D-Link DES-1228 - Web Smart Switch Reference Manual - Ommand

Other manuals for DES-1228 - Web Smart Switch: User Manual, Specifications, Quick Installation Manual, User Manual, Manual
Manual is about: Managed 10/100Mbps Metro Ethernet Switch

Summary of DES-1228 - Web Smart Switch

  • Page 1

    Cli reference manual product model : des-1228/me managed 10/100mbps metro ethernet switch release 1.

  • Page 2

    _________________________________________________________________________________ information in this document is subject to change without notice. © 2009 d-link corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of d-link corporation is strictly f...

  • Page 3

    Table of contents introduction .......................................................................................................................................................... 1 using the console cli .............................................................................................

  • Page 4

    Safeguard engine commands ..................................................................................................................... 182 traffic segmentation commands .............................................................................................................. 184 time an...

  • Page 5

    Arp spoofing attack prevention list ..................................................................................................... 295 technical specifications .............................................................................................................................. 297.

  • Page 6: Ntroduction

    Des-1228/me layer 2 metro ethernet switch cli reference manual 1 1 i ntroduction the switch can be managed through the switch’s serial port, telnet, or the web-based management agent. The command line interface (cli) can be used to configure and manage the switch via the serial port or telnet interf...

  • Page 7

    Des-1228/me layer 2 metro ethernet switch cli reference manual 2 setting the switch’s ip address each switch must be assigned its own ip address, which is used for communication with an snmp network manager or other tcp/ip application (for example bootp, tftp). The switch’s default ip address is 10....

  • Page 8: Sing The

    Des-1228/me layer 2 metro ethernet switch cli reference manual 3 2 u sing the c onsole cli the des-1228/me support a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The ...

  • Page 9

    Des-1228/me layer 2 metro ethernet switch cli reference manual 4 . ? Cable_diag ports clear clear arptable clear counters clear fdb clear flood_fdb clear igmp_snooping data_driven_group clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x ...

  • Page 10

    Des-1228/me layer 2 metro ethernet switch cli reference manual 5 des-1228/me:4#config account command: config account next possible completions: des-1228/me:4#config account command: config account next possible completions: des-1228/me:4# figure 2-4. Using the up arrow to re-enter a command in the ...

  • Page 11

    Des-1228/me layer 2 metro ethernet switch cli reference manual 6 des-1228/me:4#show command: show next possible completions: 802.1p 802.1x access_profile account acct_client address_binding arp_spoofing_prevention arpentry asymmetric_vlan auth_client auth_diagnostics auth_session_statistics auth_sta...

  • Page 12: Ommand

    Des-1228/me layer 2 metro ethernet switch cli reference manual 7 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: all commands are case-sensitive. Be sure to disable caps lock or any other unwanted...

  • Page 14: Asic

    Des-1228/me layer 2 metro ethernet switch cli reference manual 9 4 b asic s witch c ommands the basic switch commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable password encryption disable password encrypti...

  • Page 15

    Des-1228/me layer 2 metro ethernet switch cli reference manual 10 enable password encryption purpose used to enable password encryption on a user account. Syntax enable password encryption description the user account configuration information will be stored in the configuration file, and can be app...

  • Page 17

    Des-1228/me layer 2 metro ethernet switch cli reference manual 12 show account purpose used to display user accounts. Syntax show account description displays all user accounts created on the switch. Up to 8 user accounts can exist at one time. Parameters none. Restrictions only administrator-level ...

  • Page 18

    Des-1228/me layer 2 metro ethernet switch cli reference manual 13 example usage: to display the way that the users logged in: des-1228/me:4#show session command: show session id login time live time from level name -- -------------------- ----------- ----------- ----- ----------- 8 00000 days 00:00:...

  • Page 19

    Des-1228/me layer 2 metro ethernet switch cli reference manual 14 show serial_port purpose used to display the current serial port settings. Syntax show serial_port description this command displays the current serial port settings. Parameters none. Restrictions none example usage: to display the se...

  • Page 20

    Des-1228/me layer 2 metro ethernet switch cli reference manual 15 enable clipaging purpose used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging description this command is used when issuing a command which causes the console screen to ...

  • Page 21

    Des-1228/me layer 2 metro ethernet switch cli reference manual 16 example usage: to enable telnet and configure port number: des-1228/me:4#enable telnet 23 command: enable telnet 23 success. Des-1228/me:4# disable telnet purpose used to disable the telnet protocol on the switch. Syntax disable telne...

  • Page 22

    Des-1228/me layer 2 metro ethernet switch cli reference manual 17 enable web purpose used to enable the http-based management software on the switch. Syntax enable web description this command is used to enable the web-based management software on the switch. Parameters − the tcp port number. Tcp po...

  • Page 23

    Des-1228/me layer 2 metro ethernet switch cli reference manual 18 to save the switch’s current configuration to non-volatile ram: des-1228/me:4#save command: save saving all configurations to nv-ram... Done. Success. Des-1228/me:4# reboot purpose used to restart the switch. Syntax reboot description...

  • Page 25

    Des-1228/me layer 2 metro ethernet switch cli reference manual 20 logout purpose used to log out a user from the switch’s console. Syntax logout description this command terminates the current user’s session on the switch’s console. Parameters none. Restrictions none. Example usage: to terminate the...

  • Page 27

    Des-1228/me layer 2 metro ethernet switch cli reference manual 22 config greeting _message described on the banner editor: quit without save: ctrl+c save and quit: ctrl+w move cursor: left/right/up/down delete line: ctrl+d erase all setting: ctrl+x reload original setting: ctrl+l restrictions only a...

  • Page 28

    Des-1228/me layer 2 metro ethernet switch cli reference manual 23 example usage: to view the currently configured greeting message: des-1228/me:4#show greeting_message command: show greeting_message ========================================================================= des-1228/me metro ethernet ...

  • Page 30

    Des-1228/me layer 2 metro ethernet switch cli reference manual 25 config ports if set to normal state, the port in mdix mode, can be connected to pc nic using a straight cable. If set to cross state, the port in mdi mode, can be connected to a port (in mdix mode) on another switch through a straight...

  • Page 31

    Des-1228/me layer 2 metro ethernet switch cli reference manual 26 example usage: to display the configuration of all ports on a standalone switch: des-1228/me:4#show ports command show ports port state/ settings connection address mdi speed/duplex/flowctrl speed/duplex/flowctrl learning ----- ------...

  • Page 32

    Des-1228/me layer 2 metro ethernet switch cli reference manual 27 example usage: to display the configuration of all ports on a standalone switch, with description: des-1228/me:4#show ports description command: show ports description port state/ settings connection address mdi speed/duplex/flowctrl ...

  • Page 34

    Des-1228/me layer 2 metro ethernet switch cli reference manual 29 des-1228/me:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset success...

  • Page 35

    Des-1228/me layer 2 metro ethernet switch cli reference manual 30 des-1228/me:4# clear port_security_entry port 6 command: clear port_security_entry port 6 success. Des-1228/me:4# show port_security purpose used to display the current port security configuration. Syntax show port_security {ports } d...

  • Page 36

    Des-1228/me layer 2 metro ethernet switch cli reference manual 31 to enable the port security trap log setting: des-1228/me:4#enable port_security trap_log command: enable port_security trap_log success. Des-1228/me:4# disable port_security trap_log purpose used to disable the trap log for port secu...

  • Page 37: Etwork

    Des-1228/me layer 2 metro ethernet switch cli reference manual 32 8 n etwork m anagement (snmp) c ommands the des-1228/me support the simple network management protocol (snmp) versions 1, 2c, and 3. Users can specify which version of the snmp users want to use to monitor and control the switch. The ...

  • Page 39

    Des-1228/me layer 2 metro ethernet switch cli reference manual 34 create snmp user is not recommended. Auth − the user may also choose the type of authentication algorithms used to authenticate the snmp user. The choices are: md5 − specifies that the hmac-md5-96 authentication level will be used. Md...

  • Page 40

    Des-1228/me layer 2 metro ethernet switch cli reference manual 35 example usage: to delete a previously entered snmp user on the switch: des-1228/me:4#delete snmp user dlink command: delete snmp user dlink success. Des-1228/me:4# show snmp user purpose used to display information about each snmp use...

  • Page 41

    Des-1228/me layer 2 metro ethernet switch cli reference manual 36 example usage: to create an snmp view: des-1228/me:4#create snmp view dlinkview 1.3.6 view_type included command: create snmp view dlinkview 1.3.6 view_type included success. Des-1228/me:4# delete snmp view purpose used to remove an s...

  • Page 42

    Des-1228/me layer 2 metro ethernet switch cli reference manual 37 des-1228/me:4#show snmp view command: show snmp view vacm view table settings view name subtree view type -------------------- ----------------------- ---------- readview 1 included writeview 1 included notifyview 1.3.6 included restr...

  • Page 43

    Des-1228/me layer 2 metro ethernet switch cli reference manual 38 example usage: to create the snmp community string “dlink:” des-1228/me:4#create snmp community dlink view readview read_write command: create snmp community dlink view readview read_write success. Des-1228/me:4# delete snmp community...

  • Page 44

    Des-1228/me layer 2 metro ethernet switch cli reference manual 39 example usage: to display the currently entered snmp community strings: des-1228/me:4#show snmp community command: show snmp community snmp community table community name view name access right ------------------ ------------------- -...

  • Page 45

    Des-1228/me layer 2 metro ethernet switch cli reference manual 40 example usage: to display the current name of the snmp engine on the switch: des-1228/me:4#show snmp engineid command: show snmp engineid snmp engine id : 0035636666 des-1228/me:4# create snmp group purpose used to create a new snmp g...

  • Page 46

    Des-1228/me layer 2 metro ethernet switch cli reference manual 41 example usage: to create an snmp group named “sg1:” des-1228/me:4#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view ...

  • Page 47

    Des-1228/me layer 2 metro ethernet switch cli reference manual 42 example usage: to display the currently configured snmp groups on the switch: des-1228/me:4#show snmp groups command: show snmp groups vacm access table settings group name : group3 readview name : readview writeview name : writeview ...

  • Page 49

    Des-1228/me layer 2 metro ethernet switch cli reference manual 44 example usage: to delete an snmp host entry: des-1228/me:4#delete snmp host 10.48.74.100 command: delete snmp host 10.48.74.100 success. Des-1228/me:4# show snmp host purpose used to display the recipient of snmp traps generated by th...

  • Page 50

    Des-1228/me layer 2 metro ethernet switch cli reference manual 45 example usage: to create the trusted host: des-1228/me:4#create trusted_host 10.48.74.121 command: create trusted_host 10.48.74.121 success. Des-1228/me:4# create trusted_host network purpose used to create the trusted host subnet. Sy...

  • Page 51

    Des-1228/me layer 2 metro ethernet switch cli reference manual 46 example usage: to display the list of trust hosts: des-1228/me:4#show trusted_host command: show trusted_host management stations ip address/netmask ----------------------- 10.53.13.94 total entries: 1 des-1228/me:4# delete trusted_ho...

  • Page 52

    Des-1228/me layer 2 metro ethernet switch cli reference manual 47 example usage: to delete a trusted host network with an ip address 10.62.0.0/16: des-1228/me:4#delete trusted_host network 10.62.0.0/16 command: delete trusted_host network 10.62.0.0/16 success. Des-1228/me:4# delete trusted_host all ...

  • Page 53

    Des-1228/me layer 2 metro ethernet switch cli reference manual 48 enable snmp authenticate traps description this command is used to enable snmp authentication trap support on the switch. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to turn on s...

  • Page 54

    Des-1228/me layer 2 metro ethernet switch cli reference manual 49 example usage: to view the current snmp trap support: des-1228/me:4#show snmp traps command: show snmp traps snmp traps : enabled authenticate traps : enabled des-1228/me:4# disable snmp traps purpose used to disable snmp trap support...

  • Page 55

    Des-1228/me layer 2 metro ethernet switch cli reference manual 50 config snmp system_contact purpose used to enter the name of a contact person who is responsible for the switch. Syntax config snmp system_contact{} description the config snmp system_contact command is used to enter the name and/or o...

  • Page 56

    Des-1228/me layer 2 metro ethernet switch cli reference manual 51 example usage: to configure the switch name for “des-1228/me switch ”: des-1228/me:4#config snmp system_name des-1228/me switch command: config snmp system_name des-1228/me switch success. Des-1228/me:4# enable rmon purpose used to en...

  • Page 58

    Des-1228/me layer 2 metro ethernet switch cli reference manual 53 example usage: to disable snmp link changing traps: des-1228/me:4#disable snmp linkchange_traps command: disable snmp linkchange_traps success. Des-1228/me:4# config snmp coldstart_traps purpose used to configure cold start snmp traps...

  • Page 60

    Des-1228/me layer 2 metro ethernet switch cli reference manual 55 download image_id − specify the working section id. The switch can hold two firmware versions for the user to select from, which are specified by section id. Increment − allows the download of a partial switch configuration file. This...

  • Page 63

    Des-1228/me layer 2 metro ethernet switch cli reference manual 58 example usage: to view the current configuration settings: des-1228/me:4#show config current_config command: show config current_config ------------------------------------------------------------------- # des-1228/me configuration # ...

  • Page 64

    Des-1228/me layer 2 metro ethernet switch cli reference manual 59 note: the tftp server must be on the same ip subnet as the switch example usage: to upload a configuration file: des-1228/me:4#upload cfg_totftp 10.48.74.121 c:\cfg\log.Txt command: upload cfg_totftp 10.48.74.121 c:\cfg\log.Txt connec...

  • Page 65

    Des-1228/me layer 2 metro ethernet switch cli reference manual 60 des-1228/me metro ethernet switch command line interface firmware: build 1.00.B04 copyright(c) 2009 d-link corporation. All rights reserved. Des-1228/me:4# des-1228/me:4# des-1228/me:4#download cfg_fromtftp 10.41.44.44 c:\cfg\setting....

  • Page 66

    Des-1228/me layer 2 metro ethernet switch cli reference manual 61 example usage: to stop the auto configuration function: des-1228/me:4#disable autoconfig command: disable autoconfig success. Des-1228/me:4# show autoconfig purpose used to display the current autoconfig status of the switch. Syntax s...

  • Page 67

    Des-1228/me layer 2 metro ethernet switch cli reference manual 62 example usage: to ping the ip address 10.48.74.121 four times: des-1228/me:4#ping 10.48.74.121 times 4 command: ping 10.48.74.121 reply from 10.48.74.121, time reply from 10.48.74.121, time reply from 10.48.74.121, time reply from 10....

  • Page 69: Etwork

    Des-1228/me layer 2 metro ethernet switch cli reference manual 64 10 n etwork m onitoring c ommands the network monitoring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show packet ports show error ports sho...

  • Page 70

    Des-1228/me layer 2 metro ethernet switch cli reference manual 65 des-1228/me:4#show packet ports 2 command: show packet ports 2 port number : 2 frame size frame counts frames/sec frame type total total/sec ------------ ------------ ---------- ---------- --------- --------- 64 0 0 rx bytes 0 0 65-12...

  • Page 72

    Des-1228/me layer 2 metro ethernet switch cli reference manual 67 clear counters purpose used to clear the switch’s statistics counters. Syntax clear counters {ports } description this command will clear the counters used by the switch to compile statistics. Parameters − specifies a port or range of...

  • Page 73

    Des-1228/me layer 2 metro ethernet switch cli reference manual 68 example usage: to display the switch history log: des-1228/me:4#show log index 1-5 command: show log index 1-5 index data time log text ----- ------------------- -------------------------------------------------------- 5 00000-00-00 0...

  • Page 74

    Des-1228/me layer 2 metro ethernet switch cli reference manual 69 example usage: to disable the syslog function on the switch: des-1228/me:4#disable syslog command: disable syslog success. Des-1228/me:4# show syslog purpose used to display the syslog protocol status as enabled or disabled. Syntax sh...

  • Page 75

    Des-1228/me layer 2 metro ethernet switch cli reference manual 70 create syslog host 0 emergency: system is unusable 1 alert: action must be taken immediately 2 critical: critical conditions 3 error: error conditions 4 warning: warning conditions 5 notice: normal but significant condition 6 informat...

  • Page 76

    Des-1228/me layer 2 metro ethernet switch cli reference manual 71 create syslog host restrictions only administrator-level users can issue this command. Example usage: to create syslog host: des-1228/me:4#create syslog host 1 severity all facility local0 command: create syslog host 1 severity all fa...

  • Page 77

    Des-1228/me layer 2 metro ethernet switch cli reference manual 72 parameters numerical facility code 0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslog 6 line printer subsystem 7 network news subsystem 8 ...

  • Page 78

    Des-1228/me layer 2 metro ethernet switch cli reference manual 73 example usage: to configure a syslog host: des-1228/me:4#config syslog host 1 severity all facility local0 command: config syslog host all severity all facility local0 success. Des-1228/me:4# example usage: to configure a syslog host ...

  • Page 79

    Des-1228/me layer 2 metro ethernet switch cli reference manual 74 example usage: to show syslog host information: des-1228/me:4#show syslog host command: show syslog host syslog global state: disabled host id host ip address severity facility udp port status ------- --------------- -------------- --...

  • Page 80

    Des-1228/me layer 2 metro ethernet switch cli reference manual 75 example usage: to display the time interval for saving log files: des-1228/me:4#show log_save_timing command: show log_save_timing saving log method: time_interval interval : 30 des-1228/me:4#.

  • Page 81: Ultiple

    Des-1228/me layer 2 metro ethernet switch cli reference manual 76 11 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, is a standard defined b...

  • Page 82

    Des-1228/me layer 2 metro ethernet switch cli reference manual 77 command parameters show stp mst_config id each command is listed, in detail, in the following sections. Enable stp purpose used to globally enable stp on the switch. Syntax enable stp description this command allows the spanning tree ...

  • Page 83

    Des-1228/me layer 2 metro ethernet switch cli reference manual 78 config stp version switch. Restrictions only administrator-level users can issue this command. Example usage: to set the switch globally for the multiple spanning tree protocol (mstp): des-1228/me:4#config stp version mstp command: co...

  • Page 85

    Des-1228/me layer 2 metro ethernet switch cli reference manual 80 config stp ports to an 802.1w or 802.1s enabled network. Migration should be set as yes on ports connected to network stations or segments that are capable of being upgraded to 802.1w rstp or 802.1s mstp on all or some portion of the ...

  • Page 86

    Des-1228/me layer 2 metro ethernet switch cli reference manual 81 example usage: to configure stp with path cost auto, hellotime set to 2 seconds, migration enable, and state enable for ports 1-2 of module 1. Des-1228/me:4#config stp ports 1-2 externalcost auto hellotime 2 migrate yes state enable c...

  • Page 87

    Des-1228/me layer 2 metro ethernet switch cli reference manual 82 config stp instance_id restrictions only administrator-level users can issue this command. Example usage: to configure instance id 2 to add vid 10: des-1228/me:4#config stp instance_id 2 add_vlan 10 command : config stp instance_id 2 ...

  • Page 88

    Des-1228/me layer 2 metro ethernet switch cli reference manual 83 config stp priority this entry must be divisible by 4096. Instance_id − enter the value corresponding to the previously configured instance id of which the user wishes to set the priority value. An instance id of 0 denotes the default...

  • Page 89

    Des-1228/me layer 2 metro ethernet switch cli reference manual 84 config stp mst_ports instances where the priority value is identical, the mstp function will implement the lowest mac address into the forwarding state and other interfaces will be blocked. Remember that lower priority values mean hig...

  • Page 90

    Des-1228/me layer 2 metro ethernet switch cli reference manual 85 max hops : 20 tx hold count : 6 forwarding bpdu : enabled loopback detection : enabled lbd recover time : 60 des-1228/me:4# status 2 : stp enabled for rstp des-1228/me:4#show stp command: show stp stp bridge global settings ----------...

  • Page 91

    Des-1228/me layer 2 metro ethernet switch cli reference manual 86 show stp ports may use the space bar, p and n keys to view information for the remaining ports. Restrictions none. Example usage: to show stp ports information for port 1 (stp enabled on switch): des-1228/me:4#show stp ports command: ...

  • Page 92

    Des-1228/me layer 2 metro ethernet switch cli reference manual 87 des-1228/me:4#show stp instance 0 command: show stp instance 0 stp instance settings --------------------------- instance type : cist instance status : enabled instance priority : 32768(bridge priority : 32768, sys id ext : 0 ) stp in...

  • Page 93: Orwarding

    Des-1228/me layer 2 metro ethernet switch cli reference manual 88 12 f orwarding d atabase c ommands the layer 2 forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create fdb port create multi...

  • Page 94

    Des-1228/me layer 2 metro ethernet switch cli reference manual 89 des-1228/me:4#create fdb default 00-00-00-00-01-02 port 5 command: create fdb default 00-00-00-00-01-02 port 5 success. Des-1228/me:4# create multicast_fdb purpose used to create a static entry to the multicast mac address forwarding ...

  • Page 95

    Des-1228/me layer 2 metro ethernet switch cli reference manual 90 config fdb aging_time purpose used to set the aging time of the forwarding database. Syntax config fdb aging_time description the aging time affects the learning process of the switch. Dynamic forwarding table entries, which are made ...

  • Page 96

    Des-1228/me layer 2 metro ethernet switch cli reference manual 91 delete fdb purpose used to delete an entry to the switch’s forwarding database. Syntax delete fdb description this command is used to delete a previous entry to the switch’s mac address forwarding database. Parameters − the name of th...

  • Page 98

    Des-1228/me layer 2 metro ethernet switch cli reference manual 93 1 default 00-00-5e-00-01-01 10 dynamic 1 default 00-00-74-60-72-2d 10 dynamic 1 default 00-00-81-05-00-80 10 dynamic 1 default 00-00-81-05-02-00 10 dynamic 1 default 00-00-81-48-70-01 10 dynamic 1 default 00-00-e2-4f-57-03 10 dynamic ...

  • Page 99

    Des-1228/me layer 2 metro ethernet switch cli reference manual 94 to view the multicast port filtering mode for all ports: des-1228/me:4#show multicast port_filtering_mode command: show multicast port_filtering_mode multicast filter mode for unregistered group: forwarding list: 1-28 filtering list: ...

  • Page 100

    Des-1228/me layer 2 metro ethernet switch cli reference manual 95 show flood_fdb purpose used to show the flooding flood database. Syntax show flood_fdb description the show flood_fdb command is used to display flooding mac function state and flooding database. Parameters none. Restrictions none. Ex...

  • Page 101

    Des-1228/me layer 2 metro ethernet switch cli reference manual 96 clear flood_fdb purpose used to clear the flooding database. Syntax clear flood_fdb description clear the flooding database. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to clear ...

  • Page 102

    Des-1228/me layer 2 metro ethernet switch cli reference manual 97 des-1228/me:4#show auto_fdb 10.90.90.10 command: show auto_fdb 10.90.90.10 ip address vlan id mac address port time stamp --------------- ------- ----------------- ---- ---------- 10.90.90.10 des-1228/me:4# delete auto_fdb purpose use...

  • Page 103: Roadcast

    Des-1228/me layer 2 metro ethernet switch cli reference manual 98 13 b roadcast s torm c ontrol c ommands on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious endstatio...

  • Page 104

    Des-1228/me layer 2 metro ethernet switch cli reference manual 99 config traffic control the port except stp bpdu packets, which are essential in keeping the spanning tree operational on the switch. If the countdown timer has expired and yet the packet storm continues, the port will be placed in res...

  • Page 105

    Des-1228/me layer 2 metro ethernet switch cli reference manual 100 example usage: to display traffic control setting for ports 1-4: des-1228/me:4#show traffic control 1-4 command: show traffic control 1-4 traffic storm control trap :[none] port thres broadcast multicast unicast action count time hol...

  • Page 106: Ommands

    Des-1228/me layer 2 metro ethernet switch cli reference manual 101 14 c o s c ommands the des-1228/me supports 802.1p priority queuing. The switch has four priority queues. These priority queues are numbered from 3 (class 3) — the highest priority queue — to 0 (class 0) — the lowest priority queue. ...

  • Page 108

    Des-1228/me layer 2 metro ethernet switch cli reference manual 103 to display bandwidth control settings: des-1228/me:4#show bandwidth_control 1-5 command: show bandwidth_control 1-5 bandwidth control table port rx rate tx rate effective rx effective tx (kbit/sec) (kbit/sec) (kbit/sec) (kbit/sec) --...

  • Page 109

    Des-1228/me layer 2 metro ethernet switch cli reference manual 104 show scheduling purpose used to display the currently configured traffic scheduling on the switch. Syntax show scheduling description the show scheduling command will display the current traffic scheduling mechanisms in use on the sw...

  • Page 110

    Des-1228/me layer 2 metro ethernet switch cli reference manual 105 des-1228/me:4#config scheduling_mechanism strict command: config scheduling_mechanism strict note: the strict mode is only supported at the highest queue and the other lower queues will still work at wrr mode. Success. Des-1228/me:4#...

  • Page 111

    Des-1228/me layer 2 metro ethernet switch cli reference manual 106 config 802.1p user_priority purpose used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the switch. Syntax config 802.1p user_priority description this command allows users to co...

  • Page 112

    Des-1228/me layer 2 metro ethernet switch cli reference manual 107 command: show 802.1p user_priority qos class of traffic priority-0 -> priority-1 -> priority-2 -> priority-3 -> priority-4 -> priority-5 -> priority-6 -> priority-7 -> des-1228/me:4# config 802.1p default_priority purpose used to con...

  • Page 113

    Des-1228/me layer 2 metro ethernet switch cli reference manual 108 to display the current 802.1p default priority configuration on the switch: des-1228/me:4# show 802.1p default_priority command: show 802.1p default_priority port priority effective priority ---- ----------- ------------------ 1 0 0 ...

  • Page 115

    Des-1228/me layer 2 metro ethernet switch cli reference manual 110 6 off 802.1p off 7 off 802.1p off 8 off 802.1p off 9 off 802.1p off 10 off 802.1p off 11 off 802.1p off 12 off 802.1p off 13 off 802.1p off 14 off 802.1p off 15 off 802.1p off 16 off 802.1p off 17 off 802.1p off 18 off 802.1p off 19 ...

  • Page 116

    Des-1228/me layer 2 metro ethernet switch cli reference manual 111 show cos port_mapping purpose used to map the destination mac address in incoming packets to one of the hardware queues available on the switch. Syntax show cos port_mapping {port } description the show cos mac_mapping command is use...

  • Page 117

    Des-1228/me layer 2 metro ethernet switch cli reference manual 112 show cos mac_mapping purpose used to show the mapping between destination mac addresses and cos traffic classes. Syntax show cos mac_mapping {destination_addr } description the show cos mac_mapping command display the information of ...

  • Page 118

    Des-1228/me layer 2 metro ethernet switch cli reference manual 113 show cos tos purpose used to show tos value to traffic class mapping. Syntax show cos tos {value } description the show cos tos command displays the information of tos to traffic class mappings. Parameters − the tos value of the inco...

  • Page 119

    Des-1228/me layer 2 metro ethernet switch cli reference manual 114 show dscp_mapping purpose used to show dscp value map to traffic class. Syntax show dscp_mapping {dscp_value } description the show dscp_mapping command displays the information for dscp mapping to traffic class. This command is supp...

  • Page 122

    Des-1228/me layer 2 metro ethernet switch cli reference manual 117 to delete the mirroring ports: des-1228/me:4#config mirror port 1 delete source port 2-4 both command: config mirror 1 delete source 2-4 both success. Des-1228/me:4# enable mirror purpose used to enable a previously entered port mirr...

  • Page 123

    Des-1228/me layer 2 metro ethernet switch cli reference manual 118 show mirror purpose used to show the current port mirroring configuration on the switch. Syntax show mirror description this command displays the current port mirroring configuration on the switch. Parameters none restrictions none. ...

  • Page 125

    Des-1228/me layer 2 metro ethernet switch cli reference manual 120 delete vlan purpose used to delete a previously configured vlan on the switch. Syntax delete vlan description this command will delete a previously configured vlan on the switch. Parameters − the vlan name of the vlan to delete. Rest...

  • Page 126

    Des-1228/me layer 2 metro ethernet switch cli reference manual 121 des-1228/me:4# create vlan vlanid purpose used to create multiple vlans by vlan id list on the switch. Syntax create vlan vlanid { advertisement } description the create vlans by vlanid list command creates multiple vlans on the swit...

  • Page 127

    Des-1228/me layer 2 metro ethernet switch cli reference manual 122 config vlan vlanid the name parameter allows you to specify the name of the vlan that needs to be modified. Parameters − specifies a range of multiple vlan ids to be configured. Tagged − specifies the additional ports as tagged. Unta...

  • Page 128

    Des-1228/me layer 2 metro ethernet switch cli reference manual 123 tagged_only pvid 2 success. Des-1228/me:4# enable gvrp purpose used to enable gvrp on the switch. Syntax enable gvrp description this command, along with disable gvrpbelow, is used to enable and disable gvrp on the switch, without ch...

  • Page 129

    Des-1228/me layer 2 metro ethernet switch cli reference manual 124 show vlan parameters − specifies a range of multiple vlan ids to be displayed. − specifies the ports to be displayed. − the vlan name of the vlan for which to display a summary of settings. − specifies a port or range of ports that w...

  • Page 130

    Des-1228/me layer 2 metro ethernet switch cli reference manual 125 des-1228/me:4#show gvrp 1-10 command: show gvrp 1-10 port pvid gvrp ingress checking acceptable frame type ---- -------- -------- --------------------------------------- 1 1 disabled enabled all frames 2 1 disabled enabled all frames...

  • Page 131: Ink

    Des-1228/me layer 2 metro ethernet switch cli reference manual 126 17 l ink a ggregation c ommands the link aggregation commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create link_aggregation group_id {type [l...

  • Page 132

    Des-1228/me layer 2 metro ethernet switch cli reference manual 127 delete link_aggregation group_id description this command is used to delete a previously configured link aggregation group. Parameters − specifies the group id. The switch allows up to 6 link aggregation groups to be configured. The ...

  • Page 133

    Des-1228/me layer 2 metro ethernet switch cli reference manual 128 config link_aggregation algorithm address-based load-sharing algorithm. Parameters mac_source − indicates that the switch should examine the mac source address. Mac_destination − indicates that the switch should examine the mac desti...

  • Page 135

    Des-1228/me layer 2 metro ethernet switch cli reference manual 130 show lacp_port purpose used to display current lacp port mode settings. Syntax show lacp_port {} description this command will display the lacp mode settings as they are currently configured. Parameters − specifies a port or range of...

  • Page 137

    Des-1228/me layer 2 metro ethernet switch cli reference manual 132 show ipif purpose used to display the configuration of an ip interface on the switch. Syntax show ipif description this command will display the configuration of an ip interface on the switch. Parameters none. Restrictions none. Exam...

  • Page 138

    Des-1228/me layer 2 metro ethernet switch cli reference manual 133 des-1228/me:4#enable autoconfig command: enable autoconfig success. Des-1228/me:4# note: more detailed information for this command and related commands can be found in the section titled switch utility commands..

  • Page 141

    Des-1228/me layer 2 metro ethernet switch cli reference manual 136 config igmp_snooping querier proxy function but not provide the multicast routing function, then this state must be configured as disabled. Otherwise, if the layer 3 router is not selected as the querier, it will not send the igmp qu...

  • Page 142

    Des-1228/me layer 2 metro ethernet switch cli reference manual 137 to set up forbidden router ports: des-1228/me:4# config router_ports_forbidden default add 2-10 command: config router_ports_forbidden default add 2-10 success. Des-1228/me:4# enable igmp_snooping purpose used to enable igmp snooping...

  • Page 143

    Des-1228/me layer 2 metro ethernet switch cli reference manual 138 disable igmp_snooping purpose used to enable igmp snooping on the switch. Syntax disable igmp_snooping {forward_mcrouter_only} description this command disables igmp snooping on the switch. Igmp snooping can be disabled only if ip mu...

  • Page 144

    Des-1228/me layer 2 metro ethernet switch cli reference manual 139 des-1228/me:4#show igmp_snooping command: show igmp_snooping igmp snooping global state : disabled multicast router only : disabled data driven learning max entries : 56 vlan name : default query interval : 125 max response time : 10...

  • Page 145

    Des-1228/me layer 2 metro ethernet switch cli reference manual 140 des-1228/me:4#show router_ports command: show router_ports vlan name : default static router port : 1-2,10 dynamic router port : total entries: 1 des-1228/me:4# show igmp_snooping forwarding purpose used to display the current igmp s...

  • Page 147

    Des-1228/me layer 2 metro ethernet switch cli reference manual 142 des-1228/me:4#config igmp_snooping data_driven_learning vlan_name default aged_out enable command: config igmp_snooping data_driven_learning vlan_name default aged_out enable success. Des-1228/me:4# config igmp_snooping data_driven_l...

  • Page 148

    Des-1228/me layer 2 metro ethernet switch cli reference manual 143.

  • Page 150

    Des-1228/me layer 2 metro ethernet switch cli reference manual 145 to add an ip destination to the dhcp relay table: des-1228/me:4#config dhcp_relay add ipif system 10.58.44.6 command: config dhcp_relay add ipif system 10.58.44.6 success. Des-1228/me:4# config dhcp_relay delete ipif purpose used to ...

  • Page 151

    Des-1228/me layer 2 metro ethernet switch cli reference manual 146 example usage: to configure dhcp relay option 82 state: des-1228/me:4#config dhcp_relay option_82 state enable command: config dhcp_relay option_82 state enable success. Des-1228/me:4# config dhcp_relay option_82 check purpose used t...

  • Page 154

    Des-1228/me layer 2 metro ethernet switch cli reference manual 149 show dhcp_relay purpose used to display the current dhcp/bootp relay configuration. Syntax show dhcp_relay {ipif [system]} description this command will display the current dhcp relay configuration for the switch. Parameters ipif sys...

  • Page 155

    Des-1228/me layer 2 metro ethernet switch cli reference manual 150 des-1228/me:4#enable dhcp_relay command: enable dhcp_relay success. Des-1228/me:4# disable dhcp_relay purpose used to disable the dhcp/bootp relay function on the switch. Syntax disable dhcp_relay description this command is used to ...

  • Page 156: 802.1X

    Des-1228/me layer 2 metro ethernet switch cli reference manual 151 21 802.1x c ommands the des-1228/me implements ieee 802.1x port-based and host-based access control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing cri...

  • Page 157

    Des-1228/me layer 2 metro ethernet switch cli reference manual 152 command parameters show 802.1x user each command is listed, in detail, in the following sections enable 802.1x purpose used to enable the 802.1x server on the switch. Syntax enable 802.1x description the enable 802.1x command enables...

  • Page 158

    Des-1228/me layer 2 metro ethernet switch cli reference manual 153 show 802.1x auth_configuration purpose used to display the current configuration of the 802.1x server on the switch. Syntax show 802.1x auth_configuration {ports } description the show 802.1x auth_configuration command is used to dis...

  • Page 159

    Des-1228/me layer 2 metro ethernet switch cli reference manual 154 port number : 1 capability : none admincrldir : both opencrldir : both port control : auto quietperiod : 60 sec txperiod : 30 sec supptimeout : 30 sec servertimeout : 30 sec maxreq : 2 times reauthperiod : 3600 sec reauthenticate : d...

  • Page 160

    Des-1228/me layer 2 metro ethernet switch cli reference manual 155 4 forceauth success authorized 5 forceauth success authorized 6 forceauth success authorized 7 forceauth success authorized 8 forceauth success authorized 9 forceauth success authorized 10 forceauth success authorized 11 forceauth su...

  • Page 162

    Des-1228/me layer 2 metro ethernet switch cli reference manual 157 config 802.1x auth_parameter in the specified range to their default 802.1x settings. Parameters − specifies a port or range of ports to be configured. All − specifies all of the ports on the switch. Default − returns all of the port...

  • Page 163

    Des-1228/me layer 2 metro ethernet switch cli reference manual 158 example usage: to configure 802.1x authentication parameters for ports 1 – 20: des-1228/me:4#config 802.1x auth_parameter ports 1–20 direction both command: config 802.1x auth_parameter ports 1–20 direction both success. Des-1228/me:...

  • Page 164

    Des-1228/me layer 2 metro ethernet switch cli reference manual 159 des-1228/me:4# config 802.1x init port_based ports all command: config 802.1x init port_based ports all success. Des-1228/me:4# config 802.1x reauth purpose used to configure the 802.1x re-authentication feature of the switch. Syntax...

  • Page 165

    Des-1228/me layer 2 metro ethernet switch cli reference manual 160 config radius add auth_port − the udp port number for authentication requests. The default is 1812. Acct_port − the udp port number for accounting requests. The default is 1813. Restrictions only administrator-level users can issue t...

  • Page 166

    Des-1228/me layer 2 metro ethernet switch cli reference manual 161 config radius requests. The default is 1812. Acct_port − the udp port number for accounting requests. The default is 1813. Restrictions only administrator-level users can issue this command. Example usage: to configure the radius set...

  • Page 167

    Des-1228/me layer 2 metro ethernet switch cli reference manual 162 timeout : 5 seconds retransmit : 2 index ip address auth-port acct-port status key number number ----- ------------------ --------- --------- -------------- --------------- 1 10.1.1.1 1812 1813 active switch 2 20.1.1.1 1800 1813 acti...

  • Page 168

    Des-1228/me layer 2 metro ethernet switch cli reference manual 163 config 802.1x guest_vlan ports the specific port state changes from an enabled state to a disabled state, these ports will return to the default vlan. Example usage: to configure the ports for a previously created 802.1x guest vlan a...

  • Page 169

    Des-1228/me layer 2 metro ethernet switch cli reference manual 164 example usage: to delete a previously created 802.1x guest vlan. Des-1228/me:4#delete 802.1x guest_vlan trinity command: delete 802.1x guest_vlan trinity success. Des-1228/me:4# show acct_client purpose used to display the current ra...

  • Page 170

    Des-1228/me layer 2 metro ethernet switch cli reference manual 165 show auth_client description the show auth_client command is used to display the current radius authentication client currently configured on the switch. Parameters none. Restrictions none. Example usage: to view the current radius a...

  • Page 171

    Des-1228/me layer 2 metro ethernet switch cli reference manual 166 des-1228/me:4#show auth_diagnostics ports 1 command: show auth_diagnostics ports 1 port number : 1 entersconnecting 0 eaplogoffswhileconnecting 0 entersauthenticating 0 successwhileauthenticating 0 timeoutswhileauthenticating 0 failw...

  • Page 172

    Des-1228/me layer 2 metro ethernet switch cli reference manual 167 des-1228/me:4#show auth_session_statistics ports 1 command: show auth_session_statistics ports 1 port number : 1 sessionoctetsrx 0 sessionoctetstx 0 sessionframesrx 0 sessionframestx 0 sessionid sessionauthenticmethod remote authenti...

  • Page 173

    Des-1228/me layer 2 metro ethernet switch cli reference manual 168 create 802.1x user purpose used to create a new 802.1x user. Syntax create 802.1x user description the create 802.1x user command is used to create new 802.1x users. Parameters − a username of up to 15 alphanumeric characters in leng...

  • Page 174

    Des-1228/me layer 2 metro ethernet switch cli reference manual 169 delete 802.1x user restrictions only administrator-level users can issue this command. Example usage: to delete 802.1x users: des-1228/me:4#delete 802.1x user dtremblett command: delete 802.1x user dtremblett are you sure to delete t...

  • Page 175: Ccess

    Des-1228/me layer 2 metro ethernet switch cli reference manual 170 22 a ccess c ontrol l ist (acl) c ommands the des-1228/me implements access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings and mac address. The access profile com...

  • Page 176

    Des-1228/me layer 2 metro ethernet switch cli reference manual 171 create access_profile ip source_ip_mask 255.255.255.0 profile_id 1 profile_name 1 here we have created an access profile that will examine the ip field of each frame received by the switch. Each source ip address the switch finds wil...

  • Page 177

    Des-1228/me layer 2 metro ethernet switch cli reference manual 172 create access_profile ip − specifies that the switch will examine the ip address in each frame’s header. Vlan − specifies a vlan mask. Source_ip_mask − specifies an ip address mask for the source ip address. Destination_ip_mask − spe...

  • Page 179

    Des-1228/me layer 2 metro ethernet switch cli reference manual 174 config access_profile auto_assign – choose this parameter to configure the switch to automatically assign a numerical value (between 1 and 65535) for the rule being configured. Ethernet − specifies that the switch will look only into...

  • Page 180

    Des-1228/me layer 2 metro ethernet switch cli reference manual 175 config access_profile priority − this parameter is specified if you want to re-write the 802.1p default priority previously set in the switch, which is used to determine the cos queue to which packets are forwarded to. Once this fiel...

  • Page 181

    Des-1228/me layer 2 metro ethernet switch cli reference manual 176 example usage: to display all of the currently configured access profiles on the switch: des-1228/me:4#show access_profile command: show access_profile access profile table ============================================================...

  • Page 182

    Des-1228/me layer 2 metro ethernet switch cli reference manual 177 create cpu access_profile source_ip_mask − specifies an ip address mask for the source ip address. Destination_ip_mask − specifies an ip address mask for the destination ip address. Dscp − specifies that the switch will examine the d...

  • Page 183

    Des-1228/me layer 2 metro ethernet switch cli reference manual 178 delete cpu access_profile purpose used to delete a previously created cpu access profile. Syntax delete cpu access_profile profile_id description the delete cpu access_profile command is used to delete a previously created cpu access...

  • Page 184

    Des-1228/me layer 2 metro ethernet switch cli reference manual 179 config cpu access_profile parameters mac address. Destination_mac − specifies that the access profile will apply to this destination mac address. Ethernet_type − specifies that the access profile will apply only to packets with this ...

  • Page 185

    Des-1228/me layer 2 metro ethernet switch cli reference manual 180 des-1228/me:4#config cpu access_profile profile_id 3 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port all deny command: config cpu access_profile profile_id 3 add access_id...

  • Page 186

    Des-1228/me layer 2 metro ethernet switch cli reference manual 181 des-1228/me:4#show cpu access_profile profile_id 2 command: show cpu access_profile profile_id 2 cpu interface filtering state: disabled access profile table ============================================= total profile entries: 0 tota...

  • Page 187: Afeguard

    Des-1228/me layer 2 metro ethernet switch cli reference manual 182 23 s afeguard e ngine c ommands periodically, malicious hosts on the network will attack the switch by utilizing packet flooding (arp storm) or other methods. These attacks may increase the cpu utilization beyond its capability. To a...

  • Page 188

    Des-1228/me layer 2 metro ethernet switch cli reference manual 183 to configure the safeguard engine for the switch: des-1228/me:4#config safeguard_engine state enable utilization rising 45 command: config safeguard_engine state enable utilization rising 45 success. Des-1228/me:4# show safeguard_eng...

  • Page 189: Raffic

    Des-1228/me layer 2 metro ethernet switch cli reference manual 184 24 t raffic s egmentation c ommands traffic segmentation allows users to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and then the traffic segment...

  • Page 190

    Des-1228/me layer 2 metro ethernet switch cli reference manual 185 des-1228/me:4#show traffic_segmentation command: show traffic_segmentation traffic segmentation table port forward portlist ---- ---------------------------- 1 1-28 2 1-28 3 1-28 4 1-28 5 1-28 6 1-28 7 1-28 8 1-28 9 1-28 10 1-28 11 1...

  • Page 191: Ime And

    Des-1228/me layer 2 metro ethernet switch cli reference manual 186 25 t ime and sntp c ommands the simple network time protocol (sntp) (an adaptation of the network time protocol (ntp)) commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following t...

  • Page 192

    Des-1228/me layer 2 metro ethernet switch cli reference manual 187 show sntp purpose used to display the sntp information. Syntax show sntp description this command will display sntp settings information including the source ip address, time and poll interval. Parameters none. Restrictions none. Exa...

  • Page 193

    Des-1228/me layer 2 metro ethernet switch cli reference manual 188 disable sntp purpose to disable sntp server support. Syntax disable sntp description this will disable sntp support. Sntp service must be separately configured (see config sntp). Parameters none. Restrictions only administrator-level...

  • Page 194

    Des-1228/me layer 2 metro ethernet switch cli reference manual 189 config time_zone hour – select the number of hours different from gmt. Min – select the number of minutes difference added or subtracted to adjust the time zone. Restrictions only administrator-level users can issue this command. Exa...

  • Page 196

    Des-1228/me layer 2 metro ethernet switch cli reference manual 191 config dst e_time − configure the time of day to end dst. • − time is expressed using a 24-hour clock, in hours and minutes. S_date − configure the specific date (day of the month) to begin dst. • − the start date is expressed numeri...

  • Page 198

    Des-1228/me layer 2 metro ethernet switch cli reference manual 193 to configure a static arp entry for the ip address 10.48.74.12 and mac address 00:50:ba:00:07:36: des-1228/me:4#config arpentry 10.48.74.12 00-50-ba-00-07-36 command: config arpentry 10.48.74.12 00-50-ba-00-07-36 success. Des-1228/me...

  • Page 200

    Des-1228/me layer 2 metro ethernet switch cli reference manual 195 to remove dynamic entries in the arp table: des-1228/me:4#clear arptable command: clear arptable success. Des-1228/me:4#.

  • Page 201: Outing

    Des-1228/me layer 2 metro ethernet switch cli reference manual 196 27 r outing t able c ommands the routing table commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create iproute [default] {} delete iproute [def...

  • Page 203: Mac

    Des-1228/me layer 2 metro ethernet switch cli reference manual 198 28 mac n otification c ommands the mac notification commands in the command line interface (cli) are listed, in the following table, along with their appropriate parameters. Command parameters enable mac_notification disable mac_noti...

  • Page 205

    Des-1228/me layer 2 metro ethernet switch cli reference manual 200 show mac_notification purpose used to display the switch’s mac address table notification global settings. Syntax show mac_notification description this command is used to display the switch’s mac address table notification global se...

  • Page 206

    Des-1228/me layer 2 metro ethernet switch cli reference manual 201 10 disabled 11 disabled 12 disabled 13 disabled 14 disabled 15 disabled 16 disabled 17 disabled 18 disabled 19 disabled 20 disabled ctrl+c esc q quit space n next page p previous page r refresh.

  • Page 207: Ccess

    Des-1228/me layer 2 metro ethernet switch cli reference manual 202 29 a ccess a uthentication c ontrol c ommands the tacacs / xtacacs / tacacs+ / radius commands allows secure access to the switch using the tacacs / xtacacs / tacacs+ / radius protocols. When a user logs in to the switch or tries to ...

  • Page 208

    Des-1228/me layer 2 metro ethernet switch cli reference manual 203 the access authentication control commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable authen_policy disable authen_policy show authen_polic...

  • Page 209

    Des-1228/me layer 2 metro ethernet switch cli reference manual 204 enable authen_policy purpose used to enable system access authentication policy. Syntax enable authen_policy description this command will enable an administrator-defined authentication policy for users trying to access the switch. W...

  • Page 210

    Des-1228/me layer 2 metro ethernet switch cli reference manual 205 to display the system access authentication policy: des-1228/me:4#show authen_policy command: show authen_policy authentication policy: enabled des-1228/me:4# create authen_login method_list_name purpose used to create a user defined...

  • Page 211

    Des-1228/me layer 2 metro ethernet switch cli reference manual 206 config authen_login user may choose one or a combination of up to four(4) of the following authentication methods:  tacacs – adding this parameter will require the user to be authenticated using the tacacs protocol from the remote t...

  • Page 212

    Des-1228/me layer 2 metro ethernet switch cli reference manual 207 to configure the default method list with authentication methods xtacacs, tacacs+ and local, in that order: des-1228/me:4#config authen_login default method xtacacs tacacs+ local command: config authen_login default method xtacacs ta...

  • Page 213

    Des-1228/me layer 2 metro ethernet switch cli reference manual 208 show authen_login user account on the switch) and none (no authentication necessary to access any function on the switch). Restrictions none. Example usage: to view the authentication login method list named trinity: des-1228/me:4#sh...

  • Page 214

    Des-1228/me layer 2 metro ethernet switch cli reference manual 209 config authen_enable level privileges on the switch, he or she must be authenticated by a method on the switch to gain administrator privileges on the switch, which is defined by the administrator. A maximum of eight (8) enable metho...

  • Page 215

    Des-1228/me layer 2 metro ethernet switch cli reference manual 210 example usage: to configure the user defined method list “permit” with authentication methods tacacs, xtacacs and local, in that order. Des-1228/me:4#config authen_enable method_list_name trinity method tacacs xtacacs local command: ...

  • Page 216

    Des-1228/me layer 2 metro ethernet switch cli reference manual 211 show authen_enable all – entering this parameter will display all the authentication login methods currently configured on the switch. The window will display the following parameters:  method list name – the name of a previously co...

  • Page 217

    Des-1228/me layer 2 metro ethernet switch cli reference manual 212 config authen application  ssh – choose this parameter to configure the secure shell login method.  http – choose this parameter to configure the web interface login method.  all – choose this parameter to configure all applicatio...

  • Page 219

    Des-1228/me layer 2 metro ethernet switch cli reference manual 214 config authen server_host attempts to access the switch with the authentication protocol enabled, the switch will send authentication packets to a remote tacacs/xtacacs/tacacs+/radius server host on a remote host. The tacacs/xtacacs/...

  • Page 220

    Des-1228/me layer 2 metro ethernet switch cli reference manual 215 delete authen server_host  tacacs+ − enter this parameter if the server host utilizes the tacacs+ protocol.  radius − enter this parameter if the server host utilizes the radius protocol. Restrictions only administrator-level users...

  • Page 221

    Des-1228/me layer 2 metro ethernet switch cli reference manual 216 create authen server_group syntax create authen server_group description this command will create an authentication server group. A server group is a technique used to group tacacs/xtacacs/tacacs+/radius server hosts into user define...

  • Page 223

    Des-1228/me layer 2 metro ethernet switch cli reference manual 218 delete authen server_group purpose used to delete a user-defined authentication server group. Syntax delete authen server_group description this command will delete an authentication server group. Parameters − enter an alphanumeric s...

  • Page 224

    Des-1228/me layer 2 metro ethernet switch cli reference manual 219 config authen parameter response_timeout purpose used to configure the amount of time the switch will wait for a user to enter authentication before timing out. Syntax config authen parameter response_timeout description this command...

  • Page 225

    Des-1228/me layer 2 metro ethernet switch cli reference manual 220 show authen parameter description this command will display the authentication parameters currently configured on the switch, including the response timeout and user authentication attempts. This command will display the following fi...

  • Page 226

    Des-1228/me layer 2 metro ethernet switch cli reference manual 221 config admin local_enable command. When a user chooses the “local_enable” method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is set locally on th...

  • Page 227: Ssh

    Des-1228/me layer 2 metro ethernet switch cli reference manual 222 30 ssh c ommands the steps required to use the secure shell (ssh) protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows: create a user account with admin-level access u...

  • Page 228

    Des-1228/me layer 2 metro ethernet switch cli reference manual 223 enable ssh purpose used to enable ssh. Syntax enable ssh description this command allows users to enable ssh on the switch. Parameters none. Restrictions only administrator-level users can issue this command. Usage example: to enable...

  • Page 229

    Des-1228/me layer 2 metro ethernet switch cli reference manual 224 config ssh authmode parameters password – this parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the switch. Publickey − this parameter may be chosen if the administrator w...

  • Page 230

    Des-1228/me layer 2 metro ethernet switch cli reference manual 225 config ssh server parameters maxsession − allows the user to set the number of users that may simultaneously access the switch. The default setting is 8. Contimeout −allows the user to set the connection timeout. The user may set a t...

  • Page 231

    Des-1228/me layer 2 metro ethernet switch cli reference manual 226 config ssh user parameters − enter a username of no more than 15 characters to identify the ssh user. Authmode – specifies the authentication mode of the ssh user wishing to log on to the switch. The administrator may choose between:...

  • Page 233

    Des-1228/me layer 2 metro ethernet switch cli reference manual 228 show ssh algorithm purpose used to display the ssh algorithm setting. Syntax show ssh algorithm description this command will display the current ssh algorithm setting status. Parameters none. Restrictions none. Usage example: to dis...

  • Page 234: Smtp

    Des-1228/me layer 2 metro ethernet switch cli reference manual 229 31 smtp c ommands smtp or simple mail transfer protocol is a function of the switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The switch is to be configured as a clien...

  • Page 237

    Des-1228/me layer 2 metro ethernet switch cli reference manual 232 des-1228/me:4#show smtp command: show smtp smtp status: enabled smtp server address : 166.99.66.33 smtp server port : 25 self mail address: smtp@1228.Dev index mail receiver address -------- --------------------------------- 1 darren...

  • Page 240

    Des-1228/me layer 2 metro ethernet switch cli reference manual 235 example usage: to enable dhcp local relay function: des-1228/me:4#enable dhcp_local_relay command: enable dhcp_local_relay success. Des-1228/me:4# disable dhcp_local_relay purpose used to disable the dhcp local relay function on the ...

  • Page 241: Ratuitous

    Des-1228/me layer 2 metro ethernet switch cli reference manual 236 34 g ratuitous arp c ommands the gratuitous arp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config gratuitous_arp send ipif_status_up [ena...

  • Page 242

    Des-1228/me layer 2 metro ethernet switch cli reference manual 237 config gratuitous_arp send duplicate_ip_detected was sent by an ip address that matched the system’s own ip address. In this case, the system knows that somebody out there uses an ip address that is conflicting with the system. In or...

  • Page 243

    Des-1228/me layer 2 metro ethernet switch cli reference manual 238 config gratuitous_arp periodical_send − periodically send gratuitous arp interval time in seconds. 0- means it will not send gratuitous arp periodically. Restrictions only administrator-level users can issue this command. Example usa...

  • Page 244

    Des-1228/me layer 2 metro ethernet switch cli reference manual 239 example usage: to disable the system’s interface gratuitous arp log and trap: des-1228/me:4#disable gratuitous_arp system trap log command: disable gratuitous_arp system trap log success. Des-1228/me:4# show gratuitous_arp purpose us...

  • Page 245: Vlan

    Des-1228/me layer 2 metro ethernet switch cli reference manual 240 35 vlan t runking c ommands the vlan trunking commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable vlan_trunk disable vlan_trunk config vlan...

  • Page 247

    Des-1228/me layer 2 metro ethernet switch cli reference manual 242 to configure a vlan trunk port if port 6 is la-1 member port; port 7 is la-2 master port. Des-1228/me:4# config vlan_trunk ports 6-7 state enable command: config vlan_trunk ports 6-7 state enable can not operate the member ports of a...

  • Page 248

    Des-1228/me layer 2 metro ethernet switch cli reference manual 243 example usage: to display vlan trunk information: des-1228/me:4#show vlan_trunk command: show vlan_trunk vlan trunk :enable vlan trunk port :1-5,7 des-1228/me:4#.

  • Page 249: Symmetric

    Des-1228/me layer 2 metro ethernet switch cli reference manual 244 36 a symmetric vlan c ommands the asymmetric vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable asymmetric_vlan disable asymmetric_vl...

  • Page 250

    Des-1228/me layer 2 metro ethernet switch cli reference manual 245 show asymmetric_vlan purpose used to view the asymmetric vlan state on the switch. Syntax show asymmetric_vlan description this command displays the asymmetric vlan state on the switch parameters none. Restrictions none. Example usag...

  • Page 251: Igmp

    Des-1228/me layer 2 metro ethernet switch cli reference manual 246 37 igmp s nooping m ulticast vlan c ommands the igmp snooping multicast vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create igmp_snoop...

  • Page 252

    Des-1228/me layer 2 metro ethernet switch cli reference manual 247 example usage: to create igmp snoop multicast vlan mv12: des-1228/me:4# create igmp_snoop multicast_vlan mv1 2 command: create igmp_snoop multicast_vlan mv1 2 success. Des-1228/me:4# config igmp_snooping multicast_vlan purpose used t...

  • Page 254

    Des-1228/me layer 2 metro ethernet switch cli reference manual 249 delete igmp_snooping multicast_vlan purpose used to delete a multicast vlan. Syntax delete igmp_snooping multicast_vlan description the delete igmp_snooping multicast_vlan command allows you to delete multicat_vlan. Parameters − the ...

  • Page 255

    Des-1228/me layer 2 metro ethernet switch cli reference manual 250 disable igmp_snooping multicast_vlan purpose used to disable the multicast vlan function. Syntax disable igmp_snooping multicast_vlan description this command controls the multicast vlan function. The ism vlan will take effect when i...

  • Page 256: Lldp

    Des-1228/me layer 2 metro ethernet switch cli reference manual 251 38 lldp c ommands the lldp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable lldp disable lldp config lldp message_tx_interval config lld...

  • Page 257

    Des-1228/me layer 2 metro ethernet switch cli reference manual 252 enable lldp and process the lldp packets. The specific function of each port will depend on the per port lldp setting. For the advertisement of lldp packets, the switch announces the information to its neighbor through ports. For the...

  • Page 258

    Des-1228/me layer 2 metro ethernet switch cli reference manual 253 example usage to change the packet transmission interval: des-1228/me:4# config lldp message_tx_interval 30 command: config lldp message_tx_interval 30 success. Des-1228/me:4# config lldp message_tx_hold_multiplier purpose this comma...

  • Page 259

    Des-1228/me layer 2 metro ethernet switch cli reference manual 254 example usage to configure the delay-interval interval: des-1228/me:4# config lldp tx_delay 8 command: config lldp tx_delay 8 success. Des-1228/me:4# config lldp reinit_delay purpose change the minimum time of reinitialization delay ...

  • Page 261

    Des-1228/me layer 2 metro ethernet switch cli reference manual 256 example usage to configure the port’s transmit and receive mode: des-1228/me:4# config lldp ports 1-5 admin_status tx_and_rx command: config lldp ports 1-5 admin_status tx_and_rx success. Des-1228/me:4# config mgt_addr purpose used t...

  • Page 262

    Des-1228/me layer 2 metro ethernet switch cli reference manual 257 config lldp basic_tlvs 'system name tlv'. The default state is disabled. System_description − this tlv optional data type indicates that the lldp agent should transmit 'system description tlv'. The default state is disabled. System_c...

  • Page 263

    Des-1228/me layer 2 metro ethernet switch cli reference manual 258 config lldp dot1_tlv_vlan_name parameters − specified a range of ports to be configured. All − to set all ports in the system, you may use the “all” parameter. Dot1_tlv_vlan_name − this tlv optional data type indicates whether the co...

  • Page 264

    Des-1228/me layer 2 metro ethernet switch cli reference manual 259 example usage to configure the protocol identity tlv from the outbound lldp advertisements for all ports: des-1228/me:4# config lldp ports all dot1_tlv_protocol_identity all enable command: config lldp ports all dot1_tlv_protocol_ide...

  • Page 265

    Des-1228/me layer 2 metro ethernet switch cli reference manual 260 example usage to configure the lldp forward_lldpdu: des-1228/me:4# config lldp forward_ message enable command: config lldp forward_ message enable success. Des-1228/me:4# show lldp purpose this command displays the switch’s general ...

  • Page 266

    Des-1228/me layer 2 metro ethernet switch cli reference manual 261 example usage to display the management address information: des-1228/me:4#show lldp mgt_addr ipv4 192.168.69.123 command: show lldp mgt_addr ipv4 192.168.69.123 address 1 : ------------------------------------------------ subtype : ...

  • Page 267

    Des-1228/me layer 2 metro ethernet switch cli reference manual 262 example usage to display the lldp per port tlv option configuration: des-1228/me:4# show lldp ports 1 command: show lldp ports 1 port id : 1 ---------------------------------------------------------------------- admin status : tx_and...

  • Page 268

    Des-1228/me layer 2 metro ethernet switch cli reference manual 263 example usage to display outbound lldp advertisements for individual ports in detail: des-1228/me:4# show lldp local_ports 1 mode detailed command: show lldp local_ports 1 mode detailed port id : 1 -----------------------------------...

  • Page 269

    Des-1228/me layer 2 metro ethernet switch cli reference manual 264 des-1228/me:4#show lldp local_ports 1 mode normal command: show lldp local_ports 1 mode normal port id : 1 ------------------------------------------------------------------------- port id subtype : local port id : 1/1 port descripti...

  • Page 270

    Des-1228/me layer 2 metro ethernet switch cli reference manual 265 example usage to display remote table entries in brief mode: des-1228/me:4# show lldp remote_ports 1-2 mode brief command: show lldp remote_ports 1-2 mode brief port id: 1 ----------------------------------------------------------- r...

  • Page 271

    Des-1228/me layer 2 metro ethernet switch cli reference manual 266 des-1228/me:4# show lldp remote_ports ports 1 mode normal command: show lldp remote_ports ports 1 mode normal port id : 1 ----------------------------------------------------------- remote entities count : 1 entity 1 chassis id subty...

  • Page 272

    Des-1228/me layer 2 metro ethernet switch cli reference manual 267 des-1228/me:4# show lldp remote_ports 1 mode detailed command: show lldp remote_ports 1 mode detailed port id : 1 ---------------------------------------------------------------------- remote entities count : 1 entity 1 chassis id su...

  • Page 273

    Des-1228/me layer 2 metro ethernet switch cli reference manual 268 aggregation status : not currently in aggregation aggregation port id : 0 maximum frame size : 1536 unknown tlvs count : 0 (none.) des-1228/me:4# show lldp statistics purpose used to display the system lldp statistics information. Sy...

  • Page 274

    Des-1228/me layer 2 metro ethernet switch cli reference manual 269 example usage to display statistics information of port 1: des-1228/me:4# show lldp statistics ports 1 command: show lldp statistics ports 1 port id: 1 ----------------------------------------------------------- lldpstatstxportframes...

  • Page 276

    Des-1228/me layer 2 metro ethernet switch cli reference manual 271 example usage to display pppoe circuit id insertion: des-1228/me:4#show pppoe circuit_id_insertion command: show pppoe circuit_id_insertion status: enabled des-1228/me:4# show pppoe circuit_id_insertion ports purpose used to display ...

  • Page 277

    Des-1228/me layer 2 metro ethernet switch cli reference manual 272 example usage to configure pppoe circuit id insertion: des-1228/me:4#config pppoe circuit_id_insertion ports 1-24 state enable circuit_ id ip command: config pppoe circuit_id_insertion ports 1-24 state enable circuit_id ip success. D...

  • Page 278: Ip-Mac-Port

    Des-1228/me layer 2 metro ethernet switch cli reference manual 273 40 ip-mac-port b inding c ommands the ip network layer uses a four-byte address. The ethernet link layer uses a six-byte mac address. Binding these two address types together allows the transmission of data between the layers. The pr...

  • Page 279

    Des-1228/me layer 2 metro ethernet switch cli reference manual 274 des-1228/me:4#create address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00- 00-04 command: create address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00-00-04 success. Des-1228/me:4# config address_binding ip_m...

  • Page 280

    Des-1228/me layer 2 metro ethernet switch cli reference manual 275 des-1228/me:4#config address_binding ip_mac ports 2 state enable command: config address_binding ip_mac ports 2 state enable success. Des-1228/me:4# show address_binding purpose used to display ip-mac binding entries. Syntax show add...

  • Page 281

    Des-1228/me layer 2 metro ethernet switch cli reference manual 276 des-1228/me:4#show address_binding ip_mac all command: show address_binding ip_mac all ip address mac address ports --------------- ----------------- -------------------- 10.1.1.1 00-00-00-00-00-22 1-28 total entries: 1 des-1228/me:4...

  • Page 282

    Des-1228/me layer 2 metro ethernet switch cli reference manual 277 des-1228/me:4#delete address_binding ip_mac all command: delete address_binding ip_mac all success. Des-1228/me:4# enable address_binding trap_log purpose used to enable the trap log for the ip-mac binding function. Syntax enable add...

  • Page 283: Ayer

    Des-1228/me layer 2 metro ethernet switch cli reference manual 278 41 l ayer 3 c ontrol p acket f iltering the layer 3 control packet filtering commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config cpu_filter...

  • Page 284

    Des-1228/me layer 2 metro ethernet switch cli reference manual 279 des-1228/me:4#show cpu_filter l3_control_pkt 1-5 command: show cpu_filter l3_control_pkt 1-5 port rip ospf vrrp pim dvmrp igmp query ----- --------- --------- --------- --------- --------- ----------- 1 enabled disabled disabled disa...

  • Page 285: Oopback

    Des-1228/me layer 2 metro ethernet switch cli reference manual 280 42 l oopback d etection c ommands the loopback detection commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config loopdetect { recover_timer [0 ...

  • Page 287

    Des-1228/me layer 2 metro ethernet switch cli reference manual 282 des-1228/me:4#disable loopdetect command: disable loopdetect success des-1228/me:4# show loopdetect purpose used to display the current loopback detection settings on the switch. Syntax show loopdetect description used to display the...

  • Page 288

    Des-1228/me layer 2 metro ethernet switch cli reference manual 283 des-1228/me:4#show loopdetect ports 1-3 command: show loopdetect ports 1-3 port loopdetect state loop status ------ ------------------ ---------- 1 enabled normal 2 enabled normal 3 enabled normal ctrl+c esc q quit space n next page ...

  • Page 289: Echnical

    Des-1228/me layer 2 metro ethernet switch cli reference manual 284 43 t echnical s upport c ommands the technical support commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show tech_support upload tech_support_t...

  • Page 290

    Des-1228/me layer 2 metro ethernet switch cli reference manual 285 example usage to display technical support information on the switch: des-1228/me:4# show tech_support command: show tech_support [device information 61450ms] device type : des-1228/me metro ethernet switch mac address : 00-1b-11-b1-...

  • Page 291

    Des-1228/me layer 2 metro ethernet switch cli reference manual 286 des-1228/me:4# upload tech_support_to_tftp purpose used to upload the information of technical support. Syntax upload tech_support_to_tftp description the upload tech_support_to_tftp command is used to upload the technical support in...

  • Page 292: Ommand

    Des-1228/me layer 2 metro ethernet switch cli reference manual 287 44 c ommand h istory l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters ? Dir config command_history show command_histor...

  • Page 293

    Des-1228/me layer 2 metro ethernet switch cli reference manual 288 example usage to display all of the commands in the cli: des-1228/me:4#? .. ? Cable_diag ports clear clear arptable clear counters clear fdb clear flood_fdb clear igmp_snooping data_driven_group clear log clear port_security_entry po...

  • Page 294

    Des-1228/me layer 2 metro ethernet switch cli reference manual 289 dir parameters none. Restrictions none. Example usage: to display all commands: des-1228/me:4#dir .. ? Clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1...

  • Page 295

    Des-1228/me layer 2 metro ethernet switch cli reference manual 290 show command_history purpose used to display the command history. Syntax show command_history description this command will display the command history. Parameters none. Restrictions none. Example usage to display the command history...

  • Page 296

    Des-1228/me layer 2 metro ethernet switch cli reference manual 291 des-1228/me:4#show command logging command: show command logging command logging state : enabled des-1228/me:4# disable command logging purpose this command is used to disable command logging. Syntax disable command logging descripti...

  • Page 297: Dhcp

    Des-1228/me layer 2 metro ethernet switch cli reference manual 292 45 dhcp s erver s creen l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config filter dhcp_server [add permit server_...

  • Page 298

    Des-1228/me layer 2 metro ethernet switch cli reference manual 293 to configure filtering trap logs for the dhcp server: des-1228/me:4#config filter dhcp_server trap_log enable command: config filter dhcp_server trap_log enable success. Des-1228/me:4# config filter dhcp_server illegal_server_log_sup...

  • Page 299

    Des-1228/me layer 2 metro ethernet switch cli reference manual 294 des-1228/me:4#show filter dhcp_server command: show filter dhcp_server enabled ports: filter dhcp server trap & log state: enabled illegal_server_log_suppress_duration : 30 minutes filter dhcp server/client table: server ip address c...

  • Page 300: Arp

    Des-1228/me layer 2 metro ethernet switch cli reference manual 295 46 arp s poofing a ttack p revention l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config arp_spoofing_prevention [...

  • Page 301

    Des-1228/me layer 2 metro ethernet switch cli reference manual 296 10.90.90.1 00-12-34-56-78-90 1-28 total entries : 1 des-1228/me:4#.

  • Page 302: Appendix A

    Des-1228/me layer 2 metro ethernet switch cli reference manual 297 appendix a t echnical s pecifications general protocols fiber-optic ieee 802.3 10base-t ethernet ieee 802.3u 100base-tx fast ethernet ieee 802.3ab 1000base-t gigabit ethernet ieee 802.3z 1000base-t (sfp “mini gbic”) ieee 802.1d/s/w s...

  • Page 303

    Des-1228/me layer 2 metro ethernet switch cli reference manual 298 power consumption 18.8w dc fans none operating temperature 0 - 40°c storage temperature -40 - 70°c humidity 5 - 95% non-condensing dimensions 441(w) x 207(d) x 44(h) mm weight 2.36kg (5.20lbs) performance transmission method store-an...

  • Page 304

    Des-1228/me layer 2 metro ethernet switch cli reference manual 299 ports blinking green when there is reception or transmission (i.E. Activity--act) of data occurring at a 1000mbps connected port. Solid amber when there is a secure 10/100mbps fast ethernet connection (or link) at any of the ports. B...

  • Page 305

    Des-1228/me layer 2 metro ethernet switch cli reference manual 300 24 x 10/100baset ports compliant to following standards, ieee 802.3 compliance ieee 802.3u compliance support half/full-duplex operations all ports support auto mdi-x/mdi-ii cross over ieee 802.3x flow control support for full-duplex...

  • Page 306

    Des-1228/me layer 2 metro ethernet switch cli reference manual 301 pin assignment for data: (alternative a mdi-x) pin# signal 1 receive+ 2 receive- 3 transmit+ 4 5 6 transmit- 7 8.