no spanning-tree mst instance...8-124 spanning-tree mst priority...8-124 no spanning-tree mst priority...8-124 spanning-tree mst vlan....8-125 no spanning-tree mst vlan....8-125 spanning-tree port mode...8-125 no spanning-tree port mode...8-125 spanning-tree port mode all...8-126 no spanning-tree port mode all...8-126 spanning-tree...8-126 spanning-tree bpdumigrationcheck...8-126 no spanning-tree bpdumigrationcheck...8-127 show spanning-tree....8-127 show spanning-tree interface...8-128 show spanning-tree mst detailed...8-129 show spanning-tree mst port detailed...8-129 show spanning-tree mst port summary...8-131 show spanning-tree mst summary...8-131 show spanning-tree summary...8-132 show spanning-tree vlan...8-132 spanning-tree max-hops...8-133 no spanning-tree max-hops...8-133 spanning-tree mst...8-133 no spanning-tree mst...8-134 spanning-tree hello-time....8-134 no spanning-tree hello-time...8-135 show spanning-tree....8-135 show spanning-tree interface...8-136 show spanning-tree mst port detailed...8-137 Chapter 9 Security Commands Port Security....9-1 port-security....9-1 no port-security...9-1 port-security max-dynamic....9-2
xviii 202-10088-01, March 2005
no port-security max-dynamic...9-2 port-security max-static....9-2 no port-security max-static...9-2 port-security mac-address...9-3 no port-security mac-address...9-3 port-security mac-address move...9-3 snmp-server enable traps violation...9-3 no snmp-server enable traps violation...9-3 show port-security....9-4 show port-security....9-4 show port-security dynamic...9-4 show port-security static...9-4 show port-security violation...9-5 Port Based Network Access Control (IEEE 802.1X) Commands..9-5 authentication login...9-5 no authentication login....9-6 clear dot1x statistics....9-6 clear radius statistics...9-6 dot1x defaultlogin....9-6 dot1x initialize....9-7 dot1x login....9-7 dot1x max-req....9-7 no dot1x max-req....9-7 dot1x port-control....9-8 no dot1x port-control...9-8 dot1x port-control All...9-8 no dot1x port-control All...9-9 dot1x re-authenticate....9-9 dot1x re-authentication...9-9 no dot1x re-authentication...9-9 dot1x system-auth-control...9-9 no dot1x system-auth-control...9-10 dot1x timeout....9-10 no dot1x timeout.... 9-11 dot1x user.... 9-11
no dot1x user.... 9-11 show radius accounting... 9-11 show authentication....9-12 show authentication users...9-13 show dot1x....9-13 show dot1x users....9-16 show users authentication...9-16 users defaultlogin....9-16 users login....9-16 Remote Authentication Dial In User Service (RADIUS) Commands..9-17 radius accounting mode....9-17 no radius accounting mode....9-17 radius server host....9-17 no radius server host....9-18 radius server key....9-19 radius server msgauth....9-19 radius server primary...9-19 radius server retransmit....9-19 no radius server retransmit...9-20 radius server timeout....9-20 no radius server timeout....9-20 show radius...9-20 show radius statistics...9-21 Secure Shell (SSH) Commands...9-22 ip ssh.....9-22 no ip ssh....9-23 ip ssh protocol....9-23 show ip ssh...9-23 Hypertext Transfer Protocol (HTTP) Commands...9-23 ip http secure-port...9-24 no ip http secure-port....9-24 ip http secure-protocol....9-24 ip http secure-server....9-24 no ip http secure-server...9-24 ip http server....9-25 xx 202-10088-01, March 2005 Contents

2. 3. 4.

Quick Start up 202-10088-01, March 2005
System Info and System Setup
Quick Start up Software Version Information

Table 6-1.

Command show hardware (in Privileged EXEC)
Details Allows the user to see the software version the device contains Machine Model (The type and number of ports the device provides.) For example: Machine Model FSM7328S 24 = 24 10/100 ports 04 = 4 Uplink ports on front of switch
Quick Start up Physical Port Data

Table 6-2.

Command show port all (in Privileged EXEC)
Details Displays the Ports slot/port Type - Indicates if the port is a special type of port Admin Mode - Selects the Port Control Administration State Physical Mode - Selects the desired port speed and duplex mode Physical Status - Indicates the port speed and duplex mode Link Status - Indicates whether the link is up or down Link Trap - Determines whether or not to send a trap when link status changes LACP Mode - Displays whether LACP is enabled or disabled on this port.
6-2 202-10088-01, March 2005

Quick Start up

Quick Start up User Account Management

Table 6-3.

Command show users (in Privileged EXEC) Access Mode - Shows whether the user is able to change parameters on the switch(Read/Write) or is only able to view then (Read Only). As a factory default, admin has Read/Write access and guest has Read Only access. There can only be one Read/Write user and up to 5 Read Only users. show loginsession (in User EXEC) users passwd <username> (in Global Config) Allows the user to set passwords or change passwords needed to login A prompt will appear after the command is entered requesting the users old password. In the absence of an old password leave the area blank. The operator must press enter to execute the command. The system then prompts the user for a new password then a prompt to confirm the new password. If the new password and the confirmed password match a message will be displayed. User password should not be more than eight characters in length. This will save passwords and all other changes to the device. If you do not save config, all configurations will be lost when a power cycle is performed on the switch or when the switch is reset Logs the user out of the switch Displays all of the login session information

This chapter includes the following configuration types: System information and statistics commands System Management commands Device configuration commands User account management commands Security commands System utilities
System Information and Statistics Commands
This chapter provides a detailed explanation of the software platform commands. The commands are divided into five functional groups: Show commands display switch settings, statistics, and other information. Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting. Copy commands transfer or save configuration and informational files to and from the switch. Clear commands clear some or all of the settings to factory defaults.
Switching Commands 202-10088-01, March 2005

show arp switch

This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch. Format Mode MAC Address
show arp switch Privileged EXEC
A unicast MAC address for which the switch has forwarding and/ or filtering information. The format is 6 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB

slot/port

IP Address The IP address assigned to each interface. Valid slot and port number separated by forward slashes.

show eventlog

This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format Mode File Line Task Id Code Time
show eventlog Privileged EXEC
The file in which the event originated. The line number of the event The task ID of the event. The event code. The time this event occurred.
Note: Event log information is retained across a switch reset.

show hardware

This command displays inventory information for the switch. Format Mode Switch Description

vlan port acceptframe all <vlanonly | all> Global Config
no vlan port acceptframe all This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. Format Mode
no vlan port acceptframe all Global Config
vlan port ingressfilter all
This command enables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. Default Format Mode disabled
vlan port ingressfilter all Global Config
no vlan port ingressfilter all This command disables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. Format Mode
no vlan port ingressfilter all Global Config

vlan port pvid all

This command changes the VLAN ID for all interface. Default Format Mode no vlan port pvid all This command sets the VLAN ID for all interfaces to 1.
8-52 202-10088-01, March 2005 Switching Commands
vlan port pvid all <1-4094> Global Config
no vlan port pvid all Global Config

vlan port tagging all

This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. Format Mode no vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. Format Mode
no vlan port tagging all Global Config vlan port tagging all <1-4094> Global Config

vlan protocol group

This command adds protocol-based VLAN group to the system. The <groupName> is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands.
vlan protocol group <groupname> Global Config
vlan protocol group add protocol
This command adds the <protocol> to the protocol-based VLAN identified by <groupid>. A group may have more than one protocol associated with it. Each interface and protocol combination can only be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command will fail and the protocol will not be added to the group. The possible values for protocol are ip, arp, and ipx.

configscript delete

This command deletes a specified script where the <scriptname> parameter is the name of the script to be deleted. The all option deletes all the scripts present on the switch. Format Mode configscript delete {<scriptname> | all} Privileged EXEC

configscript list

This command lists all scripts present on the switch as well as the total number of files present. Format Mode Configuration Script Size configscript list Privileged EXEC Name of the configuration script. Size of the configuration script.

configscript show

This command displays the contents of a script file. The parameter <scriptname> is the name of the script file. Format Mode The format of display is
Line <no>: <Line contents>
configscript show <scriptname> Privileged EXEC

configscript validate

This command validates a configuration script file by parsing each line in the script file where <scriptname> is the name of the script to be validated. The validation will stop at the first failure of a command. Format Mode configscript validate <scriptname> Privileged EXEC
This command is used to display/capture the current setting of different protocol packages supported on switch. This command displays/captures only commands with settings/ configurations with values that differ from the default value. The output is displayed in script format, which can be used to configure another switch with the same configuration. When a script name is provided, the output is redirected to a configuration script. The option [all] will also enable the display/capture of all commands with settings/configurations that include values that are same as the default values. If the optional <scriptname> is provided with a file name extension of.scr, the output will be redirected to a script file. Format Mode
show running-config [all] [<scriptname>] Privileged EXEC

System Log (Syslog)

This section provides a detailed explanation of the Syslog commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other information. Configuration Commands configure features and options of the device. For every configuration command there is a show command that displays the configuration setting.

logging port

This command sets the local port number of the LOG client for logging messages. The <portid> can be in the range from 1 to 65535. Default Format Mode no logging port This command resets the local logging port to the defalt. Format Mode Global Config
no logging port 514 logging port <portid> Global Config

logging syslog

This command enables syslog logging. Default Format Mode no logging syslog This command disables syslog logging. Format Mode
no logging syslog Global Config disabled; local0 logging syslog Global Config
This command displays logging. Format Mode Client Local Port
The port on the collector/relay to which syslog messages are sent
Console Logging Administrative Mode The mode for console logging. Console Logging Severity Filter The minimum severity to log to the console log. Messages with an equal or lower numerical severity are logged. Buffered Logging Administrative Mode The mode for buffered logging. Buffered Logging Severity Filter The minimum severity to log to the buffered log. Messages with an equal or lower numerical severity are logged. Historical Logging Administrative Mode The mode for historical logging. Historical Logging Severity Filter The minimum severity to log to the historical log. Messages with an equal or lower numerical severity are logged. Syslog Logging Administrative Mode The mode for logging to configured syslog hosts. If set to disable logging stops to all syslog hosts. Log Messages Received The number of messages received by the log process. This includes messages that are dropped or ignored Log Messages Dropped The number of messages that could not be processed.

show logging history

This command displays logging. Format Mode
show logging history Privileged EXEC
Historical Logging Administrative Mode The mode for historical logging. Historical Logging Severity Filter The minimum severity to log to the historical log. Messages with an equal or lower numerical severity are logged.
8-70 202-10088-01, March 2005

Log Messages:

The number of messages received by the log process. This includes messages that are dropped or ignored

show logging buffered

This command displays buffered logging (system startup and system operation logs). Format Mode Admin Status Severity Level Filter Component Filter
show logging buffered Privileged EXEC
The current state of the in-memory log. The minimum severity to log to the in memory log. Messages with an equal or lower numerical severity are logged. The component(s) from which received messages are to be logged to the in memory log. Either a single component id or "all components" may be specified. The count of valid entries in the buffered log. The number of messages forwarded by the syslog function to a syslog host. Messages forwarded to multiple hosts are counted once for each host.

port-security max-static <maxvalue> Interface Config
9-2 202-10088-01, March 2005

Security Commands

port-security mac-address
This command adds a MAC address to the list of statically locked MAC addresses. Format Mode
port-security mac-address <vid> <mac-address> Interface Config
no port-security mac-address This command removes a MAC address to the list of statically locked MAC addresses. Format Mode
no port-security mac-address <vid> <mac-address> Interface Config
port-security mac-address move
This command converts dynamically locked MAC addresses to statically locked addresses. Format Mode
port-security mac-address move Interface Config
snmp-server enable traps violation
This command enables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port. Default Format Mode
Disabled snmp-server enable traps violation Interface Config
no snmp-server enable traps violation This command disables the sending of new violation traps. Format Mode
no snmp-server enable traps violation Interface Config

show port-security

This command displays the port-security settings for the entire system. Format Mode Admin Mode
show port-security Privileged EXEC
Port Locking mode for the entire system
This command displays the port-security settings for a particular interface or all interfaces. Format Mode Interface Admin Mode Dynamic Limit Static Limit Violation Trap Mode
show port-security <interface | all> Privileged EXEC
Port Locking mode for the Interface. Maximum dynamically allocated MAC Addresses. Maximum statically allocated MAC Addresses. Whether violation traps are enabled.
show port-security dynamic
This command displays the dynamically locked MAC addresses for port. Format Mode MAC Address
show port-security dynamic <interface> Privileged EXEC
MAC Address of dynamically locked MAC.
show port-security static
This command displays the statically locked MAC addresses for port. Format Mode MAC Address
show port-security static <interface> Privileged EXEC
MAC Address of statically locked MAC.
9-4 202-10088-01, March 2005
show port-security violation
This command displays the source MAC address of the last packet that was discarded on a locked port. Format Mode MAC Address
show port-security violation <interface> Privileged EXEC
MAC Address of discarded packet on locked port.
Port Based Network Access Control (IEEE 802.1X) Commands
This section provides a detailed explanation of the 802.1x commands. The commands are divided into the following groups: Configuration commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting. Show commands are used to display switch settings, statistics and other information.

This section provides a detailed explanation of the RADIUS commands. The commands are divided into the following groups: Configuration commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting. Show commands are used to display switch settings, statistics and other information.

radius accounting mode

This command is used to enable the RADIUS accounting function. Default Format Mode no radius accounting mode This command is used to set the RADIUS accounting function to the default value - i.e. the RADIUS accounting function is disabled. Format Mode no radius accounting mode

Global Config disabled

radius accounting mode Global Config

radius server host

This command is used to configure the RADIUS authentication and accounting server.
If the 'auth' token is used, the command configures the IP address to use to connect to a RADIUS authentication server. Up to 3 servers can be configured per RADIUS client. If the maximum number of configured servers is reached, the command will fail until one of the servers is removed by executing the no form of the command. If the optional <port> parameter is used, the command will configure the UDP port number to use to connect to the configured RADIUS server. In order to configure the UDP port number, the IP address must match that of a previously configured RADIUS authentication server. The port number must lie between 1 - 65535, with 1812 being the default value. If the 'acct' token is used, the command configures the IP address to use for the RADIUS accounting server. Only a single accounting server can be configured. If an accounting server is currently configured, it must be removed from the configuration using the no form of the command before this command succeeds. If the optional <port> parameter is used, the command will configure the UDP port to use to connect to the RADIUS accounting server. The IP address specified must match that of a previously configured accounting server. If a port is already configured for the accounting server then the new port will replace the previously configured value. The port must be a value in the range 1 - 65535, with 1813 being the default value. Format Mode no radius server host This command is used to remove the configured RADIUS authentication server or the RADIUS accounting server. If the 'auth' token is used, the previously configured RADIUS authentication server is removed from the configuration. Similarly, if the 'acct' token is used, the previously configured RADIUS accounting server is removed from the configuration. The <ipaddr> parameter must match the IP address of the previously configured RADIUS authentication / accounting server. Format Mode

match class-map <refclassname> Class-Map Config
match [not] any Class-Map Config
The class types of both <classname> and <refclassname> must be identical (i.e., any vs. any, or all vs. all). A class type of acl is not supported by this command. Cannot specify <refclassname> the same as <classname> (i.e., self-referencing of class name not allowed). At most one other class may be referenced by a class. Any attempt to delete the <refclassname> class while still referenced by any <classname> shall fail. The combined match criteria of <classname> and <refclassname> must be an allowed combination based on the class type. Any subsequent changes to the <refclassname> class match criteria must maintain this validity, or the change attempt shall fail. The total number of class rules formed by the complete reference class chain (includes both predecessor and successor classes) must not exceed a platform-specific maximum. In some cases, each removal of a refclass rule reduces the maximum number of available rules in the class definition by one.
no match class-map This command removes from the specified class definition the set of match conditions defined for another class. The <refclassname> is the name of an existing DiffServ class whose match conditions are being referenced by the specified class definition. Note: there is no [not] option for this match command. Format Mode match cos This command adds to the specified class definition a match condition for the Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). The value may be from 0 to 7. The optional [not] parameter has the effect of negating this match condition for the class (i.e., match all class of service values except for what is specified here). Default Format Mode none
match [not] cos <0-7> Class-Map Config no match class-map <refclassname> Class-Map Config
match destination-address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet. The <macaddr> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff). The <macmask> parameter is a layer 2 MAC address bit mask, which need not be contiguous, and is formatted as six, two-digit hexadecimal numbers separated by colons (e.g., ff:07:23:ff:fe:dc). The optional [not] parameter has the effect of negating this match condition for the class (i.e., match all destination MAC addresses except for what is specified here). Default Format Mode none

Class Name Mark CoS

The name of this class. Denotes the class of service value that is set in the 802.1p header of outbound packets. This is not displayed if the mark cos was not specified. Denotes the mark/re-mark value used as the DSCP for traffic matching this class. This is not displayed if mark ip description is not specified using the police-two-rate command, or if policing is in use for the class under this policy. Denotes the mark/re-mark value used as the IP Precedence for traffic matching this class. This is not displayed if precedence is not specified using police-two-rate command, or if either mark DSCP or policing is in use for the class under this policy. This field denotes the style of policing, if any, used (simple, single rate, or two rate).

Mark IP DSCP

Mark IP Precedence

Policing Style

Committed Rate (Kbps) This field displays the committed rate, used in simple policing, single-rate policing, and two-rate policing. Committed Burst Size (KB) This field displays the committed burst size, used in simple policing, single-rate policing, and two-rate policing. Excess Burst Size (KB) This field displays the excess burst size, used in single-rate policing. Peak Rate (Kbps) Peak Burst Size (KB) Conform Action This field displays the peak rate, used in two-rate policing. This field displays the peak burst size, used in two-rate policing. The current setting for the action taken on a packet considered to conform to the policing parameters. This is not displayed if policing is not in use for the class under this policy.

Conform DSCP Value

This field shows the DSCP mark value if the conform action is markdscp.
Conform IP Precedence Value This field shows the IP Precedence mark value if the conform action is markprec. Exceed Action The current setting for the action taken on a packet considered to exceed to the policing parameters. This is not displayed if policing not in use for the class under this policy. This field shows the DSCP mark value if this action is markdscp.

Exceed DSCP Value

Exceed IP Precedence Value This field shows the IP Precedence mark value if this action is markprec. Non-Conform Action The current setting for the action taken on a packet considered to not conform to the policing parameters. This is not displayed if policing not in use for the class under this policy.
Non-Conform DSCP Value This field displays the DSCP mark value if this action is markdscp. Non-Conform IP Precedence Value This field displays the IP Precedence mark value if this action is markprec. Bandwidth This field displays the minimum amount of bandwidth reserved in either percent or kilobits-per-second.

A-20 202-10088-01, March 2005
7300S Series L3 Switch Command config trapflags stpmode <enable | disable> CLI Command Mode Global Config Global Config Switching config telnet maxsessions <0-5> Privileged EXEC Privileged EXEC Switching config telnet mode <enable | disable> Privileged EXEC Privileged EXEC Switching config telnet timeout <0-160> Privileged EXEC Privileged EXEC Switching config forwardingdb agetime <10-1,000,000> [fdbid/all] Global Config Global Config Switching show spanningtree summary Privileged EXEC and User EXEC Privileged EXEC and User EXEC Privileged EXEC and User EXEC Syntax snmp-server enable traps stpmode no snmp-server enable traps stpmode remotecon maxsessions <0-5> no remotecon maxsessions telnet no telnet remnotecon timeout <0-160> no remotecon timeout bridge aging-time <10-1000000> {<1-4094> | all} no bridge aging-time {<1-4094> | all} show spanning-tree summary
show spanningtree port <slot/port>
show spanning-tree interface <slot/ port>
show spanningtree cst detailed
7300S Series L3 Switch Command show spanningtree bridge CLI Command Mode Privileged EXEC and User EXEC Privileged EXEC and User EXEC Privileged EXEC and User EXEC Privileged EXEC and User EXEC Privileged EXEC and User EXEC Privileged EXEC and User EXEC Global Config Global Config Switching config spanningtree forceversion <802.Id/802.lw/802.ls> Global Config Global Config Switching config spanningtree configuration name <name> Global Config Syntax show spanning-tree brief
show spanningtree mst summary
show spanningtree mst detailed <mstid>
show spanning-tree mst detailed <1-4094>
show spanningtree cst port summary <mstid> <slot/port/all>
show spanning-tree mst port summary 0 {<slot/port> | all}
show spanningtree cst port detailed <mstid> <slot/port>
show spanning-tree mst port detailed 0 <slot/port>
show spanningtree vlan <vlan>
show spanning-tree vlan <1-4094>
config spanningtree adminmode <enable/disable>
spanning-tree no spanning-tree spanning-tree forceversion {802.1d | 802.lw | 802.ls} no spanning-tree forceversion spanning-tree configuration name <name>
A-22 202-10088-01, March 2005
7300S Series L3 Switch Command CLI Command Mode Global Config Switching config spanningtree configuration revision <0-65535> Global Config Global Config Switching config spanningtree port mode <slot/port/all> <enable/disbale> Interface Config Interface Config Switching config spanningtree port mode <slot/port/all> <enable/disbale> Global Config Global Config Switching config spanningtree port migrationcheck <slot/port/all> <enable/disable> Global Config Global Config Switching config spanningtree bridge maxage <6-40> Global Config Global Config Switching config spanningtree bridge hellotime <1-10> Global Config Global Config Switching config spanningtree bridge forwarddelay <4-30> Global Config Global Config Syntax no spanning-tree configuration name spanning-tree configuration revision <0-65535> no spanning-tree configuration revision spanning-tree port mode all no spanning-tree port mode spanning-tree port mode all no spanning-tree port mode all spanning-tree bpdumigrationcheck {<slot/port> | all} no spanning-tree bpdumigrationcheck {<slot/port> | all} spanning-tree max-age <6-40> no spanning-tree max-age spanning-tree hello-time <1-10> no spanning-tree hello-time spanning-tree forward-time <4-30> no spanning-tree forward-time

CLI is a line-item interface for configuring systems. (It is one of the user interfaces for allowing programmers to configure their system).
Common Open Policy Service Protocol
A proposed standard protocol for exchanging network policy information between a Policy Decision Point (PDP) in a network and Policy Enforcement Points (PEPs) as part of overall Quality of Service (QoS) - the allocation of network traffic resources according to desired priorities of service. The policy decision point might be a network server controlled directly by the network administrator who enters policy statements about which kinds of traffic (voice, bulk data, video, teleconferencing, and so forth) should get the highest priority. The policy enforcement points might be router or layer 3 switches that implement the policy choices as traffic moves through the network. Currently, COPS is designed for use with the Resource Reservation Protocol (RSVP), which lets you allocate traffic priorities in advance for temporary high-bandwidth requirements (for example, video broadcasts or multicasts). It is possible that COPS will be extended to be a general policy communications protocol.
See Common Open Policy Service Protocol on page 5.
See Dynamic Host Configuration Protocol on page 6.

Differentiated Services

Diffserv is a protocol for specifying and controlling network traffic by class so that certain types of traffic get precedence - for example, voice traffic, which requires a relatively uninterrupted flow of data, might get precedence over other kinds of traffic. Differentiated Services is the most advanced method for managing traffic in terms of what is called Class of Service (CoS). Unlike the earlier mechanisms of 802.1P tagging and Type of Service (ToS), Differentiated Services avoids simple priority tagging and depends on more Glossary 202-10088-01, March 2005 C-5
User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software complex policy or rule statements to determine how to forward a given network packet. An analogy is made to travel services, in which a person can choose among different modes of travel - train, bus, airplane degree of comfort, the number of stops on the route, standby status, the time of day or period of year for the trip, and so forth. For a given set of packet travel rules, a packet is given one of 64 possible forwarding behaviors - known as per hop behaviors (PHBs). A six-bit field, known as the Differentiated Services Code Point (DSCP), in the Internet Protocol (Internet Protocol) header specifies the per hop behavior for a given flow of packets. Differentiated Services and the Class of Service approach provide a way to control traffic that is both more flexible and more scalability than the Quality of Service approach.

Diffserv

See Differentiated Services on page 5.
Short for Domain Name System (or Service), an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.

Protocol Independent Multicast Dense Mode
Like DVMRP, PIM-DM uses a flood and prune protocol for building multicast trees. However, unlike DVMRP, PIM-DM uses existing unicast protocols for determining the route to the source.
See Quality of Service on page 16.

Quality of Service

QoS is a networking term that specifies a guaranteed level of throughput. Throughput is the amount of data transferred from one device to another or processed in a specified amount of time - typically, throughputs are measured in bytes per second (Bps).
C-16 202-10088-01, March 2005

RADIUS

Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access. Though not an official standard, the RADIUS specification is maintained by a working group of the IETF.
Real-Time Operating System
RTOS is a component of the OSAPI module that abstracts operating systems with which other systems can interface.
Resource Reservation Setup Protocol
RSVP is a new Internet protocol being developed to enable the Internet to support specified Qualities-of-Service (QoS). Using RSVP, an application will be able to reserve resources along a route from source to destination. RSVP-enabled routers will then schedule and prioritize packets to meet the prioritization assigned by QoS. RSVP is a chief component of a new type of Internet being developed, known broadly as an integrated services Internet. The general idea is to enhance the Internet to support transmission of real-time data.
See Routing Information Protocol on page 17.

router

A device that forwards data between networks. An IP router forwards data based on IP source and destination addresses.
Routing Information Protocol
RIP is the routing protocol used by the routed process on Berkeley-derived UNIX systems. Many networks use RIP; it works well for small, isolated, and topologically simple networks.
Routing Information Protocol, new generation.
Short for remote monitoring, a network management protocol that allows network information to be gathered at a single workstation. Whereas SNMP gathers network data from a single type of Management Information Base (MIB), RMON 1 defines nine additional MIBs that provide a much richer set of data about network usage. For RMON to work, network devices, such as hubs and switches, must be designed to support it. The newest version of RMON, RMON 2, provides data about traffic at the network layer in addition to the physical layer. This allows administrators to analyze traffic by protocol. Glossary 202-10088-01, March 2005 C-17