D-Link DGS-3627G - xStack Switch - Stackable Cli Manual - Introduction

Other manuals for DGS-3627G - xStack Switch - Stackable: Reference Manual, User Manual
Manual is about: Web UI Reference Guide for Layer 3 Managed Gigabit Ethernet Switch

Summary of DGS-3627G - xStack Switch - Stackable

  • Page 1

    ® cli manual product model: xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch release 2.5 ©copyright 2009. All rights reserved..

  • Page 2

    Table of contents introduction ..........................................................................................................................................................1 using the console cli...............................................................................................

  • Page 3

    Arp and gratuitous arp commands .........................................................................................................301 vrrp commands ....................................................................................................................................................

  • Page 4: Introduction

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 1 1 introduction the switch can be managed through the switch’s serial port, telnet, or the web-based management agent. The command line interface (cli) can be used to configure and manage the switch via the serial port or t...

  • Page 5

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 2 boot procedure 1.10-b06 ----------------------------------------------------------------------------- power on self test ...................................... 100 % mac address : 00-19-5b-f5-26-c0 h/w version : 1a1g pleas...

  • Page 6: Cli

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 3 2 u sing the c onsole cli the switch supports a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation prog...

  • Page 7

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 4 dgs-3627:5#? Command: ? .. ? Cd clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear attack_log clear counters clear dhcp_binding clear fdb clear log clear mac_based_access_control auth_mac clear...

  • Page 8

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 5 to re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at the command prompt. Dgs-3627:5#config account command: config account next possible completions: dg...

  • Page 9

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 6 dgs-3627:5#create command: create next possible completions: 802.1x access_profile account address_binding arpentry authen authen_enable authen_login cpu dhcp dot1v_protocol_group double_vlan fdb igmp_snooping ipif ipmrout...

  • Page 10

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 7 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the cli and available through the console inter...

  • Page 14

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 11 config account purpose used to configure user accounts. Syntax config account description the config account command configures a user account that has been created using the create accountcommand. Parameters –enter a nam...

  • Page 15

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 12 delete account purpose used to delete an existing user account. Syntax delete account {} description the delete account command deletes a user account that has been created using the create account command. Parameters – e...

  • Page 16

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 13 show switch purpose used to display general information about the switch. Syntax show switch description this command displays information about the switch. Parameters none. Restrictions none. Example usage: to display th...

  • Page 17

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 14 dgs-3627:5#show serial_port command: show serial_port baud rate : 115200 data bits : 8 parity bits : none stop bits : 1 auto-logout : 10 mins dgs-3627:5# config serial_port purpose used to configure the serial port. Synta...

  • Page 18

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 15 enable clipaging purpose used to pause the scrolling of the console screen when the show command displays more than one page. Syntax enable clipaging description this command is used when issuing the show command which ca...

  • Page 19

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 16 enable telnet purpose used to enable communication with and management of the switch using the telnet protocol. Syntax enable telnet {} description this command is used to enable the telnet protocol on the switch. The use...

  • Page 20

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 17 telnet purpose used to login remote system with telnet protocol. Syntax telnet {tcp_port } description this command is used to login remote system with telnet protocol on the switch. Parameters – the ip address of telnet ...

  • Page 21

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 18 disable web purpose used to disable the http-based management software on the switch. Syntax disable web description this command disables the web-based management software on the switch. Parameters none. Restrictions onl...

  • Page 22

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 19 reboot purpose used to restart the switch. Syntax reboot {} description this command is used to restart the switch. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to re...

  • Page 23

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 20 login purpose used to log in a user to the switch’s console. Syntax login description this command is used to initiate the login procedure. The user will be prompted for a username and password. Parameters none. Restricti...

  • Page 24

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 21 dgs-3627:5#show device_status command: show device_status unit 1: internal power: active external power: fail left fan : ok right fan : ok back fan : ok cpu fan : ok ctrl+c esc q quit space n next page p previous page r r...

  • Page 25

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 22 config greeting_message purpose used to configure the greeting message or banner for the opening screen of the command line interface. Syntax config greeting_message {default} description this command is used to configure...

  • Page 26

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 23 to view the currently configured greeting message: dgs-3627:5#show greeting_message command: show greeting_message ================================================================================ dgs-3627 gigabit ethernet...

  • Page 29

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 26 to restart auto negotiation for ports 1-3: dgs-3627:5#config ports 1:1-1:3 auto_negotiation restart_an command: config ports 1:1-1:3 auto_negotiation restart_an success. Dgs-3627:5# show ports purpose used to display the ...

  • Page 30

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 27 example usage: to display the configuration of all ports on a switch: dgs-3627:5#show ports command: show ports port port settings connection address state speed/duplex/flowctrl speed/duplex/flowctrl learning ------- ----...

  • Page 31

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 28 1:6 enabled auto/disabled link down enabled description: 1:7 enabled auto/disabled link down enabled description: 1:8 enabled auto/disabled link down enabled description: 1:9 enabled auto/disabled link down enabled descri...

  • Page 32

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 29 port : 1:2 -------------------- auto negotiation : enabled capability bits : 1000m_full capbility advertised bits : 1000m_full capbility received bits : port : 1:3 -------------------- auto negotiation : enabled capabilit...

  • Page 33

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 30 6 p ort s ecurity c ommands the switch’s port security commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The primary purpose of port security function ...

  • Page 34

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 31 dgs-3627:5#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonres...

  • Page 35

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 32 clear port_security_entry purpose used to clear mac address entries learned from a specified port for the port security function. Syntax clear port_security_entry port description this command is used to clear mac address...

  • Page 36

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 33 7 s tacking c ommands the stacking configuration commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Stacking protocol is a special communication mechani...

  • Page 38

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 35 dgs-3627:5#show stack_information command: show stack_information topology :duplex_chain my box id :1 master id :1 box count :1 box user prio- prom firmware h/w id set type exist rity mac version version version --- ---- ...

  • Page 40: (Snmp)

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 37 8 n etwork m anagement (snmp) c ommands the network management commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The switch supports the simple network...

  • Page 42

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 39 enable snmp purpose used to enable snmp on the switch. Syntax enable snmp description this command is used, in conjunction with thedisable snmp command below, to enable and disable simple network management protocol (snmp...

  • Page 43

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 40 example usage: to enable snmp linkchange traps: dgs-3627:5#enable snmp linkchange_traps command: enable snmp linkchange_traps success. Dgs-3627:5# disable snmp linkchange_traps purpose used to disable snmp linkchange trap...

  • Page 44

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 41 dgs-3627:5#config snmp linkchange_traps ports all enable command: enable snmp linkchange_traps all enable success. Dgs-3627:5# create snmp user purpose used to create a new snmp user and adds the user to an snmp group tha...

  • Page 45

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 42 create snmp user • none – adding this parameter will add no encryption. • des – adding this parameter will allow for a 56-bit encryption to be added using the des-56 standard using: • – an alphanumeric string of between 8...

  • Page 46

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 43 show snmp user purpose used to display information about each snmp username in the snmp group username table. Syntax show snmp user description the show snmp user command displays information about each snmp username in t...

  • Page 47

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 44 dgs-3627:5#create snmp view dlinkview 1.3.6 view_type included command: create snmp view dlinkview 1.3.6 view_type included success. Dgs-3627:5# delete snmp view purpose used to remove an snmp view entry previously create...

  • Page 48

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 45 dgs-3627:5#show snmp view command: show snmp view vacm view table settings view name subtree view type ---------------- ----------------------- ---------- restricted 1.3.6.1.2.1.1 included restricted 1.3.6.1.2.1.11 includ...

  • Page 49

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 46 example usage: to create the snmp community string “dlink:” dgs-3627:5#create snmp community dlink view readview read_write command: create snmp community dlink view readview read_write success. Dgs-3627:5# delete snmp co...

  • Page 50

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 47 dgs-3627:5#show snmp community command: show snmp community snmp community table community name view name access right -------------------------------- --------------------------- ------------ private communityview read_w...

  • Page 51

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 48 dgs-3627:5#show snmp engineid command: show snmp engineid snmp engine id : 0035636666 dgs-3627:5# create snmp group purpose used to create a new snmp group, or a table that maps snmp users to snmp views. Syntax create snm...

  • Page 52

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 49 dgs-3627:5#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 success. Dgs-3627:5# delete snmp group ...

  • Page 53

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 50 dgs-3627:5#show snmp groups command: show snmp groups vacm access table settings group name : public readview name : communityview writeview name : notify view name : communityview securiy model : snmpv1 securiy level : n...

  • Page 56

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 53 dgs-3627:5#show snmp host command: show snmp host snmp host table host ip address snmp version community name / snmpv3 user name ---------------- -------------- --------------------------------- 10.48.76.23 v2c private 10...

  • Page 58

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 55 dgs-3627:5#show trusted_host command: show trusted_host management stations ip address ----------------------- 10.53.13.94 total entries: 1 dgs-3627:5# delete trusted_host purpose used to delete a trusted host entry made ...

  • Page 59

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 56 to enable snmp trap support on the switch: dgs-3627:5#enable snmp traps command: enable snmp traps success. Dgs-3627:5# enable snmp authenticate_traps purpose used to enable snmp authentication trap support. Syntax enable...

  • Page 60

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 57 disable snmp traps purpose used to disable snmp trap support on the switch. Syntax disable snmp traps description this command is used to disable snmp trap support on the switch. Parameters none. Restrictions only adminis...

  • Page 61

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 58 example usage: to configure the switch contact to “mis department ii”: dgs-3627:5#config snmp system_contact mis department ii command: config snmp system_contact mis department ii success. Dgs-3627:5# config snmp system_...

  • Page 62

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 59 enable rmon purpose used to enable rmon on the switch. Syntax enable rmon description this command is used, in conjunction with thedisable rmon command below, to enable and disable remote monitoring (rmon) on the switch. ...

  • Page 63

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 60 9 s witch u tility c ommands (i ncluding f ile s ystem c ommands ) the download/upload commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parame...

  • Page 64

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 61 download parameters firmware_fromtftp − download and install new firmware on the switch from a tftp server. • − the ip address of the tftp server. • –the ipv6 address of the tftp server. • − the dos path and filename of t...

  • Page 65

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 62 the download configuration command will initiate the loading of the various settings in the order listed in the configuration file. When the file has been successfully loaded the message “end of configuration file for dgs...

  • Page 66

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 63 upload uploaded on the tftp server. For example, c:\3612.Txt. Firmware_totftp – use this parameter to upload firmware to a tftp server. • − the ip address of the tftp server. • −the ipv6 address of the tftp server. • − th...

  • Page 67

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 64 config firmware purpose used to configure a firmware file located in the flash memory as the boot up section. Syntax config firmware {{unit } } boot_up description this command is used to configure firmware files located ...

  • Page 68

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 65 show config 1. Basic (serial port, telnet and web management status) 2. Storm control 3. Ip group management (single ip) 4. Syslog 5. Qos 6. Port mirroring 7. Traffic segmentation 8. Port 9. Port lock 10. Time range 11. A...

  • Page 69

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 66 ## # 2 not_exist no ## # 3 not_exist no ## # 4 not_exist no ## # 5 not_exist no ## # 6 not_exist no ctrl+c esc q quit space n next page enter next entry a all config configuration purpose used to configure the configurati...

  • Page 70

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 67 erase purpose used to delete a file located on the internal flash memory of the switch. Syntax erase {{unit []} } description this command is used to erase a file located on the internal flash memory of the switch. Parame...

  • Page 71

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 68 example usage: to rename a file: dgs-3627:5#rename c:\ abc.Txt cba.Txt command: rename c:\ abc.Txt cba.Txt success. Dgs-3627:5# dir purpose used to list the files located on the flash memory drive, labeled c:. Syntax dir ...

  • Page 72

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 69 copy purpose used to copy a file. Syntax copy {} {{unit_id 1-12>} } description this command is used to copy a file from a source location and paste it to a host location. This command is only operable for the storage med...

  • Page 73

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 70 dgs-3627:5#show boot_file command: show boot_file ----------------------------------------------------- unit id : 1 boot up firmware image : c:\run.Had boot up configuration file: c:\startup.Cfg --------------------------...

  • Page 74

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 71 config file_system_version purpose used to configure the file system version. Syntax config file_system_version {} description this command is used to configure the file system version. Users may now upgrade the file syst...

  • Page 75

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 72 ping purpose used to test the connectivity between network devices. Syntax ping {times } {timeout } description the ping command sends internet control message protocol (icmp) echo messages to a remote ip address. The rem...

  • Page 76

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 73 example usage: to ping the ipv6 address 2009::280:c8ff:fe3c:5c8a four times: dgs-3627:5#ping6 2009::280:c8ff:fe3c:5c8a times 4 timeout 10 command: ping6 2009::280:c8ff:fe3c:5c8a times 4 timeout 10 reply from 2009::280:c8f...

  • Page 77

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 74 enable autoconfig purpose used to activate the autoconfiguration function for the switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig description when autoconfig is enabl...

  • Page 78

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 75 dgs-3627 gigabit ethernet switch command line interface firmware: build 2.50.B15 copyright(c) 2009 d-link corporation. All rights reserved. Dgs-3627:5#download cfg_fromtftp 10.41.44.44 c:\cfg\setting.Txt command: download...

  • Page 79

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 76 dgs-3627:5#disable autoconfig command: disable autoconfig success. Dgs-3627:5# show autoconfig purpose used to display the current autoconfig status of the switch. Syntax show autoconfig description this will list the cur...

  • Page 80

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 77 10 n etwork m onitoring c ommands the network monitoring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show packet ports show er...

  • Page 81

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 78 to display the packets analysis for port 2: dgs-3627:5#show packet ports 2 command: show packet ports 2 port number : 1:2 ================================================================== frame size/type frame counts fra...

  • Page 82

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 79 dgs-3627:5#show error ports 3 command: show error ports 3 ort number : 1:3 rx frames tx frames --------- --------- crc error 0 excessive deferral 0 undersize 0 crc error 0 oversize 0 late collision 0 fragment 0 excessive ...

  • Page 83

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 80 dgs-3627:5#show utilization ports command: show utilization ports port tx/sec rx/sec util port tx/sec rx/sec util ----- ---------- ---------- ---- ----- ---------- ---------- ---- 1:1 0 0 0 1:22 0 0 0 1:2 0 0 0 1:23 40 0 ...

  • Page 84

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 81 clear counters purpose used to clear the switch’s statistics counters. Syntax clear counters ports description this command will clear the counters used by the switch to compile statistics. Parameters − specifies a port o...

  • Page 85

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 82 example usage: to display the switch history log: dgs-3627:5#show log command: show log index date time log text ----- ---------- -------- ------------------------------------------------------ 5 2008-12-03 13:59:12 unit ...

  • Page 87

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 84 to disable the syslog function on the switch: dgs-3627:5#disable syslog command: disable syslog success. Dgs-3627:5# show syslog purpose used to display the syslog protocol status as enabled or disabled. Syntax show syslo...

  • Page 88

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 85 create syslog host informational − specifies that informational messages will be sent to the remote host. This corresponds to number 6 from the list above. Warning − specifies that warning messages will be sent to the rem...

  • Page 90

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 87 config syslog host informational − specifies that informational messages will be sent to the remote host. This corresponds to number 6 from the list above. Warning − specifies that warning messages will be sent to the rem...

  • Page 91

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 88 config syslog host local0 − specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from the list above. Local1 − specifies that local use 1 messages will be sent to the remote h...

  • Page 92

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 89 dgs-3627:5#config syslog host all facility local0 command: config syslog host all facility local0 success. Dgs-3627:5# delete syslog host purpose used to remove a syslog host, that has been previously configured, from the...

  • Page 93

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 90 dgs-3627:5#show syslog host command: show syslog host syslog global state: disabled host id host ip address severity facility udp port status ------- --------------- -------------- -------- -------- -------- 1 10.1.1.2 al...

  • Page 94

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 91 to configure the system severity settings for critical traps only: dgs-3627:5#config system_severity trap critical command: config system_severity trap critical success. Dgs-3627:5# show system_severity purpose to display...

  • Page 95

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 92 dgs-3627:5#config log_save_timing time_interval 30 command: config log_save_timing time_interval 30 success. Dgs-3627:5# show log_save_timing purpose used to display the method configured for saving log files to the switc...

  • Page 96: (Mstp)

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 93 11 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, is a stand...

  • Page 97

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 94 command parameters show stp show stp ports {} show stp instance_id {} show stp mst_config id each command is listed, in detail, in the following sections. Enable stp purpose used to globally enable stp on the switch. Synt...

  • Page 99

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 96 config stp default setting of 2 seconds. In mstp, the spanning tree is configured by port and therefore, the hellotime must be set using the configure stp ports command for switches utilizing the multiple spanning tree pr...

  • Page 100

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 97 config stp ports • – define a value between 1 and 200000000 to determine the external cost. The lower the number, the greater the probability the port will be chosen to forward packets. Hellotime − the time interval betwe...

  • Page 101

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 98 create stp instance_id purpose used to create a stp instance id for mstp. Syntax create stp instance_id description this command allows the user to create a stp instance id for the multiple spanning tree protocol. There a...

  • Page 102

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 99 dgs-3627:5#config stp instance_id 2 add_vlan 10 command : config stp instance_id 2 add_vlan 10 success. Dgs-3627:5# example usage: to remove vid 10 from instance id 2: dgs-3627:5#config stp instance_id 2 remove_vlan 10 co...

  • Page 103

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 100 config stp priority restrictions only administrator and operator-level users can issue this command. Example usage: to set the priority value for instance_id 2 as 4096: dgs-3627:5#config stp priority 4096 instance_id 2 c...

  • Page 104

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 101 config stp mst_ports priority value is identical, the mstp function will implement the lowest port number into the forwarding state and other interfaces will be blocked. Remember that lower priority values mean higher pr...

  • Page 105

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 102 dgs-3627:5#show stp command: show stp stp bridge global settings ----------------------------------------- stp status : enabled stp version : stp compatible max age : 20 hello time : 2 forward delay : 15 max hops : 20 tx...

  • Page 106

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 103 show stp ports purpose used to display the switch’s current instance_id configuration. Syntax show stp ports description this command displays the stp instance settings and stp instance operational status currently imple...

  • Page 107

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 104 dgs-3627:5#show stp instance_id 0 command: show stp instance_id 0 stp instance settings --------------------------- instance type : cist instance status : enabled instance priority : 32768(bridge priority : 32768, sys id...

  • Page 108

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 105 12 f orwarding d atabase c ommands the layer 2 forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create fdb por...

  • Page 109

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 106 dgs-3627:5#create fdb default 00-00-00-00-01-02 port 5 command: create fdb default 00-00-00-00-01-02 port 5 success. Dgs-3627:5# create multicast_fdb purpose used to create a static entry to the multicast mac address for...

  • Page 110

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 107 dgs-3627:5# config multicast_fdb default 01-00-00-00-00-01 add 1:1- 1:5 command: config multicast_fdb default 01-00-00-00-00-01 add 1:1-1:5 success. Dgs-3627:5# config fdb aging_time purpose used to set the aging time of...

  • Page 111

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 108 example usage: to delete a permanent fdb entry: dgs-3627:5#delete fdb default 00-00-00-00-01-02 command: delete fdb default 00-00-00-00-01-02 success. Dgs-3627:5# example usage: to delete a multicast fdb entry: dgs-3627:...

  • Page 113

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 110 to display unicast mac address table: dgs-3627:5#show fdb command: show fdb unicast mac address aging time = 300 vid vlan name mac address port type ---- ------------------- ----------------- ----- ----------------- 1 de...

  • Page 115

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 112 13 b roadcast s torm c ontrol c ommands on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malici...

  • Page 116

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 113 config traffic control deny all incoming traffic to the port except stp bpdu packets, which are essential in keeping the spanning tree operational on the switch. If the countdown timer has expired and yet the packet stor...

  • Page 118

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 115 show traffic control purpose used to display current traffic control settings. Syntax show traffic control {} description this command displays the current storm traffic control configuration on the switch. Parameters −s...

  • Page 119

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 116 14 q o s c ommands the switch supports 802.1p priority queuing. The switch has seven configurable priority queues. These priority queues are numbered from 6 (class 6) — the highest priority queue — to 0 (class 0) — the l...

  • Page 121

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 118 dgs-3627:5#show bandwidth_control 1-10 command: show bandwidth_control 1-10 bandwidth control table port rx rate tx rate effective rx effective tx (kbit/sec) (kbit/sec) (kbit/sec) (kbit/sec) ---- ---------- ---------- --...

  • Page 122

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 119 config scheduling priority classes will reset the weighted round-robin (wrr) cycle of forwarding packets, starting with the highest available priority class. Priority classes with an equal level of priority and equal ent...

  • Page 123

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 120 config 802.1p user_priority purpose used to map the 802.1p user priority of an incoming packet to one of the seven hardware queues available on the switch. Syntax config 802.1p user_priority description this command allo...

  • Page 124

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 121 to show 802.1p user priority: dgs-3627:5#show 802.1p user_priority command: show 802.1p user_priority qos class of traffic priority-0 -> priority-1 -> priority-2 -> priority-3 -> priority-4 -> priority-5 -> priority-6 ->...

  • Page 125

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 122 show 802.1p default_priority purpose used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p defa...

  • Page 127

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 124 enable hol_prevention purpose used to enable hol prevention. Syntax enable hol_prevention description the enable hol_prevention command enables head of line prevention. Parameters none. Restrictions only administrator an...

  • Page 128

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 125 show hol_prevention purpose used to show hol prevention. Syntax show hol_prevention description the show hol_prevention command displays the head of line prevention state. Parameters none. Restrictions none. Example usag...

  • Page 129

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 126 15 p ort m irroring c ommands the port mirroring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The primary purpose of the mirror function is to co...

  • Page 130

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 127 config mirror port rx − allows the mirroring of only packets received by (flowing into) the port or ports in the port list. Tx − allows the mirroring of only packets sent to (flowing out of) the port or ports in the port...

  • Page 131

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 128 example usage: to enable mirroring configurations: dgs-3627:5#enable mirror command: enable mirror success. Dgs-3627:5# disable mirror purpose used to disable a previously entered port mirroring configuration. Syntax dis...

  • Page 132

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 129 dgs-3627:5#show mirror command: show mirror current settings mirror status: disabled target port : 1:1 mirrored port rx: 1:2-1:7 tx: 1:2-1:7 dgs-3627:5#.

  • Page 133: Vlan

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 130 16 vlan c ommands along with normal vlan configurations, this switch now incorporate double vlans. Better known as q-in-q vlans, double vlans allow network providers to expand their vlan configurations to place vlans wit...

  • Page 137

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 134 dgs-3627:5#enable gvrp command: enable gvrp success. Dgs-3627:5# disable gvrp purpose used to disable gvrp on the switch. Syntax disable gvrp description this command, along with enable gvrp above, is used to enable and ...

  • Page 138

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 135 example usage: to display the switch’s current vlan settings: dgs-3627:5#show vlan command: show vlan vid : 1 vlan name : default vlan type : static advertisement : enabled member ports : 1:1-1:25 static ports : 1:1-1:25...

  • Page 139

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 136 dgs-3627:5#show gvrp command: show gvrp global gvrp : disabled port pvid gvrp ingress checking acceptable frame type ------- ---- -------- ---------------- ---------------------- 1:1 1 disabled enabled all frames 1:2 1 d...

  • Page 140

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 137 disable double_vlan purpose used to disable the double vlan feature on the switch. Syntax disable double_vlan description this command, along with the enable double_vlan command, enables and disables the double tag vlan....

  • Page 141

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 138 dgs-3627:5# create double_vlan rg spvid 2 tpid 0x9100 command: create double_vlan rg spvid 2 tpid 0x9100 success. Dgs-3627:5# config double_vlan purpose used to config the parameters for a previously created double vlan ...

  • Page 142

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 139 dgs-3627:5#config double_vlan drazen delete 1:4-1:8 command: config double_vlan drazen delete 1:4-1:8 success. Dgs-3627:5# show double_vlan purpose used to display the double vlan settings on the switch. Syntax show doub...

  • Page 143

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 140 dgs-3627:5#enable pvid auto_assign command: enable pvid auto_assign success. Dgs-3627:5# disable pvid auto_assign purpose used to disable auto assignment of pvid. Syntax disable pvid auto_assign description if “auto-assi...

  • Page 144: Vlan

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 141 17 p rotocol vlan g roup c ommands for bridges that implement port-and-protocol-based vlan classification, the vid associated with an untagged or priority-tagged frame is determined based on the port of arrival of the fr...

  • Page 146

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 143 delete dot1v_protocol_group purpose used to delete a protocol vlan group. Syntax delete dot1v_protocol_group group_id description this command will delete a protocol vlan group. Parameters group_id − enter an integer fro...

  • Page 148

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 145 example usage: to configure the ports for a protocol vlan group: dgs-3627:5#show port dot1v ports 1:6-1:8 command: show port dot1v ports 1:6-1:8 port: 1:6 protocol group id vlan name ------------------------- -----------...

  • Page 149

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 146 18 l ink a ggregation c ommands the link aggregation commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Link aggregation, also known as trunking, is a ...

  • Page 150

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 147 dgs-3627:5#create link_aggregation group_id 1 command: create link_aggregation group_id 1 success. Dgs-3627:5# delete link_aggregation group_id purpose used to delete a previously created link aggregation group. Syntax d...

  • Page 151

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 148 dgs-3627:5#config link_aggregation group_id 1 master_port 1:5 ports 1:5-1:7,9 command: config link_aggregation group_id 1 master_port 1:5 ports 1:5-1:7,1:9 success. Dgs-3627:5# config link_aggregation algorithm purpose u...

  • Page 153

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 150 example usage: to configure lacp port mode settings: dgs-3627:5#config lacp_port 1:1-1:12 mode active command: config lacp_port 1:1-1:12 mode active success. Dgs-3627:5# show lacp_port purpose used to display current lac...

  • Page 154: Ip-Mac-P

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 151 19 ip-mac-p ort b inding (impb) the ip network layer uses a four-byte address. The ethernet link layer uses a six-byte mac address. Binding these two address types together allows the transmission of data between the lay...

  • Page 156

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 153 config address_binding ip_mac ports mac address do not match the pair defined the source-validity binding entry will be dropped. The arl entry corresponds to source mac address in the invalid packet so it will be set to ...

  • Page 157

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 154 dgs-3612:5#config address_binding ip_mac ports 2 allow_zeroip enable state enabl e strict forward_dhcppkt enable mode arp command: config address_binding ip_mac ports 2 allow_zeroip enable state enable strict forward_dhc...

  • Page 158

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 155 config address_binding ip_mac ports forwarded by the hardward until the s/w learn entries for the port. The port will check arp packets and ip packets by ip-mac-port binding entries. The packet is found by the entry, the...

  • Page 163

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 160 enable address_binding dhcp_snoop purpose to enable address binding auto mode. Syntax enable address_binding dhcp_snoop description by default, dhcp snooping is disabled. If user enables auto mode, all address_binding di...

  • Page 164

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 161 disable address_binding dhcp_snoop purpose to disable the address binding auto mode. Syntax disable address_binding dhcp_snoop description when the dhcp snoop function is disabled, all of the auto-learned binding entries...

  • Page 166

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 163 dgs-3627:5#show address_binding dhcp_snoop max_entry ports 1-12 command: show address_binding dhcp_snoop max_entry ports 1:1-1:12 port max entry ---- --------- 1:1 no_limit 1:2 no_limit 1:3 no_limit 1:4 no_limit 1:5 no_l...

  • Page 167

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 164 enable address_binding trap_log purpose used to enable the trap log for the ip-mac-port binding function. Syntax enable address_binding trap_log description this command, along with the disable address_binding trap_log w...

  • Page 168

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 165 20 ip c ommands (i ncluding ip m ultinetting ) ip multinetting is a function that allows multiple ip interfaces to be assigned to the same vlan. This is beneficial to the administrator when the number of ips on the origi...

  • Page 169

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 166 create ipif parameters − the name for the ip interface to be created. The user may enter an alphanumeric string of up to 12 characters to define the ip interface. − ip address and netmask of the ip interface to be create...

  • Page 170

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 167 config ipif local – allows the switch to respond to the proxy arp, if the source ip and destination ip are in the same interface. Bootp − allows the selection of the bootp protocol for the assignment of an ip address to ...

  • Page 172

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 169 show ipif purpose used to display the configuration of an ip interface on the switch. Syntax show ipif {} description this command will display the configuration of an ip interface on the switch. Parameters − the name cr...

  • Page 174

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 171 21 ip v 6 n eighbor d etection c ommands the following commands are used to detect ipv6 neighbors of the switch and to keep a running database about these neighbor devices. The ipv6 neighbor detection commands in the com...

  • Page 175

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 172 example usage: to create a static ipv6 neighbor: dgs-3627:5#create ipv6 neighbor_cache ipif triton 3ffc::1 00-01-02-03-04- 05 command: create ipv6 neighbor_cache ipif triton 3ffc::1 00-01-02-03-04-05 success. Dgs-3627:5#...

  • Page 176

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 173 show ipv6 neighbor_cache view this information. Static – enter this parameter to view all statically entered ipv6 neighbors of the switch. Dynamic − enter this command to view all dynamically configured neighbor devices ...

  • Page 177

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 174 config ipv6 nd ra ipif retrans_time −used to set an interval time between 0 and 4294967295 milliseconds for the dispatch of router advertisements by this interface over the link-local network, in response to a neighbor s...

  • Page 179

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 176 config ipv6 nd ns ipif purpose used to configure the parameters for neighbor solicitation messages to be sent from the switch. Syntax config ipv6 nd ns ipif retrans_time description this command will configure the parame...

  • Page 180

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 177 example usage: to display the neighbor detection parameters for ipv6: dgs-3627:5#show ipv6 nd command: show ipv6 nd interface name : system hop limit : 64 ns retransmit time : 0 (ms) router advertisement : disabled ra ma...

  • Page 181: Igmp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 178 22 igmp c ommands (i ncluding igmp v 3) igmp or internet group management protocol is a protocol implemented by systems utilizing ipv4 to collect the membership information needed by the multicast routing protocol throug...

  • Page 182

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 179 config igmp that the switch will wait for reports from members. Robustness_variable − this value states the permitted packet loss that guarantees igmp. Last_member_query_interval − the max response time inserted into gro...

  • Page 184: Igmp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 181 23 igmp s nooping c ommands the igmp snooping commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Igmp snooping stands for internet group management pro...

  • Page 185

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 182 config igmp_snooping host_timeout − specifies the maximum amount of time a host can be a member of a multicast group without the switch receiving a host membership report. The default is 260 seconds. Note: this parameter...

  • Page 188

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 185 dgs-3627:5#config router_ports_forbidden default add 2-10 command: config router_ports_forbidden default add 2-10 success. Dgs-3627:5# enable igmp_snooping purpose used to enable igmp snooping on the switch. Syntax enabl...

  • Page 189

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 186 dgs-3627:5#disable igmp_snooping command: disable igmp_snooping success. Dgs-3627:5# example usage: to disable forwarding all multicast traffic to a multicast-enabled router: dgs-3627:5#disable igmp_snooping forward_mcro...

  • Page 190

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 187 show igmp_snooping group purpose used to display the current igmp snooping group configuration on the switch. Syntax show igmp_snooping group {vlan } description this command will display the current igmp snooping group ...

  • Page 191

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 188 example usage: to display the router ports. Dgs-3627:5#show router_ports command: show router_ports vlan name : default static router port : 1:1-1:2, 1:10 dynamic router port : forbidden router port : total entries: 1 dg...

  • Page 192

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 189 example usage: to create a multicast vlan: dgs-3627:5#create igmp_snooping multicast_vlan accounting 2 command: create igmp_snooping multicast_vlan accounting 2 success. Dgs-3627:5# config igmp_snooping multicast_vlan pu...

  • Page 193

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 190 delete igmp_snooping multicast_vlan purpose used to delete a previously created multicast vlan on the switch. Syntax delete igmp_snooping multicast_vlan description this command allows you to delete a previously created ...

  • Page 195

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 192 dgs-3627:5#show igmp_snooping multicast_vlan_group accounting command: snow igmp_snooping multicast_vlan_group accounting multicast vlan : accounting no. Name from to ---- -------------------------- ----------- ---------...

  • Page 196: Mld

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 193 24 mld s nooping c ommands multicast listener discovery (mld) snooping is an ipv6 function used similarly to igmp snooping in ipv4. It is used to discover ports on a vlan that are requesting multicast data. Instead of fl...

  • Page 201

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 198 show mld_snooping purpose used to display the current status of the mld snooping function on the switch. Syntax show mld_snooping {vlan description this command allows the user to display the current status of the mld sn...

  • Page 202

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 199 show mld_snooping group purpose used to display mld snooping group configurations on the switch. Syntax show mld_snooping group {vlan description this command displays mld snooping group configurations on the switch. Par...

  • Page 204

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 201 example usage: to view the mld snooping forwarding table for vlan “accounting”: dgs-3627:5#show mld_snooping forwarding vlan accounting command: show mld_snooping forwarding vlan accounting vlan name : accounting source ...

  • Page 206

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 203 config dhcp_relay add ipif purpose used to add an ip destination address to the switch's dhcp/bootp relay table. Syntax config dhcp_relay add ipif description this command adds an ip address as a destination to which to ...

  • Page 208

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 205 example usage: to configure dhcp relay option 82 check: dgs-3627:5#config dhcp_relay option_82 check enable command: config dhcp_relay option_82 check enable success. Dgs-3627:5# config dhcp_relay option_82 policy purpos...

  • Page 209

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 206 dgs-3627:5#show dhcp_relay command: show dhcp_relay dhcp/bootp relay status : disabled dhcp/bootp hops count limit : 4 dhcp/bootp relay time threshold : 0 dhcp relay agent information option 82 state : disabled dhcp rela...

  • Page 210

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 207 disable dhcp_relay purpose used to disable the dhcp/bootp relay function on the switch. Syntax disable dhcp_relay description this command is used to disable the dhcp/bootp relay function on the switch. Parameters none. ...

  • Page 211: Dhcp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 208 26 dhcp s erver c ommands for this release, the switch now has the capability to act as a dhcp server to devices within its locally attached network. Dhcp, or dynamic host configuration protocol, allows the switch to del...

  • Page 214

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 211 dgs-3627:5#delete dhcp pool manual_binding floor2 10.10.10.1 command: delete dhcp pool manual_binding floor2 10.10.10.1 success. Dgs-3627:5# show dhcp pool manual_binding purpose used to display the manual binding settin...

  • Page 215

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 212 dgs-3627:5#show dhcp_binding command:show dhcp_binding dhcp binding table pool name ip address hardware address type status life time (secs) ----------- ----------- -------------------- --------- --------- --------------...

  • Page 216

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 213 dgs-3627:5#config dhcp ping_packets 2 command: config dhcp ping_packets 2 success. Dgs-3627:5# config dhcp ping_timeout purpose used to set the time the switch will wait before timing out a ping packet. Syntax config dhc...

  • Page 217

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 214 config dhcp pool default_router purpose used to configure the default router for the dhcp client. Syntax config dhcp pool default_router {} {} description this command is used to configure the default router for dhcp cli...

  • Page 218

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 215 config dhcp pool domain_name purpose used to configure the domain name for the dhcp pool of the switch. Syntax config dhcp pool domain_name 64> description this command is used to configure the domain name for the dhcp p...

  • Page 219

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 216 config dhcp pool netbios_name_server purpose used to configure the ip address(es) for the net bios name server, syntax config dhcp pool netbios_name_server {} {} description this command is used to enter the ip address o...

  • Page 220

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 217 config dhcp pool network_addr purpose used to configure the network address and corresponding subnet mask for the dhcp pool. Syntax config dhcp pool network_addr description this command will allow users to enter the ip ...

  • Page 221

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 218 example usage: to configure the ip address of the next server: dgs-3627:5#config dhcp pool next_server accounting 10.99.88.77 command: config dhcp pool next_server accounting 10.99.88.77 success. Dgs-3627:5# enable dhcp_...

  • Page 222

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 219 example usage: to disable the dhcp server: dgs-3627:5# disable dhcp_server command: disable dhcp_server success. Dgs-3627:5# show dhcp_server purpose used to display the dhcp server settings. Syntax show dhcp_server desc...

  • Page 223

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 220 dgs-3627:5#create dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 command: create dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 success. Dgs-3627:5# delete dhcp excluded_ad...

  • Page 224

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 221 dgs-3627:5#show dhcp excluded_address command:show dhcp excluded_address index begin address end address ------- ----------------- ------------------------- 1 192.168.0.1 192.168.0.100 2 10.10.10.10 10.10.10.10 total ent...

  • Page 225: Dhcp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 222 27 dhcp s erver s creening c ommands the dhcp server screening commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The dhcp server screening commands al...

  • Page 226

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 223 config filter dhcp_server enabling the dhcp filter will create one access profile and create one access rule per port (udp port 67). Addition of a dhcp filter permit entry will create one access profile and create one ac...

  • Page 227

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 224 dgs-3627:5#show filter dhcp_server command: show filter dhcp_server filter dhcp server trap_log state: disabled enabled ports: 1:1-1:3 illegal server log suppress duration:5 minutes filter dhcp server/client table server...

  • Page 228

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 225 dgs-3627:5# config filter dhcp_server illegal_server_log_suppress_duration 30min command: config filter dhcp_server illegal_server_log_suppress_duration 30min success. Dgs-3627:5#.

  • Page 229

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 226 28 l imited ip m ulticast a ddress the limited ip multicast command allows the administrator to permit or deny access to a port or range of ports by specifying a range of multicast addresses. The limited ip multicast com...

  • Page 230

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 227 dgs-3627:5#config limited multicast address 1-3 from 224.1.1.1 to 224.1.1.2 access permit state enable command: config limited multicast address 1-3 from 224.1.1.1 to 224.1.1.2 access permit state enable success. Dgs-362...

  • Page 231

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 228 example usage: to show the limited multicast address on ports 1 to 2: dgs-3627:5#show limited multicast address 1-2 command: show limited multicast address 1-2 port : 1 state : disabled access : none no. Name from to ---...

  • Page 233

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 230 config limited_multicast_addr purpose used to add or delete ports to a previously created multicast address range and then to give that range access to or denial from the switch. Syntax config limited_multicast_addr port...

  • Page 234

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 231 dgs-3627:5#config limited_multicast_addr ports 5-8 access permit command: config limited_multicast_addr ports 5-8 add access permit success. Dgs-3627:5# show limited_multicast_addr purpose used to display the limited mul...

  • Page 235: 802.1X

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 232 29 802.1x c ommands the switch implements the server-side of the ieee 802.1x port-based and mac-based network access control. This mechanism is intended to allow only authorized users, or other network devices, access to...

  • Page 236

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 233 enable 802.1x purpose used to enable the 802.1x server on the switch. Syntax enable 802.1x description the enable 802.1x command enables the 802.1x network access control server application on the switch. To select betwe...

  • Page 237

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 234 dgs-3627:5#enable 802.1x command: enable 802.1x success. Dgs-3627:5# show 802.1x auth_configuration purpose used to display the current configuration of the 802.1x server on the switch. Syntax show 802.1x auth_configurat...

  • Page 238

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 235 dgs-3627:5#show 802.1x auth_configuration ports 1 command: show 802.1x auth_configuration ports 1 802.1x : enabled authentication mode : port_based authentication protocol : radius_eap port number : 1 capability : none a...

  • Page 239

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 236 dgs-3627:5#show 802.1x auth_state command: show 802.1x auth_state port auth pae state backend state port status ------ -------------- ------------- ------------ 1:1 forceauth success authorized 1:2 forceauth success auth...

  • Page 241

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 238 config 802.1x auth_parameter purpose used to configure the 802.1x authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1x settings. Syntax...

  • Page 242

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 239 dgs-3627:5#config 802.1x auth_parameter ports 1–10 direction both command: config 802.1x auth_parameter ports 1–10 direction both success. Dgs-3627:5# config 802.1x init purpose used to initialize the 802.1x function on ...

  • Page 244

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 241 config radius add restrictions only administrator-level users can issue this command. Example usage: to configure the radius server communication settings: dgs-3627:5#config radius add 1 10.48.74.121 key dlink default co...

  • Page 245

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 242 config radius authentication requests. The default is 1812. Acct_port − the udp port number for accounting requests. The default is 1813. Restrictions only administrator-level users can issue this command. Example usage:...

  • Page 246

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 243 to view the current radius accounting client: dgs-3627:5#show acct_client command: show acct_client radiusacctclient ==> radiusacctclientinvalidserveraddresses 0 radiusacctclientidentifier d-link radiusauthserverentry ==...

  • Page 247

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 244 radiusauthclientroundtriptime 0 radiusauthclientaccessrequests 0 radiusauthclientaccessretransmissions 0 radiusauthclientaccessaccepts 0 radiusauthclientaccessrejects 0 radiusauthclientaccesschallenges 0 radiusauthclient...

  • Page 248

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 245 backendauthfails 0 ctrl+c esc q quit space n next page p previous page r refresh show auth_session_statistics purpose used to display the current authentication session statistics. Syntax show auth_session_statistics {po...

  • Page 249

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 246 dgs-3627:5#show auth_statistics ports 1 command: show auth_statistics ports 1 port number : 1:1 eapolframesrx 0 eapolframestx 0 eapolstartframesrx 0 eapolreqidframestx 0 eapollogoffframesrx 0 eapolreqframestx 0 eapolresp...

  • Page 250

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 247 example usage: to view 802.1x users currently configured on the switch: dgs-3627:5#show 802.1x user command: show 802.1x user current accounts: username password -------------- -------------- ctsnow tibeirus total entrie...

  • Page 251

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 248 example usage: to configure a previously created vlan as a 802.1x guest vlan for the switch. Dgs-3627:5#create 802.1x guest_vlan tiberius command: create 802.1x guest_vlan tiberius success. Dgs-3627:5# config 802.1x gues...

  • Page 252

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 249 delete 802.1x guest_vlan purpose used to delete an 802.1x guest vlan. Syntax delete 802.1x guest_vlan description the delete 802.1x guest_vlan command is used to delete a vlan that has been enabled as an 802.1x guest vla...

  • Page 253: (Acl)

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 250 30 a ccess c ontrol l ist (acl) c ommands the switch implements access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings and mac address. Access profile...

  • Page 255

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 252 create access_profile (for ethernet) purpose used to create an access profile on the switch by examining the ethernet part of the packet header. Masks entered can be combined with the values the switch finds in the speci...

  • Page 256

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 253 config access_profile (for ethernet) parameters parameters profile_id − enter an integer between 1 and 14 that is used to identify the access profile that will be configured with this command. This value is assigned to t...

  • Page 257

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 254 config access_profile (for ethernet) {time_range } – choose this parameter and enter the name of the time range settings that has been previously configured using the config time_range command. This will set specific tim...

  • Page 258

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 255 create access_profile (ip) parameters management protocol (igmp) field. • type − specifies that the switch will examine each frame’s igmp type field. • tcp − specifies that the switch will examine each frames transport c...

  • Page 259

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 256 config access_profile (ip) description this command is used to define the rules used by the switch to either filter or forward packets based on the ip part of each packet header. Parameters profile_id − enter an integer ...

  • Page 260

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 257 config access_profile (ip) • priority − this parameter is specified to re-write the 802.1p default priority previously set in the switch, which is used to determine the cos queue to which packets are forwarded to. Once t...

  • Page 261

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 258 create access_profile (packet content ) offset_chunk_4 } description this command is used to identify packets by examining the ethernet packet header, by byte and then decide whether to filter or forward it, based on the...

  • Page 262

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 259 config access_profile profile_id (packet content) parameters profile_id − enter an integer between 1 and 14 that is used to identify the access profile that will be configured with this command. This value is assigned to...

  • Page 263

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 260 config access_profile profile_id (packet content) this will set specific times when this access rule will be enabled or disabled on the switch. Delete access_id − use this command to delete a specific rule from the ip pr...

  • Page 264

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 261 dgs-3627:5#create access_profile profile_id 4 ipv6 class flowlabel command: create access_profile profile_id 4 ipv6 class flowlabel success. Dgs-3627:5# config access_profile profile_id (ipv6) purpose used to configure t...

  • Page 265

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 262 config access_profile profile_id (ipv6) ipv6 − specifies that the switch will look into the ipv6 fields in each packet, with emphasis on one or more of the following fields: • class − entering this parameter will instruc...

  • Page 266

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 263 dgs-3627:5#config access_profile profile_id 4 add access_id 1 ipv6 class 1 flowlabel 0xabcd port 4 deny command: config access_profile profile_id 4 add access_id 1 ipv6 class 1 flowlabel 0xabcd port 4 deny success. Dgs-3...

  • Page 267

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 264 dgs-3627:5#show access_profile command: show access_profile total unused rule entries : 1791 total used rule entries : 1 access profile id: 1 type : packet contact ========================================================...

  • Page 268

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 265 create cpu access_profile • source_ip_mask − specifies an ip address mask for the source ip address. • destination_ip_mask − specifies an ip address mask for the destination ip address. • dscp − specifies that the switch...

  • Page 269

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 266 dgs-3627:5# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0 destinat...

  • Page 270

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 267 config cpu access_profile parameters ip − specifies that the switch will examine the ip fields in each packet. • vlan − specifies that the access profile will apply to only this vlan. • source_ip − specifies that the acc...

  • Page 271

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 268 config cpu access_profile sequences of packets such as non-default quality of service or real time service packets. This field is to be defined by the user in hex form. • source_ipv6 − specifies an ip address mask for th...

  • Page 272

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 269 dgs-3627:5#delete cpu access_profile profile_id 1 command: delete cpu access_profile profile_id 1 success. Dgs-3627:5# show cpu_access_profile purpose used to view the cpu access profile entry currently set in the switch...

  • Page 273

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 270 31 t ime r ange c ommands the time range commands are used in conjunction with the access profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when...

  • Page 274

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 271 example usage: to configure the time range time1 to be between 6:30 a.M. And 9:40 p.M., monday to friday: dgs-3627:5#config time_range time1 hours start_time 6:30:00 end_time 21:40:00 weekdays mon-fri command: config tim...

  • Page 275: Acl

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 272 32 acl flow m etering c ommands before configuring the acl flow meter, here is a list of acronyms and terms users will need to know. Trtcm – two rate three color marker. This, along with the srtcm, are two methods availa...

  • Page 277

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 274 config flow_meter profile_id exceed this value but are less than the ebs value are marked yellow. • ebs − excess burst size. Measured in bytes, the ebs is associated with the cir and is used to identify packets that exce...

  • Page 278

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 275 show flow_meter purpose used to display the acl flow meter parameters set on the switch. Syntax show flow_meter {profile_id {access_id 128>}} description this command will display the flow meter parameters set on the swi...

  • Page 279

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 276 33 s f low sflow is a feature that allows users to monitor network traffic running through the switch to identify network problems through packet sampling and packet counter information of the switch. The switch itself i...

  • Page 280

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 277 enable sflow purpose used to enable the sflow function on the switch. Syntax enable sflow description this command, along with the disable sflow command, is used to enable the sflow function on the switch without alterin...

  • Page 281

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 278 create sflow analyzer_server that originate from the switch. Users must have the proper sflow software set on the analyzer in order to receive datagrams from the switch to be analyzed, and to analyze these datagrams. Use...

  • Page 282

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 279 config sflow analyzer_server being configured here. Timeout − used to specify the timeout for the analyzer server. When the server times out, all sflow samples and counter polls associated with this server will be delete...

  • Page 283

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 280 example usage: to delete an sflow analyzer server: dgs-3627:5# delete sflow analyzer_server 1 command: delete sflow analyzer_server 1 success. Dgs-3627:5# show sflow analyzer_server purpose used to display the settings o...

  • Page 286

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 283 show sflow counter_poller purpose used to display the counter poller for the sflow function of the switch. Syntax show sflow counter_poller description this command will allow the user to display the switch’s counter pol...

  • Page 287

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 284 to create the sflow flow sampler: dgs-3627:5#create sflow flow_sampler ports 1 analyzer_server_id 1 rate 10000 maxheadersize 128 command: create sflow flow_sampler ports 1 analyzer_server_id 1 rate 10000 maxheadersize 12...

  • Page 289

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 286 show sflow purpose used to display the sflow settings configured on the switch syntax show sflow description this command will allow the user to display the switch’s sflow settings. Parameters none. Restrictions only adm...

  • Page 290: Sntp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 287 34 t ime and sntp c ommands the simple network time protocol (sntp) (an adaptation of the network time protocol (ntp)) commands in the command line interface (cli) are listed (along with the appropriate parameters) in th...

  • Page 291

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 288 dgs-3627:5#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll- interval 30 command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll- interval 30 success. Dgs-3627:5# show sntp purpose used to display the sntp info...

  • Page 292

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 289 dgs-3627:5#enable sntp command: enable sntp success. Dgs-3627:5# disable sntp purpose to disable sntp server support. Syntax disable sntp description this will disable sntp support. Sntp service must be separately config...

  • Page 293

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 290 dgs-3627:5#config time 30jun2003 16:30:30 command: config time 30jun2003 16:30:30 success. Dgs-3627:5# config time_zone purpose used to determine the time zone used in order to adjust the system clock. Syntax config time...

  • Page 294

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 291 config dst parameters disable – disable the dst seasonal time adjustment for the switch. Repeating – using repeating mode will enable dst seasonal time adjustment. Repeating mode requires that the dst beginning and endin...

  • Page 295

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 292 dgs-3627:5#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10...

  • Page 296

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 293 35 p olicy r oute c ommands policy based routing is a method used by the switch to give specified devices a cleaner path to the internet. Used in conjunction with the access profile feature, the switch will identify traf...

  • Page 298

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 295 dgs-3627:5#delete policy_route name manager command: delete policy_route name manager success. Dgs-3627:5# show policy_route purpose used to display policy route settings. Syntax show policy_route description this comman...

  • Page 299

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 296 36 s afeguard e ngine c ommands periodically, malicious hosts on the network will attack the switch by utilizing packet flooding (arp storm) or other methods. These attacks may increase the cpu utilization beyond its cap...

  • Page 301

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 298 dgs-3627:5#show safeguard_engine command: show safeguard_engine safeguard engine state : disabled safeguard engine current status : normal mode ======================================================= cpu utilization info...

  • Page 302

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 299 37 t raffic s egmentation c ommands traffic segmentation allows users to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and then the tr...

  • Page 303

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 300 show traffic_segmentation purpose used to display the current traffic segmentation configuration on the switch. Syntax show traffic_segmentation {} description the show traffic_segmentation command is used to display the...

  • Page 307

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 304 config arpentry purpose used to configure a static entry in the arp table. Syntax config arpentry description this command is used to configure a static entry in the arp table. The user may specify the ip address and the...

  • Page 308

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 305 config gratuitous_arp send dup_ip_detected purpose used to enable/disable the sending of gratuitous arp requests while a duplicate ip address is being detected. Syntax config gratuitous_arp send duplicate_ip_detected [en...

  • Page 309

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 306 dgs-3627:5#config gratuitous_arp learning enable command: config gratuitous_arp learning enable success. Dgs-3627:5# enable gratuitous_arp trap & log purpose used to enable gratuitous arp trap and log state. Syntax enabl...

  • Page 310

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 307 config gratuitous_arp send periodically purpose used to configure the interval for periodical sending of gratuitous arp request packet. Syntax config gratuitous_arp send periodically ipif interval description the command...

  • Page 311: Vrrp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 308 39 vrrp c ommands vrrp or virtual routing redundancy protocol is a function on the switch that dynamically assigns responsibility for a virtual router to one of the vrrp routers on a lan. The vrrp router that controls th...

  • Page 312

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 309 dgs-3627:5#enable vrrp command: enable vrrp success. Dgs-3627:5# example usage: to enable the virtual ip address to be pinged: dgs-3627:5#enable vrrp ping command: enable vrrp ping success. Dgs-3627:5# disable vrrp purpo...

  • Page 314

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 311 create vrrp vrid command. Example usage: to create a vrrp entry: dgs-3627:5#create vrrp vrid 1 ipif tiberius ipaddress 11.1.1.1 state enable priority 200 advertisement_interval 1 preempt true critical_ip 10.53.13.224 cri...

  • Page 315

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 312 config vrrp vrid router. A true entry, along with having the backup router’s priority set higher than the masters priority, will set the backup router as the master router. A false entry will disable the backup router fr...

  • Page 316

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 313 config vrrp ipif ip authdata – this parameter will require the user to set an alphanumeric authentication string of no more than 16 characters to generate a md5 message digest for authentication in comparing vrrp message...

  • Page 317

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 314 dgs-3627:5#show vrrp command: show vrrp global vrrp :enabled non-owner response ping : disabled interface name : system authentication type : no authentication vrid : 2 virtual ip address : 10.53.13.3 virtual mac address...

  • Page 319

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 316 example usage: to add a static address 10.48.74.121, mask 255.0.0.0 and gateway 10.1.1.254 to the routing table: dgs-3627:5# create iproute 10.48.74.121/255.0.0.0 10.1.1.254 primary command: create iproute 10.48.74.121/8...

  • Page 320

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 317 show iproute parameters − ip address and netmask of the ip interface that is the destination of the route. The address and mask information can be specified using the traditional format (for example, 10.1.2.3/255.0.0.0 o...

  • Page 322

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 319 example usage: to delete a static ipv6 entry from the routing table: dgs-3627:5# delete ipv6route 1234::5d7f/32 2d30::ac21 command: delete ipv6route 1234::5d7f/32 2d30::ac21 success. Dgs-3627:5# show ipv6route purpose us...

  • Page 323

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 320 41 r oute r edistribution c ommands the route redistribution commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create route redistr...

  • Page 324

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 321 allowed metric type combinations are mettype 1 or mettype 2. The metric value 0 above will be redistributed in ospf as the metric 20. Example usage: to add route redistribution settings: dgs-3627:5#create route redistrib...

  • Page 325

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 322 entering the type combination − internal, exttype_1, exttype_2 is functionally equivalent to all. Entering the combination exttype_1, exttype_2 is functionally equivalent to external. Entering the combination internal, e...

  • Page 326

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 323 example usage: to configure route redistributions: dgs-3627:5#config route redistribute dst ospf src all metric 2 command: config route redistribute dst ospf src all metric 2 success. Dgs-3627:5# config route redistribut...

  • Page 329

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 326 example usage: to delete an entry domain name dns1, ip address 10.43.21.12 from dns static table. Dgs-3627:5#config dnsr delete static dns1 10.43.21.12 command: config dnsr delete static dns1 10.43.21.12 success. Dgs-362...

  • Page 331

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 328 dgs-3627:5#show dnsr command: show dnsr dnsr status : disabled primary name server : 0.0.0.0 secondary name server : 0.0.0.0 dnsr cache status : disabled dnsr static table status : disabled dns relay static table domain ...

  • Page 333

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 330 to change the rip receive mode for the ip interface system: dgs-3627:5#config rip ipif system rx_mode v1_only command: config rip ipif system rx_mode v1_only success. Dgs-3627:5# enable rip purpose used to enable rip. Sy...

  • Page 334

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 331 show rip purpose used to display the rip configuration and statistics for the switch. Syntax show rip {ipif } description this command will display the rip configuration and statistics for a given ip interface or for all...

  • Page 335: Dvmrp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 332 44 dvmrp c ommands the dvmrp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Dvmrp is a distance-vector multicast routing protocol designed to suppo...

  • Page 337

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 334 show dvmrp routing_table purpose used to display the current dvmrp routing table. Syntax show dvmrp routing table {ipaddress } description the command is used to display the current dvmrp routing table. Parameters ipaddr...

  • Page 338

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 335 dgs-3627:5#show dvmrp neighbor command: show dvmrp neighbor dvmrp neighbor address table interface neighbor address generation id expire time --------------- ----------------- -------------- --------- system 10.2.1.123 2...

  • Page 339

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 336 show dvmrp purpose used to display the current dvmrp settings on the switch. Syntax show dvmrp{} description the command will display the current dvmrp configurations. Parameters − this parameter will allow the user to d...

  • Page 340: Pim

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 337 45 pim c ommands pim or protocol independent multicastis a method of forwarding traffic to multicast groups over the network using any pre-existing unicast routing protocol, such as rip or ospf, set on routers within a m...

  • Page 341: Pim-Dm

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 338 assert messages at times on the pim-sm enabled network, parallel paths are created from source to receiver, meaning some receivers will receive the same multicast packets twice. To improve this situation, assert messages...

  • Page 342

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 339 command parameters delete pim register_checksum_include_data rp_address show pim register_checksum_include_data_rp_list each command is listed, in detail, in the following sections. Enable pim purpose used to enable the ...

  • Page 344

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 341 note: the probe time value must be less than half of the register suppression time value. If not, the administrator will be presented with a fail message. Create pim crp purpose to enable the switch to become a candidate...

  • Page 346

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 343 to create the settings to determine a static rp: dgs-3627:5#create pim static_rp group 231.0.0.1/32 rp 11.1.1.1 command: create pim static_rp group 231.0.0.1/32 rp 11.1.1.1 success. Dgs-3627:5# delete pim static_rp purpo...

  • Page 347

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 344 dgs-3627:5#show pim static_rp command: show pim static_rp pim static rp table group rp address ------------------ -------------------- 224.0.0.0/4 11.1.1.254 239.0.0.1/32 31.1.1.1 239.0.0.2/32 31.1.1.12 239.0.0.3/32 31.1...

  • Page 348

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 345 dgs-3627:5# show pim rpset command: show pim rpset pim rp-set table bootstrap router: 12.43.51.81 group address rp address holdtime expired time type ---------------- --------------- ------------ -------------- ---------...

  • Page 350

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 347 show pim cbsr purpose used to display the candidate bsr settings of the switch, along with cbsr parameters configured for the switch. Syntax show pim cbsr {ipif } description this command will display the settings for ca...

  • Page 351

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 348 dgs-3627:5# show pim command: show pim pim global state : enabled last hop spt switchover : never register probe time : 5 register suppression time : 60 pim interface table designated hello j/p interface ip address route...

  • Page 352

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 349 show pim ipmroute purpose used to display the pim ip multicast route table on the switch. Syntax show pim ipmroute description this command will display the pim ip multicast route table on the switch. This command is for...

  • Page 353

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 350 dgs-3627:5# create pim register_checksum_include_data rp_address 11.1.1.1 command: create pim register_checksum_include_data rp_address 11.1.1.1 success. Dgs-3627:5# delete pim register_checksum_include_data purpose used...

  • Page 354

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 351 dgs-3627:5#show pim register_checksum_include_data_rp_list command: show pim register_checksum_include_data_rp_list pim register checksum include data rp address ------------------------------------------- 11.1.1.1 total...

  • Page 355

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 352 46 s tatic m ulticast r oute c ommands the static multicast route commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Ip multicast static routes are use...

  • Page 357

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 354 47 ip m ulticasting c ommands the ip multicasting commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show ipmc cache {group } {ipadd...

  • Page 358

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 355 show ipmc • inactive – specifying this parameter will display entries that are currently inactive. • dvmrp – specifying this parameter will display only those entries that are related to the dvmrp protocol. • pim – speci...

  • Page 359: Md5

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 356 48 md5 c ommands the md5 configuration commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create md5 key config md5 key delete md5 k...

  • Page 360

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 357 dgs-3627:5#config md5 key 1 taboo command: config md5 key 1 taboo success. Dgs-3627:5# delete md5 key purpose used to delete an entry in the md5 key table. Syntax delete md5 key description this command is used to delete...

  • Page 361: Ospf

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 358 49 ospf c onfiguration c ommands the ospf configuration commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config ospf router_id ena...

  • Page 362

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 359 config ospf router_id purpose used to configure the ospf router id. Syntax config ospf router_id description this command is used to configure the ospf router id. Parameters − the ip address of the ospf router. Restricti...

  • Page 363

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 360 dgs-3627:5#disable ospf command: disable ospf success. Dgs-3627:5# show ospf purpose used to display the current ospf state on the switch. Syntax show ospf description this command will display the current state of ospf ...

  • Page 365

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 362 delete ospf area purpose used to delete an ospf area. Syntax delete ospf area description this command is used to delete an ospf area. Parameters − a 32-bit number in the form of an ip address (xxx.Xxx.Xxx.Xxx) that uniq...

  • Page 366

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 363 dgs-3627:5#config ospf area 10.48.74.122 type stub stub_summary enable metric 1 command: config ospf area 10.48.74.122 type stub stub_summary enable metric 1 success. Dgs-3627:5# show ospf area purpose used to display an...

  • Page 367

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 364 delete ospf host_route purpose used to delete an ospf host route. Syntax delete ospf host_route description this command is used to delete an ospf host route. Parameters − the ip address of the ospf host. Restrictions on...

  • Page 368

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 365 dgs-3627:5#show ospf host_route command: show ospf host_route host address metric area_id --------------- --------------- ----------- 10.48.73.21 2 10.1.1.1 10.48.74.122 1 10.1.1.1 total entries: 2 dgs-3627:5# create osp...

  • Page 370

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 367 dgs-3627:5#config ospf aggregation 10.1.1.1 10.48.76.122/16 lsdb_type summary advertise enable command: config ospf aggregation 10.1.1.1 10.48.76.122/16 lsdb_type summary advertise enable success. Dgs-3627:5# show ospf a...

  • Page 371

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 368 note: when this command displays a “ * ” (a star symbol) in the ospf lsdb table for the area_id or the cost, this is interpreted as “no area id” for external lsas, and as “no cost given” for the advertised link. Example ...

  • Page 372

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 369 show ospf virtual_neighbor purpose used to display the current ospf virtual neighbor router table. Syntax show ospf virtual_neighbor { } description this command will display the current ospf virtual neighbor router tabl...

  • Page 373

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 370 config ospf ipif • simple − choosing this parameter will set a simple authentication which includes a case-sensitive password of no more than 8 characters. • md5 − choosing this parameter will set authentication based on...

  • Page 374

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 371 dgs-3627:5#show ospf ipif ipif2 command: show ospf ipif ipif2 interface name: ipif2 ip address: 123.234.12.34/24 ((link up) network medium type: broadcast metric: 1 area id: 1.0.0.0 administrative state: enabled priority...

  • Page 376

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 373 config ospf virtual_link − the ospf router id for the remote area. This is a 32-bit number in the form of an ip address (xxx.Xxx.Xxx.Xxx) that uniquely identifies the remote area’s area border router. Hello_interval − al...

  • Page 377

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 374 dgs-3627:5#delete ospf virtual_link 10.1.12 20.1.1.1 command: delete ospf virtual_link 10.1.12 20.1.1.1 success. Dgs-3627:5# show ospf virtual_link purpose used to display the current ospf virtual interface configuration...

  • Page 378

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 375 50 r oute p reference c ommands route preference is a way for routers to select the best path when there are two or more different routes to the same destination from two different routing protocols. The majority of rout...

  • Page 380

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 377 show route preference rip – enter this parameter to view the route preference settings for the rip route. Ospfintra –enter this parameter to view the route preference settings for the ospf intra-area route. Ospfinter – e...

  • Page 381: Mac

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 378 51 mac n otification c ommands the mac notification commands in the command line interface (cli) are listed, in the following table, along with their appropriate parameters. Command parameters enable mac_notification dis...

  • Page 383

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 380 dgs-3627:5#config mac_notification ports 7 enable command: config mac_notification ports 7 enable success. Dgs-3627:5# show mac_notification purpose used to display the switch’s mac address table notification global sett...

  • Page 384

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 381 dgs-3627:5#show mac_notification ports command: show mac_notification ports port # mac address table notification state ------ ----------------------------------------- 1 disabled 2 disabled 3 disabled 4 disabled 5 disab...

  • Page 385: (Wac)

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 382 52 w eb - based a ccess c ontrol (wac) c ommands web-based access control is another port based access control method implemented similarly to the 802.1x port based access control method previously stated. This function ...

  • Page 386

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 383 disable wac purpose used to disable the web-based access control on the switch. Syntax disable wac description this command is used to disable web-based access control globally on the switch. Parameters none. Restriction...

  • Page 387

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 384 config wac already been pre-assigned by the administrator using the config radius commands located in the 802.1x section. Default_redirpath – enter the url of the website that authenticated users placed in the vlan are d...

  • Page 388

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 385 create wac user purpose used to create a web-based access control user on the switch syntax create wac user {vlan } description this command is used to create a web-based access control user on the switch. Parameters – e...

  • Page 389

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 386 config wac user purpose used to configure a previously created web-based access control user on the switch. Syntax config wac user vlan description this command is used to configure a previously created web-based access ...

  • Page 391

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 388 53 a ccess a uthentication c ontrol c ommands the tacacs / xtacacs / tacacs+ / radius commands allow users to secure access to the switch using the tacacs / xtacacs / tacacs+ / radius protocols. When a user logs in to th...

  • Page 392

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 389 the access authentication control commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable authen_policy disable authen_policy show...

  • Page 393

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 390 enable authen_policy purpose used to enable system access authentication policy. Syntax enable authen_policy description this command will enable an administrator-defined authentication policy for users trying to access ...

  • Page 394

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 391 example usage: to display the system access authentication policy: dgs-3627:5#show authen_policy command: show authen_policy authentication policy: enabled dgs-3627:5# create authen_login method_list_name purpose used to...

  • Page 395

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 392 config authen_login administrator level, the user must implement the enable admin command, followed by a previously configured password. (see the enable admin part of this section for more detailed information, concernin...

  • Page 396

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 393 example usage: to configure the user defined method list “dlee” with authentication methods tacacs, xtacacs and local, in that order. Dgs-3627:5#config authen_login method_list_name dlee method tacacs xtacacs local comma...

  • Page 398

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 395 create authen_enable method_list_name purpose used to create a user-defined method list of authentication methods for promoting normal user level privileges to administrator level privileges on the switch. Syntax create ...

  • Page 399

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 396 config authen_enable ƒ tacacs – adding this parameter will require the user to be authenticated using the tacacs protocol from the remote tacacs server hosts of the tacacs server group list. ƒ xtacacs – adding this param...

  • Page 400

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 397 dgs-3627:5#config authen_enable method_list_name dlee method tacacs xtacacs local command: config authen_enable method_list_name dlee method tacacs xtacacs local success. Dgs-3627:5# example usage: to configure the defau...

  • Page 401

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 398 show authen_enable characters to define the given method list to view. All – entering this parameter will display all the authentication login methods currently configured on the switch. The window will display the follo...

  • Page 402

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 399 config authen application ƒ all – choose this parameter to configure all applications (console, telnet, ssh, web) login method. Login – use this parameter to configure an application for normal login on the user level, u...

  • Page 406

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 403 example usage: to view authentication server hosts currently set on the switch: dgs-3627:5#show authen server_host command: show authen server_host ip address protocol port timeout retransmit key --------------- --------...

  • Page 407

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 404 config authen server_group protocol may be added to this group. ƒ xtacacs – use this parameter to utilize the built-in xtacacs server protocol on the switch. Only server hosts utilizing the xtacacs protocol may be added ...

  • Page 408

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 405 dgs-3627:5#delete server_group group_1 command: delete server_group group_1 success. Dgs-3627:5# show authen server_group purpose used to view authentication server groups on the switch. Syntax show authen server_group d...

  • Page 409

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 406 example usage: to configure the response timeout for 60 seconds: dgs-3627:5# config authen parameter response_timeout 60 command: config authen parameter response_timeout 60 success. Dgs-3627:5# config authen parameter a...

  • Page 410

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 407 example usage: to view the authentication parameters currently set on the switch: dgs-3627:5#show authen parameter command: show authen parameter response timeout : 30 seconds user attempts : 3 dgs-3627:5# enable admin p...

  • Page 411

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 408 example usage: to configure the password for the “local_enable” authentication method. Dgs-3627:5#config admin local_enable command: config admin local_enable enter the old password: enter the case-sensitive new password...

  • Page 412: Ssh

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 409 54 ssh c ommands the steps required to use the secure shell (ssh) protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows: 1. Create a user account with admi...

  • Page 413

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 410 dgs-3627:5#enable ssh command: enable ssh success. Dgs-3627:5# disable ssh purpose used to disable ssh. Syntax disable ssh description this command allows users to disable ssh on the switch. Enabling ssh will disable the...

  • Page 414

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 411 dgs-3627:5#config ssh authmode password enable command: config ssh authmode password enable success. Dgs-3627:5# show ssh authmode purpose used to display the ssh authentication mode setting. Syntax show ssh authmode des...

  • Page 415

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 412 dgs-3627:5# config ssh server maxsession 2 contimeout 300 authfail 2 command: config ssh server maxsession 2 contimeout 300 authfail 2 success. Dgs-3627:5# show ssh server purpose used to display the ssh server setting. ...

  • Page 416

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 413 config ssh user password – this parameter should be chosen if the user wishes to use an administrator defined password for authentication. Upon entry of this command, the switch will prompt the user for a password, and t...

  • Page 418

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 415 show ssh algorithm purpose used to display the ssh algorithm setting. Syntax show ssh algorithm description this command will display the current ssh algorithm setting status. Parameters none. Restrictions none. Example ...

  • Page 419: Ssl

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 416 55 ssl c ommands secure sockets layer or ssl is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These secur...

  • Page 422

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 419 config ssl cachetimeout timeout parameters timeout – enter a timeout value between 60 and 86400 seconds to specify the total time an ssl key exchange id stays valid before the ssl module will require a new, full ssl nego...

  • Page 423

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 420 dgs-3627:5#show ssl command: show ssl ssl status disabled rsa_with_rc4_128_md5 0x0004 enabled rsa_with_3des_ede_cbc_sha 0x000a enabled dhe_dss_with_3des_ede_cbc_sha 0x0013 enabled rsa_export_with_rc4_40_md5 0x0003 enable...

  • Page 424

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 421 56 j umbo f rame c ommands certain switches can support jumbo frames (frames larger than the ethernet frame size of 1536 bytes). To transmit frames of up to 9k (and 9216 bytes tagged), the user can increase the maximum t...

  • Page 425

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 422 dgs-3627:5#disable jumbo_frame command: disable jumbo_frame success. Dgs-3627:5# show jumbo_frame purpose used to show the status of the jumbo frame function on the switch. Syntax show jumbo_frame description this comman...

  • Page 426: Lldp

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 423 57 lldp c ommands the lldp commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The link layer discovery protocol (lldp) specified in this standard allow...

  • Page 427

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 424 each command is listed, in detail, in the following sections. Enable lldp purpose used to enable lldp operation on the switch. Syntax enable lldp description this is a global control for the lldp function. When this func...

  • Page 428

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 425 config lldp message_tx_interval purpose used to change the packet transmission interval. Syntax config lldp message_tx_interval description this interval controls how often active ports retransmit advertisements to their...

  • Page 429

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 426 config lldp tx_delay purpose used to change the minimum time (delay-interval) lldp ports will delay in advertising successive lldp advertisements due to a change in lldp mib content. The tx_delay defines the minimum inte...

  • Page 430

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 427 config lldp notification _interval purpose used to configure the timer of the notification interval for sending notification to configured snmp trap receiver(s). Syntax config lldp notification_interval description globa...

  • Page 432

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 429 dgs-3627:5#config lldp ports 1:1-1:2 mgt_addr ipv4 192.168.254.10 enable command: config lldp ports 1:1-1:2 mgt_addr ipv4 192.168.254.10 enable success. Dgs-3627:5# config lldp ports basic_tlvs purpose used to configure ...

  • Page 433

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 430 config lldp dot1_tlv_pvid purpose used to configure an individual port or group of ports to exclude one or more of ieee 802.1 organization port vlan id tlv data types from outbound lldp advertisements. Syntax config lldp...

  • Page 434

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 431 dgs-3627:5#config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable command: config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable success. Dgs-3627:5# config lldp dot1_tlv_vlan_name purpose used to configur...

  • Page 435

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 432 config lldp dot1_tlv_protocol_identity purpose used to configure an individual port or group of ports to exclude one or more of ieee 802.1 organization protocol identity tlv data types from outbound lldp advertisements. ...

  • Page 436

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 433 config lldp dot3_tlvs this type indicates it is possible for two ends of an ieee 802.3 link to be configured with different and/or speed settings and still establish some limited network connectivity. More precisely, the...

  • Page 437

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 434 dgs-3627:5#config lldp forward_message enable command: config lldp forward_message enable success. Dgs-3627:5# show lldp purpose this command displays the switch’s general lldp configuration status. Syntax show lldp desc...

  • Page 438

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 435 example usage: to display management address information for port 1: dgs-3627:5# show lldp mgt_addr ipv4 192.168.254.10 command: show lldp mgt_addr ipv4 192.168.254.10 address 1 ------------------------------------------...

  • Page 440

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 437 example usage: to display remote table in brief mode: dgs-3627:5#show lldp remote_ports 1-2 mode brief command: show lldp remote_ports 1-2 mode brief port id: 1:1 ---------------------------------------------------------...

  • Page 441

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 438 dgs-3627:5#show lldp statistics ports 1 command: show lldp statistics ports 1 port id : 1:1 --------------------------------------------- lldpstatstxportframestotal : 0 lldpstatsrxportframesdiscardedtotal : 0 lldpstatsrx...

  • Page 442: D-L

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 439 58 d-l ink s ingle ip m anagement c ommands simply put, d-link single ip management is a concept that will stack switches together over ethernet instead of using stacking ports or modules. Switches using d-link single ip...

  • Page 443

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 440 for access to the ms. The cs’s ip address will become the path to all ms’s of the group and the cs’s administrator’s password, and/or authentication will control access to all ms’s of the sim group. With sim enabled, the...

  • Page 444

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 441 enable sim purpose used to enable single ip management (sim) on the switch syntax enable sim description this command will enable sim globally on the switch. Sim features and functions will not function properly unless t...

  • Page 445

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 442 show sim mac address – displays the mac address of the switch. Capabilities – displays the type of switch, be it layer 2 (l2) or layer 3 (l3). Platform – switch description including name and model number. Sim state –dis...

  • Page 446

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 443 to show the candidate information in summary, if the candidate id is specified: dgs-3627:5#show sim candidates command: show sim candidates id mac address platform / hold firmware device name capability time version --- ...

  • Page 447

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 444 dgs-3627:5#show sim neighbor command: show sim neighbor neighbor info table port mac address role ------ ------------------ --------- 23 00-35-26-00-11-99 commander 23 00-35-26-00-11-91 member 24 00-35-26-00-11-90 candid...

  • Page 448

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 445 dgs-3627:5#config sim_group add 2 command: config sim_group add 2 please wait for ack!!! Sim config success !!! Success. Dgs-3627:5# to delete a member: dgs-3627:5#config sim_group delete 1 command: config sim_group dele...

  • Page 449

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 446 dgs-3627:5# config sim commander dp_interval 40 command: config sim commander dp_interval 40 success. Dgs-3627:5# to change the hold time of the discovery protocol: dgs-3627:5# config sim hold_time 120 command: config si...

  • Page 451

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 448 dgs-3627:5# download sim_ms configuration_from_tftp 10.53.13.94 c:/dgs3627.Txt all command: download sim_ms configuration_from_tftp 10.53.13.94 c:/dgs3627.Txt all this device is updating configuration. Please wait... Dow...

  • Page 452: Mac-B

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 449 59 s tatic mac-b ased vlan c ommands the static mac-based vlan commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. For bridges that implement mac-based ...

  • Page 453

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 450 delete mac_based_vlan purpose used to delete the static mac-based vlan entry. Syntax delete mac_based_vlan {mac_address vlan 32>} description use this command to delete a database entry. If the mac_address and vlan is no...

  • Page 454

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 451 dgs-3627:5# show mac_based_vlan command: show mac_based_vlan mac address vlan id status type ------------- ----------- ------------- ------------ 00-80-e0-14-a7-57 200 active static 00-80-c2-33-c3-45 200 inactive static ...

  • Page 455: Ospf

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 452 60 ospf e qual -c ost m ulti -p ath f unction c ommands the ospf ecmp function commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters co...

  • Page 456

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 453 show ecmp purpose used to display the ecmp related settings. Syntax show ecmp description this command displays the ecmp related settings. Parameters none. Restrictions none. Example usage: to show current ecmp related s...

  • Page 457

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 454 disable ecmp ospf purpose used to disable the ospf ecmp function. Syntax disable ecmp ospf description this command is used to disable the ospf ecmp function. Parameters none. Restrictions only administrator and operator...

  • Page 458: Mac-

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 455 61 mac- based a ccess c ontrol c ommands the mac-based access control commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Mac-based access control is a ...

  • Page 459

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 456 enable mac_based_access_control purpose used to enable mac-based access control. Syntax enable mac_based_access_control description the enable mac_based_access_control command will enable the mac-based access control fun...

  • Page 460

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 457 example usage: to configure the mac-based access control password: dgs-3627:5# config mac_based_access_control password switch command: config mac_based_access_control password switch success. Dgs-3627:5# config mac_base...

  • Page 461

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 458 example usage: to config the mac-based access control port state: dgs-3627:5# config mac_based_access_control ports 1:1-1:8 state enable command: config mac_based_access_control ports 1:1-1:8 state enable success. Dgs-36...

  • Page 462

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 459 dgs-3627:5# config mac_based_access_control guest_vlan ports 1-8 command: config mac_based_access_control guest_vlan ports 1-8 success. Dgs-3627:5# create mac_based_access_control purpose used to assign the guest vlan. S...

  • Page 465

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 462 to config mac-based access control local by vlan: dgs-3627:5# config mac_based_access_control_local mac 00-00-00-00- 00-01 vlan rg command: config mac_based_access_control_local mac 00-00-00-00-00-01 vlan rg success. Dgs...

  • Page 468

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 465 show mac_based_access_control auth_mac purpose used to display mac-based access control authentication status. Syntax show mac_based_access_control auth_mac {ports } description the show mac_based_access_control auth_mac...

  • Page 469: Rspan

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 466 62 rspan c ommands the rspan function commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable rspan disable rspan create rspan vla...

  • Page 470

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 467 dgs-3627:5# disable rspan purpose used to disable rspan syntax disable rspan description this command disables the rspan function. Parameters none. Restrictions only administrator and operator-level users can issue this ...

  • Page 473

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 470 to config rspan vlan by vlan id: dgs-3627:5# config rspan vlan vlan_id 6 source add ports 2-5 rx command: config rspan vlan vlan_id 6 source add ports 1:2-1:5 rx success. Dgs-3627:5# to config rspan vlan: dgs-3627:5#conf...

  • Page 475: Bpdu

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 472 63 bpdu t unnelling c ommands the bpdu tunnelling commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Users at different sites connected across a servic...

  • Page 476

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 473 dgs-3627:5#config bpdu_tunnel ports 1:1-1:4 type tunnel stp command: config bpdu_tunnel ports 1:1-1:4 type tunnel stp success. Dgs-3627:5# show bpdu_tunnel purpose used to show bpdu tunnelling global state, tunnel destin...

  • Page 477

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 474 example usage: to enable bpdu tunnel: dgs-3627:5#enable bpdu_tunnel command: enable bpdu_tunnel success. Dgs-3627:5# disable bpdu_tunnel purpose used to disable the bpdu tunnelling function. Syntax disable bpdu_tunnel de...

  • Page 478

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 475 64 q in q c ommands the qinq commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Qinq, also known as vlan stacking, is a powerful, yet simple and cost-e...

  • Page 479

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 476 dgs-3627:5#enable qinq command: enable qinq success. Dgs-3627:5# disable qinq purpose this command is used to disable the qinq mode. Syntax disable qinq description this command disables qinq mode. All dynamically learne...

  • Page 481

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 478 show qinq port purpose used to show a port’s qinq mode status. Syntax show qinq ports {} description the command is used to show the qinq configuration for a port, including: port role in qinq mode, miss drop and port ou...

  • Page 483

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 480 dgs-3627:5#delete vlan_translation ports 1:1-1:4 command: delete vlan_translation ports 1:1-1:4 success. Dgs-3627:5# show vlan_translation purpose used to display c-vlan based sp-vlan assignment rules. Syntax show vlan_t...

  • Page 484

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 481 65 l oopback d etection c ommands the loopback detection commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config loopdetect {recov...

  • Page 486

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 483 to disable loop-back detection on the switch: dgs-3627:5#disable loopdetect command: disable loopdetect success dgs-3627:5# show loopdetect purpose used to display the current loop-back detection settings on the switch. ...

  • Page 487

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 484 dgs-3627:5#show loopdetect ports 1:1-1:9 command: show loopdetect ports 1:1-1:9 port loopdetect state loop status ------ ------------------ ---------- 1:1 disabled normal 1:2 disabled normal 1:3 disabled normal 1:4 disab...

  • Page 488

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 485 66 c ommand h istory l ist the switch history commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters ? {} config command_history show co...

  • Page 489

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 486 dgs-3627:5#? .. ? Cd clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear attack_log clear counters clear dhcp_binding clear fdb clear log clear mac_based_access_control auth_mac clear port_sec...

  • Page 490

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 487 config command_history purpose used to configure the command history. Syntax config command_history description this command is used to configure the command history. Parameters − the number of previously executed comman...

  • Page 491

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 488 a t echnical s pecifications general protocols fiber-optic xfp support cx4 support ieee 802.3 10base-t ethernet ieee 802.3u 100base-tx fast ethernet ieee 802.3ab 1000base-t gigabit ethernet ieee 802.3z 1000base-t (sfp “m...

  • Page 492

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 489 4 x 10/100/1000mbps combo ports 3 available slots for optional 10ge modules dgs-3650: 48 x 10/100/1000 mbps ports 4 x 1000mbps combo sfp ports 2 available slots for optional 10ge modules dgs-3612g: 12 x 100/1000mbps sfp ...

  • Page 493

    Xstack ® dgs-3600 series layer 3 gigabit ethernet managed switch cli manual 490 performance transmission method store-and-forward packet buffer 2 mb per device packet filtering/forwarding rate 14,881 pps (10m port) 148.810 pps (100m port) 1,488,100 pps (1gbps port) mac address learning automatic upd...