D-Link DES-3350SR Page 390 Reference Manual Download

Page: 390 / 486

DES-3350SR Layer 3 Gigabit Switch

142

config 802.1x auth_parameter

Parameters

<portlist>

−

Specifies a port or range of ports.

all

−

Specifies all of the ports on the switch.

default

−

Returns all of the ports in the specified range to their

802.1x default settings.

direction [both | in]

−

Determines whether a controlled port blocks

communication in both the receiving and transmitting directions, or
just the receiving direction.

port_control

−

Configures the administrative control over the

authentication process for the range of ports. The user has the
following authentication options:

•

force_auth

−

Forces the Authenticator for the port to

become authorized. Network access is allowed.

•

auto

−

Allows the port

’

s status to reflect the outcome of

the authentication process.

•

force_unauth

−

Forces the Authenticator for the port to

become unauthorized. Network access will be blocked.

quiet_period <sec 0-65535>

−

Configures the time interval

between authentication failure and the start of a new
authentication attempt.

tx_period <sec 1-65535>

−

Configures the time to wait for a

response from a supplicant (user) to send EAP Request/Identity
packets.

supp_timeout <sec 1-65535>

−

Configures the time to wait for a

response from a supplicant (user) for all EAP packets, except for
the Request/Identity packets.

server_timeout <sec 1-65535>

−

Configure the length of time to

wait for a response from a RADIUS server.

max_req <value 1-10>

−

Configures the number of times to retry

sending packets to a supplicant (user).

reauth_period <sec 1-65535>

−

Configures the time interval

between successive re-authentications.

enable_reauth [enable | disable]

−

Determines whether or not the

switch will re-authenticate. Enabled causes re-authentication of
users at the time interval specified in the Re-authentication Period
field, above.

Restrictions

Only administrator-level users can issue this command.

Example usage:

To configure 802.1x authentication parameters for ports 1

–

20 of switch 1:

Summary of Contents for DES-3350SR

Page 1: ...DES 3350SR 48 10 100Mbps plus 2 Gigabit Ports Layer 3 Stackable Switch Command Line Interface Reference Manual Release 3 ...

Page 2: ... Corporation is strictly forbidden Trademarks used in this text D Link and the D LINK logo are trademarks of D Link Computer Corporation Microsoft and Windows are registered trademarks of Microsoft Corporation Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products D Link Computer Corporation disclaims any proprie...

Page 3: ...nds 58 Spanning Tree Commands 63 Forwarding Database Commands 71 Broadcast Storm Control Commands 79 QoS Commands 82 Port Mirroring Commands 92 VLAN Commands 96 Link Aggregation Commands 103 IP MAC Binding 110 Basic IP Commands 115 IGMP Commands 120 IGMP Snooping Commands 123 802 1X Commands 134 Access Control List ACL Commands 148 Traffic Segmentation Commands 157 Time and SNTP Commands 160 ARP C...

Page 4: ... Relay Commands 181 DNS Relay Commands 185 RIP Commands 190 DVMRP Commands 194 PIM Commands 200 IP Multicasting Commands 205 MD5 Configuration Commands 207 OSPF Configuration Commands 210 Command History List 234 Technical Specifications 237 ...

Page 5: ... switch s serial port s default settings are as follows 9600 baud no parity 8 data bits 1 stop bit A computer running a terminal emulation program capable of emulating a VT 100 terminal and a serial port configured as above is then connected to the switch s serial port via an RS 232 DB 9 cable With the serial port properly connected to a management computer the following screen should be visible I...

Page 6: ...eb based manager The switch IP address can be automatically set using BOOTP or DHCP protocols in which case the actual address assigned to the switch must be known The IP address may be set using the Command Line Interface CLI over the console serial port as follows 1 Starting at the command line prompt enter the commands config ipif System ipaddress xxx xxx xxx xxx yyy yyy yyy yyy Where the x s r...

Page 7: ...ssigned an IP address of 10 53 13 144 8 with a subnet mask of 255 0 0 0 The system message Success indicates that the command was executed successfully The switch can now be configured and managed via Telnet and the CLI or via the Web based management agent using the above IP address to connect to the switch ...

Page 8: ...NV RAM and reloaded when the switch is rebooted If the switch is rebooted without using the save command the last configuration saved to NV RAM will be loaded Connecting to the Switch The console interface is used by connecting the Switch to a VT100 compatible terminal or a computer running an ordinary terminal emulator program e g the HyperTerminal program included with the Windows operating syst...

Page 9: ... command prompt local There are a number of helpful features included in the CLI Entering the command will display a list of all of the top level commands Figure 2 2 The Command When you enter a command without its required parameters the CLI will prompt you with a Next possible completions message ...

Page 10: ... next possible sub commands in sequential order by repeatedly pressing the Tab key To re enter the previous command at the command prompt press the up arrow cursor key The previous command will appear at the command prompt Figure 2 4 Using the Up Arrow to Re enter a Command In the above example the command config account was entered without the required parameter username the CLI returned the Next...

Page 11: ...red that is unrecognized by the CLI the top level commands will be displayed under the Available commands prompt Figure 2 5 The Next Available Commands Prompt The top level commands consist of commands such as show or config Most of these commands require one or more parameters to narrow the top level command This is equivalent to show what or config what Where the what is the next parameter For e...

Page 12: ...ample all of the possible next parameters for the show command are displayed At the next command prompt the up arrow was used to re enter the show command followed by the account parameter The CLI then displays the user accounts configured on the switch ...

Page 13: ...name space a VLAN name in the vlan_name 32 space and the network address in the network_address space Do not type the angle brackets Example Command create ipif Engineering vlan Design ipaddress 10 24 22 5 255 0 0 0 square brackets Purpose Encloses a required value or set of required arguments One value or argument can be specified Syntax create account admin user Description In the above syntax e...

Page 14: ...ght Arrow Moves the cursor to the right Up Arrow Repeat the previously entered command Each time the up arrow is pressed the command previous to that displayed appears This way it is possible to review the command history for the current session Use the down arrow to progress sequentially forward through the command history list Down Arrow The down arrow will display the next command in the comman...

Page 15: ...DES 3350SR Layer 3 Gigabit Switch 11 Enter Displays the next line or table entry ...

Page 16: ...gout never 2_minutes 5_minutes 10_minutes 15_minutes enable clipaging disable clipaging enable telnet tcp_port_number 1 65535 disable telnet enable web tcp_port_number 1 65535 disable web save reboot reset config system login logout Each command is listed in detail in the following sections create account Purpose Used to create user accounts Syntax create admin user username 15 Description The cre...

Page 17: ... admin dlink Enter a case sensitive new password Enter the new password again for confirmation Success local config account Purpose Used to configure user accounts Syntax config account username Description The config account command configures a user account that has been created using the create account command Parameters username Restrictions Only Administrator level users can issue this comman...

Page 18: ...s all user accounts created on the switch Up to 8 user accounts can exist on the switch at one time Parameters None Restrictions None Example usage To display the accounts that have been created local show account Command show account Current Accounts Username Access Level dlink Admin local delete account Purpose Used to delete an existing user account Syntax delete account username Description Th...

Page 19: ...ple usage To delete the user account System local delete account System Command delete account System Success local show switch Purpose Used to display information about the switch Syntax show switch Description This command displays information about the switch Parameters None Restrictions None Example usage To display the switch information ...

Page 20: ...ardware Version 0A1 System Up Time 0 days 00 49 27 Time Unknown Time Source System Clock System Name System Location System Contact Spanning Tree Enabled GVRP Disabled IGMP Snooping Enabled RIP Enabled DVMRP Enabled PIM DM Enabled OSPF Enabled TELNET Enabled TCP 23 SNTP Disabled local show serial_port Purpose Used to display the current serial port settings Syntax show serial_port Description This...

Page 21: ...ith the management host auto logout This parameter will set the time that the switch will wait before logging out automatically if left idle The choices that accompany this parameter are never No time limit on the length of time the console can be open with no user input 2_minutes The console will log out the current user if there is no user input for 2 minutes 5_minutes The console will log out t...

Page 22: ...eters None Restrictions Only administrator level users can issue this command Example usage To enable pausing of the screen display when the show command output reaches the end of the page local enable clipaging Command enable clipaging Success local disable clipaging Purpose Used to disable the pausing of the console screen scrolling at the end of each page when the show command displays more tha...

Page 23: ... UDP port number the switch will use to listen for Telnet requests Parameters tcp_port_number 1 65535 The TCP port number TCP ports are numbered between 1 and 65535 The well known TCP port for the Telnet protocol is 23 Restrictions Only administrator level users can issue this command Example usage To enable Telnet and configure port number local enable telnet 23 Command enable telnet 23 Success l...

Page 24: ...ort number the switch will use to listen for Telnet requests Parameters tcp_port_number 1 65535 The TCP port number TCP ports are numbered between 1 and 65535 The well known port for the Web based management software is 80 Restrictions Only administrator level users can issue this command Example usage To enable HTTP and configure port number local enable web 80 Command enable web 80 Success local...

Page 25: ...h configuration into non volatile RAM The saved switch configuration will be loaded into the switch s memory each time the switch is restarted Parameters Entering just the save command will save the switch configuration to NV Ram Restrictions Only administrator level users can issue this command Example usage To save the switch s current configuration to non volatile RAM local save Command save Sa...

Page 26: ...itch including the IP address user accounts and the switch history log The switch will not save or reboot system If the keyword system is specified all of the factory default settings are restored on the switch The switch will save and reboot after the settings are changed to default Rebooting will clear all entries in the Forwarding Data Base If no parameter is specified the switch s current IP a...

Page 27: ...Username and Password Parameters None Restrictions None Example usage To initiate the login procedure local login Command login UserName logout Purpose Used to log out a user from the switch s console Syntax logout Description This command terminates the current user s session on the switch s console Parameters None Restrictions None Example usage To terminate the current user s console session lo...

Page 28: ...ngs Syntax portlist all speed auto 10_half 10_full 100_half 100_full 1000_half 1000_full state enabled disabled description desc 32 Description This command allows for the configuration of the switch s Ethernet ports Only the ports listed in the portlist will be affected Parameters portlist Specifies a port or range of ports to be configured all Configure all ports on the switch auto Enables auto ...

Page 29: ...ent configuration of a range of ports Syntax show ports all portlist description Description This command is used to display the current configuration of a range of ports Parameters all specifies all the ports portlist Specifies a port or range of ports to be configured description Enter this parameter to view the description of the port previously set in the config ports command Restrictions None...

Page 30: ... Auto Link Down 14 Enabled Auto Link Down 15 Enabled Auto 100M Full 16 Enabled Auto Link Down 17 Enabled Auto Link Down 18 Enabled Auto Link Down 19 Enabled Auto Link Down 20 Enabled Auto Link Down CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh Example usage To view port 1 1 with description local show ports 1 4 description Command show ports 1 4 description Port Port Settings Conne...

Page 31: ... enabled disabled max_learning_addr max_lock_no 0 10 lock_address_mode DeleteOnTimeout DeleteOnReset Description This command allows for the configuration of the port security feature Only the ports listed in the portlist are effected Parameters portlist Specifies a port or range of ports to be configured all Configure port security for all ports on the switch admin_state enable disable Enables or...

Page 32: ...er of learning address and lock mode Parameters portlist Specifies a port or range of ports to be viewed Restrictions Only administrator level can use this command Example usage To display the port security configuration local show port_security ports Command show port_security ports Port Admin State Max Learning Addr Lock Address Mode 15 1 Disabled 1 DeleteOnReset 15 2 Disabled 1 DeleteOnReset 15...

Page 33: ...DES 3350SR Layer 3 Gigabit Switch 29 ...

Page 34: ...name Username is used for authentication NoAuthNoPriv v3 MD5 or SHA Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthNoPriv v3 MD5 DES or SHA DES Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthPriv DES 56 bit encryption is added based on the CBC DES DES 56 standard Each command is listed in detail in the following sections Command Parameters create snmp user u...

Page 35: ...dr enable snmp traps enable snmp authenticate traps disable snmp traps disable snmp authenticate traps config snmp system_ contact sw_contact config snmp system_ location sw_location config snmp system _name sw_name enable rmon disable rmon Each command is listed in detail in the following sections create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is a...

Page 36: ...nd privacy The password is defined by specifying the auth_password below This method is recommended by_key Requires the SNMP user to enter a encryption key for authentication and privacy The key is defined by specifying the priv_password below This method is not recommended encrypted Specifies that the password will be in an encrypted format auth md5 sha Initiate an authentication level setting se...

Page 37: ...s the associated SNMP group Parameters username 32 An alphanumeric string of up to 32 characters that identifies the SNMP user that will be deleted Restrictions Only administrator level users can issue this command Example usage To delete a previously entered SNMP user on the switch local delete snmp user dlink Command delete snmp user dlink Success local show snmp user Purpose Used to display inf...

Page 38: ...mmunity strings to limit which MIB objects an SNMP manager can access Parameters view_name 32 An alphanumeric string of up to 32 characters that identifies the SNMP view that will be created oid The object ID that identifies an object tree MIB tree that will be included or excluded from access by an SNMP manager included Include this object in the list of objects that an SNMP manager can access ex...

Page 39: ...ee that will be deleted from the switch Restrictions Only administrator level users can issue this command Example usage To delete a previously configured SNMP view from the switch local delete snmp view dlinkview all Command delete snmp view dlinkview all Success local show snmp view Purpose Used to display an SNMP view previously created on the switch Syntax show snmp view view_name 32 Descripti...

Page 40: ...onship between the SNMP manager and an agent The community string acts like a password to permit access to the agent on the switch One or more of the following characteristics can be associated with the community string An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the switch s SNMP agent An MIB view that defines the subset of all ...

Page 41: ... command can read from and write to the contents of the MIBs on the switch Restrictions Only administrator level users can issue this command Example usage To create the SNMP community string dlink local create snmp community dlink view ReadView read_write Command create snmp community dlink view ReadView read_write Success local delete snmp community Purpose Used to remove a specific SNMP communi...

Page 42: ...rameters community_string 32 An alphanumeric string of up to 32 characters that is used to identify members of an SNMP community This string is used like a password to give remote SNMP managers access to MIB objects in the switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To display the currently entered SNMP community strings local show snmp comm...

Page 43: ...mmand Example usage To give the SNMP agent on the switch the name 0035636666 local config snmp engineID 0035636666 Command config snmp engineID 0035636666 Success local show snmp engineID Purpose Used to display the identification of the SNMP engine on the switch Syntax show snmp engineID Description The show snmp engineID command displays the identification of the SNMP engine on the switch Parame...

Page 44: ...e that maps SNMP users to SNMP views Syntax create snmp group groupname 32 v1 v2c v3 noauth_nopriv auth_nopriv auth_priv read_view view_name 32 write_view view_name 32 notify_view view_name 32 Description The create snmp group command creates a new SNMP group or a table that maps SNMP users to SNMP views ...

Page 45: ...Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to prevent it being viewed by an unauthorized source noauth_nopriv Specifies that there will be no authorization and no encryption of packets sent between the switch and a remote SNMP manager auth_nopriv Specifies that authorization will be required but there will be no encryption of packets sent bet...

Page 46: ...32 An alphanumeric name of up to 32 characters that will identify the SNMP group to be deleted Restrictions Only administrator level users can issue this command Example usage To delete the SNMP group named sg1 local delete snmp group sg1 Command delete snmp group sg1 Success local show snmp groups Purpose Used to display the group names of SNMP groups currently configured on the switch The securi...

Page 47: ...ettings Group Name Group3 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level NoAuthNoPriv Group Name Group4 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level authNoPriv Group Name Group5 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Mod...

Page 48: ...ecurity features v3 Specifies that the SNMP version 3 will be used SNMP v3 provides secure access to devices through a combination of authentication and encrypting packets over the network SNMP v3 adds Message integrity Ensures that packets have not been tampered with during transit Authentication Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to...

Page 49: ...ceive SNMP traps generated by the switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To delete an SNMP host entry local delete snmp host 10 48 74 100 Command delete snmp host 10 48 74 100 Success local show snmp host Purpose Used to display the recipient of SNMP traps generated by the switch s SNMP agent Syntax show snmp host ipaddr Description The...

Page 50: ...sted host Syntax create trusted_host ipaddr Description The create trusted_host command creates the trusted host The switch allows you to specify up to four IP addresses that are allowed to manage the switch via in band SNMP or TELNET based management software These IP addresses must be members of the Management VLAN If no IP addresses are specified then there is nothing to prevent any IP address ...

Page 51: ...entered on the switch using the create trusted_host command above Parameters None Restrictions Only administrator level can use this command Example Usage To display the list of trust hosts local show trusted_host Command show trusted_host Management Stations IP Address 10 53 13 94 Total Entries 1 local delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_h...

Page 52: ... Used to enable SNMP trap support Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable SNMP trap support on the switch local enable snmp traps Command enable snmp traps Success local enable snmp authenticate_traps Purpose Used to...

Page 53: ...mp traps Purpose Used to disable SNMP trap support on the switch Syntax disable snmp traps Description This command is used to disable SNMP trap support on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To prevent SNMP traps from being sent from the Switch local disable snmp traps Command disable snmp traps Success local disable snmp aut...

Page 54: ...ontact person who is responsible for the switch Syntax config snmp system_contact sw_contact Description The config snmp system_contact command is used to enter the name and or other information to identify a contact person who is responsible for the switch A maximum of 255 character can be used Parameters sw_contact A maximum of 255 characters is allowed A NULL string is accepted if there is no c...

Page 55: ...ple usage To configure the switch location for HQ 5F local config snmp system_location HQ 5F Command config snmp system_location HQ 5F Success local config snmp system_name Purpose Used to configure the name for the switch Syntax config snmp system_name sw_name Description The config snmp system_name command configures the name of the switch Parameters sw_name A maximum of 255 characters is allowe...

Page 56: ...rictions Only administrator level users can issue this command Example Usage To enable RMON local enable rmon Command enable rmon Success local disable rmon Purpose Used to disable RMON on the switch Syntax disable rmon Description This command is used in conjunction with the enable rmon command above to enable and disable remote monitoring RMON on the switch Parameters None Restrictions Only admi...

Page 57: ...DES 3350SR Layer 3 Gigabit Switch 53 local disable rmon Command disable rmon Success local ...

Page 58: ...127 configuration ipaddr path_filename 127 increment Description This command is used to download a new firmware or a switch configuration file from a TFTP server Parameters firmware Download and install new firmware on the switch from a TFTP server configuration Download a switch configuration file from a TFTP server ipaddr The IP address of the TFTP server path_filename The DOS path and filename...

Page 59: ... uploaded to the TFTP server log Specifies that the switch s current log will be uploaded to the TFTP server ipaddr The IP address of the TFTP server The TFTP server must be on the same IP subnet as the switch path_filename 127 Specifies the location of the switch configuration file on the TFTP server This file will be replaced by the uploaded file from the switch Restrictions The TFTP server must...

Page 60: ...value of 1 to 99 seconds can be specified The default is 1 second Pinging an IP address without the times parameter will ping the target device an infinite amount of times Restrictions None Example usage To ping the IP address 10 48 74 121 four times local ping 10 48 74 121 times 4 Command ping 10 48 74 121 Reply from 10 48 74 121 time 10ms Reply from 10 48 74 121 time 10ms Reply from 10 48 74 121...

Page 61: ... from 30000 to 64900 timeout sec 1 65535 Defines the time out period while waiting for a response from the remote device The user may choose an entry between 1 and 65535 seconds probe value 1 9 The probe value is the number of times the switch will send probe packets to the next hop on the intended traceroute path The default is 1 Restrictions None Example usage To trace the routed path between th...

Page 62: ... the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables show packet ports Purpose Used to display statistics about the packets sent and received by the switch Syntax show packet ports portlist Description This command is used to display statistics about packets sent and receive...

Page 63: ...X 152 1 Multicast RX 557 2 Broadcast RX 3686 16 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show error ports Purpose Used to display the error statistics for a range of ports Syntax show error ports portlist Description This command will display all of the packet error statistics collected and logged by the switch for a given port list Parameters portlist Specifies a port or rang...

Page 64: ...ous Page r Refresh show utilization Purpose Used to display real time port and cpu utilization statistics Syntax show utilization cpu Description This command will display the real time port and cpu utilization statistics for the switch Parameters cpu Entering this parameter will display the current cpu utilization of the switch as a percentage Restrictions None To display the current cpu utilizat...

Page 65: ... Restrictions Only administrator level users can issue this command Example usage To clear the counters local clear counters ports 2 7 2 9 Command clear counters ports 2 7 2 9 Success local clear log Purpose Used to clear the switch s history log Syntax clear log Description This command will clear the switch s history log Parameters None Restrictions Only administrator level users can issue this ...

Page 66: ...og Multiple entries may be made in the form of x x where x is the number of an entry in the log The smallest number and therefore the earlier entry will be first Restrictions None Example usage To display the switch history log local show log index 1 4 Command show log index 1 4 Index Time Log Text 4 01 54 53 Port 1 13 link up 100Mbps FULL duplex 3 01 54 53 Spanning Tree Protocol is enabled 2 01 5...

Page 67: ...priority value 0 240 migrate yes no edge true false p2p true false auto state enable disable enable stp disable stp show stp show stp ports portlist Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables config stp Purpose Used to setup STP a...

Page 68: ...is used in determining the root device root port and designated port The device with the highest priority becomes the root device The lower the numerical value the higher the priority The default is 32 768 version rstp stp Select the Spanning Tree Protocol version used for the switch stp Select this parameter for IEEE 802 1d STP and for IEEE 802 1w STP compatibility mode rstp Select this parameter...

Page 69: ... to setup STP on the port level Syntax config stp ports portlist cost auto value 1 200000000 priority value 0 240 migrate yes no edge true false p2p true false auto state enable disable Description This command is used to create and configure STP for a group of ports ...

Page 70: ...ed to network stations or segments that will be upgraded to 802 1w RSTP on all or some portion of the segment edge true false true designates the port as an edge port Edge ports cannot create loops however an edge port can lose edge port status if a topology change creates a potential for a loop An edge port normally should not receive BPDU packets If a BPDU packet is received it automatically los...

Page 71: ...enabled on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable STP globally on the switch local enable stp Command enable stp Success local disable stp Purpose Used to globally disable STP on the switch Syntax disable stp Description This command allows the Spanning Tree Protocol to be globally disabled on the switch Parameters None...

Page 72: ...stp Purpose Used to display the switch s current STP configuration Syntax show stp Description This command displays the switch s current STP configuration Parameters None Restrictions None Example usage To display the status of STP on the switch Status 1 STP enabled with STP compatible version ...

Page 73: ...t Priority 32768 Cost to Root 0 Root Port None Last Topology Change 140sec Topology Changes Count 66 Protocol Specification 3 Max Age 20 Hello Time 2 Forward Delay 15 Hold Time 3 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh Status 2 STP disabled local show stp Command show stp STP Status Disabled Max Age 20 Hello Time 2 Forward Delay 15 Priority 32768 STP Version STP compatible TX...

Page 74: ...pecifies a port or range of ports to be configured Restrictions None Example usage To display STP state of ports1 1 4 local local show stp ports 1 4 Command show stp ports 1 4 Port Designated Bridge State Cost Pri Edge P2P Status Role 1 N A Yes 200000 0 No Yes Disabled Disabled 2 N A Yes 200000 0 No Yes Disabled Disabled 3 N A Yes 200000 0 No Yes Disabled Disabled 4 N A Yes 200000 0 No Yes Disable...

Page 75: ... command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables create fdb Purpose Used to create a static entry to the unicast MAC address forwarding table database Syntax create fdb vlan_name 32 macaddr port port Description This command will make an en...

Page 76: ...ding database Parameters vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that will be added to the forwarding table Restrictions Only administrator level users can issue this command Example usage To create multicast MAC forwarding local create multicast_fdb default 01 00 00 00 00 01 Command create multicast_fdb default 01 00 00 00 00 01 Success local con...

Page 77: ...ss of the switch Dynamic forwarding table entries which are made up of the source MAC addresses and their associated port numbers are deleted from the table if they are not accessed within the aging time The aging time can be from 10 to 1000000 seconds with a default value of 300 seconds A very long aging time can result in dynamic forwarding table entries that are out of date or no longer exist T...

Page 78: ...C address forwarding database Parameters vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that will be deleted from the forwarding table Restrictions Only administrator level users can issue this command Example usage To delete a permanent FDB entry local delete fdb default 00 00 00 00 01 02 Command delete fdb default 00 00 00 00 01 02 Success local Exampl...

Page 79: ...e through this port all Clears all dynamic entries to the switch s forwarding database Restrictions Only administrator level users can issue this command Example usage To clear all FDB dynamic entries local clear fdb all Command clear fdb all Success local show multicast_fdb Purpose Used to display the contents of the switch s multicast forwarding database Syntax show mulitcast_fdb vlan vlan_name ...

Page 80: ...tic aging_time Description This command will display the current contents of the switch s forwarding database Parameters port port The port number corresponding to the MAC destination address The switch will always forward traffic to the specified device through this port vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that is present in the forwarding da...

Page 81: ...ult 00 00 E2 7F 6B 53 10 Dynamic 1 default 00 00 E2 82 7D 90 10 Dynamic 1 default 00 00 F8 7C 1C 29 10 Dynamic 1 default 00 01 02 03 04 00 CPU Self 1 default 00 01 02 03 04 05 10 Dynamic 1 default 00 01 30 10 2C C7 10 Dynamic 1 default 00 01 30 FA 5F 00 10 Dynamic 1 default 00 02 3F 63 DD 68 10 Dynamic CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show ipfdb Purpose Used to display th...

Page 82: ...5 Dynamic System 10 1 1 1 15 Dynamic System 10 1 1 101 15 Dynamic System 10 1 1 151 15 Dynamic System 10 1 1 152 15 Dynamic System 10 1 1 157 15 Dynamic System 10 1 1 161 15 Dynamic System 10 1 1 164 15 Dynamic System 10 1 1 173 15 Dynamic System 10 1 1 191 15 Dynamic System 10 1 1 254 15 Dynamic System 10 1 49 1 15 Dynamic System 10 1 49 5 15 Dynamic System 10 1 49 9 15 Dynamic System 10 1 49 15 ...

Page 83: ...to configure broadcast storm control Parameters storm_grouplist Used to specify a broadcast storm control group This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separat...

Page 84: ... the current storm traffic control configuration on the switch Parameters group_list storm_grouplist Used to specify a broadcast storm control group This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and e...

Page 85: ...reshold Storm Storm Lookup Fail 1 1 8 128 Disabled Disabled Disabled 2 9 16 128 Disabled Disabled Disabled 3 17 24 128 Disabled Disabled Disabled 4 25 32 128 Disabled Disabled Disabled 5 33 40 128 Disabled Disabled Disabled 6 41 48 128 Disabled Disabled Disabled 7 49 128 Disabled Disabled Disabled 8 50 128 Disabled Disabled Disabled Total Entries 8 local ...

Page 86: ... round robin queuing the number of packets sent from each priority queue depends upon the assigned weight For a configuration of 8 CoS queues A H with their respective weight value 8 1 the packets are sent in the following sequence A1 B1 C1 D1 E1 F1 G1 H1 A2 B2 C2 D2 E2 F2 G2 A3 B3 C3 D3 E3 F3 A4 B4 C4 D4 E4 A5 B5 C5 D5 A6 B6 C6 A7 B7 A8 A1 B1 C1 D1 E1 F1 G1 H1 For round robin queuing if each CoS ...

Page 87: ...es a port or range of ports to be configured all Choose this parameter to select all configurable ports rx_rate Specifies that one of the parameters below no_limit or value 1 1000 will be applied to the rate at which the above specified ports will be allowed to receive packets no_limit Specifies that there will be no limit on the rate of packets received by the above specified ports value 1 1000 S...

Page 88: ...trol configuration on the switch Syntax Show bandwidth_control portlist Description The show bandwidth_control command displays the current bandwidth control configuration on the switch on a port by port basis Parameters portlist Specifies a port or range of ports to be configured Using this command without adding a portlist entry will show the bandwidth control for all ports in the switch stack R...

Page 89: ...it 7 no_limit no_limit 8 no_limit no_limit 9 no_limit no_limit 10 no_limit no_limit 11 no_limit no_limit 12 no_limit no_limit 13 no_limit no_limit 14 no_limit no_limit 15 no_limit no_limit 16 no_limit no_limit 17 no_limit no_limit 18 no_limit no_limit local config 802 1p user_priority Purpose Used to map the 802 1p user priority tags of an incoming packet to one of the eight hardware queues availa...

Page 90: ...hart 802 1p Switch Hardware Value Priority Queue 0 1 1 0 2 0 3 1 4 2 5 2 6 3 7 3 Parameters priority 0 7 Specifies which of the eight 802 1p priority tags 0 through 7 you want to map to one of the switch s hardware priority queues class_id 0 through 3 class_id 0 3 Specifies which of the switch s hardware priority queues the 802 1p priority tags specified above will be mapped to Restrictions Only a...

Page 91: ...ommand show 802 1p user_priority QOS Class of Traffic Priority 0 Class 1 Priority 1 Class 0 Priority 2 Class 0 Priority 3 Class 1 Priority 4 Class 2 Priority 5 Class 2 Priority 6 Class 3 Priority 7 Class 3 local config 802 1p default_priority Purpose Used to specify default priority settings on the switch Untagged packets that are received by the switch will be assigned a priority tag in its prior...

Page 92: ...mple 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order all Specifies that the config 802 1p default_priority command will be applied to all ports on the switch priority 0 7 Specifies the 802 1p priority tag that an untagged incoming packet will be given before being forwarded t...

Page 93: ...lays the currently configured 802 1p priority tag that will be assigned to an incoming untagged packet before being forwarded to its destination Parameters portlist Specifies a port or range of ports to be viewed Restrictions None Example usage To display the current 802 1p default priority configuration on the switch local local show 802 1p default_priority all Command show 802 1p default_priorit...

Page 94: ... Restrictions None Example Usage To show the scheduling local show scheduling Command show scheduling QOS Output Scheduling MAX Packets MAX Latency Class 0 0 0 Class 1 0 0 Class 2 0 0 Class 3 0 0 local config scheduling Purpose Used to configure QOS output scheduling Syntax config scheduling class_id 0 3 max_packet value 0 255 max_latency value 0 255 Description This command will config QOS output...

Page 95: ...DES 3350SR Layer 3 Gigabit Switch 91 To show the scheduling local config scheduling 0 max_packet 2 max_latency 3 Command config scheduling 0 max_packet 2 max_latency 3 Success local ...

Page 96: ...ption This command allows a range of ports to have all of their traffic also sent to a designated port where a network sniffer or other device can monitor the network traffic In addition you can specify that only traffic received by or sent by one or both is mirrored to the Target port Parameters port port This specifies the Target port the port where mirrored packets will be sent add source ports...

Page 97: ...g configuration Parameters port port This specifies the Target port the port where mirrored packets will be sent delete source port Adding this parameter will delete source ports according to ports entered using the portlist portlist This specifies a range of ports that will be mirrored That is the range of ports in which all traffic will be copied and sent to the Target port rx Allows the mirrori...

Page 98: ...nd off without having to modify the port mirroring configuration Parameters None Restrictions None Example usage To enable mirroring configurations local enable mirror Command enable mirror Success local disable mirror Purpose Used to disable a previously entered port mirroring configuration Syntax disable mirror Description This command combined with the enable mirror command above allows you to ...

Page 99: ... current port mirroring configuration on the switch Syntax show mirror Description This command displays the current port mirroring configuration on the switch Parameters None Restrictions None Example usage To display mirroring configuration local show mirror Command show mirror Current Settings Mirror Status Enabled Target Port 1 9 Mirrored Port RX TX 1 1 1 5 local ...

Page 100: ...n detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables create vlan Purpose Used to create a VLAN on the switch Syntax create vlan vlan_name 32 tag vlanid advertisement Description This command allows you to create a VLAN on the switch Parameters vlan_name 32 The nam...

Page 101: ...ant to delete Restrictions Only administrator level users can issue this command Example usage To remove the vlan v1 local delete vlan v1 Command delete vlan v1 Success local config vlan Purpose Used to add additional ports to a previously configured VLAN Syntax config vlan vlan_name 32 add tagged untagged forbidden delete portlist advertisement enable disable Description This command allows you t...

Page 102: ...ble disable Enables or disables GVRP on the specified VLAN Restrictions Only administrator level users can issue this command Example usage To add 4 through 8 of module 2 as tagged ports to the VLAN v1 config gvrp Purpose Used to configure GVRP on the switch Syntax config gvrp portlist all state enable disable ingress_checking enable disable acceptable_frame tagged_only admit_all pvid vlanid 1 409...

Page 103: ...ch pvid vlanid 1 4094 Specifies the default VLAN associated with the port Restrictions Only administrator level users can issue this command Example usage To set the ingress checking status the sending and receiving GVRP information local config gvrp 1 1 1 4 state enable ingress_checking enable acceptable_frame tagged_only pvid 2 Command config gvrp 1 1 1 4 state enable ingress_checking enable acc...

Page 104: ... this command Example usage To disable the Generic VLAN Registration Protocol GVRP local disable gvrp Command disable gvrp Success local show vlan Purpose Used to display the current VLAN configuration on the switch Syntax show vlan vlan_name 32 Description This command displays summary information about each VLAN including the VLAN ID VLAN name the Tagging Untagging status and the Member Non memb...

Page 105: ...ID 2 VLAN Name v1 VLAN TYPE static Advertisement Disabled Member ports 1 12 2 12 Static ports 1 12 2 12 Untagged ports Forbidden ports Total Entries 2 local show gvrp Purpose Used to display the GVRP status for a port list on the switch Syntax show gvrp portlist Description This command displays the GVRP status for a port list on the switch Parameters portlist Specifies a range of ports for which ...

Page 106: ...bled Enabled All Frames 1 9 1 Disabled Enabled All Frames 1 10 1 Disabled Enabled All Frames 1 11 1 Disabled Enabled All Frames 1 12 1 Disabled Enabled All Frames 2 1 1 Disabled Enabled All Frames 2 2 1 Disabled Enabled All Frames 2 3 1 Disabled Enabled All Frames 2 4 1 Disabled Enabled All Frames 2 5 1 Disabled Enabled All Frames 2 6 1 Disabled Enabled All Frames 2 7 1 Disabled Enabled All Frames...

Page 107: ...mac_source mac_destination mac_source_dest ip_source ip_destination ip_source_dest show link_aggregation group_id value 1 6 algorithm config lacp_port portlist mode active passive show lacp_port portlist Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations g...

Page 108: ...nually configured if the configuration of the trunked group is changed If static link aggregation is used be sure that both ends of the connection are properly configured and that all ports have the same speed duplex settings Restrictions Only administrator level users can issue this command Example usage To create a link aggregation group local create link_aggregation group_id 1 Command create li...

Page 109: ...up to 6 link aggregation groups to be configured The group number identifies each of the groups master_port port Master port ID Specifies which port by port number of the link aggregation group will be the master port All of the ports in a link aggregation group will share the port configuration with the master port ports portlist Specifies a range of ports that will belong to the link aggregation...

Page 110: ...ne the MAC destination address mac_source_dest Indicates that the switch should examine the MAC source and destination addresses ip_source Indicates that the switch should examine the IP source address ip_destination Indicates that the switch should examine the IP destination address ip_source_dest Indicates that the switch should examine the IP source address and the destination address Restricti...

Page 111: ...by the algorithm in use by that group Restrictions None Example usage To display Link Aggregation configuration local show link_aggregation Command show link_aggregation Link Aggregation Algorithm MAC source dest Group ID 1 Master Port 2 10 Member Port 1 5 1 10 2 10 Active Port Status Disabled Flooding Port 1 5 DES 3350SR 4 config lacp_ports Purpose Used to configure settings for LACP compliant po...

Page 112: ... compliant devices to negotiate the aggregated link so the group may be changed dynamically as needs require In order to utilize the ability to change an aggregated port group that is to add or subtract ports from the group at least one of the participating devices must designate LACP ports as active Both devices must support LACP passive LACP ports that are designated as passive cannot process LA...

Page 113: ...eginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To display LACP port mode settings local show lacp_port 1 1 1 11 Comman...

Page 114: ...dr mac_address macaddr all blocked all vlan_name vlan_name mac_address macaddr Each command is listed in detail in the following sections create address_binding ip_mac ipaddress Purpose Used to create an IP MAC Binding entry Syntax ipaddr mac_address macaddr Description This command will create an IP MAC Binding entry Parameters ipaddr The IP address of the device where the IP MAC binding is made ...

Page 115: ... address_binding ip_mac ipaddress 10 1 1 3 mac_address 00 00 00 00 00 05 Command config address_binding ip_mac ipaddress 10 1 1 3 mac_address 00 00 00 00 00 05 Success local config address_binding ip_mac ports Purpose Used to configure an IP MAC state to enable or disable for specified ports Syntax portlist all state enable disable Description This command will configure IP MAC state to enable or ...

Page 116: ...ed IP_MAC Address Binding enties can be viewed by entering the physical and IP addresses of the device Blocked Blocked address binding entries bindings between VLAN names and MAC addresses can be viewed by entering the VLAN name and the physical address of the device Ports The number of enabled ports on a device Parameters ipaddr The IP address of the device where the IP MAC binding is made macadd...

Page 117: ...ing the physical and IP addresses of the device Toggleing to all will delete all the Address Binding entries Blocked Blocked address binding entries bindings between VLAN names and MAC addresses can be deleted by entering the VLAN name and the physical address of the device To delete all the Blocked Address Binding entries toggle all Parameters ipaddr The IP address of the device where the IP MAC ...

Page 118: ...xample usage To delete an IP MAC Binding on the switch local delete address_binding ip_mac ipaddress 10 1 1 1 mac_address 00 00 00 00 00 06 Command delete address_binding ip_mac ipaddress 10 1 1 1 mac_address 00 00 00 00 00 06 Success local ...

Page 119: ...12 delete ipif ipif_name 12 all disable ipif ipif_name 12 all Each command is listed in detail in the following sections enable ipif Purpose Used to enable an IP interface on the switch Syntax enable ipif ipif_name 12 all Description This command will enable the IP interface function on the switch Parameters ipif_name 12 The name for the IP interface to be created This name cannot exceed 12 charac...

Page 120: ...e secondary Enter this parameter if this configured IP interface is to be a secondary IP interface of the VLAN previously specified Secondary interfaces can only be configured if a primary interface is first configured state enable disable Allows you to enable or disable the IP interface Restrictions Only administrator level users can issue this command Example usage To create an IP interface on t...

Page 121: ...ocol for the assignment of an IP address to the switch s System IP interface dhcp Allows the selection of the DHCP protocol for the assignment of an IP address to the switch s System IP interface Restrictions Only administrator level users can issue this command Example usage To configure the IP interface System local config ipif System ipaddress 10 48 74 122 8 Command config ipif System ipaddress...

Page 122: ...f an IP interface on the switch Syntax delete ipif ipif_name 12 all Description This command will delete the configuration of an IP interface on the switch Parameters ipif_name The name created for the IP interface all Entering this parameter will delete all the IP interfaces currently configured on the switch Restrictions None Example usage To delete the IP interface named s2 local delete ipif s2...

Page 123: ...onfiguration of an IP interface on the switch Parameters ipif_name 12 The name created for the IP interface all Entering this parameter will delete all the IP interfaces currently configured on the switch Restrictions None Example usage To disable the IP interface named s2 local disable ipif s2 Command disable ipif s2 Success local ...

Page 124: ... 25 state enable disable Description This command allows you to configure IGMP snooping on the switch Parameters ipif_name 12 The name of the IP interface for which you want to configure IGMP all Specifies all the IP interfaces on the switch version value 1 2 The IGMP version number query_interval sec 1 25 The time in seconds between general query transmissions in seconds max_response_time sec 1 2...

Page 125: ...the IGMP configuration for the switch if no IP interface name is specified If an IP interface name is specified the command will display the IGMP configuration for that IP interface Parameters ipif_name 12 The name of the IP interface for which the IGMP configuration will be displayed Restrictions None Example Usage To display IGMP configurations local show igmp Command show igmp IGMP Interface Co...

Page 126: ...display ipif_name 12 The name of the IP interface the IGMP group is part of Restrictions None Example Usage To display IGMP group table local show igmp group Command show igmp group Interface Name Multicast Group Last Reporter IP Querier IP Expire System 224 0 0 2 10 42 73 111 10 48 74 122 260 System 224 0 0 9 10 20 53 1 10 48 74 122 260 System 224 0 1 24 10 18 1 3 10 48 74 122 259 System 224 0 1 ...

Page 127: ...disable igmp snooping forward_mcrouter_only config router_ports vlan_name 32 add delete portlist show router_ports vlan vlan_name 32 static dynamic show igmp_snooping vlan vlan_name 32 show igmp_snooping group vlan vlan_name 32 show igmp_snooping forwarding vlan vlan_name 32 Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch st...

Page 128: ...The default is 2 seconds state enable disable Allows you to enable or disable IGMP snooping for the specified VLAN Restrictions Only administrator level users can issue this command Example usage To configure the igmp snooping local config igmp_snooping default host_timeout 250 state enable Command config igmp_snooping default host_timeout 250 state enable Success local config igmp_snooping querie...

Page 129: ... variable x query interval 1 x query response interval Other querier present interval Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the querier This interval is calculated as follows robustness variable x query interval 0 5 x query response interval Last member query count Number of group specific queries sent before the ro...

Page 130: ...ll only forward all multicast traffic to the multicast router only Otherwise the switch forwards all multicast traffic to any IP router Parameters forward_mcrouter_only Specifies that the switch should only forward all multicast traffic to a multicast enabled router Otherwise the switch will forward all multicast traffic to any IP router Restrictions Only administrator level users can issue this c...

Page 131: ...o disable IGMP snooping on the switch local disable igmp_snooping Command disable igmp_snooping Success local config router_ports Purpose Used to configure ports as router ports Syntax config router_ports vlan_name 32 add delete portlist Description This command allows you to designate a range of ports as being connected to multicast enabled routers This will ensure that all packets with such a ro...

Page 132: ...ill display the router ports currently configured on the switch Parameters vlan_name 32 The name of the VLAN on which the router port resides static Displays router ports that have been statically configured dynamic Displays router ports that have been dynamically configured Restrictions None Example usage To display the router ports local show router_ports Command show router_ports VLAN Name defa...

Page 133: ...ing on the switch Syntax show igmp_snooping vlan vlan_name 32 Description This command will display the current IGMP snooping configuration on the switch Parameters vlan_name 32 The name of the VLAN for which you want to view the IGMP snooping configuration Restrictions None Example usage To show igmp snooping ...

Page 134: ...uter Behavior Non Querier State Disabled VLAN Name vlan2 Query Interval 125 Max Response Time 10 Robustness Value 2 Last Member Query Interval 1 Host Timeout 260 Route Timeout 260 Leave Timer 2 Querier State Disabled Querier Router Behavior Non Querier State Disabled Total Entries 2 local show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the switch S...

Page 135: ...abit Switch 131 show igmp_snooping group Parameters vlan vlan_name 32 The name of the VLAN for which you want to view IGMP snooping group configuration information Restrictions None Example usage To show igmp snooping group ...

Page 136: ...eports 1 Port Member 1 5 2 4 VLAN Name default Multicast group 234 5 6 7 MAC address 01 00 5E 05 06 07 Reports 1 Port Member 1 6 2 9 VLAN Name default Multicast group 236 54 63 75 MAC address 01 00 5E 36 3F 4B Reports 1 Port Member 1 10 2 2 VLAN Name default Multicast group 239 255 255 250 MAC address 01 00 5E 7F FF FA Reports 2 Port Member 1 8 2 4 VLAN Name default Multicast group 239 255 255 254...

Page 137: ...rding table entries currently configured on the switch Parameters vlan_name 32 The name of the VLAN for which you want to view IGMP snooping forwarding table information Restrictions None Example usage To view the IGMP snooping forwarding table for VLAN Trinity local show igmp_snooping forwarding vlan Trinity Command show igmp_snooping forwarding vlan Trinity VLAN Name Trinity Multicast group 224 ...

Page 138: ...1x auth_parameter ports portlist all default direction both in port_control force_unauth auto force_auth quiet_period sec 0 65535 tx_period sec 1 65535 supp_timeout sec 1 65535 server_timeout sec 1 65535 max_req value 1 10 reauth_period sec 1 65535 enable_reauth enable disable config 802 1x init port_based ports portlist all mac_based ports portlist all mac_address macaddr config 802 1x reauth por...

Page 139: ...is command Example usage To enable 802 1x switch wide local enable 802 1x Command enable 802 1x Success local disable 802 1x Purpose Used to disable the 802 1x server on the switch Syntax disable 802 1x Description The disable 802 1x command is used to disable the 802 1x Port based Network Access control server application on the switch Parameters None Restrictions Only administrator level users c...

Page 140: ...o display the current configuration of the 802 1x server on the switch Syntax show 802 1x auth_configuration ports portlist Description The show 802 1x command is used to display the current configuration of the 802 1x Port based Network Access Control server application on the switch ...

Page 141: ...ommunication in both receiving and transmitting directions or just the receiving direction Port Control ForceAuth ForceUnauth Auto Shows the administrative control over the port s authorization status ForceAuth forces the Authenticator of the port to become Authorized ForceUnauth forces the port to become Unauthorized QuietPeriod Shows the time interval between authentication failure and the start...

Page 142: ...eriod 30 sec SuppTimeout 30 sec ServerTimeout 30 sec MaxReq 2 times ReAuthPeriod 3600 sec ReAuthenticate Disabled CTRL C ESC q Quit SPACE n Next Page Enter Next Entry a All show 802 1x auth_state Purpose Used to display the current authentication state of the 802 1x server on the switch Syntax show 802 1x auth_state ports portlist Description The show 802 1x auth_state command is used to display t...

Page 143: ...n access the network Unauthorized means that the user was not authenticated and cannot access the network Restrictions Only administrator level users can issue this command Example usage To display the 802 1x auth state for ports 1 4 local show 802 1x auth_state ports 1 4 Command show 802 1x auth_state ports 1 4 Port Auth PAE State Backend State Port Status 1 ForceAuth Success Authorized 2 ForceAu...

Page 144: ...802 1x capability of a range of ports on the switch Syntax config 802 1x capability ports portlist all authenticator none Description The config 802 1x capability ports command has four capabilities that can be set for each port Authenticator Supplicant Authenticator and Supplicant and None Parameters portlist Specifies a range of ports all Specifies all of the ports on the switch authenticator A ...

Page 145: ...o their default 802 1x settings Syntax config 802 1x auth_parameter ports portlist all default direction both in port_control force_unauth auto force_auth quiet_period sec 0 65535 tx_period sec 1 65535 supp_timeout sec 1 65535 server_timeout sec 1 65535 max_req value 1 10 reauth_period sec 1 65535 enable_reauth enable disable Description The config 802 1x auth_parameter command is used to configur...

Page 146: ... quiet_period sec 0 65535 Configures the time interval between authentication failure and the start of a new authentication attempt tx_period sec 1 65535 Configures the time to wait for a response from a supplicant user to send EAP Request Identity packets supp_timeout sec 1 65535 Configures the time to wait for a response from a supplicant user for all EAP packets except for the Request Identity ...

Page 147: ...alize 802 1x functions based only on the port number Ports approved for initialization can then be specified portlist Specifies a port or range of ports all Specifies all of the ports on the switch mac_based This instructs the switch to initialize 802 1x functions based on the MAC address of a device on a specific port or range of ports MAC address approved for initialization can then be specified...

Page 148: ...Specifies all of the ports on the switch mac based This instructs the switch to re authorize 802 1x function based on a specific MAC address Ports approved for re authorization can then be specified portlist Specifies a port or range of ports all Specifies all of the ports on the switch mac_address macaddr Specifies the MAC address of the client the user wishes to add Restrictions Only administrat...

Page 149: ...ort settings auth_port udp_port_number The UDP port number for authentication requests The default is 1812 acct_port udp_port_number The UDP port number for accounting requests The default is 1813 Restrictions Only administrator level users can issue this command Example usage To configure the RADIUS server communication settings local config radius add 1 10 48 74 121 key dlink default Command con...

Page 150: ... the switch s RADIUS settings Parameters server_index 1 3 Assigns a number to the current set of RADIUS server settings Up to 3 groups of RADIUS server settings can be entered on the switch ipaddress server_ip The IP address of the RADIUS server key Specifies that a password and encryption key will be used between the switch and the RADIUS server passwd 32 The shared secret key used by the RADIUS ...

Page 151: ...ations on the switch Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the switch Parameters None Restrictions None Example usage To display RADIUS settings on the switch local show radius Command show radius Index IP Address Auth Port Acct Port Status Key Number Number 1 10 1 1 1 1812 1813 Active kizzel 2 10 1 1 2 1812 1813 Active myniz...

Page 152: ...an vlan_name 32 source_mac macaddr destination_mac macaddr 802 1p value 0 7 ethernet_type hex 0x0 0xffff ip vlan vlan_name 32 source_ip ipaddr destination_ip ipaddr dscp value 0 63 icmp type value 0 255 code value 0 255 igmp type value 0 255 tcp src_port value 0 65535 dst_port value 0 65535 flag_mask all urg ack psh rst syn fin udp src_port value 0 65535 dst_port value 0 65535 protocol_id value 0 ...

Page 153: ...ess profile was created The add parameter instructs the switch to add the criteria that follows to the list of rules that are associated with access profile 1 For each rule entered into the access profile you can assign an access_id that both identifies the rule and establishes a priority within the list of rules A lower access_id gives the rule a higher priority The ip parameter instructs the swi...

Page 154: ...ex0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_32 47 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_48 63 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_64 79 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff port portlist all profile_id value 1 255 Description The cr...

Page 155: ... destination_ip_mask netmask Specifies an IP address mask for the destination IP address dscp Specifies that the switch will examine the DiffServ Code Point DSCP field in each frame s header icmp Specifies that the switch will examine the Internet Control Message Protocol ICMP field in each frame s header type Specifies that the switch will examine each frame s ICMP Type field code Specifies that ...

Page 156: ...s_profile Purpose Used to delete a previously created access profile Syntax delete access_profile profile_id value 1 255 Description The delete access_profile command is used to delete a previously created access profile on the switch Parameters profile_id value 1 255 Enter an integer between 1 and 255 that is used to identify the access profile that will be deleted with this command This value is...

Page 157: ...pe value 0 255 tcp src_port value 0 65535 dst_port value 0 65535 flag_mask all urg ack psh rst syn fin udp src_port value 0 65535 dst_port value 0 65535 protocol_id value 0 255 user_define hex 0x0 0xffffffff packet_content offset_0 15 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_16 31 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff ...

Page 158: ...s that the access profile will apply only to packets with this hexadecimal 802 1Q Ethernet type value in the packet header ip Specifies that the switch will look into the IP fields in each packet vlan vlan_name 32 Specifies that the access profile will apply to only to this VLAN source_ip ipaddr Specifies that the access profile will apply to only packets with this source IP address destination_ip...

Page 159: ...uccess local show access_profile Purpose Used to display the currently configured access profiles on the switch Syntax show access_profile profile_id value 1 255 Description The show access_profile command is used to display the currently configured access profiles Parameters profile_id value 1 255 Enter this parameter along with the appropriate value between 1 and 255 to view a specific access pr...

Page 160: ...50SR Layer 3 Gigabit Switch 156 local show access_profile Command show access_profile Access Profile Table Access Profile ID 2 TYPE Ethernet Frame Filter Ports 1 Masks VLAN 802 1P ID Mode 3 Permit 0 0 x local ...

Page 161: ...configurations graphs and tables config traffic_segmentation Purpose Used to configure traffic segmentation on the switch Syntax config traffic_segmentation portlist forward_list null portlist Description The config traffic_segmentation command is used to configure traffic segmentation on the switch Parameters portlist Specifies a range of ports that will be configured for traffic segmentation for...

Page 162: ...show traffic_segmentation portlist Description The show traffic_segmentation command is used to display the current traffic segmentation configuration on the switch Parameters portlist Specifies a port or range of ports for which the current traffic segmentation configuration on the switch will be displayed Restrictions The port lists for segmentation and the forward list must be on the same switc...

Page 163: ...ow traffic_segmentation Command show traffic_segmentation Traffic Segmentation Table Port Forward Portlist 1 1 50 2 1 50 3 1 50 4 1 50 5 1 50 6 1 50 7 1 50 8 1 50 9 1 50 10 1 50 11 1 50 12 1 50 13 1 50 14 1 50 15 1 50 16 1 50 17 1 50 18 1 50 local ...

Page 164: ...date end_date 1 31 e mth end_mth 1 12 e time end_time hh mm offset 30 60 show time Each command is listed in detail in the following sections config sntp Purpose Used to setup SNTP service Syntax config sntp primary ipaddr secondary ipaddr poll interval int 30 99999 Description Use this command to configure SNTP service from an SNTP server SNTP must be enabled for this command to function See enab...

Page 165: ...ss time and poll interval Parameters None Restrictions Only administrator level users can issue this command Example usage To display SNTP configuration information local show sntp Command show sntp Current Time Source System Clock SNTP Disabled SNTP Primary Server 10 1 1 1 SNTP Secondary Server 10 1 1 2 SNTP Poll Interval 720 sec local enable sntp Purpose Enables SNTP server support Syntax enable...

Page 166: ... sntp Command enable sntp Success local disable sntp Purpose Disables SNTP server support Syntax disable sntp Description This will disable SNTP support SNTP service must be separately configured see config sntp Parameters None Restrictions Only administrator level users can issue this command Example To stop SNTP support local disable sntp Command disable sntp Success local config time Purpose Us...

Page 167: ...onth three alphabetical characters for the name of the month and four numerical characters for the year time Express the system time using the format hh mm ss that is two numerical characters each for the hour using a 24 hour clock the minute and second For example 19 42 30 Restrictions Only administrator level users can issue this command Manually configured system time and date settings are over...

Page 168: ... time Current Time Scource System Clock Boot Time 0 Days 00 00 00 Current Time 0 Days 01 16 47 Time zone GMT 06 00 Daylight Saving Time Disabled Offset in minutes 60 Repeating From Apr 1st Sun 02 00 To Oct last Sun 02 00 Annual From 29 Apr 02 00 To 12 Oct 02 00 local ...

Page 169: ... make a static entry into the ARP table Syntax create arpentry ipaddr macaddr Description This command is used to enter an IP address and the corresponding MAC address into the switch s ARP table Parameters ipaddr The IP address of the end node or station macaddr The MAC address corresponding to the IP address above Restrictions Only administrator level users can issue this command Example Usage T...

Page 170: ...P address 10 48 74 12 and MAC address 00 50 BA 00 07 36 local config arpentry 10 48 74 12 00 50 BA 00 07 36 Command config arpentry 10 48 74 12 00 50 BA 00 07 36 Success local delete arpentry Purpose Used to delete a static entry into the ARP table Syntax delete arpentry ipaddr all Description This command is used to delete a static ARP entry made using the create arpentry command above by specify...

Page 171: ...ing accessed before it is dropped from the table Parameters time value 0 65535 The ARP age out time in minutes The value may be set in the range of 0 65535 minutes with a default setting of 20 minutes Restrictions Only administrator level users can issue this command Example Usage To configure ARP aging time local config arp_aging time 30 Command config arp_aging time 30 Success local show arpentr...

Page 172: ...0 A0 C9 A4 22 5B Dynamic System 10 9 68 4 00 80 C8 2E C7 45 Dynamic System 10 10 27 51 00 80 C8 48 DF AB Dynamic System 10 11 22 145 00 80 C8 93 05 6B Dynamic System 10 11 94 10 00 10 83 F9 37 6E Dynamic System 10 14 82 24 00 50 BA 90 37 10 Dynamic System 10 15 1 60 00 80 C8 17 42 55 Dynamic System 10 17 42 153 00 80 C8 4D 4E 0A Dynamic System 10 19 72 100 00 50 BA 38 7D 5E Dynamic System 10 21 32...

Page 173: ...e dynamic ARP table entries from the switch s ARP table Static ARP table entries are not affected Parameters None Restrictions Only administrator level users can issue this command Example Usage To remove dynamic entries in the ARP table local clear arptable Command clear arptable Success local ...

Page 174: ...ckup IP route entry to the switch s IP routing table Parameters network_address IP address and netmask of the IP interface that is the destination of the route You can specify the address and mask information using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 ipaddr The gateway IP address for the next hop router metric 1 65535 Allows the entry of a routing pro...

Page 175: ...ic Allows the entry of a routing protocol metric entry representing the number of routers between the Switch and the IP address above The default setting is 1 Restrictions Only administrator level users can issue this command Example Usage To add the default static address 10 48 74 121 with a metric setting of 1 to the routing table local create iproute default 10 48 74 121 1 Command create iprout...

Page 176: ... Backup entries cannot have the same Gateway Restrictions Only administrator level users can issue this command Example Usage To delete a backup static address 10 48 75 121 mask 255 0 0 0 and gateway ipaddr entry of 10 1 1 254 from the routing table local delete iproute 10 48 74 121 8 10 1 1 254 Command delete iproute 10 48 74 121 8 10 1 1 254 Success local delete iproute default Purpose Used to d...

Page 177: ...destination of the route You can specify the address and mask information using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 static Use this parameter to display static iproute entries rip Use this parameter to display RIP iproute entries ospf Use this parameter to display OSPF iproute entries Restrictions None Example Usage To display the contents of the IP r...

Page 178: ...SPF routes on the switch Syntax create route redistribute dst ospf src static rip local mettype 1 2 metric value Description This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local DES 3350SR switch is also redistributed Parameters ...

Page 179: ...external type_1 type_2 inter e1 inter e2 metric value Description This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local DES 3350SR switch is also redistributed Parameters src all internal external type_1 type_2 inter e1 inter e2 A...

Page 180: ...tribute dst ospf src Purpose Used configure route redistribution settings for the exchange of RIP routes to OSPF routes on the switch Syntax config route redistribute dst ospf src static rip local mettype 1 2 metric value Description Route redistribution allows routers on the network that are running different routing protocols to exchange routing information This is accomplished by comparing the ...

Page 181: ...information source RIP the Static Route table and the Local interface routing information Routing information will be redistributed to OSPF The following table lists the allowed values for the routing metrics and the types or forms of the routing information that will be redistributed Route Source Metric Metric Type RIP 0 to 16777214 mettype 1 mettype 2 Static 0 to 16777214 mettype 1 mettype 2 Loc...

Page 182: ... on the local switch is also redistributed Parameters src all internal external type_1 type_2 inter e1 inter e2 Allows the selection of the protocol of the source device metric value Allows the entry of an OSPF interface cost This is analogous to a Hop Count in the RIP routing protocol Restrictions Only administrator level users can issue this command Example Usage To configure route redistributio...

Page 183: ...e switch Syntax show route redistribute dst rip ospf src rip static local ospf Description Displays the current route redistribution settings on the switch Parameters src rip static local ospf Allows the selection of the routing protocol on the source device dst rip ospf Allows the selection of the routing protocol on the destination device Restrictions none Example Usage To display route redistri...

Page 184: ...DES 3350SR Layer 3 Gigabit Switch 180 ...

Page 185: ...s listed in detail in the following sections config bootp_relay Purpose Used to configure the BOOTP relay feature of the switch Syntax config bootp_relay hops value 1 16 time sec 0 65535 Description This command is used to configure the BOOTP relay feature Parameters hops value 1 16 Specifies the maximum number of relay agent hops that the BOOTP packets can cross time sec 0 65535 If this time is e...

Page 186: ...this command Example Usage To add a BOOTP relay local config bootp_relay add ipif System 10 43 21 12 Command config bootp_relay add ipif System 10 43 21 12 Success local config bootp_relay delete Purpose Used to delete an IP destination addresses from the switch s BOOTP relay table Syntax config bootp_relay delete ipif ipif_name 12 ipaddr Description This command is used to delete an IP destinatio...

Page 187: ...ion on the switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable the BOOTP relay function local enable bootp_relay Command enable bootp_relay Success local disable bootp_relay Purpose Used to disable the BOOTP relay function on the switch Syntax disable bootp_relay Description This command in combination with the enable bootp_relay comman...

Page 188: ... an IP interface name is specified the BOOTP relay configuration for that IP interface Parameters ipif_name 12 The name of the IP interface for which you what to display the current BOOTP relay configuration Restrictions None Example Usage To display bootp relay status local show bootp_relay Command show bootp_relay Bootp Relay Status Disabled Bootp Hops Count Limit 4 Bootp Relay Time Threshold 0 ...

Page 189: ... config dnsr primary secondary nameserver ipaddr add delete static domain_name 32 ipaddr Description This command is used to configure the DNS relay function on the switch Parameters primary Indicates that the IP address below is the address of the primary DNS server secondary Indicates that the IP address below is the address of the secondary DNS server nameserver ipaddr The IP address of the DNS...

Page 190: ... dnsr delete static dns1 10 43 21 12 Command config dnsr delete static dns1 10 43 21 12 Success local enable dnsr Purpose Used to enable DNS relay Syntax enable dnsr cache static Description This command is used in combination with the disable dnsr command below to enable and disable DNS Relay on the switch Parameters cache This parameter will allow the user to enable the cache lookup for the DNS ...

Page 191: ...r Purpose Used to disable DNS relay on the switch Syntax disable dnsr cache static Description This command is used in combination with the enable dnsr command above to enable and disable DNS Relay on the switch Parameters cache This parameter will allow the user to disable the cache lookup for the DNS rely on the switch static This parameter will allow the user to disable the static table lookup ...

Page 192: ...DNS relay local disable dnsr static Command disable dnsr static Success local show dnsr Purpose Used to display the current DNS relay status Syntax show dnsr static Description This command is used to display the current DNS relay status Parameters static Allows the display of only the static entries into the DNS relay table If this parameter is omitted the entire DNS relay table will be displayed...

Page 193: ...r DNSR Status Disabled Primary Name Server 0 0 0 0 Secondary Name Server 0 0 0 0 DNSR Cache Status Disabled DNSR Static Cache Table Status Disabled DNS Relay Static Table Domain Name IP Address www 123 com tw 10 12 12 123 bbs ntu edu tw 140 112 1 23 Total Entries 2 local ...

Page 194: ..._compatible v2_only rx_mode v1_only v2_only v1_or_v2 disable state enable disable enable rip disable rip show rip ipif ipif_name 12 Each command is listed in detail in the following sections config rip Purpose Used to configure RIP on the switch Syntax config rip ipif ipif_name 12 all authentication enable password 16 disable tx_mode disable v1_only v1_compatible v2_only rx_mode v1_only v2_only v1...

Page 195: ...es that only RIP v1 packets will be transmitted v1_compatible Specifies that only RIP v1 compatible packets will be transmitted v2_only Specifies that only RIP v2 packets will be transmitted rx_mode Determines how received RIP packets will be interpreted as RIP version V1 only V2 Only or V1 or V2 This entry specifies which version of the RIP protocol will be used to receive RIP packets The Disable...

Page 196: ...s used to enable RIP on the switch Parameters none Restrictions Only administrator level users can issue this command Example Usage To enable RIP local enable rip Command enable rip Success local disable rip Purpose Used to disable RIP Syntax disable rip Description This command is used to disable RIP on the switch Parameters None Restrictions Only administrator level users can issue this command ...

Page 197: ...nterfaces Parameters ipif ipif_name 12 The name of the IP interface for which you want to display the RIP configuration and settings If this parameter is not specified the show rip command will display the global RIP configuration for the switch Restrictions None Example Usage To display RIP configuration local show rip Command show rip RIP Global State Disabled RIP Interface Settings Interface IP...

Page 198: ...p disable dvmrp show dvmrp neighbor ipif ipif_name 12 ipaddress network_address show dvmrp nexthop ipaddress network_address ipif ipif_name 12 show dvmrp routing_table ipaddress network_address show dvmrp ipif ipif_name 12 Each command is listed in detail in the following sections config dvmrp Purpose Used to configure DVMRP on the switch Syntax config dvmrp ipif ipif_name 12 all metric value 1 31...

Page 199: ...ll set an intermittent probe in seconds on the device that will transmit dvmrp messages depending on the time specified This probe is also used to keep alive the connection between DVMRP enabled devices The default value is 10 seconds neighbor_timeout second 1 65535 The time period for which DVMRP will hold Neighbor Router reports before issuing poison route messages The default value is 35 second...

Page 200: ...This command in combination with the enable dvmrp above to enable and disable DVMRP on the switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To disable DVMRP local disable dvmrp Command disable dvmrp Success local show dvmrp routing_table Purpose Used to display the current DVMRP routing table Syntax show dvmrp routing table ipaddress network_a...

Page 201: ... 10 90 90 90 2 Local System 20 0 0 0 8 20 1 1 1 2 Local ip2 117 30 0 0 0 8 30 1 1 1 2 Dynamic ip3 106 Total Entries 3 local show dvmrp neighbor Purpose Used to display the DVMRP neighbor table Syntax show dvmrp neighbor ipif ipif_name 12 ipaddress network_address Description This command will display the current DVMRP neighbor table Parameters ipif_name 12 The name of the IP interface for which yo...

Page 202: ...paddress network_address ipif ipif_name 12 Description This command will display the DVMRP routing next hop table Parameters ipif_name 12 The name of the IP interface for which you want to display the current DVMRP routing next hop table ipaddress network_address The IP address and netmask of the destination You can specify the IP address and netmask information using the traditional format or the...

Page 203: ...ose Used to display the current DVMRP routing table Syntax show dvmrp ipif_name 12 Description The command will display the current DVMRP routing table Parameters ipif_name 12 The name of the IP interface for which you want to display the DVMRP routing table Restrictions None Example Usage To show DVMRP configurations local show dvmrp Command show dvmrp DVMRP Global State Disabled Interface IP Add...

Page 204: ...ters ipif ipif_name 12 Name assigned to the specific IP interface being configured for PIM settings all Used to configure PIM settings for all IP interfaces hello sec 1 18724 The time in seconds between issuing hello packets to find neighboring routers jp_interval sec 1 18724 The join prune interval is the time value seconds between transmitting flooding to all interfaces multicast messages to dow...

Page 205: ...escription This command will enable PIM for the switch PIM settings must first be configured for specific IP interfaces using the config pim command Parameters None Restrictions Only administrator level users can use this command Usage Example To enable PIM as previously configured on the switch local enable pim Command enable pim Success local disable pim Purpose Used to disable PIM function on t...

Page 206: ...ghbor table for a specified IP interface or destination router IP address Parameters ipif ipif_name 12 The name of an IP interface for which you want to view the PIM neighbor router table ipaddress network_address The IP address and netmask of the destination routing device for which you want to view the neighbor router table You can specify the IP address and netmask information using the traditi...

Page 207: ... current PIM configuration Syntax show pim ipif ipif_name 12 Description This command will list current PIM configuration settings for a specified IP interface or all IP interfaces Parameters ipif ipif_name 12 The name of an IP interface for which PIM settings are listed If no parameters are specified all PIM settings are displayed for all interfaces Restrictions None Usage Example To display PIM ...

Page 208: ... Gigabit Switch 204 local show pim Command show pim PIM Global State Disabled PIM DM Interface Table Hello Join Prune Interface IP Address Interval Interval State System 10 90 90 90 8 35 60 Enabled Total Entries 1 local ...

Page 209: ...ess Description This command will display the current IP multicast forwarding cache Parameters group The multicast group ID ipaddress network_address The IP address and netmask of the destination You can specify the IP address and netmask information using the traditional format or the CIDR format For example 10 1 2 3 255 255 0 0 or 10 2 3 4 16 Restrictions None Usage Example To display the curren...

Page 210: ...face table for protocol dvmrp pim Allows the user to specify whether or not to use the DVMRP or PIM protocol to display the IP multicast interface table For example if DVMRP is specified the table will display only those entries that are related to the DVMRP protocol Restrictions None Usage Example To display the current IP multicast interface table by DVMRP entry local show ipmc ipif System proto...

Page 211: ...try in the MD5 key table Syntax create md5 key key_id 1 255 password 16 Description This command is used to create an entry for the MD5 key table Parameters key_id 1 255 The MD5 key ID The user may enter a key ranging from 1 to 255 password An MD5 password of up to 16 bytes Restrictions Only administrator level users can issue this command Usage Example To create an entry in the MD5 key table loca...

Page 212: ...config md5 key 1 taboo Command config md5 key 1 taboo Success local delete md5 key Purpose Used to delete an entry in the MD5 key table Syntax delete md5 key key_id 1 255 Description This command is used to delete a specific entry in the MD5 key table Parameters key_id 1 255 The MD5 key ID the user wishes to delete Restrictions Only administrator level users can issue this command Usage Example Th...

Page 213: ...n This command will display the current MD5 key table Parameters key_id 1 255 The MD5 key ID Restrictions None Usage Example To display the current MD5 key local show md5 Command show md5 MD5 Key Table Configurations Key ID Key 1 dlink 2 develop 3 fireball 4 intelligent Total Entries 4 local ...

Page 214: ...e ipaddr create ospf aggregation area_id network_address lsdb_type summary advertise enable disable delete ospf aggregation area_id network_address lsdb_type summary config ospf aggregation area_id network_address lsdb_type summary advertise enable disable show ospf aggregation area_id show ospf lsdb area area_id advertise_router ipaddr type rtrlink netlink summary assummary asextlink show ospf ne...

Page 215: ...ospf router_id Purpose Used to configure the OSPF router ID Syntax config ospf router_id ipaddr Description This command is used to configure the OSPF router ID Parameters ipaddr The IP address of the OSPF router Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF router ID local config ospf router_id 10 48 74 122 Command config ospf router_id 10 ...

Page 216: ...f Description This command in combination with the enable ospf command above is used to enable and disable OSPF on the switch Parameters None Restrictions Only administrator level users can issue this command Usage Example To disable OSPF on the switch local disable ospf Command disable ospf Success local show ospf Purpose Used to display the current OSPF state on the switch Syntax show ospf ...

Page 217: ...urrent state of OSPF on the switch divided into the following categories General OSPF settings OSPF Interface settings OSPF Area settings OSPF Virtual Interface settings OSPF Area Aggregation settings OSPF Host Route settings Parameters None Restrictions None Usage Example To show OSPF state ...

Page 218: ...Link DOWN 1 Total Entries 3 OSPF Area Settings Area ID Type Stub Import Summary LSA Stub Default Cost 0 0 0 0 Normal None None 10 0 0 0 Normal None None 10 1 1 1 Normal None None 20 1 1 1 Stub Enabled 1 Total Entries 4 Virtual Interface Configuration Transit Virtual Hello Dead Authentication Link Area ID Neighbor Router Interval Interval Status 10 0 0 0 20 0 0 0 10 60 None DOWN 10 1 1 1 20 1 1 1 1...

Page 219: ...ables the OSPF area to import summary LSA advertisements metric value 0 16777215 The OSPF area cost between 0 and 16777215 0 denotes that the value will be automatically assigned The default setting is 0 Restrictions Only administrator level users can issue this command Usage Example To create an OSPF area local create ospf area 10 48 74 122 type normal Command create ospf area 10 48 74 122 type n...

Page 220: ... an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain type normal stub Allows the specification of the OSPF mode of operation stub or normal stub_summary enable disable Allows the OSPF area import of LSA advertisements to be enabled or disabled metric value 0 16777215 The OSPF area stub default cost Restrictions Only administrator level users can issue this comma...

Page 221: ... 0 Normal None None None 10 48 74 122 Stub Enabled Enabled 1 Total Entries 2 local create ospf host_route Purpose Used to configure OSPF host route settings Syntax create ospf host_route ipaddr area area_id metric value 1 65535 Description This command is used to configure the OSPF host route settings Parameters ipaddr The host s IP address area_id A 32 bit number in the form of an IP address xxx ...

Page 222: ...age Example To delete an OSPF host route local delete ospf host_route 10 48 74 122 Command delete ospf host_route 10 48 74 122 Success local config ospf host_route Purpose Used to configure OSPF host route settings Syntax config ospf host_route ipaddr area area_id metric value Description This command is used to configure an OSPF host route settings Parameters ipaddr The IP address of the host are...

Page 223: ...ill display the current OSPF host route table Parameters ipaddr The IP address of the host Restrictions None Usage Example To display the current OSPF host route table local show ospf host_route Command show ospf host_route Host Address Metric Area_ID TOS 10 48 73 21 2 10 1 1 1 10 48 74 122 1 10 1 1 1 Total Entries 2 local create ospf aggregation Purpose Used to configure OSPF area aggregation set...

Page 224: ...10 1 1 1 10 48 76 122 16 lsdb_type summary advertise enable Command create ospf aggregation 10 1 1 1 10 48 76 122 16 lsdb_type summary advertise enable Success local delete ospf aggregation Purpose Used to delete an OSPF area aggregation configuration Syntax delete ospf aggregation area_id network_address lsdb_type summary Description This command is used to delete an OSPF area aggregation configu...

Page 225: ...ess xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain network_address The 32 bit number in the form of an IP address that uniquely identifies the network that corresponds to the OSPF Area lsdb_type summary Specifies the type of address aggregation advertise enable disable Allows for the advertisement trigger to be enabled or disabled Restrictions Only administrator level us...

Page 226: ...Advertise Network Address Type 10 1 1 1 10 0 0 0 8 Summary Enabled 10 1 1 1 20 2 0 0 16 Summary Enabled Total Entries 2 local show ospf lsdb Purpose Used to display the OSPF Link State Database LSDB Syntax show ospf lsdb area_id area_id advertise_router ipaddr type rtrlink netlink summary assummary asextlink Description This command will display the current OSPF Link State Database LSDB Parameters...

Page 227: ...0 RTRLink 50 48 75 73 50 48 75 73 0x80000002 0 0 0 0 Summary 50 48 75 73 10 0 0 0 8 1 0x80000001 1 0 0 0 RTRLink 50 48 75 73 50 48 75 73 0x80000001 1 0 0 0 Summary 50 48 75 73 40 0 0 0 8 1 0x80000001 1 0 0 0 Summary 50 48 75 73 50 0 0 0 8 1 0x80000001 ASExtLink 50 48 75 73 1 2 0 0 16 20 0x80000001 Total Entries 5 local show ospf neighbor Purpose Used to display the current OSPF neighbor router tab...

Page 228: ...arameters area_id A 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain neighbor_id The OSPF router ID for the neighbor This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router Restrictions None Usage Example To display the current OSPF virtual neighbor table l...

Page 229: ...e network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The dead interval must be evenly divisible by the Hello Interval metric value 1 65535 The interface metric 1 to 65535 Entering a 0 will allow automat...

Page 230: ...nable Success local config ospf all Purpose Used to configure all of the OSPF interfaces on the switch at one time Syntax config ospf all area area_id priority value hello_interval sec 1 65535 dead_interval sec 1 65535 authentication none simple password 8 md5 key_id 1 255 metric value 1 65535 state enable disable Description This command is used to configure all of the OSPF interfaces on the swit...

Page 231: ...isible by the Hello Interval metric value 1 65535 The interface metric 1 to 65535 Entering a 0 will allow automatic calculation of the metric authentication Enter the type of authentication preferred The user may choose between none Choosing this parameter will require no authentication simple password 8 Choosing this parameter will set a simple authentication which includes a case sensitive passw...

Page 232: ...iption This command will display the current OSPF interface settings for the specified interface name Parameters ipif_name 12 The IP interface name for which you want to display the current OSPF interface settings all Entering this parameter will display all ospf Interface settings Restrictions None Usage Example To display the current OSPF interface settings for a specific OSPF interface ...

Page 233: ...PF interfaces on the switch local show ospf all Command show ospf all Interface Name System IP Address 10 42 73 10 8 Link Up Network Medium Type BROADCAST Metric 1 Area ID 0 0 0 0 Administrative State Enabled Priority 1 DR State DR DR Address 10 42 73 10 Backup DR Address None Hello Interval 10 Dead Interval 40 Transmit Delay 1 Retransmit Time 5 Authentication None Interface Name ipif2 IP Address ...

Page 234: ...ween 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can b...

Page 235: ...llo_interval sec 1 65535 Allows the specification of the interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello ...

Page 236: ...interface from the switch Parameters area_id A 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain neighbor_id The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router The router ID of the neighbor router Restrictions Only...

Page 237: ...in the OSPF domain neighbor_id The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router This is the router ID of the neighbor router Restrictions None Usage Example To display the current OSPF virtual interface configuration local show ospf virtual_link Transit Virtual Hello Dead Authen...

Page 238: ...mmand Parameters show command_history config command_history value 1 40 Each command is listed in detail in the following sections Purpose Used to display all commands in the Command Line Interface CLI Syntax Description This command will display all of the commands available through the Command Line Interface CLI Parameters None Restrictions None Example usage To display all of the commands in th...

Page 239: ...rts config 802 1x init config 802 1x reauth config access profile profile_id config account config admin local_enable config all_boxes_id config arp_aging time config authen_application CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show command_history Purpose Used to display the command history Syntax show command_history Description This command will display the command history Para...

Page 240: ...ts show router ports login local config command_history Purpose Used to configure the command history Syntax config command_history value 1 40 Description This command is used to configure the command history Parameters value 1 40 The number of previously executed commands maintained in the buffer Up to 40 of the latest executed commands may be viewed Restrictions None Example usage To configure t...

Page 241: ... degrees Celsius Humidity Operating 5 to 95 RH non condensing Storage 0 to 95 RH non condensing Dimensions 441 mm x 207 mm x 44 mm 1U 19 inch rack mount width Weight 3 15 kg EMC FCC Class A CE Mark C Tick Safety CSA International General Standards IEEE 802 3u 100BASE TX Fast Ethernet IEEE 802 3ab 1000BASE T Gigabit Ethernet IEEE 802 1 P Q VLAN IEEE 802 3x Full duplex Flow Control IEEE 802 3 Nway a...

Page 242: ...r Network Cables 10BASE T 100BASE TX UTP Cat 5 Cat 5 Enhanced for 1000Mbps UTP Cat 5 for 100Mbps UTP Cat 3 4 5 for 10Mbps EIA TIA 568 100 ohm screened twisted pair STP 100m Number of Ports 48 10 100 2 Gigabit Ethernet ports Performance Transmission Method Store and forward RAM Buffer 1 MB per device Filtering Address Table 16K MAC address per device Packet Filtering Forwarding Rate Full wire speed...

Page 243: ...DES 3350SR 48 10 100Mbps plus 2 Gigabit Ports Layer 3 Stackable Switch Command Line Interface Reference Manual Release 3 ...

Page 244: ......

Page 245: ... Corporation is strictly forbidden Trademarks used in this text D Link and the D LINK logo are trademarks of D Link Computer Corporation Microsoft and Windows are registered trademarks of Microsoft Corporation Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products D Link Computer Corporation disclaims any proprie...

Page 246: ...nds 58 Spanning Tree Commands 63 Forwarding Database Commands 71 Broadcast Storm Control Commands 79 QoS Commands 82 Port Mirroring Commands 92 VLAN Commands 96 Link Aggregation Commands 103 IP MAC Binding 110 Basic IP Commands 115 IGMP Commands 120 IGMP Snooping Commands 123 802 1X Commands 134 Access Control List ACL Commands 148 Traffic Segmentation Commands 157 Time and SNTP Commands 160 ARP C...

Page 247: ... Relay Commands 181 DNS Relay Commands 185 RIP Commands 190 DVMRP Commands 194 PIM Commands 200 IP Multicasting Commands 205 MD5 Configuration Commands 207 OSPF Configuration Commands 210 Command History List 234 Technical Specifications 237 ...

Page 248: ......

Page 249: ... switch s serial port s default settings are as follows 9600 baud no parity 8 data bits 1 stop bit A computer running a terminal emulation program capable of emulating a VT 100 terminal and a serial port configured as above is then connected to the switch s serial port via an RS 232 DB 9 cable With the serial port properly connected to a management computer the following screen should be visible I...

Page 250: ...eb based manager The switch IP address can be automatically set using BOOTP or DHCP protocols in which case the actual address assigned to the switch must be known The IP address may be set using the Command Line Interface CLI over the console serial port as follows 1 Starting at the command line prompt enter the commands config ipif System ipaddress xxx xxx xxx xxx yyy yyy yyy yyy Where the x s r...

Page 251: ...ssigned an IP address of 10 53 13 144 8 with a subnet mask of 255 0 0 0 The system message Success indicates that the command was executed successfully The switch can now be configured and managed via Telnet and the CLI or via the Web based management agent using the above IP address to connect to the switch ...

Page 252: ...NV RAM and reloaded when the switch is rebooted If the switch is rebooted without using the save command the last configuration saved to NV RAM will be loaded Connecting to the Switch The console interface is used by connecting the Switch to a VT100 compatible terminal or a computer running an ordinary terminal emulator program e g the HyperTerminal program included with the Windows operating syst...

Page 253: ... command prompt local There are a number of helpful features included in the CLI Entering the command will display a list of all of the top level commands Figure 2 2 The Command When you enter a command without its required parameters the CLI will prompt you with a Next possible completions message ...

Page 254: ... next possible sub commands in sequential order by repeatedly pressing the Tab key To re enter the previous command at the command prompt press the up arrow cursor key The previous command will appear at the command prompt Figure 2 4 Using the Up Arrow to Re enter a Command In the above example the command config account was entered without the required parameter username the CLI returned the Next...

Page 255: ...red that is unrecognized by the CLI the top level commands will be displayed under the Available commands prompt Figure 2 5 The Next Available Commands Prompt The top level commands consist of commands such as show or config Most of these commands require one or more parameters to narrow the top level command This is equivalent to show what or config what Where the what is the next parameter For e...

Page 256: ...ample all of the possible next parameters for the show command are displayed At the next command prompt the up arrow was used to re enter the show command followed by the account parameter The CLI then displays the user accounts configured on the switch ...

Page 257: ...name space a VLAN name in the vlan_name 32 space and the network address in the network_address space Do not type the angle brackets Example Command create ipif Engineering vlan Design ipaddress 10 24 22 5 255 0 0 0 square brackets Purpose Encloses a required value or set of required arguments One value or argument can be specified Syntax create account admin user Description In the above syntax e...

Page 258: ...ght Arrow Moves the cursor to the right Up Arrow Repeat the previously entered command Each time the up arrow is pressed the command previous to that displayed appears This way it is possible to review the command history for the current session Use the down arrow to progress sequentially forward through the command history list Down Arrow The down arrow will display the next command in the comman...

Page 259: ...DES 3350SR Layer 3 Gigabit Switch 11 Enter Displays the next line or table entry ...

Page 260: ...gout never 2_minutes 5_minutes 10_minutes 15_minutes enable clipaging disable clipaging enable telnet tcp_port_number 1 65535 disable telnet enable web tcp_port_number 1 65535 disable web save reboot reset config system login logout Each command is listed in detail in the following sections create account Purpose Used to create user accounts Syntax create admin user username 15 Description The cre...

Page 261: ... admin dlink Enter a case sensitive new password Enter the new password again for confirmation Success local config account Purpose Used to configure user accounts Syntax config account username Description The config account command configures a user account that has been created using the create account command Parameters username Restrictions Only Administrator level users can issue this comman...

Page 262: ...s all user accounts created on the switch Up to 8 user accounts can exist on the switch at one time Parameters None Restrictions None Example usage To display the accounts that have been created local show account Command show account Current Accounts Username Access Level dlink Admin local delete account Purpose Used to delete an existing user account Syntax delete account username Description Th...

Page 263: ...ple usage To delete the user account System local delete account System Command delete account System Success local show switch Purpose Used to display information about the switch Syntax show switch Description This command displays information about the switch Parameters None Restrictions None Example usage To display the switch information ...

Page 264: ...ardware Version 0A1 System Up Time 0 days 00 49 27 Time Unknown Time Source System Clock System Name System Location System Contact Spanning Tree Enabled GVRP Disabled IGMP Snooping Enabled RIP Enabled DVMRP Enabled PIM DM Enabled OSPF Enabled TELNET Enabled TCP 23 SNTP Disabled local show serial_port Purpose Used to display the current serial port settings Syntax show serial_port Description This...

Page 265: ...ith the management host auto logout This parameter will set the time that the switch will wait before logging out automatically if left idle The choices that accompany this parameter are never No time limit on the length of time the console can be open with no user input 2_minutes The console will log out the current user if there is no user input for 2 minutes 5_minutes The console will log out t...

Page 266: ...eters None Restrictions Only administrator level users can issue this command Example usage To enable pausing of the screen display when the show command output reaches the end of the page local enable clipaging Command enable clipaging Success local disable clipaging Purpose Used to disable the pausing of the console screen scrolling at the end of each page when the show command displays more tha...

Page 267: ... UDP port number the switch will use to listen for Telnet requests Parameters tcp_port_number 1 65535 The TCP port number TCP ports are numbered between 1 and 65535 The well known TCP port for the Telnet protocol is 23 Restrictions Only administrator level users can issue this command Example usage To enable Telnet and configure port number local enable telnet 23 Command enable telnet 23 Success l...

Page 268: ...ort number the switch will use to listen for Telnet requests Parameters tcp_port_number 1 65535 The TCP port number TCP ports are numbered between 1 and 65535 The well known port for the Web based management software is 80 Restrictions Only administrator level users can issue this command Example usage To enable HTTP and configure port number local enable web 80 Command enable web 80 Success local...

Page 269: ...h configuration into non volatile RAM The saved switch configuration will be loaded into the switch s memory each time the switch is restarted Parameters Entering just the save command will save the switch configuration to NV Ram Restrictions Only administrator level users can issue this command Example usage To save the switch s current configuration to non volatile RAM local save Command save Sa...

Page 270: ...itch including the IP address user accounts and the switch history log The switch will not save or reboot system If the keyword system is specified all of the factory default settings are restored on the switch The switch will save and reboot after the settings are changed to default Rebooting will clear all entries in the Forwarding Data Base If no parameter is specified the switch s current IP a...

Page 271: ...Username and Password Parameters None Restrictions None Example usage To initiate the login procedure local login Command login UserName logout Purpose Used to log out a user from the switch s console Syntax logout Description This command terminates the current user s session on the switch s console Parameters None Restrictions None Example usage To terminate the current user s console session lo...

Page 272: ...ngs Syntax portlist all speed auto 10_half 10_full 100_half 100_full 1000_half 1000_full state enabled disabled description desc 32 Description This command allows for the configuration of the switch s Ethernet ports Only the ports listed in the portlist will be affected Parameters portlist Specifies a port or range of ports to be configured all Configure all ports on the switch auto Enables auto ...

Page 273: ...ent configuration of a range of ports Syntax show ports all portlist description Description This command is used to display the current configuration of a range of ports Parameters all specifies all the ports portlist Specifies a port or range of ports to be configured description Enter this parameter to view the description of the port previously set in the config ports command Restrictions None...

Page 274: ... Auto Link Down 14 Enabled Auto Link Down 15 Enabled Auto 100M Full 16 Enabled Auto Link Down 17 Enabled Auto Link Down 18 Enabled Auto Link Down 19 Enabled Auto Link Down 20 Enabled Auto Link Down CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh Example usage To view port 1 1 with description local show ports 1 4 description Command show ports 1 4 description Port Port Settings Conne...

Page 275: ... enabled disabled max_learning_addr max_lock_no 0 10 lock_address_mode DeleteOnTimeout DeleteOnReset Description This command allows for the configuration of the port security feature Only the ports listed in the portlist are effected Parameters portlist Specifies a port or range of ports to be configured all Configure port security for all ports on the switch admin_state enable disable Enables or...

Page 276: ...er of learning address and lock mode Parameters portlist Specifies a port or range of ports to be viewed Restrictions Only administrator level can use this command Example usage To display the port security configuration local show port_security ports Command show port_security ports Port Admin State Max Learning Addr Lock Address Mode 15 1 Disabled 1 DeleteOnReset 15 2 Disabled 1 DeleteOnReset 15...

Page 277: ...DES 3350SR Layer 3 Gigabit Switch 29 ...

Page 278: ...name Username is used for authentication NoAuthNoPriv v3 MD5 or SHA Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthNoPriv v3 MD5 DES or SHA DES Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthPriv DES 56 bit encryption is added based on the CBC DES DES 56 standard Each command is listed in detail in the following sections Command Parameters create snmp user u...

Page 279: ...dr enable snmp traps enable snmp authenticate traps disable snmp traps disable snmp authenticate traps config snmp system_ contact sw_contact config snmp system_ location sw_location config snmp system _name sw_name enable rmon disable rmon Each command is listed in detail in the following sections create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is a...

Page 280: ...nd privacy The password is defined by specifying the auth_password below This method is recommended by_key Requires the SNMP user to enter a encryption key for authentication and privacy The key is defined by specifying the priv_password below This method is not recommended encrypted Specifies that the password will be in an encrypted format auth md5 sha Initiate an authentication level setting se...

Page 281: ...s the associated SNMP group Parameters username 32 An alphanumeric string of up to 32 characters that identifies the SNMP user that will be deleted Restrictions Only administrator level users can issue this command Example usage To delete a previously entered SNMP user on the switch local delete snmp user dlink Command delete snmp user dlink Success local show snmp user Purpose Used to display inf...

Page 282: ...mmunity strings to limit which MIB objects an SNMP manager can access Parameters view_name 32 An alphanumeric string of up to 32 characters that identifies the SNMP view that will be created oid The object ID that identifies an object tree MIB tree that will be included or excluded from access by an SNMP manager included Include this object in the list of objects that an SNMP manager can access ex...

Page 283: ...ee that will be deleted from the switch Restrictions Only administrator level users can issue this command Example usage To delete a previously configured SNMP view from the switch local delete snmp view dlinkview all Command delete snmp view dlinkview all Success local show snmp view Purpose Used to display an SNMP view previously created on the switch Syntax show snmp view view_name 32 Descripti...

Page 284: ...onship between the SNMP manager and an agent The community string acts like a password to permit access to the agent on the switch One or more of the following characteristics can be associated with the community string An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the switch s SNMP agent An MIB view that defines the subset of all ...

Page 285: ... command can read from and write to the contents of the MIBs on the switch Restrictions Only administrator level users can issue this command Example usage To create the SNMP community string dlink local create snmp community dlink view ReadView read_write Command create snmp community dlink view ReadView read_write Success local delete snmp community Purpose Used to remove a specific SNMP communi...

Page 286: ...rameters community_string 32 An alphanumeric string of up to 32 characters that is used to identify members of an SNMP community This string is used like a password to give remote SNMP managers access to MIB objects in the switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To display the currently entered SNMP community strings local show snmp comm...

Page 287: ...mmand Example usage To give the SNMP agent on the switch the name 0035636666 local config snmp engineID 0035636666 Command config snmp engineID 0035636666 Success local show snmp engineID Purpose Used to display the identification of the SNMP engine on the switch Syntax show snmp engineID Description The show snmp engineID command displays the identification of the SNMP engine on the switch Parame...

Page 288: ...e that maps SNMP users to SNMP views Syntax create snmp group groupname 32 v1 v2c v3 noauth_nopriv auth_nopriv auth_priv read_view view_name 32 write_view view_name 32 notify_view view_name 32 Description The create snmp group command creates a new SNMP group or a table that maps SNMP users to SNMP views ...

Page 289: ...Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to prevent it being viewed by an unauthorized source noauth_nopriv Specifies that there will be no authorization and no encryption of packets sent between the switch and a remote SNMP manager auth_nopriv Specifies that authorization will be required but there will be no encryption of packets sent bet...

Page 290: ...32 An alphanumeric name of up to 32 characters that will identify the SNMP group to be deleted Restrictions Only administrator level users can issue this command Example usage To delete the SNMP group named sg1 local delete snmp group sg1 Command delete snmp group sg1 Success local show snmp groups Purpose Used to display the group names of SNMP groups currently configured on the switch The securi...

Page 291: ...ettings Group Name Group3 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level NoAuthNoPriv Group Name Group4 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level authNoPriv Group Name Group5 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Mod...

Page 292: ...ecurity features v3 Specifies that the SNMP version 3 will be used SNMP v3 provides secure access to devices through a combination of authentication and encrypting packets over the network SNMP v3 adds Message integrity Ensures that packets have not been tampered with during transit Authentication Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to...

Page 293: ...ceive SNMP traps generated by the switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To delete an SNMP host entry local delete snmp host 10 48 74 100 Command delete snmp host 10 48 74 100 Success local show snmp host Purpose Used to display the recipient of SNMP traps generated by the switch s SNMP agent Syntax show snmp host ipaddr Description The...

Page 294: ...sted host Syntax create trusted_host ipaddr Description The create trusted_host command creates the trusted host The switch allows you to specify up to four IP addresses that are allowed to manage the switch via in band SNMP or TELNET based management software These IP addresses must be members of the Management VLAN If no IP addresses are specified then there is nothing to prevent any IP address ...

Page 295: ...entered on the switch using the create trusted_host command above Parameters None Restrictions Only administrator level can use this command Example Usage To display the list of trust hosts local show trusted_host Command show trusted_host Management Stations IP Address 10 53 13 94 Total Entries 1 local delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_h...

Page 296: ... Used to enable SNMP trap support Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable SNMP trap support on the switch local enable snmp traps Command enable snmp traps Success local enable snmp authenticate_traps Purpose Used to...

Page 297: ...mp traps Purpose Used to disable SNMP trap support on the switch Syntax disable snmp traps Description This command is used to disable SNMP trap support on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To prevent SNMP traps from being sent from the Switch local disable snmp traps Command disable snmp traps Success local disable snmp aut...

Page 298: ...ontact person who is responsible for the switch Syntax config snmp system_contact sw_contact Description The config snmp system_contact command is used to enter the name and or other information to identify a contact person who is responsible for the switch A maximum of 255 character can be used Parameters sw_contact A maximum of 255 characters is allowed A NULL string is accepted if there is no c...

Page 299: ...ple usage To configure the switch location for HQ 5F local config snmp system_location HQ 5F Command config snmp system_location HQ 5F Success local config snmp system_name Purpose Used to configure the name for the switch Syntax config snmp system_name sw_name Description The config snmp system_name command configures the name of the switch Parameters sw_name A maximum of 255 characters is allowe...

Page 300: ...rictions Only administrator level users can issue this command Example Usage To enable RMON local enable rmon Command enable rmon Success local disable rmon Purpose Used to disable RMON on the switch Syntax disable rmon Description This command is used in conjunction with the enable rmon command above to enable and disable remote monitoring RMON on the switch Parameters None Restrictions Only admi...

Page 301: ...DES 3350SR Layer 3 Gigabit Switch 53 local disable rmon Command disable rmon Success local ...

Page 302: ...127 configuration ipaddr path_filename 127 increment Description This command is used to download a new firmware or a switch configuration file from a TFTP server Parameters firmware Download and install new firmware on the switch from a TFTP server configuration Download a switch configuration file from a TFTP server ipaddr The IP address of the TFTP server path_filename The DOS path and filename...

Page 303: ... uploaded to the TFTP server log Specifies that the switch s current log will be uploaded to the TFTP server ipaddr The IP address of the TFTP server The TFTP server must be on the same IP subnet as the switch path_filename 127 Specifies the location of the switch configuration file on the TFTP server This file will be replaced by the uploaded file from the switch Restrictions The TFTP server must...

Page 304: ...value of 1 to 99 seconds can be specified The default is 1 second Pinging an IP address without the times parameter will ping the target device an infinite amount of times Restrictions None Example usage To ping the IP address 10 48 74 121 four times local ping 10 48 74 121 times 4 Command ping 10 48 74 121 Reply from 10 48 74 121 time 10ms Reply from 10 48 74 121 time 10ms Reply from 10 48 74 121...

Page 305: ... from 30000 to 64900 timeout sec 1 65535 Defines the time out period while waiting for a response from the remote device The user may choose an entry between 1 and 65535 seconds probe value 1 9 The probe value is the number of times the switch will send probe packets to the next hop on the intended traceroute path The default is 1 Restrictions None Example usage To trace the routed path between th...

Page 306: ... the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables show packet ports Purpose Used to display statistics about the packets sent and received by the switch Syntax show packet ports portlist Description This command is used to display statistics about packets sent and receive...

Page 307: ...X 152 1 Multicast RX 557 2 Broadcast RX 3686 16 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show error ports Purpose Used to display the error statistics for a range of ports Syntax show error ports portlist Description This command will display all of the packet error statistics collected and logged by the switch for a given port list Parameters portlist Specifies a port or rang...

Page 308: ...ous Page r Refresh show utilization Purpose Used to display real time port and cpu utilization statistics Syntax show utilization cpu Description This command will display the real time port and cpu utilization statistics for the switch Parameters cpu Entering this parameter will display the current cpu utilization of the switch as a percentage Restrictions None To display the current cpu utilizat...

Page 309: ... Restrictions Only administrator level users can issue this command Example usage To clear the counters local clear counters ports 2 7 2 9 Command clear counters ports 2 7 2 9 Success local clear log Purpose Used to clear the switch s history log Syntax clear log Description This command will clear the switch s history log Parameters None Restrictions Only administrator level users can issue this ...

Page 310: ...og Multiple entries may be made in the form of x x where x is the number of an entry in the log The smallest number and therefore the earlier entry will be first Restrictions None Example usage To display the switch history log local show log index 1 4 Command show log index 1 4 Index Time Log Text 4 01 54 53 Port 1 13 link up 100Mbps FULL duplex 3 01 54 53 Spanning Tree Protocol is enabled 2 01 5...

Page 311: ...priority value 0 240 migrate yes no edge true false p2p true false auto state enable disable enable stp disable stp show stp show stp ports portlist Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables config stp Purpose Used to setup STP a...

Page 312: ...is used in determining the root device root port and designated port The device with the highest priority becomes the root device The lower the numerical value the higher the priority The default is 32 768 version rstp stp Select the Spanning Tree Protocol version used for the switch stp Select this parameter for IEEE 802 1d STP and for IEEE 802 1w STP compatibility mode rstp Select this parameter...

Page 313: ... to setup STP on the port level Syntax config stp ports portlist cost auto value 1 200000000 priority value 0 240 migrate yes no edge true false p2p true false auto state enable disable Description This command is used to create and configure STP for a group of ports ...

Page 314: ...ed to network stations or segments that will be upgraded to 802 1w RSTP on all or some portion of the segment edge true false true designates the port as an edge port Edge ports cannot create loops however an edge port can lose edge port status if a topology change creates a potential for a loop An edge port normally should not receive BPDU packets If a BPDU packet is received it automatically los...

Page 315: ...enabled on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable STP globally on the switch local enable stp Command enable stp Success local disable stp Purpose Used to globally disable STP on the switch Syntax disable stp Description This command allows the Spanning Tree Protocol to be globally disabled on the switch Parameters None...

Page 316: ...stp Purpose Used to display the switch s current STP configuration Syntax show stp Description This command displays the switch s current STP configuration Parameters None Restrictions None Example usage To display the status of STP on the switch Status 1 STP enabled with STP compatible version ...

Page 317: ...t Priority 32768 Cost to Root 0 Root Port None Last Topology Change 140sec Topology Changes Count 66 Protocol Specification 3 Max Age 20 Hello Time 2 Forward Delay 15 Hold Time 3 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh Status 2 STP disabled local show stp Command show stp STP Status Disabled Max Age 20 Hello Time 2 Forward Delay 15 Priority 32768 STP Version STP compatible TX...

Page 318: ...pecifies a port or range of ports to be configured Restrictions None Example usage To display STP state of ports1 1 4 local local show stp ports 1 4 Command show stp ports 1 4 Port Designated Bridge State Cost Pri Edge P2P Status Role 1 N A Yes 200000 0 No Yes Disabled Disabled 2 N A Yes 200000 0 No Yes Disabled Disabled 3 N A Yes 200000 0 No Yes Disabled Disabled 4 N A Yes 200000 0 No Yes Disable...

Page 319: ... command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables create fdb Purpose Used to create a static entry to the unicast MAC address forwarding table database Syntax create fdb vlan_name 32 macaddr port port Description This command will make an en...

Page 320: ...ding database Parameters vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that will be added to the forwarding table Restrictions Only administrator level users can issue this command Example usage To create multicast MAC forwarding local create multicast_fdb default 01 00 00 00 00 01 Command create multicast_fdb default 01 00 00 00 00 01 Success local con...

Page 321: ...ss of the switch Dynamic forwarding table entries which are made up of the source MAC addresses and their associated port numbers are deleted from the table if they are not accessed within the aging time The aging time can be from 10 to 1000000 seconds with a default value of 300 seconds A very long aging time can result in dynamic forwarding table entries that are out of date or no longer exist T...

Page 322: ...C address forwarding database Parameters vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that will be deleted from the forwarding table Restrictions Only administrator level users can issue this command Example usage To delete a permanent FDB entry local delete fdb default 00 00 00 00 01 02 Command delete fdb default 00 00 00 00 01 02 Success local Exampl...

Page 323: ...e through this port all Clears all dynamic entries to the switch s forwarding database Restrictions Only administrator level users can issue this command Example usage To clear all FDB dynamic entries local clear fdb all Command clear fdb all Success local show multicast_fdb Purpose Used to display the contents of the switch s multicast forwarding database Syntax show mulitcast_fdb vlan vlan_name ...

Page 324: ...tic aging_time Description This command will display the current contents of the switch s forwarding database Parameters port port The port number corresponding to the MAC destination address The switch will always forward traffic to the specified device through this port vlan_name 32 The name of the VLAN on which the MAC address resides macaddr The MAC address that is present in the forwarding da...

Page 325: ...ult 00 00 E2 7F 6B 53 10 Dynamic 1 default 00 00 E2 82 7D 90 10 Dynamic 1 default 00 00 F8 7C 1C 29 10 Dynamic 1 default 00 01 02 03 04 00 CPU Self 1 default 00 01 02 03 04 05 10 Dynamic 1 default 00 01 30 10 2C C7 10 Dynamic 1 default 00 01 30 FA 5F 00 10 Dynamic 1 default 00 02 3F 63 DD 68 10 Dynamic CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show ipfdb Purpose Used to display th...

Page 326: ...5 Dynamic System 10 1 1 1 15 Dynamic System 10 1 1 101 15 Dynamic System 10 1 1 151 15 Dynamic System 10 1 1 152 15 Dynamic System 10 1 1 157 15 Dynamic System 10 1 1 161 15 Dynamic System 10 1 1 164 15 Dynamic System 10 1 1 173 15 Dynamic System 10 1 1 191 15 Dynamic System 10 1 1 254 15 Dynamic System 10 1 49 1 15 Dynamic System 10 1 49 5 15 Dynamic System 10 1 49 9 15 Dynamic System 10 1 49 15 ...

Page 327: ...to configure broadcast storm control Parameters storm_grouplist Used to specify a broadcast storm control group This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separat...

Page 328: ... the current storm traffic control configuration on the switch Parameters group_list storm_grouplist Used to specify a broadcast storm control group This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and e...

Page 329: ...reshold Storm Storm Lookup Fail 1 1 8 128 Disabled Disabled Disabled 2 9 16 128 Disabled Disabled Disabled 3 17 24 128 Disabled Disabled Disabled 4 25 32 128 Disabled Disabled Disabled 5 33 40 128 Disabled Disabled Disabled 6 41 48 128 Disabled Disabled Disabled 7 49 128 Disabled Disabled Disabled 8 50 128 Disabled Disabled Disabled Total Entries 8 local ...

Page 330: ... round robin queuing the number of packets sent from each priority queue depends upon the assigned weight For a configuration of 8 CoS queues A H with their respective weight value 8 1 the packets are sent in the following sequence A1 B1 C1 D1 E1 F1 G1 H1 A2 B2 C2 D2 E2 F2 G2 A3 B3 C3 D3 E3 F3 A4 B4 C4 D4 E4 A5 B5 C5 D5 A6 B6 C6 A7 B7 A8 A1 B1 C1 D1 E1 F1 G1 H1 For round robin queuing if each CoS ...

Page 331: ...es a port or range of ports to be configured all Choose this parameter to select all configurable ports rx_rate Specifies that one of the parameters below no_limit or value 1 1000 will be applied to the rate at which the above specified ports will be allowed to receive packets no_limit Specifies that there will be no limit on the rate of packets received by the above specified ports value 1 1000 S...

Page 332: ...trol configuration on the switch Syntax Show bandwidth_control portlist Description The show bandwidth_control command displays the current bandwidth control configuration on the switch on a port by port basis Parameters portlist Specifies a port or range of ports to be configured Using this command without adding a portlist entry will show the bandwidth control for all ports in the switch stack R...

Page 333: ...it 7 no_limit no_limit 8 no_limit no_limit 9 no_limit no_limit 10 no_limit no_limit 11 no_limit no_limit 12 no_limit no_limit 13 no_limit no_limit 14 no_limit no_limit 15 no_limit no_limit 16 no_limit no_limit 17 no_limit no_limit 18 no_limit no_limit local config 802 1p user_priority Purpose Used to map the 802 1p user priority tags of an incoming packet to one of the eight hardware queues availa...

Page 334: ...hart 802 1p Switch Hardware Value Priority Queue 0 1 1 0 2 0 3 1 4 2 5 2 6 3 7 3 Parameters priority 0 7 Specifies which of the eight 802 1p priority tags 0 through 7 you want to map to one of the switch s hardware priority queues class_id 0 through 3 class_id 0 3 Specifies which of the switch s hardware priority queues the 802 1p priority tags specified above will be mapped to Restrictions Only a...

Page 335: ...ommand show 802 1p user_priority QOS Class of Traffic Priority 0 Class 1 Priority 1 Class 0 Priority 2 Class 0 Priority 3 Class 1 Priority 4 Class 2 Priority 5 Class 2 Priority 6 Class 3 Priority 7 Class 3 local config 802 1p default_priority Purpose Used to specify default priority settings on the switch Untagged packets that are received by the switch will be assigned a priority tag in its prior...

Page 336: ...mple 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order all Specifies that the config 802 1p default_priority command will be applied to all ports on the switch priority 0 7 Specifies the 802 1p priority tag that an untagged incoming packet will be given before being forwarded t...

Page 337: ...lays the currently configured 802 1p priority tag that will be assigned to an incoming untagged packet before being forwarded to its destination Parameters portlist Specifies a port or range of ports to be viewed Restrictions None Example usage To display the current 802 1p default priority configuration on the switch local local show 802 1p default_priority all Command show 802 1p default_priorit...

Page 338: ... Restrictions None Example Usage To show the scheduling local show scheduling Command show scheduling QOS Output Scheduling MAX Packets MAX Latency Class 0 0 0 Class 1 0 0 Class 2 0 0 Class 3 0 0 local config scheduling Purpose Used to configure QOS output scheduling Syntax config scheduling class_id 0 3 max_packet value 0 255 max_latency value 0 255 Description This command will config QOS output...

Page 339: ...DES 3350SR Layer 3 Gigabit Switch 91 To show the scheduling local config scheduling 0 max_packet 2 max_latency 3 Command config scheduling 0 max_packet 2 max_latency 3 Success local ...

Page 340: ...ption This command allows a range of ports to have all of their traffic also sent to a designated port where a network sniffer or other device can monitor the network traffic In addition you can specify that only traffic received by or sent by one or both is mirrored to the Target port Parameters port port This specifies the Target port the port where mirrored packets will be sent add source ports...

Page 341: ...g configuration Parameters port port This specifies the Target port the port where mirrored packets will be sent delete source port Adding this parameter will delete source ports according to ports entered using the portlist portlist This specifies a range of ports that will be mirrored That is the range of ports in which all traffic will be copied and sent to the Target port rx Allows the mirrori...

Page 342: ...nd off without having to modify the port mirroring configuration Parameters None Restrictions None Example usage To enable mirroring configurations local enable mirror Command enable mirror Success local disable mirror Purpose Used to disable a previously entered port mirroring configuration Syntax disable mirror Description This command combined with the enable mirror command above allows you to ...

Page 343: ... current port mirroring configuration on the switch Syntax show mirror Description This command displays the current port mirroring configuration on the switch Parameters None Restrictions None Example usage To display mirroring configuration local show mirror Command show mirror Current Settings Mirror Status Enabled Target Port 1 9 Mirrored Port RX TX 1 1 1 5 local ...

Page 344: ...n detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations graphs and tables create vlan Purpose Used to create a VLAN on the switch Syntax create vlan vlan_name 32 tag vlanid advertisement Description This command allows you to create a VLAN on the switch Parameters vlan_name 32 The nam...

Page 345: ...ant to delete Restrictions Only administrator level users can issue this command Example usage To remove the vlan v1 local delete vlan v1 Command delete vlan v1 Success local config vlan Purpose Used to add additional ports to a previously configured VLAN Syntax config vlan vlan_name 32 add tagged untagged forbidden delete portlist advertisement enable disable Description This command allows you t...

Page 346: ...ble disable Enables or disables GVRP on the specified VLAN Restrictions Only administrator level users can issue this command Example usage To add 4 through 8 of module 2 as tagged ports to the VLAN v1 config gvrp Purpose Used to configure GVRP on the switch Syntax config gvrp portlist all state enable disable ingress_checking enable disable acceptable_frame tagged_only admit_all pvid vlanid 1 409...

Page 347: ...ch pvid vlanid 1 4094 Specifies the default VLAN associated with the port Restrictions Only administrator level users can issue this command Example usage To set the ingress checking status the sending and receiving GVRP information local config gvrp 1 1 1 4 state enable ingress_checking enable acceptable_frame tagged_only pvid 2 Command config gvrp 1 1 1 4 state enable ingress_checking enable acc...

Page 348: ... this command Example usage To disable the Generic VLAN Registration Protocol GVRP local disable gvrp Command disable gvrp Success local show vlan Purpose Used to display the current VLAN configuration on the switch Syntax show vlan vlan_name 32 Description This command displays summary information about each VLAN including the VLAN ID VLAN name the Tagging Untagging status and the Member Non memb...

Page 349: ...ID 2 VLAN Name v1 VLAN TYPE static Advertisement Disabled Member ports 1 12 2 12 Static ports 1 12 2 12 Untagged ports Forbidden ports Total Entries 2 local show gvrp Purpose Used to display the GVRP status for a port list on the switch Syntax show gvrp portlist Description This command displays the GVRP status for a port list on the switch Parameters portlist Specifies a range of ports for which ...

Page 350: ...bled Enabled All Frames 1 9 1 Disabled Enabled All Frames 1 10 1 Disabled Enabled All Frames 1 11 1 Disabled Enabled All Frames 1 12 1 Disabled Enabled All Frames 2 1 1 Disabled Enabled All Frames 2 2 1 Disabled Enabled All Frames 2 3 1 Disabled Enabled All Frames 2 4 1 Disabled Enabled All Frames 2 5 1 Disabled Enabled All Frames 2 6 1 Disabled Enabled All Frames 2 7 1 Disabled Enabled All Frames...

Page 351: ...mac_source mac_destination mac_source_dest ip_source ip_destination ip_source_dest show link_aggregation group_id value 1 6 algorithm config lacp_port portlist mode active passive show lacp_port portlist Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch stack the switch number will be referred to as 15 for all configurations g...

Page 352: ...nually configured if the configuration of the trunked group is changed If static link aggregation is used be sure that both ends of the connection are properly configured and that all ports have the same speed duplex settings Restrictions Only administrator level users can issue this command Example usage To create a link aggregation group local create link_aggregation group_id 1 Command create li...

Page 353: ...up to 6 link aggregation groups to be configured The group number identifies each of the groups master_port port Master port ID Specifies which port by port number of the link aggregation group will be the master port All of the ports in a link aggregation group will share the port configuration with the master port ports portlist Specifies a range of ports that will belong to the link aggregation...

Page 354: ...ne the MAC destination address mac_source_dest Indicates that the switch should examine the MAC source and destination addresses ip_source Indicates that the switch should examine the IP source address ip_destination Indicates that the switch should examine the IP destination address ip_source_dest Indicates that the switch should examine the IP source address and the destination address Restricti...

Page 355: ...by the algorithm in use by that group Restrictions None Example usage To display Link Aggregation configuration local show link_aggregation Command show link_aggregation Link Aggregation Algorithm MAC source dest Group ID 1 Master Port 2 10 Member Port 1 5 1 10 2 10 Active Port Status Disabled Flooding Port 1 5 DES 3350SR 4 config lacp_ports Purpose Used to configure settings for LACP compliant po...

Page 356: ... compliant devices to negotiate the aggregated link so the group may be changed dynamically as needs require In order to utilize the ability to change an aggregated port group that is to add or subtract ports from the group at least one of the participating devices must designate LACP ports as active Both devices must support LACP passive LACP ports that are designated as passive cannot process LA...

Page 357: ...eginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To display LACP port mode settings local show lacp_port 1 1 1 11 Comman...

Page 358: ...dr mac_address macaddr all blocked all vlan_name vlan_name mac_address macaddr Each command is listed in detail in the following sections create address_binding ip_mac ipaddress Purpose Used to create an IP MAC Binding entry Syntax ipaddr mac_address macaddr Description This command will create an IP MAC Binding entry Parameters ipaddr The IP address of the device where the IP MAC binding is made ...

Page 359: ... address_binding ip_mac ipaddress 10 1 1 3 mac_address 00 00 00 00 00 05 Command config address_binding ip_mac ipaddress 10 1 1 3 mac_address 00 00 00 00 00 05 Success local config address_binding ip_mac ports Purpose Used to configure an IP MAC state to enable or disable for specified ports Syntax portlist all state enable disable Description This command will configure IP MAC state to enable or ...

Page 360: ...ed IP_MAC Address Binding enties can be viewed by entering the physical and IP addresses of the device Blocked Blocked address binding entries bindings between VLAN names and MAC addresses can be viewed by entering the VLAN name and the physical address of the device Ports The number of enabled ports on a device Parameters ipaddr The IP address of the device where the IP MAC binding is made macadd...

Page 361: ...ing the physical and IP addresses of the device Toggleing to all will delete all the Address Binding entries Blocked Blocked address binding entries bindings between VLAN names and MAC addresses can be deleted by entering the VLAN name and the physical address of the device To delete all the Blocked Address Binding entries toggle all Parameters ipaddr The IP address of the device where the IP MAC ...

Page 362: ...xample usage To delete an IP MAC Binding on the switch local delete address_binding ip_mac ipaddress 10 1 1 1 mac_address 00 00 00 00 00 06 Command delete address_binding ip_mac ipaddress 10 1 1 1 mac_address 00 00 00 00 00 06 Success local ...

Page 363: ...12 delete ipif ipif_name 12 all disable ipif ipif_name 12 all Each command is listed in detail in the following sections enable ipif Purpose Used to enable an IP interface on the switch Syntax enable ipif ipif_name 12 all Description This command will enable the IP interface function on the switch Parameters ipif_name 12 The name for the IP interface to be created This name cannot exceed 12 charac...

Page 364: ...e secondary Enter this parameter if this configured IP interface is to be a secondary IP interface of the VLAN previously specified Secondary interfaces can only be configured if a primary interface is first configured state enable disable Allows you to enable or disable the IP interface Restrictions Only administrator level users can issue this command Example usage To create an IP interface on t...

Page 365: ...ocol for the assignment of an IP address to the switch s System IP interface dhcp Allows the selection of the DHCP protocol for the assignment of an IP address to the switch s System IP interface Restrictions Only administrator level users can issue this command Example usage To configure the IP interface System local config ipif System ipaddress 10 48 74 122 8 Command config ipif System ipaddress...

Page 366: ...f an IP interface on the switch Syntax delete ipif ipif_name 12 all Description This command will delete the configuration of an IP interface on the switch Parameters ipif_name The name created for the IP interface all Entering this parameter will delete all the IP interfaces currently configured on the switch Restrictions None Example usage To delete the IP interface named s2 local delete ipif s2...

Page 367: ...onfiguration of an IP interface on the switch Parameters ipif_name 12 The name created for the IP interface all Entering this parameter will delete all the IP interfaces currently configured on the switch Restrictions None Example usage To disable the IP interface named s2 local disable ipif s2 Command disable ipif s2 Success local ...

Page 368: ... 25 state enable disable Description This command allows you to configure IGMP snooping on the switch Parameters ipif_name 12 The name of the IP interface for which you want to configure IGMP all Specifies all the IP interfaces on the switch version value 1 2 The IGMP version number query_interval sec 1 25 The time in seconds between general query transmissions in seconds max_response_time sec 1 2...

Page 369: ...the IGMP configuration for the switch if no IP interface name is specified If an IP interface name is specified the command will display the IGMP configuration for that IP interface Parameters ipif_name 12 The name of the IP interface for which the IGMP configuration will be displayed Restrictions None Example Usage To display IGMP configurations local show igmp Command show igmp IGMP Interface Co...

Page 370: ...display ipif_name 12 The name of the IP interface the IGMP group is part of Restrictions None Example Usage To display IGMP group table local show igmp group Command show igmp group Interface Name Multicast Group Last Reporter IP Querier IP Expire System 224 0 0 2 10 42 73 111 10 48 74 122 260 System 224 0 0 9 10 20 53 1 10 48 74 122 260 System 224 0 1 24 10 18 1 3 10 48 74 122 259 System 224 0 1 ...

Page 371: ...disable igmp snooping forward_mcrouter_only config router_ports vlan_name 32 add delete portlist show router_ports vlan vlan_name 32 static dynamic show igmp_snooping vlan vlan_name 32 show igmp_snooping group vlan vlan_name 32 show igmp_snooping forwarding vlan vlan_name 32 Each command is listed in detail in the following sections NOTE As a stand alone switch or as a master switch in a switch st...

Page 372: ...The default is 2 seconds state enable disable Allows you to enable or disable IGMP snooping for the specified VLAN Restrictions Only administrator level users can issue this command Example usage To configure the igmp snooping local config igmp_snooping default host_timeout 250 state enable Command config igmp_snooping default host_timeout 250 state enable Success local config igmp_snooping querie...

Page 373: ... variable x query interval 1 x query response interval Other querier present interval Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the querier This interval is calculated as follows robustness variable x query interval 0 5 x query response interval Last member query count Number of group specific queries sent before the ro...

Page 374: ...ll only forward all multicast traffic to the multicast router only Otherwise the switch forwards all multicast traffic to any IP router Parameters forward_mcrouter_only Specifies that the switch should only forward all multicast traffic to a multicast enabled router Otherwise the switch will forward all multicast traffic to any IP router Restrictions Only administrator level users can issue this c...

Page 375: ...o disable IGMP snooping on the switch local disable igmp_snooping Command disable igmp_snooping Success local config router_ports Purpose Used to configure ports as router ports Syntax config router_ports vlan_name 32 add delete portlist Description This command allows you to designate a range of ports as being connected to multicast enabled routers This will ensure that all packets with such a ro...

Page 376: ...ill display the router ports currently configured on the switch Parameters vlan_name 32 The name of the VLAN on which the router port resides static Displays router ports that have been statically configured dynamic Displays router ports that have been dynamically configured Restrictions None Example usage To display the router ports local show router_ports Command show router_ports VLAN Name defa...

Page 377: ...ing on the switch Syntax show igmp_snooping vlan vlan_name 32 Description This command will display the current IGMP snooping configuration on the switch Parameters vlan_name 32 The name of the VLAN for which you want to view the IGMP snooping configuration Restrictions None Example usage To show igmp snooping ...

Page 378: ...uter Behavior Non Querier State Disabled VLAN Name vlan2 Query Interval 125 Max Response Time 10 Robustness Value 2 Last Member Query Interval 1 Host Timeout 260 Route Timeout 260 Leave Timer 2 Querier State Disabled Querier Router Behavior Non Querier State Disabled Total Entries 2 local show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the switch S...

Page 379: ...abit Switch 131 show igmp_snooping group Parameters vlan vlan_name 32 The name of the VLAN for which you want to view IGMP snooping group configuration information Restrictions None Example usage To show igmp snooping group ...

Page 380: ...eports 1 Port Member 1 5 2 4 VLAN Name default Multicast group 234 5 6 7 MAC address 01 00 5E 05 06 07 Reports 1 Port Member 1 6 2 9 VLAN Name default Multicast group 236 54 63 75 MAC address 01 00 5E 36 3F 4B Reports 1 Port Member 1 10 2 2 VLAN Name default Multicast group 239 255 255 250 MAC address 01 00 5E 7F FF FA Reports 2 Port Member 1 8 2 4 VLAN Name default Multicast group 239 255 255 254...

Page 381: ...rding table entries currently configured on the switch Parameters vlan_name 32 The name of the VLAN for which you want to view IGMP snooping forwarding table information Restrictions None Example usage To view the IGMP snooping forwarding table for VLAN Trinity local show igmp_snooping forwarding vlan Trinity Command show igmp_snooping forwarding vlan Trinity VLAN Name Trinity Multicast group 224 ...

Page 382: ...1x auth_parameter ports portlist all default direction both in port_control force_unauth auto force_auth quiet_period sec 0 65535 tx_period sec 1 65535 supp_timeout sec 1 65535 server_timeout sec 1 65535 max_req value 1 10 reauth_period sec 1 65535 enable_reauth enable disable config 802 1x init port_based ports portlist all mac_based ports portlist all mac_address macaddr config 802 1x reauth por...

Page 383: ...is command Example usage To enable 802 1x switch wide local enable 802 1x Command enable 802 1x Success local disable 802 1x Purpose Used to disable the 802 1x server on the switch Syntax disable 802 1x Description The disable 802 1x command is used to disable the 802 1x Port based Network Access control server application on the switch Parameters None Restrictions Only administrator level users c...

Page 384: ...o display the current configuration of the 802 1x server on the switch Syntax show 802 1x auth_configuration ports portlist Description The show 802 1x command is used to display the current configuration of the 802 1x Port based Network Access Control server application on the switch ...

Page 385: ...ommunication in both receiving and transmitting directions or just the receiving direction Port Control ForceAuth ForceUnauth Auto Shows the administrative control over the port s authorization status ForceAuth forces the Authenticator of the port to become Authorized ForceUnauth forces the port to become Unauthorized QuietPeriod Shows the time interval between authentication failure and the start...

Page 386: ...eriod 30 sec SuppTimeout 30 sec ServerTimeout 30 sec MaxReq 2 times ReAuthPeriod 3600 sec ReAuthenticate Disabled CTRL C ESC q Quit SPACE n Next Page Enter Next Entry a All show 802 1x auth_state Purpose Used to display the current authentication state of the 802 1x server on the switch Syntax show 802 1x auth_state ports portlist Description The show 802 1x auth_state command is used to display t...

Page 387: ...n access the network Unauthorized means that the user was not authenticated and cannot access the network Restrictions Only administrator level users can issue this command Example usage To display the 802 1x auth state for ports 1 4 local show 802 1x auth_state ports 1 4 Command show 802 1x auth_state ports 1 4 Port Auth PAE State Backend State Port Status 1 ForceAuth Success Authorized 2 ForceAu...

Page 388: ...802 1x capability of a range of ports on the switch Syntax config 802 1x capability ports portlist all authenticator none Description The config 802 1x capability ports command has four capabilities that can be set for each port Authenticator Supplicant Authenticator and Supplicant and None Parameters portlist Specifies a range of ports all Specifies all of the ports on the switch authenticator A ...

Page 389: ...o their default 802 1x settings Syntax config 802 1x auth_parameter ports portlist all default direction both in port_control force_unauth auto force_auth quiet_period sec 0 65535 tx_period sec 1 65535 supp_timeout sec 1 65535 server_timeout sec 1 65535 max_req value 1 10 reauth_period sec 1 65535 enable_reauth enable disable Description The config 802 1x auth_parameter command is used to configur...

Page 390: ... quiet_period sec 0 65535 Configures the time interval between authentication failure and the start of a new authentication attempt tx_period sec 1 65535 Configures the time to wait for a response from a supplicant user to send EAP Request Identity packets supp_timeout sec 1 65535 Configures the time to wait for a response from a supplicant user for all EAP packets except for the Request Identity ...

Page 391: ...alize 802 1x functions based only on the port number Ports approved for initialization can then be specified portlist Specifies a port or range of ports all Specifies all of the ports on the switch mac_based This instructs the switch to initialize 802 1x functions based on the MAC address of a device on a specific port or range of ports MAC address approved for initialization can then be specified...

Page 392: ...Specifies all of the ports on the switch mac based This instructs the switch to re authorize 802 1x function based on a specific MAC address Ports approved for re authorization can then be specified portlist Specifies a port or range of ports all Specifies all of the ports on the switch mac_address macaddr Specifies the MAC address of the client the user wishes to add Restrictions Only administrat...

Page 393: ...ort settings auth_port udp_port_number The UDP port number for authentication requests The default is 1812 acct_port udp_port_number The UDP port number for accounting requests The default is 1813 Restrictions Only administrator level users can issue this command Example usage To configure the RADIUS server communication settings local config radius add 1 10 48 74 121 key dlink default Command con...

Page 394: ... the switch s RADIUS settings Parameters server_index 1 3 Assigns a number to the current set of RADIUS server settings Up to 3 groups of RADIUS server settings can be entered on the switch ipaddress server_ip The IP address of the RADIUS server key Specifies that a password and encryption key will be used between the switch and the RADIUS server passwd 32 The shared secret key used by the RADIUS ...

Page 395: ...ations on the switch Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the switch Parameters None Restrictions None Example usage To display RADIUS settings on the switch local show radius Command show radius Index IP Address Auth Port Acct Port Status Key Number Number 1 10 1 1 1 1812 1813 Active kizzel 2 10 1 1 2 1812 1813 Active myniz...

Page 396: ...an vlan_name 32 source_mac macaddr destination_mac macaddr 802 1p value 0 7 ethernet_type hex 0x0 0xffff ip vlan vlan_name 32 source_ip ipaddr destination_ip ipaddr dscp value 0 63 icmp type value 0 255 code value 0 255 igmp type value 0 255 tcp src_port value 0 65535 dst_port value 0 65535 flag_mask all urg ack psh rst syn fin udp src_port value 0 65535 dst_port value 0 65535 protocol_id value 0 ...

Page 397: ...ess profile was created The add parameter instructs the switch to add the criteria that follows to the list of rules that are associated with access profile 1 For each rule entered into the access profile you can assign an access_id that both identifies the rule and establishes a priority within the list of rules A lower access_id gives the rule a higher priority The ip parameter instructs the swi...

Page 398: ...ex0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_32 47 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_48 63 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_64 79 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff port portlist all profile_id value 1 255 Description The cr...

Page 399: ... destination_ip_mask netmask Specifies an IP address mask for the destination IP address dscp Specifies that the switch will examine the DiffServ Code Point DSCP field in each frame s header icmp Specifies that the switch will examine the Internet Control Message Protocol ICMP field in each frame s header type Specifies that the switch will examine each frame s ICMP Type field code Specifies that ...

Page 400: ...s_profile Purpose Used to delete a previously created access profile Syntax delete access_profile profile_id value 1 255 Description The delete access_profile command is used to delete a previously created access profile on the switch Parameters profile_id value 1 255 Enter an integer between 1 and 255 that is used to identify the access profile that will be deleted with this command This value is...

Page 401: ...pe value 0 255 tcp src_port value 0 65535 dst_port value 0 65535 flag_mask all urg ack psh rst syn fin udp src_port value 0 65535 dst_port value 0 65535 protocol_id value 0 255 user_define hex 0x0 0xffffffff packet_content offset_0 15 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff offset_16 31 hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff hex 0x0 0xffffffff ...

Page 402: ...s that the access profile will apply only to packets with this hexadecimal 802 1Q Ethernet type value in the packet header ip Specifies that the switch will look into the IP fields in each packet vlan vlan_name 32 Specifies that the access profile will apply to only to this VLAN source_ip ipaddr Specifies that the access profile will apply to only packets with this source IP address destination_ip...

Page 403: ...uccess local show access_profile Purpose Used to display the currently configured access profiles on the switch Syntax show access_profile profile_id value 1 255 Description The show access_profile command is used to display the currently configured access profiles Parameters profile_id value 1 255 Enter this parameter along with the appropriate value between 1 and 255 to view a specific access pr...

Page 404: ...50SR Layer 3 Gigabit Switch 156 local show access_profile Command show access_profile Access Profile Table Access Profile ID 2 TYPE Ethernet Frame Filter Ports 1 Masks VLAN 802 1P ID Mode 3 Permit 0 0 x local ...

Page 405: ...configurations graphs and tables config traffic_segmentation Purpose Used to configure traffic segmentation on the switch Syntax config traffic_segmentation portlist forward_list null portlist Description The config traffic_segmentation command is used to configure traffic segmentation on the switch Parameters portlist Specifies a range of ports that will be configured for traffic segmentation for...

Page 406: ...show traffic_segmentation portlist Description The show traffic_segmentation command is used to display the current traffic segmentation configuration on the switch Parameters portlist Specifies a port or range of ports for which the current traffic segmentation configuration on the switch will be displayed Restrictions The port lists for segmentation and the forward list must be on the same switc...

Page 407: ...ow traffic_segmentation Command show traffic_segmentation Traffic Segmentation Table Port Forward Portlist 1 1 50 2 1 50 3 1 50 4 1 50 5 1 50 6 1 50 7 1 50 8 1 50 9 1 50 10 1 50 11 1 50 12 1 50 13 1 50 14 1 50 15 1 50 16 1 50 17 1 50 18 1 50 local ...

Page 408: ...date end_date 1 31 e mth end_mth 1 12 e time end_time hh mm offset 30 60 show time Each command is listed in detail in the following sections config sntp Purpose Used to setup SNTP service Syntax config sntp primary ipaddr secondary ipaddr poll interval int 30 99999 Description Use this command to configure SNTP service from an SNTP server SNTP must be enabled for this command to function See enab...

Page 409: ...ss time and poll interval Parameters None Restrictions Only administrator level users can issue this command Example usage To display SNTP configuration information local show sntp Command show sntp Current Time Source System Clock SNTP Disabled SNTP Primary Server 10 1 1 1 SNTP Secondary Server 10 1 1 2 SNTP Poll Interval 720 sec local enable sntp Purpose Enables SNTP server support Syntax enable...

Page 410: ... sntp Command enable sntp Success local disable sntp Purpose Disables SNTP server support Syntax disable sntp Description This will disable SNTP support SNTP service must be separately configured see config sntp Parameters None Restrictions Only administrator level users can issue this command Example To stop SNTP support local disable sntp Command disable sntp Success local config time Purpose Us...

Page 411: ...onth three alphabetical characters for the name of the month and four numerical characters for the year time Express the system time using the format hh mm ss that is two numerical characters each for the hour using a 24 hour clock the minute and second For example 19 42 30 Restrictions Only administrator level users can issue this command Manually configured system time and date settings are over...

Page 412: ... time Current Time Scource System Clock Boot Time 0 Days 00 00 00 Current Time 0 Days 01 16 47 Time zone GMT 06 00 Daylight Saving Time Disabled Offset in minutes 60 Repeating From Apr 1st Sun 02 00 To Oct last Sun 02 00 Annual From 29 Apr 02 00 To 12 Oct 02 00 local ...

Page 413: ... make a static entry into the ARP table Syntax create arpentry ipaddr macaddr Description This command is used to enter an IP address and the corresponding MAC address into the switch s ARP table Parameters ipaddr The IP address of the end node or station macaddr The MAC address corresponding to the IP address above Restrictions Only administrator level users can issue this command Example Usage T...

Page 414: ...P address 10 48 74 12 and MAC address 00 50 BA 00 07 36 local config arpentry 10 48 74 12 00 50 BA 00 07 36 Command config arpentry 10 48 74 12 00 50 BA 00 07 36 Success local delete arpentry Purpose Used to delete a static entry into the ARP table Syntax delete arpentry ipaddr all Description This command is used to delete a static ARP entry made using the create arpentry command above by specify...

Page 415: ...ing accessed before it is dropped from the table Parameters time value 0 65535 The ARP age out time in minutes The value may be set in the range of 0 65535 minutes with a default setting of 20 minutes Restrictions Only administrator level users can issue this command Example Usage To configure ARP aging time local config arp_aging time 30 Command config arp_aging time 30 Success local show arpentr...

Page 416: ...0 A0 C9 A4 22 5B Dynamic System 10 9 68 4 00 80 C8 2E C7 45 Dynamic System 10 10 27 51 00 80 C8 48 DF AB Dynamic System 10 11 22 145 00 80 C8 93 05 6B Dynamic System 10 11 94 10 00 10 83 F9 37 6E Dynamic System 10 14 82 24 00 50 BA 90 37 10 Dynamic System 10 15 1 60 00 80 C8 17 42 55 Dynamic System 10 17 42 153 00 80 C8 4D 4E 0A Dynamic System 10 19 72 100 00 50 BA 38 7D 5E Dynamic System 10 21 32...

Page 417: ...e dynamic ARP table entries from the switch s ARP table Static ARP table entries are not affected Parameters None Restrictions Only administrator level users can issue this command Example Usage To remove dynamic entries in the ARP table local clear arptable Command clear arptable Success local ...

Page 418: ...ckup IP route entry to the switch s IP routing table Parameters network_address IP address and netmask of the IP interface that is the destination of the route You can specify the address and mask information using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 ipaddr The gateway IP address for the next hop router metric 1 65535 Allows the entry of a routing pro...

Page 419: ...ic Allows the entry of a routing protocol metric entry representing the number of routers between the Switch and the IP address above The default setting is 1 Restrictions Only administrator level users can issue this command Example Usage To add the default static address 10 48 74 121 with a metric setting of 1 to the routing table local create iproute default 10 48 74 121 1 Command create iprout...

Page 420: ... Backup entries cannot have the same Gateway Restrictions Only administrator level users can issue this command Example Usage To delete a backup static address 10 48 75 121 mask 255 0 0 0 and gateway ipaddr entry of 10 1 1 254 from the routing table local delete iproute 10 48 74 121 8 10 1 1 254 Command delete iproute 10 48 74 121 8 10 1 1 254 Success local delete iproute default Purpose Used to d...

Page 421: ...destination of the route You can specify the address and mask information using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 static Use this parameter to display static iproute entries rip Use this parameter to display RIP iproute entries ospf Use this parameter to display OSPF iproute entries Restrictions None Example Usage To display the contents of the IP r...

Page 422: ...SPF routes on the switch Syntax create route redistribute dst ospf src static rip local mettype 1 2 metric value Description This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local DES 3350SR switch is also redistributed Parameters ...

Page 423: ...external type_1 type_2 inter e1 inter e2 metric value Description This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local DES 3350SR switch is also redistributed Parameters src all internal external type_1 type_2 inter e1 inter e2 A...

Page 424: ...tribute dst ospf src Purpose Used configure route redistribution settings for the exchange of RIP routes to OSPF routes on the switch Syntax config route redistribute dst ospf src static rip local mettype 1 2 metric value Description Route redistribution allows routers on the network that are running different routing protocols to exchange routing information This is accomplished by comparing the ...

Page 425: ...information source RIP the Static Route table and the Local interface routing information Routing information will be redistributed to OSPF The following table lists the allowed values for the routing metrics and the types or forms of the routing information that will be redistributed Route Source Metric Metric Type RIP 0 to 16777214 mettype 1 mettype 2 Static 0 to 16777214 mettype 1 mettype 2 Loc...

Page 426: ... on the local switch is also redistributed Parameters src all internal external type_1 type_2 inter e1 inter e2 Allows the selection of the protocol of the source device metric value Allows the entry of an OSPF interface cost This is analogous to a Hop Count in the RIP routing protocol Restrictions Only administrator level users can issue this command Example Usage To configure route redistributio...

Page 427: ...e switch Syntax show route redistribute dst rip ospf src rip static local ospf Description Displays the current route redistribution settings on the switch Parameters src rip static local ospf Allows the selection of the routing protocol on the source device dst rip ospf Allows the selection of the routing protocol on the destination device Restrictions none Example Usage To display route redistri...

Page 428: ...DES 3350SR Layer 3 Gigabit Switch 180 ...

Page 429: ...s listed in detail in the following sections config bootp_relay Purpose Used to configure the BOOTP relay feature of the switch Syntax config bootp_relay hops value 1 16 time sec 0 65535 Description This command is used to configure the BOOTP relay feature Parameters hops value 1 16 Specifies the maximum number of relay agent hops that the BOOTP packets can cross time sec 0 65535 If this time is e...

Page 430: ...this command Example Usage To add a BOOTP relay local config bootp_relay add ipif System 10 43 21 12 Command config bootp_relay add ipif System 10 43 21 12 Success local config bootp_relay delete Purpose Used to delete an IP destination addresses from the switch s BOOTP relay table Syntax config bootp_relay delete ipif ipif_name 12 ipaddr Description This command is used to delete an IP destinatio...

Page 431: ...ion on the switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable the BOOTP relay function local enable bootp_relay Command enable bootp_relay Success local disable bootp_relay Purpose Used to disable the BOOTP relay function on the switch Syntax disable bootp_relay Description This command in combination with the enable bootp_relay comman...

Page 432: ... an IP interface name is specified the BOOTP relay configuration for that IP interface Parameters ipif_name 12 The name of the IP interface for which you what to display the current BOOTP relay configuration Restrictions None Example Usage To display bootp relay status local show bootp_relay Command show bootp_relay Bootp Relay Status Disabled Bootp Hops Count Limit 4 Bootp Relay Time Threshold 0 ...

Page 433: ... config dnsr primary secondary nameserver ipaddr add delete static domain_name 32 ipaddr Description This command is used to configure the DNS relay function on the switch Parameters primary Indicates that the IP address below is the address of the primary DNS server secondary Indicates that the IP address below is the address of the secondary DNS server nameserver ipaddr The IP address of the DNS...

Page 434: ... dnsr delete static dns1 10 43 21 12 Command config dnsr delete static dns1 10 43 21 12 Success local enable dnsr Purpose Used to enable DNS relay Syntax enable dnsr cache static Description This command is used in combination with the disable dnsr command below to enable and disable DNS Relay on the switch Parameters cache This parameter will allow the user to enable the cache lookup for the DNS ...

Page 435: ...r Purpose Used to disable DNS relay on the switch Syntax disable dnsr cache static Description This command is used in combination with the enable dnsr command above to enable and disable DNS Relay on the switch Parameters cache This parameter will allow the user to disable the cache lookup for the DNS rely on the switch static This parameter will allow the user to disable the static table lookup ...

Page 436: ...DNS relay local disable dnsr static Command disable dnsr static Success local show dnsr Purpose Used to display the current DNS relay status Syntax show dnsr static Description This command is used to display the current DNS relay status Parameters static Allows the display of only the static entries into the DNS relay table If this parameter is omitted the entire DNS relay table will be displayed...

Page 437: ...r DNSR Status Disabled Primary Name Server 0 0 0 0 Secondary Name Server 0 0 0 0 DNSR Cache Status Disabled DNSR Static Cache Table Status Disabled DNS Relay Static Table Domain Name IP Address www 123 com tw 10 12 12 123 bbs ntu edu tw 140 112 1 23 Total Entries 2 local ...

Page 438: ..._compatible v2_only rx_mode v1_only v2_only v1_or_v2 disable state enable disable enable rip disable rip show rip ipif ipif_name 12 Each command is listed in detail in the following sections config rip Purpose Used to configure RIP on the switch Syntax config rip ipif ipif_name 12 all authentication enable password 16 disable tx_mode disable v1_only v1_compatible v2_only rx_mode v1_only v2_only v1...

Page 439: ...es that only RIP v1 packets will be transmitted v1_compatible Specifies that only RIP v1 compatible packets will be transmitted v2_only Specifies that only RIP v2 packets will be transmitted rx_mode Determines how received RIP packets will be interpreted as RIP version V1 only V2 Only or V1 or V2 This entry specifies which version of the RIP protocol will be used to receive RIP packets The Disable...

Page 440: ...s used to enable RIP on the switch Parameters none Restrictions Only administrator level users can issue this command Example Usage To enable RIP local enable rip Command enable rip Success local disable rip Purpose Used to disable RIP Syntax disable rip Description This command is used to disable RIP on the switch Parameters None Restrictions Only administrator level users can issue this command ...

Page 441: ...nterfaces Parameters ipif ipif_name 12 The name of the IP interface for which you want to display the RIP configuration and settings If this parameter is not specified the show rip command will display the global RIP configuration for the switch Restrictions None Example Usage To display RIP configuration local show rip Command show rip RIP Global State Disabled RIP Interface Settings Interface IP...

Page 442: ...p disable dvmrp show dvmrp neighbor ipif ipif_name 12 ipaddress network_address show dvmrp nexthop ipaddress network_address ipif ipif_name 12 show dvmrp routing_table ipaddress network_address show dvmrp ipif ipif_name 12 Each command is listed in detail in the following sections config dvmrp Purpose Used to configure DVMRP on the switch Syntax config dvmrp ipif ipif_name 12 all metric value 1 31...

Page 443: ...ll set an intermittent probe in seconds on the device that will transmit dvmrp messages depending on the time specified This probe is also used to keep alive the connection between DVMRP enabled devices The default value is 10 seconds neighbor_timeout second 1 65535 The time period for which DVMRP will hold Neighbor Router reports before issuing poison route messages The default value is 35 second...

Page 444: ...This command in combination with the enable dvmrp above to enable and disable DVMRP on the switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To disable DVMRP local disable dvmrp Command disable dvmrp Success local show dvmrp routing_table Purpose Used to display the current DVMRP routing table Syntax show dvmrp routing table ipaddress network_a...

Page 445: ... 10 90 90 90 2 Local System 20 0 0 0 8 20 1 1 1 2 Local ip2 117 30 0 0 0 8 30 1 1 1 2 Dynamic ip3 106 Total Entries 3 local show dvmrp neighbor Purpose Used to display the DVMRP neighbor table Syntax show dvmrp neighbor ipif ipif_name 12 ipaddress network_address Description This command will display the current DVMRP neighbor table Parameters ipif_name 12 The name of the IP interface for which yo...

Page 446: ...paddress network_address ipif ipif_name 12 Description This command will display the DVMRP routing next hop table Parameters ipif_name 12 The name of the IP interface for which you want to display the current DVMRP routing next hop table ipaddress network_address The IP address and netmask of the destination You can specify the IP address and netmask information using the traditional format or the...

Page 447: ...ose Used to display the current DVMRP routing table Syntax show dvmrp ipif_name 12 Description The command will display the current DVMRP routing table Parameters ipif_name 12 The name of the IP interface for which you want to display the DVMRP routing table Restrictions None Example Usage To show DVMRP configurations local show dvmrp Command show dvmrp DVMRP Global State Disabled Interface IP Add...

Page 448: ...ters ipif ipif_name 12 Name assigned to the specific IP interface being configured for PIM settings all Used to configure PIM settings for all IP interfaces hello sec 1 18724 The time in seconds between issuing hello packets to find neighboring routers jp_interval sec 1 18724 The join prune interval is the time value seconds between transmitting flooding to all interfaces multicast messages to dow...

Page 449: ...escription This command will enable PIM for the switch PIM settings must first be configured for specific IP interfaces using the config pim command Parameters None Restrictions Only administrator level users can use this command Usage Example To enable PIM as previously configured on the switch local enable pim Command enable pim Success local disable pim Purpose Used to disable PIM function on t...

Page 450: ...ghbor table for a specified IP interface or destination router IP address Parameters ipif ipif_name 12 The name of an IP interface for which you want to view the PIM neighbor router table ipaddress network_address The IP address and netmask of the destination routing device for which you want to view the neighbor router table You can specify the IP address and netmask information using the traditi...

Page 451: ... current PIM configuration Syntax show pim ipif ipif_name 12 Description This command will list current PIM configuration settings for a specified IP interface or all IP interfaces Parameters ipif ipif_name 12 The name of an IP interface for which PIM settings are listed If no parameters are specified all PIM settings are displayed for all interfaces Restrictions None Usage Example To display PIM ...

Page 452: ... Gigabit Switch 204 local show pim Command show pim PIM Global State Disabled PIM DM Interface Table Hello Join Prune Interface IP Address Interval Interval State System 10 90 90 90 8 35 60 Enabled Total Entries 1 local ...

Page 453: ...ess Description This command will display the current IP multicast forwarding cache Parameters group The multicast group ID ipaddress network_address The IP address and netmask of the destination You can specify the IP address and netmask information using the traditional format or the CIDR format For example 10 1 2 3 255 255 0 0 or 10 2 3 4 16 Restrictions None Usage Example To display the curren...

Page 454: ...face table for protocol dvmrp pim Allows the user to specify whether or not to use the DVMRP or PIM protocol to display the IP multicast interface table For example if DVMRP is specified the table will display only those entries that are related to the DVMRP protocol Restrictions None Usage Example To display the current IP multicast interface table by DVMRP entry local show ipmc ipif System proto...

Page 455: ...try in the MD5 key table Syntax create md5 key key_id 1 255 password 16 Description This command is used to create an entry for the MD5 key table Parameters key_id 1 255 The MD5 key ID The user may enter a key ranging from 1 to 255 password An MD5 password of up to 16 bytes Restrictions Only administrator level users can issue this command Usage Example To create an entry in the MD5 key table loca...

Page 456: ...config md5 key 1 taboo Command config md5 key 1 taboo Success local delete md5 key Purpose Used to delete an entry in the MD5 key table Syntax delete md5 key key_id 1 255 Description This command is used to delete a specific entry in the MD5 key table Parameters key_id 1 255 The MD5 key ID the user wishes to delete Restrictions Only administrator level users can issue this command Usage Example Th...

Page 457: ...n This command will display the current MD5 key table Parameters key_id 1 255 The MD5 key ID Restrictions None Usage Example To display the current MD5 key local show md5 Command show md5 MD5 Key Table Configurations Key ID Key 1 dlink 2 develop 3 fireball 4 intelligent Total Entries 4 local ...

Page 458: ...e ipaddr create ospf aggregation area_id network_address lsdb_type summary advertise enable disable delete ospf aggregation area_id network_address lsdb_type summary config ospf aggregation area_id network_address lsdb_type summary advertise enable disable show ospf aggregation area_id show ospf lsdb area area_id advertise_router ipaddr type rtrlink netlink summary assummary asextlink show ospf ne...

Page 459: ...ospf router_id Purpose Used to configure the OSPF router ID Syntax config ospf router_id ipaddr Description This command is used to configure the OSPF router ID Parameters ipaddr The IP address of the OSPF router Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF router ID local config ospf router_id 10 48 74 122 Command config ospf router_id 10 ...

Page 460: ...f Description This command in combination with the enable ospf command above is used to enable and disable OSPF on the switch Parameters None Restrictions Only administrator level users can issue this command Usage Example To disable OSPF on the switch local disable ospf Command disable ospf Success local show ospf Purpose Used to display the current OSPF state on the switch Syntax show ospf ...

Page 461: ...urrent state of OSPF on the switch divided into the following categories General OSPF settings OSPF Interface settings OSPF Area settings OSPF Virtual Interface settings OSPF Area Aggregation settings OSPF Host Route settings Parameters None Restrictions None Usage Example To show OSPF state ...

Page 462: ...Link DOWN 1 Total Entries 3 OSPF Area Settings Area ID Type Stub Import Summary LSA Stub Default Cost 0 0 0 0 Normal None None 10 0 0 0 Normal None None 10 1 1 1 Normal None None 20 1 1 1 Stub Enabled 1 Total Entries 4 Virtual Interface Configuration Transit Virtual Hello Dead Authentication Link Area ID Neighbor Router Interval Interval Status 10 0 0 0 20 0 0 0 10 60 None DOWN 10 1 1 1 20 1 1 1 1...

Page 463: ...ables the OSPF area to import summary LSA advertisements metric value 0 16777215 The OSPF area cost between 0 and 16777215 0 denotes that the value will be automatically assigned The default setting is 0 Restrictions Only administrator level users can issue this command Usage Example To create an OSPF area local create ospf area 10 48 74 122 type normal Command create ospf area 10 48 74 122 type n...

Page 464: ... an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain type normal stub Allows the specification of the OSPF mode of operation stub or normal stub_summary enable disable Allows the OSPF area import of LSA advertisements to be enabled or disabled metric value 0 16777215 The OSPF area stub default cost Restrictions Only administrator level users can issue this comma...

Page 465: ... 0 Normal None None None 10 48 74 122 Stub Enabled Enabled 1 Total Entries 2 local create ospf host_route Purpose Used to configure OSPF host route settings Syntax create ospf host_route ipaddr area area_id metric value 1 65535 Description This command is used to configure the OSPF host route settings Parameters ipaddr The host s IP address area_id A 32 bit number in the form of an IP address xxx ...

Page 466: ...age Example To delete an OSPF host route local delete ospf host_route 10 48 74 122 Command delete ospf host_route 10 48 74 122 Success local config ospf host_route Purpose Used to configure OSPF host route settings Syntax config ospf host_route ipaddr area area_id metric value Description This command is used to configure an OSPF host route settings Parameters ipaddr The IP address of the host are...

Page 467: ...ill display the current OSPF host route table Parameters ipaddr The IP address of the host Restrictions None Usage Example To display the current OSPF host route table local show ospf host_route Command show ospf host_route Host Address Metric Area_ID TOS 10 48 73 21 2 10 1 1 1 10 48 74 122 1 10 1 1 1 Total Entries 2 local create ospf aggregation Purpose Used to configure OSPF area aggregation set...

Page 468: ...10 1 1 1 10 48 76 122 16 lsdb_type summary advertise enable Command create ospf aggregation 10 1 1 1 10 48 76 122 16 lsdb_type summary advertise enable Success local delete ospf aggregation Purpose Used to delete an OSPF area aggregation configuration Syntax delete ospf aggregation area_id network_address lsdb_type summary Description This command is used to delete an OSPF area aggregation configu...

Page 469: ...ess xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain network_address The 32 bit number in the form of an IP address that uniquely identifies the network that corresponds to the OSPF Area lsdb_type summary Specifies the type of address aggregation advertise enable disable Allows for the advertisement trigger to be enabled or disabled Restrictions Only administrator level us...

Page 470: ...Advertise Network Address Type 10 1 1 1 10 0 0 0 8 Summary Enabled 10 1 1 1 20 2 0 0 16 Summary Enabled Total Entries 2 local show ospf lsdb Purpose Used to display the OSPF Link State Database LSDB Syntax show ospf lsdb area_id area_id advertise_router ipaddr type rtrlink netlink summary assummary asextlink Description This command will display the current OSPF Link State Database LSDB Parameters...

Page 471: ...0 RTRLink 50 48 75 73 50 48 75 73 0x80000002 0 0 0 0 Summary 50 48 75 73 10 0 0 0 8 1 0x80000001 1 0 0 0 RTRLink 50 48 75 73 50 48 75 73 0x80000001 1 0 0 0 Summary 50 48 75 73 40 0 0 0 8 1 0x80000001 1 0 0 0 Summary 50 48 75 73 50 0 0 0 8 1 0x80000001 ASExtLink 50 48 75 73 1 2 0 0 16 20 0x80000001 Total Entries 5 local show ospf neighbor Purpose Used to display the current OSPF neighbor router tab...

Page 472: ...arameters area_id A 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain neighbor_id The OSPF router ID for the neighbor This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router Restrictions None Usage Example To display the current OSPF virtual neighbor table l...

Page 473: ...e network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The dead interval must be evenly divisible by the Hello Interval metric value 1 65535 The interface metric 1 to 65535 Entering a 0 will allow automat...

Page 474: ...nable Success local config ospf all Purpose Used to configure all of the OSPF interfaces on the switch at one time Syntax config ospf all area area_id priority value hello_interval sec 1 65535 dead_interval sec 1 65535 authentication none simple password 8 md5 key_id 1 255 metric value 1 65535 state enable disable Description This command is used to configure all of the OSPF interfaces on the swit...

Page 475: ...isible by the Hello Interval metric value 1 65535 The interface metric 1 to 65535 Entering a 0 will allow automatic calculation of the metric authentication Enter the type of authentication preferred The user may choose between none Choosing this parameter will require no authentication simple password 8 Choosing this parameter will set a simple authentication which includes a case sensitive passw...

Page 476: ...iption This command will display the current OSPF interface settings for the specified interface name Parameters ipif_name 12 The IP interface name for which you want to display the current OSPF interface settings all Entering this parameter will display all ospf Interface settings Restrictions None Usage Example To display the current OSPF interface settings for a specific OSPF interface ...

Page 477: ...PF interfaces on the switch local show ospf all Command show ospf all Interface Name System IP Address 10 42 73 10 8 Link Up Network Medium Type BROADCAST Metric 1 Area ID 0 0 0 0 Administrative State Enabled Priority 1 DR State DR DR Address 10 42 73 10 Backup DR Address None Hello Interval 10 Dead Interval 40 Transmit Delay 1 Retransmit Time 5 Authentication None Interface Name ipif2 IP Address ...

Page 478: ...ween 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can b...

Page 479: ...llo_interval sec 1 65535 Allows the specification of the interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval sec 1 65535 Allows the specification of the length of time between the receipt of Hello ...

Page 480: ...interface from the switch Parameters area_id A 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain neighbor_id The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router The router ID of the neighbor router Restrictions Only...

Page 481: ...in the OSPF domain neighbor_id The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router This is the router ID of the neighbor router Restrictions None Usage Example To display the current OSPF virtual interface configuration local show ospf virtual_link Transit Virtual Hello Dead Authen...

Page 482: ...mmand Parameters show command_history config command_history value 1 40 Each command is listed in detail in the following sections Purpose Used to display all commands in the Command Line Interface CLI Syntax Description This command will display all of the commands available through the Command Line Interface CLI Parameters None Restrictions None Example usage To display all of the commands in th...

Page 483: ...rts config 802 1x init config 802 1x reauth config access profile profile_id config account config admin local_enable config all_boxes_id config arp_aging time config authen_application CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show command_history Purpose Used to display the command history Syntax show command_history Description This command will display the command history Para...

Page 484: ...ts show router ports login local config command_history Purpose Used to configure the command history Syntax config command_history value 1 40 Description This command is used to configure the command history Parameters value 1 40 The number of previously executed commands maintained in the buffer Up to 40 of the latest executed commands may be viewed Restrictions None Example usage To configure t...

Page 485: ... degrees Celsius Humidity Operating 5 to 95 RH non condensing Storage 0 to 95 RH non condensing Dimensions 441 mm x 207 mm x 44 mm 1U 19 inch rack mount width Weight 3 15 kg EMC FCC Class A CE Mark C Tick Safety CSA International General Standards IEEE 802 3u 100BASE TX Fast Ethernet IEEE 802 3ab 1000BASE T Gigabit Ethernet IEEE 802 1 P Q VLAN IEEE 802 3x Full duplex Flow Control IEEE 802 3 Nway a...

Page 486: ...r Network Cables 10BASE T 100BASE TX UTP Cat 5 Cat 5 Enhanced for 1000Mbps UTP Cat 5 for 100Mbps UTP Cat 3 4 5 for 10Mbps EIA TIA 568 100 ohm screened twisted pair STP 100m Number of Ports 48 10 100 2 Gigabit Ethernet ports Performance Transmission Method Store and forward RAM Buffer 1 MB per device Filtering Address Table 16K MAC address per device Packet Filtering Forwarding Rate Full wire speed...

Search results

Summary of Contents for DES-3350SR

Reviews:

Related manuals for DES-3350SR

Brands by name

Popular brands

D-Link DES-3350SR, Reference Manual

Search results

Summary of Contents for DES-3350SR

Reviews:

Related manuals for DES-3350SR

Brands by name

Popular brands