1. DL manuals
  2. D-Link
  3. Switch
  4. xStack DES-6500
  5. Cli Manual

D-Link xStack DES-6500 Cli Manual

Other manuals for xStack DES-6500: Cli Manual, User Manual, User Manual
Manual is about: Modular Layer 3 Chassis Ethernet Switch

Summary of xStack DES-6500

  • Page 1

    Cli manual product model : tm des-6500 modular layer 3 chassis ethernet switch release 3.6.

  • Page 3: Table of Contents

    Table of contents introduction ............................................................................................................................................ 1 using the console cli ...........................................................................................................

  • Page 4

    Time and sntp commands ................................................................................................................. 266 arp commands .................................................................................................................................. 272 vrrp comman...

  • Page 5

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 1 1 i ntroduction the xstack des-6500 layer 3 modular chassis ethernet switch is a member of the d-link xstack family. Ranging from 10/100mbps edge switches to core gigabit switches, the xstack switch family has been future-proof des...

  • Page 6

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 2 setting the switch’s ip address each switch must be assigned its own ip address, which is used for communication with an snmp network manager or other tcp/ip application (for example bootp, tftp). The switch’s default ip address is...

  • Page 7

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 3 figure 1-3. Assigning an ip address in the above example, the switch was assigned an ip address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message success indicates that the command was executed successfully. The s...

  • Page 8: Cli

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 4 2 u sing the c onsole cli the xstack des-6500 supports a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation prog...

  • Page 9

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 5 figure 2-1. Initial console screen commands are entered at the command prompts, des-6500:4#. There are a number of helpful features included in the cli. Entering the ? Command will display a list of all of the top-level commands. F...

  • Page 10

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 6 figure 2-3. Example command parameter help in this case, the command config account was entered with the parameter . The cli will then prompt to enter the with the message, next possible completions:. Every command in the cli has t...

  • Page 11

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 7 if a command is entered that is unrecognized by the cli, the top-level commands will be displayed under the available commands: prompt. Figure 2-5. The available commands prompt the top-level commands consist of commands such as sh...

  • Page 12

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 8 3 c ommand s yntax the following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the cli and available through the console interface uses...

  • Page 16

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 12 example usage: to configure the user password of “dlink” account: d e s - 6 5 0 0 : 4 # c o n f i g a c c o u n t d l i n k c o m m a n d : c o n f i g a c c o u n t d l i n k e n t e r a o l d p a s s w o r d : * * * * e n t e r ...

  • Page 17

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 13 delete account restrictions only administrator-level users can issue this command. Example usage: to delete the admin account “system”: d e s - 6 5 0 0 : 4 # d e l e t e a c c o u n t s y s t e m c o m m a n d : d e l e t e a c c ...

  • Page 18

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 14 - # d e s - 6 5 0 0 c o n f i g u r a t i o n # # f i r m w a r e : b u i l d 3 . 6 0 . B 0 2 # c o p y r i g h t ( c ) 2 0 0 4 - 2 0 0 8 d - l i n k c o r p o r a t i o n . A l l r i g h t s r e s e r v e d . # - - - - - - - - - ...

  • Page 19

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 15 c t r l + c e s c q q u i t s p a c e n n e x t p a g e e n t e r n e x t e n t r y a a l l show switch purpose used to display information about the switch. Syntax show switch description this command displays information about t...

  • Page 20

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 16 d n s r s t a t u s : d i s a b l e d v r r p : d i s a b l e d d v m r p : d i s a b l e d p i m : d i s a b l e d r i p : d i s a b l e d o s p f : d i s a b l e d t e l n e t : e n a b l e d ( t c p 2 3 ) w e b : e n a b l e d ...

  • Page 21

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 17 d e s - 6 5 0 0 : 4 # show serial_port purpose used to display the current serial port settings. Syntax show serial_port description this command displays the current serial port settings. Parameters none. Restrictions none. Examp...

  • Page 22

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 18 example usage: to configure the baud rate: d e s - 6 5 0 0 : 4 # c o n f i g s e r i a l _ p o r t b a u d _ r a t e 1 1 5 2 0 0 c o m m a n d : c o n f i g s e r i a l _ p o r t b a u d _ r a t e 1 1 5 2 0 0 s u c c e s s . D e s...

  • Page 23

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 19 d e s - 6 5 0 0 : 4 # d i s a b l e c l i p a g i n g c o m m a n d : d i s a b l e c l i p a g i n g s u c c e s s . D e s - 6 5 0 0 : 4 # enable telnet purpose used to enable communication with and management of the switch using...

  • Page 24

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 20 d e s - 6 5 0 0 : 4 # enable web purpose used to enable the http-based management software on the switch. Syntax enable web description this command is used to enable the web-based management software on the switch. The user can s...

  • Page 25

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 21 save purpose used to save changes in the switch’s configuration to non-volatile ram. Syntax save description this command is used to enter the current switch configuration into non-volatile ram. The saved switch configuration will...

  • Page 27

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 23 logout purpose used to log out a user from the switch’s console. Syntax logout description this command terminates the current user’s session on the switch’s console. Parameters none. Restrictions none. Example usage: to terminate...

  • Page 28

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 24 config greeting_message purpose used to configure the greeting message or banner for the opening screen of the command line interface. Syntax config greeting_message {default} description this command is used to configure the gree...

  • Page 29

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 25 d e s - 6 5 0 0 : 4 # show greeting_message purpose used to view the currently configured greeting message configured on the switch. Syntax show greeting_message description this command is used to view the currently configured gr...

  • Page 30

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 26 des-6500:4# console_swap unit 5 command: console_swap unit 5 console swap to unit 5 ---> press "enter" des-6507 command line interface firmware: build 3.60.Bxx copyright(c) 2004-2007 d-link corporation. All rights reserved. Userna...

  • Page 33

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 29 to display the configuration of all ports on a standalone switch: d e s - 6 5 0 0 : 4 # s h o w p o r t s c o m m a n d : s h o w p o r t s p o r t p o r t s e t t i n g s c o n n e c t i o n a d d r e s s s t a t e s p e e d / d ...

  • Page 34

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 30 d e s - 6 5 0 0 : 4 # s h o w p o r t s 1 : 1 d e s c r i p t i o n c o m m a n d : s h o w p o r t s 1 : 1 d e s c r i p t i o n p o r t p o r t s e t t i n g s c o n n e c t i o n a d d r e s t a t e s p e e d / d u p l e x / f ...

  • Page 36

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 32 to configure the port security: d e s - 6 5 0 0 : 4 # c o n f i g p o r t _ s e c u r i t y p o r t s 5 : 1 - 5 : 5 a d m i n _ s t a t e e n a b l e d m a x _ l e a r n i n g _ a d d r 5 l o c k _ a d d r e s s _ m o d e d e l e ...

  • Page 37

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 33 d e s - 6 5 0 0 : 4 # s h o w p o r t _ s e c u r i t y p o r t s 1 : 1 - 1 : 1 0 c o m m a n d : s h o w p o r t _ s e c u r i t y p o r t s 1 : 1 - 1 : 1 0 p o r t # a d m i n s t a t e m a x . L e a r n i n g a d d r . L o c k ...

  • Page 38

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 34 d e s - 6 5 0 0 : 4 # d e l e t e p o r t _ s e c u r i t y _ e n t r y _ v l a n _ n a m e d e f a u l t p o r t 1 : 1 m a c _ a d d r e s s 0 0 - 0 c - 6 e - 7 3 - 2 b - c 9 c o m m a n d : d e l e t e p o r t _ s e c u r i t y ...

  • Page 39: (Snmp)

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 35 7 n etwork m anagement (snmp) c ommands the network management commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. The xstack des-6500 support the simple network ...

  • Page 41

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 37 create snmp user source. Encryption  scrambles the contents of messages to prevent it from being viewed by an unauthorized source. Parameters  an alphanumeric name of up to 32 characters that will identify the new snmp user.  a...

  • Page 42

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 38 create snmp user - enter an alphanumeric key string of exactly 32 characters, in hex form, that will be used to encrypt the contents of messages the host sends to the agent. None – adding this parameter will add no encryption. Res...

  • Page 43

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 39 show snmp user purpose used to display information about each snmp username in the snmp group username table. Syntax show snmp user description the show snmp user command displays information about each snmp username in the snmp g...

  • Page 44

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 40 d e s - 6 5 0 0 : 4 # c r e a t e s n m p v i e w d l i n k v i e w 1 . 3 . 6 v i e w _ t y p e i n c l u d e d c o m m a n d : c r e a t e s n m p v i e w d l i n k v i e w 1 . 3 . 6 v i e w _ t y p e i n c l u d e d s u c c e s ...

  • Page 45

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 41 d e s - 6 5 0 0 : 4 # s h o w s n m p v i e w c o m m a n d : s h o w s n m p v i e w v a c m v i e w t a b l e s e t t i n g s v i e w n a m e s u b t r e e v i e w t y p e - - - - - - - - - - - - - - - - - - - - - - - - - - - - ...

  • Page 46

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 42 create snmp community allowed to access on the switch. Read_only  specifies that snmp community members using the community string created with this command can only read the contents of the mibs on the switch. Read_write  speci...

  • Page 47

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 43 show snmp community purpose used to display snmp community strings configured on the switch. Syntax show snmp community {} description the show snmp community command is used to display snmp community strings that are configured o...

  • Page 48

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 44 s u c c e s s . D e s - 6 5 0 0 : 4 # show snmp engineid purpose used to display the identification of the snmp engine on the switch. Syntax show snmp engineid description the show snmp engineidcommand displays the identification ...

  • Page 49

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 45 create snmp group  authentication  determines if an snmp message is from a valid source.  encryption  scrambles the contents of messages to prevent it being viewed by an unauthorized source. Noauth_nopriv  specifies that ther...

  • Page 50

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 46 to delete the snmp group named “sg1”. D e s - 6 5 0 0 : 4 # d e l e t e s n m p g r o u p s g 1 c o m m a n d : d e l e t e s n m p g r o u p s g 1 s u c c e s s . D e s - 6 5 0 0 : 4 # show snmp groups purpose used to display the...

  • Page 51

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 47 r e a d v i e w n a m e : r e a d v i e w w r i t e v i e w n a m e : w r i t e v i e w n o t i f y v i e w n a m e : n o t i f y v i e w s e c u r i t y m o d e l : s n m p v 3 s e c u r i t y l e v e l : a u t h n o p r i v g r ...

  • Page 52

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 48 g r o u p n a m e : w r i t e g r o u p r e a d v i e w n a m e : c o m m u n i t y v i e w w r i t e v i e w n a m e : c o m m u n i t y v i e w n o t i f y v i e w n a m e : c o m m u n i t y v i e w s e c u r i t y m o d e l : ...

  • Page 53

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 49 create snmp host being viewed by an unauthorized source. Noauth_nopriv  specifies that there will be no authorization and no encryption of packets sent between the switch and a remote snmp manager. Auth_nopriv  specifies that au...

  • Page 54

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 50 s u c c e s s . D e s - 6 5 0 0 : 4 # show snmp host purpose used to display the recipient of snmp traps generated by the switch’s snmp agent. Syntax show snmp host {} description the show snmp host command is used to display the ...

  • Page 55

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 51 create trusted_host restrictions only administrator-level users can issue this command. Example usage: to create the trusted host: d e s - 6 5 0 0 : 4 # c r e a t e t r u s t e d _ h o s t 1 0 . 4 8 . 7 4 . 1 2 1 c o m m a n d : c...

  • Page 56

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 52 delete trusted_host description this command is used to delete a trusted host entry made using the create trusted_host command above. Parameters  the ip address of the trusted host. Restrictions only administrator-level users can...

  • Page 57

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 53 to turn on snmp authentication trap support: d e s - 6 5 0 0 : 4 # e n a b l e s n m p a u t h e n t i c a t e _ t r a p s c o m m a n d : e n a b l e s n m p a u t h e n t i c a t e _ t r a p s s u c c e s s . D e s - 6 5 0 0 : 4...

  • Page 58

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 54 d e s - 6 5 0 0 : 4 # disable snmp authenticate_traps purpose used to disable snmp authentication trap support. Syntax disable snmp authenticate_traps description this command is used to disable snmp authentication support on the ...

  • Page 59

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 55 d e s - 6 5 0 0 : 4 # c o n f i g s n m p s y s t e m _ c o n t a c t m i s d e p a r t m e n t i i c o m m a n d : c o n f i g s n m p s y s t e m _ c o n t a c t m i s d e p a r t m e n t i i s u c c e s s . D e s - 6 5 0 0 : 4 ...

  • Page 60

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 56 d e s - 6 5 0 0 : 4 # c o n f i g s n m p s y s t e m _ n a m e d e s - 6 5 0 0 c h a s s i s s w i t c h c o m m a n d : c o n f i g s n m p s y s t e m _ n a m e d e s - 6 5 0 0 c h a s s i s s w i t c h s u c c e s s . D e s - ...

  • Page 61

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 57 d e s - 6 5 0 0 : 4 # d i s a b l e r m o n c o m m a n d : d i s a b l e r m o n s u c c e s s . D e s - 6 5 0 0 : 4 #.

  • Page 62

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 58 8 s witch u tility c ommands the switch utility commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters download [firmware_fromtftp unit [all_line_...

  • Page 63

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 59 download  increment  allows the download of a partial switch configuration file. This allows a file to be downloaded that will change only the switch parameters explicitly stated in the configuration file. All other switch param...

  • Page 65

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 61 ping be specified. The default is 1 second. Pinging an ip address without the times parameter will ping the target device an infinite amount of times. Restrictions none. Example usage: to ping the ip address 10.48.74.121 four time...

  • Page 67

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 63 enable autoconfig (same as: config ipif system dhcp). The dhcp server must have the tftp server ip address and configuration file name, and be configured to deliver this information in the data field of the dhcp reply packet. The ...

  • Page 68

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 64 c o m m a n d : d o w n l o a d c o n f i g u r a t i o n 1 0 . 4 1 . 4 4 . 4 4 c : \ c f g \ s e t t i n g . T x t c o n n e c t i n g t o s e r v e r . . . . . . . . . . . . . . . . . . . D o n e . D o w n l o a d c o n f i g u ...

  • Page 69

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 65 show autoconfig purpose used to display the current autoconfig status of the switch. Syntax show autoconfig description this will list the current status of the autoconfiguration function. Parameters none. Restrictions none. Examp...

  • Page 70

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 66 9 n etwork m onitoring c ommands the network monitoring commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show packet ports show error ports ...

  • Page 71

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 67 show packet ports relevant to the type of packets and table c is relevant to the type of frame associated with these packets. Parameters  specifies a range of ports to be displayed. The port list is specified by listing the lowes...

  • Page 72

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 68 show error ports description this command will display all of the packet error statistics collected and logged by the switch for a given port list. Parameters  specifies a range of ports to be displayed. The port list is specifie...

  • Page 73

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 69 to display the current cpu utilization: d e s - 6 5 0 0 : 4 # s h o w u t i l i z a t i o n c p u c o m m a n d : s h o w u t i l i z a t i o n c p u c p u u t i l i z a t i o n : - - - - - - - - - - - - - - - - - - - - - - - - - ...

  • Page 74

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 70 show stack_information purpose used to display the stack information table. Syntax show stack_information description this command displays stack information. Parameters none. Restrictions none. Usage example: to display stack inf...

  • Page 75

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 71 clear counters purpose used to clear the switch’s statistics counters. Syntax clear counters {ports } description this command will clear the counters used by the switch to compile statistics. Parameters ports  specifies a range ...

  • Page 76

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 72 show log purpose used to display the switch history log. Syntax show log {index } description this command will display the contents of the switch’s history log. Parameters index  enter a value that corresponds to an entry made i...

  • Page 77

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 73 disable syslog purpose used to disable the system log function on the switch. Syntax disable syslog description the disable syslog command disables the system log function on the switch. After disabling, syslog entries will no lon...

  • Page 79

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 75 create syslog host 20 local use 4 (local4) 21 local use 5 (local5) 22 local use 6 (local6) 23 local use 7 (local7) local0  specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from th...

  • Page 81

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 77 config syslog host 20 local use 4 (local4) 21 local use 5 (local5) 22 local use 6 (local6) 23 local use 7 (local7) local0  specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from th...

  • Page 82

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 78 s u c c e s s . D e s - 6 5 0 0 : 4 # c o n f i g s y s l o g h o s t 1 i p a d d r e s s 1 0 . 4 4 . 6 7 . 8 c o m m a n d : c o n f i g s y s l o g h o s t 1 i p a d d r e s s 1 0 . 4 4 . 6 7 . 8 s u c c e s s . D e s - 6 5 0 0 ...

  • Page 83

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 79 config syslog host all been explicitly assigned a facility may use any of the "local use" facilities or they may use the "user-level" facility. Those facilities that have been designated are shown in the following: bold font indic...

  • Page 84

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 80 example usage: to configure all syslog hosts: d e s - 6 5 0 0 : 4 # c o n f i g s y s l o g h o s t a l l s e v e r i t y a l l c o m m a n d : c o n f i g s y s l o g h o s t a l l s e v e r i t y a l l s u c c e s s . D e s - 6 ...

  • Page 85

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 81 d e s - 6 5 0 0 : 4 # d e l e t e s y s l o g h o s t 4 c o m m a n d : d e l e t e s y s l o g h o s t 4 s u c c e s s . D e s - 6 5 0 0 : 4 # show syslog host purpose used to display the syslog hosts currently configured on the ...

  • Page 86

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 82 config system_severity to the snmp agent (trap), the switch’s log or both. Events occurring on the switch are separated into three main categories. Information – events classified as information are basic events occurring on the s...

  • Page 87

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 83 show system_severity purpose to display the current severity settings set on the switch. Syntax show system_severity description this command is used to view the severity settings that have been implemented on the switch using the...

  • Page 88: (Mstp)

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 84 10 m ultiple s panning t ree p rotocol (mstp) c ommands this switch supports three versions of the spanning tree protocol; 802.1d stp, 802.1w rapid stp and 802.1s mstp. Multiple spanning tree protocol, or mstp, is a standard defin...

  • Page 90

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 86 d e s - 6 5 0 0 : 4 # d i s a b l e s t p c o m m a n d : d i s a b l e s t p s u c c e s s . D e s - 6 5 0 0 : 4 # config stp version purpose used to globally set the version of stp on the switch. Syntax config stp version [mstp ...

  • Page 91

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 87 config stp has still not been received from the root bridge, the switch will start sending its own bpdu to all other switches for permission to become the root bridge. If it turns out that your switch has the lowest bridge identif...

  • Page 94

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 90 d e s - 6 5 0 0 : 4 # c r e a t e s t p i n s t a n c e _ i d 2 c o m m a n d : c r e a t e s t p i n s t a n c e _ i d 2 s u c c e s s . D e s - 6 5 0 0 : 4 # config stp instance_id purpose used to add or delete an stp instance i...

  • Page 95

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 91 d e s - 6 5 0 0 : 4 # example usage: to remove vid 10 from instance id 2: d e s - 6 5 0 0 : 4 # c o n f i g s t p i n s t a n c e _ i d 2 r e m o v e _ v l a n 1 0 c o m m a n d : c o n f i g s t p i n s t a n c e _ i d 2 r e m o ...

  • Page 96

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 92 config stp priority instance_id - enter the value corresponding to the previously configured instance id of which to set the priority value. An instance id of 0 denotes the default instance_id (cist) internally set on the switch. ...

  • Page 98

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 94 i n s t a n c e _ i d 2 i n t e r n a l c o s t a u t o p r i o r i t y 1 6 s u c c e s s . D e s - 6 5 0 0 : 4 # show stp purpose used to display the switch’s current stp configuration. Syntax show stp description this command di...

  • Page 99

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 95 f o r w a r d d e l a y : 1 5 m a x a g e : 2 0 t x h o l d c o u n t : 3 f o r w a r d i n g b p d u : e n a b l e d l o o p b a c k d e t e c t i o n : e n a b l e d l b d r e c o v e r t i m e : 6 0 d e s - 6 5 0 0 : 4 # status...

  • Page 100

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 96 d e s - 6 5 0 0 : 4 # s h o w s t p p o r t s 1 : 1 - 1 : 9 c o m m a n d : s h o w s t p p o r t s 1 : 1 - 1 : 9 m s t p p o r t i n f o r m a t i o n - - - - - - - - - - - - - - - - - - - - - - p o r t i n d e x : 1 : 1 , h e l ...

  • Page 101

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 97 e x t e r n a l r o o t c o s t : 2 0 0 0 1 2 r e g i o n a l r o o t b r i d g e : 3 2 7 6 8 / 0 0 - 5 3 - 1 3 - 1 a - 3 3 - 2 4 i n t e r n a l r o o t c o s t : 0 d e s i g n a t e d b r i d g e : 3 2 7 6 8 / 0 0 - 5 0 - b a - ...

  • Page 102

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 98 11 f orwarding d atabase c ommands the forwarding database commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create fdb port create multicast...

  • Page 103

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 99 d e s - 6 5 0 0 : 4 # c r e a t e f d b d e f a u l t 0 0 - 0 0 - 0 0 - 0 0 - 0 1 - 0 2 p o r t 2 : 5 c o m m a n d : c r e a t e f d b d e f a u l t 0 0 - 0 0 - 0 0 - 0 0 - 0 1 - 0 2 p o r t 2 : 5 s u c c e s s . D e s - 6 5 0 0 ...

  • Page 105

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 101 s u c c e s s . D e s - 6 5 0 0 : 4 # config fdb aging_time purpose used to set the aging time of the forwarding database. Syntax config fdb aging_time description the aging time affects the learning process of the switch. Dynami...

  • Page 106

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 102 example usage: to delete a permanent fdb entry: d e s - 6 5 0 0 : 4 # d e l e t e f d b d e f a u l t 0 0 - 0 0 - 0 0 - 0 0 - 0 1 - 0 2 c o m m a n d : d e l e t e f d b d e f a u l t 0 0 - 0 0 - 0 0 - 0 0 - 0 1 - 0 2 s u c c e s...

  • Page 108

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 104 show fdb  the mac address that is present in the forwarding database table. Static  displays the static mac address entries. Aging_time  displays the aging time for the mac address forwarding database. Restrictions none. Examp...

  • Page 109

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 105 show ipfdb purpose used to display the current ip address forwarding database table. Syntax show ipfdb {} description this command will display the current contents of the switch’s ip forwarding database. Parameters - the user ma...

  • Page 110

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 106 12 b roadcast s torm c ontrol c ommands on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endst...

  • Page 111

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 107 config traffic control parameters  used to specify a range of ports to be configured for traffic control. The port list is specified by listing the lowest line card number and the beginning port number on that line card, separat...

  • Page 112

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 108 config traffic control broadcast packet counts sent from the switch’s chip to the traffic control function. These packet counts are the determining factor in deciding when incoming packets exceed the threshold value. Value 5-10 -...

  • Page 114

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 110 show traffic control between line card 1, port 3 and line card 2, port 4  in numerical order. Restrictions none. Example usage: to display traffic control setting: d e s - 6 5 0 0 : 4 # s h o w t r a f f i c c o n t r o l 1 : 1 ...

  • Page 115

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 111 13 q o s c ommands the xstack des-6500 supports 802.1p priority queuing. This switch has eight classes of service for each port on the switch, one of which is internal and not configurable to the user. These hardware classes of s...

  • Page 117

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 113 config bandwidth_control packets transmitted by the above specified ports.   specifies the packet limit, in mbps, that the above ports will be allowed to transmit. Restrictions only administrator-level users can issue this comm...

  • Page 118

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 114 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1 : 1 n o _ l i m i t 1 0 1 : 2 n o _ l i m i t 1 0 1 : 3 n o _ l i m i t 1 0 1 : 4 n o _ l i m i t 1 0 1 : 5 n o _ l i m i t 1 0 1 : 6 n...

  • Page 119

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 115 config scheduling method of forwarding packets — as long as the priority classes with a 0 in their max_packet field are empty. When a packet arrives in a priority class with a 0 in its max_packet field, this class will automatica...

  • Page 120

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 116 show scheduling purpose used to display the currently configured traffic scheduling on the switch. Syntax show scheduling description the show scheduling command displays the current configuration for the maximum number of packet...

  • Page 121

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 117 config 802.1p user_priority value priority queue --------- ------------------ 0 2 1 0 2 1 3 3 4 4 5 5 6 6 7 6 parameters  specifies which of the eight 802.1p priority tags (0 through 7) to map to one of the switch’s hardware pri...

  • Page 122

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 118 p r i o r i t y - 1 - > p r i o r i t y - 2 - > p r i o r i t y - 3 - > p r i o r i t y - 4 - > p r i o r i t y - 5 - > p r i o r i t y - 6 - > p r i o r i t y - 7 - > d e s - 6 5 0 0 : 4 # config 802.1p default_priority purpose ...

  • Page 123

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 119 show 802.1 default_priority purpose used to display the currently configured 802.1p priority tags that will be assigned to incoming, untagged packets before being forwarded to its destination. Syntax show 802.1p default_priority ...

  • Page 125

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 121 example usage: to show the scheduling mechanism: d e s - 6 5 0 0 : 4 # s h o w s c h e d u l i n g _ m e c h a n i s m c o m m a n d : s h o w s c h e d u l i n g _ m e c h a n i s m q o s s c h e d u l i n g _ m e c h a n i s m ...

  • Page 126

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 122 disable hol_prevention prevention. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to disable hol prevention: d e s - 6 5 0 0 : 4 # d i s a b l e h o l _ p r e v e n t i o n c o...

  • Page 128

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 124 example usage: to add the mirroring ports: d e s - 6 5 0 0 : 4 # c o n f i g m i r r o r p o r t 1 : 1 0 a d d s o u r c e p o r t s 1 : 1 - 1 : 5 b o t h c o m m a n d : c o n f i g m i r r o r p o r t 1 : 1 0 a d d s o u r c e ...

  • Page 129

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 125 d e s - 6 5 0 0 : 4 # c o n f i g m i r r o r p o r t 1 : 1 0 d e l e t e s o u r c e p o r t 1 : 1 - 1 : 5 b o t h c o m m a n d : c o n f i g m i r r o r 1 : 1 0 d e l e t e s o u r c e p o r t 1 : 1 - 1 : 5 b o t h s u c c e s...

  • Page 130

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 126 d e s - 6 5 0 0 : 4 # d i s a b l e m i r r o r c o m m a n d : d i s a b l e m i r r o r s u c c e s s . D e s - 6 5 0 0 : 4 # show mirror purpose used to show the current port mirroring configuration on the switch. Syntax show ...

  • Page 131: Vlan

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 127 15 vlan c ommands the xstack des-6500 incorporates protocol-based vlans. This standard, defined by the ieee 802.1v standard maps packets to protocol-defined vlans by examining the type octet within the packet header to discover t...

  • Page 132

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 128 create vlan tag  the vlan id of the vlan to be created. Allowed values = 2-4094 type – this parameter uses the type field of the packet header to determine the packet protocol and destination vlan. There are two main choices of ...

  • Page 133

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 129 create vlan information is defined by the systems network architecture (sna) 802.2 protocol.  protocol–snaethernet2 - using this parameter will instruct the switch to forward packets to this vlan if the tag in the packet header ...

  • Page 134

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 130 note: a specific protocol vlan and a user defined protocol vlan with the same encapsulation protocol cannot coexist and will result in a fail! Message. (for example, if a user creates an ethernet2 protocol vlan, the user can not ...

  • Page 136

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 132 config vlan delete  a range of ports to delete from the vlan. The port list is specified by listing the lowest line card number and the beginning port number on that line card, separated by a colon. Then the highest line card nu...

  • Page 137

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 133 config gvrp by the switch. Pvid – specifies the default vlan id associated with the port. Restrictions only administrator-level users can issue this command. Example usage: to set the ingress checking status, the sending and rece...

  • Page 138

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 134 disable gvrp configuration on the switch. Parameters none. Restrictions only administrator-level users can issue this command. Example usage: to disable the group vlan registration protocol (gvrp): d e s - 6 5 0 0 : 4 # d i s a b...

  • Page 139

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 135 f o r b i d d e n p o r t s : t o t a l e n t r i e s : 1 d e s - 6 5 0 0 : 4 # show gvrp purpose used to display the gvrp status for a port list on the switch. Syntax show gvrp {} description this command displays the gvrp statu...

  • Page 140

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 136 d e s - 6 5 0 0 : 4 # s h o w g v r p c o m m a n d : s h o w g v r p g l o b a l g v r p : d i s a b l e d p o r t p v i d g v r p i n g r e s s c h e c k i n g a c c e p t a b l e f r a m e t y p e - - - - - - - - - - - - - - -...

  • Page 141

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 137 16 l ink a ggregation c ommands the link aggregation commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create link_aggregation group_id {typ...

  • Page 142

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 138 d e s - 6 5 0 0 : 4 # c r e a t e l i n k _ a g g r e g a t i o n g r o u p _ i d 1 c o m m a n d : c r e a t e l i n k _ a g g r e g a t i o n g r o u p _ i d 1 s u c c e s s . D e s - 6 5 0 0 : 4 # delete link_aggregation group...

  • Page 143

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 139 parameters group _id  specifies the group id. The switch allows up to 32 link aggregation groups to be configured. The group number identifies each of the groups. Master_port  master port id. Specifies which port (by port numbe...

  • Page 144

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 140 d e s - 6 5 0 0 : 4 # c o n f i g l i n k _ a g g r e g a t i o n g r o u p _ i d 1 m a s t e r _ p o r t 1 : 5 p o r t s 1 : 5 - 1 : 7 , 1 : 9 c o m m a n d : c o n f i g l i n k _ a g g r e g a t i o n g r o u p _ i d 1 m a s t...

  • Page 146

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 142 config lacp_port mode – select the mode to determine if lacp ports will initially send lacp control frames.  active – active lacp ports are capable of processing and sending lacp control frames. This allows lacp compliant device...

  • Page 147

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 143 d e s - 6 5 0 0 : 4 # s h o w l a c p _ p o r t 1 : 1 - 1 : 8 c o m m a n d : s h o w l a c p _ p o r t 1 : 1 - 1 : 8 p o r t a c t i v i t y - - - - - - - - - - - - - - 1 : 1 a c t i v e 1 : 2 a c t i v e 1 : 3 a c t i v e 1 : 4...

  • Page 148

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 144 17 ip c ommands (i ncluding ip m ultinetting ) ip multinetting is a function that allows multiple ip interfaces to be assigned to the same vlan. This is beneficial to the administrator when the number of ips on the original inter...

  • Page 149

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 145 create ipif (10.1.2.3/8).  the name of the vlan that will be associated with the above ip interface. Secondary – enter this parameter if this configured ip interface is to be a secondary ip interface of the vlan previously speci...

  • Page 150

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 146 config ipif vlan  the name of the vlan corresponding to the previously created ip interface. If a primary and secondary ip interface are configured for the same vlan (subnet), the user cannot change the vlan of the ip interface....

  • Page 152

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 148 show ipif purpose used to display the configuration of an ip interface on the switch. Syntax show ipif {} description this command will display the configuration of an ip interface on the switch. Parameters  the name created for...

  • Page 153: Igmp

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 149 18 igmp c ommands (i ncluding igmp v 3) igmp or internet group management protocol is a protocol implemented by systems utilizing ipv4 to collect the membership information needed by the multicast routing protocol through various...

  • Page 154

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 150 config igmp parameters  the name of the ip interface for which to configure igmp. All  specifies all the ip interfaces on the switch. Version  select the igmp version number. Query_interval  the time in seconds between genera...

  • Page 155

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 151 d e s - 6 5 0 0 : 4 # s h o w i g m p c o m m a n d : s h o w i g m p i g m p i n t e r f a c e c o n f i g u r a t i o n s i n t e r f a c e i p a d d r e s s / n e t m a s k v e r - q u e r y m a x i m u m r o b u s t - l a s t...

  • Page 156

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 152 d e s - 6 5 0 0 : 4 # example usage: to view details regarding the igmp group: d e s - 6 5 0 0 : 4 # s h o w i g m p g r o u p g r o u p 2 2 4 . 0 . 1 . 1 i p i f s y s t e m c o m m a n d : s h o w i g m p g r o u p g r o u p 2 ...

  • Page 158

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 154 example usage: to configure igmp snooping: d e s - 6 5 0 0 : 4 # c o n f i g i g m p _ s n o o p i n g d e f a u l t h o s t _ t i m e o u t 2 5 0 s t a t e e n a b l e d c o m m a n d : c o n f i g i g m p _ s n o o p i n g d e ...

  • Page 159

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 155 config igmp_snooping querier  by default, the robustness variable is set to 2. You might want to increase this value if you expect a subnet to be lossy. Last_member_query_interval  the maximum amount of time between group-speci...

  • Page 160

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 156 disable igmp_snooping purpose used to enable igmp snooping on the switch. Syntax disable igmp_snooping {forward_mcrouter_only} description this command disables igmp snooping on the switch. Igmp snooping can be disabled only if i...

  • Page 161

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 157 to set up static router ports: d e s - 6 5 0 0 : 4 # c o n f i g r o u t e r _ p o r t s d e f a u l t a d d 2 : 1 - 2 : 1 0 c o m m a n d : c o n f i g r o u t e r _ p o r t s d e f a u l t a d d 2 : 1 - 2 : 1 0 s u c c e s s . ...

  • Page 163

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 159 show igmp_snooping snooping configuration. Restrictions none. Example usage: to show igmp snooping: d e s - 6 5 0 0 : 4 # s h o w i g m p _ s n o o p i n g c o m m a n d : s h o w i g m p _ s n o o p i n g i g m p s n o o p i n g...

  • Page 164

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 160 v l a n n a m e : d e f a u l t m u l t i c a s t g r o u p : 2 2 4 . 0 . 0 . 2 m a c a d d r e s s : 0 1 - 0 0 - 5 e - 0 0 - 0 0 - 0 2 r e p o r t s : 1 p o r t m e m b e r : 1 : 1 6 , 2 : 7 v l a n n a m e : d e f a u l t m u l...

  • Page 165

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 161 show igmp_snooping forwarding purpose used to display the igmp snooping forwarding table entries on the switch. Syntax show igmp_snooping forwarding {vlan } description this command will display the current igmp snooping forwardi...

  • Page 166

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 162 20 a ccess a uthentication c ontrol c ommands the access authentication control commands allows secure access to the switch using the tacacs / xtacacs / tacacs+ and radius protocols. When a user logs in to the switch or tries to ...

  • Page 167

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 163 the access authentication control commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters enable authen_policy disable authen_policy show authen_p...

  • Page 168

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 164 command parameters config authen parameter attempt show authen parameter enable admin config admin local_enable each command is listed, in detail, in the following sections. Enable authen_policy purpose used to enable system acce...

  • Page 169

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 165 d e s - 6 5 0 0 : 4 # d i s a b l e a u t h e n _ p o l i c y c o m m a n d : d i s a b l e a u t h e n _ p o l i c y s u c c e s s . D e s - 6 5 0 0 : 4 # show authen_policy purpose used to display the system access authenticati...

  • Page 170

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 166 d e s - 6 5 0 0 : 4 # c r e a t e a u t h e n _ l o g i n m e t h o d _ l i s t _ n a m e t r i n i t y c o m m a n d : c r e a t e a u t h e n _ l o g i n m e t h o d _ l i s t _ n a m e t r i n i t y s u c c e s s . D e s - 6 5...

  • Page 171

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 167 config authen_login server listed in the server group list.  server_group - adding this parameter will require the user to be authenticated using a user-defined server group previously configured on the switch.  local - adding ...

  • Page 172

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 168 s u c c e s s . D e s - 6 5 0 0 : 4 # example usage: to configure the default method list with authentication methods xtacacs, tacacs+ and local, in that order: d e s - 6 5 0 0 : 4 # c o n f i g a u t h e n _ l o g i n d e f a u ...

  • Page 173

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 169 show authen_login  method list name – the name of a previously configured method list name.  priority – defines which order the method list protocols will be queried for authentication when a user attempts to log on to the swit...

  • Page 174

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 170 create authen_enable method_list_name privileges to administrator level privileges using authentication methods on the switch. Once a user acquires normal user level privileges on the switch, he or she must be authenticated by a ...

  • Page 175

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 171 config authen_enable a combination of up to four (4) of the following authentication methods:  tacacs – adding this parameter will require the user to be authenticated using the tacacs protocol from the remote tacacs server host...

  • Page 176

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 172 example usage: to configure the user defined method list “trinity” with authentication methods tacacs, xtacacs and local, in that order. D e s - 6 5 0 0 : 4 # c o n f i g a u t h e n _ e n a b l e m e t h o d _ l i s t _ n a m e ...

  • Page 178

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 174 d e f a u l t 1 t a c a c s + b u i l t - i n g r o u p 2 l o c a l k e y w o r d t o t a l e n t r i e s : 2 d e s - 6 5 0 0 : 4 # config authen application purpose used to configure various applications on the switch for authen...

  • Page 179

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 175 d e f a u l t s u c c e s s . D e s - 6 5 0 0 : 4 # show authen application purpose used to display authentication methods for the various applications on the switch. Syntax show authen application description this command will d...

  • Page 180

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 176 create authen server_host authentication protocol can be run on the same physical server host but, remember that tacacs/xtacacs/tacacs+ and radius are separate entities and are not compatible with each other. The maximum supporte...

  • Page 182

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 178 to configure a tacacs authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit count of 4. D e s - 6 5 0 0 : 4 # c o n f i g a u t h e n s e r v e r _ h o s t 1 0 . 1 . 1 . 1 2 1 p r o t o...

  • Page 183

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 179 show authen server_host purpose used to view a user-defined authentication server host. Syntax show authen server_host description this command is used to view user-defined authentication server hosts previously created on the sw...

  • Page 184

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 180 create authen server_group purpose used to create a user-defined authentication server group. Syntax create authen server_group description this command will create an authentication server group. A server group is a technique us...

  • Page 185

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 181 config authen server_group utilizing the tacacs+ protocol may be added to this group.  radius - use this parameter to utilize the built-in radius server protocol on the switch. Only server hosts utilizing the radius protocol may...

  • Page 186

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 182 to delete the server group “group_1”: d e s - 6 5 0 0 : 4 # d e l e t e s e r v e r _ g r o u p g r o u p _ 1 c o m m a n d : d e l e t e s e r v e r _ g r o u p g r o u p _ 1 s u c c e s s . D e s - 6 5 0 0 : 4 # show authen ser...

  • Page 187

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 183 config authen parameter response_timeout purpose used to configure the amount of time the switch will wait for a user to enter authentication before timing out. Syntax config authen parameter response_timeout description this com...

  • Page 188

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 184 config authen parameter attempt disconnected from the switch. Parameters parameter attempt - set the maximum number of attempts the user may try to become authenticated by the switch, before being locked out. The default setting ...

  • Page 189

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 185 enable admin purpose used to promote user level privileges to administrator level privileges. Syntax enable admin description this command is for users who have logged on to the switch on the normal user level, to become promoted...

  • Page 190

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 186 d e s - 6 5 0 0 : 4 # c o n f i g a d m i n l o c a l _ e n a b l e c o m m a n d : c o n f i g a d m i n l o c a l _ e n a b l e e n t e r t h e o l d p a s s w o r d : * * * * * * e n t e r t h e c a s e - s e n s i t i v e n e...

  • Page 191: Ssh

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 187 21 ssh c ommands the steps required to use the ssh protocol for secure communication between a remote pc (the ssh client) and the switch (the ssh server), are as follows:  create a user account with admin-level access using the ...

  • Page 192

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 188 enable ssh purpose used to enable ssh. Syntax enable ssh description this command is used to enable ssh on the switch. Parameters none. Restrictions only administrator-level users can issue this command. Usage example: to enable ...

  • Page 193

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 189 config ssh authmode parameters password – this parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the switch. Publickey - this parameter may be chosen if the administrat...

  • Page 195

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 191 show ssh server restrictions none. Usage example: to display the ssh server: d e s - 6 5 0 0 : 4 # s h o w s s h s e r v e r c o m m a n d : s h o w s s h s e r v e r t h e s s h s e r v e r c o n f i g u r a t i o n : m a x s e ...

  • Page 196

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 192 config ssh user  publickey – this parameter should be chosen to use the publickey on a ssh server for authentication.  none – this parameter should be chosen to employ no security authentication. Restrictions only administrator...

  • Page 197

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 193 note: to configure the ssh user, the administrator must create a user account on the switch. For information concerning configuring a user account, please see the section of this manual entitled basic switch commands and then the...

  • Page 198

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 194 to configure ssh algorithm: d e s - 6 5 0 0 : 4 # c o n f i g s s h a l g o r i t h m b l o w f i s h e n a b l e c o m m a n d : c o n f i g s s h a l g o r i t h m b l o w f i s h e n a b l e s u c c e s s . D e s - 6 5 0 0 : 4...

  • Page 199: Ssl

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 195 22 ssl c ommands secure sockets layer or ssl is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security funct...

  • Page 201

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 197 note: enabling the ssl function on the switch will disable the port for the web manager (port 80). To log on to the web based manager, the entry of your url must begin with https://. (ex. Https://10.90.90.90) disable ssl purpose ...

  • Page 202

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 198 d e s - 6 5 0 0 : 4 # d i s a b l e s s l c i p h e r s u i t e r s a _ e x p o r t _ w i t h _ r c 4 _ 4 0 _ m d 5 c o m m a n d : d i s a b l e s s l c i p h e r s u i t e r s a _ e x p o r t _ w i t h _ r c 4 _ 4 0 _ m d 5 s u...

  • Page 203

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 199 to view the ssl cache timeout on the switch: d e s - 6 5 0 0 : 4 # s h o w s s l c a c h e t i m e o u t c o m m a n d : s h o w s s l c a c h e t i m e o u t c a c h e t i m e o u t i s 6 0 0 s e c o n d ( s ) . D e s - 6 5 0 0 ...

  • Page 204

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 200 download certificate purpose used to download a certificate file for the ssl function on the switch. Syntax download certificate certfilename keyfilename description this command is used to download a certificate file for the ssl...

  • Page 205: 802.1X

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 201 23 802.1x c ommands the xstack des-6500 implement the server-side of the ieee 802.1x port-based and mac-based network access control. This mechanism is intended to allow only authorized users, or other network devices, access to ...

  • Page 206

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 202 each command is listed, in detail, in the following sections. Enable 802.1x purpose used to enable the 802.1x server on the switch. Syntax enable 802.1x description the enable 802.1x command enables the 802.1x network access cont...

  • Page 207

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 203 create 802.1x user purpose used to create a new 802.1x user. Syntax create 802.1x user description the create 802.1x user command is used to create new 802.1x users. Parameters  a username of up to 15 alphanumeric characters in ...

  • Page 208

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 204 t o t a l e n t r i e s : 1 d e s - 6 5 0 0 : 4 # delete 802.1x user purpose used to delete an 802.1x user account on the switch. Syntax delete 802.1x user description the delete 802.1x user command is used to delete the 802.1x p...

  • Page 209

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 205 show 802.1x auth_configuration and transmitting directions, or just the receiving direction. Openctldir: both/in  shows whether a controlled port that is unauthorized will exert control over communication in both receiving and t...

  • Page 210

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 206 a d m i n c r l d i r : b o t h o p e n c r l d i r : b o t h p o r t c o n t r o l : a u t o q u i e t p e r i o d : 6 0 s e c t x p e r i o d : 3 0 s e c s u p p t i m e o u t : 3 0 s e c s e r v e r t i m e o u t : 3 0 s e c m...

  • Page 211

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 207 d e s - 6 5 0 0 : 4 # s h o w 8 0 2 . 1 x a u t h _ s t a t e c o m m a n d : s h o w 8 0 2 . 1 x a u t h _ s t a t e p o r t a u t h p a e s t a t e b a c k e n d s t a t e p o r t s t a t u s - - - - - - - - - - - - - - - - - -...

  • Page 212

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 208 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 c t r l + c e s c q q u i t s p a c e n n e x t p a g e e n t e r n e x t e n t r y a a l l config 802.1x auth_mode purpose used to configure the 802.1x authentication mode on the switch....

  • Page 213

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 209 config 802.1x capability ports none] description theconfig 802.1xcommand has two capabilities that can be set for each port, authenticator and none. Parameters  specifies a range of ports. The port list is specified by listing t...

  • Page 214

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 210 config 802.1x auth_parameter and the highest port number of the range (also separated by a colon) are specified. The beginning and end of the port list range are separated by a dash. For example, 1:3 specifies line card number 1,...

  • Page 216

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 212 config 802.1x init ports. Mac address approved for initialization can then be specified.  ports  specifies a range of ports. The port list is specified by listing the lowest line card number and the beginning port number on tha...

  • Page 217

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 213 config 802.1x reauth ports mac-based - this instructs the switch to re-authorize 802.1x function based on a specific mac address. Ports approved for re-authorization can then be specified.  ports  specifies a range of ports. Th...

  • Page 219

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 215 example usage: to delete previously configured radius server communication settings: d e s - 6 5 0 0 : 4 # c o n f i g r a d i u s d e l e t e 1 c o m m a n d : c o n f i g r a d i u s d e l e t e 1 s u c c e s s . D e s - 6 5 0 ...

  • Page 220

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 216 show radius purpose used to display the current radius configurations on the switch. Syntax show radius description the show radius command is used to display the current radius configurations on the switch. Parameters none. Rest...

  • Page 221

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 217 r a d i u s a c c t c l i e n t i n v a l i d s e r v e r a d d r e s s e s 0 r a d i u s a c c t c l i e n t i d e n t i f i e r d - l i n k r a d i u s a u t h s e r v e r e n t r y = = > r a d i u s a c c s e r v e r i n d e x...

  • Page 222

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 218 r a d i u s a u t h s e r v e r e n t r y = = > r a d i u s a u t h s e r v e r i n d e x : 0 r a d i u s a u t h s e r v e r a d d r e s s 0 . 0 . 0 . 0 r a d i u s a u t h c l i e n t s e r v e r p o r t n u m b e r 0 r a d i u...

  • Page 223

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 219 p o r t n u m b e r : 1 : 1 6 e n t e r s c o n n e c t i n g 0 e a p l o g o f f s w h i l e c o n n e c t i n g 0 e n t e r s a u t h e n t i c a t i n g 0 s u c c e s s w h i l e a u t h e n t i c a t i n g 0 t i m e o u t s w...

  • Page 224

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 220 d e s - 6 5 0 0 : 4 # s h o w a u t h _ s e s s i o n _ s t a t i s t i c s p o r t s 1 : 1 6 c o m m a n d : s h o w a u t h _ s e s s i o n _ s t a t i s t i c s p o r t s 1 : 1 6 p o r t n u m b e r : 1 : 1 6 s e s s i o n o c...

  • Page 225

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 221 d e s - 6 5 0 0 : 4 # s h o w a u t h _ s t a t i s t i c s p o r t s 1 : 1 6 c o m m a n d : s h o w a u t h _ s t a t i s t i c s p o r t s 1 : 1 6 p o r t n u m b e r : 1 : 1 6 e a p o l f r a m e s r x 0 e a p o l f r a m e s...

  • Page 226: (Acl)

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 222 24 a ccess c ontrol l ist (acl) c ommands (i ncluding cpu) the xstack des-6500 implement access control lists that enable the switch to deny network access to specific devices or device groups based on ip settings, mac address, p...

  • Page 228

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 224 due to a chipset limitation, the switch supports a maximum of 8 access profiles. The rules used to define the access profiles are limited to a total of 9600 rules for the switch, depending on line cards installed. There is an add...

  • Page 230

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 226 create access_profile (for ethernet) purpose used to create an access profile on the switch by examining the ethernet part of the packet header. Masks entered can be combined with the values the switch finds in the specified fram...

  • Page 232

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 228 config access_profile profile_id (for ethernet) the criteria specified previously in this command, before forwarding it on to the specified cos queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to ...

  • Page 233

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 229 create access_profile (ip) special emphasis on one or more of the following: vlan  specifies a vlan mask. Source_ip_mask  specifies an ip address mask for the source ip address. Destination_ip_mask  specifies an ip address mas...

  • Page 234

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 230 d e s - 6 5 0 0 : 4 # c r e a t e a c c e s s _ p r o f i l e i p p r o t o c o l _ i d p r o f i l e _ i d 2 c o m m a n d : c r e a t e a c c e s s _ p r o f i l e i p p r o t o c o l _ i d p r o f i l e _ i d 2 s u c c e s s ....

  • Page 235

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 231 config access_profile profile_id (ip) code  specifies that the access profile will apply to this icmp code defined by a value between 0 and 255. Igmp  specifies that the switch will examine the internet group management protoco...

  • Page 236

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 232 config access_profile profile_id (ip) cos queue specified previously by the user. {replace_priority}  enter this parameter to re-write the 802.1p default priority of a packet to the value entered in the priority field, which mee...

  • Page 237

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 233 create access_profile (packet content mask) parameters profile_id - specifies an index number between 1 and 8 that will identify the access profile being created with this command. Packet_content_mask – specifies that the switch ...

  • Page 238

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 234 config access_profile profile_id (packet content mask) parameters profile_id - enter an integer between 1 and 8 that is used to identify the access profile that will be configured with this command. This value is assigned to the ...

  • Page 239

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 235 config access_profile profile_id (packet content mask) delete access_id  use this command to delete a specific rule from the packet content mask profile. Up to 65535 rules may be specified for the packet content access profile. ...

  • Page 240

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 236 create access_profile (ipv6) for the destination ipv6 address. Restrictions only administrator-level users can issue this command. Example usage: to create an access profile based on ipv6 classification: d e s - 6 5 0 0 : 4 # c r...

  • Page 241

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 237 config access_profile profile_id (ipv6) destination_ipv6 - specifies an ip address mask for the destination ipv6 address. Port - the access profile for ethernet may be defined for each port on the switch. The port list is specifi...

  • Page 242

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 238 delete access_profile purpose used to delete a previously created access profile. Syntax delete access_profile profile_id description the delete access_profilecommand is used to delete a previously created access profile on the s...

  • Page 243

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 239 a c c e s s p r o f i l e i d : 1 t y p e : e t h e r n e t = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = m a s k o p t i o n : v l a n...

  • Page 244

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 240 create cpu access_profile purpose used to create an access profile specifically for cpu interface filtering on the switch and to define which parts of each incoming frame’s header the switch will examine. Masks can be entered tha...

  • Page 245

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 241 create cpu access_profile igmp  specifies that the switch will examine each frame’s internet group management protocol (igmp) field. Type  specifies that the switch will examine each frame’s igmp type field. Tcp  specifies tha...

  • Page 246

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 242 s o u r c e _ i p _ m a s k 2 0 . 0 . 0 . 0 d e s t i n a t i o n _ i p _ m a s k 1 0 . 0 . 0 . 0 d s c p i c m p t y p e c o d e p e r m i t p r o f i l e _ i d 1 s u c c e s s . D e s - 6 5 0 0 : 4 # delete cpu access_profile p...

  • Page 248

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 244 config cpu access_profile type  specifies that the access profile will apply to packets that have this igmp type value. Tcp  specifies that the switch will examine the transmission control protocol (tcp) field within each packe...

  • Page 250

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 246 disable cpu_interface_filtering purpose used to disable cpu interface filtering on the switch. Syntax disable cpu_interface_filtering description this command is used, in conjunction with the enable cpu_interface_filtering comman...

  • Page 251

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 247 show cpu_access_profile purpose used to view the cpu access profile entry currently set in the switch. Syntax show cpu_access_profile profile_id description the show cpu_access_profile command is used view the current cpu interfa...

  • Page 252

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 248 25 s afeguard e ngine c ommands periodically, malicious hosts on the network will attack the switch by utilizing packet flooding (arp storm) or other methods. These attacks may increase the cpu utilization beyond its capability. ...

  • Page 254

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 250 show safeguard_engine purpose to display the safeguard engine parameters currently set in the switch. Syntax show safeguard_engine description this command is used to show the safeguard engine information currently set on the swi...

  • Page 255

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 251 26 t raffic s egmentation c ommands traffic segmentation allows you to further sub-divide vlans into smaller groups of ports that will help to reduce traffic on the vlan. The vlan rules take precedence, and then the traffic segme...

  • Page 256

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 252 s u c c e s s . D e s - 6 5 0 0 : 4 # show traffic_segmentation purpose used to display the current traffic segmentation configuration on the switch. Syntax show traffic_segmentation description the show traffic_segmentation comm...

  • Page 257

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 253 1 : 1 2 1 : 1 - 1 : 1 0 , 2 : 1 - 2 : 1 2 1 : 1 3 1 : 1 - 1 : 1 0 , 2 : 1 - 2 : 1 2 1 : 1 4 1 : 1 - 1 : 1 0 , 2 : 1 - 2 : 1 2 1 : 1 5 1 : 1 - 1 : 1 0 , 2 : 1 - 2 : 1 2 1 : 1 6 1 : 1 - 1 : 1 0 , 2 : 1 - 2 : 1 2 1 : 1 7 1 : 1 - 1 :...

  • Page 258: D-L

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 254 27 d-l ink s ingle ip m anagement c ommands simply put, d-link single ip management is a concept that will stack switches together over ethernet instead of using stacking ports or modules. Switches using single ip management (lab...

  • Page 259

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 255 2. Cs’s must change their role to cas and then to ms, to become a ms of a sim group. Thus the cs cannot directly be converted to a ms. 3. The user can manually configure a cs to become a cas. 4. A ms can become a cas by: a. Being...

  • Page 260

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 256 enable sim parameters none. Restrictions only administrator-level users can issue this command. Example usage: to enable sim on the switch: d e s - 6 5 0 0 : 4 # e n a b l e s i m c o m m a n d : e n a b l e s i m s u c c e s s ....

  • Page 261

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 257 show sim device name - displays the user-defined device name on the switch. Mac address - displays the mac address of the switch. Capabilities – displays the type of switch, be it layer 2 (l2) or layer 3 (l3). Platform – switch d...

  • Page 262

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 258 r o l e s t a t e : c o m m a n d e r d i s c o v e r y i n t e r v a l : 3 0 s e c h o l d t i m e : 1 0 0 s e c d e s - 6 5 0 0 : 4 # to show the candidate information in summary, if the candidate id is specified: d e s - 6 5 0...

  • Page 263

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 259 s i m g r o u p n a m e : d e f a u l t i d m a c a d d r e s s p l a t f o r m / h o l d f i r m w a r e d e v i c e n a m e c a p a b i l i t y t i m e v e r s i o n - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

  • Page 265

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 261 p l e a s e w a i t f o r a c k . . . S i m c o n f i g s u c c e s s ! ! ! S u c c e s s . D e s - 6 5 0 0 : 4 # to delete a member: d e s - 6 5 0 0 : 4 # c o n f i g s i m _ g r o u p d e l e t e 1 c o m m a n d : c o n f i g s...

  • Page 266

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 262 config sim hold time from 100 to 255 seconds. Restrictions only administrator-level users can issue this command. Example usage: to change the time interval of the discovery protocol: d e s - 6 5 0 0 : 4 # c o n f i g s i m c o m...

  • Page 268

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 264 d e s - 6 5 0 0 : 4 # to download configuration files: d e s - 6 5 0 0 : 4 # d o w n l o a d s i m _ m s c o n f i g u r a t i o n 1 0 . 5 3 . 1 3 . 9 4 c : / d g s s r i . T x t m e m b e r s a l l c o m m a n d : d o w n l o a ...

  • Page 269

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 265 des-6500:4#.

  • Page 270: Sntp

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 266 28 t ime and sntp c ommands the simple network time protocol (sntp) {an adaptation of the network time protocol (ntp)} commands in the command line interface (cli) are listed (along with the appropriate parameters) in the followi...

  • Page 271

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 267 to configure sntp settings: des-6500:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll- interval 30 success. Des-6500:4# show sntp purpose used to dis...

  • Page 272

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 268 des-6500:4# disable sntp purpose disables sntp server support. Syntax disable sntp description this will disable sntp support. Sntp service must be separately configured (see config sntp). Parameters none. Restrictions only admin...

  • Page 274

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 270 config dst october 14. S_week - configure the week of the month in which dst begins. - the number of the week during the month in which dst begins where 1 is the first week, 2 is the second week and so on, last is the last week o...

  • Page 275

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 271 success. Des-6500:4# show time purpose used to display the current time settings and status. Syntax show time description this will display system time and date configuration as well as display current system time. Parameters non...

  • Page 279

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 275 example usage: to display an entry in the arp table: des-6500:4#show arpentry ipaddress 10.1.1.169 command: show arpentry ipaddress 10.1.1.169 arp aging time : 30 interface ip address mac address type ------------- --------------...

  • Page 280: Vrrp

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 276 30 vrrp c ommands vrrp or virtual routing redundancy protocol is a function on the switch that dynamically assigns responsibility for a virtual router to one of the vrrp routers on a lan. The vrrp router that controls the ip addr...

  • Page 281

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 277 example usage: to enable vrrp globally on the switch: des-6500:4#enable vrrp command: enable vrrp success. Des-6500:4# example usage: to enable the virtual ip address to be pinged: des-6500:4#enable vrrp ping command: enable vrrp...

  • Page 284

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 280 config vrrp vrid assigned to the vrrp entry. This ip address is also the default gateway that will be statically assigned to end hosts and must be set for all routers that participate in this group. Advertisement_interval - enter...

  • Page 285

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 281 config vrrp ipif parameters ipif - enter the name of a previously configured ip interface for which to configure the vrrp entry. This ip interface must be assigned to a vlan on the switch. Authtype – specifies the type of authent...

  • Page 286

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 282 show vrrp purpose to view the vrrp settings set on the switch. Syntax show vrrp ipif {ipif {vrid }} description this command is used to view current vrrp settings of the vrrp operations table. Parameters ipif - enter the name of ...

  • Page 287

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 283 delete vrrp ipif - enter the name of the ip interface which holds the vrrp router to delete. Restrictions only administrator-level users can issue this command. Example usage: to delete a vrrp entry: des-6500:4#delete vrrp vrid 2...

  • Page 290

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 286 des-6500:4#delete iproute 10.48.74.121/8 10.1.1.254 command: delete iproute 10.48.74.121/8 10.1.1.254 success. Des-6500:4# delete iproute default purpose used to delete a default ip route entry from the switch’s ip routing table....

  • Page 291

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 287 des-6500:4#show iproute command: show iproute routing table ip address/netmask gateway interface cost protocol --------------- --------------- --------------- ---- ----------- 0.0.0.0 10.1.1.254 system 1 default 10.0.0.0/8 10.48....

  • Page 292

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 288 32 r oute r edistribution c ommands the route redistribution commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create route redistribute dst...

  • Page 293

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 289 route source metric metric type rip 0 to 16777214 mettype 1 mettype 2 static 0 to 16777214 mettype 1 mettype 2 local 0 to 16777214 mettype 1 mettype 2 allowed metric type combinations are mettype 1 or mettype 2. The metric value ...

  • Page 294

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 290 create route redistribute dst rip src this is analogous to a hop count in the rip routing protocol. Restrictions only administrator-level users can issue this command. Routing information source  ospf and the static route table....

  • Page 296

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 292 config route redistribute dst rip src routers current routing protocol. The switch can redistribute routing information between the ospf and rip routing protocols to all routers on the network that are running ospf or rip. Routin...

  • Page 297

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 293 delete route redistribute ospf. Restrictions only administrator-level users can issue this command. Example usage: to delete route redistribution settings: des-6500:4#delete route redistribute dst rip src ospf command: delete rou...

  • Page 299

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 295 config dhcp_relay add ipif purpose used to add an ip destination address to the switch's dhcp/bootp relay table. Syntax config dhcp_relay add ipif description this command adds an ip address as a destination to which to forward (...

  • Page 301

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 297 config dhcp_relay option_82 check disable - when the field is toggled to disable,the relay agent will not check the validity of the packet’s option 82 field. Restrictions only administrator-level users can issue this command. Exa...

  • Page 302

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 298 show dhcp_relay switch, or if an ip interface name is specified, the dhcp relay configuration for that ip interface. Parameters ipif the name of the ip interface for which to display the current dhcp relay configuration. Restrict...

  • Page 303

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 299 success. Des-6500:4# disable dhcp_relay purpose used to disable the dhcp/bootp relay function on the switch. Syntax disable dhcp_relay description this command is used to disable the dhcp/bootp relay function on the switch. Param...

  • Page 305

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 301 des-6500:4#config dnsr add static dns1 10.43.21.12 command: config dnsr add static dns1 10.43.21.12 success. Des-6500:4# example usage: to delete an entry domain name dns1, ip address 10.43.21.12 from dns static table. Des-6500:4...

  • Page 307

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 303 show dnsr purpose used to display the current dns relay status. Syntax show dnsr {static} description this command is used to display the current dns relay status. Parameters static  allows the display of only the static entries...

  • Page 309

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 305 config rip rip packets. V1_only  specifies that only rip v1 packets will be transmitted. V2_only - specifies that only rip v2 packets will be transmitted. V1_or_v2 - specifies that only rip v1 or v2 packets will be transmitted. ...

  • Page 310

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 306 to disable rip: des-6500:4#disable rip command: disable rip success. Des-6500:4# show rip purpose used to display the rip configuration and statistics for the switch. Syntax show rip {ipif } description this command will display ...

  • Page 312

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 308 config dvmrp restrictions only administrator-level users can issue this command. Example usage: to configure dvmrp configurations of ip interface system: des-6500:4#config dvmrp ipif system neighbor_timeout 30 metric 1 probe 5 co...

  • Page 313

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 309 des-6500:4#disable dvmrp command: disable dvmrp success. Des-6500:4# show dvmrp routing_table purpose used to display the current dvmrp routing table. Syntax show dvmrp routing table {ipaddress } description the command is used t...

  • Page 314

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 310 example usage: to display dvmrp neighbor table: des-6500:4#show dvmrp neighbor command: show dvmrp neighbor dvmrp neighbor address table interface neighbor address generation id expire time -------------- ------------------ -----...

  • Page 315

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 311 show dvmrp syntax show dvmrp {} description the command will display the current dvmrp routing table. Parameters  adding this parameter will display dvmrp settings for a specific ip interface. Restrictions none. Example usage: t...

  • Page 316: Pim

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 312 37 pim c ommands pim or protocol independent multicast is a method of forwarding traffic to multicast groups over the network using any pre- existing unicast routing protocol, such as rip or ospf, set on routers within a multicas...

  • Page 317: Pim-Dm

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 313 register and register suppression messages multicast sources do not always join the intended receiver group. The first hop router (dr) can send multicast data without being the member of a group or having a designated source, whi...

  • Page 319

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 315 disable pim purpose used to disable pim function on the switch. Syntax disable pim description this command will disable pim for the switch. Any previously configured pim settings will remain unchanged and may be enabled at a lat...

  • Page 320

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 316 config pim dr_priority - enter the priority of this ip interface to become the designated router for the multiple access network. The user may enter a dr priority between 0 and 4,294,967,294 with a default setting of 1. Restricti...

  • Page 321

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 317 config pim register_suppression_time purpose used to configure the interval between the sending of register packets for the pim protocol. Syntax config pim register_suppression_time description this command is to be configured fo...

  • Page 322

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 318 des-6500:4#create pim crp group 231.0.0.1/32 rp trinity command: create pim crp group 231.0.0.1/32 rp trinity success. Des-6500:4# delete pim crp purpose to disable the switch in becoming a possible candidate to be the rendezvous...

  • Page 324

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 320 delete pim static_rp purpose to remove the multicast group ip address used in identifying the rendezvous point (rp). Syntax delete pim static_rp group description this command will remove the multicast group ip address used in id...

  • Page 326

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 322 des-6500:4#config pim last_hop_spt_threshold 0 command: config pim last_hop_spt_threshold 0 success. Des-6500:4# show pim rpset purpose used to display the rp set of the switch. Syntax show pim rpset description this command will...

  • Page 327

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 323 command: show pim crp pim candidate-rp table c-rp holdtime : 150 c-rp priority : 2 c-rp wildcard prefix count : 0 group interface --------------------- --------------------- 224.0.0.0/4 trinity des-6500:4# config pim cbsr purpose...

  • Page 328

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 324 des-6500:4#config pim cbsr ipif trinity priority 4 command: config pim cbsr ipif trinity priority 4 success. Des-6500:4# usage example: to configure the hash mask length for the cbsr: des-6500:4#config pim cbsr hash_masklen 30 co...

  • Page 329

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 325 des-6500:4# show pim cbsr command: show pim cbsr pim candidate-bsr table c-bsr hash mask len : 30 c-bsr bootstrap period : 60 interface ip address priority ------------ ------------------ ------------- system 10.90.90.90/8 -1 (di...

  • Page 330

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 326 des-6500:4#show pim command: show pim pim global state : disabled last hop spt threshold : 0 packet per second(switch to spt tree immediately) rp spt threshold : 0 packet per second(switch to spt tree immediately) register probe ...

  • Page 331

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 327 des-6500:4# show pim neighbor command: show pim neighbor pim neighbor address table interface name neighbor address expired time --------------------- ----------------- ------------ n10 10.20.6.251 79 total entries: 1 des-6500:4#...

  • Page 332

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 328 create pim register_checksum_include_data purpose used to set the rps that the switch will send register packets to and create checksums to be included with the data in registered packets. Syntax create pim register_checksum_incl...

  • Page 333

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 329 des-6500:4#delete pim register_checksum_include_data rp_address 11.1.1.1 command: delete pim register_checksum_include_data rp_address 11.1.1.1 success. Des-6500:4# show pim register_checksum_include_data_rp_list purpose used to ...

  • Page 334

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 330 38 ip m ulticasting c ommands the ip multicasting commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters show ipmc cache {group } {ipaddress } sh...

  • Page 336: Md5

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 332 39 md5 c onfiguration c ommands the md5 configuration commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create md5 key config md5 key delete...

  • Page 337

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 333 des-6500:4#config md5 key 1 taboo command: config md5 key 1 taboo success. Des-6500:4# delete md5 key purpose used to delete an entry in the md5 key table. Syntax delete md5 key description this command is used to delete a specif...

  • Page 338: Ospf

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 334 40 ospf c onfiguration c ommands the ospf configuration commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters config ospf router_id enable ospf ...

  • Page 340

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 336 des-6500:4# disable ospf purpose used to disable ospf on the switch. Syntax disable ospf description this command, in combination with the enable ospf command above, is used to enable and disable ospf on the switch. Parameters no...

  • Page 341

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 337 des-6500:4#show ospf command: show ospf ospf interface settings interface ip address area id state link metric status ------------ ------------------ --------------- -------- --------- --------- system 10.90.90.90/8 0.0.0.0 disab...

  • Page 342

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 338 des-6500:4# delete ospf area purpose used to delete an ospf area. Syntax delete ospf area description this command is used to delete an ospf area. Parameters  a 32-bit number in the form of an ip address (xxx.Xxx.Xxx.Xxx) that u...

  • Page 343

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 339 show ospf area purpose used to display an ospf area’s configuration. Syntax show ospf area {} description this command will display the current ospf area configuration. Parameters  a 32-bit number in the form of an ip address (x...

  • Page 344

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 340 des-6500:4# delete ospf host_route purpose used to delete an ospf host route. Syntax delete ospf host_route description this command is used to delete an ospf host route. Parameters  the ip address of the ospf host. Restrictions...

  • Page 345

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 341 show ospf host_route purpose used to display the current ospf host route table. Syntax show ospf host_route {} description this command will display the current ospf host route table. Parameters  the ip address of the host. Rest...

  • Page 346

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 342 des-6500:4# delete ospf aggregation purpose used to delete an ospf area aggregation configuration. Syntax delete ospf aggregation lsdb_type summary description this command is used to delete an ospf area aggregation configuration...

  • Page 347

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 343 to configure the ospf area aggregation settings: des-6500:4#config ospf aggregation 10.1.1.1 10.48.76.122/16 lsdb_type summary advertise enable command: config ospf aggregation 10.1.1.1 10.48.76.122/16 lsdb_type summary advertise...

  • Page 348

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 344 show ospf lsdb link. Restrictions none. Note: when this command displays a “ * ” (a star symbol) in the ospf lsdb table for the area_id or the cost, this is interpreted as “no area id” for external lsas, and as “no cost given” fo...

  • Page 349

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 345 des-6500:4# show ospf virtual_neighbor purpose used to display the current ospf virtual neighbor router table. Syntax show ospf virtual_neighbor { } description this command will display the current ospf virtual neighbor router t...

  • Page 350

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 346 config ospf ipif interval, authorization type, and authorization key should be the same for all routers on the same network. Dead_interval  allows the specification of the length of time between the receipt of hello packets from...

  • Page 352

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 348 des-6500:4# show ospf ipif purpose used to display the current ospf interface settings for the specified interface name. Syntax show ospf ipif description this command will display the current ospf interface settings for the spec...

  • Page 353

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 349 priority: 1 dr state: dr dr address: 10.42.73.10 backup dr address: none hello interval: 10 dead interval: 40 transmit delay: 1 retransmit time: 5 authentication: none interface name: ipif2 ip address: 123.234.12.34/24 ((link up)...

  • Page 354

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 350 create ospf virtual_link restrictions only administrator-level users can issue this command. Usage example: to create an ospf virtual interface: des-6500:4#create ospf virtual_link 10.1.12 20.1.1.1 hello_interval 10 command: crea...

  • Page 355

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 351 to configure the ospf virtual interface settings: des-6500:4#config ospf virtual_link 10.1.1.2 20.1.1.1 hello_interval 10 command: config ospf virtual_link 10.1.1.2 20.1.1.1 hello_interval 10 success. Des-6500:4# delete ospf virt...

  • Page 356

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 352 show ospf virtual_link restrictions none. Usage example: to display the current ospf virtual interface configuration: des-6500:4#show ospf virtual_link command: show ospf virtual_link virtual interface configuration transit virtu...

  • Page 357

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 353 41 j umbo f rame c ommands certain switches can support jumbo frames (frames larger than the standard ethernet frame size of 1518 bytes). To transmit frames of up to 9216 bytes (and 9220 bytes tagged), the user can increase the m...

  • Page 358

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 354 to enable the jumbo frame function on the switch: des-6500:4#disable jumbo_frame command: disable jumbo_frame success. Des-6500:4# show jumbo_frame purpose used to show the status of the jumbo frame function on the switch. Syntax...

  • Page 359

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 355 42 ip v 4 m ulticast s tatic r oute l ist the ipv4 multicast static route commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters create ipmroute ...

  • Page 361

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 357 43 c ommand h istory l ist the command history list commands in the command line interface (cli) are listed (along with the appropriate parameters) in the following table. Command parameters ? {} show command_history config comma...

  • Page 363

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 359 config command_history purpose used to configure the command history. Syntax config command_history description this command is used to configure the command history. Parameters  the number of previously executed commands mainta...

  • Page 364

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 360 a t echnical s pecifications physical and environmental ac inputs & external redundant power supply 100 - 240 vac, 50/60 hz (internal universal power supply) power consumption 296w des-6504: 30w maximum des-6505: 20w maximum des-...

  • Page 365

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 361 performance transmission method store-and-forward-l3 routing ram buffer 256 mb per linecard, 256mb on cpu card. Filtering address table 16 k mac addresses per device 3k ip addresses per device packet filtering/ forwarding rate fu...

  • Page 366

    Xstack des-6500 modular layer 3 chassis ethernet switch cli manual 362 general standard ieee 802.3u 100base-tx fast ethernet ieee 802.3ab 1000base-t gigabit ethernet ieee 802.1d spanning tree ieee 802.1w rapid spanning tree ieee 802.1s multiple spanning tree ieee 802.1 p/q vlan ieee 802.1p priority ...