D-Link DES-1228/ME Reference Manual - Vlan

Manual is about: layer 2 managed ethernet switch

Summary of DES-1228/ME

  • Page 1

    Des-1228/me metro ethernet managed switch cli reference guide.

  • Page 2

    Des-1228/me metro ethernet managed switch cli reference guide information in this document is subject to change without notice. © 2012 d-link corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of d-link corporation is strictly forbidden. Trademarks...

  • Page 3: Able Of

    Des-1228/me metro ethernet managed switch cli reference guide t able of c ontents introduction ................................................................................................................................................................ 1 using the console cli .......................

  • Page 4

    Des-1228/me metro ethernet managed switch cli reference guide asymmetric vlan commands ............................................................................................................................ 305 igmp snooping multicast vlan commands .................................................

  • Page 5: Ntroduction

    Des-1228/me metro ethernet managed switch cli reference guide 1 1 i ntroduction the switch can be managed through the switch’s serial port, telnet, or the web-based management agent. The command line interface (cli) can be used to configure and manage the switch via the serial port or telnet interfa...

  • Page 6

    Des-1228/me metro ethernet managed switch cli reference guide 2 starting at the command line prompt, enter the command config ipif system ipaddress xxx.Xxx.Xxx.Xxx/yyy.Yyy.Yyy.Yyy. Where the x’s represent the ip address to be assigned to the ip interface named system and the y’s represent the corres...

  • Page 7: Sing The

    Des-1228/me metro ethernet managed switch cli reference guide 3 2 u sing the c onsole cli the switch supports a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The conso...

  • Page 8

    Des-1228/me metro ethernet managed switch cli reference guide 4 .. ? Cable_diag ports clear clear arptable clear counters clear dos_prevention counters clear fdb clear flood_fdb clear igmp_snooping data_driven_group clear log clear port_security_entry port config 802.1p default_priority config 802.1...

  • Page 9

    Des-1228/me metro ethernet managed switch cli reference guide 5 des-1228/me:5#config account command: config account next possible completions: des-1228/me:5#config account command: config account next possible completions: des-1228/me:5# figure 2 - 4. Using the up arrow to re-enter a command in the...

  • Page 10

    Des-1228/me metro ethernet managed switch cli reference guide 6 des-1228/me:5#show command: show next possible completions: 802.1p 802.1x access_profile account acct_client address_binding arp_spoofing_prevention arpentry asymmetric_vlan auth_client auth_diagnostics auth_session_statistics auth_stat...

  • Page 11: Ommand

    Des-1228/me metro ethernet managed switch cli reference guide 7 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: all commands are case-sensitive. Be sure to disable caps lock or any other unwanted ...

  • Page 13

    Des-1228/me metro ethernet managed switch cli reference guide 9 multiple page display control keys space displays the next page. Ctrl+c stops the display of remaining pages when multiple pages are to be displayed. Esc stops the display of remaining pages when multiple pages are to be displayed. N di...

  • Page 14: Asic

    Des-1228/me metro ethernet managed switch cli reference guide 10 4 b asic s witch c ommands the basic switch commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters enable password encryption disable password encrypti...

  • Page 16

    Des-1228/me metro ethernet managed switch cli reference guide 12 des-1228/me:5#disable password encryption command: disable password encryption success. Des-1228/me:5#.

  • Page 19

    Des-1228/me metro ethernet managed switch cli reference guide 15 show account purpose used to display user accounts. Syntax show account description this command is used to display all user accounts created on the switch. Up to eight user accounts can exist at one time. Parameters none. Restrictions...

  • Page 20

    Des-1228/me metro ethernet managed switch cli reference guide 16 show session purpose used to display a list of currently logged-in users. Syntax show session description this command is used to display a list of all the users that are logged-in at the time the command is issued. Parameters none. Re...

  • Page 21

    Des-1228/me metro ethernet managed switch cli reference guide 17 show switch purpose used to display general information about the switch. Syntax show switch description this command is used to display information about the switch. Parameters none. Restrictions none. Example usage: to display the sw...

  • Page 22

    Des-1228/me metro ethernet managed switch cli reference guide 18 show serial_port purpose used to display the current serial port settings. Syntax show serial_port description this command is used to display the current serial port settings. Parameters none. Restrictions none example usage: to displ...

  • Page 24

    Des-1228/me metro ethernet managed switch cli reference guide 20 enable clipaging purpose used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging description this command is used when issuing a command which causes the console screen to r...

  • Page 25

    Des-1228/me metro ethernet managed switch cli reference guide 21 enable telnet purpose used to enable communication with and management of the switch using the telnet protocol. Syntax enable telnet {} description this command is used to enable the telnet protocol on the switch. The user can specify ...

  • Page 26

    Des-1228/me metro ethernet managed switch cli reference guide 22 telnet purpose used to telnet another device on the network. Syntax telnet {tcp_port } description this command is used to connect to another device’s management through telnet. Parameters − enter the ip address of the device to connec...

  • Page 27

    Des-1228/me metro ethernet managed switch cli reference guide 23 to send icmp echo message to “10.51.17.1” for 4 times: des-1228/me:5#ping 10.51.17.1 times 4 command: ping 10.51.17.1 times 4 reply from 10.51.17.1, time reply from 10.51.17.1, time reply from 10.51.17.1, time reply from 10.51.17.1, ti...

  • Page 29

    Des-1228/me metro ethernet managed switch cli reference guide 25 to save the switch’s the current configuration and log to non-volatile ram: des-1228/me:5#save all command: save all saving all configurations and log information to nv-ram...... Done. Success. Des-1228/me:5# reboot purpose used to res...

  • Page 31

    Des-1228/me metro ethernet managed switch cli reference guide 27 to restore all of the switch’s parameters to their default values and have the switch save and reboot: des-1228/me:5#reset system command: reset system are you sure you want to proceed with system reset, save and reboot?(y/n) y load fa...

  • Page 33

    Des-1228/me metro ethernet managed switch cli reference guide 29 example usage: to display the current spanning tree configurations: d e s - 1 2 2 8 / m e : 5 # s h o w c o n f i g c u r r e n t _ c o n f i g i n c l u d e " s t p " c o m m a n d : s h o w c o n f i g c u r r e n t _ c o n f i g i n...

  • Page 34

    Des-1228/me metro ethernet managed switch cli reference guide 30 show terminal_line purpose used to show the number of rows which can be displayed on the screen. Syntax show terminal_line description this command is used to show the number of rows which can be displayed on the screen. Parameters non...

  • Page 35

    Des-1228/me metro ethernet managed switch cli reference guide 31 example usage: to disable jumbo frame: des-1228/me:5#disable jumbo_frame command: disable jumbo_frame success. Des-1228/me:5# show jumbo_frame purpose used to display the current configuration of jumbo frame. Syntax show jumbo_frame de...

  • Page 36

    Des-1228/me metro ethernet managed switch cli reference guide 32 config configuration config_id purpose this command is used to select a configuration file as the next boot up configuration or to apply a specific configuration to the system. This command is required when multiple configuration files...

  • Page 39

    Des-1228/me metro ethernet managed switch cli reference guide 35 config greeting _message purpose used to configure the login banner (greeting message). Syntax config greeting _message {default} description users can use this command to modify the login banner (greeting message). Parameters default ...

  • Page 40

    Des-1228/me metro ethernet managed switch cli reference guide 36 show greeting_message purpose used to view the currently configured greeting message configured on the switch. Syntax show greeting_message description this command is used to view the currently configured greeting message on the switc...

  • Page 44

    Des-1228/me metro ethernet managed switch cli reference guide 40 example usage: to display the configuration of all ports on a standalone switch, with description: des-1228/me:5#show ports description command: show ports description port state/ settings connection address mdi speed/duplex/flowctrl s...

  • Page 47

    Des-1228/me metro ethernet managed switch cli reference guide 43 delete port_security_entry purpose used to delete a port security entry by mac address, port number and vlan id. Syntax delete port_security_entry vlan_name mac_address port description this command is used to delete a single, previous...

  • Page 48

    Des-1228/me metro ethernet managed switch cli reference guide 44 clear port_security_entry purpose used to clear mac address entries learned from a specified port for the port security function. Syntax clear port_security_entry ports description this command is used to clear mac address entries whic...

  • Page 49

    Des-1228/me metro ethernet managed switch cli reference guide 45 show port_security purpose used to display the current port security configuration. Syntax show port_security {ports } description this command is used to display port security information of the switch’s ports. The information display...

  • Page 50

    Des-1228/me metro ethernet managed switch cli reference guide 46 enable port_security trap_log purpose used to enable the trap log for port security. Syntax enable port_security trap_log description this command, along with the disable port_security trap_log, will enable the sending of log messages ...

  • Page 51: Etwork

    Des-1228/me metro ethernet managed switch cli reference guide 47 8 n etwork m anagement (snmp) c ommands the switch supports the simple network management protocol (snmp) versions 1, 2c, and 3. Users can specify which version of the snmp users want to use to monitor and control the switch. The three...

  • Page 54

    Des-1228/me metro ethernet managed switch cli reference guide 50 create snmp user form, that will be used to encrypt the contents of messages the host sends to the agent. None – adding this parameter will add no encryption. Restrictions only administrator level, operator level or power user level us...

  • Page 55

    Des-1228/me metro ethernet managed switch cli reference guide 51 show snmp user purpose used to display information about each snmp username in the snmp group username table. Syntax show snmp user description this command is used to display information about each snmp username in the snmp group user...

  • Page 58

    Des-1228/me metro ethernet managed switch cli reference guide 54 example usage: to display snmp view configuration: des-1228/me:5#show snmp view command: show snmp view vacm view table settings view name subtree view type -------------------- ------------------------- ---------- dlinkview 1.3.6 incl...

  • Page 59

    Des-1228/me metro ethernet managed switch cli reference guide 55 example usage: to create the snmp community string “dlinkcomm”: des-1228/me:5#create snmp community dlinkcomm view dlinkview read_write command: create snmp community dlinkcomm view dlinkview read_write success. Des-1228/me:5# delete s...

  • Page 60

    Des-1228/me metro ethernet managed switch cli reference guide 56 example usage: to display the currently entered snmp community strings: des-1228/me:5#show snmp community command: show snmp community snmp community table community name view name access right --------------------- -------------------...

  • Page 61

    Des-1228/me metro ethernet managed switch cli reference guide 57 show snmp engineid purpose used to display the identification of the snmp engine on the switch. Syntax show snmp engineid description this command is used to display the identification of the snmp engine on the switch. Parameters none....

  • Page 63

    Des-1228/me metro ethernet managed switch cli reference guide 59 example usage: to create an snmp group named “sg1:” des-1228/me:5#create snmp group dlink v3 noauth_nopriv read_view dlinkview write_view dlinkview notify_view dlinkview command: create snmp group dlink v3 noauth_nopriv read_view dlink...

  • Page 64

    Des-1228/me metro ethernet managed switch cli reference guide 60 example usage: to display the currently configured snmp groups on the switch: des-1228/me:5#show snmp groups command: show snmp groups vacm access table settings group name : dlink readview name : dlinkview writeview name : dlinkview n...

  • Page 66

    Des-1228/me metro ethernet managed switch cli reference guide 62 delete snmp host purpose used to remove a recipient of snmp traps generated by the switch’s snmp agent. Syntax delete snmp [host ] description this command is used to delete a recipient of snmp traps generated by the switch’s snmp agen...

  • Page 68

    Des-1228/me metro ethernet managed switch cli reference guide 64 example usage: to delete a trusted host with an ip address 10.48.74.121: des-1228/me:5#delete trusted_host ipaddr 10.81.17.1 command: delete trusted_host ipaddr 10.81.17.1 success. Des-1228/me:5# to delete a trusted host network with a...

  • Page 69

    Des-1228/me metro ethernet managed switch cli reference guide 65 example usage: to display the list of trust hosts: des-1228/me:5#show trusted_host command: show trusted_host management stations ip address/netmask ----------------------- 10.53.13.94/32 total entries: 1 des-1228/me:5# enable snmp tra...

  • Page 70

    Des-1228/me metro ethernet managed switch cli reference guide 66 enable snmp linkchange_traps purpose used to configure the sending of linkchange traps. . Syntax enable snmp linkchange_traps description this command is used to enable/disable snmp link change traps. Parameters none. Restrictions only...

  • Page 71

    Des-1228/me metro ethernet managed switch cli reference guide 67 disable snmp traps purpose used to disable snmp trap support on the switch. Syntax disable snmp traps description this command is used to disable snmp trap support on the switch. Parameters none. Restrictions only administrator level o...

  • Page 72

    Des-1228/me metro ethernet managed switch cli reference guide 68 to disable snmp linkchange trap support on the switch:: des-1228/me:5# disable snmp linkchange_traps command: disable snmp linkchange_traps success. Des-1228/me:5# config snmp linkchange_traps ports purpose used to configure the sendin...

  • Page 73

    Des-1228/me metro ethernet managed switch cli reference guide 69 des-1228/me:5#show snmp traps command: show snmp traps snmp traps : enabled authenticate traps : enabled linkchange traps : enabled des-1228/me:5#.

  • Page 74

    Des-1228/me metro ethernet managed switch cli reference guide 70 config snmp system_contact purpose used to enter the name of a contact person who is responsible for the switch. Syntax config snmp system_contact {} description this command is used to enter the name and/or other information to identi...

  • Page 75

    Des-1228/me metro ethernet managed switch cli reference guide 71 config snmp system_name purpose used to configure the name for the switch. Syntax config snmp system_name {} description this command is used to configure the name of the switch. Parameters − a maximum of 128 characters is allowed. A n...

  • Page 79

    Des-1228/me metro ethernet managed switch cli reference guide 75 des-1228/me:5#download cfg_fromtftp 10.48.74.121 c:\cfg\setting.Txt command: download cfg_fromtftp 10.48.74.121 c:\cfg\setting.Txt connecting to server................... Done. Download configuration................. Done. Success. Des...

  • Page 80

    Des-1228/me metro ethernet managed switch cli reference guide 76 des-1228/me:5# config firmware image_id 1 boot_up command: config firmware image_id 1 boot_up success. Des-1228/me:5#.

  • Page 81

    Des-1228/me metro ethernet managed switch cli reference guide 77 show firmware information purpose used to display the firmware section information. Syntax show firmware information description this command is used to display the firmware section information. Parameters none. Restrictions none examp...

  • Page 83

    Des-1228/me metro ethernet managed switch cli reference guide 79 d e s - 1 2 2 8 / m e : 5 # u p l o a d c f g _ t o t f t p 1 0 . 9 0 . 9 0 . 1 c o n f i g _ s t p . T x t i n c l u d e " s t p " c o m m a n d : u p l o a d c f g _ t o t f t p 1 0 . 9 0 . 9 0 . 1 c o n f i g _ s t p . T x t i n c l...

  • Page 84

    Des-1228/me metro ethernet managed switch cli reference guide 80 enable autoconfig purpose used to activate the auto configuration function for the switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig description when autoconfig is enabled on the swi...

  • Page 85

    Des-1228/me metro ethernet managed switch cli reference guide 81 des-1228/me metro ethernet switch command line interface firmware: build 2.01.001 copyright(c) 2012 d-link corporation. All rights reserved. Username: password: des-1228/me:5#download cfg_fromtftp 10.41.44.44 c:\cfg\setting.Txt command...

  • Page 86

    Des-1228/me metro ethernet managed switch cli reference guide 82 disable autoconfig purpose use this to deactivate auto configuration from dhcp. Syntax disable autoconfig description this command is used to instruct the switch not to accept auto configuration instruction from the dhcp server. This d...

  • Page 87

    Des-1228/me metro ethernet managed switch cli reference guide 83 show autoconfig purpose used to display the current autoconfig status of the switch. Syntax show autoconfig description this command is used to list the current status of the auto configuration function. Parameters none. Restrictions n...

  • Page 88

    Des-1228/me metro ethernet managed switch cli reference guide 84 ping purpose used to test the connectivity between network devices. Syntax ping {times } {size } {timeout } description the command is used to send internet control message protocol (icmp) echo messages to a remote ip address. The remo...

  • Page 89

    Des-1228/me metro ethernet managed switch cli reference guide 85 ping6 restrictions none. Example usage: to ping the ipv6 address “fe80::254:85ff:fe32:1804” six times: des-1228/me:5#ping6 fe80::254:85ff:fe32:1804%system times 6 command: ping6 fe80::254:85ff:fe32:1804%system times 6 reply from fe80::...

  • Page 90

    Des-1228/me metro ethernet managed switch cli reference guide 86 traceroute purpose used to trace the routed path between the switch and a destination endstation. Syntax traceroute {ttl } {port } {timeout } {probe } description this command is used to trace the routed path between the switch and a d...

  • Page 92: Etwork

    Des-1228/me metro ethernet managed switch cli reference guide 88 10 n etwork m onitoring c ommands the network monitoring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters show packet ports show error ports show...

  • Page 93

    Des-1228/me metro ethernet managed switch cli reference guide 89 each command is listed, in detail, in the following sections: show packet ports purpose used to display stats about packets sent and received by the switch. Syntax show packet ports description this command is used to display statistic...

  • Page 94

    Des-1228/me metro ethernet managed switch cli reference guide 90 show error ports purpose used to display the error statistics for a range of ports. Syntax show error ports description this command is used to display all of the packet error statistics collected and logged by the switch for a given p...

  • Page 96

    Des-1228/me metro ethernet managed switch cli reference guide 92 to display the current flash memory utilization: des-1228/me:5#show utilization flash command: show utilization flash flash memory utilization : total flash : 16,384 kb used flash : 7,371 kb utilization : 44% ctrl+c esc q quit space n ...

  • Page 97

    Des-1228/me metro ethernet managed switch cli reference guide 93 clear counters purpose used to clear the switch’s statistics counters. Syntax clear counters {ports } description this command is used to clear the counters used by the switch to compile statistics. Parameters − specifies a port or ran...

  • Page 98

    Des-1228/me metro ethernet managed switch cli reference guide 94 show log purpose used to display the switch history log. Syntax show log {index } description this command is used to display the contents of the switch’s history log. Parameters index − this command will display the history log, begin...

  • Page 99

    Des-1228/me metro ethernet managed switch cli reference guide 95 disable syslog purpose used to disable the system log to be sent to a remote host. Syntax disable syslog description this command is used to disable the system log to be sent to a remote host. Parameters none. Restrictions only adminis...

  • Page 101

    Des-1228/me metro ethernet managed switch cli reference guide 97 create syslog host 0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslog 6 line printer subsystem 7 network news subsystem 8 uucp subsystem 9 ...

  • Page 102

    Des-1228/me metro ethernet managed switch cli reference guide 98 example usage: to create a syslog host: des-1228/me:5#create syslog host 1 ipaddress 10.68.88.1 severity all facility local0 command: create syslog host 1 ipaddress 10.68.88.1 severity all facility local0 success. Des-1228/me:5# config...

  • Page 103

    Des-1228/me metro ethernet managed switch cli reference guide 99 parameters numerical facility code 0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslog 6 line printer subsystem 7 network news subsystem 8 u...

  • Page 104

    Des-1228/me metro ethernet managed switch cli reference guide 100 example usage: to configure a syslog host: des-1228/me:5#config syslog host 1 severity all facility local0 command: config syslog host all severity all facility local0 success. Des-1228/me:5# to configure a syslog host for all hosts: ...

  • Page 105

    Des-1228/me metro ethernet managed switch cli reference guide 101 show syslog host purpose used to display the syslog hosts currently configured on the switch. Syntax show syslog host {} description this command is used to display the syslog hosts that are currently configured on the switch. Paramet...

  • Page 107

    Des-1228/me metro ethernet managed switch cli reference guide 103 enable command logging purpose used to enable command logging. Syntax enable command logging description this command is used to enable the command logging function. Note: when the switch is under booting procedure, all configuration ...

  • Page 108

    Des-1228/me metro ethernet managed switch cli reference guide 104 example usage: to show the command logging configuration status: des-1228/me:5# show command logging command: show command logging command logging state : disabled des-1228/me:5#.

  • Page 109: Ultiple

    Des-1228/me metro ethernet managed switch cli reference guide 105 11 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, is a standard defined b...

  • Page 111

    Des-1228/me metro ethernet managed switch cli reference guide 107 enable stp purpose used to globally enable stp on the switch. Syntax enable stp description this command is used to globally enable the spanning tree protocol on the switch. Parameters none. Restrictions only administrator level, oper...

  • Page 115

    Des-1228/me metro ethernet managed switch cli reference guide 111 example usage: to configure stp with path cost auto, hellotime 2 seconds, migration enable, and state enable for ports 1 to 2: des-1228/me:5#config stp ports 1-2 externalcost auto hellotime 2 migrate yes state enable command: config s...

  • Page 117

    Des-1228/me metro ethernet managed switch cli reference guide 113 delete stp instance_id purpose used to delete a stp instance id from the switch. Syntax delete stp instance_id description this command is used to delete a previously configured stp instance id from the switch. Parameters − enter a va...

  • Page 120

    Des-1228/me metro ethernet managed switch cli reference guide 116 show stp purpose used to display the switch’s current stp configuration. Syntax show stp description this command is used to display the switch’s current stp configuration. Parameters none restrictions none. Example usage: to display ...

  • Page 121

    Des-1228/me metro ethernet managed switch cli reference guide 117 status 2 : stp enabled for rstp des-1228/me:5#show stp command: show stp stp bridge global settings -------------------------- stp status : enabled stp version : rstp max age : 20 hello time : 2 forward delay : 15 max hops : 20 tx hol...

  • Page 122

    Des-1228/me metro ethernet managed switch cli reference guide 118 show stp ports purpose used to display the switch’s current stp ports configuration. Syntax show stp ports {} {instance } description this command is used to display the stp port settings for a specified port or group of ports. Parame...

  • Page 123

    Des-1228/me metro ethernet managed switch cli reference guide 119 show stp instance purpose used to display the switch’s stp instance configuration syntax show stp instance {} description this command is used to display the switch’s current stp instance settings and the stp instance operational stat...

  • Page 124

    Des-1228/me metro ethernet managed switch cli reference guide 120 show stp mst_config_id purpose used to display the mstp configuration identification. Syntax show stp mst_config_id description this command is used to display the switch’s current mstp configuration identification. Parameters none. R...

  • Page 125: Orwarding

    Des-1228/me metro ethernet managed switch cli reference guide 121 12 f orwarding d atabase c ommands the layer 2 forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters create fdb port create multi...

  • Page 126

    Des-1228/me metro ethernet managed switch cli reference guide 122 create fdb purpose used to create a static entry in the unicast mac address forwarding table (database). Syntax create fdb port description this command is used to make an entry in the switch’s unicast mac address forwarding database....

  • Page 128

    Des-1228/me metro ethernet managed switch cli reference guide 124 example usage: to set the fdb aging time: des-1228/me:5#config fdb aging_time 300 command: config fdb aging_time 300 success. Des-1228/me:5# delete fdb purpose used to delete an entry to the switch’s forwarding database. Syntax delete...

  • Page 130

    Des-1228/me metro ethernet managed switch cli reference guide 126 example usage: to display the multicast mac address table: des-1228/me:5#show multicast_fdb vlan default command: show multicast_fdb vlan default vlan name : default mac address : 01-00-5e-00-00-00 egress ports : 1-5 mode : static tot...

  • Page 131

    Des-1228/me metro ethernet managed switch cli reference guide 127 example usage: to display unicast mac address table: des-1228/me:5#show fdb command: show fdb unicast mac address ageing time = 300 vid vlan name mac address port type ---- ------------------------ ----------------- ---- -------- 1 de...

  • Page 132

    Des-1228/me metro ethernet managed switch cli reference guide 128 show multicast port_filtering_mode purpose used to show the multicast packet filtering mode for ports. Syntax show multicast port_filtering_mode description this command is used to display the current multicast packet filtering mode f...

  • Page 133: Acket

    Des-1228/me metro ethernet managed switch cli reference guide 129 13 p acket s torm c ontrol c ommands on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious endstation o...

  • Page 134

    Des-1228/me metro ethernet managed switch cli reference guide 130 config traffic control purpose used to configure broadcast/multicast/unicast packet storm control. The software mechanism is provided to monitor the traffic rate in addition to the hardware storm control mechanism previously provided....

  • Page 135

    Des-1228/me metro ethernet managed switch cli reference guide 131 example usage: to configure traffic control and enable broadcast storm control for ports 1 to 12: des-1228/me:5#config traffic control 1-12 broadcast enable action shutdown threshold 64 countdown 10 time_interval 10 command: config tr...

  • Page 137: Ommands

    Des-1228/me metro ethernet managed switch cli reference guide 133 14 q o s c ommands the switch supports 802.1p priority queuing. The switch has four priority queues. These priority queues are numbered from 3 (class 3) — the highest priority queue — to 0 (class 0) — the lowest priority queue. The ei...

  • Page 139

    Des-1228/me metro ethernet managed switch cli reference guide 135 show bandwidth_control purpose used to display the bandwidth control table. Syntax show bandwidth_control {} description this command is used to display the current bandwidth control configuration on the switch, on a port-by-port basi...

  • Page 141

    Des-1228/me metro ethernet managed switch cli reference guide 137 show scheduling purpose used to display the currently configured traffic scheduling on the switch. Syntax show scheduling description this command is used to display the current traffic scheduling mechanisms in use on the switch. Para...

  • Page 142

    Des-1228/me metro ethernet managed switch cli reference guide 138 example usage: to configure the traffic scheduling mechanism for each qos queue: des-1228/me:5#config scheduling_mechanism strict command: config scheduling_mechanism strict success. Des-1228/me:5# show scheduling_mechanism purpose us...

  • Page 143

    Des-1228/me metro ethernet managed switch cli reference guide 139 config 802.1p user_priority purpose used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the switch. Syntax config 802.1p user_priority description this command is used to configur...

  • Page 144

    Des-1228/me metro ethernet managed switch cli reference guide 140 show 802.1p user_priority purpose used to display the current mapping between an incoming packet’s 802.1p priority value and one of the switch’s four hardware priority queues. Syntax show 802.1p user_priority description this command ...

  • Page 145

    Des-1228/me metro ethernet managed switch cli reference guide 141 config 802.1p default_priority purpose used to configure the 802.1p default priority settings on the switch. If an untagged packet is received by the switch, the priority configured with this command will be written to the packet’s pr...

  • Page 146

    Des-1228/me metro ethernet managed switch cli reference guide 142 show 802.1p default_priority purpose used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p default_priority {...

  • Page 148

    Des-1228/me metro ethernet managed switch cli reference guide 144 show cos mapping purpose used to show cos mapping. Syntax show cos mapping {port } description this command is used to display information regarding cos mapping enabled ports and their mapping method. Parameters − specifies a range of...

  • Page 149

    Des-1228/me metro ethernet managed switch cli reference guide 145 config cos tos value purpose used to map the tos value in the ip header of incoming packets to one of the four hardware queues available on the switch. Syntax config cos tos value [class ] description this command is used to configure...

  • Page 150

    Des-1228/me metro ethernet managed switch cli reference guide 146 config dscp_mapping purpose used to map the dscp value in the ip header of incoming packet to one of the four hardware queues available on the switch. Syntax config dscp_mapping dscp_value [class 3>] description this command is used t...

  • Page 151

    Des-1228/me metro ethernet managed switch cli reference guide 147 show dscp_mapping purpose used to show dscp value map to traffic class. Syntax show dscp_mapping {dscp_value } description this command displays the information for dscp mapping to traffic class. Parameters − the dscp value of the inc...

  • Page 153

    Des-1228/me metro ethernet managed switch cli reference guide 149 example usage: to add the mirroring ports: des-1228/me:5#config mirror port 1 add source ports 2-7 both command: config mirror port 1 add source ports 2-7 both success. Des-1228/me:5# example usage: to delete the mirroring ports: des-...

  • Page 154

    Des-1228/me metro ethernet managed switch cli reference guide 150 example usage: to disable mirroring configurations: des-1228/me:5#disable mirror command: disable mirror success. Des-1228/me:5# show mirror purpose used to show the current port mirroring configuration on the switch. Syntax show mirr...

  • Page 157

    Des-1228/me metro ethernet managed switch cli reference guide 153 example usage: to add 4 through 8 as tagged ports to the vlan v1: des-1228/me:5#config vlan v1 add tagged 4-8 command: config vlan v1 add tagged 4-8 success. Des-1228/me:5# to delete ports from a vlan: des-1228/me:5#config vlan v1 del...

  • Page 158

    Des-1228/me metro ethernet managed switch cli reference guide 154 example usage: to delete a vlan id on the switch: des-1228/me:5#delete vlan vlanid 5 command: delete vlan vlanid 5 success des-1228/me:5# config vlan vlanid purpose used to add additional ports to a previously configured vlan. Syntax ...

  • Page 159

    Des-1228/me metro ethernet managed switch cli reference guide 155 enable pvid auto_assign purpose used to enable auto-assignment of pvid. Syntax enable pvid auto_assign description this command is used to enable auto-assignment of pvid. Parameters none. Restrictions only administrator level, operato...

  • Page 160

    Des-1228/me metro ethernet managed switch cli reference guide 156 example usage: to display the pvid auto-assignment state: des-1228/me:5#show pvid auto_assign command: show pvid auto_assign pvid auto-assignment: enabled des-1228/me:5# config gvrp purpose used to configure gvrp on the switch. Syntax...

  • Page 161

    Des-1228/me metro ethernet managed switch cli reference guide 157 enable gvrp purpose used to enable gvrp on the switch. Syntax enable gvrp description this command, along with disable gvrp below, is used to enable and disable gvrp on the switch, without changing the gvrp configuration on the switch...

  • Page 163

    Des-1228/me metro ethernet managed switch cli reference guide 159 show gvrp purpose used to display the gvrp status for a port list on the switch. Syntax show gvrp {} description this command is used to display the gvrp status for a port list on the switch. Parameters − specifies a port or range of ...

  • Page 164: Ink

    Des-1228/me metro ethernet managed switch cli reference guide 160 17 l ink a ggregation c ommands the link aggregation commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters create link_aggregation group_id {type [la...

  • Page 165

    Des-1228/me metro ethernet managed switch cli reference guide 161 delete link_aggregation group_id purpose used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id description this command is used to delete a previously configured link aggregation group....

  • Page 167

    Des-1228/me metro ethernet managed switch cli reference guide 163 example usage: to display link aggregation configuration: des-1228/me:5#show link_aggregation command: show link_aggregation link aggregation algorithm = mac-source group id : 1 type: : trunk master port : member port : active port : ...

  • Page 168

    Des-1228/me metro ethernet managed switch cli reference guide 164 show lacp_ports purpose used to display current lacp port mode settings. Syntax show lacp_ports {} description this command is used to display the lacp mode settings as they are currently configured. Parameters − specifies a port or r...

  • Page 171

    Des-1228/me metro ethernet managed switch cli reference guide 167 example usage: to configure an interface’sipv4 network address: des-1228/me:5# config ipif system ipaddress 10.48.74.122/8 command: config ipif system ipaddress 10.48.74.122/8 success. Des-1228/me:5# to configure an interface’s dhcp o...

  • Page 172

    Des-1228/me metro ethernet managed switch cli reference guide 168 example usage: to display ip interface settings: des-1228/me:5# show ipif command: show ipif ip interface settings interface name ip address subnet mask vlan name admin. State link status member ports dhcp option12 state dhcp option12...

  • Page 173

    Des-1228/me metro ethernet managed switch cli reference guide 169 enable autoconfig purpose used to activate the auto configuration function for the switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig description when autoconfig is enabled on the sw...

  • Page 174

    Des-1228/me metro ethernet managed switch cli reference guide 170 example usage: to enable auto configuration on the switch: des-1228/me:5#disable autoconfig command: disable autoconfig success. Des-1228/me:5# delete ipif purpose used to delete an interface. Syntax delete ipif [system] [ipv6address ...

  • Page 175

    Des-1228/me metro ethernet managed switch cli reference guide 171 des-1228/me:5#enable ipif_ipv6_link_local_auto system command: enable ipif_ipv6_link_local_auto system success. Des-1228/me:5# disable ipif_ipv6_link_local_auto purpose used to disable the auto configuration of a link local address wh...

  • Page 178

    Des-1228/me metro ethernet managed switch cli reference guide 174 config igmp_snooping querier purpose used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members and the permitted packet loss that guarantees igmp snooping. ...

  • Page 179

    Des-1228/me metro ethernet managed switch cli reference guide 175 example usage: to configure igmp snooping querier: des-1228/me:5#config igmp_snooping querier vlan_name default query_interval 125 state enable command: config igmp_snooping querier vlan_name default query_interval 125 state enable su...

  • Page 181

    Des-1228/me metro ethernet managed switch cli reference guide 177 disable igmp_snooping purpose used to disable igmp snooping on the switch. Syntax disable igmp_snooping {forward_mcrouter_only} description this command is used to disable igmp snooping on the switch. If forward_mcrouter_only is speci...

  • Page 182

    Des-1228/me metro ethernet managed switch cli reference guide 178 example usage: to show igmp snooping: des-1228/me:5#show igmp_snooping command: show igmp_snooping igmp snooping global state : disabled multicast router only : disabled data driven learning max entries : 56 vlan name : default query ...

  • Page 183

    Des-1228/me metro ethernet managed switch cli reference guide 179 example usage: to display the router ports. Des-1228/me:5#show router_ports command: show router_ports vlan name : default static router port : dynamic router port: forbidden router port: total entries: 1 des-1228/me:5# show igmp_snoo...

  • Page 185

    Des-1228/me metro ethernet managed switch cli reference guide 181 example usage: to configure igmp snooping data driven learning’s maximum learned entry value: des-1228/me:5# config igmp_snooping data_driven_learning max_learned_entry 1 command: config igmp_snooping data_driven_learning max_learned_...

  • Page 186

    Des-1228/me metro ethernet managed switch cli reference guide 182 show igmp_snooping host restrictions none. Example usage: to display igmp snooping fast leave hosts: des-1228/me:5# show igmp_snooping host command: show igmp_snooping host vlan id group port no igmp host -------- ----------------- --...

  • Page 187

    Des-1228/me metro ethernet managed switch cli reference guide 183 example usage: to enable igmp access control for all ports: des-1228/me:5# config igmp access_authentication ports all state enable command: config igmp access_authentication ports all state enable success. Des-1228/me:5# show igmp ac...

  • Page 188

    Des-1228/me metro ethernet managed switch cli reference guide 184 example usage: to show all igmp snooping forwarding entries located on the switch:: des-1228/me:5# show igmp_snooping forwarding command: show igmp_snooping forwarding vlan name : default source ip : 10.90.90.114 multicast group: 225....

  • Page 190

    Des-1228/me metro ethernet managed switch cli reference guide 186 config dhcp_relay add ipif purpose used to add an ip destination address to the switch's dhcp/bootp relay table. Syntax config dhcp_relay add ipif [system] description this command is used to add an ip address as a destination to forw...

  • Page 192

    Des-1228/me metro ethernet managed switch cli reference guide 188 example usage: to configure dhcp relay option 82 check: des-1228/me:5#config dhcp_relay option_82 check enable command: config dhcp_relay option_82 check enable success. Des-1228/me:5# config dhcp_relay option_82 policy purpose used t...

  • Page 194

    Des-1228/me metro ethernet managed switch cli reference guide 190 example usage: to show the dhcp relay configuration: des-1228/me:5#show dhcp_relay command: show dhcp_relay dhcp/bootp relay status : disabled dhcp/bootp hops count limit : 4 dhcp/bootp relay time threshold : 0 dhcp relay agent inform...

  • Page 195

    Des-1228/me metro ethernet managed switch cli reference guide 191 disable dhcp_relay purpose used to disable the dhcp/bootp relay function on the switch. Syntax disable dhcp_relay description this command is used to disable the dhcp/bootp relay function on the switch. Parameters none. Restrictions o...

  • Page 196: 802.1X

    Des-1228/me metro ethernet managed switch cli reference guide 192 21 802.1x c ommands the switch implements ieee 802.1x port-based and host-based access control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria ...

  • Page 197

    Des-1228/me metro ethernet managed switch cli reference guide 193 each command is listed, in detail, in the following sections: enable 802.1x purpose used to enable the 802.1x server on the switch. Syntax enable 802.1x description this command is used to enable the 802.1x network access control appl...

  • Page 199

    Des-1228/me metro ethernet managed switch cli reference guide 195 example usage: to display the 802.1x authentication states: des-1228/me:5#show 802.1x auth_configuration ports 1 command: show 802.1x auth_configuration ports 1 802.1x : enabled authentication mode : port_based authentication protocol...

  • Page 200

    Des-1228/me metro ethernet managed switch cli reference guide 196 example usage: to display the 802.1x authentication state for host-based 802.1x: des-1228/me:5#show 802.1x auth_state command: show 802.1x auth_state port number : 1 index mac address auth pae state backend state port status ------ --...

  • Page 202

    Des-1228/me metro ethernet managed switch cli reference guide 198 config 802.1x auth_parameter ports purpose used to configure the 802.1x authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1x settings. Syntax config ...

  • Page 203

    Des-1228/me metro ethernet managed switch cli reference guide 199 example usage: to configure 802.1x authentication parameters for ports 1 to 20: des-1228/me:5#config 802.1x auth_parameter ports 1–20 direction both command: config 802.1x auth_parameter ports 1–20 direction both success. Des-1228/me:...

  • Page 204

    Des-1228/me metro ethernet managed switch cli reference guide 200 example usage: to initialize the authentication state machine of all ports: des-1228/me:5# config 802.1x init port_based ports all command: config 802.1x init port_based ports all success. Des-1228/me:5# config 802.1x reauth purpose u...

  • Page 207

    Des-1228/me metro ethernet managed switch cli reference guide 203 example usage: to configure the radius settings: des-1228/me:5#config radius 1 10.48.74.121 key dlink default command: config radius 1 10.48.74.121 key dlink default success. Des-1228/me:5# config radius parameter purpose used to conf...

  • Page 208

    Des-1228/me metro ethernet managed switch cli reference guide 204 example usage: to display radius settings on the switch: des-1228/me:5#show radius command: show radius timeout : 5 seconds retransmit : 2 index ip address auth-port acct-port status key number number ----- ------------------ --------...

  • Page 210

    Des-1228/me metro ethernet managed switch cli reference guide 206 example usage: to configure the configurations for a previously created 802.1x guest vlan: des-1228/me:5#show 802.1x guest_vlan command: show 802.1x guest_vlan guest vlan settings ------------------------------------------------------...

  • Page 211

    Des-1228/me metro ethernet managed switch cli reference guide 207 show acct_client purpose used to display the current radius accounting client. Syntax show acct_client description this command is used to display the current radius accounting client currently configured on the switch. Parameters non...

  • Page 212

    Des-1228/me metro ethernet managed switch cli reference guide 208 show auth_client purpose used to display the current radius authentication client. Syntax show auth_client description this command is used to display the current radius authentication client currently configured on the switch. Parame...

  • Page 213

    Des-1228/me metro ethernet managed switch cli reference guide 209 show auth_diagnostics purpose used to display the current authentication diagnostics. Syntax show auth_diagnostics {ports [} description this command is used to display the current authentication diagnostics of the switch on a per por...

  • Page 214

    Des-1228/me metro ethernet managed switch cli reference guide 210 show auth_session_statistics purpose used to display the current authentication session statistics. Syntax show auth_session_statistics {ports } description this command is used to display the current authentication session statistics...

  • Page 215

    Des-1228/me metro ethernet managed switch cli reference guide 211 example usage: to display the current authentication statistics for port 1: des-1228/me:5#show auth_statistics ports 1 command: show auth_statistics ports 1 port number : 1 mac address: 00-00-07-5d-60-02 eapolframesrx 6 eapolframestx ...

  • Page 216

    Des-1228/me metro ethernet managed switch cli reference guide 212 show 802.1x user purpose used to display the 802.1x user accounts on the switch. Syntax show 802.1x user description this command is used to display the 802.1x port-based or host-based network access control local users currently conf...

  • Page 217: Ccess

    Des-1228/me metro ethernet managed switch cli reference guide 213 22 a ccess c ontrol l ist (acl) c ommands the switch implements access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings and mac address. The access control commands ...

  • Page 219

    Des-1228/me metro ethernet managed switch cli reference guide 215 create access_profile for the rules are entered using the config access_profile command, below. Parameters ethernet − specifies that the switch will examine the layer 2 part of each packet header. Vlan − specifies a vlan mask. Only th...

  • Page 220

    Des-1228/me metro ethernet managed switch cli reference guide 216 create access_profile id number between 1 to 256. Restrictions only administrator level, operator level or power user level users can issue this command. Example usage: to create an access list rule: des-1228/me:5#create access_profil...

  • Page 222

    Des-1228/me metro ethernet managed switch cli reference guide 218 config access_profile tcp − specifies that the switch will examine the transmission control protocol (tcp) field within each packet. Src_port − specifies that the access profile will apply only to packets that have this tcp source por...

  • Page 223

    Des-1228/me metro ethernet managed switch cli reference guide 219 config access_profile operation of the profile mask and this per rule mask. Delete access_id − use this command to delete a specific acl rule from the ethernet profile, ip profile or ipv6 profile. Up to 256 rules may be specified for ...

  • Page 224

    Des-1228/me metro ethernet managed switch cli reference guide 220 des-1228/me:5#show access_profile command: show access_profile access profile table ================================================================================ profile id: 101 type: ipv4 frame filter - icmp ======================...

  • Page 225

    Des-1228/me metro ethernet managed switch cli reference guide 221 create cpu access_profile frame’s header. Icmp − specifies that the switch will examine the internet control message protocol (icmp) field in each frame’s header. Type − specifies that the switch will examine each frame’s icmp type fi...

  • Page 226

    Des-1228/me metro ethernet managed switch cli reference guide 222 delete cpu access_profile syntax delete cpu access_profile profile_id description this command is used to delete a previously created cpu access profile. Parameters profile_id − enter an integer between 1 and 3 that is used to identif...

  • Page 227

    Des-1228/me metro ethernet managed switch cli reference guide 223 config cpu access_profile destination_mac − specifies that the access profile will apply to this destination mac address. Ethernet_type − specifies that the access profile will apply only to packets with this hexadecimal 802.1q ethern...

  • Page 228

    Des-1228/me metro ethernet managed switch cli reference guide 224 config cpu access_profile sequences of packets such as non-default quality of service or real-time service packets. Source_ipv6 − specifies an ip address for the source ipv6 address. Destination_ipv6 − specifies an ip address for the ...

  • Page 229

    Des-1228/me metro ethernet managed switch cli reference guide 225 delete cpu access_profile purpose used to delete a previously created cpu access profile. Syntax delete cpu access_profile profile_id description this command is used to delete a previously created cpu access profile. Parameters profi...

  • Page 230

    Des-1228/me metro ethernet managed switch cli reference guide 226 example usage: to show the cpu filtering state on the switch: des-1228/me:5#show cpu_access_profile command: show cpu_access_profile cpu interface filtering state: enabled access profile table =========================================...

  • Page 231

    Des-1228/me metro ethernet managed switch cli reference guide 227 example usage: to enable cpu interface filtering: des-1228/me:5#enable cpu_interface_filtering command: enable cpu_interface_filtering success. Des-1228/me:5# disable cpu_interface_filtering purpose used to disable cpu interface filte...

  • Page 232: Cpu

    Des-1228/me metro ethernet managed switch cli reference guide 228 23 cpu f iltering c ommands the cpu filtering commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table config cpu_filter l3_control_pkt purpose this command is used to disc...

  • Page 233

    Des-1228/me metro ethernet managed switch cli reference guide 229 example usage: to display the l3 control packet filtering status for port 1 and 2: d e s - 1 2 2 8 / m e : 5 # s h o w c p u _ f i l t e r l 3 _ c o n t r o l _ p k t 1 - 2 c o m m a n d : s h o w c p u _ f i l t e r l 3 _ c o n t r o...

  • Page 234: Afeguard

    Des-1228/me metro ethernet managed switch cli reference guide 230 24 s afeguard e ngine c ommands periodically, malicious hosts on the network will attack the switch by utilizing packet flooding (arp storm) or other methods. These attacks may increase the cpu utilization beyond its capability. To al...

  • Page 236

    Des-1228/me metro ethernet managed switch cli reference guide 232 example usage: to display the safeguard engine status: des-1228/me:5#show safeguard_engine command: show safeguard_engine safeguard engine state : disabled safeguard engine current status : normal mode ================================...

  • Page 237: Raffic

    Des-1228/me metro ethernet managed switch cli reference guide 233 25 t raffic s egmentation c ommands traffic segmentation allows users to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and then the traffic segmenta...

  • Page 238

    Des-1228/me metro ethernet managed switch cli reference guide 234 show traffic_segmentation purpose used to display the current traffic segmentation configuration on the switch. Syntax show traffic_segmentation {} description this command is used to display the current traffic segmentation configura...

  • Page 239: Ime And

    Des-1228/me metro ethernet managed switch cli reference guide 235 26 t ime and sntp c ommands the simple network time protocol (sntp) (an adaptation of the network time protocol (ntp)) commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following ta...

  • Page 240

    Des-1228/me metro ethernet managed switch cli reference guide 236 example usage: to configure sntp settings: des-1228/me:5#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 success. Des-1228/me:5# show sntp purp...

  • Page 241

    Des-1228/me metro ethernet managed switch cli reference guide 237 example usage: to enable the sntp function: des-1228/me:5#enable sntp command: enable sntp success. Des-1228/me:5# disable sntp purpose to disable sntp server support. Syntax disable sntp description this command is used to disable sn...

  • Page 242

    Des-1228/me metro ethernet managed switch cli reference guide 238 example usage: to manually set system time and date settings: des-1228/me:5#config time 30jun2003 16:30:30 command: config time 30jun2003 16:30:30 success. Des-1228/me:5# config time_zone purpose used to determine the time zone used i...

  • Page 243

    Des-1228/me metro ethernet managed switch cli reference guide 239 config dst disable − disable the dst seasonal time adjustment for the switch. Repeating − using repeating mode will enable dst seasonal time adjustment. Repeating mode requires that the dst beginning and ending date be specified using...

  • Page 244

    Des-1228/me metro ethernet managed switch cli reference guide 240 example usage: to configure daylight savings time on the switch: des-1228/me:5#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 command: config dst repeating s_week 2 s_da...

  • Page 246

    Des-1228/me metro ethernet managed switch cli reference guide 242 config arpentry can issue this command. Example usage: to configure a static arp entry for the ip address 10.48.74.12 and mac address 00:50:ba:00:07:36: des-1228/me:5#config arpentry 10.48.74.12 00-50-ba-00-07-36 command: config arpen...

  • Page 248

    Des-1228/me metro ethernet managed switch cli reference guide 244 clear arptable purpose used to remove all dynamic arp table entries. Syntax clear arptable description this command is used to remove dynamic arp table entries from the switch’s arp table. Static arp table entries are not affected. Pa...

  • Page 249: Outing

    Des-1228/me metro ethernet managed switch cli reference guide 245 28 r outing t able c ommands the routing table commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create iproute [default] {} delete iproute [defa...

  • Page 250

    Des-1228/me metro ethernet managed switch cli reference guide 246 delete iproute purpose used to delete a default ip route entry from the switch’s ip routing table. Syntax delete iproute [default] description this command is used to delete an existing default entry from the switch’s ip routing table...

  • Page 251

    Des-1228/me metro ethernet managed switch cli reference guide 247 create ipv6route purpose used to create an ipv6 static route. Syntax create ipv6route [default] [ ] { 65535>} description this command is used to an ipv6 static route. If the next hop is a global address, it is not needed to indicate ...

  • Page 252

    Des-1228/me metro ethernet managed switch cli reference guide 248 show ipv6route purpose used to display ipv6 routes. Syntax show ipv6route description this command is used to display ipv6 routes. Parameters none. Restrictions none. Example usage: to display all the ipv6 routes: des-1228/me:5#show i...

  • Page 253: Mac

    Des-1228/me metro ethernet managed switch cli reference guide 249 29 mac n otification c ommands the mac notification commands in the command line interface (cli) are listed, in the following table, along with their appropriate parameters. Command parameters enable mac_notification disable mac_notif...

  • Page 254

    Des-1228/me metro ethernet managed switch cli reference guide 250 example usage: to disable mac notification without changing basic configuration: des-1228/me:5#disable mac_notification command: disable mac_notification success. Des-1228/me:5# config mac_notification purpose used to configure mac ad...

  • Page 255

    Des-1228/me metro ethernet managed switch cli reference guide 251 example usage: to enable port 7 for mac address table notification: des-1228/me:5#config mac_notification ports 7 enable command: config mac_notification ports 7 enable success. Des-1228/me:5# show mac_notification purpose used to dis...

  • Page 256

    Des-1228/me metro ethernet managed switch cli reference guide 252 example usage: to display all port’s mac address table notification status settings: des-1228/me:5#show mac_notification ports command: show mac_notification ports port # mac address table notification state ------ -------------------...

  • Page 257: Ccess

    Des-1228/me metro ethernet managed switch cli reference guide 253 30 a ccess a uthentication c ontrol c ommands the tacacs / xtacacs / tacacs+ / radius commands allows secure access to the switch using the tacacs / xtacacs / tacacs+ / radius protocols. When a user logs in to the switch or tries to a...

  • Page 259

    Des-1228/me metro ethernet managed switch cli reference guide 255 enable authen_policy purpose used to enable system access authentication policy. Syntax enable authen_policy description this command is used to enable an administrator-defined authentication policy for users trying to access the swit...

  • Page 260

    Des-1228/me metro ethernet managed switch cli reference guide 256 show authen_policy purpose used to display the system access authentication policy status on the switch. Syntax show authen_policy description this command will show the current status of the access authentication policy on the switch...

  • Page 262

    Des-1228/me metro ethernet managed switch cli reference guide 258 config authen_login server. Radius − adding this parameter will require the user to be authenticated using the radius protocol from a remote radius server. Server_group − adding this parameter will require the user to be authenticated...

  • Page 263

    Des-1228/me metro ethernet managed switch cli reference guide 259 example usage: to delete the method list name “zira”: des-1228/me:5#delete authen_login method_list_name zira command: delete authen_login method_list_name zira success. Des-1228/me:5# show authen_login purpose used to display a previ...

  • Page 264

    Des-1228/me metro ethernet managed switch cli reference guide 260 example usage: to view the authentication login method list named zira: des-1228/me:5#show authen_login method_list_name zira command: show authen_login method_list_name zira method list name priority method name comment -------------...

  • Page 265

    Des-1228/me metro ethernet managed switch cli reference guide 261 config authen_enable administrator. A maximum of eight enable method lists can be implemented simultaneously on the switch. The sequence of methods implemented in this command will affect the authentication result. For example, if a u...

  • Page 266

    Des-1228/me metro ethernet managed switch cli reference guide 262 config authen_enable authenticated using the local user account database on the switch. The local enable password of the device can be configured using the “config admin local_password” command. None – adding this parameter will requi...

  • Page 269

    Des-1228/me metro ethernet managed switch cli reference guide 265 example usage: to display the login and enable method list for all applications on the switch: des-1228/me:5#show authen application command: show authen application application login method list enable method list ------------- -----...

  • Page 271

    Des-1228/me metro ethernet managed switch cli reference guide 267 example usage: to create a tacacs+ authentication server host, with port number 1234, a timeout value of 10 seconds and a retransmit count of 5. Des-1228/me:5#create authen server_host 10.1.1.121 protocol tacacs+ port 1234 timeout 10 ...

  • Page 273

    Des-1228/me metro ethernet managed switch cli reference guide 269 example usage: to configure a tacacs+ authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit count of 4. Des-1228/me:5#config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout ...

  • Page 274

    Des-1228/me metro ethernet managed switch cli reference guide 270 show authen server_host purpose used to view a user-defined authentication server host. Syntax show authen server_host description this command is used to view user-defined authentication server hosts previously created on the switch....

  • Page 275

    Des-1228/me metro ethernet managed switch cli reference guide 271 example usage: to create the server group “group_1”: des-1228/me:5#create authen server_group group_1 command: create authen server_group group_1 success. Des-1228/me:5# config authen server_group purpose used to configure a user-defi...

  • Page 276

    Des-1228/me metro ethernet managed switch cli reference guide 272 example usage: to add an authentication host to server group “group_1”: des-1228/me:5# config authen server_group group_1 add server_host 10.1.1.121 protocol tacacs+ command: config authen server_group group_1 add server_host 10.1.1.1...

  • Page 277

    Des-1228/me metro ethernet managed switch cli reference guide 273 example usage: to view authentication server groups currently set on the switch. Des-1228/me:5#show authen server_group command: show authen server_group group name ip address protocol ----------- ----------------------------- -------...

  • Page 278

    Des-1228/me metro ethernet managed switch cli reference guide 274 config authen parameter attempt purpose used to configure the maximum number of times the switch will accept authentication attempts. Syntax config authen parameter attempt description this command is used to configure the maximum num...

  • Page 279

    Des-1228/me metro ethernet managed switch cli reference guide 275 enable admin purpose used to promote user level privileges to administrator level privileges. Syntax enable admin description this command is for users who have logged on to the switch on the normal user level to become promoted to th...

  • Page 280

    Des-1228/me metro ethernet managed switch cli reference guide 276 example usage: to configure the password for the “local_enable” authentication method in plain text: des-1228/me:5#config admin local_enable command: config admin local_enable enter the old password: enter the case-sensitive new passw...

  • Page 281: Ssh

    Des-1228/me metro ethernet managed switch cli reference guide 277 31 ssh c ommands the steps required to use the secure shell (ssh) protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows: create a user account with admin-level access us...

  • Page 282

    Des-1228/me metro ethernet managed switch cli reference guide 278 usage example: to enable ssh: des-1228/me:5#enable ssh command: enable ssh success. Des-1228/me:5# disable ssh purpose used to disable ssh. Syntax disable ssh description this command is used to disable ssh on the switch. Parameters n...

  • Page 283

    Des-1228/me metro ethernet managed switch cli reference guide 279 example usage: to enable the ssh authentication mode by password: des-1228/me:5#config ssh authmode password enable command: config ssh authmode password enable success. Des-1228/me:5# show ssh authmode purpose used to display the ssh...

  • Page 285

    Des-1228/me metro ethernet managed switch cli reference guide 281 usage example: to display the ssh server: des-1228/me:5# show ssh server command: show ssh server ssh server status : disabled ssh max session : 8 connection timeout : 120 (sec) authenticate failed attempts : 2 rekey timeout : never l...

  • Page 286

    Des-1228/me metro ethernet managed switch cli reference guide 282 show ssh user authmode purpose used to display the ssh user setting. Syntax show ssh user authmode description this command is used to display the current ssh user setting. Parameters none. Restrictions only administrator level users ...

  • Page 288

    Des-1228/me metro ethernet managed switch cli reference guide 284 show ssh algorithm purpose used to display the ssh algorithm setting. Syntax show ssh algorithm description this command will display the current ssh algorithm setting status. Parameters none. Restrictions none. Usage example: to disp...

  • Page 289: Smtp

    Des-1228/me metro ethernet managed switch cli reference guide 285 32 smtp c ommands smtp or simple mail transfer protocol is a function of the switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The switch is to be configured as a client...

  • Page 291

    Des-1228/me metro ethernet managed switch cli reference guide 287 example usage: to disable smtp on the switch: des-1228/me:5#disable smtp command: disable smtp success. Des-1228/me:5# config smtp purpose used to configure necessary information in setting up the switch as an smtp client. Syntax conf...

  • Page 292

    Des-1228/me metro ethernet managed switch cli reference guide 288 show smtp purpose used to view configured parameters for the smtp function on the switch. Syntax show smtp description this command is used to display parameters configured for smtp on the switch, including server information, mail re...

  • Page 293

    Des-1228/me metro ethernet managed switch cli reference guide 289 example usage: to send a test mail message to all configured mail recipients: des-1228/me:5# smtp send_testmsg command: smtp send_testmsg subject: this is a smtp test. Content: hello everybody!! Sending mail, please wait… success. Des...

  • Page 295

    Des-1228/me metro ethernet managed switch cli reference guide 291 example usage: to test the cable on ports 25 to 28: des-1228/me:5#cable_diag ports 20-23 command: cable_diag ports 20-23 perform cable diagnostics ... Port type link status test result cable length (m) ---- ------- -------------- ----...

  • Page 298

    Des-1228/me metro ethernet managed switch cli reference guide 294 enable dhcp_local_relay purpose used to enable the dhcp local relay function on the switch. Syntax enable dhcp_local_relay description this command is used to globally enable the dhcp local relay function on the switch. Parameters non...

  • Page 299

    Des-1228/me metro ethernet managed switch cli reference guide 295 example usage: to display the dhcp local relay function: d e s - 1 2 2 8 / m e : 5 # s h o w d h c p _ l o c a l _ r e l a y c o m m a n d : s h o w d h c p _ l o c a l _ r e l a y d h c p / b o o t p l o c a l r e l a y s t a t u s :...

  • Page 300: Ratuitous

    Des-1228/me metro ethernet managed switch cli reference guide 296 35 g ratuitous arp c ommands the gratuitous arp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config gratuitous_arp send ipif_status_up [enab...

  • Page 302

    Des-1228/me metro ethernet managed switch cli reference guide 298 example usage: to enable learning of arp entries based on the received gratuitous arp packets: des-1228/me:5# config gratuitous_arp learning enable command: config gratuitous_arp learning enable success. Des-1228/me:5# config gratuito...

  • Page 303

    Des-1228/me metro ethernet managed switch cli reference guide 299 example usage: to enable the system’s interface gratuitous arp log and trap: des-1228/me:5#enable gratuitous_arp ipif system trap log command: enable gratuitous_arp ipif system trap log success. Des-1228/me:5# disable gratuitous_arp p...

  • Page 304

    Des-1228/me metro ethernet managed switch cli reference guide 300 example usage: to display gratuitous arp log and trap states: des-1228/me:5# show gratuitous_arp command: show gratuitous_arp send on ipif status up : enabled send on duplicate_ip_detected : disabled gratuitous arp learning : enabled ...

  • Page 305: Vlan

    Des-1228/me metro ethernet managed switch cli reference guide 301 36 vlan t runking c ommands the vlan trunking commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable vlan_trunk disable vlan_trunk config vlan_...

  • Page 307

    Des-1228/me metro ethernet managed switch cli reference guide 303 des-1228/me:5# config vlan_trunk ports 6-7 state enable command: config vlan_trunk ports 6-7 state enable can not operate the member ports of any trunk. Des-1228/me:5# config vlan_trunk ports 7 state disable command: config vlan_trunk...

  • Page 308

    Des-1228/me metro ethernet managed switch cli reference guide 304 show vlan_trunk purpose used to display vlan trunk configuration. Syntax show vlan_trunk description this command is used to display vlan trunk information. Parameters none. Restrictions none. Example usage: to display vlan trunk info...

  • Page 309: Symmetric

    Des-1228/me metro ethernet managed switch cli reference guide 305 37 a symmetric vlan c ommands the asymmetric vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters enable asymmetric_vlan disable asymmetric_vla...

  • Page 310

    Des-1228/me metro ethernet managed switch cli reference guide 306 example usage: to disable asymmetric vlans: des-1228/me:5#disable asymmetric_vlan command: disable asymmetric_vlan success. Des-1228/me:5# show asymmetric_vlan purpose used to view the asymmetric vlan state on the switch. Syntax show ...

  • Page 311: Igmp

    Des-1228/me metro ethernet managed switch cli reference guide 307 38 igmp s nooping m ulticast vlan c ommands the igmp snooping multicast vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters create igmp_snoopi...

  • Page 312

    Des-1228/me metro ethernet managed switch cli reference guide 308 example usage: to create an igmp snooping multicast vlan with the vlan name “mv1” and a vlan id of 2: des-1228/me:5# create igmp_snooping multicast_vlan mv1 2 command: create igmp_snooping multicast_vlan mv1 2 success. Des-1228/me:5# ...

  • Page 313

    Des-1228/me metro ethernet managed switch cli reference guide 309 config igmp_snooping multicast_vlan restrictions only administrator level, operator level or power user level users can issue this command. Example usage: to configure an igmp snoop multicast vlan: des-1228/me:5# config igmp_snooping ...

  • Page 314

    Des-1228/me metro ethernet managed switch cli reference guide 310 show igmp_snooping multicast_vlan_group purpose used to display the multicast groups configured for the specified multicast vlan. Syntax show igmp_snooping multicast_vlan_group {} description this command is used to display the multic...

  • Page 315

    Des-1228/me metro ethernet managed switch cli reference guide 311 enable igmp_snooping multicast_vlan purpose used to enable the multicast vlan function. Syntax enable igmp_snooping multicast_vlan description this command is used to control the multicast vlan function. The ism vlan will take effect ...

  • Page 316

    Des-1228/me metro ethernet managed switch cli reference guide 312 example usage: to display igmp snooping multicast vlan information: des-1228/me:5# show igmp_snooping multicast_vlan command: show igmp_snooping multicast_vlan multicast vlan global state : enabled vid : 4001 vlan name: 4001 member po...

  • Page 317: Lldp

    Des-1228/me metro ethernet managed switch cli reference guide 313 39 lldp c ommands the lldp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters enable lldp disable lldp config lldp message_tx_interval config lldp...

  • Page 318

    Des-1228/me metro ethernet managed switch cli reference guide 314 enable lldp purpose used to enable lldp operations on the switch. Syntax enable lldp description this command is used for global control of the lldp function. When this function is enabled, the switch can start to transmit lldp packet...

  • Page 319

    Des-1228/me metro ethernet managed switch cli reference guide 315 config lldp message_tx_interval purpose used to change the packet transmission interval. Syntax config lldp message_tx_interval description this command is used to control how often active ports retransmit advertisements to their neig...

  • Page 320

    Des-1228/me metro ethernet managed switch cli reference guide 316 config lldp tx_delay purpose used to change the minimum time (delay-interval) of any lldp port. It will delay advertising successive lldp advertisements due to a change in lldp mib content. The tx delay defines the minimum interval be...

  • Page 321

    Des-1228/me metro ethernet managed switch cli reference guide 317 config lldp notification_interval purpose used to configure the timer of the notification interval used to send notifications to configured snmp trap receiver(s). Syntax config lldp notification_interval description globally change th...

  • Page 323

    Des-1228/me metro ethernet managed switch cli reference guide 319 example usage to enable port 1 to port 2 to manage address entries: des-1228/me:5# config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable command: config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable success des-1228/me:5# con...

  • Page 324

    Des-1228/me metro ethernet managed switch cli reference guide 320 example usage to configure the switch to exclude the system name tlv from outbound lldp advertisements on all ports: des-1228/me:5# config lldp ports all basic_tlvs system_name enable command: config lldp ports all basic_tlvs system_n...

  • Page 325

    Des-1228/me metro ethernet managed switch cli reference guide 321 config lldp ports dot1_tlv_protocol_vid purpose used to configure an individual port or group of ports to exclude one or more of ieee 802.1 organization protocol identity tlv data types from outbound lldp advertisements. Syntax config...

  • Page 326

    Des-1228/me metro ethernet managed switch cli reference guide 322 config lldp ports dot1_tlv_vlan_name issue this command. Example usage to configure the vlan name tlv from the outbound lldp advertisements for all ports: des-1228/me:5# config lldp ports all dot1_tlv_vlan_name vlanid 1-3 enable comma...

  • Page 329

    Des-1228/me metro ethernet managed switch cli reference guide 325 example usage to display the lldp system level configuration status: des-1228/me:5#show lldp command: show lldp lldp system information chassis id subtype : mac address chassis id : 00-12-28-8e-77-00 system name : system description :...

  • Page 330

    Des-1228/me metro ethernet managed switch cli reference guide 326 example usage to display the lldp per port tlv option configuration: des-1228/me:5# show lldp ports 1 command: show lldp ports 1 port id : 1 --------------------------------------------------------------------- admin status : tx_and_r...

  • Page 331

    Des-1228/me metro ethernet managed switch cli reference guide 327 example usage to display outbound lldp advertisements for individual ports in detail: des-1228/me:5# show lldp local_ports 1 mode detailed command: show lldp local_ports 1 mode detailed port id : 1 ------------------------------------...

  • Page 332

    Des-1228/me metro ethernet managed switch cli reference guide 328 to display outbound lldp advertisements for specific ports in brief mode: des-1228/me:5# show lldp local_ports 1 mode brief command: show lldp local_ports 1 mode brief port id : 1 ------------------------------------------------------...

  • Page 333

    Des-1228/me metro ethernet managed switch cli reference guide 329 example usage to display remote table entries in brief mode: des-1228/me:5# show lldp remote_ports 1-2 brief command: show lldp remote_ports 1-2 brief port id: 1 ----------------------------------------------------------- remote entit...

  • Page 334

    Des-1228/me metro ethernet managed switch cli reference guide 330 to display remote table entries in normal mode: des-1228/me:5# show lldp remote_ports ports 1 normal command: show lldp remote_ports ports 1 normal port id : 1 ----------------------------------------------------------- remote entitie...

  • Page 335

    Des-1228/me metro ethernet managed switch cli reference guide 331 des-1228/me:5# show lldp remote_ports 1 mode detailed command: show lldp remote_ports 1 mode detailed port id : 1 ---------------------------------------------------------------------- remote entities count : 1 entity 1 chassis id sub...

  • Page 336

    Des-1228/me metro ethernet managed switch cli reference guide 332 (none.) des-1228/me:5# show lldp statistics purpose used to display the system lldp statistics information. Syntax show lldp statistics description this command is used to display an overview of neighbor detection activity on the swit...

  • Page 337

    Des-1228/me metro ethernet managed switch cli reference guide 333 example usage to display statistics information of port 1: des-1228/me:5# show lldp statistics ports 1 command: show lldp statistics ports 1 port id: 1 ----------------------------------------------------------- lldpstatstxportframest...

  • Page 338: Revention

    Des-1228/me metro ethernet managed switch cli reference guide 334 40 d o s p revention c ommands the dos prevention commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters config dos_prevention dos_type [ {land_attack...

  • Page 340

    Des-1228/me metro ethernet managed switch cli reference guide 336 enable dos_prevention trap_log purpose used to enable a dos prevention trap/log. Syntax enable dos_prevention trap_log description this command is used to send traps and logs when a dos attack event occurs. The event will be logged on...

  • Page 342

    Des-1228/me metro ethernet managed switch cli reference guide 338 to display dos prevention information for land attack: des-1228/me:5# show dos_prevention land_attack command: show dos_prevention land_attack dos type: land attack state: enabled action: mirror port: 7 priority: 5 rx rate(kbit/sec): ...

  • Page 343

    Des-1228/me metro ethernet managed switch cli reference guide 339 example usage to clear all counters of the prevention of each dos attack: des-1228/me:5# clear dos_prevention counters command: clear dos_prevention counters success. Des-1228/me:5#.

  • Page 344: Ip-Mac-P

    Des-1228/me metro ethernet managed switch cli reference guide 340 41 ip-mac-p ort b inding c ommands the ip network layer uses a four-byte address. The ethernet link layer uses a six-byte mac address. Binding these two address types together allows the transmission of data between the layers. The pr...

  • Page 346

    Des-1228/me metro ethernet managed switch cli reference guide 342 example usage: to configure address binding on the switch: des-1228/me:5#config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00- 00-00-00-00-05 command: config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00- 00-0...

  • Page 348

    Des-1228/me metro ethernet managed switch cli reference guide 344 to display address binding entries on the switch: des-1228/me:5#show address_binding ip_mac all command: show address_binding ip_mac all ip address mac address ports --------------- ----------------- --------------- 10.1.1.1 00-00-00-...

  • Page 350

    Des-1228/me metro ethernet managed switch cli reference guide 346 enable address_binding trap_log purpose used to enable the trap log for the ip-mac-port binding function. Syntax enable address_binding trap_log description this command, along with the disable address_binding trap_log will enable and...

  • Page 351: Oopback

    Des-1228/me metro ethernet managed switch cli reference guide 347 42 l oopback d etection c ommands the loopback detection commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters config loopdetect { recover_timer [ 0 ...

  • Page 354

    Des-1228/me metro ethernet managed switch cli reference guide 350 enable loopdetect purpose used to globally enable the loop-detect function on the switch. Syntax enable loopdetect description this command is used to allow the loop detection function to be globally enabled on the switch. The default...

  • Page 355

    Des-1228/me metro ethernet managed switch cli reference guide 351 show loopdetect purpose used to display the switch’s current loopback detection configuration. Syntax show loopdetect description this command is used to display the switch’s current loopback detection configuration. Parameters none. ...

  • Page 358: Low

    Des-1228/me metro ethernet managed switch cli reference guide 354 43 f low m eter c ommands the flow meter commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters config flow_meter profile_id access_id [[ rate 1024000...

  • Page 360

    Des-1228/me metro ethernet managed switch cli reference guide 356 show flow_meter purpose used to display the flow-based metering configuration. Syntax show flow_meter {profile_id {access_id }} description this command displays the flow meter configuration. Parameters profile_id – specifies the prof...

  • Page 361: Arp

    Des-1228/me metro ethernet managed switch cli reference guide 357 44 arp s poofing p revention c ommands the arp spoofing prevention commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters config arp_spoofing_preventi...

  • Page 363

    Des-1228/me metro ethernet managed switch cli reference guide 359 show arp_spoofing_prevention purpose used to display arp spoofing prevention entries. Syntax show arp_spoofing_prevention description this command is used to display arp spoofing prevention entries. Parameters none. Restrictions none....

  • Page 364: Echnical

    Des-1228/me metro ethernet managed switch cli reference guide 360 45 t echnical s upport c ommands the technical support commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters show tech_support upload tech_support_to...

  • Page 365

    Des-1228/me metro ethernet managed switch cli reference guide 361 des-1228/me:5#show tech_support command: show tech_support ============================================================================= des-1228/me metro ethernet switch technique information report ==================================...

  • Page 366

    Des-1228/me metro ethernet managed switch cli reference guide 362 upload tech_support_totftp purpose used to upload information for assistance from technical support. Syntax upload tech_support_totftp description this command is used to upload information for assistance from technical support to a t...

  • Page 367: Ommand

    Des-1228/me metro ethernet managed switch cli reference guide 363 46 c ommand h istory c ommands the command history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table: command parameters ? Dir config command_history show command_hi...

  • Page 368

    Des-1228/me metro ethernet managed switch cli reference guide 364 example usage to display all of the commands in the cli: des-1228/me:5#? .. ? Cable_diag ports clear clear arptable clear counters clear dos_prevention counters clear fdb clear igmp_snooping data_driven_group clear log clear mac_based...

  • Page 369

    Des-1228/me metro ethernet managed switch cli reference guide 365 dir purpose used to display all commands in the command line interface (cli). Syntax dir description this command is used to display all of the commands available through the command line interface (cli). Parameters none. Restrictions...

  • Page 370

    Des-1228/me metro ethernet managed switch cli reference guide 366 config command_history purpose used to configure the command history. Syntax config command_history description this command is used to configure the command history. Parameters − the number of previously executed commands maintained ...

  • Page 371: Bpdu

    Des-1228/me metro ethernet managed switch cli reference guide 367 47 bpdu a ttack p rotection c ommands the bpdu attack protection commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config bpdu_protection ports [...

  • Page 373

    Des-1228/me metro ethernet managed switch cli reference guide 369 example usage: to set the bpdu attack protection port state to enable and drop mode: des-1228/me:5# config bpdu_protection ports 1 state enable mode drop commands: config bpdu_protection ports 1 state enable mode drop success. Des-122...

  • Page 375

    Des-1228/me metro ethernet managed switch cli reference guide 371 enable bpdu_protection purpose used to globally enable bpdu attack protection on the switch. Syntax enable bpdu_protection description use this to enable bpdu attack protection. Note: the bpdu attack protection function and spanning t...

  • Page 376

    Des-1228/me metro ethernet managed switch cli reference guide 372 disable bpdu_protection purpose used to disable bpdu attack protection on the switch. Syntax disable bpdu_protection description use this to disable bpdu attack protection on the entire switch. Note that if bpdu attack protection is d...

  • Page 377

    Des-1228/me metro ethernet managed switch cli reference guide 373 example usage: to display bpdu protection settings for ports: des-1228/me:5# show bpdu_protection ports 1-12 commands: show bpdu_protection ports 1-12 port state mode status ------ ------------ ----------- ---------- 1 enabled shutdow...

  • Page 378: Ppp

    Des-1228/me metro ethernet managed switch cli reference guide 374 48 ppp o e c ircuit id i nsertion c ommands pppoe circuit id insertion is used to produce the unique subscriber mapping capability that is possible on atm networks between atm-dsl local loop and the pppoe server. The pppoe server will...

  • Page 379

    Des-1228/me metro ethernet managed switch cli reference guide 375 config pppoe circuit_id_insertion ports purpose used to enable and disable pppoe circuit identifier insertion on a per port basis and specify how to encode the circuit id option. Syntax config pppoe circuit_id_insertion ports { circui...

  • Page 380

    Des-1228/me metro ethernet managed switch cli reference guide 376 example usage: to view the global pppoe id insertion state: des-1228/me:5# show pppoe circuit_id_insertion command: show pppoe circuit_id_insertion status: disabled des-1228/me:5# show pppoe circuit_id_insertion ports purpose used to ...

  • Page 381: Dhcp

    Des-1228/me metro ethernet managed switch cli reference guide 377 49 dhcp s erver s creening s ettings due to this function allow you not only to restrict all dhcp server packets but also to receive any specified dhcp server packet by any specified dhcp client, it is useful when one or more than one...

  • Page 382

    Des-1228/me metro ethernet managed switch cli reference guide 378 example usage: to add an entry from the dhcp server/client filter list in the switch’s database: des-1228/me:5#config filter dhcp_server add permit_server_ip 10.1.1.1 client_mac 00-00-00-00-00- 01 port all command: config filter dhcp_...

  • Page 384: Eighbour

    Des-1228/me metro ethernet managed switch cli reference guide 380 50 ip v 6 n eighbour d iscovery c ommands the ipv6 neighbor discovery commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Create ipv6 neighbor_cache ipif delete ipv6 ...

  • Page 385

    Des-1228/me metro ethernet managed switch cli reference guide 381 delete ipv6 neighbor_cache ipif all – all entries, including static and dynamic entries, will be deleted. Static − delete the static entries. Dynamic − delete the dynamic entries. Restrictions only administrator level, operator level ...

  • Page 386

    Des-1228/me metro ethernet managed switch cli reference guide 382 show ipv6 nd purpose used to display the interface’s information. Syntax show ipv6 nd {ipif } description this command is used to display the ipv6 nd related configuration. Parameters − the name of the interface. Restrictions none. Ex...

  • Page 387

    Des-1228/me metro ethernet managed switch cli reference guide 383.

  • Page 389

    Des-1228/me metro ethernet managed switch cli reference guide 385 des-1228/me:5#debug error_log dump command: debug error_log dump ********************************************************************** # debug log: 1 # level: cpu exception # clock: 2074870 ms # time : 0000-00-00 00:34:34 ===========...

  • Page 390

    Des-1228/me metro ethernet managed switch cli reference guide 386 834f83b0 cputilu 834fc680 834f8684 0k/ 16k 1021 20/ 20 sleep 8470ba90 lldptim 83b02b80 83b01784 0k/ 5k 2044 45/ 45 sleep 87fff8a0 bcmdpc 87fff890 87ffb894 0k/ 16k 1 50/ 50 s:sal_dpc 87b6a3c0 bcmtx 87b6a3b0 87b663b4 0k/ 16k 1 50/ 50 s:...

  • Page 391

    Des-1228/me metro ethernet managed switch cli reference guide 387 e:tracert 81bab48c tn_5 81c1bfc0 81c0bfc4 3k/ 64k 2 75/ 75 e:tn_5 82a6e27c ssh_1 82a9f8e0 82a8f8e4 0k/ 64k 3 75/ 75 e:ssh_1 81baaef4 tn_3 81bfbfc0 81bebfc4 3k/ 64k 2 75/ 75 e:tn_3 81baac28 tn_2 81bebfc0 81bdbfc4 3k/ 64k 2 75/ 75 e:tn_...

  • Page 392

    Des-1228/me metro ethernet managed switch cli reference guide 388 e:bpr_eve 80febbb4 radiusc 80fd8050 80fd4054 0k/ 16k 25 75/ 75 q:ets 81c4fec0 tnc_mon 81ca0190 81c98194 0k/ 32k 2 75/ 75 e:tncmone 835c0180 linknot 835c8450 835c0454 0k/ 32k 1f 75/ 75 q:linknot 8377ed38 bpdutun 83783008 8377f00c 0k/ 1...

  • Page 393

    Des-1228/me metro ethernet managed switch cli reference guide 389 s:counter 835b36d8 syslogt 835b79a8 835b39ac 0k/ 16k 11 180/180 e:sysloge 83631a30 pktstor 83635d00 83631d04 0k/ 16k e0fd 190/190 q:st_stor 837c30c0 pppoe_t 837c5390 837c3394 0k/ 8k 2 190/190 q:pppoe_q 87fa2a40 bcmarl. 87fa2a30 87f9ea...

  • Page 394

    Des-1228/me metro ethernet managed switch cli reference guide 390 82a6df38 ssh_6 0 1 82a6def4 ssh_5 0 1 82a6deb0 ssh_4 0 1 82a6de6c ssh_3 0 1 82a6de28 ssh_2 0 1 82a6dde4 ssh_1 0 1 82a6dda0 ssh_0 0 1 82b0fbb0 ssh 1 0 83c0c470 dhcpcfg 0 0 81ba13c8 dhcppev 0 0 81b9d050 bootpev 0 0 837d84c8 web 1 0 81ba...

  • Page 395

    Des-1228/me metro ethernet managed switch cli reference guide 391 809b5110 arlsynr 0 1 80956498 5482wae 0 1 80950860 sys_tim 0 1 80935a70 sysrun 1 0 total event-group: 45 ---------------------------------------------------------------------- memory name base size max_req alloc blks free n fre_max_bl...

  • Page 396

    Des-1228/me metro ethernet managed switch cli reference guide 392 block name base blk_sz blk_num max_req n_alloc freeblks 835b79c0 syslogp 835b7d94 60 231 0 15808 231 total memory block: 1 --------------------task info-------------------- task name stacktop curstksp stacksize schcnt prio(i) status 8...

  • Page 397

    Des-1228/me metro ethernet managed switch cli reference guide 393 80a4a368 : 00000008 80255be0 0000001a 00000008 80a4a378 : 802cfb4c 876ecd40 80247308 802472d8 80a4a388 : 802133fc 00000001 00000000 80a4a408 80a4a398 : 00000000 00000000 00000000 87482bb0 80a4a3a8 : 00000000 00000001 00000001 00000008...

  • Page 398

    Des-1228/me metro ethernet managed switch cli reference guide 394 debug config error_reboot description set if the switch needs to be rebooted when a fatal error occurs. Parameters enable − need to reboot the switch when fatal error happens (if the project does not define the default setting, enable...

  • Page 400

    Des-1228/me metro ethernet managed switch cli reference guide 396 example usage: to show bpdu tunneling state of all ports: des-1228:5#show bpdu_tunnel command: show bpdu_tunnel bpdu tunnel : enabled stp tunnel multicast address : 01-05-5d-00-00-00 stp tunnel ports : 1,2 gvrp tunnel multicast adrres...

  • Page 401

    Des-1228/me metro ethernet managed switch cli reference guide 397 des-1228:5# disable bpdu_tunnel command: disable bpdu_tunnel success. Des-1228:5#.

  • Page 402: Ppendix

    Des-1228/me metro ethernet managed switch cli reference guide 398 a ppendix a – p assword r ecovery p rocedure this document describes the procedure for resetting passwords on d-link switches. Authenticating any user who tries to access networks is necessary and important. The basic authentication m...

  • Page 403: Ppendix

    Des-1228/me metro ethernet managed switch cli reference guide 399 a ppendix b – s ystem l og e ntries the following table lists all possible entries and their corresponding meanings that will appear in the system log of this switch. Category event description log information severity system system c...

  • Page 404

    Des-1228/me metro ethernet managed switch cli reference guide 400 configuration upload by console was unsuccessful configuration upload by console was unsuccessful! (username: ) warning log message successfully uploaded log message successfully uploaded (username: , ip: ) informational log message s...

  • Page 405

    Des-1228/me metro ethernet managed switch cli reference guide 401 root restriction disabled port stp root restriction is disabled informational ssh successful login through ssh successful login through ssh (username: , ip: ) informational login failed through ssh login failed through ssh (username: ...

  • Page 406

    Des-1228/me metro ethernet managed switch cli reference guide 402 successful login through console authenticated by aaa server successful login through console authenticated by aaa server (username: ) informational login failed through console authenticated by aaa server login failed through console...

  • Page 407

    Des-1228/me metro ethernet managed switch cli reference guide 403 successful enable admin through console authenticated by aaa none method successful enable admin through console authenticated by aaa none method (username: ) informational successful enable admin through web authenticated by aaa none...

  • Page 408

    Des-1228/me metro ethernet managed switch cli reference guide 404 addresses ip-mac-port binding unauthentiucated ip address discarded by ip mac port binding unathenticated ip-mac address and discarded by ip mac port binding (ip: , mac , port ) warning ip and password changed ip address change activi...

  • Page 409

    Des-1228/me metro ethernet managed switch cli reference guide 405 service bpdu protecction bpdu attack happened. Port enter bpdu under protection state (mode: drop / block / shutdown) informational bpdu attack automatically recover port recover from bpdu under protection state automatically informat...

  • Page 410: Ppendix

    Des-1228/me metro ethernet managed switch cli reference guide 406 a ppendix c – t rap e ntries des-1228/me b1 trap list trap name/oid variable bind format mib name coldstart 1.3.6.1.6.3.1.1.5.1 none v2 rfc1907 (snmpv2-mib) warmstart 1.3.6.1.6.3.1.1.5.2 none v2 rfc1907 (snmpv2-mib) authenticationfail...

  • Page 411

    Des-1228/me metro ethernet managed switch cli reference guide 407 1.3.6.1.4.1.171.12.1.7.2.0.5 agentgratuitousarpmacaddr agentgratuitousarpportnumber agentgratuitousarpinterfacename swsafeguardchgtoexhausted 1.3.6.1.4.1.171.12.19.4.1.0.1 swsafeguardcurrentstatus v2 safeguard engine- mib swsafeguardc...

  • Page 412: Ppendix

    Des-1228/me metro ethernet managed switch cli reference guide 408 a ppendix d - radius a ttributes a ssignment the radius attributes assignment on the des-1228/me is used in the 802.1x (port-based and host-based) module. The description that follows explains the following radius attributes assignmen...

  • Page 413

    Des-1228/me metro ethernet managed switch cli reference guide 409 to assign vlan by radius server, the proper parameters should be configured on the radius server. To use vlan assignment, rfc3580 defines the following tunnel attributes in radius packets. The table below shows the parameters for a vl...