    Enables the dropping of routing header options so that only IPv6 routing type value 2 is allowed.. All other routing types, from 0 through 255, are dropped.
  253. ipv6 enable
    Enables IPv6.
  254. ipv6 hitless-route-purge-timer
    Configures the timer to set the duration for which the routes should be preserved after switchover.
  255. ipv6 hop-limit
    Configures the maximum number of hops an IPv6 packet can traverse.
  256. ipv6 icmp error-interval
    Configures ICMP rate limiting, that is, the rate at which IPv6 ICMP error messages are sent out on a network.
  257. ipv6 icmp fragment_header_bit
    Sets the atomic fragment header bit when the maximum transmission unit (MTU) is less than or equal to 1280.
  258. ipv6 icmp source-route
    Generates ICMP parameter problem message for source routed IPv6 packet.
  259. ipv6 load-sharing
    Enables Equal-cost multi-path routing (ECMP) load sharing for IPv6.
  260. ipv6 max-mroute
    Configures the maximum number of IPv6 multicast routes that are supported.
  261. ipv6 mld access-group
    Configures the Multicast Listener Discovery (MLD) report filter policy globally, for a non-defaultvirtual routing and forwarding (VRF) instance, or for an Interface.
  262. ipv6 mld group-membership-time
    Specifies the multicast listener discovery (MLD) group membership time for the default VRF or for a specified VRF.
  263. ipv6 mld llqi
    Configures the multicast listener discovery (MLD) last listener query interval.
  264. ipv6 mld max-group-address
    Configures the maximum number of Multicast Listener Discovery (MLD) group addresses.
  265. ipv6 mld max-response-time
    Configures the maximum time a Multicast Listener Discovery (MLD) listener has to respond to queries for the default virtual routing and forwarding (VRF) instance or for a specified VRF.
  266. ipv6 mld port-version
    Configures the multicast listening discovery (MLD) version on a virtual Ethernet interface.
  267. ipv6 mld query-interval
    Configures the frequency at which multicast listening discovery (MLD) query messages are sent.
  268. ipv6 mld robustness
    Configures the number of times that the device sends each multicast listening discovery (MLD) message from an interface.
  269. ipv6 mld static-group
    Configures one or more physical ports to be a permanent (static) member of a multicast listening discovery (MLD) group based on the range or count.
  270. ipv6 mld tracking
    Enables multicast listening discovery (MLD) tracking on a virtual interface.
  271. ipv6 mld version
    Configures the multicast listening discovery (MLD) version for snooping on an interface.
  272. ipv6 mroute
    Configures a static IPv6 route to direct multicast traffic along a specific path.
  273. ipv6 mroute (Next Hop)
    Configures a static IPv6 multicast route (mroute) with a next hop.
  274. ipv6 mroute next-hop-enable-default
    Enables the option to use the default multicast route (mroute) to resolve a static IPv6 mroute next hop.
  275. ipv6 mroute next-hop-recursion
    Configures the recursion level for resolving an IPv6 multicast static route static.
  276. ipv6 mtu
    Configures the IPv6 MTU on individual interfaces.
  277. ipv6 multicast
    Globally sets the multicast listening discovery (MLD) snooping mode to active.
  278. ipv6 multicast age-interval
    Configures the time that group entries can remain in a multicast listening discovery (MLD) group table.
  279. ipv6 multicast disable-flooding
    Disables the flooding of unregistered IPv6 multicast frames in an MLD-snooping-enabled VLAN.
  280. ipv6 multicast flood-unregistered
    Enables the flooding of initial packets for unregistered IPv6 multicast groups until hardware entries are programmed. Once the hardware entries are programmed, packets are dropped for unregistered multicast groups.
  281. ipv6 multicast leave-wait-time
    Configures the wait time before stopping traffic to a port when a leave message is received.
  282. ipv6 multicast max-response-time
    Sets the maximum number of seconds a client (IPv6) can wait before responding to a query sent by the device.
  283. ipv6 multicast mcache-age
    Configures the time for an mcache to age out when it does not receive traffic.
  284. ipv6 multicast optimization
    Enables or disables IP multicast (IPMC) hardware entry optimization for Layer 2 IPv6 multicast flows.
  285. ipv6 multicast per-vlan filter-to-cpu
    Enables per VLAN to CPU filtering of MLD and PIMv6 packets for MLD Snooping (PIMv6-SM Snooping).
  286. ipv6 multicast query-interval
    Configures how often the device sends group membership queries when the multicast listening discovery (MLD) mode is set to active.
  287. ipv6 multicast report-control
    Limits report forwarding within the same group to no more than once every 10 seconds.
  288. ipv6 multicast verbose-off
    Turns off error or warning messages that are displayed when the device runs out of software resources or when it receives packets with the wrong checksum or groups.
  289. ipv6 multicast version
    Configures the multicast listening discovery (MLD) version for snooping globally.
  290. ipv6 multicast-boundary
    Defines multicast boundaries for PIM-enabled interfaces.
  291. ipv6 multicast-routing optimization
    Enables or disables IP multicast (IPMC) entry optimization for Layer 3 IPv6 multicast flows.
  292. ipv6 multicast-routing rpf-check mac-movement
    Triggers Reverse Path Forwarding (RPF) check on MAC movement for directly connected sources and sends a MAC address movement notification to the Protocol Independent Multicast (PIM) module which results in PIM convergence.
  293. ipv6 nd dad attempts
    Configures the number of consecutive neighbor solicitation messages that duplicate address detection (DAD) sends on an interface.
  294. ipv6 nd local-proxy
    Configures IPv6 neighbor discovery proxy on a router interface.
  295. ipv6 nd managed-config-flag
    Sets the managed address configuration flag.
  296. ipv6 nd ns-interval
    Configures the interval in milliseconds at which duplicate address detection sends a neighbor solicitation message on an interface.
  297. ipv6 nd other-config-flag
    Configures the hosts can use stateful autoconfiguration to get non-IPv6-address information.
  298. ipv6 nd prefix-advertisement
    Configures the prefixes to be included in router advertisement messages.
  299. ipv6 nd proxy
    Enables IPv6 Neighbor Discovery(ND) proxy on a router.
  300. ipv6 nd proxy-disable
    Disables the Neighbor Discovery proxy on an individual port or range of ports.
  301. ipv6 nd ra-dns-server
    Configures the IPv6 router advertisement (RA) of Domain Name System (DNS) server addresses and the lifetime multiplier on an interface.
  302. ipv6 nd ra-domain-name
    Configures the IPv6 router advertisement (RA) of Domain Name System (DNS) suffixes and the lifetime multiplier on an interface.
  303. ipv6 nd ra-hop-limit
    Sets the hop limit for router advertisement messages.
  304. ipv6 nd ra-interval
    Configures the interval at which an interface sends router advertisement messages.
  305. ipv6 nd ra-lifetime
    Configures the value (in seconds) indicates if the router is advertised as a default router on an interface.
  306. ipv6 nd reachable-time
    Configures the duration that a router considers a remote IPv6 node reachable.
  307. ipv6 nd router-preference
    Configures the IPv6 router advertisement preference value to low or high (medium is the default). IPv6 router advertisement preference enables IPv6 router advertisement (RA) messages to communicate default router preferences from IPv6 routers to IPv6 hosts in network topologies where the host has multiple routers on its Default Router List.
  308. ipv6 nd stale-time
    Configures the stale state timeout for IPv6 neighbors on an interface.
  309. ipv6 nd suppress-ra
    Disables the sending of router advertisement messages on an interface.
  310. ipv6 nd suppress-ra address
    Suppresses the advertisement of specified IPv6 addresses for router advertisement (RA) messages on an interface.
  311. ipv6 neighbor
    Adds a static entry to the IPv6 neighbor discovery cache.
  312. ipv6 neighbor inspection
    Configures the static neighbor discovery (ND) inspection entries.
  313. ipv6 neighbor inspection vlan
    Configures and enables Neighbor Discovery (ND) inspection on a VLAN, or a range of VLANs, to inspect the IPv6 packets from untrusted ports.
  314. ipv6 options drop
    Configures the IPv6 options drop packet rule so that IPv6 packets that have extension headers, such as hop-by-hop and destination, are dropped.
  315. ipv6 ospf active
    Sets a specific OSPFv3 interface to active.
  316. ipv6 ospf area
    Enables OSPFv3 on an interface.
  317. ipv6 ospf authentication
    Configures HMAC-SHA-1 or HMAC-SHA-256 authentication for Open Shortest Path First version 3 (OSPFv3).
  318. ipv6 ospf authentication disable
    Removes the authentication configuration settings on a specific interface in an Open Shortest Path First version 3 (OSPFv3) area.
  319. ipv6 ospf authentication ipsec
    Specifies IP security (IPsec) as the authentication type for an OSPFv3 interface.
  320. ipv6 ospf authentication ipsec disable
    Disables IP security (IPsec) services on an OSPFv3 interface.
  321. ipv6 ospf authentication ipsec spi
    Specifies the IP security (IPsec) security policy index (SPI) value for an OSPFv3 interface.
  322. ipv6 ospf authentication key-activation-wait-time
    Configures the time before an authentication key change is activated for an Open Shortest Path First version 3 (OSPFv3) interface.
  323. ipv6 ospf authentication keychain
    Configures Open Shortest Path First version 3 (OSPFv3) authentication using the keychain authentication module.
  324. ipv6 ospf authentication rfc6506
    Configures authentication in accordance with RFC 6506 for Open Shortest Path First version 3 (OSPFv3).
  325. ipv6 ospf bfd
    Enables Bidirectional Forwarding Detection (BFD) sessions and configures BFD session parameters for an Open Shortest Path First Version 3 (OSPFv3) interface.
  326. ipv6 ospf cost
    Configures cost for a specific OSPFv3 interface.
  327. ipv6 ospf dead-interval
    Specifies the time period for which a neighbor router waits for a hello packet from the device before declaring the router down.
  328. ipv6 ospf hello-interval
    Sets the length of time between the transmission of hello packets that an interface sends to neighbor routers.
  329. ipv6 ospf hello-jitter
    Sets the allowed jitter between HELLO packets.
  330. ipv6 ospf instance
    Specifies the number of OSPFv3 instances running on an interface.
  331. ipv6 ospf mtu-ignore
    Enables or disables maximum transmission unit (MTU) match checking.
  332. ipv6 ospf network
    Configures network type.
  333. ipv6 ospf passive
    Sets a specific OSPFv3 interface to passive.
  334. ipv6 ospf priority
    Configures priority for designated router (DR) election and backup designated routers (BDRs) on the interface you are connected to.
  335. ipv6 ospf retransmit-interval
    Configures the retransmit interval. The retransmit interval is the time between Link-State Advertisement (LSA) retransmissions to adjacent routers for a given interface.
  336. ipv6 ospf suppress-linklsa
    Suppresses link LSA advertisements.
  337. ipv6 ospf transmit-delay
    Configures transmit delay for link-update packets. The transmit delay is the estimated time required for OSPFv3 to send link-state update packets on the interface to which you are connected.
  338. ipv6 pim border
    Configures an interface to be on a PIM Sparse domain border.
  339. ipv6 pim dr-priority
    Configures the designated router (DR) priority on IPv6 interfaces.
  340. ipv6 pim neighbor-filter
    Determines which devices can become PIM neighbors.
  341. ipv6 pim-sparse
    Enables PIM Sparse on an IPv6 interface.
  342. ipv6 pimsm-snooping
    Enables PIM6 SM traffic snooping.
  343. ipv6 policy route-map
    Enables IPv6 policy-based routing (PBR).
  344. ipv6 prefix-list
    Configures IPv6 prefix lists for use in basic traffic filtering.
  345. ipv6 raguard policy
    Configures the specified Router Advertisement (RA) guard policy and enters RA guard policy configuration mode.
  346. ipv6 raguard vlan
    Associates a Router Advertisement (RA) guard policy with a VLAN.
  347. ipv6 raguard whitelist
    Configures the Router Advertisement (RA) guard whitelist and adds the IPv6 address as the allowed source IP address.
  348. ipv6 redirects
    Enables a Layer 3 switch to send an IPv6 ICMP redirect message to a neighboring host to inform it of a better first-hop router on a path to a destination.
  349. ipv6 rip default-information
    Configures learning and advertising of default routes for RIPng.
  350. ipv6 rip enable
    Enables RIPng on an interface.
  351. ipv6 rip metric-offset
    Changes the metric for RIPng routes learned and advertised on an interface.
  352. ipv6 rip summary-address
    Advertises a summary of IPv6 addresses from an interface and specifies an IPv6 prefix that summarizes the routes.
  353. ipv6 route
    Adds a static route to the IPv6 routing tables.
  354. ipv6 route next-hop
    Enables a device to use routes from a specified protocol to resolve a configured static route.
  355. ipv6 route next-hop-enable-default
    You can enable the IPv6 default static route to resolve other static routes.
  356. ipv6 route next-hop-recursion
    You can resolve static route destination using recursive lookup in local address tables up to 10 hops away.
  357. ipv6 router ospf
    Enables and configures the Open Shortest Path First version 3 (OSPFv3) routing protocol.
  358. ipv6 router pim
    Enables IPv6 PIM Sparse mode for IPv6 Protocol Independent Multicast (PIMv6) routing globally or on a specified VRF.
  359. ipv6 router rip
    Enables RIPng globally (on the device).
  360. ipv6 router vrrp
    Globally enables IPv6 Virtual Router Redundancy Protocol (VRRP).
  361. ipv6 router vrrp-extended
    Globally enables IPv6 Virtual Router Redundancy Protocol Extended (VRRP-E).
  362. ipv6 tcp adjust-mss
    Configures the TCP maximum segment size (MSS) adjustment value on the IPv6 interface.
  363. ipv6 unicast-routing
    Enables the forwarding of IPv6 traffic on a Layer 3 swtich.
  364. ipv6 vrrp vrid
    Configures an IPv6 Virtual Router Redundancy Protocol (VRRP) virtual router identifier (VRID).
  365. ipv6 vrrp-extended vrid
    Configures an IPv6 Virtual Router Redundancy Protocol Extended (VRRP-E) virtual router identifier (VRID).
  366. ipv6-address
    Configures a virtual IPv6 address for a Virtual Router Redundancy Protocol version 3 (VRRPv3) or VRRP Extended version 3 (VRRP-Ev3) instance.
  367. ipv6-address auto-gen-link-local
    Generates a virtual link-local IPv6 address and assigns it as the virtual IPv6 address for a VRRPv3 instance.
  368. ipv6-neighbor inspection trust
    Enables trust mode for specific ports.
  369. ipv6-proto
    Configures an IPv6 protocol-based VLAN.
  370. ipx-network
    Configures the IPX network protocol-based VLANs.
  371. ipx-proto
    Configures the IPX protocol-based VLANs.
  372. issu abort
    Initiates an in service software upgrade (ISSU) termination.
  373. issu primary
    Initiates an in-service software upgrade (ISSU) using the image on the primary partition and configures the system to reload from either the primary image or the secondary image if the upgrade fails.
  374. issu secondary
    Initiates an in-service software upgrade (ISSU) using the image on the secondary partition and configures the system to reload from the image in either the primary partition or the secondary partition should the upgrade fail.