D-Link DES-3526 - Switch - Stackable Command Line Interface Reference Manual

Other manuals for DES-3526 - Switch - Stackable: User Manual, User Manual, Manual
Manual is about: Product Manual

Summary of DES-3526 - Switch - Stackable

  • Page 1

    Des-3526 layer 2 switch command line interface reference manual release 2 second edition (june 2004) 651es3526025 printed in taiwan recyclable.

  • Page 2

    Wichtige sicherheitshinweise 1. Bitte lesen sie sich diese hinweise sorgfältig durch. 2. Heben sie diese anleitung für den spätern gebrauch auf. 3. Vor jedem reinigen ist das gerät vom stromnetz zu trennen. Vervenden sie keine flüssig- oder aerosolreiniger. Am besten dient ein angefeuchtetes tuch zu...

  • Page 3

    Limited warranty hardware: d-link warrants each of its hardware products to be free from defects in workmanship and materials under normal use and service for a period commencing on the date of purchase from d-link or its authorized reseller and extending for the length of time stipulated by the aut...

  • Page 4

    Subject to the terms and conditions set forth herein, d-link systems, inc. (“d-link”) provides this limited warranty for its product only to the person or entity that originally purchased the product from: d-link or its authorized reseller or distributor and products purchased and delivered within t...

  • Page 5

    D-link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an rma number is not visible from the outside of the package. The product owner agrees to pay d-link’s reasonable handling and return shipping charges for any p...

  • Page 6

    This is a class a product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. Vi.

  • Page 7

    Table of contents introduction ..................................................................................................................................................................... 1 using the console cli...................................................................................

  • Page 8

    D-link single ip management commands.................................................................................................................220 command history list..................................................................................................................................

  • Page 9

    Des-3526 layer 2 fast ethernet switch 1 i ntroduction the switch can be managed through the switch’s serial port, telnet, or the web-based management agent. The command line interface (cli) can be used to configure and manage the switch via the serial port or telnet interfaces. This manual provides ...

  • Page 10

    Des-3526 layer 2 fast ethernet switch the switch is also assigned a unique mac address by the factory. This mac address cannot be changed, and can be found on the initial boot console screen – shown below. Figure 1-2. Boot screen the switch’s mac address can also be found in the web management progr...

  • Page 11

    Des-3526 layer 2 fast ethernet switch figure 1-3. Assigning an ip address in the above example, the switch was assigned an ip address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message success indicates that the command was executed successfully. The switch can now be configured and...

  • Page 12: Cli

    Des-3526 layer 2 fast ethernet switch 2 u sing the c onsole cli the des-3526 supports a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over...

  • Page 13

    Des-3526 layer 2 fast ethernet switch figure 2-1. Initial console screen commands are entered at the command prompt, des-3526:4#. There are a number of helpful features included in the cli. Entering the ? Command will display a list of all of the top-level commands. Figure 2-2. The ? Command when yo...

  • Page 14

    Des-3526 layer 2 fast ethernet switch figure 2-3. Example command parameter help in this case, the command config account was entered with the parameter . The cli will then prompt you to enter the with the message, next possible completions:. Every command in the cli has this feature, and complex co...

  • Page 15

    Des-3526 layer 2 fast ethernet switch all commands in the cli function in this way. In addition, the syntax of the help prompts are the same as presented in this manual − angle brackets indicate a numerical value or character string, braces { } indicate optional parameters or a choice of parameters,...

  • Page 16

    Des-3526 layer 2 fast ethernet switch in the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the up arrow was used to re-enter the show command, followed by the account parameter. The cli then displays the user accounts configured on...

  • Page 17

    Des-3526 layer 2 fast ethernet switch 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the cli and available through the console interface uses the same syntax. Note: all com...

  • Page 19

    Des-3526 layer 2 fast ethernet switch a displays the remaining pages without pausing between pages. Enter displays the next line or table entry. 11.

  • Page 21

    Des-3526 layer 2 fast ethernet switch create account usernames can be between 1 and 15 characters. Passwords can be between 0 and 15 characters. Example usage: to create an administrator-level user account with the username “dlink”. Des-3526:4#create account admin dlink command: create account admin...

  • Page 22

    Des-3526 layer 2 fast ethernet switch show account purpose used to display user accounts syntax show account description displays all user accounts created on the switch. Up to 8 user accounts can exist at one time. Parameters none. Restrictions only administrator-level users can issue this command....

  • Page 23

    Des-3526 layer 2 fast ethernet switch des-3526:4# show session purpose used to display a list of currently logged-in users. Syntax show session description this command displays a list of all the users that are logged-in at the time the command is issued. Parameters none restrictions none. Example u...

  • Page 24

    Des-3526 layer 2 fast ethernet switch mac address : 00-01-02-03-04-00 ip address : 10.41.44.22 (manual) vlan name : default subnet mask : 255.0.0.0 default gateway : 0.0.0.0 boot prom version : build 3.00.002 firmware version : build 2.00-b02 hardware version : 0a1 device s/n : power status : main –...

  • Page 26

    Des-3526 layer 2 fast ethernet switch des-3526:4#config serial_port baud_rate 115200 command: config serial_port baud_rate 115200 success. Des-3526:4# enable clipaging purpose used to pause the scrolling of the console screen when the show command displays more than one page. Syntax enable clipaging...

  • Page 27

    Des-3526 layer 2 fast ethernet switch to disable pausing of the screen display when show command output reaches the end of the page: des-3526:4#disable clipaging command: disable clipaging success. Des-3526:4# enable telnet purpose used to enable communication with and management of the switch using...

  • Page 28

    Des-3526 layer 2 fast ethernet switch des-3526:4#disable telnet command: disable telnet success. Des-3526:4# enable web purpose used to enable the http-based management software on the switch. Syntax enable web description this command is used to enable the web-based management software on the switc...

  • Page 29

    Des-3526 layer 2 fast ethernet switch des-3526:4#disable web command: disable web success. Des-3526:4# save purpose used to save changes in the switch’s configuration to non-volatile ram. Syntax save description this command is used to enter the current switch configuration into non-volatile ram. Th...

  • Page 31

    Des-3526 layer 2 fast ethernet switch example usage: to initiate the login procedure: des-3526:4#login command: login username: logout purpose used to log out a user from the switch’s console. Syntax logout description this command terminates the current user’s session on the switch’s console. Param...

  • Page 33

    Des-3526 layer 2 fast ethernet switch des-3526:4#config ports 1-3 speed 10_full learning enable state enable command: config ports 1-3 speed 10_full learning enable state enable success. Des-3526:4# show ports purpose used to display the current configuration of a range of ports. Syntax show ports {...

  • Page 34

    Des-3526 layer 2 fast ethernet switch 17 enabled auto/disabled link down enabled 18 enabled auto/disabled link down enabled 19 enabled auto/disabled link down enabled 20 enabled auto/disabled link down enabled ctrl+c esc q quit space n next page p previous page r refresh example usage: to display th...

  • Page 36

    Des-3526 layer 2 fast ethernet switch example usage: to configure the port security: des-3526:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode delet...

  • Page 37

    Des-3526 layer 2 fast ethernet switch clear port_security_entry syntax clear port_security_entry ports description this command is used to clear mac address entries which were learned by the switch by a specified port. This command only relates to the port security function. Parameters − specifies a...

  • Page 38: (Snmp) C

    Des-3526 layer 2 fast ethernet switch 7 n etwork m anagement (snmp) c ommands the network management commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The des-3526 supports the simple network management protocol (snmp) versions 1,...

  • Page 40

    Des-3526 layer 2 fast ethernet switch create snmp user description the create snmp user command creates a new snmp user and adds the user to an snmp group that is also created by this command. Snmp ensures: message integrity − ensures that packets have not been tampered with during transit. Authenti...

  • Page 41

    Des-3526 layer 2 fast ethernet switch create snmp user will be used to authorize the agent to receive packets for the host. Priv – adding the priv (privacy) parameter will allow for encryption in addition to the authentication algorithm for higher security. The user may choose: • • des – adding this...

  • Page 42

    Des-3526 layer 2 fast ethernet switch des-3526:4#delete snmp user dlink command: delete snmp user dlink success. Des-3526:4# show snmp user purpose used to display information about each snmp username in the snmp group username table. Syntax show snmp user description the show snmp user command disp...

  • Page 43

    Des-3526 layer 2 fast ethernet switch create snmp view be included or excluded from access by an snmp manager. View type – sets the view type to be: • • included − include this object in the list of objects that an snmp manager can access. Excluded − exclude this object from the list of objects that...

  • Page 44

    Des-3526 layer 2 fast ethernet switch des-3526:4#delete snmp view dlinkview all command: delete snmp view dlinkview all success. Des-3526:4# show snmp view purpose used to display an snmp view previously created on the switch. Syntax show snmp view {} description the show snmp view command displays ...

  • Page 45

    Des-3526 layer 2 fast ethernet switch create snmp community an access list of ip addresses of snmp managers that are permitted to use the community string to gain access to the switch’s snmp agent. An mib view that defines the subset of all mib objects that will be accessible to the snmp community. ...

  • Page 46

    Des-3526 layer 2 fast ethernet switch delete snmp community description the delete snmp community command is used to remove a previously defined snmp community string from the switch. Parameters − an alphanumeric string of up to 32 characters that is used to identify members of an snmp community. Th...

  • Page 47

    Des-3526 layer 2 fast ethernet switch des-3526:4#show snmp community command: show snmp community snmp community table community name view name access right -------------------------------- ------------------------------- ------------ dlink readview read_write private communityview read_write public...

  • Page 48

    Des-3526 layer 2 fast ethernet switch show snmp engineid the snmp engine on the switch. Parameters none. Restrictions none. Example usage: to display the current name of the snmp engine on the switch: des-3526:4#show snmp engineid command: show snmp engineid snmp engine id : 0035636666 des-3526:4# c...

  • Page 49

    Des-3526 layer 2 fast ethernet switch create snmp group • • encryption − scrambles the contents of messages to prevent it being viewed by an unauthorized source. Noauth_nopriv − specifies that there will be no authorization and no encryption of packets sent between the switch and a remote snmp manag...

  • Page 50

    Des-3526 layer 2 fast ethernet switch delete snmp group parameters − an alphanumeric name of up to 32 characters that will identify the snmp group the new snmp user will be associated with. Restrictions only administrator-level users can issue this command. Example usage: to delete the snmp group na...

  • Page 51

    Des-3526 layer 2 fast ethernet switch security level : authnopriv group name : group5 readview name : readview writeview name : writeview notify view name : notifyview security model : snmpv3 security level : authnopriv group name : group6 readview name : readview writeview name : writeview notify v...

  • Page 53

    Des-3526 layer 2 fast ethernet switch example usage: to create an snmp host to receive snmp messages: des-3526:4#create snmp host 10.48.74.100 v3 auth_priv public command: create snmp host 10.48.74.100 v3 auth_priv public success. Des-3526:4# delete snmp host purpose used to remove a recipient of sn...

  • Page 54

    Des-3526 layer 2 fast ethernet switch show snmp host restrictions none. Example usage: to display the currently configured snmp hosts on the switch: des-3526:4#show snmp host command: show snmp host snmp host table host ip address snmp version community name/snmpv3 user name --------------- --------...

  • Page 55

    Des-3526 layer 2 fast ethernet switch des-3526:4#create trusted_host 10.48.74.121 command: create trusted_host 10.48.74.121 success. Des-3526:4# show trusted_host purpose used to display a list of trusted hosts entered on the switch using the create trusted_host command above. Syntax show trusted_ho...

  • Page 56

    Des-3526 layer 2 fast ethernet switch delete trusted_host restrictions only administrator-level users can issue this command. Example usage: to delete a trusted host with an ip address 10.48.74.121: des-3526:4#delete trusted_host 10.48.74.121 command: delete trusted_host 10.48.74.121 success. Des-35...

  • Page 57

    Des-3526 layer 2 fast ethernet switch enable snmp authenticate_traps restrictions only administrator-level users can issue this command. Example usage: to turn on snmp authentication trap support: des-3526:4#enable snmp authenticate_traps command: enable snmp authenticate_traps success. Des-3526:4# ...

  • Page 58

    Des-3526 layer 2 fast ethernet switch disable snmp traps restrictions only administrator-level users can issue this command. Example usage: to prevent snmp traps from being sent from the switch: des-3526:4#disable snmp traps command: disable snmp traps success. Des-3526:4# disable snmp authenticate_...

  • Page 59

    Des-3526 layer 2 fast ethernet switch config snmp system_contact parameters - a maximum of 255 characters is allowed. A null string is accepted if there is no contact. Restrictions only administrator-level users can issue this command. Example usage: to configure the switch contact to “ m i s d e p ...

  • Page 60

    Des-3526 layer 2 fast ethernet switch config snmp system_name description the config snmp system_name command configures the name of the switch. Parameters - a maximum of 255 characters is allowed. A null string is accepted if no name is desired. Restrictions only administrator-level users can issue...

  • Page 61

    Des-3526 layer 2 fast ethernet switch disable rmon syntax disable rmon description this command is used, in conjunction with theenable rmon command above, to enable and disable remote monitoring (rmon) on the switch. Parameters none. Restrictions only administrator-level users can issue this command...

  • Page 62

    Des-3526 layer 2 fast ethernet switch 8 s witch u tility c ommands the download/upload commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters download [ firmware {section_id } configuration {increment} ] config firmw...

  • Page 63

    Des-3526 layer 2 fast ethernet switch to download a configuration file: des-3526:4#download configuration 10.48.74.121 c:\cfg\setting.Txt command: download configuration 10.48.74.121 c:\cfg\setting.Txt connecting to server................... Done. Download configuration............. Done. Des-3526:4...

  • Page 64

    Des-3526 layer 2 fast ethernet switch show firmware information parameters none. Restrictions none example usage: to display the current firmware information on the switch: des-3526:4#show firmware information command: show firmware information id version size(b) update time from user -- -------- --...

  • Page 65

    Des-3526 layer 2 fast ethernet switch example usage: to upload a configuration file: des-3526:4#upload configuration 10.48.74.121 c:\cfg\log.Txt command: upload configuration 10.48.74.121 c:\cfg\log.Txt connecting to server................... Done. Upload configuration...................Done. Des-35...

  • Page 67

    Des-3526 layer 2 fast ethernet switch port number : 2 frame size frame counts frame/sec frame type total total/sec ------------ ------------ ---------- ---------- ------- --------- 64 3275 10 rx bytes 408973 1657 65-127 755 10 rx frames 395 19 128-255 316 1 256-511 145 0 tx bytes 7918 178 512-1023 1...

  • Page 69

    Des-3526 layer 2 fast ethernet switch 17 0 0 0 18 0 0 0 19 0 0 0 20 0 0 0 21 0 0 0 ctrl+c esc q quit space n next page p previous page r refresh to display the current cpu utilization: des-3526:4#show utilization cpu command: show utilization cpu cpu utilization : -----------------------------------...

  • Page 70

    Des-3526 layer 2 fast ethernet switch clear log purpose used to clear the switch’s history log. Syntax clear log description this command will clear the switch’s history log. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to clear the log informat...

  • Page 71

    Des-3526 layer 2 fast ethernet switch 1 00000 days 00:06:31 configuration saved to flash (username: anonymous) des-3526:4# enable syslog purpose used to enable the system log to be sent to a remote host. Syntax enable syslog description the enable syslog command enables the system log to be sent to ...

  • Page 72

    Des-3526 layer 2 fast ethernet switch des-3526:4#disable syslog command: disable syslog success. Des-3526:4# show syslog purpose used to display the syslog protocol status as enabled or disabled. Syntax show syslog description the show syslog command displays the syslog status as enabled or disabled...

  • Page 73

    Des-3526 layer 2 fast ethernet switch create syslog host bold font indicates that the corresponding severity level is currently supported on the switch. Numerical severity code 0 emergency: system is unusable 1 alert: action must be taken immediately 2 critical: critical conditions 3 error: error co...

  • Page 76

    Des-3526 layer 2 fast ethernet switch config syslog host 4 warning: warning conditions 5 notice: normal but significant condition 6 informational: informational messages 7 debug: debug-level messages informational − specifies that informational messages will be sent to the remote host. This correspo...

  • Page 77

    Des-3526 layer 2 fast ethernet switch config syslog host 14 log alert 15 clock daemon 16 local use 0 (local0) 17 local use 1 (local1) 18 local use 2 (local2) 19 local use 3 (local3) 20 local use 4 (local4) 21 local use 5 (local5) 22 local use 6 (local6) 23 local use 7 (local7) local0 − specifies tha...

  • Page 78

    Des-3526 layer 2 fast ethernet switch to configure a syslog host: des-3526:4#config syslog host 1 severity all facility local0 command: config syslog host all severity all facility local0 success. Des-3526:4# example usage: to configure a syslog host for all hosts: des-3526:4#config syslog host all ...

  • Page 79

    Des-3526 layer 2 fast ethernet switch show syslog host purpose used to display the syslog hosts currently configured on the switch. Syntax show syslog host {} description the show syslog host command is used to display the syslog hosts that are currently configured on the switch. Parameters − specif...

  • Page 80: (Mstp) C

    Des-3526 layer 2 fast ethernet switch 10 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, is a standard defined by the ieee community that al...

  • Page 83

    Des-3526 layer 2 fast ethernet switch config stp parameters maxage − this value may be set to ensure that old information does not endlessly circulate through redundant paths in the network, preventing the effective propagation of the new information. Set by the root bridge, this value will aid in d...

  • Page 85

    Des-3526 layer 2 fast ethernet switch config stp ports ports, p2p ports transition to a forwarding state rapidly thus benefiting from rstp. A p2p value of false indicates that the port cannot have p2p status. Auto allows the port to have p2p status whenever possible and operate as if the p2p status ...

  • Page 87

    Des-3526 layer 2 fast ethernet switch success. Des-3526:4# delete stp instance_id purpose used to delete a stp instance id from the switch. Syntax delete stp instance_id description this command allows the user to delete a previously configured stp instance id from the switch. Parameters enter a val...

  • Page 88

    Des-3526 layer 2 fast ethernet switch config stp priority restrictions only administrator-level users can issue this command. Example usage: to set the priority value for instance_id 2 as 4096. Des-3526:4#config stp priority 4096 instance_id 2 command : config stp priority 4096 instance_id 2 success...

  • Page 90

    Des-3526 layer 2 fast ethernet switch des-3526:4# show stp purpose used to display the switch’s current stp configuration. Syntax show stp description this command displays the switch’s current stp configuration. Parameters none restrictions none. Example usage: to display the status of stp on the s...

  • Page 91

    Des-3526 layer 2 fast ethernet switch des-3526:4#show stp command: show stp stp status : enabled stp version : mstp max age : 20 forward delay : 15 max age : 20 tx hold count : 3 forwarding bpdu : enabled des-3526:4# show stp ports purpose used to display the switch’s current instance_id configurati...

  • Page 92

    Des-3526 layer 2 fast ethernet switch show stp instance_id purpose used to display the switch’s stp instance configuration syntax show stp instance_id description this command displays the switch’s current stp instance settings and the stp instance operational status. Parameters - enter a value defi...

  • Page 93

    Des-3526 layer 2 fast ethernet switch show stp mst_config_id purpose used to display the mstp configuration identification. Syntax show stp mst_config_id description this command displays the switch’s current mstp configuration identification. Parameters none. Restrictions none. Example usage: to sh...

  • Page 94

    Des-3526 layer 2 fast ethernet switch 11 f orwarding d atabase c ommands the layer 2 forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create fdb port create multicast_fdb config multicast_fd...

  • Page 95

    Des-3526 layer 2 fast ethernet switch des-3526:4#create fdb default 00-00-00-00-01-02 port 5 command: create fdb default 00-00-00-00-01-02 port 5 success. Des-3526:4# create multicast_fdb purpose used to create a static entry to the multicast mac address forwarding table (database) syntax create mul...

  • Page 97

    Des-3526 layer 2 fast ethernet switch des-3526:4#config fdb aging_time 300 command: config fdb aging_time 300 success. Des-3526:4# delete fdb purpose used to delete an entry to the switch’s forwarding database. Syntax delete fdb description this command is used to delete a previous entry to the swit...

  • Page 99

    Des-3526 layer 2 fast ethernet switch des-3526:4#show multicast_fdb vlan default command: show multicast_fdb vlan default vlan name : default mac address : 01-00-5e-00-00-00 egress ports : 1-5 mode : static total entries : 1 des-3526:4# show fdb purpose used to display the current unicast mac addres...

  • Page 100

    Des-3526 layer 2 fast ethernet switch 1 default 00-00-39-34-66-9a 10 dynamic 1 default 00-00-51-43-70-00 10 dynamic 1 default 00-00-5e-00-01-01 10 dynamic 1 default 00-00-74-60-72-2d 10 dynamic 1 default 00-00-81-05-00-80 10 dynamic 1 default 00-00-81-05-02-00 10 dynamic 1 default 00-00-81-48-70-01 ...

  • Page 101

    Des-3526 layer 2 fast ethernet switch show multicast port_filtering_mode purpose used to show the multicast packet filtering mode on a port per port basis. Syntax show multicast port_filtering_mode {} description this command will display the current multicast packet filtering mode for specified por...

  • Page 103

    Des-3526 layer 2 fast ethernet switch des-3526:4# show traffic control purpose used to display current traffic control settings. Syntax show traffic control {group_list } description this command displays the current storm traffic control configuration on the switch. Parameters group_list − used to ...

  • Page 104: S C

    Des-3526 layer 2 fast ethernet switch 13 q o s c ommands the des-3526 switch supports 802.1p priority queuing. The switch has 4 priority queues. These priority queues are numbered from 3 (class 3) — the highest priority queue — to 0 (class 0) — the lowest priority queue. The eight priority tags spec...

  • Page 105

    Des-3526 layer 2 fast ethernet switch config bandwidth_control parameters − specifies a port or range of ports to be configured. Rx_rate − specifies that one of the parameters below (no_limit or ) will be applied to the rate at which the above specified ports will be allowed to receive packets no_li...

  • Page 106

    Des-3526 layer 2 fast ethernet switch to display bandwidth control settings: des-3526:4#show bandwidth_control 1-10 command: show bandwidth_control 1-10 bandwidth control table port rx rate (mbit/sec) tx_rate (mbit/sec) ---- ------------------------ ---------------------- 1 no_limit 10 2 no_limit 10...

  • Page 107

    Des-3526 layer 2 fast ethernet switch config scheduling transmitting its packets. A value between 0 and 255 can be specified. For example, if a value of 3 is specified, then the highest hardware priority queue (number 3) will be allowed to transmit 3 packets − then the next lowest hardware priority ...

  • Page 108

    Des-3526 layer 2 fast ethernet switch show scheduling purpose used to display the currently configured traffic scheduling on the switch. Syntax show scheduling description the show scheduling command will display the current traffic scheduling mechanisms in use on the switch. Parameters none. Restri...

  • Page 109

    Des-3526 layer 2 fast ethernet switch config 802.1p user_priority 2 0 lowest 3 1 mid-low 4 2 mid-high 5 2 mid-high 6 3 highest 7 3 highest. This mapping scheme is based upon recommendations contained in ieee 802.1d. You can change this mapping by specifying the 802.1p user priority you want to go to...

  • Page 110

    Des-3526 layer 2 fast ethernet switch show 802.1p user_priority restrictions none. Example usage: to show 802.1p user priority: des-3526:4# show 802.1p user_priority command: show 802.1p user_priority qos class of traffic priority-0 -> priority-1 -> priority-2 -> priority-3 -> priority-4 -> priority...

  • Page 111

    Des-3526 layer 2 fast ethernet switch des-3526:4# show 802.1 default_priority purpose used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p default_priority {} description the...

  • Page 113

    Des-3526 layer 2 fast ethernet switch config mirror port both − mirrors all the packets received or sent by the port or ports in the port list. Restrictions the target port cannot be listed as a source port. Only administrator-level users can issue this command. Example usage: to add the mirroring p...

  • Page 114

    Des-3526 layer 2 fast ethernet switch success. Des-3526:4# disable mirror purpose used to disable a previously entered port mirroring configuration. Syntax disable mirror description this command, combined with the enable mirror command above, allows you to enter a port mirroring configuration into ...

  • Page 115

    Des-3526 layer 2 fast ethernet switch des-3526:4#show mirror command: show mirror current settings mirror status : enabled target port : 1 mirrored port : rx : tx : 5-7 des-3526:4# 107.

  • Page 117

    Des-3526 layer 2 fast ethernet switch success. Des-3526:4# delete vlan purpose used to delete a previously configured vlan on the switch. Syntax delete vlan description this command will delete a previously configured vlan on the switch. Parameters − the vlan name of the vlan you want to delete. Res...

  • Page 120

    Des-3526 layer 2 fast ethernet switch disable gvrp purpose used to disable gvrp on the switch. Syntax disable gvrp description this command, along with enable gvrp, is used to enable and disable gvrp on the switch, without changing the gvrp configuration on the switch. Parameters none. Restrictions ...

  • Page 121

    Des-3526 layer 2 fast ethernet switch current untagged ports : 1,5-26 static untagged ports : 1,5-26 forbidden ports : vid : 4094 vlan name : trinity vlan type : static advertisement : enabled member ports : 2-4 static ports : 2-4 current untagged ports : 2-4 static untagged ports : 2-4 forbidden po...

  • Page 122

    Des-3526 layer 2 fast ethernet switch 13 1 disabled enabled all frames 14 1 disabled enabled all frames 15 1 disabled enabled all frames 16 1 disabled enabled all frames 17 1 disabled enabled all frames 18 1 disabled enabled all frames 19 1 disabled enabled all frames 20 1 disabled enabled all frame...

  • Page 123: Vlan C

    Des-3526 layer 2 fast ethernet switch 16 a symmetric vlan c ommands the asymmetric vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable asymmetric_vlan disable asymmetric_vlan show asymmetric_vlan each ...

  • Page 124

    Des-3526 layer 2 fast ethernet switch to disable asymmetric vlans: des-3526:4#disable asymmetric_vlan command: disable asymmetric_vlan success. Des-3526:4# show asymmetric_vlan purpose used to view the asymmetric vlan state on the switch. Syntax show asymmetric_vlan description this command displays...

  • Page 126

    Des-3526 layer 2 fast ethernet switch to create a link aggregation group: des-3526:4#create link_aggregation group_id 1 command: create link_aggregation group_id 1 success. Des-3526:4# delete link_aggregation group_id purpose used to delete a previously configured link aggregation group. Syntax dele...

  • Page 127

    Des-3526 layer 2 fast ethernet switch config link_aggregation master_port − master port id. Specifies which port (by port number) of the link aggregation group will be the master port. All of the ports in a link aggregation group will share the port configuration with the master port. Ports − specif...

  • Page 128

    Des-3526 layer 2 fast ethernet switch config link_aggregation algorithm restrictions only administrator-level users can issue this command. Example usage: to configure link aggregation algorithm for mac-source-dest: des-3526:4#config link_aggregation algorithm mac_source_dest command: config link_ag...

  • Page 130

    Des-3526 layer 2 fast ethernet switch show lacp_port if no parameter is specified, the system will display the current lacp status for all ports. Restrictions only administrator-level users can issue this command. Example usage: to display lacp port mode settings: des-3526:4#show lacp_port 1-10 comm...

  • Page 132

    Des-3526 layer 2 fast ethernet switch des-3526:4#config ipif system ipaddress 10.48.74.122/8 command: config ipif system ipaddress 10.48.74.122/8 success. Des-3526:4# show ipif purpose used to display the configuration of an ip interface on the switch. Syntax show ipif description this command will ...

  • Page 134

    Des-3526 layer 2 fast ethernet switch config igmp_snooping seconds. Leave_timer − specifies the amount of time a multicast address will stay in the database before it is deleted, after it has sent out a leave group message. An entry of zero (0) specifies an immediate deletion of the multicast addres...

  • Page 135

    Des-3526 layer 2 fast ethernet switch config igmp_snooping querier • group member interval—amount of time that must pass before a multicast router decides there are no more members of a group on a network. This interval is calculated as follows: (robustness variable x query interval) + (1 x query re...

  • Page 136

    Des-3526 layer 2 fast ethernet switch config router_ports packets with such a router as its destination will reach the multicast- enabled router − regardless of protocol, etc. Parameters − the name of the vlan on which the router port resides. − specifies a port or range of ports that will be config...

  • Page 137

    Des-3526 layer 2 fast ethernet switch disable igmp_snooping purpose used to enable igmp snooping on the switch. Syntax disable igmp_snooping {forward_mcrouter_only} description this command disables igmp snooping on the switch. Igmp snooping can be disabled only if ip multicast routing is not being ...

  • Page 138

    Des-3526 layer 2 fast ethernet switch show igmp_snooping restrictions none. Example usage: to show igmp snooping: des-3526:4#show igmp_snooping command: show igmp_snooping igmp snooping global state : disabled multicast router only : disabled vlan name : default query interval : 125 max response tim...

  • Page 139

    Des-3526 layer 2 fast ethernet switch to show igmp snooping group: des-3526:4#show igmp_snooping group command: show igmp_snooping group vlan name : default multicast group: 224.0.0.2 mac address : 01-00-5e-00-00-02 reports : 1 port member : 2,5 vlan name : default multicast group: 224.0.0.9 mac add...

  • Page 141

    Des-3526 layer 2 fast ethernet switch vlan name : trinity multicast group : 224.0.0.2 mac address : 01-00-5e-00-00-02 port member : 17 total entries: 1 des-3526:4# show igmp_snooping group purpose used to display the current igmp snooping configuration on the switch. Syntax show igmp_snooping group ...

  • Page 142

    Des-3526 layer 2 fast ethernet switch mac address : 01-00-5e-05-06-07 reports : 1 port member : 10,12 vlan name : default multicast group : 236.54.63.75 mac address : 01-00-5e-36-3f-4b reports : 1 port member : 14,16 vlan name : default multicast group : 239.255.255.250 mac address : 01-00-5e-7f-ff-...

  • Page 143: 802.1X C

    Des-3526 layer 2 fast ethernet switch 20 802.1x c ommands the des-3526 implements the server-side of the ieee 802.1x port-based network access control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each p...

  • Page 144

    Des-3526 layer 2 fast ethernet switch enable 802.1x parameters none. Restrictions only administrator-level users can issue this command. Example usage: to enable 802.1x switch wide: des-3526:4#enable 802.1x command: enable 802.1x success. Des-3526:4# disable 802.1x purpose used to disable the 802.1x...

  • Page 145

    Des-3526 layer 2 fast ethernet switch show 802.1x auth_configuration parameters ports − specifies a port or range of ports to view. The following details are displayed: 802.1x enabled / disabled − shows the current status of 802.1x functions on the switch. Authentication mode – shows the authenticat...

  • Page 146

    Des-3526 layer 2 fast ethernet switch example usage: to display the 802.1x authtication states: des-3526:4#show 802.1x auth_configuration ports 1 command: show 802.1x auth_configuration ports 1 802.1x : enabled authentication mode : port_based authentication protocol : radius_eap port number : 1 cap...

  • Page 147

    Des-3526 layer 2 fast ethernet switch show 802.1x auth_state / timeout − shows the current state of the backend authenticator. Port status: authorized / unauthorized − shows the result of the authentication process. Authorized means that the user was authenticated, and can access the network. Unauth...

  • Page 151

    Des-3526 layer 2 fast ethernet switch config 802.1x init restrictions only administrator-level users can issue this command. Example usage: to initialize the authentication state machine of all ports: des-3526:4# config 802.1x init port_based ports all command: config 802.1x init port_based ports al...

  • Page 152

    Des-3526 layer 2 fast ethernet switch config 802.1x reauth parameters port_based – this instructs the switch to re-authorize 802.1x functions based only on the port number. Ports approved for re-authorization can then be specified. Mac_based − this instructs the switch to re-authorize 802.1x functio...

  • Page 153

    Des-3526 layer 2 fast ethernet switch config radius add “acct_port” settings. Auth_port − the udp port number for authentication requests. The default is 1812. Acct_port − the udp port number for accounting requests. The default is 1813. Restrictions only administrator-level users can issue this com...

  • Page 155

    Des-3526 layer 2 fast ethernet switch to display radius settings on the switch: des-3526:4#show radius command: show radius index ip address auth-port acct-port status key number number ----- ------------------ --------- --------- ----------- ------------ 1 10.1.1.1 1812 1813 active switch 2 20.1.1....

  • Page 156: (Acl) C

    Des-3526 layer 2 fast ethernet switch 21 a ccess c ontrol l ist (acl) c ommands the des-3526 implements access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings or mac address. Command parameters create access_profile [ethernet {vla...

  • Page 157

    Des-3526 layer 2 fast ethernet switch creating an access profile is divided into two basic parts. First, an access profile must be created using the create access_profile command. For example, if you want to deny all traffic to the subnet 10.42.73.0 to 10.42.73.255, you must first create an access p...

  • Page 158

    Des-3526 layer 2 fast ethernet switch create access_profile frame header fields. Specific values for the rules are entered using the config access_profile command, below. Parameters ethernet − specifies that the switch will examine the layer 2 part of each packet header. • vlan − specifies that the ...

  • Page 160

    Des-3526 layer 2 fast ethernet switch to create an access list rules: des-3526:4#create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code permit profile_id 101 command: create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 ds...

  • Page 162

    Des-3526 layer 2 fast ethernet switch config access_profile apply to only this vlan. • source_ip − specifies that the access profile will apply to only packets with this source ip address. • destination_id − specifies that the access profile will apply to only packets with this destination ip addres...

  • Page 163

    Des-3526 layer 2 fast ethernet switch config access_profile • rst: tcp control flag (reset) • syn: tcp control flag (synchronize) • fin: tcp control flag (finish) • udp − specifies that the switch will examine the universal datagram protocol (udp) field in each packet. • dst_port − specifies that th...

  • Page 164

    Des-3526 layer 2 fast ethernet switch config access_profile be written to the dscp field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the dscp field of the packet. Deny – specifies that packets that do not match the...

  • Page 165

    Des-3526 layer 2 fast ethernet switch ports : all masks : vlan ---------------- id mode ports : all 255.0.0.0 --- ------ ---------------- 1 permit default access profile id : 246 type : ip frame filter masks : source ip addr --------------- id mode --- ------ --------------- access profile id : 247 ...

  • Page 166

    Des-3526 layer 2 fast ethernet switch 22 t raffic s egmentation c ommands traffic segmentation allows you to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and then the traffic segmentation rules are applied. Comman...

  • Page 167

    Des-3526 layer 2 fast ethernet switch show traffic_segmentation purpose used to display the current traffic segmentation configuration on the switch. Syntax show traffic_segmentation description the show traffic_segmentation command is used to display the current traffic segmentation configuration o...

  • Page 168: Sntp

    Des-3526 layer 2 fast ethernet switch 23 t ime and sntp c ommands the simple network time protocol (sntp) (an adaptation of the network time protocol (npt)) commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters conf...

  • Page 169

    Des-3526 layer 2 fast ethernet switch config sntp service must be enabled for this command to function (enable sntp). Example usage: to configure sntp settings: des-3526:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-i...

  • Page 170

    Des-3526 layer 2 fast ethernet switch enable sntp description this will enable sntp support. Sntp service must be separately configured (see config sntp). Enabling and configuring sntp support will override any manually configured system time settings. Parameters none. Restrictions only administrato...

  • Page 171

    Des-3526 layer 2 fast ethernet switch config time description this will configure the system time and date settings. These will be overridden if sntp is configured and enabled. Time – express the system time using the format hh:mm:ss, that is, two numerical characters each for the hour using a 24-ho...

  • Page 172

    Des-3526 layer 2 fast ethernet switch des-3526:4#config time_zone operator + hour 2 min 30 command: config time_zone operator + hour 2 min 30 success. Des-3526:4# config dst purpose used to enable and configure time adjustments to allow for the use of daylight savings time (dst). Syntax config dst [...

  • Page 173

    Des-3526 layer 2 fast ethernet switch config dst begins expressed using a three character abbreviation (sun, mon, tue, wed, thu, fri, sat) e_day - configure the day of the week in which dst ends. S_mth - configure the month in which dst begins. E_mth - configure the month in which dst ends. S_time –...

  • Page 174

    Des-3526 layer 2 fast ethernet switch des-3526:4#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 success. Des-3526:...

  • Page 176

    Des-3526 layer 2 fast ethernet switch config arpentry description this command is used to configure a static entry in the arp table. The user may specify the ip address and the corresponding mac address of an entry in the switch’s arp table. Parameters − the ip address of the end node or station. − ...

  • Page 177

    Des-3526 layer 2 fast ethernet switch config arp_aging time purpose used to configure the age-out timer for arp table entries on the switch. Syntax config arp_aging time description this command sets the maximum amount of time, in minutes, that an arp entry can remain in the switch’s arp table, with...

  • Page 178

    Des-3526 layer 2 fast ethernet switch des-3526:4#show arpentry command: show arpentry arp aging time : 30 interface ip address mac address type ------------- --------------- ----------------- --------------- system 10.0.0.0 ff-ff-ff-ff-ff-ff local/broadcast system 10.1.1.169 00-50-ba-70-e4-4e dynami...

  • Page 179

    Des-3526 layer 2 fast ethernet switch 25 r outing t able c ommands the routing table commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create iproute [default] {} [default] show iproute delete iproute each comma...

  • Page 180

    Des-3526 layer 2 fast ethernet switch delete iproute default parameters none. Restrictions only administrator-level users can issue this command. Example usage: to delete the default ip route 10.53.13.254: des-3526:4#delete iproute default 10.53.13.254 command: delete iproute default 10.53.13.254 su...

  • Page 182

    Des-3526 layer 2 fast ethernet switch disable mac_notification description this command is used to disable mac address notification without changing configuration. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to disable mac notification without ...

  • Page 183

    Des-3526 layer 2 fast ethernet switch config mac_notification ports purpose used to configure mac address notification status settings. Syntax config mac_notification ports [ description mac address notificiation is used to monitor mac addresses learned and entered into the fdb. Parameters - specify...

  • Page 184

    Des-3526 layer 2 fast ethernet switch des-3526:4#show mac_notification command: show mac_notification global mac notification settings history size : 1 state : enabled interval : 1 des-3526:4# show mac_notification ports purpose used to display the switch’s mac address table notification status sett...

  • Page 185

    Des-3526 layer 2 fast ethernet switch 11 disabled 12 disabled 13 disabled 14 disabled 15 disabled 16 disabled 17 disabled 18 disabled 19 disabled 20 disabled ctrl+c esc q quit space n next page p previous page r refresh 177.

  • Page 186

    Des-3526 layer 2 fast ethernet switch 27 a ccess a uthentication c ontrol c ommands the tacacs / xtacacs / tacacs+ / radius commands let you secure access to the switch using the tacacs / xtacacs / tacacs+ / radius protocols. When a user logs in to the switch or tries to access the administrator lev...

  • Page 187

    Des-3526 layer 2 fast ethernet switch note: tacacs, xtacacs and tacacs+ are separate entities and are not compatible. The switch and the server must be configured exactly the same, using the same protocol. (for example, if the switch is set up for tacacs authentication, so must be the host server.) ...

  • Page 189

    Des-3526 layer 2 fast ethernet switch disable authen_policy syntax disable authen_policy description this command will disable the administrator-defined authentication policy for users trying to access the switch. When disabled, the switch will access the local user account database for username and...

  • Page 190

    Des-3526 layer 2 fast ethernet switch create authen_login method_list_name purpose used to create a user defined method list of authentication methods for users logging on to the switch. Syntax create authen_login method_list_name description this command is used to create a list for authentication ...

  • Page 191

    Des-3526 layer 2 fast ethernet switch config authen_login enable admin part of this section for more detailed information, concerning the enable admin command.) default – the default method list for access authentication, as defined by the user. The user may choose one or a combination of up to four...

  • Page 192

    Des-3526 layer 2 fast ethernet switch des-3526:4#show serial_port command: show serial_port baud rate : 9600 data bits : 8 parity bits : none stop bits : 1 auto-logout : 10 mins des-3526:4# config serial_port purpose used to configure the serial port. Syntax config serial_port {baud_rate [9600

  • Page 193

    Des-3526 layer 2 fast ethernet switch example usage: to delete the method list name “trinity”: des-3526:4#delete authen_login method_list_name trinity command: delete authen_login method_list_name trinity success. Des-3526:4# show authen_login purpose used to display a previously configured user def...

  • Page 194

    Des-3526 layer 2 fast ethernet switch example usage: to view the authentication login method list named trinity: des-3526:4#show authen_login method_list_name trinity command: show authen_login method_list_name trinity method list name priority method name comment 2 tacacs built-in group -----------...

  • Page 196

    Des-3526 layer 2 fast ethernet switch config authen_enable the switch. None – adding this parameter will require no authentication to access the switch. Method_list_name – enter a previously implemented method list name defined by the user (create authen_enable). The user may add one, or a combinati...

  • Page 197

    Des-3526 layer 2 fast ethernet switch to configure the default method list with authentication methods xtacacs, tacacs+ and local, in that order: des-3526:4#config authen_enable default method xtacacs tacacs+ local command: config authen_enable default method xtacacs tacacs+ local success. Des-3526:...

  • Page 198

    Des-3526 layer 2 fast ethernet switch show authen_enable method_list_name - enter an alphanumeric string of up to 15 characters to define the given method list the user wishes to view. All – entering this parameter will display all the authentication login methods currently configured on the switch....

  • Page 200

    Des-3526 layer 2 fast ethernet switch des-3526:4# show authen application purpose used to display authentication methods for the various applications on the switch. Syntax show authen application description this command will display all of the authentication method lists (login, enable administrato...

  • Page 201

    Des-3526 layer 2 fast ethernet switch create authen server_host parameters server_host - the ip address of the remote server host to add. Protocol – the protocol used by the server host. The user may choose one of the following: port - enter a number between 1 and 65535 to define the virtual port nu...

  • Page 203

    Des-3526 layer 2 fast ethernet switch config authen server_host restrictions only administrator-level users can issue this command. Example usage: to configure a tacacs+ authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit count of 4. Des-3526:4#config au...

  • Page 204

    Des-3526 layer 2 fast ethernet switch success. Des-3526:4# show authen server_host purpose used to view a user-defined authentication server host. Syntax show authen server_host description this command is used to view user-defined authentication server hosts previously created on the switch. The fo...

  • Page 205

    Des-3526 layer 2 fast ethernet switch create authen server_group purpose used to create a user-defined authentication server group. Syntax create authen server_group description this command will create an authentication server group. A server group is a technique used to group tacacs/xtacacs/tacacs...

  • Page 206

    Des-3526 layer 2 fast ethernet switch config authen server_group xtacacs server protocol on the switch. Only server hosts utilizing the xtacacs protocol may be added to this group. Tacacs+ – use this parameter to utilize the built-in tacacs+ server protocol on the switch. Only server hosts utilizing...

  • Page 207

    Des-3526 layer 2 fast ethernet switch delete authen server_group purpose used to delete a user-defined authentication server group. Syntax delete authen server_group description this command will delete an authentication server group. Parameters - enter an alphanumeric string of up to 15 characters ...

  • Page 208

    Des-3526 layer 2 fast ethernet switch des-3526:4#show authen server_group command: show authen server_group group name ip address protocol --------------- --------------- -------- darren 10.53.13.2 tacacs tacacs 10.53.13.94 tacacs tacacs+ (this group has no entry) xtacacs (this group has no entry) t...

  • Page 209

    Des-3526 layer 2 fast ethernet switch config authen parameter attempt description this command will configure the maximum number of times the switch will accept authentication attempts. Users failing to be authenticated after the set amount of attempts will be denied access to the switch and will be...

  • Page 210

    Des-3526 layer 2 fast ethernet switch des-3526:4#show authen parameter command: show authen parameter response timeout : 60 seconds user attempts : 5 des-3526:4# enable admin purpose used to promote user level privileges to administrator level privileges syntax enable admin description this command ...

  • Page 211

    Des-3526 layer 2 fast ethernet switch config admin local_enable he or she will be prompted to enter the password configured here, that is set locally on the switch. Parameters - after entering this command, the user will be prompted to enter the old password, then a new password in an alphanumeric s...

  • Page 212: Ssh

    Des-3526 layer 2 fast ethernet switch 28 ssh c ommands the steps required to use the secure shell (ssh) protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows: create a user account with admin-level access using the create account admin...

  • Page 213

    Des-3526 layer 2 fast ethernet switch enable shh parameters none. Only administrator-level users can issue this command. Restrictions usage example: to enable ssh: des-3526:4#enable ssh command: enable ssh success. Des-3526:4# disable ssh used to disable ssh. Disable ssh this command allows you to d...

  • Page 214

    Des-3526 layer 2 fast ethernet switch config ssh authmode parameters password – this parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the switch. Publickey - this parameter may be chosen if the administrator wishes to use a publickey conf...

  • Page 216

    Des-3526 layer 2 fast ethernet switch show ssh server restrictions none. Usage example: to display the ssh server: des-3526:4# show ssh server command: show ssh server the ssh server configuration max session : 8 connection timeout : 300 authfail attempts : 2 rekey timeout : never port : 22 des-3526...

  • Page 217

    Des-3526 layer 2 fast ethernet switch config ssh user prompt the user for a password, and then to retype the password for confirmation. Publickey – this parameter should be chosen if the user wishes to use the publickey on a ssh server for authentication. • restrictions only administrator-level user...

  • Page 218

    Des-3526 layer 2 fast ethernet switch note: to configure the ssh user, the administrator must create a user account on the switch. For information concerning configuring a user account, please see the section of this manual entitled basic switch commands and then the command, create user account. Co...

  • Page 219

    Des-3526 layer 2 fast ethernet switch config ssh algorithm restrictions only administrator-level users can issue this command. Usage example: to configure ssh algorithm: des-3526:4# config ssh algorithm blowfish enable command: config ssh algorithm blowfish enable success. Des-3526:4# show ssh algor...

  • Page 220

    Des-3526 layer 2 fast ethernet switch md5 :enabled public key algorithm sha1 :enabled rsa :enabled dsa :enabled des-3526:4# 212.

  • Page 221: Ssl C

    Des-3526 layer 2 fast ethernet switch 29 ssl c ommands secure sockets layer or ssl is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the ...

  • Page 223

    Des-3526 layer 2 fast ethernet switch des-3526:4# note: enabling ssl on the switch will enable all ciphersuites. To utilize a particular ciphersuite, the user must eliminate other ciphersuites by using the disable ssl command along with the appropriate ciphersuites. Note: enabling the ssl function o...

  • Page 224

    Des-3526 layer 2 fast ethernet switch des-3526:4#disable ssl command: disable ssl success. Des-3526:4# to disable ciphersuite rsa_export_with_rc4_40_md5 only: des-3526:4#disable sslciphersuite rsa_export_with_rc4_40_md5 command: disable sslciphersuite rsa_export_with_rc4_40_md5 success. Des-3526:4# ...

  • Page 225

    Des-3526 layer 2 fast ethernet switch show ssl cachetimeout used to show the ssl cache timeout. Syntax show ssl cachetimeout description entering this command will allow the user to view the ssl cache timeout cuurently implemented on the switch. Parameters none. Restrictions purpose none. Example us...

  • Page 226

    Des-3526 layer 2 fast ethernet switch show ssl certificate purpose used to view the ssl certificate file status on the switch. Syntax show ssl certificate description this command is used to view the ssl certificate file information currently implemented on the switch. Parameters none. Restrictions ...

  • Page 227

    Des-3526 layer 2 fast ethernet switch des-3526:4# des-3526:4#download certificate_fromtftp 10.53.13.94 certfilename c:/cert.Der keyfilename c:/pkey.Der command: download certificate_fromtftp 10.53.13.94 certfilename c:/cert.Der keyfilename c:/pkey.Der certificate loaded successfully! Des-3526:4# 219.

  • Page 228: D-L

    Des-3526 layer 2 fast ethernet switch 30 d-l ink s ingle ip m anagement c ommands simply put, d-link single ip management is a concept that will stack switches together over ethernet instead of using stacking ports or modules. Switches using d-link single ip management (labeled here as sim) must con...

  • Page 229

    Des-3526 layer 2 fast ethernet switch 2. Cs’s must change their role to cas and then to ms, to become a ms of a sim group. Thus the cs cannot directly be converted to a ms. 3. The user can manually configure a cs to become a cas. 4. A ms can become a cas by: a. Being configured as a cas through the ...

  • Page 230

    Des-3526 layer 2 fast ethernet switch enable sim restrictions only administrator-level users can issue this command. Example usage: to enable sim on the switch: des-3526:4#enable sim command: enable sim success. Des-3526:4# disable sim used to disable single ip management (sim) on the switch syntax ...

  • Page 231

    Des-3526 layer 2 fast ethernet switch show sim on the switch. Firmware version - displays the current firmware version on the switch. Device name - displays the user-defined device name on the switch. Mac address - displays the mac address of the switch. Capabilities – displays the type of switch, b...

  • Page 232

    Des-3526 layer 2 fast ethernet switch example usage: to show the sim information in detail: des-3526:4#show sim command: show sim sim version : ver-1 firmware version : build 2.00-b02 device name : mac address : 00-35-26-11-11-00 capabilities : l3 platform : des-3526 l2 switch sim state : enabled ro...

  • Page 233

    Des-3526 layer 2 fast ethernet switch total entries: 2 des-3526:4# to show other groups information in summary, if group is specified: des-3526:4#show sim group command: show sim group --- ----------------- ------------------------ ----- --------- ---------------- id mac address platform / hold firm...

  • Page 234

    Des-3526 layer 2 fast ethernet switch total entries: 3 des-3526:4# reconfig purpose used to connect to a member switch, through the commander switch, using telnet. Syntax reconfig {member_id description this command is used to reconnect to a member switch using telnet. Parameters member_id - select ...

  • Page 235

    Des-3526 layer 2 fast ethernet switch example usage: to add a member: des-3526:4#config sim_group add 2 command: config sim_group add 2 please wait for ack... Gm config success !!! Success. Des-3526:4# to delete a member: des-3526:4# config sim delete 1 command: config sim delete 1 please wait for a...

  • Page 236

    Des-3526 layer 2 fast ethernet switch config sim protocol. The user may set the hold time from 100 to 300 seconds. Candidate – used to change the role of a cs (commander) to a cas (candidate). Restrictions dp_interval – the user may set the discovery protocol interval, in seconds that the switch wil...

  • Page 237

    Des-3526 layer 2 fast ethernet switch command: config sim commander success. Des-3526:4# to update the name of a group: des-3526:4# config sim commander group_name trinity command: config sim commander group_name trinity success. Des-3526:4# download sim used to download firmware or configuration fi...

  • Page 238

    Des-3526 layer 2 fast ethernet switch members all command: download sim firmware 10.53.13.94 c:/des3526.Had members all this device is updating firmware. Please wait... Download status : id mac address result --- ----------------- ---------------- 1 00-01-02-03-04-00 success 2 00-07-06-05-04-03 succ...

  • Page 239

    Des-3526 layer 2 fast ethernet switch upload sim_ms upload a configuration file to. – enter a user-defined path and file name on the tftp server the user wishes to upload configuration files to. - enter this parameter to specify the member the user prefers to upload a switch configuation file to. Th...

  • Page 240

    Des-3526 layer 2 fast ethernet switch 31 c ommand h istory l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters ? Dir config command_history show command_history each command is listed, in ...

  • Page 241

    Des-3526 layer 2 fast ethernet switch config 802.1x capability ports config 802.1x init config 802.1x reauth config access_profile profile_id config account config admin local_enable config arp_aging time config arpentry config authen application ctrl+c esc q quit space n next page enter next entry ...

  • Page 242

    Des-3526 layer 2 fast ethernet switch config access_profile profile_id config account config admin local_enable config arp_aging time config arpentry config authen application ctrl+c esc q quit space n next page enter next entry a all config command_history purpose used to configure the command hist...

  • Page 243

    Des-3526 layer 2 fast ethernet switch des-3526:4#show command_history command: show command_history ? ? Show show vlan show command history des-3526:4# 235.

  • Page 244

    Des-3526 layer 2 fast ethernet switch a t echnical s pecifications physical and environmental ac input & external redundant power supply: 100 - 240 vac, 50-60 hz (internal universal power supply) redundant power supply – will take over when internal power supply fails. Power consumption: 90 watts ma...

  • Page 245

    Des-3526 layer 2 fast ethernet switch general ieee 802.3u 100base-tx fast ethernet ieee 802.3ab 1000base-t gigabit ethernet ieee 802.1d spanning tree ieee 802.1w rapid spanning tree ieee 802.1p priority queues ieee 802.3ad link aggregation control ieee 802.3x full-duplex flow control protocols: csma...

  • Page 246

    Des-3526 layer 2 fast ethernet switch 2 100base-tx: utp cat.3, 4, 5 for 10mbps eia/tia-568 100-ohm screened twisted-pair (stp)(100m) number of ports: 24 x 10/100 mbps nway ports 2 gigabit ethernet performance transmission method: store-and-forward ram buffer: 16 mb per device filtering address table...