1. DL manuals
  2. D-Link
  3. Switch
  4. DES-3028
  5. Cli Reference Manual

D-Link DES-3028 Cli Reference Manual

Manual is about: Managed 10/100Mbps Fast

Summary of DES-3028

  • Page 1

    D-link ™ des-3028/des-3028p/des-3052/des-3052p managed 10/100mbps fast ethernet switch release i cli reference manual.

  • Page 2

    _________________________________________________________________________________ information in this document is subject to change without notice. © 2007 d-link corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of d-link computer corporation is s...

  • Page 3

    Table of contents cli reference manual .........................................................................................................................................I introduction ................................................................................................................

  • Page 4

    Access control list (acl) commands......................................................................................................151 time range commands.....................................................................................................................................164 safe...

  • Page 5: Ntroduction

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 1 i ntroduction the switch can be managed through the switch’s serial port, telnet, or the web-based management agent. The command line interface (cli) can be used to configure and manage the switch via the seria...

  • Page 6

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual setting the switch’s ip address each switch must be assigned its own ip address, which is used for communication with an snmp network manager or other tcp/ip application (for example bootp, tftp). The switch’s de...

  • Page 7

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual figure 1-3. Assigning an ip address in the above example, the switch was assigned an ip address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message success indicates that the command was executed s...

  • Page 8: Sing The

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 2 u sing the c onsole cli the des-3028/28p/52/52p support a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a t...

  • Page 9

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual figure 2-2. The ? Command when users enter a command without its required parameters, the cli will prompt users with a next possible completions: message. Figure 2-3. Example command parameter help in this case, ...

  • Page 10

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual figure 2-4. Using the up arrow to re-enter a command in the above example, the command config account was entered without the required parameter , the cli returned the next possible completions: prompt. The up ar...

  • Page 11

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual figure 2-6. Next possible completions: show command in the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the up arrow was used to re-enter the ...

  • Page 12: Ommand

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: all commands are case-sensitive. Be sure to disable caps loc...

  • Page 13

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual {braces} however the effect of the system reset is dependent on which, if any, value is specified. Therefore, with this example there are three possible outcomes of performing a system reset. See the following ch...

  • Page 15

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to create an administrator-level user account with the username “dlink”. Des-3028p:4#create account admin dlink command: create account admin dlink enter a case-sensitive new password:**** enter the new password ...

  • Page 16

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show account command: show account current accounts: username access level --------------- ------------ dlink admin total entries: 1 des-3028p:4# delete account purpose used to delete an existing user...

  • Page 17

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to display the way that the users logged in: des-3028p:4#show session command: show session id login time live time from level name -- ------------------------------ --------- ------------ ----- --...

  • Page 18

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show serial_port purpose used to display the current serial port settings. Syntax show serial_port description this command displays the current serial port settings. Parameters none. Restrictions none example us...

  • Page 19

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable clipaging purpose used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging description this command is used when issuing a command which causes ...

  • Page 20

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable telnet are numbered between 1 and 65535. The “well-known” tcp port for the telnet protocol is 23. Restrictions only administrator-level users can issue this command. Example usage: to enable telnet and con...

  • Page 21

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable web purpose used to enable the http-based management software on the switch. Syntax enable web description this command is used to enable the web-based management software on the switch. The user can speci...

  • Page 22

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual save restrictions only administrator-level users can issue this command. Example usage: to save the switch’s current configuration to non-volatile ram: des-3028p:4#save command: save saving all configurations to ...

  • Page 23

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to restore all of the switch’s parameters to their default values: des-3028p:4#reset config command: reset config are you sure you want to proceed with system reset?(y/n) success. Des-3028p:4# login purpose used ...

  • Page 24: Odify

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 5 m odify b anner and p rompt c ommands administrator level users can modify the login banner (greeting message) and command prompt by using the commands described below. Command parameters config command_ prompt...

  • Page 25

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config greeting _message message). Parameters default –if the user enters default to the modify banner command, then the banner will be reset to the original factory banner. To open the banner editor, click enter...

  • Page 26

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show greeting_message purpose used to view the currently configured greeting message configured on the switch. Syntax show greeting_message description this command is used to view the currently configured greeti...

  • Page 28

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure the speed of port 3 to be 10 mbps, full duplex, with learning and state enabled: des-3028p:4#config ports 1-3 speed 10_full state enable command: config ports 1-3 speed 10_full state e...

  • Page 29

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to display the configuration of all ports on a standalone switch, with description: des-3028p:4#show ports description command: show ports description port port settings connection address state sp...

  • Page 30: Ort

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 7 p ort s ecurity c ommands the switch’s port security commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config port_securi...

  • Page 31

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode d...

  • Page 32

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4# clear port_security_entry port 6 command: clear port_security_entry port 6 success. Des-3028p:4# show port_security purpose used to display the current port security configuration. Syntax show port_s...

  • Page 33

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual disable port_security trap_log purpose used to disable the trap log for port security. Syntax disable port_security trap_log description this command, along with the enable port_security trap_log, will enable and...

  • Page 34: Etwork

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 8 n etwork m anagement (snmp) c ommands the des-3028/28p/52/52p support the simple network management protocol (snmp) versions 1, 2c, and 3. Users can specify which version of the snmp users want to use to monito...

  • Page 35

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual command parameters delete snmp host show snmp host create trusted_host delete trusted_host show trusted_host enable snmp traps enable snmp authenticate traps show snmp traps disable snmp traps disable snmp authen...

  • Page 36

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create snmp user • - an alphanumeric sting of between 8 and 16 characters that will be used to authorize the agent to receive packets for the host. • - enter an alphanumeric sting of exactly 32 characters, in hex...

  • Page 37

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to delete a previously entered snmp user on the switch: des-3028p:4#delete snmp user dlink command: delete snmp user dlink success. Des-3028p:4# show snmp user purpose used to display information a...

  • Page 38

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to create an snmp view: des-3028p:4#create snmp view dlinkview 1.3.6 view_type included command: create snmp view dlinkview 1.3.6 view_type included success. Des-3028p:4# delete snmp view purpose used to remove a...

  • Page 39

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show snmp view command: show snmp view vacm view table settings view name subtree view type -------------------- ------------------------- ---------- readview 1 included writeview 1 included notifyvie...

  • Page 40

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#create snmp community dlink view readview read_write command: create snmp community dlink view readview read_write success. Des-3028p:4# delete snmp community purpose used to remove a specific snmp co...

  • Page 41

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show snmp community command: show snmp community snmp community table community name view name access right -------------------------------- ------------------------------- ------------ private commun...

  • Page 43

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 success. Des-3028p:4# delete ...

  • Page 44

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show snmp groups command: show snmp groups vacm access table settings group name : group3 readview name : readview writeview name : writeview notify view name : notifyview security model : snmpv3 secu...

  • Page 45

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create snmp host strategies. It includes improvements in the structure of management information (smi) and adds some security features. V3 – specifies that the snmp version 3 will be used. Snmp v3 provides secure...

  • Page 46

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#delete snmp host 10.48.74.100 command: delete snmp host 10.48.74.100 success. Des-3028p:4# show snmp host purpose used to display the recipient of snmp traps generated by the switch’s snmp agent. Synt...

  • Page 47

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#create trusted_host 10.48.74.121 command: create trusted_host 10.48.74.121 success. Des-3028p:4# show trusted_host purpose used to display a list of trusted hosts entered on the switch using the creat...

  • Page 48

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable snmp traps purpose used to enable snmp trap support. Syntax enable snmp traps description the enable snmp traps command is used to enable snmp trap support on the switch. Parameters none. Restrictions only...

  • Page 49

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show snmp traps command: show snmp traps snmp traps : enabled authenticate traps : enabled des-3028p:4# disable snmp traps purpose used to disable snmp trap support on the switch. Syntax disable snmp ...

  • Page 50

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config snmp system_contact purpose used to enter the name of a contact person who is responsible for the switch. Syntax config snmp system_contact{} description the config snmp system_contact command is used to e...

  • Page 51

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config snmp system_name purpose used to configure the name for the switch. Syntax config snmp system_name {} description the config snmp system_name command configures the name of the switch. Parameters des-3028p...

  • Page 52

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to disable rmon: des-3028p:4#disable rmon command: disable rmon success. Des-3028p:4# 48.

  • Page 53: Witch

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 9 s witch u tility c ommands the switch utility commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters download [firmware_fromtf...

  • Page 54

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#download cfg_fromtftp 10.48.74.121 c:\cfg\setting.Txt command: download cfg_fromtftp 10.48.74.121 c:\cfg\setting.Txt connecting to server................... Done. Download configuration..................

  • Page 55

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4# config firmware image_id 1 boot_up command: config firmware image_id 1 boot_up success. Des-3028p:4# show firmware information purpose used to display the firmware section information. Syntax show fi...

  • Page 56

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show config 1. Basic (serial port, telnet and web management status) 2. Storm control 3. Ip group management 4. Syslog 5. Qos 6. Port mirroring 7. Traffic segmentation 8. Port 9. Port lock 10. 8021x 11. Snmpv3 12...

  • Page 58

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual note: dual-purpose (dhcp/tftp) server utility software may require entry of the configuration file name and path within the user interface. Alternatively, the dhcp software may require creating a separate ext fil...

  • Page 59

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual disable autoconfig purpose use this to deactivate autoconfiguration from dhcp. Syntax disable autoconfig description this instructs the switch not to accept autoconfiguration instruction from the dhcp server. Thi...

  • Page 60

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual ping purpose used to test the connectivity between network devices. Syntax ping {times } {timeout } description the ping command sends internet control message protocol (icmp) echo messages to a remote ip address...

  • Page 61: Etwork

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 10 n etwork m onitoring c ommands the network monitoring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show packet port...

  • Page 62

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show packet port 2 command: show packet port 2 port number : 2 frame size frame counts frame/sec frame type total total/sec ------------ ------------ ---------- ---------- ------- --------- 64 3275 10...

  • Page 64

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual clear counters purpose used to clear the switch’s statistics counters. Syntax clear counters {ports } description this command will clear the counters used by the switch to compile statistics. Parameters − specif...

  • Page 65

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show log index 1-5 command: show log index 1-5 index data time log text ----- ---------------------------- ------------------------------------------------------------------------------------- 5 00000...

  • Page 66

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show syslog purpose used to display the syslog protocol status as enabled or disabled. Syntax show syslog description the show syslog command displays the syslog status as enabled or disabled. Parameters none. Re...

  • Page 67

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create syslog host 0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslog 6 line printer subsystem 7 network news subsys...

  • Page 69

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual numerical facility code parameters 0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslog 6 line printer subsystem 7 net...

  • Page 70

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config syslog host 1 severity all facility local0 command: config syslog host all severity all facility local0 success. Des-3028p:4# example usage: to configure a syslog host for all hosts: des-3028p:...

  • Page 71

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show syslog host command: show syslog host syslog global state: disabled host id host ip address severity facility udp port status ------- --------------- -------------- -------- -------- -------- 1 1...

  • Page 72

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to display the time interval for saving log files: des-3028p:4#show log_save_timing command: show log_save_timing saving log method: time_interval interval : 30 des-3028p:4# 68.

  • Page 73: Ultiple

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 11 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, i...

  • Page 74

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual command parameters show stp instance {} show stp mst_config id each command is listed, in detail, in the following sections. Enable stp purpose used to globally enable stp on the switch. Syntax enable stp descrip...

  • Page 75

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config stp version (rstp) globally on the switch. Stp - selecting this parameter will set the spanning tree protocol (stp) globally on the switch. Restrictions only administrator-level users can issue this comman...

  • Page 77

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config stp ports where an 802.1d network connects to an 802.1w or 802.1s enabled network. Migration should be set as yes on ports connected to network stations or segments that are capable of being upgraded to 80...

  • Page 78

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure stp with path cost 19, hellotime set to 5 seconds, migration enable, and state enable for ports 1-5 of module 1. Des-3028p:4#config stp ports 1-5 externalcost 19 hellotime 5 migrate ye...

  • Page 79

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config stp instance_id remove_vlan - along with thevid_range parameter, this command will remove vids to the previously configured stp instance_id. - specify the vid range from configured vlans set on the switch....

  • Page 80

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config stp priority purpose used to update the stp instance configuration syntax config stp priority instance_id description this command is used to update the stp instance configuration settings on the switch. T...

  • Page 81

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config stp mst_config_id revision_level 10 name trinity command : config stp mst_config_id revision_level 10 name trinity success. Des-3028p:4# config stp mst_ports purpose used to update the port con...

  • Page 82

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show stp purpose used to display the switch’s current stp configuration. Syntax show stp description this command displays the switch’s current stp configuration. Parameters none restrictions none. Example usage:...

  • Page 83

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show stp ports purpose used to display the switch’s current stp ports configuration. Syntax show stp ports description this command displays the stp ports settings for a specified port or group of ports (one port...

  • Page 84

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show stp instance 0 command: show stp instance 0 stp instance settings --------------------------- instance type : cist instance status : enabled instance priority : 32768(bridge priority : 32768, sys...

  • Page 85: Orwarding

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 12 f orwarding d atabase c ommands the layer 2 forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create...

  • Page 86

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create multicast_fdb purpose used to create a static entry to the multicast mac address forwarding table (database) syntax create multicast_fdb description this command will make an entry into the switch’s multic...

  • Page 87

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config fdb aging_time purpose used to set the aging time of the forwarding database. Syntax config fdb aging_time description the aging time affects the learning process of the switch. Dynamic forwarding table en...

  • Page 88

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#delete fdb default 01-00-00-00-01-02 command: delete fdb default 01-00-00-00-01-02 success. Des-3028p:4# clear fdb purpose used to clear the switch’s forwarding database of all dynamically learned mac...

  • Page 89

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show multicast_fdb vlan default command: show multicast_fdb vlan default vlan name : default mac address : 01-00-5e-00-00-00 egress ports : 1-5 mode : static total entries : 1 des-3028p:4# show fdb pu...

  • Page 91: Roadcast

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 13 b roadcast s torm c ontrol c ommands on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to ...

  • Page 92

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config traffic control the switch’s hardware will determine the packet storm based on the threshold value stated and drop packets until the issue is resolved. Shutdown - utilizes the switch’s software traffic con...

  • Page 93

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show traffic control description this command displays the current storm traffic control configuration on the switch. Parameters - used to specify port or list of ports for which to display traffic control settin...

  • Page 94

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure notifications to be sent when a packet storm control has been detected and cleared by the switch. Des-3028p:4# config traffic trap both command: config traffic trap both success. Des-3...

  • Page 95: S C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 14 c o s c ommands the des-3028/28p/52/52p supports 802.1p priority queuing. The switch has four priority queues. These priority queues are numbered from 3 (class 3) — the highest priority queue — to 0 (class 0) ...

  • Page 97

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show bandwidth_control 1-5 command: show bandwidth_control 1-5 bandwidth control table port rx rate (kbit/sec) tx rate (kbit/sec) ---- ------------------------ ---------------------- 1 no_limit no_lim...

  • Page 98

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show scheduling scheduling mechanisms in use on the switch. Parameters none. Restrictions none. Example usage: to display the current scheduling configuration: des-3028p:4# show scheduling command: show schedulin...

  • Page 99

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config scheduling_mechanism strict command: config scheduling_mechanism strict note: the strict mode is only supported at the highest queue and the other lower queues will still work at wrr mode. Succ...

  • Page 100

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config 802.1p user_priority purpose used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the switch. Syntax config 802.1p user_priority description this comma...

  • Page 101

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to show 802.1p user priority: des-3028p:4# show 802.1p user_priority command: show 802.1p user_priority qos class of traffic priority-0 -> priority-1 -> priority-2 -> priority-3 -> priority-4 -> pr...

  • Page 102

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show 802.1 default_priority restrictions none. Example usage: to display the current 802.1p default priority configuration on the switch: des-3028p:4# show 802.1p default_priority command: show 802.1p default_pri...

  • Page 104

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 7 off 802.1p off 8 off 802.1p off 9 off 802.1p off 10 off 802.1p off 11 off 802.1p off 12 off 802.1p off 13 off 802.1p off 14 off 802.1p off 15 off 802.1p off 16 off 802.1p off 17 off 802.1p off 18 off 802.1p off...

  • Page 105

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show cos port_mapping purpose used to map the destination mac address in incoming packets to one of the hardware queues available on the switch. Syntax show cos port_mapping {port } description the show cos mac_m...

  • Page 106

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show cos mac_mapping purpose used to show the mapping between destination mac addresses and cos traffic classes. Syntax show cos mac_mapping {destination_addr } description the show cos mac_mapping command displa...

  • Page 107

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show cos tos purpose used to show tos value to traffic class mapping. Syntax show cos tos {value } description the show cos tos command displays the information of tos to traffic class mappings. Parameters value ...

  • Page 108

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show dscp_mapping purpose used to show dscp value map to traffic class. Syntax show dscp_mapping {dscp_value } description the show dscp_mapping command displays the information for dscp mapping to traffic class....

  • Page 109: Ort

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 15 p ort m irroring c ommands the port mirroring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config mirror port [add ...

  • Page 110

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4# config mirror port 1 add source ports 2-7 both command: config mirror port 1 add source ports 2-7 both success. Des-3028p:4# example usage: to delete the mirroring ports: des-3028p:4#config mirror po...

  • Page 111

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#disable mirror command: disable mirror success. Des-3028p:4# show mirror purpose used to show the current port mirroring configuration on the switch. Syntax show mirror description this command displa...

  • Page 113

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual delete vlan purpose used to delete a previously configured vlan on the switch. Syntax delete vlan description this command will delete a previously configured vlan on the switch. Parameters − the vlan name of the...

  • Page 115

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to enable the generic vlan registration protocol (gvrp): des-3028p:4#enable gvrp command: enable gvrp success. Des-3028p:4# disable gvrp purpose used to disable gvrp on the switch. Syntax disable g...

  • Page 116

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show vlan command: show vlan vid : 1 vlan name : default vlan type : static advertisement : enabled member ports : 1,5-26 static ports : 1,5-26 current untagged ports : 1,5-26 static untagged ports : ...

  • Page 117: Ink

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 17 l ink a ggregation c ommands the link aggregation commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create link_aggregat...

  • Page 118

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual delete link_aggregation group_id purpose used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id description this command is used to delete a previously configured l...

  • Page 120

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show link_aggregation command: show link_aggregation link aggregation algorithm = mac-source-dest group id : 1 master port : 1 member port : 1, 5-10 active port : status : disabled flooding port : 0 d...

  • Page 121

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show lacp_port parameters - specifies a port or range of ports to be configured. If no parameter is specified, the system will display the current lacp status for all ports. Restrictions only administrator-level ...

  • Page 122: Asic

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 18 b asic ip c ommands the ip interface commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config ipif [system] [{ipaddress ...

  • Page 123

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show ipif purpose used to display the configuration of an ip interface on the switch. Syntax show ipif description this command will display the configuration of an ip interface on the switch. Parameters none. Re...

  • Page 124

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#enable autoconfig command: enable autoconfig success. Des-3028p:4# note: more detailed information for this command and related commands can be found in the section titled switch utility commands. 120

  • Page 126

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to configure igmp snooping: des-3028p:4#config igmp_snooping default host_timeout 250 state enable command: config igmp_snooping default host_timeout 250 state enable success. Des-3028p:4# config igmp_snooping qu...

  • Page 127

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure igmp snooping: des-3028p:4#config igmp_snooping querier default query_interval 125 state enable command: config igmp_snooping querier default query_interval 125 state enable success. D...

  • Page 128

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config router_ports_forbidden default add 1-10 command: config router_ports_forbidden default add 1-10 success. Des-3028p:4# enable igmp_snooping purpose used to enable igmp snooping on the switch. Sy...

  • Page 129

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show igmp_snooping purpose used to show the current status of igmp snooping on the switch. Syntax show igmp_snooping {vlan } description this command will display the current igmp snooping configuration on the sw...

  • Page 130

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show igmp_snooping group command: show igmp_snooping group vlan name : default multicast group: 224.0.0.2 mac address : 01-00-5e-00-00-02 reports : 1 multicast group: 234.5.6.7 port member : 4,10 vlan...

  • Page 131

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show router_ports command: show router_ports vlan name : default static router port : dynamic router port : total entries: 1 des-3028p:4# 127.

  • Page 133

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to add an ip destination to the dhcp relay table: des-3028p:4#config dhcp_relay add ipif system 10.58.44.6 command: config dhcp_relay add ipif system 10.58.44.6 success. Des-3028p:4# config dhcp_relay delete ipif...

  • Page 134

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure dhcp relay option 82 state: des-3028p:4#config dhcp_relay option_82 state enable command: config dhcp_relay option_82 state enable success. Des-3028p:4# config dhcp_relay option_82 che...

  • Page 135

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config dhcp_relay option_82 policy replace command: config dhcp_relay option_82 policy replace success. Des-3028p:4# show dhcp_relay purpose used to display the current dhcp/bootp relay configuration....

  • Page 136

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable dhcp_relay restrictions only administrator-level users can issue this command. Example usage: to enable dhcp relay: des-3028p:4#enable dhcp_relay command: enable dhcp_relay success. Des-3028p:4# disable dh...

  • Page 137: 802.1X C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 21 802.1x c ommands the des-3028/28p/52/52p implements the server-side of the ieee 802.1x port-based and mac-based network access control. This mechanism is intended to allow only authorized users, or other netwo...

  • Page 138

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable 802.1x used to enable the 802.1x server on the switch. Syntax enable 802.1x description the enable 802.1x command enables the 802.1x network access control server application on the switch. To select betwe...

  • Page 139

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show 802.1x auth_configuration purpose used to display the current configuration of the 802.1x server on the switch. Syntax show 802.1x auth_configuration {ports } description the show 802.1x auth_configuration c...

  • Page 140

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show 802.1x auth_configuration ports 1 command: show 802.1x auth_configuration ports 1 802.1x : enabled authentication mode : port_based authentication protocol : radius_eap port number : 1 capability...

  • Page 141

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show 802.1x auth_state command: show 802.1x auth_state 3 forceauth success authorized port auth pae state backend state port status ------ ----------------------- --------------------- ---------------...

  • Page 143

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config 802.1x auth_parameter default parameter will return all ports in the specified range to their default 802.1x settings. − specifies a port or range of ports to be configured. All − specifies all of the port...

  • Page 145

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config 802.1x reauth based only on the port number. Ports approved for re-authorization can then be specified. Mac_based − this instructs the switch to re-authorize 802.1x functions based only on the mac address....

  • Page 146

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config radius add 1 10.48.74.121 key dlink default command: config radius add 1 10.48.74.121 key dlink default success. Des-3028p:4# config radius delete purpose used to delete a previously entered ra...

  • Page 147

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config radius 1 10.48.74.121 key dlink default command: config radius 1 10.48.74.121 key dlink default success. Des-3028p:4# show radius purpose used to display the current radius configurations on th...

  • Page 148

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#create 802.1x guest_vlan trinity command: create 802.1x guest_vlan trinity success. Des-3028p:4# config 802.1x guest_vlan ports purpose used to configure ports for a pre-existing 802.1x guest vlan. Sy...

  • Page 149

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show 802.1x guest_vlan command: show 802.1x guest_vlan guest vlan setting ----------------------------------------------------------- guest vlan : trinity enable guest vlan ports: 1-5 des-3028p:4# del...

  • Page 150

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show acct_client command: show acct_client radiusacctclient --------------------------------------------------------------------------------------- radiusacctclientinvalidserveraddresses 0 radiusacctc...

  • Page 151

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual radiusauthclienttimeouts 0 radiusauthclientunknowntypes 0 radiusauthclientpacketsdropped 0 ctrl+c esc q quit space n next page enter next entry a all show auth_diagnostics purpose used to display the current auth...

  • Page 152

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to display the current authentication session statistics for port 16 of module 1: des-3028p:4#show auth_session_statistics ports 1 command: show auth_session_statistics ports 1 port number : 1 sessionoctetsrx 0 s...

  • Page 153

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create 802.1x user users. Parameters − a username of up to 15 alphanumeric characters in length. Restrictions only administrator-level users can issue this command. Example usage: to create an 802.1x user: des-30...

  • Page 154

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to delete 802.1x users: des-3028p:4#delete 802.1x user dtremblett command: delete 802.1x user dtremblett are you sure to delete the user?(y/n) success. Des-3028p:4# 150

  • Page 155: Ccess

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 22 a ccess c ontrol l ist (acl) c ommands the des-3028/28p/52/52p implements access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings and mac ad...

  • Page 158

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create access_profile protocol_id_mask − specifies that the switch will examine the protocol field in each packet and if this field contains the value entered here, apply the following rules. Packet_content_mask ...

  • Page 159

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config access_profile purpose used to configure an access profile on the switch and to define specific values that will be used to by the switch to determine if a given packet should be forwarded or filtered. Mas...

  • Page 160

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config access_profile parameters ip − specifies that the switch will look into the ip fields in each packet. Protocol_id − specifies that the switch will examine the protocol field in each packet and if this fiel...

  • Page 161

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config access_profile rate of 10 then the ingress rate is 640kbit/sec.) the user many select a value between 1- 156249 or no limit. The default setting is no limit. Deny – specifies that packets that do not match...

  • Page 162

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create cpu access_profile used to create an access profile specifically for cpu interface filtering on the switch and to define which parts of each incoming frame’s header the switch will examine. Masks can be en...

  • Page 163

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create cpu access_profile • src_port_mask − specifies a udp port mask for the source port. • dst_port_mask − specifies a udp port mask for the destination port. Profile_id − enter an integer between 1 and 3 that ...

  • Page 164

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config cpu access_profile purpose used to configure a cpu access profile used for cpu interface filtering and to define specific values that will be used to by the switch to determine if a given packet should be ...

  • Page 165

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config cpu access_profile • • tcp − specifies that the switch will examine the transmission control protocol (tcp) field within each packet. Parameters protocol_id − specifies that the switch will examine the pro...

  • Page 166

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual delete cpu access_profile created cpu access profile. Parameters profile_id − enter an integer between 1 and 3 that is used to identify the cpu access profile to be deleted with this command. This value is assign...

  • Page 167

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable cpu_interface_filtering restrictions only administrator-level users can issue this command. Example usage: to enable cpu interface filtering: des-3028p:4#enable cpu_interface_filtering command: enable cpu_...

  • Page 168: Ime

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 23 t ime r ange c ommands the time range commands are used in conjunction with the access profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the we...

  • Page 169

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure the time range time1 to be between 6:30 a.M. And 9:40 p.M., monday to friday: des-3028p:4#config time_range time1 hours start_time 6:30:00 end_time 21:40:00 weekdays mon-fri command: c...

  • Page 170: Afeguard

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 24 s afeguard e ngine c ommands periodically, malicious hosts on the network will attack the switch by utilizing packet flooding (arp storm) or other methods. These attacks may increase the cpu utilization beyond...

  • Page 171

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config safeguard_engine restrictions only administrator-level users can issue this command. Example usage: to configure the safeguard engine for the switch: des-3028p:4#config safeguard_engine state enable utiliz...

  • Page 172: Raffic

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 25 t raffic s egmentation c ommands traffic segmentation allows users to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and the...

  • Page 173

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to display the current traffic segmentation configuration on the switch. Des-3028p:4#show traffic_segmentation command: show traffic_segmentation traffic segmentation table ---- -------------------...

  • Page 174: Ime and

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 26 t ime and sntp c ommands the simple network time protocol (sntp) (an adaptation of the network time protocol (ntp)) commands in the command line interface (cli) are listed (along with the appropriate parameter...

  • Page 175

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 success. Des-3028p:4# show sntp used to display the sntp info...

  • Page 176

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual disable sntp purpose to disable sntp server support. Syntax disable sntp description this will disable sntp support. Sntp service must be separately configured (see config sntp). Parameters none. Restrictions onl...

  • Page 178

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config dst parameters s_day – configure the day of the week in which dst begins. E_day - configure the day of the week in which dst ends. S_mth - configure the month in which dst begins. E_mth - configure the mon...

  • Page 179

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to show the time currently set on the switch’s system clock: des-3028p:4#show time command: show time current time source : system clock current time : 1 days 01:39:17 time zone : gmt +02:30 daylig...

  • Page 180: Arp C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 27 arp c ommands the arp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create arpentry config arpentry delete arpentry ...

  • Page 181

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to configure a static arp entry for the ip address 10.48.74.12 and mac address 00:50:ba:00:07:36: des-3028p:4#config arpentry 10.48.74.12 00-50-ba-00-07-36 command: config arpentry 10.48.74.12 00-5...

  • Page 183

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual clear arptable purpose used to remove all dynamic arp table entries. Syntax clear arptable description this command is used to remove dynamic arp table entries from the switch’s arp table. Static arp table entrie...

  • Page 184: Outing

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 28 r outing t able c ommands the routing table commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create iproute [default] {...

  • Page 185

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#delete iproute default 10.53.13.254 command: delete iproute default 10.53.13.254 success. Des-3028p:4# show iproute purpose used to display the switch’s current ip routing table. Syntax show iproute {...

  • Page 186: Mac N

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 29 mac n otification c ommands the mac notification commands in the command line interface (cli) are listed, in the following table, along with their appropriate parameters. Command parameters enable mac_notifica...

  • Page 188

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show mac_notification parameters none. Restrictions none. Example usage: command: show mac_notification to view the switch’s mac address table notification global settings: des-3028p:4#show mac_notification globa...

  • Page 189: Ccess

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 30 a ccess a uthentication c ontrol c ommands the tacacs / xtacacs / tacacs+ / radius commands allows secure access to the switch using the tacacs / xtacacs / tacacs+ / radius protocols. When a user logs in to th...

  • Page 191

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable authen_policy purpose used to enable system access authentication policy. Syntax enable authen_policy description this command will enable an administrator-defined authentication policy for users trying to...

  • Page 192

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage: to display the system access authentication policy: des-3028p:4#show authen_policy command: show authen_policy authentication policy: enabled des-3028p:4# create authen_login method_list_name purpo...

  • Page 193

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen_login successful login using any of these methods will give the user a “user” privilege only. If the user wishes to upgrade his or her status to the administrator level, the user must implement the ...

  • Page 194

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen_login restrictions only administrator-level users can issue this command. Example usage: to configure the user defined method list “trinity” with authentication methods tacacs, xtacacs and local, in...

  • Page 195

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show authen_login parameters default – entering this parameter will display the default method list for users logging on to the switch. Method_list_name - enter an alphanumeric string of up to 15 characters to de...

  • Page 196

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create authen_enable method_list_name restrictions only administrator-level users can issue this command. Example usage: to create a user-defined method list, named “permit” for promoting user privileges to admin...

  • Page 197

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen_enable radius server hosts of the radius server group list. Server_group - adding this parameter will require the user to be authenticated using a user-defined server group previously configured on ...

  • Page 198

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4# delete authen_enable method_list_name purpose used to delete a user-defined method list of authentication methods for promoting normal user level privileges to administrator level privileges on the s...

  • Page 199

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show authen_enable and none (no authentication necessary to access any function on the switch). Restrictions none. Example usage: to display all method lists for promoting user level privileges to administrator l...

  • Page 200

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen application configured method list. Enter a alphanumeric string of up to 15 characters to define a previously configured method list. Restrictions only administrator-level users can issue this comma...

  • Page 201

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual create authen server_host more than one authentication protocol can be run on the same physical server host but, remember that tacacs/xtacacs/tacacs+/radius are separate entities and are not compatible with each ...

  • Page 202

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen server_host tacacs/xtacacs/tacacs+/radius server host on a remote host. The tacacs/xtacacs/tacacs+/radius server host will then verify or deny the request and return the appropriate message to the s...

  • Page 203

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual delete authen server_host description this command is used to delete a user-defined authentication server host previously created on the switch. Parameters server_host - the ip address of the remote server host t...

  • Page 204

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show authen server_host command: show authen server_host ip address protocol port timeout retransmit key --------------- -------- ----- ------- --------------- ------------------ 10.53.13.94 tacacs 49...

  • Page 205

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config authen server_group xtacacs protocol may be added to this group. Tacacs+ – use this parameter to utilize the built-in tacacs+ server protocol on the switch. Only server hosts utilizing the tacacs+ protocol...

  • Page 206

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#delete server_group group_1 command: delete server_group group_1 success. Des-3028p:4# show authen server_group purpose used to view authentication server groups on the switch. Syntax show authen serv...

  • Page 207

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to configure the response timeout for 60 seconds: des-3028p:4# config authen parameter response_timeout 60 command: config authen parameter response_timeout 60 success. Des-3028p:4# config authen parameter attemp...

  • Page 208

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show authen parameter command: show authen parameter response timeout : 60 seconds user attempts : 5 des-3028p:4# enable admin purpose used to promote user level privileges to administrator level priv...

  • Page 209

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#config admin local_enable command: config admin local_enable enter the old password: enter the case-sensitive new password:****** enter the new password again for confirmation:****** success. Des-3028...

  • Page 210: Ssh C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 31 ssh c ommands the steps required to use the secure shell (ssh) protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows: • create a user account wi...

  • Page 211

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable ssh purpose used to enable ssh. Syntax enable ssh description this command allows users to enable ssh on the switch. Parameters none. Restrictions only administrator-level users can issue this command. Usa...

  • Page 212

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config ssh authmode parameters password – this parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the switch. Publickey - this parameter may be chosen i...

  • Page 213

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config ssh server parameters maxsession - allows the user to set the number of users that may simultaneously access the switch. The default setting is 8. Contimeout - allows the user to set the connection timeout...

  • Page 214

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config ssh user description this command allows users to configure the ssh user authentication method. Parameters - enter a username of no more than 15 characters to identify the ssh user. Authmode – specifies th...

  • Page 215

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual note: to configure the ssh user, the administrator must create a user account on the switch. For information concerning configuring a user account, please see the section of this manual entitled basic switch comm...

  • Page 216

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show ssh algorithm purpose used to display the ssh algorithm setting. Syntax show ssh algorithm description this command will display the current ssh algorithm setting status. Parameters none. Restrictions none. ...

  • Page 217: Ssl C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 32 ssl c ommands secure sockets layer or ssl is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. The...

  • Page 220

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config ssl cachetimeout timeout parameters timeout - enter a timeout value between 60 and 86400 seconds to specify the total time an ssl key exchange id stays valid before the ssl module will require a new, full ...

  • Page 221

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show ssl command: show ssl ssl status disabled rsa_with_rc4_128_md5 0x0004 enabled rsa_with_3des_ede_cbc_sha 0x000a enabled dhe_dss_with_3des_ede_cbc_sha 0x0013 enabled rsa_export_with_rc4_40_md5 0x00...

  • Page 222

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#download ssl certificate 10.53.13.94 certfilename c:/cert.Der keyfilename c:/pkey.Der command: download ssl certificate 10.53.13.94 certfilename c:/cert.Der keyfilename c:/pkey.Der certificate loaded ...

  • Page 223: D-L

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 33 d-l ink s ingle ip m anagement c ommands simply put, d-link single ip management is a concept that will stack switches together over ethernet instead of using stacking ports or modules. Switches using d-link s...

  • Page 224

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual when a cs becomes a ms, it automatically becomes a member of the first snmp community (include read/write and read only) to which the cs belongs. However if a ms has its own ip address, it can belong to snmp comm...

  • Page 225

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual enable sim purpose used to enable single ip management (sim) on the switch syntax enable sim description this command will enable sim globally on the switch. Sim features and functions will not function properly ...

  • Page 226

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show sim mac address - displays the mac address of the switch. Capabilities – displays the type of switch, be it layer 2 (l2) or layer 3 (l3). Platform – switch description including name and model number. Sim st...

  • Page 227

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show sim candidates command: show sim candidates id mac address platform / hold firmware device name capability time version --- ----------------- ------------------------ ----- --------- ------------...

  • Page 228

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual port mac address role ------ ------------------ --------- 23 00-35-26-00-11-99 commander 23 00-35-26-00-11-91 member des-3028p:4# 24 00-35-26-00-11-90 candidate total entries: 3 reconfig purpose used to connect t...

  • Page 229

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual success. Des-3028p:4# to delete a member: des-3028p:4# config sim_group delete 1 command: config sim_group delete 1 please wait for ack... Success. Des-3028p:4# config sim purpose used to configure role parameter...

  • Page 230

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual to change the hold time of the discovery protocol: des-3028p:4# config sim hold_time 120 command: config sim hold_time 120 success. Des-3028p:4# to transfer the cs (commander) to be a cas (candidate): des-3028p:4...

  • Page 231

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual download sim restrictions only administrator-level users can issue this command. Example usage: des-3028p:4# download sim_ms firmware_from_tftp 10.53.13.94 c:/des3028.Had all this device is updating firmware. Ple...

  • Page 232

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4# upload sim_ms configuration_to_tftp 10.55.47.1 d:\configuration.Txt 1 command: upload sim_ms configuration 10.55.47.1 d:\configuration.Txt 1 this device is upload configuration. Please wait several m...

  • Page 233: Smtp C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 35 smtp c ommands smtp or simple mail transfer protocol is a function of the switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The switch is to be ...

  • Page 236

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028:4#show smtp command: show smtp smtp status: enabled smtp server address : 166.99.66.33 smtp server port : 25 self mail address: smtp@30xx.Dev index mail receiver address 2 dave@yeehaw.Com des-3026:4# ---...

  • Page 237: E C

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 35 p o e c ommands des-3028p and the des-3052p support power over ethernet (poe) as defined by the ieee 802.3af specification. Ports 1-24 supply 48 vdc power to pds over category 5 or category 3 utp ethernet cabl...

  • Page 238

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config poe system system. Parameters power_limit - the power limit parameter allows the user to configure the power budget of whole poe system. The minimum setting is 37 w and the maximum is 370w (depending on th...

  • Page 239

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual config poe ports ports. These ports will be the first ports to receive power and the last to disconnect power. High – specifying this parameter will nominate these ports as having the second highest priority for ...

  • Page 240

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual show poe system restrictions none. Example usage: command: show poe system to display the power settings for the switch system: des-3028p:4#show poe system poe system information ---------------------------------...

  • Page 241: Ommand

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 35 c ommand h istory l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters ? Dir config command_histor...

  • Page 242

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual example usage to display all of the commands in the cli: des-3028p:4#? .. ? Clear clear arptable clear counters clear fdb clear log config 802.1p user_priority config 802.1x init clear port_security_entry port co...

  • Page 243

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#dir .. ? Clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_pa...

  • Page 244

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual des-3028p:4#show command_history command: show command_history ? ? Show show vlan show command history des-3028p:4# 240

  • Page 245: Echnical

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual a t echnical s pecifications general protocols fiber-optic ieee 802.3 10base-t ethernet ieee 802.3ab 1000base-t gigabit ethernet ieee 802.1d/s/w spanning tree ieee 802.1x port based network access control dem-330...

  • Page 246

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual physical and environmental internal power supply input: 100~240v, ac/10a, 50~60hz output: des-3028/des-3052: 12v, 3.3a (max) des-3028p: 12v, 3.3a/50v, 3.7a (max) des-3052p: 12v,10.5a/50v,7.5a (max) power consumpt...

  • Page 247

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual poe capable ports des-3028p:random 12 ports des-3052p:random 24 ports power feeding for poe des-3028p: per port 15.4w (default), output capacity for des-3028p 185w power consumption max. 225w des-3052p: per port ...

  • Page 248

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual led indicators location led indicative color status description solid light power on power green light off power off solid light console on blinking post is in progress/ post is failure. Per device console green ...

  • Page 249

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual blinking amber when there is reception or transmission (i.E. Activity—act) of data occurring at the ports. Light off no link power feature detailed description internal power supply ac input: 100 - 240 vac, 50-60...

  • Page 250

    Des-3028 des-3028p des-3052 des-3052p layer 2 fast ethernet switch cli reference manual 246 dem-310gt (1000base-lx) dem-315gt (1000base-zx) dem-311gt (1000base-sx) dem-314gt (1000base-lh) dem-210 (single mode 100base-fx) dem-211 (multi mode 100base-fx) -wdm transceiver supported: 1.Dem-330t (tx-1550...