目次

• 前書き

• 変更内容

• はじめに

• 第1編　このマニュアルの読み方

  • 1　このマニュアルの読み方

    • コマンドの記述形式

    • コマンドモード一覧

    • パラメータに指定できる値

• 第2編　装置の運用と管理

  • 2　運用端末接続

    • ftp-server

    • line console

    • line vty

    • speed

    • transport input

  • 3　コンフィグレーションの編集と操作

    • end

    • quit（exit）

    • save（write）

    • show

    • status

    • top

  • 4　ログインセキュリティとRADIUS/TACACS+

    • aaa accounting commands

    • aaa accounting exec

    • aaa authentication enable

    • aaa authentication enable attribute-user-per-method

    • aaa authentication enable end-by-reject

    • aaa authentication login

    • aaa authentication login console

    • aaa authentication login end-by-reject

    • aaa authorization commands

    • aaa authorization commands console

    • banner

    • commands exec

    • ip access-group

    • ipv6 access-class

    • parser view

    • radius-server host

    • radius-server key

    • radius-server retransmit

    • radius-server timeout

    • tacacs-server host

    • tacacs-server key

    • tacacs-server timeout

    • username

  • 5　SSH

    • ip ssh

    • ip ssh authentication

    • ip ssh authkey

    • ip ssh ciphers

    • ip ssh macs

    • ip ssh version

  • 6　時刻の設定とNTP

    • clock timezone

    • ntp access-group

    • ntp authenticate

    • ntp authentication-key

    • ntp broadcast

    • ntp broadcast client

    • ntp broadcastdelay

    • ntp master

    • ntp peer

    • ntp server

    • ntp trusted-key

  • 7　ホスト名とDNS

    • ip domain lookup

    • ip domain name

    • ip domain reverse-lookup

    • ip host

    • ip name-server

    • ipv6 host

  • 8　装置の管理

    • swrt_multicast_table

    • swrt_table_resource

    • system fan mode

    • system l2-table mode

    • system memory-soft-error

    • system recovery

    • system temperature-warning-level

  • 9　省電力機能

    • schedule-power-control shutdown

    • schedule-power-control time-range

• 第3編　ネットワークインタフェース

  • 10　イーサネット

    • bandwidth

    • description

    • duplex

    • flowcontrol

    • frame-error-notice

    • interface gigabitethernet

    • interface tengigabitethernet

    • link debounce

    • link up-debounce

    • mdix auto

    • media-type

    • mtu

    • shutdown

    • speed

    • system flowcontrol off

    • system minimum-tagged-frame-length-68

    • system mtu

  • 11　リンクアグリゲーション

    • channel-group lacp system-priority

    • channel-group max-active-port

    • channel-group max-detach-port

    • channel-group mode

    • channel-group multi-speed

    • channel-group periodic-timer

    • description

    • interface port-channel

    • lacp port-priority

    • lacp system-priority

    • port-channel load-balance

    • shutdown

• 第4編　レイヤ2スイッチング

  • 12　MACアドレステーブル

    • mac-address-table aging-time

    • mac-address-table static

  • 13　VLAN

    • down-debounce

    • interface vlan

    • l2protocol-tunnel eap

    • l2protocol-tunnel stp

    • l2-isolation

    • mac-address

    • mac-based-vlan static-only

    • name

    • protocol

    • state

    • switchport access

    • switchport dot1q ethertype

    • switchport isolation

    • switchport mac

    • switchport mode

    • switchport protocol

    • switchport trunk

    • switchport vlan mapping

    • switchport vlan mapping enable

    • up-debounce

    • vlan

    • vlan-dot1q-ethertype

    • vlan-mac

    • vlan-mac-prefix

    • vlan-protocol

    • vlan-up-message

  • 14　スパニングツリー

    • instance

    • name

    • revision

    • spanning-tree bpdufilter

    • spanning-tree bpduguard

    • spanning-tree cost

    • spanning-tree disable

    • spanning-tree guard

    • spanning-tree link-type

    • spanning-tree loopguard default

    • spanning-tree mode

    • spanning-tree mst configuration

    • spanning-tree mst cost

    • spanning-tree mst forward-time

    • spanning-tree mst hello-time

    • spanning-tree mst max-age

    • spanning-tree mst max-hops

    • spanning-tree mst port-priority

    • spanning-tree mst root priority

    • spanning-tree mst transmission-limit

    • spanning-tree pathcost method

    • spanning-tree port-priority

    • spanning-tree portfast

    • spanning-tree portfast bpduguard default

    • spanning-tree portfast default

    • spanning-tree single

    • spanning-tree single cost

    • spanning-tree single forward-time

    • spanning-tree single hello-time

    • spanning-tree single max-age

    • spanning-tree single mode

    • spanning-tree single pathcost method

    • spanning-tree single port-priority

    • spanning-tree single priority

    • spanning-tree single transmission-limit

    • spanning-tree vlan

    • spanning-tree vlan cost

    • spanning-tree vlan forward-time

    • spanning-tree vlan hello-time

    • spanning-tree vlan max-age

    • spanning-tree vlan mode

    • spanning-tree vlan pathcost method

    • spanning-tree vlan port-priority

    • spanning-tree vlan priority

    • spanning-tree vlan transmission-limit

  • 15　Ring Protocol

    • axrp

    • axrp virtual-link

    • axrp vlan-mapping

    • axrp-primary-port

    • axrp-ring-port

    • control-vlan

    • disable

    • flush-request-count

    • flush-request-transmit vlan

    • forwarding-shift-time

    • health-check holdtime

    • health-check interval

    • mode

    • multi-fault-detection holdtime

    • multi-fault-detection interval

    • multi-fault-detection mode

    • multi-fault-detection vlan

    • name

    • preempt-delay

    • vlan-group

  • 16　IGMP snooping

    • ip igmp snooping（global）

    • ip igmp snooping（VLANインタフェース）

    • ip igmp snooping fast-leave

    • ip igmp snooping mrouter

    • ip igmp snooping querier

  • 17　MLD snooping

    • ipv6 mld snooping（global）

    • ipv6 mld snooping（VLANインタフェース）

    • ipv6 mld snooping mrouter

    • ipv6 mld snooping querier

• 第5編　フィルタ・QoS共通

  • 18　フロー検出モード/フロー動作

    • flow action-change cos

    • flow detection mode

    • flow detection out mode

• 第6編　フィルタ

  • 19　アクセスリスト

    • 指定できる名称および値

    • access-list

    • deny（ip access-list extended）

    • deny（ip access-list standard）

    • deny（ipv6 access-list）

    • deny（mac access-list extended）

    • ip access-group

    • ip access-list extended

    • ip access-list resequence

    • ip access-list standard

    • ipv6 access-list

    • ipv6 access-list resequence

    • ipv6 traffic-filter

    • mac access-group

    • mac access-list extended

    • mac access-list resequence

    • permit（ip access-list extended）

    • permit（ip access-list standard）

    • permit（ipv6 access-list）

    • permit（mac access-list extended）

    • remark

• 第7編　QoS

  • 20　QoS

    • 指定できる名称および値

    • ip qos-flow-group

    • ip qos-flow-list

    • ip qos-flow-list resequence

    • ipv6 qos-flow-group

    • ipv6 qos-flow-list

    • ipv6 qos-flow-list resequence

    • limit-queue-length

    • mac qos-flow-group

    • mac qos-flow-list

    • mac qos-flow-list resequence

    • qos（ip qos-flow-list）

    • qos（ipv6 qos-flow-list）

    • qos（mac qos-flow-list）

    • qos-queue-group

    • qos-queue-list

    • remark

    • traffic-shape rate

• 第8編　レイヤ2認証

  • 21　レイヤ2認証

    • コンフィグレーションコマンドと適用するレイヤ2認証

    • authentication arp-relay

    • authentication force-authorized enable

    • authentication force-authorized vlan

    • authentication ip access-group

    • authentication max-user（global）

    • authentication max-user（interface）

    • authentication radius-server dead-interval

  • 22　IEEE802.1X

    • aaa accounting dot1x default

    • aaa authentication dot1x default

    • aaa authorization network default

    • dot1x force-authorized-port

    • dot1x ignore-eapol-start

    • dot1x logging enable

    • dot1x loglevel

    • dot1x max-req

    • dot1x max-supplicant

    • dot1x multiple-authentication

    • dot1x multiple-hosts

    • dot1x port-control

    • dot1x reauthentication

    • dot1x supplicant-detection

    • dot1x system-auth-control

    • dot1x timeout keep-unauth

    • dot1x timeout quiet-period

    • dot1x timeout reauth-period

    • dot1x timeout server-timeout

    • dot1x timeout supp-timeout

    • dot1x timeout tx-period

    • dot1x vlan dynamic enable

    • dot1x vlan dynamic ignore-eapol-start

    • dot1x vlan dynamic max-req

    • dot1x vlan dynamic max-supplicant

    • dot1x vlan dynamic radius-vlan

    • dot1x vlan dynamic reauthentication

    • dot1x vlan dynamic supplicant-detection

    • dot1x vlan dynamic timeout quiet-period

    • dot1x vlan dynamic timeout reauth-period

    • dot1x vlan dynamic timeout server-timeout

    • dot1x vlan dynamic timeout supp-timeout

    • dot1x vlan dynamic timeout tx-period

    • dot1x vlan enable

    • dot1x vlan ignore-eapol-start

    • dot1x vlan max-req

    • dot1x vlan max-supplicant

    • dot1x vlan reauthentication

    • dot1x vlan supplicant-detection

    • dot1x vlan timeout quiet-period

    • dot1x vlan timeout reauth-period

    • dot1x vlan timeout server-timeout

    • dot1x vlan timeout supp-timeout

    • dot1x vlan timeout tx-period

  • 23　Web認証

    • コンフィグレーションコマンドと動作モードの対応

    • aaa accounting web-authentication default start-stop group radius

    • aaa authentication web-authentication default group radius

    • web-authentication auto-logout

    • web-authentication connection-pool level

    • web-authentication ip address

    • web-authentication jump-url

    • web-authentication logging enable

    • web-authentication logout ping tos-windows

    • web-authentication logout ping ttl

    • web-authentication logout polling count

    • web-authentication logout polling enable

    • web-authentication logout polling interval

    • web-authentication logout polling retry-interval

    • web-authentication max-timer

    • web-authentication max-user

    • web-authentication port

    • web-authentication redirect enable

    • web-authentication redirect-mode

    • web-authentication ssl connection-timeout

    • web-authentication static-vlan max-user

    • web-authentication system-auth-control

    • web-authentication tcp-retransmission initial-timeout

    • web-authentication vlan

    • web-authentication web-port

  • 24　MAC認証

    • コンフィグレーションコマンドと動作モードの対応

    • aaa accounting mac-authentication default start-stop group radius

    • aaa authentication mac-authentication default group radius

    • mac-authentication auth-interval-timer

    • mac-authentication auto-logout

    • mac-authentication dot1q-vlan force-authorized

    • mac-authentication dynamic-vlan max-user

    • mac-authentication logging enable

    • mac-authentication max-timer

    • mac-authentication password

    • mac-authentication port

    • mac-authentication radius-server host

    • mac-authentication static-vlan max-user

    • mac-authentication system-auth-control

    • mac-authentication vlan-check

  • 25　認証VLAN【OP-VAA】

    • fense alive-timer【OP-VAA】

    • fense retry-count【OP-VAA】

    • fense retry-timer【OP-VAA】

    • fense server【OP-VAA】

    • fense vaa-name【OP-VAA】

    • fense vaa-sync【OP-VAA】

    • fense vlan【OP-VAA】

• 第9編　セキュリティ

  • 26　DHCP snooping

    • ip arp inspection limit rate

    • ip arp inspection trust

    • ip arp inspection validate

    • ip arp inspection vlan

    • ip dhcp snooping

    • ip dhcp snooping database url

    • ip dhcp snooping database write-delay

    • ip dhcp snooping information option allow-untrusted

    • ip dhcp snooping limit rate

    • ip dhcp snooping logging enable

    • ip dhcp snooping loglevel

    • ip dhcp snooping trust

    • ip dhcp snooping verify mac-address

    • ip dhcp snooping vlan

    • ip source binding

    • ip verify source

• 第10編　冗長化構成による高信頼化機能

  • 27　電源（PS）の冗長化

    • power redundancy-mode

  • 28　GSRP

    • advertise-holdtime

    • advertise-interval

    • backup-lock

    • flush-request-count

    • gsrp

    • gsrp-vlan

    • gsrp direct-link

    • gsrp exception-port

    • gsrp limit-control

    • gsrp no-flush-port

    • gsrp reset-flush-port

    • layer3-redundancy

    • no-neighbor-to-master

    • port-up-delay

    • reset-flush-time

    • selection-pattern

    • virtual-mac-learning-interval

    • vlan-group disable

    • vlan-group priority

    • vlan-group vlan

  • 29　VRRP

    • track check-reply-interface

    • track check-status-interval

    • track check-trial-times

    • track failure-detection-interval

    • track failure-detection-times

    • track interface

    • track ip route

    • track recovery-detection-interval

    • track recovery-detection-times

    • vrrp accept

    • vrrp authentication

    • vrrp ietf-ipv6-spec-07-mode

    • vrrp ip

    • vrrp ipv6

    • vrrp preempt

    • vrrp preempt delay

    • vrrp priority

    • vrrp timers advertise

    • vrrp timers non-preempt-swap

    • vrrp track

  • 30　アップリンク・リダンダント

    • switchport backup flush-request transmit

    • switchport backup interface

    • switchport backup mac-address-table update exclude-vlan

    • switchport backup mac-address-table update transmit

    • switchport-backup startup-active-port-selection

• 第11編　ネットワークの障害検出による高信頼化機能

  • 31　IEEE 802.3ah/UDLD

    • efmoam active

    • efmoam disable

    • efmoam udld-detection-count

  • 32　ストームコントロール

    • storm-control

  • 33　L2ループ検知

    • loop-detection

    • loop-detection auto-restore-time

    • loop-detection enable

    • loop-detection hold-time

    • loop-detection interval-time

    • loop-detection threshold

  • 34　CFM

    • domain name

    • ethernet cfm cc alarm-priority

    • ethernet cfm cc alarm-reset-time

    • ethernet cfm cc alarm-start-time

    • ethernet cfm cc enable

    • ethernet cfm cc interval

    • ethernet cfm domain

    • ethernet cfm enable（global）

    • ethernet cfm enable（interface）

    • ethernet cfm mep

    • ethernet cfm mip

    • ma name

    • ma vlan-group

• 第12編　リモートネットワーク管理

  • 35　SNMP

    • hostname

    • rmon alarm

    • rmon collection history

    • rmon event

    • snmp-server community

    • snmp-server contact

    • snmp-server engineID local

    • snmp-server group

    • snmp-server host

    • snmp-server informs

    • snmp-server location

    • snmp-server traps

    • snmp-server user

    • snmp-server view

    • snmp trap link-status

  • 36　ログ出力機能

    • logging email

    • logging email-event-kind

    • logging email-from

    • logging email-interval

    • logging email-server

    • logging event-kind

    • logging facility

    • logging host

    • logging syslog-dump

    • logging trap

  • 37　sFlow統計

    • sflow destination

    • sflow extended-information-type

    • sflow forward egress

    • sflow forward ingress

    • sflow max-header-size

    • sflow max-packet-size

    • sflow packet-information-type

    • sflow polling-interval

    • sflow sample

    • sflow sampling-limit-mode

    • sflow source

    • sflow url-port-add

    • sflow version

• 第13編　隣接装置の管理

  • 38　LLDP

    • lldp enable

    • lldp hold-count

    • lldp interval-time

    • lldp run

  • 39　OADP

    • oadp cdp-listener

    • oadp enable

    • oadp hold-time

    • oadp ignore-vlan

    • oadp interval-time

    • oadp run

• 第14編　ポートミラーリング

  • 40　ポートミラーリング

    • monitor session

• 第15編　コンフィグレーションエラーメッセージ

  • 41　コンフィグレーション編集時のエラーメッセージ

    • 41.1　コンフィグレーション編集時のエラーメッセージ

      • 41.1.1　共通

      • 41.1.2　コンフィグレーションの編集と操作情報

      • 41.1.3　ログインセキュリティとRADIUS/TACACS+情報

      • 41.1.4　SSH情報

      • 41.1.5　ホスト名とDNS情報

      • 41.1.6　省電力機能情報

      • 41.1.7　イーサネット情報

      • 41.1.8　リンクアグリゲーション情報

      • 41.1.9　MACアドレステーブル情報

      • 41.1.10　VLAN情報

      • 41.1.11　スパニングツリー情報

      • 41.1.12　Ring Protocol情報

      • 41.1.13　IGMP snooping情報

      • 41.1.14　MLD snooping情報

      • 41.1.15　フロー検出モード/フロー動作情報

      • 41.1.16　アクセスリスト情報

      • 41.1.17　QoS情報

      • 41.1.18　IEEE802.1X情報

      • 41.1.19　Web認証情報

      • 41.1.20　MAC認証情報

      • 41.1.21　認証VLAN情報【OP-VAA】

      • 41.1.22　DHCP snooping情報

      • 41.1.23　GSRP情報

      • 41.1.24　VRRP情報

      • 41.1.25　アップリンク・リダンダント情報

      • 41.1.26　CFM情報

      • 41.1.27　SNMP情報

      • 41.1.28　sFlow統計情報

      • 41.1.29　OADP情報

      • 41.1.30　ポートミラーリング情報

• 索引