DL manuals
D-Link
Switch
DWS-1008
Cli Reference Manual

D-Link DWS-1008 Cli Reference Manual - Session Management Commands

Other manuals for DWS-1008: Installation Manual, Product Manual, Cli Reference Manual

Manual is about: 8 Port 10/100 Wireless Switch with Power over Ethernet

Page of 406

Download

Print this page

Bookmark us

325

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Session Management Commands

Use

session management commands to display and clear administrative and network user

sessions.

clear sessions

Clears all administrative sessions, or clears administrative console or Telnet sessions.

Syntax:

clear sessions {admin | console | telnet [client [session-id]]}

admin

Clears sessions for all users with administrative

access to the switch through a Telnet or SSH

connection or a console plugged into the switch.

console

Clears sessions for all users with administrative

access to the switch through a console plugged

into the switch.

telnet

Clears sessions for all users with administrative

access to the switch through a Telnet connection.

telnet client

[session-id]

Clears all Telnet client sessions from the CLI to

remote devices, or clears an individual session

identiﬁed by session ID.

Defaults: None.

Access: Enabled.

Examples: To clear all administrator sessions type the following command:

DWS-1008#

clear sessions admin

This will terminate manager sessions, do you wish to continue? (y|n) [n]y

To clear all administrative sessions through the console, type the following command:

DWS-1008#

clear sessions console

This will terminate manager sessions, do you wish to continue? (y|n) [n]y

To clear all administrative Telnet sessions, type the following command:

DWS-1008#

clear sessions telnet

This will terminate manager sessions, do you wish to continue? (y|n) [n]y

« ‹ Prev 323 324 325 326 327 328 329 Next › »

Summary of DWS-1008

Page 2: Table of Contents
1 dws-1008 cli reference guide d-link systems, inc. Table of contents using the command line interface ................................................................2 cli conventions ........................................................................................2 globs ......................
Page 3: Cli Conventions
2 dws-1008 cli reference guide d-link systems, inc. Using the command line interface cli conventions command prompts by default, the mss cli provides the following prompt for restricted users. The mm portion shows the dws switch model number (for example, 1008) and the nnnnnn portion shows the last ...
Page 4
3 dws-1008 cli reference guide d-link systems, inc. Using the command line interface text entry conventions and allowed characters unless otherwise indicated, the mss cli accepts standard ascii alphanumeric characters, except for tabs and spaces, and is case-insensitive. The cli has speciﬁc notation...
Page 5
4 dws-1008 cli reference guide d-link systems, inc. Using the command line interface wildcard masks security access control lists (acls) use source and destination ip addresses and wildcard masks to determine whether the switch ﬁlters or forwards ip packets. Matching packets are either permitted or ...
Page 6
5 dws-1008 cli reference guide d-link systems, inc. Using the command line interface example\* all users in the windows domain example with usernames that have no delimiters. Example\*.* all users in the windows domain example whose usernames contain periods. ** all users. Mac address globs a media ...
Page 7: Command-Line Editing
6 dws-1008 cli reference guide d-link systems, inc. Using the command line interface port lists the physical ethernet ports on a switch can be set for connection to dwl-8220ap access points, authenticated wired users, or the network backbone. You can include a single port or multiple ports in one cl...
Page 8
7 dws-1008 cli reference guide d-link systems, inc. Using the command line interface tabs the cli uses the tab key for command completion. You can type the ﬁrst few characters of a command and press the tab key to display the command(s) that begin with those characters. For example: dws-1008# show i...
Page 9: Using Cli Help
8 dws-1008 cli reference guide d-link systems, inc. Using the command line interface to see a subset of the online help, type the command for which you want more information. For example, to display all the commands that begin with the letter i, type the following command: dws-1008# show i? Igmp sho...
Page 10
9 dws-1008 cli reference guide d-link systems, inc. Using the command line interface to see all the variations, type one of the commands followed by a question mark (?). For example: dws-1008# show ip ? Alias show ip aliases dns show dns status route show ip route table ssh show ip ssh telnet show i...
Page 11: Disable
10 dws-1008 cli reference guide d-link systems, inc. Access commands use access commands to control access to the mobility software system (mss) (cli). This chapter presents access commands alphabetically. Use the following table to locate commands in this chapter based on their use. Disable changes...
Page 12: Quit
11 dws-1008 cli reference guide d-link systems, inc. Access commands quit exit from the cli session. Syntax: quit defaults: none access: all examples: to end the administrator’s session, type the following command: dws-1008> quit set enablepass sets the password that provides enabled access (for con...
Page 13: System Services Commands
12 dws-1008 cli reference guide d-link systems, inc. System services commands system services commands use system services commands to conﬁgure and monitor system information for a dws-1008 switch. This chapter presents system services commands alphabetically. Use the following table to located comm...
Page 14: Clear Prompt (Continued)
13 dws-1008 cli reference guide d-link systems, inc. System services commands clear prompt (continued) examples: to reset the prompt, type the following command: switch1# clear prompt success: change accepted. Dws-1008# clear system clears the system conﬁguration of the speciﬁed information. Syntax:...
Page 15: Help
14 dws-1008 cli reference guide d-link systems, inc. System services commands help displays a list of commands that can be used to conﬁgure and monitor the switch. Syntax: help defaults: none. Access: all. Examples: use this command to see a list of available commands. If you have restricted access,...
Page 16: History
15 dws-1008 cli reference guide d-link systems, inc. System services commands history displays the command history buffer for the current cli session. Syntax: history defaults: none access: all examples to show the history of your session, type the following command: dws-1008# history show history (...
Page 18: Set Prompt
17 dws-1008 cli reference guide d-link systems, inc. System services commands examples: to set the number of lines displayed to 100, type the following command: dws-1008# set length 100 success: screen length for this session set to 100 set prompt changes the cli prompt for the dws-1008 switch to a ...
Page 19: Set System Contact
18 dws-1008 cli reference guide d-link systems, inc. System services commands set system contact stores a contact name for the dws-1008 switch. Syntax: set system contact string string alphanumeric string up to 256 characters long, with no blank spaces. Defaults: none access: enabled to view the sys...
Page 20: Set System Ip-Address
19 dws-1008 cli reference guide d-link systems, inc. System services commands set system countrycode (continued) defaults: the factory default country code is none. Access: enabled. Usage: you must set the system county code to a valid value before using any set ap com- mands to conﬁgure a dwl-8220a...
Page 21: Set System Location
20 dws-1008 cli reference guide d-link systems, inc. System services commands set system location stores location information for the dws-1008 switch. Syntax: set system location string string alphanumeric string up to 256 characters long, with no blank spaces. Defaults: none access: enabled usage: ...
Page 22: Show Banner Motd
21 dws-1008 cli reference guide d-link systems, inc. System services commands show banner motd shows the banner that was conﬁgured with the set banner motd command. Syntax: show banner motd defaults: none access: enabled examples: to display the banner with the message of the day, type the following...
Page 23
22 dws-1008 cli reference guide d-link systems, inc. System services commands the table below describes the ﬁelds of show system output. Field description ------------------------------------------------------------------------------------------------------------------------- product name dws model ...
Page 24: Show Tech-Support
23 dws-1008 cli reference guide d-link systems, inc. System services commands field description ------------------------------------------------------------------------------------------------------------------------- temperature status of temperature sensors at three locations in the switch: • ok -...
Page 25: Clear Dap
24 dws-1008 cli reference guide d-link systems, inc. Port commands use port commands to conﬁgure and manage individual ports and load-sharing port groups. This chapter presents port commands alphabetically. Clear dap caution: when you clear a distributed ap, mss ends user sessions that are using the...
Page 26: Clear Port Name
25 dws-1008 cli reference guide d-link systems, inc. Port commands name name name of the port group. Defaults: none. Access: enabled. Examples: the following command clears port group server1: dws-1008# clear port-group name server1 success: change accepted. Clear port name removes the name assigned...
Page 27: Monitor Port Counters
26 dws-1008 cli reference guide d-link systems, inc. Port commands port parameter setting ------------------------------------------------------------------------------------------------------------------------ vlan membership none. Note: although the command changes a port to a network port, the co...
Page 28
27 dws-1008 cli reference guide d-link systems, inc. Port commands monitor port counters (continued) defaults: all types of statistics are displayed for all ports. Mss refreshes the statistics every 5 seconds. This interval cannot be conﬁgured. Statistics types are displayed in the following order b...
Page 29
28 dws-1008 cli reference guide d-link systems, inc. Port commands port status rx octets tx octets ============================================================= 1 up 27965420 34886544 ... To cycle the display to the next set of statistics, press the spacebar. In this example, packet statistics are d...
Page 30
29 dws-1008 cli reference guide d-link systems, inc. Port commands statistics option field description receive-errors rx crc number of frames received by the port that had the correct length but contained an invalid frame check sequence (fcs) value. This statistic includes frames with misalignment e...
Page 31: Reset Port
30 dws-1008 cli reference guide d-link systems, inc. Port commands statistics option field description transmit-etherstats tx 64 number of packets transmitted that were 64 bytes long. Tx 127 number of packets transmitted that were from 65 through 127 bytes long. Tx 255 number of packets transmitted ...
Page 34: Set Port-Group
33 dws-1008 cli reference guide d-link systems, inc. Port commands set port-group usage: you can conﬁgure up to 16 ports in a port group, in any combination of ports. The port numbers do not need to be contiguous and you can use 10/100 ethernet ports and gigabit ethernet ports in the same port group...
Page 36: Set Port Poe (Continued)
35 dws-1008 cli reference guide d-link systems, inc. Port commands set port poe (continued) defaults: poe is disabled on network and wired authentication ports. The state on access point ports depends on whether you enabled or disabled poe when setting the port type. Access: enabled examples: the fo...
Page 39: Set Port Type Ap (Continued)
38 dws-1008 cli reference guide d-link systems, inc. Port commands set port type ap (continued) the following command sets ports 4 through 6 for the dwl-8220ap and enables poe on the ports: dws-1008# set port type ap 4-6 model dwl-8220ap poe enable this may affect the power applied on the conﬁgured ...
Page 40
39 dws-1008 cli reference guide d-link systems, inc. Port commands set port type wired-auth (continued) defaults: the default tag-list is null (no tag values). The default number of sessions is 1. The default fallthru authentication type is none. Access: enabled usage: you cannot set a port’s type i...
Page 43: Show Port Status
42 dws-1008 cli reference guide d-link systems, inc. Port commands examples: the following command displays poe information for all ports on the dws-1008 switch: dws-1008# show port poe link port poe poe port name status type conﬁg draw ============================================================= 1...
Page 44
43 dws-1008 cli reference guide d-link systems, inc. Port commands examples: the following command displays information for all ports on the dws-1008: dws-1008# show port status port name admin oper conﬁg actual type media ============================================================= 1 1 up up auto ...
Page 45: Clear Fdb
44 dws-1008 cli reference guide d-link systems, inc. Vlan commands use virtual lan (vlan) commands to conﬁgure and manage parameters for individual port vlans on network ports. This chapter presents vlan commands alphabetically. Clear fdb deletes an entry from the forwarding database (fdb). Syntax: ...
Page 46: Clear Fdb (Continued)
45 dws-1008 cli reference guide d-link systems, inc. Vlan commands clear fdb (continued) examples: the following command clears all static forwarding database entries that match vlan blue: dws-1008# clear fdb static vlan blue success: change accepted. The following command clears all dynamic forward...
Page 47: Clear Vlan (Continued)
46 dws-1008 cli reference guide d-link systems, inc. Vlan commands clear vlan (continued) usage: if you do not specify a port-list, the entire vlan is removed from the conﬁguration. Note: you cannot delete the default vlan but you can remove ports from it. To remove ports from the default vlan, use ...
Page 48: Set Fdb (Continued)
47 dws-1008 cli reference guide d-link systems, inc. Vlan commands set fdb (continued) vlan vlan-id name or number of a vlan of which the port is a member. The entry is added only for the speciﬁed vlan. Tag tag-value vlan tag value that identiﬁes a virtual port. You can specify a number from 1 throu...
Page 49: Set Vlan Name
48 dws-1008 cli reference guide d-link systems, inc. Vlan commands set fdb agingtime (continued) examples: the following command changes the aging timeout period to 600 seconds for entries that match vlan orange: dws-1008# set fdb agingtime orange age 600 success: change accepted. Set vlan name crea...
Page 50: Set Vlan Port
49 dws-1008 cli reference guide d-link systems, inc. Vlan commands set vlan port assigns one or more network ports to a vlan. You also can add a virtual port to each network port by adding a tag value to the network port. Syntax: set vlan vlan-id port port-list [tag tag-value] vlan-id vlan name or n...
Page 52
51 dws-1008 cli reference guide d-link systems, inc. Vlan commands examples: the following command displays all entries in the forwarding database: dws-1008# show fdb all * = static entry. + = permanent entry. # = system entry. Vlan tag dest mac/route des [cos] destination ports [protocol type] ----...
Page 53: Show Fdb Agingtime
52 dws-1008 cli reference guide d-link systems, inc. Vlan commands show fdb agingtime displays the aging timeout period for forwarding database entries. Syntax: show fdb agingtime [vlan vlan-id] vlan vlan-id vlan name or number. If you do not specify a vlan, the aging timeout period for each vlan is...
Page 54: Show Vlan Conﬁg
53 dws-1008 cli reference guide d-link systems, inc. Vlan commands show vlan conﬁg displays vlan information. Syntax: show vlan conﬁg [vlan-id] vlan-id vlan name or number. If you do not specify a vlan, information for all vlans is displayed. Defaults: none access: all examples: the following comman...
Page 55: Ip Services Commands
54 dws-1008 cli reference guide d-link systems, inc. Ip services commands ip services commands use ip services commands to conﬁgure and manage ip interfaces, management services, the domain name service (dns), network time protocol (ntp), and aliases, and to ping a host or trace a route. This chapte...
Page 56: Clear Ip Dns Domain
55 dws-1008 cli reference guide d-link systems, inc. Ip services commands clear ip dns domain removes the default dns domain name. Syntax: clear ip dns domain defaults: none access: enabled examples: the following command removes the default dns domain name from a dws-1008 switch: dws-1008# clear ip...
Page 57: Clear Ip Route (Continued)
56 dws-1008 cli reference guide d-link systems, inc. Ip services commands clear ip route (continued) ip-addr/mask-length ip address and subnet mask length in cidr format (for example, 10.10.10.10/24). Gateway ip address, dns hostname, or alias of the next-hop router. Defaults: none access: enabled e...
Page 58: Clear Ntp Update-Interval
57 dws-1008 cli reference guide d-link systems, inc. Ip services commands examples the following command removes ntp server 192.168.40.240 from a switch conﬁguration: dws-1008# clear ntp server 192.168.40.240 success: change accepted. Clear ntp update-interval resets the ntp update interval to the d...
Page 59: Clear Snmp Notify Target
58 dws-1008 cli reference guide d-link systems, inc. Ip services commands clear snmp notify target clears an snmp notiﬁcation target. Syntax: clear snmp notify target target-num target-num id of the target. Defaults: none access: enabled examples: the following command clears notiﬁcation target 3: d...
Page 60: Clear Summertime
59 dws-1008 cli reference guide d-link systems, inc. Ip services commands clear summertime clears the summertime setting from a dws-1008 switch. Syntax: clear summertime defaults: none access: enabled. Examples: to clear the summertime setting from a dws-1008 switch, type the following command: ds-1...
Page 61: Clear Timezone (Continued)
60 dws-1008 cli reference guide d-link systems, inc. Ip services commands clear timezone (continued) defaults: none access: enabled examples: to return the switch’s real-time clock to utc, type the following command: dws-1008# clear timezone success: change accepted. Ping tests ip connectivity betwe...
Page 62: Ping (Continued)
61 dws-1008 cli reference guide d-link systems, inc. Ip services commands ping (continued) vlan-name vlan name to use as the ping source. Mss uses the ip address conﬁgured on the vlan as the source ip address in the ping packets. Defaults: • count - 5. • dnf - disabled. • interval - 100 (one tenth o...
Page 63: Set Arp (Continued)
62 dws-1008 cli reference guide d-link systems, inc. Ip services commands set arp (continued) ip-addr ip address of the entry, in dotted decimal notation. Mac-addr mac address to map to the ip address. Use colons to separate the octets (for example, 00:11:22:aa:bb:cc). Defaults: none access: enabled...
Page 66: Set Interface Status
65 dws-1008 cli reference guide d-link systems, inc. Ip services commands set interface dhcp-server (continued) defaults: the dhcp server is enabled by default. Access: enabled. Usage: by default, all addresses except the host address of the vlan, the network broadcast address, and the subnet broadc...
Page 67: Set Ip Alias
66 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip alias conﬁgures an alias, which maps a name to an ip address. You can use aliases as shortcuts in cli commands. Syntax: set ip alias name ip-addr name string of up to 32 alphanumeric characters, with no spaces. Ip-addr ...
Page 68: Set Ip Dns Server
67 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip dns domain (continued) syntax: set ip dns domain name name domain name of between 1 and 64 alphanumeric characters with no spaces (for example, example.Org). Defaults: none access: enabled usage: to override the default...
Page 69
68 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip dns server (continued) examples: the following commands conﬁgure a dws-1008 switch to use a primary dns server and two secondary dns servers: dws-1008# set ip dns server 10.10.10.50/24 primary success: change accepted. ...
Page 71: Set Ip Route (Continued)
70 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip route (continued) examples: the following command adds a default route that uses gateway 10.5.4.1 and gives the route a cost of 1: dws-1008# set ip route default 10.5.4.1 1 success: change accepted. The following comman...
Page 72: Set Ip Ssh
71 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip ssh changes the tcp port number on which a dws-1008 switch listens for secure shell (ssh) management trafﬁc. Caution: if you change the ssh port number from an ssh session, mss immediately ends the session. To open a ne...
Page 74: Set Ip Telnet
73 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ip telnet changes the tcp port number on which a dws-1008 switch listens for telnet management trafﬁc. Caution: if you change the telnet port number from a telnet session, mss immediately ends the session. To open a new ma...
Page 76: Set Ntp Update-Interval
75 dws-1008 cli reference guide d-link systems, inc. Ip services commands set ntp update-interval changes how often mss sends queries to the ntp servers for updates. Syntax: set ntp update-interval seconds seconds number of seconds between queries. You can specify from 16 through 1024 seconds. Defau...
Page 77: Set Snmp Notify Target
76 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp community (continued) defaults: none access: enabled usage: snmp community strings are passed as clear text in snmpv1 and snmpv2c. D-link recommends that you use strings that cannot easily be guessed by unauthorized u...
Page 78
77 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp notify target (continued) target-num id for the target. This id is local to the dws-1008 switch and does not need to correspond to a value on the target itself. You can specify a number from 1 to 10. Ip-addr ip addres...
Page 79
78 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp notify target (continued) snmpv3 with traps to conﬁgure a notiﬁcation target for traps from snmpv3, use the following command: syntax: set snmp notify target target-num ip-addr[:udp-port-number] usm trap user username...
Page 80
79 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp notify target (continued) snmpv2c with informs target-num id for the target. This id is local to the dws-1008 switch and does not need to correspond to a value on the target itself. You can specify a number from 1 to ...
Page 81
80 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp notify target (continued) snmpv1 with traps to conﬁgure a notiﬁcation target for traps from snmpv1, use the following command: syntax: set snmp notify target target-num ip-addr[:udp-port-number] v1 community-string [p...
Page 82: Set Snmp Proﬁle
81 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp proﬁle conﬁgures an snmp notiﬁcation proﬁle. A notiﬁcation proﬁle is a named list of all the notiﬁcation types that can be generated by a switch, and for each notiﬁcation type, the action to take (drop or send) when a...
Page 83
82 dws-1008 cli reference guide d-link systems, inc. Ip services commands • clientdot1xfailuretraps - generated when a client experiences an 802.1x failure. • clientroamingtraps - generated when a client roams. • countermeasurestarttraps - generated when mss begins countermeasures against a rogue ac...
Page 84
83 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp proﬁle (continued) • mpboottraps - generated when an access point boots. • mptimeouttraps - generated when an access point fails to respond to the dws-1008 switch. • poefailtraps - generated when a serious poe problem...
Page 85
84 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp proﬁle (continued) • rfdetectdostraps - generated when mss detects a dos attack other than an associate request ﬂood, reassociate request ﬂood, or disassociate request ﬂood. • rfdetectinterferingrogueaptraps - generat...
Page 86
85 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp proﬁle (continued) the following commands create notiﬁcation proﬁle snmpprof_rfdetect, and change the action to send for all rf detection notiﬁcation types: dws-1008# set snmp notify proﬁle snmpprof_rfdetect send rfde...
Page 88: Set Snmp Usm
87 dws-1008 cli reference guide d-link systems, inc. Ip services commands set snmp security (continued) unsecured snmp message exchanges are not secure. This is the only value supported for snmpv1 and snmpv2c. Authenticated snmp message exchanges are authenticated but are not encrypted. Encrypted sn...
Page 92: Set Summertime
91 dws-1008 cli reference guide d-link systems, inc. Ip services commands set summertime offsets the real-time clock of a switch by +1 hour and returns it to standard time for daylight savings time or a similar summertime period that you set. Syntax: set summertime summer-name [start week weekday mo...
Page 93: Set System Ip-Address
92 dws-1008 cli reference guide d-link systems, inc. Ip services commands set system ip-address conﬁgures the system ip address. The system ip address determines the interface or source ip address mss uses for system tasks, including the following: • topology reporting for dual-homed dwl-8220ap acce...
Page 94: Set Timezone
93 dws-1008 cli reference guide d-link systems, inc. Ip services commands usage: the day of week is automatically calculated from the day you set. The time displayed by the cli after you type the command might be slightly later than the time you enter due to the interval between when you press enter...
Page 95: Show Arp
94 dws-1008 cli reference guide d-link systems, inc. Ip services commands show arp displays the arp table. Syntax: show arp [ip-addr] ip-addr ip address. Defaults: if you do not specify an ip address, the whole arp table is displayed. Access: all examples: the following command displays arp entries:...
Page 96: Show Dhcp-Client
95 dws-1008 cli reference guide d-link systems, inc. Ip services commands show dhcp-client displays dhcp client information for all vlans. Syntax: show dhcp-client defaults: none access: all examples: the following command displays dhcp client information: dws-1008# show dhcp-client interface: corpv...
Page 97: Show Dhcp-Client (Continued)
96 dws-1008 cli reference guide d-link systems, inc. Ip services commands show dhcp-client (continued) field description subnet mask network mask of the ip address received from the dhcpserver. Default gateway default gateway ip address received from the dhcp server. If the address is 0.0.0.0, the s...
Page 98: Show Dhcp-Server (Continued)
97 dws-1008 cli reference guide d-link systems, inc. Ip services commands show dhcp-server (continued) the following command displays conﬁguration and status information for each vlan on which the dhcp server is conﬁgured: dws-1008# show dhcp-server interface: 0 (direct ap) status: up address range:...
Page 99
98 dws-1008 cli reference guide d-link systems, inc. Ip services commands output for show dhcp-client verbose field description interface vlan name and number. Status status of the interface: • up • down address range range from which the server can lease addresses. Hardware address mac address of t...
Page 100: Show Interface
99 dws-1008 cli reference guide d-link systems, inc. Ip services commands show interface displays the ip interfaces conﬁgured on the dws-1008 switch. Syntax: show interface [vlan-id] vlan-id vlan name or number. Defaults: if you do not specify a vlan id, interfaces for all vlans are displayed. Acces...
Page 101: Show Ip Alias
100 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ip alias displays the ip aliases conﬁgured on the dws-1008 switch. Syntax: show ip alias [name] name alias string. Defaults: if you do not specify an alias name, all aliases are displayed. Access: enabled examples: the f...
Page 102: Show Ip Dns (Continued)
101 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ip dns (continued) the table below describes the ﬁelds in this display. Field description domain name default domain name conﬁgured on the dws-1008 switch dns status status of the switch’s dns client: • enabled • disable...
Page 103: Show Ip Route (Continued)
102 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ip route (continued) usage: when you add an ip interface to a vlan that is up, mss adds direct and local routes for the interface to the route table. If the vlan is down, mss does not add the routes. If you add an interf...
Page 104: Show Ip Route (Continued)
103 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ip route (continued) nh-type next-hop type: • local - route is for a local interface. Mss adds the route when you conﬁgure an ip address on the switch. • direct - route is for a locally attached subnet. Mss adds the rout...
Page 105: Show Ip Telnet (Continued)
104 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ip telnet (continued) the table below describes the ﬁelds in this display. Field description server status state of the https server: • enabled • disabled port tcp port number on which the switch listens for telnet manag...
Page 106: Show Ntp (Continued)
105 dws-1008 cli reference guide d-link systems, inc. Ip services commands show ntp (continued) field description ntp client state of the ntp client. The state can be one of the following: • enabled • disabled current update-interval number of seconds between queries sent by the switch to the ntp se...
Page 107: Show Snmp Community
106 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp community displays the conﬁgured snmp community strings. Syntax: show snmp community defaults: none access: enabled examples: to display the conﬁgured snmp community strings, use the following command: dws-1008# sho...
Page 108: Show Snmp Counters
107 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp counters displays snmp statistics counters. Syntax: show snmp counters defaults: none access: enabled examples: to display snmp statistics counters, use the following command: dws-1008# show snmp counters base snmp ...
Page 109: Show Snmp Notify Proﬁle
108 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp notify proﬁle displays snmp notiﬁcation proﬁles. Syntax: show snmp notify proﬁle defaults: none access: enabled examples: to display notiﬁcation proﬁles, use the following command: dws-1008# show snmp notify proﬁle ...
Page 110: Show Snmp Notify Target
109 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp notify target displays snmp notiﬁcation targets. Syntax: show snmp notify target defaults: none access: enabled examples: to display a list of the snmp notiﬁcation targets, use the following command: dws-1008# show ...
Page 111: Show Snmp Status
110 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp status displays snmp version and status information. Syntax: show snmp status defaults: none access: enabled examples: to display snmp version and status information, use the following command: dws-1008# show snmp s...
Page 112: Show Snmp Status (Continued)
111 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp status (continued) field description snmp minimum security lowest (least secure) security level set on the switch: • authenticated - snmp message exchanges are authenticated but are not encrypted. • auth-req-unsec-n...
Page 113: Show Snmp Usm
112 dws-1008 cli reference guide d-link systems, inc. Ip services commands show snmp usm displays information about snmpv3 users. Defaults: none access: enabled examples: to display usm settings, use the following command: dws-1008# show snmp usm usm users: “nmsuser”, engineid=localsnmpid access=rea...
Page 114: Show Summertime
113 dws-1008 cli reference guide d-link systems, inc. Ip services commands show summertime shows a dws-1008 switch’s offset from its real-time clock. Syntax: show summertime defaults: there is no summertime offset by default. Access: all examples: to display the summertime setting on a switch, type ...
Page 115: Show Timezone
114 dws-1008 cli reference guide d-link systems, inc. Ip services commands show timezone shows the time offset for the real-time clock from utc on a dws-1008 switch. Syntax: show timezone defaults: none access: all examples: to display the offset from utc, type the following command: dws-1008# show ...
Page 116: Telnet (Continued)
115 dws-1008 cli reference guide d-link systems, inc. Ip services commands telnet (continued) dws-1008# telnet 10.10.10.90 session 0 pty tty2.D trying 10.10.10.90... Connected to 10.10.10.90 disconnect character is ‘^t’ copyright (c) 2002, 2003 d-link systems, inc. Username: username password: passw...
Page 117: Traceroute
116 dws-1008 cli reference guide d-link systems, inc. Ip services commands traceroute traces the route to an ip host. Syntax: traceroute host[dnf] [no-dns] [port port-num] [queries num] [size size] [ttl hops] [wait ms] host ip address, hostname, or alias of the destination host. Specify the ip addre...
Page 118: Traceroute (Continued)
117 dws-1008 cli reference guide d-link systems, inc. Ip services commands traceroute (continued) the ﬁrst row of the display indicates the target host, the maximum number of hops, and the packet size. Each numbered row displays information about one hop. The rows are displayed in the order in which...
Page 119: Notes
118 dws-1008 cli reference guide d-link systems, inc. Ip services commands notes.
Page 120: Aaa Commands
119 dws-1008 cli reference guide d-link systems, inc. Aaa commands aaa commands use authentication, authorization, and accounting (aaa) commands to provide a secure network connection and a record of user activity. Location policy commands override any virtual lan (vlan) or security acl assignment b...
Page 121: Clear Authentication Admin
120 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear authentication admin removes an authentication rule for administrative access through telnet. Syntax: clear authentication admin user-glob user-glob single user or set of users with administrative access or network access. Spec...
Page 124: Clear Location Policy
123 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear location policy removes a rule from the location policy on a dws-1008 switch. Syntax: clear location policy rule-number rule-number index number of a location policy rule to remove from the location policy. Defaults: none acces...
Page 125: Clear Mac-User
124 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear mac-user removes a user proﬁle from the local database on the switch, for a user who is authenticated by a mac address. (to remove a user proﬁle in radius, see the documentation for your radius server). Syntax: clear mac-user m...
Page 126: Clear Mac-User Group
125 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear mac-user group removes a user proﬁle from a mac user group in the local database on the switch, for a user who is authenticated by a mac address. (to remove a mac user group proﬁle in radius, see the documentation for your radi...
Page 127: Clear Mac-Usergroup Attr
126 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear mac-usergroup attr removes an authorization attribute from a mac user group in the local database on the switch, for a group of users who are authenticated by a mac address. (to unconﬁgure an authorization attribute in radius, ...
Page 128: Clear User
127 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear user removes a user proﬁle from the local database on the switch, for a user with a password. (to remove a user proﬁle in radius, see the documentation for your radius server). Syntax: clear user username username username of a...
Page 129: Clear User Group
128 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear user group removes a user with a password from membership in a user group in the local database on the dws-1008 switch. (to remove a user from a user group in radius, see the documentation for your radius server). Syntax: clear...
Page 130: Clear Usergroup Attr
129 dws-1008 cli reference guide d-link systems, inc. Aaa commands clear usergroup attr removes an authorization attribute from a user group in the local database on the switch. (to remove an authorization attribute in radius, see the documentation for your radius server). Syntax: clear usergroup gr...
Page 133: Set Authentication Admin
132 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication admin conﬁgures authentication and deﬁnes where it is performed for speciﬁed users with administrative access through telnet. Syntax: set authentication admin user-glob method1 [method2] [method3] [method4] user-gl...
Page 134: Set Authentication Console
133 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication admin (continued) note: the syntax descriptions for the set authentication commands have been separated for clarity. However, the options and behavior for the set authentication admin command are the same as in pre...
Page 135
134 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication console (continued) method1 at least one of up to four methods that mss uses to process accounting method2 records. Specify one or more of the following methods in priority order. If method3 the ﬁrst method does no...
Page 136: Set Authentication Dot1X
135 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication dot1x conﬁgures authentication and deﬁnes how and where it is performed for speciﬁed wireless or wired authentication clients who use an ieee 802.1x authentication protocol to access the network through the switch....
Page 137
136 dws-1008 cli reference guide d-link systems, inc. Aaa commands • eap-tls - eap with transport layer security (tls): • provides mutual authentication, integrity-protected negotiation, and key exchange • requires x.509 public key certiﬁcates on both sides of the connection • provides encryption an...
Page 138
137 dws-1008 cli reference guide d-link systems, inc. Aaa commands if the user does not support 802.1x, mss attempts to perform mac authentication for the user. In this case, if the switch’s conﬁguration contains a set authentication mac command that matches the ssid the user is attempting to access...
Page 139
138 dws-1008 cli reference guide d-link systems, inc. Aaa commands method1 at least one of up to four methods that mss uses to handle method2 authentication. Specify one or more of the following methods in priority method3 order. Mss applies multiple methods in the order you enter them. Method4 a me...
Page 140: Set Authentication Mac
139 dws-1008 cli reference guide d-link systems, inc. Aaa commands if the ssid speciﬁed in the last-resort authentication rule is any, mss searches for user last-resort-any. The any in the username is not a wildcard. The username must be last-resort-any, exactly as spelled here. Examples: the follow...
Page 141: Set Authentication Proxy
140 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication mac (continued) usage: you can conﬁgure different authentication methods for different groups of mac addresses by “globbing.” if you specify multiple authentication methods in the set authentication mac command, ms...
Page 142
141 dws-1008 cli reference guide d-link systems, inc. Aaa commands set authentication proxy (continued) defaults: none acces: enabled usage: aaa for third-party ap users has additional conﬁguration requirements. Examples: the following command conﬁgures a proxy authentication rule that matches on al...
Page 143: Set Location Policy
142 dws-1008 cli reference guide d-link systems, inc. Aaa commands set location policy creates and enables a location policy on a dws-1008 switch. A location policy enables you to locally set or change authorization attributes for a user after the user is authorized by aaa, without making changes to...
Page 144
143 dws-1008 cli reference guide d-link systems, inc. Aaa commands set location policy (continued) vlan operator vlan-name attribute assigned by aaa and condition by which to vlan-glob determine if the location policy rule applies. Replace operator with one of the following operands: eq - applies th...
Page 145
144 dws-1008 cli reference guide d-link systems, inc. Aaa commands set location policy (continued) usage: only a single location policy is allowed per dws-1008 switch. Once conﬁgured, the location policy becomes effective immediately. To disable location policy operation, use the clear location poli...
Page 146: Set Mac-User
145 dws-1008 cli reference guide d-link systems, inc. Aaa commands set location policy (continued) the following command authorizes users entering the network on ports 2 through 4 and port 6 to use the ﬂoor2 vlan, overriding any settings from aaa: dws-1008# set location policy permit vlan ﬂoor2 if p...
Page 147
146 dws-1008 cli reference guide d-link systems, inc. Aaa commands set mac-user attr (continued) syntax: set mac-user mac-addr attr attribute-name value mac-addr mac address of the user, in hexadecimal numbers separated by colons (:). You can omit leading zeros. Attribute-name value name and value o...
Page 148
147 dws-1008 cli reference guide d-link systems, inc. Aaa commands • use acl-name.In to ﬁlter trafﬁc that enters the switch from users via an access port or wired authentication port, or from the network via a network port. • use acl-name.Out to ﬁlter trafﬁc sent from the switch to users via an acce...
Page 149
148 dws-1008 cli reference guide d-link systems, inc. Aaa commands service-type (continued) • 6 - administrative; for administrative access to the switch, with authorization to access the enabled (conﬁguration) mode. The user must enter the enable command and the correct enable password to access th...
Page 150
149 dws-1008 cli reference guide d-link systems, inc. Aaa commands set mac-user attr (continued) start-date date and time at which date and time, in the following the user becomes eligible format: yy/mm/dd-hh:mm to access the network. You can use start-date alone or with mss does not end-date. You a...
Page 151: Set Mac-Usergroup Attr
150 dws-1008 cli reference guide d-link systems, inc. Aaa commands set mac-user attr (continued) vlan-name virtual lan (vlan) name of a vlan that you (network access assignment. Want the user to use. Mode only) note: on some radius servers, you might need to use the standard radius attribute tunnel-...
Page 152: Set Mobility-Proﬁle
151 dws-1008 cli reference guide d-link systems, inc. Aaa commands set mac-usergroup attr (continued) syntax : set mac-usergroup group-name attr attribute-name value group-name name of a mac user group. Specify a name of up to 32 alphanumeric characters, with no spaces. Attribute-namevalue name and ...
Page 153: Set Mobility-Proﬁle Mode
152 dws-1008 cli reference guide d-link systems, inc. Aaa commands defaults: no default mobility proﬁle exists on the dws-1008 switch. If you do not assign mobility proﬁle attributes, all users have access through all ports, unless denied access by other aaa servers or by access control lists (acls)...
Page 154: Set User
153 dws-1008 cli reference guide d-link systems, inc. Aaa commands enable enables the use of the mobility proﬁle feature on the switch. Disable speciﬁes that all mobility proﬁle attributes are ignored by the switch. Defaults: the mobility proﬁle feature is disabled by default. Access: enabled exampl...
Page 155: Set User Attr
154 dws-1008 cli reference guide d-link systems, inc. Aaa commands set user attr conﬁgures an authorization attribute in the local database on the switch for a user with a password. (to assign authorization attributes in radius, see the documentation for your radius server.) syntax: set user usernam...
Page 156: Set User Group (Continued)
155 dws-1008 cli reference guide d-link systems, inc. Aaa commands set user group (continued) defaults none access: enabled usage: mss does not require users to belong to user groups. To create a user group, user the command set usergroup. Examples: the following command adds user hosni to the cardi...
Page 157: Show Aaa
156 dws-1008 cli reference guide d-link systems, inc. Aaa commands show aaa displays all current aaa settings. Syntax: show aaa defaults none access: enabled show aaa examples: to display all current aaa settings, type the following command: dws-1008# show aaa default values authport=1812 acctport=1...
Page 158
157 dws-1008 cli reference guide d-link systems, inc. Aaa commands user last-resort-any vlan-name = foo mac-user 01:02:03:04:05:06 usergroup eastcoasters session-timeout = 99 the table below describes the ﬁelds that can appear in show aaa output. Field description default values radius default value...
Page 159: Show Aaa (Continued)
158 dws-1008 cli reference guide d-link systems, inc. Aaa commands show aaa (continued) field description ports udp ports that the switch uses for authentication messages and for accounting records. T/o setting of timeouts on each radius server currently active. Tries number of retransmissions conﬁg...
Page 160
159 dws-1008 cli reference guide d-link systems, inc. Aaa commands the table below describes the ﬁelds that can appear in show accounting statistics output. Acct-authentic location where the user was authenticated (if authentication took place) for the session: • 1 - radius server • 2 - local databa...
Page 161: Show Location Policy
160 dws-1008 cli reference guide d-link systems, inc. Aaa commands show location policy displays the list of location policy rules that make up the location policy on a switch. Syntax: show location policy defaults: none access: enabled examples: the following command displays the list of location p...
Page 162: Notes
161 dws-1008 cli reference guide d-link systems, inc. Aaa commands notes.
Page 163: Notes
162 dws-1008 cli reference guide d-link systems, inc. Aaa commands notes.
Page 164: Access Point Commands
163 dws-1008 cli reference guide d-link systems, inc. Access point commands use dwl-8220ap access point commands to conﬁgure and manage dwl-8220ap access points. Be sure to do the following before using the commands: • deﬁne the country-speciﬁc ieee 802.11 regulations on the dws-1008 switch. • insta...
Page 165: Clear Radio-Proﬁle
164 dws-1008 cli reference guide d-link systems, inc. Access point commands examples: the following command disables and resets radio 2 on the dwl-8220ap access point connected to port 3: dws-1008# clear ap 3 radio 2 clear radio-proﬁle removes a radio proﬁle or resets one of the proﬁle’s parameters ...
Page 166: Clear Service-Proﬁle
165 dws-1008 cli reference guide d-link systems, inc. Access point commands the following commands disable the radios that are using radio proﬁle rptest and remove the proﬁle: dws-1008# set radio-proﬁle rptest mode disable dws-1008# clear radio-proﬁle rptest success: change accepted. Clear service-p...
Page 167: Set Dap Auto
166 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: when you enter this command, the dwl-8220ap access point drops all sessions and reboots. Caution: restarting a dwl-8220ap access point can cause data loss for users who are currently associated with the dwl-8220ap. Ex...
Page 168: Set Dap Auto Mode
167 dws-1008 cli reference guide d-link systems, inc. Access point commands mode enabled tx-pwr highest setting allowed for the country of operation radio-proﬁle (proﬁle) default max-power default min-client-rate 5.5 for 802.11b/g 24 for 802.11a max-retransmissions 10 examples: the following command...
Page 170
169 dws-1008 cli reference guide d-link systems, inc. Access point commands for example, if an dwl-8220ap is dual homed to two dws-1008 switches, and one of the switches has 50 active dwl-8220aps while the other switch has 60 active dwl-8220aps, the new dwl-8220ap selects the switch that has only 50...
Page 171: Set Dap ﬁngerprint
170 dws-1008 cli reference guide d-link systems, inc. Access point commands set dap ﬁngerprint conﬁrms an dwl-8220ap’s ﬁngerprint on a switch. If dwl-8220ap security is required by a switch, an dwl-8220ap can establish a management session with the switch only if you have conﬁrmed the dwl-8220ap’s i...
Page 172
171 dws-1008 cli reference guide d-link systems, inc. Access point commands dapauto conﬁgures a dwl-8220ap group for the dwl-8220ap conﬁguration template. Name dwl-8220ap access point group name of up to 16 alphanumeric characters, with no spaces. Defaults: dwl-8220ap access points are not grouped b...
Page 174
173 dws-1008 cli reference guide d-link systems, inc. Access point commands ap port-list list of ports connected to the dwl-8220ap access points on which to set the maximum power. Dap dap-num number of a distributed ap on which to set the maximum power. Dapauto sets the maximum power for radios conﬁ...
Page 175
174 dws-1008 cli reference guide d-link systems, inc. Access point commands radio 1 radio 1 of the dwl-8220ap. Radio 2 radio 2 of the dwl-8220ap. Retransmissions percentage of packets that can result in retransmissions without resulting in a channel change. You can specify from 1 to 100. Defaults: t...
Page 177
176 dws-1008 cli reference guide d-link systems, inc. Access point commands ap port-list list of ports connected to the dwl-8220ap access points on which to set the minimum data rate. Dap dap-num number of a distributed ap on which to set the minimum data rate. Dapauto sets the radio mode for dwl-82...
Page 178
177 dws-1008 cli reference guide d-link systems, inc. Access point commands dapauto sets the radio mode for dwl-8220aps managed by the dwl-8220ap conﬁguration template. Radio 1 radio 1 of the dwl-8220ap. Radio 2 radio 2 of the dwl-8220ap. Mode enable enables a radio. Mode disable disables a radio. D...
Page 179
178 dws-1008 cli reference guide d-link systems, inc. Access point commands mode enable enables radios on the speciﬁed ports with the parameter settings in the speciﬁed radio proﬁle. Mode disable disables radios on the speciﬁed ports. Defaults: none access : enabled usage: when you create a new proﬁ...
Page 180: Set Dap Security
179 dws-1008 cli reference guide d-link systems, inc. Access point commands access: enabled usage: you also can conﬁgure a radio’s channel on the same command line. Use the channel option. This command is not valid if dynamic power tuning (rf auto-tuning) is enabled. Examples: the following command ...
Page 181: Set Radio-Proﬁle 11G-Only
180 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: this parameter applies to all distributed aps managed by the switch. If you change the setting to required, the switch requires distributed aps to have encryption keys. The switch also requires their ﬁngerprints to be...
Page 182
181 dws-1008 cli reference guide d-link systems, inc. Access point commands enable conﬁgures radios to allow associations with 802.11g clients only. Disable conﬁgures radios to allow associations with 802.11g clients and 802.11b clients. Defaults: the default setting is disable. Access: enabled usag...
Page 183
182 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: you can enter this command on any dws-1008 switch. The command takes effect only on that switch. Examples: the following command disables active scan in radio proﬁle radprof3: dws-1008# set radio-proﬁle radprof3 activ...
Page 184
183 dws-1008 cli reference guide d-link systems, inc. Access point commands rate minimum number of seconds a radio must remain on its current channel setting before rf auto-tuning is allowed to change the channel. You can specify from 0 to 65535 seconds. Defaults: the default rf auto-tuning channel ...
Page 185
184 dws-1008 cli reference guide d-link systems, inc. Access point commands set radio-proﬁle auto-tune power-backoff-timer sets the interval at which radios in a radio proﬁle reduce power after temporarily increasing the power to maintain the minimum data rate for an associated client. At the end of...
Page 186
185 dws-1008 cli reference guide d-link systems, inc. Access point commands when rf auto-tuning for power is enabled, mss does not allow you to manually change the power level. Examples: the following command enables dynamic power tuning for radios in the rp2 radio proﬁle: dws-1008# set radio-proﬁle...
Page 187
186 dws-1008 cli reference guide d-link systems, inc. Access point commands defaults: the beacon interval for dwl-8220ap radios is 100 ms by default. Access: enabled usage: you must disable all radios that are using a radio proﬁle before you can change parameters in the proﬁle. Use the set radio-pro...
Page 188
187 dws-1008 cli reference guide d-link systems, inc. Access point commands set radio-proﬁle dtim-interval changes the number of times after every beacon that each dwl-8220ap radio in a radio proﬁle sends a delivery trafﬁc indication map (dtim). An dwl-8220ap access point sends the multicast and bro...
Page 189
188 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: you must disable all radios that are using a radio proﬁle before you can change parameters in the proﬁle. Use the set radio-proﬁle mode command. Examples: the following command changes the fragmentation threshold for ...
Page 190: Set Radio-Proﬁle Mode
189 dws-1008 cli reference guide d-link systems, inc. Access point commands access: enabled usage: you must disable all radios that are using a radio proﬁle before you can change parameters in the proﬁle. Use the set radio-proﬁle mode command. Examples: the following command changes the maximum rece...
Page 191
190 dws-1008 cli reference guide d-link systems, inc. Access point commands mode enable enables the radios that use this proﬁle. Mode disable disables the radios that use this proﬁle. Defaults: each radio proﬁle that you create has a set of properties with factory default values that you can change ...
Page 192
191 dws-1008 cli reference guide d-link systems, inc. Access point commands name radio proﬁle name. Long advertises support for long preambles. Short advertises support for short preambles. Defaults: the default is short. Access: enabled usage: changing the preamble length value affects only the sup...
Page 193
192 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: you must disable all radios that are using a radio proﬁle before you can change parameters in the proﬁle. Use the set radio-proﬁle mode command. Examples: the following command changes the rts threshold for radio proﬁ...
Page 194: Set Radio-Proﬁle Wmm
193 dws-1008 cli reference guide d-link systems, inc. Access point commands defaults: the default short unicast retry threshold for dwl-8220ap radios is 5 attempts. Access: enabled usage: you must disable all radios that are using a radio proﬁle before you can change parameters in the proﬁle. Use th...
Page 196
195 dws-1008 cli reference guide d-link systems, inc. Access point commands none denies authentication and prohibits the user from accessing the ssid. Note: the fallthru authentication type none is different from the uthentication method none you can specify for administrative access. The fallthru a...
Page 197: Set Service-Proﬁle Beacon
196 dws-1008 cli reference guide d-link systems, inc. Access point commands set service-proﬁle beacon disables or reenables beaconing of the ssid managed by the service proﬁle. A dwl- 8220ap radio responds to an 802.11 probe any request with only the beaconed ssid(s). For a nonbeaconed ssid, radios ...
Page 199
198 dws-1008 cli reference guide d-link systems, inc. Access point commands examples: the following command conﬁgures service proﬁle sp2 to use 104-bit wep encryption: dws-1008# set service-proﬁle sp2 cipher-wep104 enable success: change accepted. Set service-proﬁle cipher-wep40 enables dynamic wire...
Page 200: Set Service-Proﬁle Psk-Raw
199 dws-1008 cli reference guide d-link systems, inc. Access point commands set service-proﬁle psk-phrase conﬁgures a passphrase for preshared key (psk) authentication to use for authenticating wpa clients, in a service proﬁle. Radios use the psk as a pairwise master key (pmk) to derive unique pairw...
Page 201: Set Service-Proﬁle Rsn-Ie
200 dws-1008 cli reference guide d-link systems, inc. Access point commands conﬁguration. The binary number is never displayed in the conﬁguration. To use psk authentication, you must enable it and you also must enable the wpa ie. Examples: the following command conﬁgures service proﬁle sp3 to use a...
Page 202
201 dws-1008 cli reference guide d-link systems, inc. Access point commands set service-proﬁle ssid-name conﬁgures the ssid name in a service proﬁle. Syntax: set service-proﬁle name ssid-name ssid-name name service proﬁle name. Ssid-name name of up to 32 alphanumeric characters, with no spaces with ...
Page 203
202 dws-1008 cli reference guide d-link systems, inc. Access point commands set service-proﬁle tkip-mc-time changes the length of time that dwl-8220ap radios use countermeasures if two message integrity code (mic) failures occur within 60 seconds. When countermeasures are in effect, dwl-8220ap radio...
Page 204
203 dws-1008 cli reference guide d-link systems, inc. Access point commands examples: the following command conﬁgures service proﬁle sp2 to use wep key 2 for encrypting multicast trafﬁc: dws-1008# set service-proﬁle sp2 wep active-multicast-index 2 success: change accepted. Set service-proﬁle wep ac...
Page 205: Set Service-Proﬁle Wpa-Ie
204 dws-1008 cli reference guide d-link systems, inc. Access point commands defaults: by default, no static wep keys are deﬁned. Access: enabled usage: mss automatically enables static wep when you deﬁne a wep key. Mss continues to support dynamic wep. If you plan to use static wep, do not map more ...
Page 206
205 dws-1008 cli reference guide d-link systems, inc. Access point commands port-list list of ports connected to the dwl-8220ap access point(s) for which to display conﬁguration settings. Dap-num number of a distributed ap for which to display conﬁguration settings. Radio 1 shows conﬁguration inform...
Page 207
206 dws-1008 cli reference guide d-link systems, inc. Access point commands dap connection id for the distributed ap. Note: this ﬁeld is applicable only if the dwl-8220ap is conﬁgured on the switch as a distributed ap. Serial-id serial id of the dwl-8220ap access point. Note: this ﬁeld is displayed ...
Page 208
207 dws-1008 cli reference guide d-link systems, inc. Access point commands auto-tune min-client-rate minimum data rate the radio must maintain for associated clients. When rf auto-tuning is enabled, the radio can temporarily increase its power to maintain the data rate with an associated client. Au...
Page 209
208 dws-1008 cli reference guide d-link systems, inc. Access point commands dws-1008# show ap counters 7 port: 7 radio: 1 ========================================================= lastpktxferrate 2 pkttxcount 91594255 numcntinpwrsave 4294966683 multipktdrop 0 lastpktrxsigstrength -54 multibytdrop 0 ...
Page 210
209 dws-1008 cli reference guide d-link systems, inc. Access point commands ccmp pkt decrypt err number of times a decryption error occurred with a packet encrypted with ccmp. Ccmp pkt transfer ct total number of ccmp packets sent and received by the radio. Pkttxcount number of packets transmitted b...
Page 212
211 dws-1008 cli reference guide d-link systems, inc. Access point commands field description cos cos value associated with the forwarding queues. Queue forwarding queue. Dap or port distributed dwl-8200ap number or dwl-8200ap port number. Radio radio number. Tx number of packets transmitted to the ...
Page 213
212 dws-1008 cli reference guide d-link systems, inc. Access point commands rxmulticast: 21798 txsinglecoll: 32 rxbroadcast: 11 txlatecoll: 0 rxgoodframes: 86188 txmaxcoll: 0 rxalignerrs: 0 txmulticoll: 12 rxshortframes: 0 txunderruns: 0 rxcrcerrors: 0 txcarrierloss: 0 rxoverruns: 0 txdeferred: 111 ...
Page 214
213 dws-1008 cli reference guide d-link systems, inc. Access point commands txunderruns number of frames that were not transmitted or retransmitted due to temporary lack of hardware resources. -----------------------------------------------------------------------------------------------------------...
Page 216
215 dws-1008 cli reference guide d-link systems, inc. Access point commands the following command displays the status of a directly connected dwl-8220ap access point: dws-1008# show ap status 1 port: 1, ap model: dwl-8220ap, manufacturer d-link name: ap01 ============================================...
Page 217
216 dws-1008 cli reference guide d-link systems, inc. Access point commands field description ----------------------------------------------------------------------------------------------------------------------- dap connection id for the distributed ap. Note: this ﬁeld is applicable only if the dw...
Page 218
217 dws-1008 cli reference guide d-link systems, inc. Access point commands ----------------------------------------------------------------------------------------------------------------------- cpu info speciﬁcations and identiﬁcation of the cpu. For dwl-8220ap models other than dwl-8220ap-1xx or ...
Page 220
219 dws-1008 cli reference guide d-link systems, inc. Access point commands packet retransmission number of retransmitted packets sent from the client count to the radio on the active channel. Retransmissions can indicate that the client is not receiving acks from the dwl-8220ap radio. -------------...
Page 222: Show Dap Connection
221 dws-1008 cli reference guide d-link systems, inc. Access point commands field description ----------------------------------------------------------------------------------------------------------------------- channel channel on which the bssid is detected. --------------------------------------...
Page 223: Show Dap Global
222 dws-1008 cli reference guide d-link systems, inc. Access point commands ap with serial id 223344: dws-1008# show dap connection serial-id 223344 total number of entries: 1 dap serial id dap ip address switch ip address 9 223344 10.10.4.88 10.9.9.11 the table describes the ﬁelds in this display. ...
Page 224: Show Dap Unconﬁgured
223 dws-1008 cli reference guide d-link systems, inc. Access point commands dws-1008# show dap global total number of entries: 8 dap serial id switch ip address bias 1 11223344 10.3.8.111 high .- 11223344 10.4.3.2 low 2 332211 10.3.8.111 low .- 332211 10.4.3.2 high 17 0322100185 10.3.8.111 high .- 0...
Page 225
224 dws-1008 cli reference guide d-link systems, inc. Access point commands usage: this command also displays an dwl-8220ap that is directly connected to a switch, if the switch port to which the dwl-8220ap is connected is conﬁgured as a network port instead of an dwl-8220ap access port, and if the ...
Page 227
226 dws-1008 cli reference guide d-link systems, inc. Access point commands rts threshold minimum length (in bytes) a frame can be for a radio in the radio proﬁle to use the rts/cts method to send the frame. The rts/cts method clears the air of other trafﬁc to avoid corruption of the frame due to a ...
Page 228: Show Service-Proﬁle
227 dws-1008 cli reference guide d-link systems, inc. Access point commands client backoff timer interval, in minutes, at which radios in a radio proﬁle reduce power after temporarily increasing the power to maintain the minimum data rate for an associated client. At the end of each power-backoff in...
Page 229
228 dws-1008 cli reference guide d-link systems, inc. Access point commands field description ----------------------------------------------------------------------------------------------------------------------- ssid-name service set identiﬁer (ssid) managed by this service proﬁle. ---------------...
Page 230
229 dws-1008 cli reference guide d-link systems, inc. Access point commands shared key auth indicates whether shared-key authentication is enabled. ----------------------------------------------------------------------------------------------------------------------- wpa enabled indicates that the w...
Page 231: Stp Commands
230 dws-1008 cli reference guide d-link systems, inc. Stp commands stp commands use spanning tree protocol (stp) commands to conﬁgure and manage spanning trees on the virtual lans (vlans) conﬁgured on a dws-1008 switch, to maintain a loop-free network. This chapter presents stp commands alphabetical...
Page 232: Clear Spantree Portvlancost
231 dws-1008 cli reference guide d-link systems, inc. Stp commands examples: the following command resets the stp priority on port 9 to the default: dws-1008# clear spantree portpri 9 success: change accepted. Clear spantree portvlancost resets to the default value the cost of a network port or port...
Page 233: Clear Spantree Statistics
232 dws-1008 cli reference guide d-link systems, inc. Stp commands defaults: none. Access: enabled. Usage: mss does not change a port’s priority for vlans other than the one(s) you specify. Examples: the following command resets the stp priority for port 5 in vlan avocado: dws-1008# clear spantree p...
Page 234: Set Spantree Backbonefast
233 dws-1008 cli reference guide d-link systems, inc. Stp commands vlan vlan-id vlan name or number. Mss enables or disables stp on only the speciﬁed vlan, on all ports within the vlan. Port port-list vlan-id port number or list and the vlan the ports are in. Mss enables or disables stp on only the ...
Page 235: Set Spantree Fwddelay
234 dws-1008 cli reference guide d-link systems, inc. Stp commands set spantree fwddelay changes the period of time after a topology change that a switch which is not the root bridge waits to begin forwarding layer 2 trafﬁc on one or all of its conﬁgured vlans. (the root bridge always forwards trafﬁ...
Page 236: Set Spantree Maxage
235 dws-1008 cli reference guide d-link systems, inc. Stp commands dws-1008# set spantree hello 4 all success: change accepted. Set spantree maxage changes the maximum age for an stp root bridge hello packet that is acceptable to a switch acting as a designated bridge on one or all of its vlans. Aft...
Page 237: Set Spantree Portfast
236 dws-1008 cli reference guide d-link systems, inc. Stp commands snmp port path cost defaults: port speed link type default port path cost 100 mbps full duplex aggregate link (port group) 19 100 mbps full duplex 18 100 mbps half duplex 19 10 mbps full duplex aggregate link (port group) 19 10 mbps ...
Page 238: Set Spantree Portpri
237 dws-1008 cli reference guide d-link systems, inc. Stp commands set spantree portpri changes the stp priority of a network port or ports for selection as part of the path to the stp root bridge in the default vlan on a switch. Syntax: set spantree portpri port-list priority value port-list list o...
Page 239: Set Spantree Portvlanpri
238 dws-1008 cli reference guide d-link systems, inc. Stp commands access: enabled. Examples: the following command changes the cost on ports 3 and 4 to 20 in vlan mauve: dws-1008# set spantree portvlancost 3,4 cost 20 vlan mauve success: change accepted. Set spantree portvlanpri changes the priorit...
Page 240: Set Spantree Uplinkfast
239 dws-1008 cli reference guide d-link systems, inc. Stp commands vlan vlan-id vlan name or number. Mss changes the bridge priority on only the speciﬁed vlan. Defaults: the default root bridge priority for the switch on all vlans is 32,768. Access: enabled. Examples: the following command sets the ...
Page 241
240 dws-1008 cli reference guide d-link systems, inc. Stp commands vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays stp information for all vlans. Active displays information for only the active (forwarding) ports. Defaults: none. Access: all. Examples: the following comm...
Page 242
241 dws-1008 cli reference guide d-link systems, inc. Stp commands output for show spantree field description vlan vlan number. Spanning tree mode in the current software version, the mode is always pvst+, which means per vlan spanning tree+. Spanning tree type in the current software version, the t...
Page 243: Show Spantree Backbonefast
242 dws-1008 cli reference guide d-link systems, inc. Stp commands port-state stp state of the port: • blocking - the port is not forwarding layer 2 trafﬁc but is listening to and forwarding stp control trafﬁc. • disabled - the port is not forwarding any trafﬁc, including stp control trafﬁc. The por...
Page 244: Show Spantree Portfast
243 dws-1008 cli reference guide d-link systems, inc. Stp commands vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays information for blocked ports on all vlans. Defaults: none. Access: all. Usage: the command lists information separately for each vlan. Examples: the follow...
Page 245: Show Spantree Portvlancost
244 dws-1008 cli reference guide d-link systems, inc. Stp commands dws-1008# show spantree portfast port vlan portfast ------------------------- ---- ---------- 1 1 disable 2 1 disable 3 1 disable 4 1 enable 5 1 disable 6 1 disable 7 1 disable 8 1 disable output for show spantree portfast field desc...
Page 246
245 dws-1008 cli reference guide d-link systems, inc. Stp commands port-list list of ports. If you do not specify any ports, mss displays stp statistics for all ports. Vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays stp statistics for all vlans. Defaults: none. Access: a...
Page 247
246 dws-1008 cli reference guide d-link systems, inc. Stp commands status of port timers forward delay timer inactive forward delay timer value 15 message age timer active message age timer value 0 topology change timer inactive topology change timer value 0 hold timer inactive hold timer value 0 de...
Page 248
247 dws-1008 cli reference guide d-link systems, inc. Stp commands output for show spantree statistics field description port port number. Vlan vlan id. Spanning tree enabled for vlan state of the stp feature on the vlan. Port spanning tree state of the stp feature on the port. State stp state of th...
Page 249
248 dws-1008 cli reference guide d-link systems, inc. Stp commands top_change_ack value of the topology change acknowledgment ﬂag in the next conﬁgured bridge protocol data unit (bpdu) to be transmitted on the associated port. The ﬂag is set in reply to a topology change notiﬁcation bpdu. Conﬁg_pend...
Page 250
249 dws-1008 cli reference guide d-link systems, inc. Stp commands topology change timer status of the topology change timer. This timer determines the time period during which conﬁgured bpdus are transmitted with the topology change ﬂag set by this switch when it is the root bridge, after detection...
Page 251
250 dws-1008 cli reference guide d-link systems, inc. Stp commands topology change time time period, in seconds, during which bpdus are transmitted with the topology change ﬂag set by this switch when it is the root bridge, after detection of a topology change. It is equal to the sum of the switch’s...
Page 252: Show Spantree Uplinkfast
251 dws-1008 cli reference guide d-link systems, inc. Stp commands show spantree uplinkfast displays uplink fast convergence information for one vlan or all vlans. Syntax: show spantree uplinkfast [ vlan vlan-id ] vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays stp stati...
Page 253: Igmp Snooping Commands
252 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands igmp snooping commands use internet group management protocol (igmp) snooping commands to conﬁgure and manage multicast trafﬁc reduction on a switch. Clear igmp statistics clears igmp statistics counters on one vlan or all ...
Page 254: Set Igmp Lmqi
253 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands dws-1008# set igmp disable vlan orange success: change accepted. Set igmp lmqi changes the igmp last member query interval timer on one vlan or all vlans on a switch. Syntax: set igmp lmqi tenth-seconds [ vlan vlan-id] lmqi...
Page 255: Set Igmp Mrsol
254 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands enable adds the port to the list of static multicast router ports. Disable removes the port from the list of static multicast router ports. Defaults: by default, no ports are static multicast router ports. Access: enabled. ...
Page 256: Set Igmp Mrsol Mrsi
255 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands set igmp mrsol mrsi changes the interval between multicast router solicitations by a switch on one vlan or all vlans. Syntax: set igmp mrsol mrsi seconds [vlan vlan-id] seconds number of seconds between multicast router sol...
Page 257: Set Igmp Proxy-Report
256 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands examples: the following command changes the other-querier-present interval on vlan orange to 200 seconds: dws-1008# set igmp oqi 200 vlan orange success: change accepted. Set igmp proxy-report disables or reenables proxy re...
Page 258: Set Igmp Qri
257 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands vlan vlan -id vlan name or number. If you do not specify a vlan, the timer change applies to all vlans. Defaults: the default query interval is 125 seconds. Access: enabled. Usage: the query interval is applicable only when...
Page 260: Set Igmp Rv
259 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands access: enabled. Usage: you cannot add dwl-8200ap access ports or wired authentication ports as static multicast ports. However, mss can dynamically add these port types to the list of multicast ports based on multicast tra...
Page 261
260 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands syntax: show igmp [ vlan vlan-id] vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays igmp information for all vlans. Defaults: none. Access: all. Examples: the following command displays igmp infor...
Page 262
261 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands mrouter-term 0 0 0 mrouter-sol 50 101 0 dvmrp 4 4 0 pim v1 0 0 0 pim v2 0 0 0 topology notiﬁcations: 0 packets with unknown igmp type: 0 packets with bad length: 0 packets with bad checksum: 0 packets dropped: 4 output for ...
Page 263
262 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands type how the switch learned that the port is a multicast router port: • conf - static multicast port conﬁgured by an administrator • madv - multicast advertisement • quer - igmp query • dvmrp - distance vector multicast rou...
Page 264: Show Igmp Mrouter
263 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands ttl number of seconds before this entry ages out if the switch does not receive a query message from the querier. Igmp vlan member ports physical ports in the vlan. This list includes all network ports conﬁgured to be in th...
Page 265: Show Igmp Querier
264 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands output for show igmp mrouter field description multicast routers for vlan vlan containing the multicast routers. Ports are listed separately for each vlan. Port number of the physical port through which the switch can reach...
Page 266: Show Igmp Receiver-Table
265 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands dws-1008# show igmp querier vlan orange querier for vlan orange port querier-ip querier-mac ttl ---- --------------- ----------------- ----- 1 193.122.135.178 00:0b:cc:d2:e9:b4 23 the following command shows the information...
Page 267
266 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands syntax: show igmp receiver-table [ vlan vlan-id] [group group-ip-addr /mask-length ] vlan vlan-id vlan name or number. If you do not specify a vlan, mss displays the multicast receivers on all vlans. Group group-ip-addr /ma...
Page 268: Show Igmp Statistics
267 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands output for show igmp receiver-table field description vlan vlan that contains the multicast receiver ports. Ports are listed separately for each vlan. Session ip address of the multicast group being received. Port physical ...
Page 269
268 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands leave 0 0 0 mrouter-adv 0 0 0 mrouter-term 0 0 0 mrouter-sol 50 101 0 dvmrp 4 4 0 pim v1 0 0 0 pim v2 0 0 0 topology notiﬁcations: 0 packets with unknown igmp type: 0 packets with bad length: 0 packets with bad checksum: 0 ...
Page 270
269 dws-1008 cli reference guide d-link systems, inc. Igmp snooping commands igmp message type type of igmp message, continued: • mrouter-term - multicast router termination messages. A multicast router sends this type of message when multicast forwarding is disabled on the router interface, the rou...
Page 271: Clear Security Acl
270 dws-1008 cli reference guide d-link systems, inc. Security acl commands use security acl commands to conﬁgure and monitor security access control lists (acls). Security acls ﬁlter packets to restrict or permit network usage by certain users or trafﬁc types, and can assign to packets a class of s...
Page 272: Clear Security Acl Map
271 dws-1008 cli reference guide d-link systems, inc. Security acl commands dws-1008# show security acl info all acl information for all set security acl ip acl_133 (hits #1 0) --------------------------------------------------------------------------- 1. Deny ip source ip 192.168.1.6 0.0.0.0 destin...
Page 273: Commit Security Acl
272 dws-1008 cli reference guide d-link systems, inc. Security acl commands vlan vlan-id vlan name or number. Mss removes the security acl from the speciﬁed vlan. Port port-list port list. Mss removes the security acl from the speciﬁed physical port or ports. Tag tag-value tag value that identiﬁes a...
Page 275: Rollback Security Acl
274 dws-1008 cli reference guide d-link systems, inc. Security acl commands syntax: hit-sample-rate seconds seconds number of seconds between samples. A sample rate of 0 (zero) disables the sample process. Defaults: by default, the hits are not sampled. Access: enabled usage: to view counter results...
Page 278
277 dws-1008 cli reference guide d-link systems, inc. Security acl commands • 4 or 5 - video. Packets are queued in dwl-8220ap forwarding queue 2. Use cos level 4 or 5 for voice over ip (voip) packets other than spectralink voice priority (svp). • 6 or 7 - voice. Packets are queued in dwl-8220ap for...
Page 279
278 dws-1008 cli reference guide d-link systems, inc. Security acl commands code icmp-code for icmp messages ﬁltered by type, additionally ﬁlters icmp messages by code. Specify a value from 0 through 255. (for a list of icmpmessage type and code numbers, see www.Iana.Org/assignments/icmp-parameters....
Page 280
279 dws-1008 cli reference guide d-link systems, inc. Security acl commands you cannot perform acl functions that include permitting, denying, or marking with a class of service (cos) level on packets with a multicast or broadcast destination address. The order of security aces in a security acl is ...
Page 281: Set Security Acl Map
280 dws-1008 cli reference guide d-link systems, inc. Security acl commands set security acl map assigns a committed security acl to a vlan, physical port or ports, virtual port, or distributed ap on the switch. Note: to assign a security acl to a user or group in the local database, use the command...
Page 282: Show Security Acl
281 dws-1008 cli reference guide d-link systems, inc. Security acl commands examples: the following command maps security acl acl_133 to port 4 for incoming packets: dws-1008 set security acl map acl_133 port 4 in success: change accepted. Show security acl displays a summary of security acls that a...
Page 283: Show Security Acl Dscp
282 dws-1008 cli reference guide d-link systems, inc. Security acl commands show security acl dscp displays a table that maps differentiated services code point (dscp) values to their equivalent combinations of ip precedence values and ip tos values. Use the table to look up the values to use with t...
Page 284: Show Security Acl Info
283 dws-1008 cli reference guide d-link systems, inc. Security acl commands access: enabled usage: for mss to count hits for a security acl, you must specify hits in the set security acl commands that deﬁne ace rules for the acl. Examples to display the security acl hits on a switch, type the follow...
Page 285
284 dws-1008 cli reference guide d-link systems, inc. Security acl commands set security acl ip acl_123 (hits #5 462) ----------------------------------------------------------------------------------------------------- 1. Permit ip source ip 192.168.1.11 0.0.0.255 destination ip any enable-hits 2. ...
Page 286
285 dws-1008 cli reference guide d-link systems, inc. Security acl commands show security acl resource-usage displays statistics about the resources used by security acl ﬁltering on the switch. Syntax: show security acl resource-usage defaults: none access: enabled usage: use this command with the h...
Page 287
286 dws-1008 cli reference guide d-link systems, inc. Security acl commands in mapping : true no vlan or port mapping : false no vport mapping : true the table below explains the ﬁelds in the show security acl resource-usage output. Show security acl resource-usage output ---------------------------...
Page 288
287 dws-1008 cli reference guide d-link systems, inc. Security acl commands show security acl resource-usage output (continued) ----------------------------------------------------------------------------------------------------------------------------- field description ----------------------------...
Page 289
288 dws-1008 cli reference guide d-link systems, inc. Security acl commands show security acl resource-usage output (continued) ----------------------------------------------------------------------------------------------------------------------------- field description ----------------------------...
Page 290: Crypto Ca-Certiﬁcate
289 dws-1008 cli reference guide d-link systems, inc. Cryptography commands use cryptography commands to conﬁgure and manage certiﬁcates and public-private key pairs for system authentication. Depending on your network conﬁguration, you must create keys and certiﬁcates to authenticate the switch to ...
Page 291: Crypto Certiﬁcate
290 dws-1008 cli reference guide d-link systems, inc. Cryptography commands 3. When mss prompts you for the pem-formatted certiﬁcate, paste the pkcs #7 object ﬁle onto the command line. Examples: the following command adds the certiﬁcate authority’s certiﬁcate to certiﬁcate and key storage: dws-1008...
Page 292: Crypto Generate Key
291 dws-1008 cli reference guide d-link systems, inc. Cryptography commands the switch veriﬁes the validity of the public key associated with this certiﬁcate before installing it, to prevent a mismatch between the switch’s private key and the public key in the installed certiﬁcate. Examples: the fol...
Page 293: Crypto Generate Request
292 dws-1008 cli reference guide d-link systems, inc. Cryptography commands crypto generate request generates a certiﬁcate signing request (csr). This command outputs a pem-formatted pkcs #10 text string that you can cut and paste to another location for delivery to a certiﬁcate authority. This comm...
Page 294
293 dws-1008 cli reference guide d-link systems, inc. Cryptography commands defaults: none access: enabled usage: to use this command, you must already have generated a public-private encryption key pair with the crypto generate key command. Enter crypto generate request eap and press enter. When yo...
Page 295: Crypto Generate Self-Signed
294 dws-1008 cli reference guide d-link systems, inc. Cryptography commands crypto generate self-signed generates a self-signed certiﬁcate for either an administrative certiﬁcate for use with an eap certiﬁcate for use with 802.1x wireless users. Syntax: crypto generate self-signed {eap} eap generate...
Page 296: Crypto Otp
295 dws-1008 cli reference guide d-link systems, inc. Cryptography commands crypto otp sets a one-time password (otp) for use with the crypto pkcs12 command. Syntax: crypto otp {eap} one-time-password eap creates a one-time password for installing a pkcs #12 object ﬁle for an eap certiﬁcate and key ...
Page 297: Crypto Pkcs12
296 dws-1008 cli reference guide d-link systems, inc. Cryptography commands crypto pkcs12 unpacks a pkcs #12 object ﬁle into the certiﬁcate and key storage area on the switch. This object ﬁle contains a public-private key pair, a dws-1008 switch certiﬁcate signed by a certiﬁcate authority, and the c...
Page 298: Show Crypto Ca-Certiﬁcate
297 dws-1008 cli reference guide d-link systems, inc. Cryptography commands show crypto ca-certiﬁcate displays information about the certiﬁcate authority’s pem-encoded pkcs #7 certiﬁcate. . Syntax: show crypto ca-certiﬁcate {eap} eap displays information about the certiﬁcate authority’s certiﬁcate t...
Page 299: Show Crypto Certiﬁcate
298 dws-1008 cli reference guide d-link systems, inc. Cryptography commands show crypto certiﬁcate displays information about one of the cryptographic certiﬁcates installed on the switch. Syntax: show crypto certiﬁcate {eap} eap displays information about the eap certiﬁcate that authenticates the sw...
Page 300: Show Crypto Key Ssh
299 dws-1008 cli reference guide d-link systems, inc. Cryptography commands show crypto key ssh displays ssh authentication key information. This command displays the checksum (also called a ﬁngerprint) of the public key. When you connect to the switch with an ssh client, you can compare the ssh key...
Page 301: Notes
300 dws-1008 cli reference guide d-link systems, inc. Cryptography commands notes.
Page 302: Clear Radius
301 dws-1008 cli reference guide d-link systems, inc. Radius commands use radius commands to set up communication between an switch and groups of up to four radius servers for remote authentication, authorization, and accounting (aaa) of administrators and network users. This chapter presents radius...
Page 303: Clear Radius Proxy Client
302 dws-1008 cli reference guide d-link systems, inc. Radius commands dws-1008# clear radius retransmit success: change accepted. Dws-1008# clear radius timeout success: change accepted. Clear radius client system-ip removes the switch’s system ip address from use as the permanent source address in ...
Page 304: Clear Radius Server
303 dws-1008 cli reference guide d-link systems, inc. Radius commands syntax: clear radius proxy port all defaults: none. Access: enabled. Examples: the following command clears all radius proxy port entries from the switch: dws-1008# clear radius proxy port all success: change accepted. Clear radiu...
Page 305: Set Radius
304 dws-1008 cli reference guide d-link systems, inc. Radius commands examples: to remove the server group sg-77 type the following command: dws-1008# clear server group sg-77 success: change accepted. To disable load balancing in a server group shorebirds, type the following command: dws-1008# set ...
Page 306: Set Radius Client System-Ip
305 dws-1008 cli reference guide d-link systems, inc. Radius commands usage: you can specify only one parameter per command line. Examples: the following commands sets the dead time to 5 minutes, the radius key to goody, the number of retransmissions to 1, and the timeout to 21 seconds on all radius...
Page 307: Set Radius Proxy Port
306 dws-1008 cli reference guide d-link systems, inc. Radius commands [ acct-port acct-udp-port-number] [port udp-port-number] key string address ipaddress ip address of the third-party ap. Enter the address in dotted decimal notation. Port udp- portnumber udp port on which the switch listens for ra...
Page 308: Set Radius Server
307 dws-1008 cli reference guide d-link systems, inc. Radius commands access: enabled. Usage: aaa for third-party ap users has additional conﬁguration requirements. Enter a separate command for each ssid, and its tag value, you want the switch to support. Examples: the following command maps ssid my...
Page 309
308 dws-1008 cli reference guide d-link systems, inc. Radius commands key string password (shared secret key) the switch uses to authenticate to the radius server. You must provide the same password that is deﬁned on the radius server. The password can be 1 to 32 characters long, with no spaces or t...
Page 310: Set Server Group
309 dws-1008 cli reference guide d-link systems, inc. Radius commands set server group conﬁgures a group of one to four radius servers. Syntax: set server group group-name members server-name1 [server-name2] [server- name3] [server-name4] group-name server group name of up to 32 characters, with no ...
Page 311
310 dws-1008 cli reference guide d-link systems, inc. Radius commands defaults: load balancing is disabled by default. Access: enabled. Usage: you can optionally enable load balancing after assigning the server group members. If you conﬁgure load balancing, mss sends each aaa request to a separate s...
Page 312: 802.1X Management Commands
311 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands 802.1x management commands use 802. Ieee x management commands to modify the default settings for ieee 802.1x sessions on a switch. For best results, change the settings only if you are aware of a problem with the switc...
Page 313: Clear Dot1X Port-Control
312 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands clear dot1x port-control resets all wired authentication ports on the switch to default 802.1x authentication. Syntax: clear dot1x port-control defaults: by default, all wired authentication ports are set to auto and th...
Page 314: Clear Dot1X Reauth-Period
313 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands examples: type the following command to reset the maximum number of reauthorization attempts to the default: dws-1008# clear dot1x reauth-max success: change accepted. Clear dot1x reauth-period resets the time period th...
Page 315: Clear Dot1X Tx-Period
314 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands syntax: clear dot1x timeout supplicant defaults: the default for the authentication timeout sessions is 30 seconds. Access: enabled. Examples: type the following command to reset the timeout period for an authentication...
Page 316: Set Dot1X Bonded-Period
315 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands access: enabled. Usage: this command applies only to wired authentication ports. Examples: to enable per-port 802.1x authentication on wired authentication ports, type the following command: dws-1008# set dot1x authcont...
Page 319: Set Dot1X Reauth
318 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands examples: type the following command to set the quiet period to 90 seconds: dws-1008# set dot1x quiet-period 90 success: dot1x quiet period set to 90. Set dot1x reauth determines whether the switch allows the reauthenti...
Page 320: Set Dot1X Reauth-Period
319 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands set dot1x reauth-period sets the number of seconds that must elapse before the switch attempts reauthentication. Syntax: set dot1x reauth-period seconds seconds specify a value between 60 (1 minute) and 1,641,600 (19 da...
Page 321: Set Dot1X Tx-Period
320 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands syntax: set dot1x timeout supplicant seconds seconds specify a value between 1 and 65,535. Defaults: the default is 30 seconds. Access: enabled. Examples: type the following command to set the number of seconds for auth...
Page 322: Set Dot1X Wep-Rekey-Period
321 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands defaults: wep key rotation is enabled, by default. Access: enabled. Usage: reauthentication is not required for wep key rotation to take place. Broadcast and multicast keys are always rotated at the same time, so all me...
Page 323
322 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands defaults: none. Access: enabled. Examples: type the following command to display the 802.1x clients: dws-1008# show dot1x clients mac address state vlan identity ---------------------------------------------------------...
Page 324
323 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands type the following command to display 802.1x statistics: dws-1008# show dot1x stats 802.1x statistic value ---------------- ----- enters connecting: 709 logoffs while connecting: 112 enters authenticating: 467 success w...
Page 325
324 dws-1008 cli reference guide d-link systems, inc. 802.1x management commands starts while authenticating number of times that the switch state wildcard transitions from authenticating to aborting, as a result of an eapol-start message being received from the supplicant (client). Logoffs while au...
Page 326: Session Management Commands
325 dws-1008 cli reference guide d-link systems, inc. Session management commands session management commands use session management commands to display and clear administrative and network user sessions. Clear sessions clears all administrative sessions, or clears administrative console or telnet s...
Page 327: Clear Sessions Network
326 dws-1008 cli reference guide d-link systems, inc. Session management commands to clear telnet client session 0, type the following command: dws-1008# clear sessions telnet client 0 clear sessions network clears all network sessions for a speciﬁed username or set of usernames, mac address or set ...
Page 328: Show Sessions
327 dws-1008 cli reference guide d-link systems, inc. Session management commands examples: to clear all sessions for mac address 00:01:02:03:04:05, type the following command: dws-1008# clear sessions network mac-addr 00:01:02:03:04:05 to clear session 9, type the following command: dws-1008# clear...
Page 329
328 dws-1008 cli reference guide d-link systems, inc. Session management commands examples: to view information about sessions of administrative users, type the following command: dws-1008> show sessions admin tty username time (s) type ------- -------------------- -------- ---- tty0 3644 console tt...
Page 330: Show Sessions Network
329 dws-1008 cli reference guide d-link systems, inc. Session management commands show sessions telnet client output field description session session number assigned by mss when the client session is established. Server address ip address of the remote device. Server port tcp port number of the rem...
Page 331
330 dws-1008 cli reference guide d-link systems, inc. Session management commands vlan vlan-glob displays all network sessions on a single vlan or a set of vlans. Specify a vlan name, use the double-asterisk wildcard character (**) to specify all vlan names, or use the single-asterisk wildcard chara...
Page 332
331 dws-1008 cli reference guide d-link systems, inc. Session management commands the following command displays summary information about the sessions for mac address 00:05:5d:7e:98:1a : dws-1008> show sessions network mac-addr 00:05:5d:7e:98:1a user sess ip or mac vlan port/ name id address name r...
Page 333
332 dws-1008 cli reference guide d-link systems, inc. Session management commands (additional show sessions network verbose ou describes the additional ﬁelds of the verbose output of show sessions network commands.) the following command displays information about network session 27: dws-1008> show ...
Page 334
333 dws-1008 cli reference guide d-link systems, inc. Session management commands additional show sessions network verbose output field description client mac mac address of the session user. Gid global session id, a unique session number. State status of the session: • auth, assoc req—client is bei...
Page 335
334 dws-1008 cli reference guide d-link systems, inc. Session management commands state status of the session: • auth, assoc req—client is being associated by the 802.1x protocol. • auth and assoc—client is being associated by the 802.1x protocol, and the user is being authenticated. • authorizing—u...
Page 336
335 dws-1008 cli reference guide d-link systems, inc. Session management commands unicast bytes in total number of unicast bytes received from the user by the switch (64-bit counter). Unicast packets out total number of unicast packets sent by the switch to the user (64-bit counter). Unicast bytes o...
Page 337: Rf Detection Commands
336 dws-1008 cli reference guide d-link systems, inc. Rf detection commands rf detection commands mss automatically performs rf detection scans on enabled and disabled radios to detect rogue access points. A rogue access point is a bssid (mac address associated with an ssid) that does not belong to ...
Page 338: Clear Rfdetect Ignore
337 dws-1008 cli reference guide d-link systems, inc. Rf detection commands clear rfdetect ignore removes a device from the ignore list for rf scans. Mss does not generate log messages or traps for the devices in the ignore list. Syntax: clear rfdetect ignore mac-addr mac-addr basic service set iden...
Page 339: Set Rfdetect Attack-List
338 dws-1008 cli reference guide d-link systems, inc. Rf detection commands examples: the following command removes client oui aa:bb:cc:00:00:00 from the permitted vendor list: dws-1008# clear rfdetect vendor-list client aa:bb:cc:00:00:00 success: aa:bb:cc:00:00:00 is no longer in client vendor-list...
Page 340: Set Rfdetect Ignore
339 dws-1008 cli reference guide d-link systems, inc. Rf detection commands set rfdetect ignore conﬁgures a list of known devices to ignore during an rf scan. Mss does not generate log messages or traps for the devices in the ignore list. Syntax: set rfdetect ignore mac-addr mac-addr bssid (mac addr...
Page 341: Set Rfdetect Signature
340 dws-1008 cli reference guide d-link systems, inc. Rf detection commands set rfdetect signature enables ap signatures. An ap signature is a set of bits in a management frame sent by an ap that identiﬁes that ap to mss. If someone attempts to spoof management packets from a d-link ap, mss can dete...
Page 343: Show Rfdetect Clients
342 dws-1008 cli reference guide d-link systems, inc. Rf detection commands total number of entries: 1 blacklist mac type port ttl ------------------------ --------------------- ------ ----- 11:22:33:44:55:66 conﬁgured - - 11:23:34:45:56:67 assoc req ﬂood 3 25 show rfdetect clients displays the wire...
Page 344
343 dws-1008 cli reference guide d-link systems, inc. Rf detection commands show rfdetect clients output field description client mac mac address of the client. Client vendor company that manufactures or sells the client. Ap mac mac address of the radio with which the rogue client is associated. Ap ...
Page 345: Show Rfdetect Counters
344 dws-1008 cli reference guide d-link systems, inc. Rf detection commands typ classiﬁcation of the rogue device: • rogue - wireless device that is on the network but is not supposed to be on the network. • intfr - wireless device that is not part of your network and is not a rogue, but might be ca...
Page 346: Show Rfdetect Data
345 dws-1008 cli reference guide d-link systems, inc. Rf detection commands 802.11 reassociation ﬂood 0 0 802.11 disassociation ﬂood 0 0 weak wep initialization vectors 0 0 spoofed access point mac-address attacks 0 0 spoofed client mac-address attacks 0 0 ssid masquerade attacks 1 12 spoofed deauth...
Page 347: Show Rfdetect Ignore
346 dws-1008 cli reference guide d-link systems, inc. Rf detection commands show rfdetect data output field description bssid mac address of the ssid used by the detected device. Vendor company that manufactures or sells the rogue device. Type classiﬁcation of the rogue device: • rogue - wireless de...
Page 348: Show Rfdetect Ssid
347 dws-1008 cli reference guide d-link systems, inc. Rf detection commands examples: the following example displays the list of ignored devices: dws-1008# show rfdetect ignore total number of entries: 2 ignore mac ----------------- aa:bb:cc:11:22:33 aa:bb:cc:44:55:66 show rfdetect ssid the lines in...
Page 349: Show Rfdetect Vendor-List
348 dws-1008 cli reference guide d-link systems, inc. Rf detection commands show rfdetect vendor-list displays the entries in the permitted vendor list. Syntax: show rfdetect vendor-list defaults: none. Access: enabled. Examples: the following example shows the permitted vendor list on switch: dws-1...
Page 350
349 dws-1008 cli reference guide d-link systems, inc. Rf detection commands usage: if a d-link radio is supporting more than one ssid, each of the corresponding bssids is listed separately. Examples: to following command displays information about the rogues detected by radio 1 on ap port 3: dws-100...
Page 351
350 dws-1008 cli reference guide d-link systems, inc. Rf detection commands flags classiﬁcation and encryption information for the rogue: • the i, a, or u ﬂag indicates the classiﬁcation. • the other ﬂags indicate the encryption used by the rogue. For ﬂag deﬁnitions, see the key in the command outpu...
Page 352: File Management Commands
351 dws-1008 cli reference guide d-link systems, inc. File management commands file management commands use ﬁle management commands to manage system ﬁles and to display software and boot information. Backup creates an archive of switch system ﬁles and optionally, user ﬁle, in unix tape archive (tar)...
Page 353: Clear Boot Conﬁg
352 dws-1008 cli reference guide d-link systems, inc. File management commands the backup command places the boot conﬁguration ﬁle into the archive. (the boot conﬁguration ﬁle is the conﬁgured boot conﬁguration in the show boot command’s output.) if the running conﬁguration contains changes that hav...
Page 354
353 dws-1008 cli reference guide d-link systems, inc. File management commands syntax: copy source-url destination-url source-url name and location of the ﬁle to copy. The uniform resource locator (url) can be one of the following: • [subdirname/]ﬁlename • ﬁle:[subdirname/]ﬁlename • tftp://ip-addr/[...
Page 355
354 dws-1008 cli reference guide d-link systems, inc. File management commands examples: the following command copies a ﬁle called ﬂoor from nonvolatile storage to a tftp server: dws-1008# copy ﬂoormx tftp://10.1.1.1/ﬂoor success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] the following comman...
Page 356: Dir
355 dws-1008 cli reference guide d-link systems, inc. File management commands dws-1008# copy testconﬁg tftp://10.1.1.1/testconﬁg success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] dws-1008# delete testconﬁg success: ﬁle deleted. Examples: the following command deletes ﬁle dang_doc from subdi...
Page 357: Load Conﬁg
356 dws-1008 cli reference guide d-link systems, inc. File management commands the following command displays the ﬁles in the old subdirectory: dws-1008# dir old ============================================================= ﬁle: filename size created ﬁle:conﬁguration.Txt 3541 bytes sep 22 2003, 22:5...
Page 358: Mkdir
357 dws-1008 cli reference guide d-link systems, inc. File management commands defaults: if you do not specify a ﬁlename, mss uses the same conﬁguration ﬁlename that was used for the previous conﬁguration load. For example, if the switch used conﬁguration for the most recent conﬁguration load, mss u...
Page 359: Reset System
358 dws-1008 cli reference guide d-link systems, inc. File management commands dws-1008# dir ============================================================= ﬁle: filename size created ﬁle:conﬁguration 17 kb may 21 2004, 18:20:53 ﬁle:conﬁguration.Txt 379 bytes may 09 2004, 18:55:17 corp2/ 512 bytes may...
Page 360: Restore
359 dws-1008 cli reference guide d-link systems, inc. File management commands dws-1008# reset system this will reset the entire system. Are you sure (y/n)y the following commands attempt to restart a switch with a running conﬁguration that has unsaved changes, and then force the switch to restart: ...
Page 361: Rmdir
360 dws-1008 cli reference guide d-link systems, inc. File management commands usage: the backup command stores the mac address of the switch in the archive. By default, the restore command works only if the mac address in the archive matches the mac address of the switch where the restore command i...
Page 362
361 dws-1008 cli reference guide d-link systems, inc. File management commands defaults: by default, mss saves the running conﬁguration as the conﬁguration ﬁlename used during the last reboot. Access: enabled. Usage: if you do not specify a ﬁlename, mss replaces the conﬁguration ﬁle loaded during th...
Page 364: Show Conﬁg
363 dws-1008 cli reference guide d-link systems, inc. File management commands the table below describes the ﬁelds in the show boot output. Output for show boot field description conﬁgured boot image boot partition and image ﬁlename mss will use to boot next time the software is rebooted. Conﬁgured ...
Page 365
364 dws-1008 cli reference guide d-link systems, inc. File management commands area area conﬁguration area. You can specify one of the following: • aaa • acls • ap • arp • eapol • httpd • ip • ip-conﬁg • log • ntp • portconﬁg • portgroup • radio-proﬁle • rfdetect • service-proﬁle • sm • snmp • snoop...
Page 366: Show Version
365 dws-1008 cli reference guide d-link systems, inc. File management commands examples: the following command shows conﬁguration information for vlans: dws-1008# show conﬁg area vlan # conﬁguration nvgen’d at 2004-5-21 19:36:48 # image 3.0.0 # model dws-1008 # last change occurred at 2004-5-21 18:2...
Page 367
366 dws-1008 cli reference guide d-link systems, inc. File management commands the following command displays additional software build information and dwl-8220ap access point information: dws-1008# show version details mobility system software, version: 3.0.0 copyright (c) 2003,2004 by d-link syste...
Page 368
367 dws-1008 cli reference guide d-link systems, inc. File management commands port/dap port number connected to a dwl-8220ap access point. Ap model ap model number. Serial # ap serial number. Versions ap hardware, ﬁrmware, and software versions..
Page 369: Trace Commands
368 dws-1008 cli reference guide d-link systems, inc. Trace commands trace commands use trace commands to perform diagnostic routines. While mss allows you to run many types of traces, this chapter describes commands for those traces you are most likely to use. For a complete listing of the types of...
Page 370
369 dws-1008 cli reference guide d-link systems, inc. Trace commands to clear the session manager trace, type the following command: dws-1008# clear trace sm success: clear trace sm save trace saves the accumulated trace data for enabled traces to a ﬁle in the switch’s nonvolatile storage. Syntax: s...
Page 371
370 dws-1008 cli reference guide d-link systems, inc. Trace commands defaults: the default trace level is 5. Access: enabled. Examples: the following command starts a trace for information about user jose’s authentication: dws-1008# set trace authentication user jose success: change accepted. Set tr...
Page 372
371 dws-1008 cli reference guide d-link systems, inc. Trace commands set trace dot1x traces 802.1x sessions. Syntax: set trace dot1x [mac-addr mac-address] [port port-num] [user username] [level level] mac-addr mac- address traces a mac address. Specify a mac address, using colons to separate the oc...
Page 373
372 dws-1008 cli reference guide d-link systems, inc. Trace commands port port-num traces a port number. Specify a switch port number between 1 and 8. User username traces a user. Specify a username of up to 80 alphanumeric characters, with no spaces. Level level determines the quantity of informati...
Page 374: Snoop Commands
373 dws-1008 cli reference guide d-link systems, inc. Snoop commands snoop commands use snoop commands to monitor wireless trafﬁc, by using a distributed ap as a snifﬁng device. The ap copies the sniffed 802.11 packets and sends the copies to an observer, which is typically a protocol analyzer such ...
Page 375
374 dws-1008 cli reference guide d-link systems, inc. Snoop commands set snoop conﬁgures a snoop ﬁlter. Syntax: set snoopﬁlter-name [condition-list] [observer ip-addr] [snap-length num] ﬁlter-name name for the ﬁlter. The name can be up to 32 alphanumeric characters, with no spaces. Condition-list ma...
Page 376
375 dws-1008 cli reference guide d-link systems, inc. Snoop commands usage: trafﬁc that matches a snoop ﬁlter is copied after it is decrypted. The decrypted (clear) version is sent to the observer. For best results: • do not specify an observer that is associated with the ap where the snoop ﬁlter is...
Page 377
376 dws-1008 cli reference guide d-link systems, inc. Snoop commands access: enabled. Usage: you can map the same ﬁlter to more than one radio. You can map up to eight ﬁlters to the same radio. If more than one ﬁlter has the same observer, the ap sends only one copy of a packet that matches a ﬁlter ...
Page 378
377 dws-1008 cli reference guide d-link systems, inc. Snoop commands show snoop displays the ap radio mapping for all snoop ﬁlters. Syntax: show snoop defaults: none. Access: enabled. Usage: to display the mappings for a speciﬁc ap radio, use the show snoop map command. Examples: the following comma...
Page 379
378 dws-1008 cli reference guide d-link systems, inc. Snoop commands show snoop map shows the ap radios that are mapped to a speciﬁc snoop ﬁlter. Syntax: show snoopmapﬁlter-name ﬁlter-name name of the snoop ﬁlter. Defaults: none. Access: enabled. Usage: to display the mappings for all snoop ﬁlters, ...
Page 380
379 dws-1008 cli reference guide d-link systems, inc. Snoop commands the table below describes the ﬁelds in this display. Field description filter name of the snoop ﬁlter. Dap distributed ap containing the radio to which the ﬁlter is mapped. Radio radio to which the ﬁlter is mapped. Rx match number ...
Page 381: System Log Commands
380 dws-1008 cli reference guide d-link systems, inc. System log commands system log commands use the system log commands to record information for monitoring and troubleshooting. Mss system logs are based on rfc 3164, which deﬁnes the log protocol. Clear log clears the log messages stored in the lo...
Page 383
382 dws-1008 cli reference guide d-link systems, inc. System log commands local-facility facility-level for messages sent to a syslog server, maps all messages of the severity you specify to one of the standard local log facilities deﬁned in rfc 3164. You can specify one of the following values: • 0...
Page 384
383 dws-1008 cli reference guide d-link systems, inc. System log commands syntax: set log trace mbytes count count size of the trace buffer, in megabytes (mb). You can specify from 1 through 50. Defaults: the default trace buffer size is 1 mb. Access: enabled. Examples: the following command increas...
Page 385
384 dws-1008 cli reference guide d-link systems, inc. System log commands severity severity- level displays messages at a severity level greater than or equal to the level speciﬁed. Specify one of the following: • emergency - the switch is unusable. • alert - action must be taken immediately. • crit...
Page 386
385 dws-1008 cli reference guide d-link systems, inc. System log commands show log conﬁg displays log conﬁguration information. Syntax: show log conﬁg defaults: none. Access: enabled. Examples: to display how logging is conﬁgured, type the following command: dws-1008# show log conﬁg logging console:...
Page 388
387 dws-1008 cli reference guide d-link systems, inc. System log commands examples: type the following command to see the facilities for which you can view event messages archived in the buffer: dws-1008# show log trace facility ? Select one of: kernel, aaa, syslogd, acl, apm, arp, aso, boot, cli, c...
Page 389: Boot Prompt Commands
388 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands boot prompt commands boot prompt commands enable you to perform basic tasks, including booting a system image ﬁle, from the boot prompt (boot>). A cli session enters the boot prompt if mss does not boot successfully or you in...
Page 390
389 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands syntax: boot [bt=type] [dev=device] [fn=ﬁlename] [ha=ip-addr] [fl=num] [opt=option] [opt+=option] bt=type boot type: • c - compact ﬂash. Boots using nonvolatile storage or a ﬂash card. • n - network. Boots using a tftp server...
Page 391
390 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands examples: the following command loads system image ﬁle 010101.020 from boot partition 1: boot> boot fn=010101.020 dev=boot1 compact flash load from boot1:testcfg matches 010101.020. Unzip: inﬂating ramdisk_1.1.1.. Ok unzip ﬁl...
Page 392
391 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands examples: the following command enters the conﬁguration mode for the currently active boot proﬁle, changes the device to boot1, and leaves the other parameters with their current settings: boot> change changing the default co...
Page 393
392 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands delete removes the currently active boot proﬁle. Syntax: delete defaults: none. Access: boot prompt. Usage: when you type the delete command, the next-lower numbered boot proﬁle becomes the active proﬁle. For example, if the ...
Page 395
394 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands f: secondary partition of the ﬂash card in the ﬂash card slot. Boot0: boot partition 0. Boot1: boot partition 1. [ﬁlename] system image ﬁlename. Defaults: none. Access: boot prompt. Usage: to display the image ﬁlenames, use t...
Page 396
395 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands ls displays a list of the boot prompt commands. Syntax: ls defaults: none. Access: boot prompt. Usage: to display help for an individual command, type help followed by the command name (for example, help boot). Examples: to d...
Page 397
396 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands examples: to activate the boot proﬁle in the next slot and display the proﬁle, type the following command: boot> next boot index: 0 boot type: c device: boot1: filename: testcfg flags: 00000000 options: run=nos;boot=0 reset r...
Page 398
397 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands show displays the currently active boot proﬁle. A boot proﬁle is a set of parameters that a switch uses to control the boot process. Each boot proﬁle contains the following parameters: • boot type - either compact ﬂash (local...
Page 399
398 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands output for show field description boot index boot proﬁle slot, which can be a number from 0 to 3. Boot type boot type: • c - compact ﬂash. Boots using nonvolatile storage or a ﬂash card. • n - network. Boots using a tftp serv...
Page 400
399 dws-1008 cli reference guide d-link systems, inc. Boot prompt commands examples: the following command displays the current setting of the poweron test ﬂag: boot> test the diagnostic execution ﬂag is not set. Version displays version information for a switch’s hardware and boot code. Syntax: ver...
Page 401: Warranty
400 dws-1008 cli reference guide d-link systems, inc. Warranty subject to the terms and conditions set forth herein, d-link systems, inc. (“d-link”) provides this limited warranty for its product only to the person or entity that originally purchased the product from: • d-link or its authorized rese...
Page 402
401 dws-1008 cli reference guide d-link systems, inc. Except as otherwise agreed by d-link in writing, the replacement software is provided only to the original licensee, and is subject to the terms and conditions of the license granted by d-link for the software. Software will be warranted for the ...
Page 403
402 dws-1008 cli reference guide d-link systems, inc. D-link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an rma number is not visible from the outside of the package. The product owner agrees to pay d-link’s rea...
Page 404
403 dws-1008 cli reference guide d-link systems, inc. Limitation of liability: to the maximum extent permitted by law, d-link is not liable under any contract, negligence, strict liability or other legal or equitable theory for any loss of use of the product, inconvenience or damages of any characte...
Page 405
404 dws-1008 cli reference guide d-link systems, inc. Fcc statement: this equipment has been tested and found to comply with the limits for a class b digital device, pursuant to part 15 of the fcc rules. These limits are designed to provide reasonable protection against harmful interference in a res...
Page 406: Registration
405 dws-1008 cli reference guide d-link systems, inc. Registration registration revised: april 4, 2006 version 1.1 product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights..