manualshive.com logo in svg

D-Link Dis-200G Series, Cli Reference Manual

The D-Link Dis-200G Series is a high-performance networking device designed for seamless connectivity. With its intuitive Web UI, users can easily configure and manage the device to meet their specific requirements. Download the comprehensive Web UI Reference Manual for free from manualshive.com to unleash the full potential of this product.

Share
Download
background image

 

DIS-200G Series Gigabit Ethernet Switch CLI Reference Guide 

43 

 

10. 

 

DoS Prevention Commands 

10-1 

dos-prevention 

This command is used to enable and configure the DoS prevention mechanism. Use the 

no

 form of this 

command to reset DoS prevention to the default setting. 

dos-prevention

 DOS-ATTACK-TYPE

 

no dos-prevention 

DOS-ATTACK-TYPE

 

Parameters 

DOS-ATTACK-TYPE 

Specifies the string that identifies the DoS type to be configured. 

Default 

By default all supported DoS types are disabled. 

Command Mode 

Global Configuration Mode. 

Command Default Level 

Level: 15. 

Usage Guideline 

This command is used to enabled and configure the DoS prevention mechanism for a specific DoS 

attack type or for all supported types. The DoS prevention mechanisms (matching and taking action) 

are hardware-based features. 
When DoS prevention is enabled, the Switch will log the event if any attack packet was received. 
The command no dos-prevention with the all keyword is used to disable the DoS prevention 

mechanism for all supported types. All the related settings will be reverted back to the default for the 

specified attack types. 
The following well-known DoS types which can be detected by most switches: 

 

Blat:

 This type of attack will send packets with TCP/UDP source port equals to destination port to the 

target device. It may cause the target device respond to itself. 

 

Land: 

A LAND attack involves with IP packets where the source and destination address are set to 

address of the target device. It may cause the target device reply to itself continuously. 

 

TCP-NULL-scan: 

Port scanning by using specific packets, which contain a sequence number of 0 and 

no flags. 

 

TCP-SYN-fin: 

Port scanning by using specific packets, which contain SYN and FIN flags. 

 

TCP-SYN-SRCport-less-1024: 

Port scanning by using specific packets, which contain source port 0-

1023 and SYN flag. 

 

TCP-xmas-scan: 

Port scanning by using specific packets, which contain a sequence number of 0 and 

the Urgent (URG), Push (PSH), and FIN flags. 

 

Ping-death: 

A ping of death is a type of attack on a computer that involves sending a malformed or 

otherwise malicious ping to a computer. A ping is normally 64 bytes in size; many computers cannot 

handle a ping large than the maximum IP packet size, which is 65,535 bytes. Sending a ping of this size 

can crash the target computer. Traditionally, this bug has been relatively easy to exploit. Generally, 

sending a 65536 byte ping packet is illegal according to networking protocol, but a packet of such a size 

can be sent if it is fragmented; when the target computer reassembles the packet, a buffer overflow can 

occur, which often cause a system crash. 

Summary of Contents for Dis-200G Series

Page 1: ...DIS 200G Series Industrial Gigabit Ethernet Smart Managed Switch ...

Page 2: ...d in this text D Link and the D Link logo are trademarks of the D Link Corporation Microsoft and Windows are registered trademarks of the Microsoft Corporation Other trademarks and trade names may be used in this document to refer to either as the entities claiming the marks and the names or their products D Link Corporation disclaims any proprietary interest in trademarks and trade names other th...

Page 3: ...me Commands 91 19 Link Aggregation Control Protocol LACP Commands 92 20 Link Layer Discovery Protocol LLDP Commands 96 21 Loopback Detection LBD Commands 100 22 Mirror Commands 105 23 MLD Snooping Commands 108 24 Multiple Spanning Tree Protocol MSTP Commands 114 25 Power over Ethernet PoE Commands 119 26 Power Saving Commands 129 27 Port Security Commands 135 28 Quality of Service QoS Commands 140...

Page 4: ...ce Guide III 42 Traffic Segmentation Commands 229 43 Virtual LAN VLAN Commands 231 44 Voice VLAN Commands 241 45 Web Authentication Commands 249 Appendix A System Log Entries 254 Appendix B Trap Entries 261 Appendix C IETF RADIUS Attributes Support 265 ...

Page 5: ...n Description Boldface Font Commands command options and keywords are printed in boldface Keywords in the command line are to be entered exactly as they are displayed UPPERCASE ITALICS Font Parameters or values that must be specified are printed in UPPERCASE ITALICS Parameters in the command line are to be replaced with the actual values that are desired to be used with the command Square Brackets...

Page 6: ...tilization scenarios is given here Example s Each command is accompanied by a practical example of the command being issued in a suitable scenario Command Modes There are severalcommand modes available in the command line interface CLI The set of commands available to the user depends on both the mode the user is currently in and their privilege level For each case the user can see all the command...

Page 7: ...mand Mode Privilege Level Description User EXEC Mode Basic User level This level has the lowest priority of the user accounts It is provided only to check basic system settings Privileged EXEC Mode Administrator level For changing both local and global terminal settings monitoring and performing certain system administration tasks The system administration tasks that can be performed at this level...

Page 8: ...ers for an interface or a range of interfaces An interface can be a physical port VLAN or other virtual interface Thus interface configuration mode is distinguished further according to the type of interface The command prompt for each type of interface is slightly different VLAN Interface Configuration Mode VLAN interface configuration mode is one of the available interface modes and is used to c...

Page 9: ...The following will explain the layout terminology and use of this notation In the following example we will enter the Global Configuration Mode and then enter the Interface Configuration Mode using the notation 1 0 1 After entering the Interface Configuration Mode for port 1 we will change the speed to 1 Gbps using the speed 1000 command Switch configure terminal Switch config interface Ethernet 1...

Page 10: ...mmand was entered incorrectly The following example shows how an ambiguous command error message is generated Switch show v Ambiguous word detected at marker Switch The following example shows how an incomplete command error message is generated Switch show Incomplete command Switch The following example shows how an invalid input error message is generated Switch show verb Invalid word detected a...

Page 11: ... that match the filter string exclude FILTER STRING This parameter is used to exclude the lines that match the filter string from the display The example below shows how to use the begin FILTER STRING parameter in a show command Switch show running config begin interface interface Ethernet 1 0 1 switchport mode access interface Ethernet 1 0 2 switchport mode access interface Ethernet 1 0 3 switchp...

Page 12: ...exclude FILTER STRING parameter in a show command Switch show running config exclude vlan username user password user123 ddp clock timezone 0 0 interface Ethernet 1 0 1 switchport mode access interface Ethernet 1 0 2 switchport mode access interface Ethernet 1 0 3 switchport mode access interface Ethernet 1 0 4 switchport mode access more next page Space continue g quit C ...

Page 13: ...on entered To list the keywords and arguments associated with a command enter a question mark in place of a keyword or argument on the command line This form of help is called the command syntax help because it lists the keywords or arguments that apply based on the command keywords and arguments already entered Example This example shows how the help command is used to display a brief description...

Page 14: ...ollowing example shows how to use the command syntax help to display the next argument of a partially complete IGMP snooping command The characters entered before the question mark is reprinted on the next command line to allow the user to continue entering the command Switch config ip igmp snooping Enable IGMP snooping Switch config ip igmp 2 2 configure terminal This command is used to enter the...

Page 15: ...ommand is used to end the current configuration mode and return to the highest mode in the CLI mode hierarchy which is either the User EXEC Mode or the Privileged EXEC Mode end Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline E xecuting this command will return access to the highest mode in the CLI hierarchy regardless of w...

Page 16: ... Use this command to exit the current configuration mode and go back to the last mode When the user is in the User EXEC Mode or the Privilege EXEC Mode this command will logout the session Example This example shows how to exit from the Interface Configuration Mode and return to the Global Configuration Mode Switch configure terminal Switch config interface eth1 0 1 Switch config if exit Switch co...

Page 17: ...nds in the history buffer after recalling commands with Ctrl P or the Up Arrow key Repeat the key sequence to recall successively more recent commands Example This example shows how to display the command buffer history Switch show history help show history Switch 2 7 show cpu utilization This command is used to display the CPU utilization information show cpu utilization Parameters None Default N...

Page 18: ...lt None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command displays version information about the Switch Example This example shows how to displays version information about the Switch Switch show version System MAC Address 00 01 13 12 AB 00 Unit ID Module Name Versions 1 DIS 200G H W A1 Bootloader 1 10 001 Runtime 1 10 001 Switch ...

Page 19: ...lobal Configuration Mode Command Default Level Level 15 Usage Guideline This command enables the HTTPS server function Example This example shows how to enable the HTTPS server function Switch configure terminal Switch config ip http secure server Switch config 3 2 show terminal This command is used to obtain information about the terminal configuration parameter settings for the current terminal ...

Page 20: ...Width 80 columns Default length 24 lines Default width 80 columns Switch 3 3 show ip http secure server This command is used to obtain information about the SSL status Use this command in EXEC mode or any configuration mode show ip http secure server Parameters None Default By default the state is disabled Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideli...

Page 21: ...ID Type User Name Privilege Login Time IP address 0 console admin 15 0D0H3M11S Total Entries 1 Switch 3 5 terminal length The command is used to configure the number of lines displayed on the screen The terminal length command will only affect the current session The newly created saved session terminal length will use the default value Use the no form of this command to revert to the default sett...

Page 22: ... additional screen of output or press Return to display on more line of output Setting the screen length to 0 turns off the scrolling feature and causes the entire output to display at once Unless the default keyword is used a change to the terminal length value applies only to the current session When using the no form of this command the number of lines in the terminal display screen is reset to...

Page 23: ...lumns Default length 24 lines Default width 80 columns Switch terminal width 120 Switch show terminal Terminal Settings Length 24 lines Width 120 columns Default length 24 lines Default width 80 columns Switch 3 7 username This command is used to create a user account Use the no form of this command to delete the user account username NAME privilege LEVEL nopassword password 0 7 15 PASSWORD no use...

Page 24: ...rd is admin and privilege level is 15 Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline This command creates user accounts with different access levels When the user login with Level 1 the user will be in the User EXEC Mode The user can specify the password in the encrypted form or in the plain text form If it is in the plain text form but the service password e...

Page 25: ...ration file and can be applied to the system later If the service password encryption command is enabled the password will be stored in the encrypted form When the service password encryption option is disabled and the password is specified in the plain text form the password will be in plain text form However if the password is specified in the encrypted form or if the password has been converted...

Page 26: ...n no asymmetric vlan Parameters None Default By default this feature is disabled Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to enable or disable the asymmetric VLAN function Example This example shows how to enable asymmetric VLAN Switch configure terminal Switch config asymmetric vlan This example shows how to disable asymmetric VLAN Swi...

Page 27: ...interface from the DHCP protocol Default None Command Mode Time range Configuration Mode Command Default Level Level 15 Usage Guideline The IPv4 address of an interface can be either manually assigned by the user or dynamically assigned by the DHCP server Use the no ip address command to delete the configured IP address entry Example This example shows how to set 10 90 90 91 is the ip address for ...

Page 28: ...th 0 0 0 0 Example This example shows how to configure the static route that destination is to 10 90 90 254 Switch config terminal Switch config ip route 0 0 0 0 0 0 0 0 10 90 90 254 Switch config 5 3 show ip interface This command is used to display the IP interface information show ip interface brief Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Le...

Page 29: ...None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display the ip address of default gateway Example This example shows how to display ip address of default gateway Switch config if vlan show ip route Code C connected S static candidate default Gateway of last resort is 10 90 90 254 to network 0 0 0 0 C 10 90 90 0 24 is directly ...

Page 30: ...ace Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the IPv6 address of management VLAN Use no form of this command to disable IPv6 address for management VLAN Example This example shows how to configure an IPv6 address Switch config terminal Switch config interface vlan 1 Switch config if vlan ipv6 address 3ffe 22 33 44 55 64 Switch config if vlan T...

Page 31: ...e or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display IPv6 interface related configurations Example This example shows how to display IPv6 interface information Switch show ipv6 interface brief vlan1 is up Link status is up Global unicast address 3ffe 22 33 44 55 Link local address fe80 201 19ff fe11 20 Static address is 3ffe 22 33 44 55 64 Switch ...

Page 32: ...help users to detect whether the copper Ethernet port has connectivity problems Use the test cable diagnostics command to start the test Example This example shows how to start the cable diagnostics to test the status and length of copper cables Switch test cable diagnostics interface Ethernet 1 0 1 2 Switch When running cable diagnostic on 10Mbps or 100Mbps speed the port which is diagnosed will ...

Page 33: ... M eth1 0 1 1000BaseT Link Down Pair 1 Open at 7M Pair 2 Open at 7M Pair 3 Short at 7M Pair 4 OK at 7M eth1 0 2 1000BaseT Link Down Pair 1 Open at 7M Pair 2 Open at 7M Pair 3 Short at 7M Pair 4 OK at 7M 7 3 clear cable diagnostics This command is used to clear the test results for the cable diagnostics clear cable diagnostics all interface INTERFACE ID Parameters all Specifies to clear cable diagn...

Page 34: ...rence Guide 30 Usage Guideline This command is used to clear the test results for the cable diagnostics Example This example shows how to clear the test results for the cable diagnostics Switch clear cable diagnostics interface Ethernet 1 0 2 Switch ...

Page 35: ...l 1 Usage Guideline Use this command to display the current SFP module operating transceiver monitoring parameters values for specified ports Example This example shows how to display current operating parameters for all ports valid for transceiver monitoring Switch show interfaces transceiver high alarm high warning low warning low alarm mA milliamperes mW milliwatts Transceiver Monitoring traps ...

Page 36: ...g This command is used to send all or the specified level of optical transceiver monitoring SNMP notifications Use the no form of the command to stop sending the notifications snmp server enable traps transceiver monitoring alarm warning no snmp server enable traps transceiver monitoring alarm warning Parameters alarm Optional Specifies to send or stop sending alarm level notification warning Opti...

Page 37: ...for physical port interface configuration The configuration can select to shut down a port on an alarm event or warning event or not to shut down on either of them When the monitoring function is enabled an alarm event occurs when the parameters being monitored go higher than the high alarm threshold or go lower than the low alarm threshold A warning event occurs when the parameters being monitore...

Page 38: ...l status alarm Specifies the threshold for high alarm or low alarm conditions warning Specifies the threshold for high warning or low warning conditions VALUE Specifies the value of the threshold This value must be between 0 and 131 mA Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline This configuration is only suitable for SFP SFP port interfaces w...

Page 39: ...ow alarm threshold A warning event occurs when the parameters being monitored go higher than the high warning threshold or go lower than the low warning threshold When an SFP with transceiver monitoring capability is plugged into a port but the transceiver monitoring function of the port is disabled the system will not detect the SFP s abnormal status but the user can still check the current statu...

Page 40: ...47 Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Only SFP SFP port interfaces with optical modules with transceiver monitoring capability are valid for this configuration The no form of this command has the effect to clear the configured threshold stored in system Example This example shows how to configure the RX power low warning threshold as ...

Page 41: ...t interfaces with optical modules with transceiver monitoring capability are valid for this configuration The no form of this command has the effect to clear the configured threshold stored in system Example This example shows how to configure the temperature high alarm threshold as 127 994 on interface eth1 0 11 Switch configure terminal Switch config transceiver monitoring temperature Ethernet 1...

Page 42: ...rt interfaces with optical modules with transceiver monitoring capability are valid for this configuration The no form of this command has the effect to clear the configured threshold stored in system Example This example shows how to configure the TX power low warning threshold to 0 181 mW on interface eth1 0 11 Switch configure terminal Switch config transceiver monitoring tx power Ethernet 1 0 ...

Page 43: ...lue must be between 0 and 6 55 Volt Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Only SFP SFP port interfaces with optical modules with transceiver monitoring capability are valid for this onfiguration The no form of this command has the effect to clear the configured threshold stored in system Example This example shows how to configure the lo...

Page 44: ...mmand Default Level Level 15 Usage Guideline Use this command to enable or disable DDP client function globally Example This example shows how to enable DDP globally Switch configure terminal Switch config ddp Switch config This example shows how to disable DDP Switch configure terminal Switch config no ddp Switch 9 2 ddp report timer This command is used to configure interval between two consecut...

Page 45: ...e Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure interval between two consecutive DDP report messages Example This example shows how to configure interval to 60 seconds Switch configure terminal Switch config ddp report timer 60 9 3 show ddp This command is used to display the switch DDP configurations show ddp Parameters none Default None Co...

Page 46: ...DIS 200G Series Gigabit Ethernet Switch CLI Reference Guide 42 This example shows how to display DDP global information Switch show ddp D Link Discovery Protocol state disabled Report timer 60 seconds ...

Page 47: ...l send packets with TCP UDP source port equals to destination port to the target device It may cause the target device respond to itself Land A LAND attack involves with IP packets where the source and destination address are set to address of the target device It may cause the target device reply to itself continuously TCP NULL scan Port scanning by using specific packets which contain a sequence...

Page 48: ...ntion mechanism for all supported types Switch configure terminal Switch config no dos prevention all Switch config 10 2 show dos prevention This command is used to display the DoS prevention status and related drop counters show dos prevention DOS ATTACK TYPE Parameters DOS ATTACK TYPE Optional Specifies the DoS type to be displayed Default None Command Mode EXEC Mode or Any Configuration Mode Co...

Page 49: ...ck Enabled TCP Null Enabled TCP Xmas Enabled TCP SYN FIN Enabled TCP SYN SrcPort Less 1024 Enabled Ping of Death Attack Enabled Switch This example shows how to display the specified type configuration information of the DoS prevention Switch show dos prevention lan DoS Type Land Attack State Enabled Switch ...

Page 50: ...nstances Example This example shows how to configure the description for the ERP instances Switch configure terminal Switch config ethernet ring g8032 major ring Switch config erp instance 1 Switch config erp instance description custom description Switch config erp instance 11 2 ethernet ring g8032 This command is used to create or modify an ITU T G 8032 ERP physical ring and enter the ERP config...

Page 51: ... a G 8032 profile and enter the ERP profile configuration mode Use the no form of this command to delete the specified profile ethernet ring g8032 profile PROFILE NAME no ethernet ring g8032 profile PROFILE NAME Parameters PROFILE NAME Specifies the name of the G 8032 profile with the maximum of 32 characters Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage ...

Page 52: ...ified APS channel VLAN does not need to exist to configure the command But it needs to exist before the instance can be set to the operation state If the APS channel VLAN is removed when the ERP instance is in operation the ERP instance will enter the operational disabled state Each ERP instances should have distinct APS channel VLAN Example This example shows how to configure the APS channel VLAN...

Page 53: ...to add or delete VLAN IDs protected by the ERP mechanism Example This example shows how to configure service protected VLAN as 100 200 for ERP instance 1 Switch configure terminal Switch config ethernet ring g8032 ring2 Switch config erp instance 1 Switch config erp instance inclusion list vlan ids 100 200 Switch config erp instance 11 6 instance This command is used to create an ERP instance and ...

Page 54: ...m of this command to revert to the default setting level MEL VALUE no level Parameters MEL VALUE Specifies an ERP instance number The valid values are from 1 to 32 Default By default the value is 1 Command Mode ERP Instance Configuration Mode Command Default Level Level 15 Usage Guideline This command is used to configure ring MEL value of an ERP instance The configured MEL value of all ring nodes...

Page 55: ...mmand is used to associate an ERP instance with a G 8032 profile Multiple ERP instances can be associated with the same G 8032 profile Example This example shows how to associate the profile campus with instance 1 Switch configure terminal Switch config ethernet ring g8032 ring1 Switch config erp instance 1 Switch config erp instance profile campus Switch config erp instance 11 9 port0 This comman...

Page 56: ...sical ring Use the no form of this command to remove the settings port1 interface INTERFACE_ID none no port1 Parameters INTERFACE ID Specifies the interface ID of the first ring port The interface s can be a physical interface or a port channel none Specifies that the inter connect node is a local node endpoint of an open ring Default None Command Mode ERP Configuration Mode Command Default Level ...

Page 57: ...tinues to use the RPL if it did not fail after a switch link defect condition was cleared Since in Ethernet ring protection the working transport entity resources may be more optimized and in some cases it is more desirable to revert to this working transport entity once all ring links are available This is performed at the expense of an additional traffic interruption In some cases there may be n...

Page 58: ... the port as the RPL port Example This example shows how to configure port0 as the RPL port of the ERP instance 1 Switch configure terminal Switch config ethernet ring g8032 ring1 Switch config erp instance 1 Switch config erp instance rpl port0 Switch config erp instance 11 13 show ethernet ring g8032 This command is used to display information of the ERP instances show ethernet ring g8032 status...

Page 59: ...n MEL 1 R APS Channel invalid r aps vlan Protected VLAN Profile Guard timer 500 milliseconds Hold Off timer 0 milliseconds WTR timer 5 minutes Revertive Instance State Deactivated Admin RPL Operational RPL Port0 State Forwarding Port1 State Forwarding Admin RPL Port Operational RPL Port Total Entries 1 Switch This example shows how to display the brief information of the ERP instances Switch show ...

Page 60: ...tional RPL Current config running config ring node role of ERPS instance Owner None Admin Operational Port0 port1 Current config running config ring port role Interface_id none Admin Operational RPL Port Current config running RPL port0 port1 none Ring port0 port1 state State for ring ports of ERP instance Forwarding Blocked l Profile The profile associated with the ring instances Inst ID Instance...

Page 61: ...eline This command is used to activate or deactivate the specified ERP instance The ring ports APS channel and ERP profile must be configured before activating the ERP instance The activated ERP instance will be in non operational state if the specified APS channel does not exist or the specified ports are not the tagged member port of the APS channel VLAN Example This example shows how to activat...

Page 62: ...the status of the ERP instances brief Specifies to display the brief information of the ERP instances Default The default guard timer is 500 milliseconds The default hold off timer is 0 second The default WTR timer is 5 minutes Command Mode G 8032 Profile Configuration Mode Command Default Level Level 15 Usage Guideline This command is used to configure timers for an ERP domain Example This exampl...

Page 63: ...ommand Mode Privileged EXEC Mode Command Default Level Level 15 Usage Guideline The firmware image or the default configuration file cannot be deleted Example This example shows how to delete the file named office cfg from file system on the local flash Switch delete flash office cfg 12 2 dir This command is used to display the information for files in the flash dir Parameters none Default None Co...

Page 64: ...s example shows how to display all files information in the Flash Switch dir Directory of flash 1 r 308 Jan 01 1970 00 00 00 default config 2 rw 776 Mar 13 2017 13 28 51 startup config 3 rw 776 Mar 15 2017 11 31 09 office cfg 4 r 3898396 Mar 14 2017 09 57 09 R1 10 B013 dat 5 r 3893579 Mar 15 2017 11 28 57 R1 10 B014 dat 7793835 bytes total ...

Page 65: ...or a port channel Default None Command Mode Privileged EXEC Mode Command Default Level Level 15 Usage Guideline Using this command only clears dynamic MAC address entries Only the dynamic unicast address entry will be cleared Example This example shows how to remove the address learnt from interface Ethernet 1 0 1 Switch clear mac address table dynamic interface Ethernet 1 0 1 13 2 mac address tab...

Page 66: ...he no form of this command to disable learning mac address table learning interface INTERFACE ID no mac address table learning interface INTERFACE ID Parameters INTERFACE ID Optional Specifies the physical port interface to be configured Optional Specifies a series of interfaces or separate a range of interfaces from a previous range No spaces before and after the comma Optional Specifies a range ...

Page 67: ...aces or separate a range of interfaces from a previous range No spaces are allowed before and after the comma Optional Specifies a range of interfaces No spaces are allowed before and after the hyphen all Specifies to remove all static MAC address entries Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline For a unicast MAC address entry only one inte...

Page 68: ...evert to the default setting multicast filtering mode forward unregistered filter unregistered no multicast filtering mode Parameters forward unregistered Specifies to forward registered IP multicast packets based on the forwarding table and flood all unregistered multicast packets based on the VLAN domain filter unregistered Specifies to forward registered IP multicast packets based on the forwar...

Page 69: ...ddress interface INTERFACE ID Optional Specifies to display information for a specific interface Valid interfaces include physical ports and port channels vlan VLAN ID Optional Specifies the VLAN ID The valid values are from 1 to 4094 Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline If the option interface is specified the unicast entry th...

Page 70: ...ies 4 Switch This example shows how to display all the MAC address table entries for VLAN 1 Switch show mac address table vlan 1 VLAN MAC Address Type Ports 1 00 01 00 02 00 04 Dynamic eth1 0 2 1 C2 F3 22 0A 12 F4 Dynamic port channel2 1 00 01 00 02 00 00 Dynamic eth1 0 8 Total Entries 3 Switch 13 7 show mac address table aging time This command is used to display the MAC address table s aging tim...

Page 71: ...l Specifies the interface to be display Optional Specifies a series of interfaces or separate a range of interfaces from a previous range No spaces before and after the comma Optional Specifies a range of interfaces No spaces before and after the hyphen Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline If the interface is not specified all ...

Page 72: ... form of this command to reset DoS prevention to the default setting show multicast filtering mode Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline None Example This example shows how to display the multicast filtering mode Switch show multicast filtering mode IP Multicast Filtering Mode forward unregistered Switch ...

Page 73: ...e Command Default Level Level 15 Usage Guideline This command is available for both physical ports and port channel interface configuration This command only takes effect for hybrid mode and trunk mode Example This example shows how to enable the GVRP function on interface eth1 0 1 Switch configure terminal Switch config gvrp global Switch config 14 2 gvrp enable This command is used to enable the...

Page 74: ...e VLAN ID no gvrp advertise Parameters all Specifies that all VLANs are advertised on the interface add Optional Specifies a VLAN or a list VLANs to be added to advertise the VLAN list remove Optional Specifies a VLAN or a list VLANs to be removed from the advertised VLAN list VLAN ID Optional Specified the advertise VLAN list or the VLAN list to be added to or removed from the advertise VLAN list...

Page 75: ...rnet 1 0 1 Switch config if gvrp advertise 1000 Switch config if 14 4 gvrp vlan create This command is used to enable dynamic VLAN creation Use the no form of this command to disable the dynamic VLAN creation function gvrp vlan create no gvrp vlan create Parameters None Default By default this option is enabled Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline W...

Page 76: ...eries of VLANs or separate a range of VLANs from a previous range No spaces are required before and after the comma Optional Specifies a range of VLANs No spaces are required before and after the hyphen Default No VLANs are forbidden Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline The command is available for both physical ports and port channel interface c...

Page 77: ...Specifies to set the timer for leaving all groups The unit is in a hundredth of a second JOIN TIMER VALUE Optional Specifies the timer value in a hundredth of a second The valid range is 1 to 20 LEAVE TIMER VALUE Optional Specifies the timer value in a hundredth of a second The valid range is 60 to 300 LEAVE ALL TIMER VALUE Optional Specifies the timer value in a hundredth of a second The valid ra...

Page 78: ...r a range of interfaces separated by a hyphen or a series of interfaces separated by comma Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command only displays GVRP related configurations Example This example shows how to display the GVRP configuration for the global configuration Switch show gvrp configuration Global GVRP State Dis...

Page 79: ...DIS 200G Series Gigabit Ethernet Switch CLI Reference Guide 75 Advertise VLAN 1 3 Forbidden VLAN 5 8 Switch ...

Page 80: ... Usage Guideline For a VLAN to operate with IGMP snooping both the global state and per VLAN state must be enabled On a VLAN the setting of IGMP snooping and MLD snooping are independent IGMP snooping and MLD snooping can be simultaneously enabled on the same VLAN Example This example shows how to disable the IGMP snooping globally Switch configure terminal Switch config no ip igmp snooping Switch...

Page 81: ...entity will listen for IGMP query packets sent by other devices If IGMP query message is received the device with lower value of IP address becomes the querie r Example This example shows how to enable the IGMP snooping querier on VLAN 1 Switch configure terminal Switch config vlan 1 Switch config vlan ip igmp snooping querier Switch config vlan 15 3 ip igmp snooping fast leave This command is use...

Page 82: ...group GROUP ADDRESS interface INTERFACE ID no ip igmp snooping static group GROUP ADDRESS interface INTERFACE ID Parameters GROUP ADDRESS Specifies an IP multicast group address INTERFACE ID Optional Specifies an interface or an interface list The interface should be the physical interface Optional Specifies a series of interfaces or a separate a range of interfaces from a previous range No space ...

Page 83: ...an VLAN ID Parameters vlan VLAN ID Optional Specifies the VLAN to be displayed Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display IGMP snooping information for all VLANs where IGMP snooping is enabled Example This example shows how to display IGMP snooping global state Switch show ip igmp snooping IGMP snooping gl...

Page 84: ...P address to be displayed If no IP address is specified all IGMP group information will be displayed Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display IGMP snooping group information Example This example shows how to display IGMP snooping group information Switch show ip igmp snooping groups IGMP Snooping Connect...

Page 85: ...roup IP address to be displayed vlan VLAN ID Optional Specifies the VLAN ID to be displayed Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command displays the IGMP snooping static group information Example This example shows how to display IGMP snooping static group information Switch show ip igmp snooping static group VLAN ID Grou...

Page 86: ...r the counter Default None Command Mode Privileged EXEC Mode Command Default Level Level 1 Usage Guideline Use this command to clear counters for a physical port interface Example This example shows how to clear the counters of interface eth1 0 1 Switch clear counters interface Ethernet 1 0 1 Switch 16 2 description This command is used to add a description to an interface description STRING no de...

Page 87: ...ows ethernet Ethernet switch port with all different media vlan VLAN interface port channel Aggregated port channel interface range Enter the interface range configuration mode for multiple interfaces Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline This command enters the interface configuration mode for a specific interface The format of the inte...

Page 88: ...e shows how to enter interface configuration mode for port channel 3 Switch configure terminal Switch config interface port channel 3 Switch config if 16 4 interface range This command is used to enter the interface range configuration mode for multiple interfaces interface range INTERFACE ID Parameters INTERFACE ID Specifies the physical port interface Optional Specifies the interface range by de...

Page 89: ...e information show counters interface INTERFACE ID Parameters INTERFACE ID Specifies that the interface can be a physical port If no interface is specified counters of all interfaces will be displayed Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display the statistic counters for an interface Example This example sh...

Page 90: ... txHCPkt1024to1518Octets 0 txHCPkt1519to9126Octets 0 rxCRCAlignErrors 0 rxUndersizedPkts 0 rxOversizedPkts 0 rxFragmentPkts 0 rxJabbers 0 rxDropPkts 0 txCollisions 0 txDropPkts 0 16 6 show interfaces This command is used to display the interface information show interfaces INTERFACE ID status Parameters INTERFACE ID Optional Specifies that the interface can be a physical port VLAN or other status ...

Page 91: ...lay the interface information for Ethernet 1 0 1 Switch show interfaces Ethernet 1 0 1 eth1 0 1 is enabled link status is down Interface type 1000BaseT Interface description MAC Address 00 01 C1 13 14 09 Auto duplex auto speed auto mdix Send flow control off receive flow control off Down Maximum transmit unit 1518 bytes RX bytes 0 TX bytes 54087 RX packets 0 TX packets 149 RX multicast 0 RX broadc...

Page 92: ...ASE T eth1 0 4 not connected 1 auto auto 1000BASE T eth1 0 5 connected 1 a full a 1000 1000BASE T eth1 0 6 not connected 1 auto auto 1000BASE T eth1 0 7 not connected 1 auto auto 1000BASE T eth1 0 8 connected 1 a full a 1000 1000BASE T eth1 0 9 not connected 1 auto auto 1000BASE T eth1 0 10 not connected 1 auto auto 1000BASE T eth1 0 11 not connected 1 full 100 None eth1 0 12 not connected 1 auto ...

Page 93: ...ause the port to enter the disabled state Under the disabled state the port will not be able to receive or transmit any packets Using the no shutdown command will put the port back into the enabled state When a port is shut down the link status will also be turned off Example This example shows how to disable the port state of interface Ethernet 1 0 1 Switch configure terminal Switch config interf...

Page 94: ...Default If the timeout parameter is not specified the timeout value will be 1 second Command Mode EXEC Mode Command Default Level Level 1 Usage Guideline Use this command to verify the reachability reliability and delay of the path to the destination host If neither the count or timeout value is specified the only way to stop the ping is by pressing Ctrl C Example This example shows how to ping th...

Page 95: ...1518 bytes Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline This command is available for physical ports configuration Oversize frames will be dropped and checks are carried out on ingress ports Use this command to transfer large frames or jumbo frames through the switch system to optimize server to server performance Example This example shows how to config...

Page 96: ...port channel when a physical port first joins a channel group An interface can only join one channel group If the mode on is specified in the command the channel group type is static If the mode active or passive is specified in the command the channel group type is LACP A channel group can only consist of either static members or LACP members Once the type of channel group has been determined oth...

Page 97: ... used by LACP Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline If a port channel number is not specified all port channels will be displayed If the channel load balance and sys id keywords are not specified with the show channel group command only summary channel group information will be displayed Example This example shows how to display...

Page 98: ... Switch show channel group channel 3 neighbor Flag S Port is requesting Slow LACPDUs F Port is requesting Fast LACPDUs A Port is in Active mode P Port is in Passive mode Channel Group 3 Partner Partner Partner Partner Port System ID PortNo Flags Port_Pri eth1 0 1 32768 00 07 eb 49 5e 80 12 SP 32768 eth1 0 2 32768 00 07 eb 49 5e 80 13 SP 32768 Switch This example shows how to display the load balan...

Page 99: ...h CLI Reference Guide 95 Switch This example shows how to display the summary information for all port channels Switch show channel group load balance algorithm src mac system ID 32765 00 02 4b 29 3a 00 Group Protocol 1 LACP 2 Static Switch ...

Page 100: ...ally enable LLDP and then the Switch can start to transmit LLDP packets and receive and process the LLDP packets on all physical interfaces By advertising LLDP packets the Switch announces the information to its neighbor through physical interfaces On the other hand the Switch will learn the connectivity and management information from the LLDP packets advertised from the neighbor s Example This e...

Page 101: ...trap Switch configure terminal Switch config snmp server enable traps lldp Switch config 20 3 show lldp This command is used to display the Switch s general LLDP configuration show lldp Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command is used to display the LLDP system s global configurations Example This examp...

Page 102: ... brief Optional Specifies to display the information in brief mode Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command display the information learned from the neighbor devices Example This example shows how to display the neighbor information on Ethernet 1 0 1 to Ethernet 1 0 2 in brief mode Switch show lldp neighbors interface ...

Page 103: ... 03 04 03 Port ID Subtype Local Port ID eth1 0 1 Port Description RMON Port 2 on Unit 1 Entity 2 Chassis ID Subtype MAC Address Chassis ID 00 01 02 03 04 04 Port ID Subtype Local Port ID eth1 0 2 Port Description RMON Port 2 on Unit 2 Entity 3 Chassis ID Subtype MAC Address Chassis ID 00 01 02 03 04 05 Port ID Subtype Local Port ID eth1 0 2 Port Description RMON Port 2 on Unit 3 Total Entries 2 Sw...

Page 104: ... port located on the same device When an LBD enabled port detects a loop condition packet transmitting and receiving is disabled at the port If an LBD disabled port receives an LBD packet and detects that the packet is sent out by the system itself the sending port will be blocked There are one way to recover an error disabled port The user can manually recover the port by entering the shutdown co...

Page 105: ...al Switch config interface Ethernet 1 0 1 Switch config if loopback detection Switch config if 21 3 loopback detection interval This command is used to configure the timer interval Use the no form of this command to revert to the default setting loopback detection interval SECONDS no loopback detection interval Parameters interval SECONDS Specifies the interval in seconds at which CPT packets are ...

Page 106: ...0 or 60 1000000 0 will keep a port disabled until next device restart Default By default this value is 60 seconds Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the recover time when the loop port will enable Example This example shows how to configure the time interval to 100 seconds Switch configure terminal Switch config loopb...

Page 107: ...tection setting and status Example This example shows how to displays the current loopback detection settings and status Switch show loopback detection Loop Detection Enabled Interval 20 seconds Recover Time 60 seconds Interface State Result Time Left sec Ethernet1 0 1 Disabled Normal Ethernet1 0 2 Disabled Normal Ethernet1 0 3 Enabled Loop 120 Ethernet1 0 4 Enabled Loop 115 Port channel1 Enabled ...

Page 108: ...ining time before being auto recovered 21 6 snmp server enable traps loopback detection This command is used to enable the sending SNMP notifications of loopback detection Use the no form of this command to revert to the default setting snmp server enable traps loopback detection no snmp server enable traps loopback detection Parameters None Default By default this option is disabled Command Mode ...

Page 109: ...estination interface for the port monitor session Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the destination interface for a local monitor session For a monitor session multiple source interfaces can be specified but only one destination interface can be specified Example This example shows how to create a port m...

Page 110: ...the port tx Optional Specifies to monitor the packets transmitted on the port Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Both physical ports and port channels are valid as source interfaces of monitor sessions For a monitor session multiple source interfaces can be specified but only one destination interface can be specified If the direction...

Page 111: ...XEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline If this command is used without specifying a session number all monitor sessions are displayed Example This example shows how to display a created port monitor session with the session number 1 Switch show monitor session 1 Session 1 Session Type local session Destination Port Ethernet1 0 1 Source Ports Both Ethernet1...

Page 112: ...ate with MLD snooping both the global state and per interface state must be enabled On a VLAN the setting of IGMP snooping and MLD snooping are independent That is IGMP snooping and MLD snooping can be simultaneously enabled on the same VLAN Example This example shows how to disable MLD snooping globally Switch configure terminal Switch config no ipv6 mld snooping Switch config This example shows ...

Page 113: ... The command is only available for VLAN interface configuration Example This example shows how to enable the MLD snooping querier state on VLAN 1 Switch configure terminal Switch config vlan 1 Switch config vlan ipv6 mld snooping querier Switch config vlan 23 3 ipv6 mld snooping fast leave This command is used to configure MLD snooping fast leave on the interface Use the no form of this command to...

Page 114: ...S interface INTERFACE ID Parameters IPV6 ADDRESS Specifies an IPv6 multicast group address INTERFACE ID Specifies an interface or an interface list No space is allowed before and after the comma The interface can be a physical interface or a port channel Default No static group is configured Command Mode VLAN Configuration Mode Command Default Level Level 15 Usage Guideline The command is only ava...

Page 115: ...isplay MLD snooping configurations Example This example shows how to display MLD snooping configurations Switch show ipv6 mld snooping MLD snooping global state Enabled VLAN 1 Configuration MLD snooping state Enabled Querier state Disabled Fast Leave state Enabled Switch 23 6 show ipv6 mld snooping groups This command is used to display MLD snooping group related information learned on the Switch ...

Page 116: ... group information Switch show ipv6 mld snooping groups MLD Snooping Connected Group Membership VLAN ID Group address Source address FM Exp sec Interface 1 ff09 2 2015 2016 2017 2018 IN 260 eth1 0 1 1 ff09 c EX 200 eth1 0 2 1 ff09 fb IN 245 eth1 0 3 Total Groups 3 Total SSM entries 3 Switch 23 7 show ipv6 mld snooping static group This command is used to display MLD snooping static group informati...

Page 117: ...nd Default Level Level 1 Usage Guideline This command displays the MLD snooping static group information Example This example shows how to display MLD snooping static group information Switch show ipv6 mld snooping static group VLAN ID Group address Interface 1 ff09 12 3 eth1 0 2 5 7 Total Entries 1 Switch ...

Page 118: ...and 4094 Optional Specifies a series of VLAN or separate a range of interfaces from a previous range No space is allowed before and after the comma Optional Specifies a range of VLAN No space is allowed before and after the hyphen Default None Command Mode MST Configuration Mode Command Default Level Level 15 Usage Guideline Any unmapped VLAN is mapped to the CIST instance When mapping the VLANs t...

Page 119: ...fault Level Level 15 Usage Guideline Two or more switches with the same VLAN mapping and configuration version number are considered to be in different MST regions if the region names are different Example This example shows how to configure the MSTP configuration name to MName Switch configure terminal Switch config spanning tree mst configuration Switch config mst name MName Switch config mst 24...

Page 120: ...sed in the MSTP version show spanning tree mst configuration digest show spanning tree mst instance INSTANCE ID Parameters configuration Specifies to display the table for the mapping relationship between VLANs and MSTP Instances digest Specifies to display the MD5 digest included in the current MST configuration identifier MSTCI instance INSTANCE ID Specifies to display the MSTP information for t...

Page 121: ...0 sysid 0 Designated Bridge Address 00 00 00 00 00 00 Priority 0 0 sysid 0 Topology Changes Count 0 Interface Role State Cost Priority Edge eth1 0 1 nonStp forwarding 200000 128 non edge Switch This example shows how to display MSTP instance mapping configuration Switch show spanning tree mst configuration Name MName Revision 2 Instances configured 3 Instance Vlans 0 21 4094 1 1 10 2 11 20 Switch ...

Page 122: ...g spanning tree mst INSTANCE ID priority PRIORITY no spanning tree mst INSTANCE ID priority Parameters INSTANCE ID Specifies the MSTP instance identifier Instance 0 represents the default instance CIST PRIORITY Specifies the bridge priority value that must be divisible by 4096 The range is from 0 to 61440 Default By default this value is 32768 Command Mode Global Configuration Mode Command Default...

Page 123: ...iguration Mode Command Default Level Level 15 Usage Guideline Since the power budget is limited as more PDs are added to the system the power source may not be sufficient to supply the power The PoE system enters the power critical section when the remaining power source is not enough to serve the new added PD Example This example shows how to configure the priority of ethernet 1 0 3 to the first ...

Page 124: ...not get powered during timeframe out of the specified time range When the command no poe power inline is issued the power management mode will be reset to default setting The specified time range profile does not need to exist to configure the command If the time range profile does not exist the command acts as if the time range is not specified Example This example shows how to enable PD detectio...

Page 125: ... When the usage threshold is configured if the utilization of the PSE exceeds the configured threshold then the EXCEED log will be recorded Once the percentage decreases and become lower than the threshold then the RECOVER log is recorded Example This example shows how to configure the usage threshold to 50 Switch configure terminal Switch config poe usage threshold 50 Switch config 25 3 snmp serv...

Page 126: ...ecifies the interface to be displayed Optional Specifies a series of interfaces or separate a range of interfaces from a previous range No spaces before and after the comma Optional Specifies a range of interfaces No spaces before and after the hyphen status Specifies to display the port PoE status configuration Specifies to display the port configuration information Default None Command Mode EXEC...

Page 127: ...rface ID State The port status can be of the following Disabled The PSE function is disabled Searching The remote PD is not connected Requesting The remote PD is inserted but the PSE doesn t provide power yet Delivering The remote PD is now powering by PoE system Faulty X The device detection or a powered device is in a faulty state X is the error code number 1 MPS Maintain Power Signature Absent ...

Page 128: ... maximum power is based on the detection result Never The powered device will not be detected and no power to the port Priority The priority used to prioritize the service order when power constrain happens within at the power unit Time Range The time range profile name which sets the activation time frame for a port 25 5 show poe power module This command is used to display the setting and actual...

Page 129: ...e the no form of this command to disable the function poe pd alive ip IP ADDRESS interval INTERVAL TIME retry RETRY COUNT waiting time WAITING TIME action reset notify both no poe pd alive ip interval retry waiting time action Parameters Ip IP ADDRESS Optional Specifies the IPv4 address of the target PD for the system executing the ping action IP ADDRESS Specifies the IPv4 address of the target PD...

Page 130: ...specific PD by using the ping function When there is no response the system takes one of the actions configured by the poe pd alive action command The interval between retry attempts can be configured by the poe pd alive interval command The system implements the retry mechanism to check the PD status The system will reset the PoE port power feeding after the retry by using Ping without any respon...

Page 131: ...erminal Switch config interface Ethernet 1 0 2 Switch config if poe pd alive interval 60 Switch config if This example shows how to configure the retry counts of ping requests Switch configure terminal Switch config interface Ethernet 1 0 2 Switch config if poe pd alive retry 4 Switch config if This example shows how to configure the waiting time for PD to reboot Switch configure terminal Switch c...

Page 132: ... Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display the PD alive check settings on the specified ports When no optional parameter is specified information of all PoE ports will be displayed Example This example shows how to display the PD alive check settings on interface eth1 0 1 2 Switch show poe pd alive interface Ethernet 1 0 1 2 Port ID eth1 0 1 PD Al...

Page 133: ... LED function When the port LED function is disabled LEDs used to illustrate port status are all turned off to save power Example This example shows how to disable the port LED function Switch configure terminal Switch config dim led Switch config 26 2 power saving This command is used to enable individual power saving functions Use the no form of this command to disable these functions power savi...

Page 134: ...rn off all the port s LEDs in the specified time range to save power When port shutdown is enabled the device will shut off all ports in the specified time range to save power When hibernation is enabled the device will enter the hibernation mode in the specified time range to save power Example This example shows how to enable power saving by shutting off the Switch s ports and toggle the Switch ...

Page 135: ...g if power saving eee Switch config if 26 4 power saving dim led time range This command is used to configure the time range profile for the dim LED schedule Use the no form of this command to delete the specified time range profile power saving dim led time range PROFILE NAME no power saving dim led time range PROFILE NAME Parameters PROFILE NAME Specifies the name of the time range profile to be...

Page 136: ...ibernation schedule When the system enters the hibernation mode the Switch will go into a low power state and idle It will shut down all the ports and LEDs all network function will be disabled and only the console connection will work via the RS232 port If the Switch is an endpoint type Power Sourcing Equipment PSE the Switch will not provide power to the port Example This example shows how to ad...

Page 137: ...own schedule Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if power saving shutdown time range day time Switch config if 26 7 show power saving This command is used to display the power saving configuration information show power saving link detection dim led port shutdown hibernation eee Parameters link detection Optional Specifies to display the link detection st...

Page 138: ...hows how to display all power saving configuration information Switch show power saving Function Version 3 00 Link Detection Power Saving State Disabled Scheduled Hibernation Power Saving State Enabled Administrative Dim LED State Disabled Scheduled Dim LED Power Saving State Disabled Time Range day time Scheduled Port shutdown Power Saving State Enabled Port Time Range Ethernet1 0 1 day time EEE_...

Page 139: ...cured entries on the specified physical interface Optional Specifies a series of interfaces or separate a range of interfaces from a previous range No space is allowed before and after the comma Optional Specifies a range of interfaces No space is allowed before and after the hyphen vlan VLAN ID Specifies to delete the auto learned secured entry learned with the specified VLAN Default None Command...

Page 140: ...aces No space is allowed before and after the hyphen address Specifies to display all the secure MAC addresses including both configured and learned entries Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command is used to display the current port security settings Example This example shows how to display the port security settings...

Page 141: ...d to enable or disable SNMP notifications for port security address violation and configure the number of traps per second Example This example shows how to enable sending trap for port security address violation and set the number of traps per second to 3 Switch configure terminal Switch config snmp server enable traps port security Switch config 27 4 switchport port security This command is used...

Page 142: ... port security state is changed to disabled the auto learned secured entries and violation counts are cleared When the maximum setting is changed the auto learned secured entries and violation counts are cleared A port security enabled port has the following restrictions If the port is a link aggregation member port the port security function cannot be enabled When the maximum number of secured us...

Page 143: ... if switchport port security violation restrict Switch config if This example shows how to apply the aging time for automatically learned secure MAC addresses for interface eth1 0 1 Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if switchport port security aging time 1 Switch config if ...

Page 144: ...Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline none Example This example shows how the default CoS of Ethernet port 1 0 1 set to 2 Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if mls qos cos 2 Switch 28 2 mls qos map dscp cos This command is used to define a Differentiated Services Code Point DSCP to class of service CoS map Use t...

Page 145: ...ows how to configure the DSCP to CoS map for mapping DSCP 12 16 and 18 to CoS 1 Switch configure terminal Switch config mls qos map dscp cos 12 16 18 to 1 Switch config 28 3 mls qos scheduler This command is used to configure the scheduling mechanism Use the no form of this command to reset the packet scheduling mechanism to the default mls qos scheduler sp wrr no mls qos scheduler Parameters sp S...

Page 146: ...uideline When the interface is set to trust DSCP the DSCP of the arriving packet will be trusted for the subsequent QoS operations First the DSCP will be mapped to an internal CoS value which will be subsequently used to determine the CoS queue The DSCP to CoS map is configured by the mls qos map dscp cos command If the arriving packet is a non IP packet the CoS is trusted The resulting CoS mapped...

Page 147: ...ameters NUMBER KBPS Specifies the number of kilobits per second as the maximum bandwidth limit The valid range is 100 1048576 Default By default there is no limitation Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline The specified limitation cannot exceed the maximum speed of the specified interface The input value will auto round up to next possible value s...

Page 148: ... No space is allowed before and after the hyphen cos Specifies to displays the port default CoS scheduler Specifies to displays the transmit queue scheduling settings trust Specifies to displays the port trust State rate limit Specifies to displays the bandwidth limitation configured for the port Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guid...

Page 149: ...ng configuration for eth1 0 2 to eth1 0 4 Switch show mls qos interface Ethernet 1 0 2 4 scheduler Interface Scheduler Method eth1 0 2 wrr eth1 0 3 sp eth1 0 4 wrr Switch This example shows how to display the rate limit for eth 1 0 1 to eth 1 0 5 Switch show mls qos interface Ethernet 1 0 1 5 rate limit Interface Rx Rate eth1 0 1 No Limit eth1 0 2 No Limit eth1 0 3 1300 kbps eth1 0 4 No Limit eth1...

Page 150: ...nformation Switch show mls qos map dscp cos 0 1 2 3 4 5 6 7 8 9 00 00 00 00 00 00 00 00 00 01 01 10 01 01 01 01 01 01 01 02 01 02 20 02 02 02 02 03 03 03 03 03 03 30 03 03 04 04 04 04 04 04 04 04 40 05 05 05 05 05 05 05 05 06 06 50 06 06 06 06 06 06 07 07 07 07 60 07 07 07 07 Switch 28 8 show mls qos queueing This command is used to display the QoS queuing information show mls qos queuing Paramete...

Page 151: ...ference Guide 147 Use this command to display the QoS queueing infomration on the switch Example This example shows how to display the QoS queuing information Switch show mls qos queuing CoS queue map CoS QID 0 1 1 0 2 0 3 1 4 2 5 2 6 3 7 3 Switch ...

Page 152: ...Global Configuration Mode Command Default Level Level 15 Usage Guideline This command can be used to improve the authentication processing time by setting the dead time to skip the unresponsive server host entries When the system performs authentication with the authentication server it attempts one server at a time If the attempted server does not respond the system will attempt the next server W...

Page 153: ...unting purposes The default value is 1813 timeout SECONDS Specifies the server time out value The range of timeout is between 1 and 255 seconds If not specified the default value is 5 seconds retransmit COUNT Optional Specifies the retransmit times of requests to the server when no response is received The value is from 0 to 20 Use 0 to disable the retransmission If not specified the default value...

Page 154: ...ine Use this command to display statistics counters related to servers Example This example shows how to display the server related statistics counters Switch show radius statistics RADIUS Server 172 19 192 80 Auth Port 1645 Acct Port 1646 State is UP Auth Acct Round Trip Time 10 10 Access Requests 4 NA Access Accepts 0 NA Access Rejects 4 NA Access Challenges 0 NA Acct Request NA 3 Acct Response ...

Page 155: ...ies where the Identifier and Acct Delay have been updated as well as those in which they remain the same Malformed Responses The number of malformed RADIUS Response packets received from this server Malformed packets include packets with an invalid length Bad authenticators or Signature attributes or unknown types are not included as malformed responses Bad Authenticators The number of RADIUS Resp...

Page 156: ...Default Level Level 15 Usage Guideline The RMON statistics group entry number is dynamic Only the interface that is enabled for RMON statistics will have a corresponding entry in the table Example This example shows how to configure an RMON statistics entry with an index of 65 and the owner name guest on Ethernet interface Ethernet 1 0 1 Switch configure terminal Switch config interface Ethernet 1...

Page 157: ... the table The configured interface becomes the data source for the created entry Example This example shows how to enable the RMON MIB history statistics group on Ethernet interface 1 0 1 Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if rmon collection history 101 owner it domain com interval 2000 Switch config if 30 3 rmon alarm This command is used to configure ...

Page 158: ...sed to notify the falling threshold crossing event The valid range is from 1 to 65535 If not specified no action is taken while crossing the falling threshold owner STRING Specifies the owner string The maximum length is 127 Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline The RMON alarm facility periodically takes samples of the value of variables...

Page 159: ... If the log and not the trap is specified the created entry will cause a log entry to be generated on an event occurrence If the trap and not the log is specified the created entry will cause an SNMP notification to be generated on an event occurrence If both the log and trap options are specified the created entry will cause both the log entry and the SNMP notification to be generated on event oc...

Page 160: ...to event 12 Falling threshold is 1100 assigned to event 12 On startup enable rising or falling alarm Switch 30 6 show rmon events This command is used to display the RMON event table show rmon events Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command displays the RMON event table Example This example shows how to...

Page 161: ...all of the configured entries Example This example shows how to display RMON Ethernet history statistics Switch show rmon history Index 23 owned by Manager Data source is eth4 0 2 Interval 30 seconds Requested buckets 50 Granted buckets 50 Sample 1 Received octets 303595962 Received packets 357568 Broadcast packets 3289 Multicast packets 7287 Estimated utilization 19 Undersized packets 213 Oversiz...

Page 162: ... for all of the configured entries are displayed Example This example shows how to display the RMON statistics Switch show rmon statistics Index 32 owned by it domain com Data Source is eth4 0 3 Received Octets 234000 Received packets 9706 Broadcast packets 2266 Multicast packets 192 Undersized packets 213 Oversized packets 24 Fragments 2 Jabbers 1 CRC alignment errors 0 Collisions 0 Drop events 0...

Page 163: ...ptional Specifies to configure the rising alarm trap state falling alarm Optional Specifies to configure the falling alarm trap state Default By default this option is disabled Command Mode Global Configuration Mode Command Default Level Level 12 Usage Guideline This command enables RMON trap state Example This example shows how to enable the sending of RMON traps for both the falling alarm and ri...

Page 164: ... Level Level 15 Usage Guideline The Safeguard Engine can help the overall operability of the device by minimizing the workload of the Switch while the attack is ongoing thus making it capable to forward essential packets over its network in a limited bandwidth Example This example shows how to enable the Safeguard Engine Switch configure terminal Switch config cpu protect safeguard Switch config 3...

Page 165: ...vel Level 1 Usage Guideline This command is used to display the status of the Safeguard Engine Example This example shows how to display the current status of the Safeguard Engine Switch show cpu protect safeguard Safeguard Enfine State Disabled Safeguard Enfine Status Normal Switch ...

Page 166: ... Command Default Level Level 1 Usage Guideline Use the show snmp server command to display the SNMP server global state settings Use the show snmp server traps command to display trap related settings Example This example shows how to display the SNMP server configuration Switch show snmp server SNMP Server Enabled Name SiteA Switch Location HQ 15F Contact MIS Department II Switch This example sho...

Page 167: ...s a SNMP agent by sending SNMP requests to agents and receiving SNMP responses and notifications from agents The SNMP server on the agent must be enabled before the agent can be managed Example This example shows how to enable the SNMP server Switch configure terminal Switch config snmp server Switch config 32 3 snmp server contact This command is used to configure the system contact information f...

Page 168: ...onfig 32 4 snmp server enable traps This command is used to enable the sending of trap packets globally Use the no form of this command to disable the sending of trap packets snmp server enable traps no snmp server enable traps Parameters None Default By default this option is disabled Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline This command enables the de...

Page 169: ...rmed with an incorrect SHA MD5 authentication key linkup Optional Specifies to control the sending of SNMP linkup notifications A linkup 3 trap is generated when the device recognizes that one of the communication links has come up linkdown Optional Specifies to control the sending of SNMP linkDown notifications A linkDown 2 trap is generated when the device recognizes a failure in one of the comm...

Page 170: ... command to remove the setting snmp server location TEXT no snmp server location Parameters location TEXT Specifies the string that describes the system location information The maximum length is 255 characters The syntax is a general string that allows spaces Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the system...

Page 171: ...Specifies the string that describes the SNMP server name information Spaces are not allowed here Default By default this name is Switch Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the system s name information on the Switch Example This example shows how to configure the system s name to SiteA switch Switch configure terminal ...

Page 172: ...o display SNMP view information group Specifies to display SNMP group information engineID Specifies to display SNMP local engine ID information Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 15 Usage Guideline This command displays the SNMP information Example This example shows how to display SNMP community information Switch show snmp community Codes r...

Page 173: ...hnopriv SNMPv3 User Name user1 UDP Port 162 Total Entries 2 Switch This example shows how to display the MIB view setting Switch show snmp view View Name Subtree View Type restricted 1 3 6 1 2 1 1 Included restricted 1 3 6 1 2 1 11 Included restricted 1 3 6 1 2 1 10 2 1 Included restricted 1 3 6 1 2 1 11 2 1 Included restricted 1 3 6 1 2 1 15 1 1 Included CommunityView 1 Included CommunityView 1 3...

Page 174: ...ame WriteGroup SecurityModel v1 ReadView CommunityView WriteView CommunityView NotifyView CommunityView GroupName WriteGroup SecurityModel v2c ReadView CommunityView WriteView CommunityView NotifyView CommunityView GroupName private SecurityModel v1 ReadView CommunityView WriteView CommunityView NotifyView CommunityView GroupName private SecurityModel v2c ReadView CommunityView WriteView Community...

Page 175: ...one Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline When the username argument is not specified all configured users will be displayed The community string created will not displayed by this command Example This example shows how SNMP users are displayed Switch show snmp user authuser User name authuser Security Model v2c Group Name VacmGroupName IP a...

Page 176: ...e SNMP community Default Community View Name Access right private CommunityView Read Write public CommunityView Read Only Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline This command provides an easy way to create a community string for SNMPv1 and SNMPv2c management When creating a community with the snmp server community command two SNMP group entries one for...

Page 177: ...by default If you configure a string less than 24 characters it will be filled with trailing zeros up to 24 characters Example This example shows how to configure the SNMP engine ID to 332200000000000000000000 Switch configure terminal Switch config snmp server engineID local 332200000000000000000000 Switch config 32 12 snmp server group This command is used to configure an SNMP group Use the no c...

Page 178: ...ew Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline An SNMP group defines a user group by specifying the allowed security model the read view the write view and the notification view The security model defines that the group user is allowed to use the specified version of SNMP to access the SNMP agent The same group name can be created with security models SNMP...

Page 179: ...v2c 3 SNMPv3 auth Specifies to authenticate the packet but not to encrypt it noauth Specifies not to authenticate and to encrypt the packet priv Specifies to both authenticate and to encrypt the packet COMMUNITY STRING Specifies the community string to be sent with the notification packet If the version is 3 the community string is used as the username as defined in the snmp sever user command POR...

Page 180: ... 126 with version 1 with community string comaccess Switch configure terminal Switch config snmp server community comaccess rw Switch config snmp server host 163 10 50 126 version 1 comaccess Switch config This example shows how to configure the trap recipient 163 10 50 126 with version 3 authentication security level and with the username useraccess Switch configure terminal Switch config snmp se...

Page 181: ...eyword encrypted is specified the length is 32 for MD5 and 40 for SHA The format is a hexadecimal value PRIV PASSWORD Specifies a privacy key used by DES In the plain text form this password is 8 to 16 octets If the keyword encrypted is specified the length is fixed to 32 octets Default By default there is one user User Name initial Group Name initial Command Mode Global Configuration Mode Command...

Page 182: ...bject identifier of the ASN 1 sub tree to be included or excluded from the view To identify the sub tree specify a text string consisting of numbers such as 1 3 6 2 4 or a word such as system Use the asterisk wildcard in a single sub identifier to specify a sub tree family included Specifies the sub tree to be included in the SNMP view excluded Specifies the sub tree to be excluded from the SNMP v...

Page 183: ...s example shows how to create a MIB view called interfacesMibView and define an SNMP group guestgroup with InterfaceMIBView as the read view Switch configure terminal Switch config snmp server view interfacesMibView 1 3 6 1 2 1 2 included Switch config snmp server group guestgroup v3 auth read interfacesMibView Switch config ...

Page 184: ...ies a range of interfaces No space before and after the hyphen Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display the Spanning Tree configuration for the single spanning tree when in the RSTP or STP compatible mode Example This example shows how to display the spanning tree information when STP is enabled Switch s...

Page 185: ...efault None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display Spanning Tree interface level configuration The command can be used for all STP versions Example This example shows how to display spanning tree configuration information for interface Ethernet 1 0 1 Switch show spanning tree configuration interface Ethernet 1 0 1 ...

Page 186: ...w to enable the switch to send all STP traps to the host 10 9 18 100 using the community string defined as public Switch configure terminal Switch config snmp server enable traps Switch config snmp server enable traps stp Switch config snmp server host 10 9 18 100 version 2c public Switch config 33 4 spanning tree global state This command is used to enable or disable the STP s global state Use th...

Page 187: ...ltiple Spanning Tree Protocol MSTP rstp Specifies the Rapid Spanning Tree Protocol RSTP stp Specifies the Spanning Tree Protocol IEEE 802 1D Compatible Default By default this mode is rstp Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline If the mode is configured as STP or RSTP all currently running MSTP instances will be cancelled automatically If the newly co...

Page 188: ...s a BPDU later its operation state changes to the non port fast state Disable mode The port will always be in the non port fast state It will always wait for the forward time delay to change to forwarding state Network mode The port will remain in the non port fast state for three seconds The port will change to the port fast state if no BPDU is received and changes to the forwarding state If the ...

Page 189: ...ge s priority value must be divisible by 4096 and a smaller number represents a better priority This configuration will take effect on STP version and RSTP mode In the MSTP mode use the command spanning tree mst priority to configure the priority for an MSTP instance Example This example shows how to configure the STP bridge priority value to 4096 Switch configure terminal Switch config spanning t...

Page 190: ...ived STP BPDU will be forwarded to all VLAN member ports in the untagged form The command does not take effect if the Layer 2 protocol tunnel is enabled for STP Example This example shows how to enable the forwarding of STP BPDUs Switch configure terminal Switch config spanning tree forward bpdu Switch config ...

Page 191: ...icast rate limit threshold Threshold of packets per second Default By default the broadcast multicast and unicast DLF storm controls are disabled Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use the storm control function to protect the network from the storm of broadcast packets multicast packets or unknown DA flooding packets Enter the storm control comma...

Page 192: ...d Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline None Example This example shows how to display the current storm control settings Switch show storm control Storm Status Threshold Unicast Disabled 1 pps Multicast Enabled 512 pps Broadcast Disabled 1 pps Switch ...

Page 193: ...om 0 to 61440 Default By default this value is 32768 Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline The bridge priority value is one of the two parameters used to select the Root Bridge The other parameter is system s MAC address The bridge s priority value must be divisible by 4096 and a smaller number represents a better priority This configuration will tak...

Page 194: ...with the OUI addresses configured by the surveillance vlan mac address command An auto surveillance VLAN can also be used to carry video traffic from an IP camera and its related components like Video Management Servers VMS VMS clients and video encoders These devices can be recognized by an OUI address and the ONVIF protocol If the IPC is recognized by the ONVIF protocol the Switch will learn the...

Page 195: ...s aging time is 720 minutes Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure the aging time for aging out the surveillance device and the surveillance VLAN automatically learned member ports When the last surveillance device connected to the port stops sending traffic and the MAC address of this surveillance device is aged out the ...

Page 196: ...urveillance VLAN function When surveillance VLAN is enabled for a port the port will be automatically learned as surveillance VLAN untagged member the received untagged surveillance packets will be forwarded to surveillance VLAN The received packets are determined as surveillance packets if the source MAC addresses of packets comply with the OUI addresses configured by the surveillance vlan mac ad...

Page 197: ... Description 28 10 7B 00 00 00 FF FF FF E0 00 00 D Link Device IP Surveillance Device 28 10 7B 20 00 00 FF FF FF F0 00 00 D Link Device IP Surveillance Device B0 C5 54 00 00 00 FF FF FF 80 00 00 D Link Device IP Surveillance Device F0 7D 68 00 00 00 FF FF FF F0 00 00 D Link Device IP Surveillance Device Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this ...

Page 198: ...PC and ONVIF capable NVR utilize WS Discovery to find other devices Once IPCs are discovered the Switch can further discover NVRs by snooping RTSP HTTP and HTTPS packets between NVRs and IPCs These packets cannot be snooped if the TCP UDP port is not equal to the RTSP port number Example This example shows how to configure the TCP UDP port number to 2000 for RTSP stream snooping Switch config term...

Page 199: ...fected This feature is used to block IPC traffic or not If the IPC state on the port is disabled the traffic from the IPC will be blocked Example This example shows how to enable the state of IPC with the IP address 172 18 60 1 Switch config terminal Switch config surveillance vlan onvif ipc 172 18 60 1 state enable Switch config 35 7 surveillance vlan onvif ipc description This command is used to...

Page 200: ...mand to remove this description surveillance vlan onvif nvr IP ADDRESS mac address MAC ADDRESS description TEXT no surveillance vlan onvif nvr IP ADDRESS mac address MAC ADDRESS description Parameters IP ADDRESS Enter the IP address of the ONVIF recognized NVR here MAC ADDRESS Optional Enter the MAC address of the NVR that is recognized with ONVIF TEXT Enter the description of the ONVIF recognized...

Page 201: ... surveillance VLAN The available value is from 0 to 7 Default The default value 5 Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline The surveillance packets arriving at the surveillance VLAN enabled port are marked to the COS specified by the command The remarking of COS allows the surveillance VLAN traffic to be distinguished from data traffic in quality of ser...

Page 202: ...d to display the surveillance VLAN configurations The show surveillance vlan command is used to display the surveillance VLAN global configurations The show surveillance vlan interface command is used to display the surveillance vlan configurations on the interfaces The show surveillance vlan device command is used to display the surveillance device discovered by its OUI Example This example shows...

Page 203: ...om a previous range No space is allowed before and after the comma Optional Specifies a range of interfaces No space is allowed before and after the hyphen brief Specifies to display brief ONVIF based IP camera information detail Specifies to display detailed ONVIF based IP camera information Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guidelin...

Page 204: ... 9W 15W PoE 802 3af PoE Status Enable Total Entries 1 Switch 35 12 show surveillance vlan onvif nvr interface This command is used to display ONVIF based NVR and group information show surveillance vlan onvif nvr interface INTERFACE ID ipc list Parameters INTERFACE ID Optional Specifies the port to be displayed Optional Specifies a series of interfaces or separate a range of interfaces from a prev...

Page 205: ...ed NVR information Switch show surveillance vlan onvif nvr interface Ethernet 1 0 1 Interface eth1 0 1 IP Address 111 111 111 111 MAC Address 00 01 02 03 04 08 IPC Number 2 Manufacturer D Link Group Group 1 Description D Link NVR Total Entries 1 Switch This example shows how to display ONVIF based NVR information associated with the group ID ipc list Switch show surveillance vlan onvif nvr interfa...

Page 206: ...mand Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline If the speed is set to 1000 then the duplex mode cannot be set to half duplex The half duplex only allow to be configured if speed is configured as 10 or 100 Example This example shows how to configure the interface eth1 0 3 to operate at a forced speed of 1000Mbits and specifies that the duplex mode should be se...

Page 207: ...t the other end of the link not just by the local device If the speed is set to the forced mode the final flow control setting will be determined by the configured flow control setting If the speed is set to the auto mode the final flow control setting will be based on the negotiated result between the local side setting and the partner side setting The configured flow control setting here is the ...

Page 208: ...e physical port interface s speed settings Use the no form of command to revert to the default setting speed 10 100 1000 auto no speed Parameters 10 Specifies to force the speed to 10 Mbps 100 Specifies to force the speed to 100 Mbps 1000 Specifies that for copper ports it forces the speed to 1000 Mbps and the user must manually set that the port operates as master or slave Specifies that for fibe...

Page 209: ...ode Command Default Level Level 15 Usage Guideline Use this command is to configure the physical port interface s speed settings Example This example shows how to configure eth1 0 3 to 1000 Mbps Switch configure terminal Switch config interface Ethernet 1 0 3 Switch config if speed 1000 Switch config if ...

Page 210: ...or the next reboot Use show boot command to display information of boot images Example This example shows how to specify that the Switch should use the image2 as the boot image file for the next startup Switch configure terminal Switch config boot image image2 37 2 copy This command is used to copy a file to another file copy SOURCE URL DESTINATION URL Parameters SOURCE URL Specifies the source UR...

Page 211: ...wnload or upload the configuration file or the image file Use this command to upload the system log to the TFTP server To upload the running configuration or save the running configuration to the startup configuration specify running config as the SOURCE URL To save the running configuration to the startup configuration specify startup config as the DESTINATION URL To apply a configuration file to...

Page 212: ... Level Level 15 Usage Guideline Use this command to clear the system s configuration retained in DRAM The configuration data will revert to the default settings Before using this command save a backup of the configuration using the copy command or upload the configuration profile to the TFTP server This command will clear the system s configuration settings including IP parameters Thus all the exi...

Page 213: ...ttings Before using this command save a backup of the configuration using the copy command or upload the configuration profile to the TFTP server Example This example shows how to reset the system to the factory default settings Switch reset system This command will clear all of system configuration as factory default setting including IP parameters Clear system configuration save reboot y n n y S...

Page 214: ...otup image R1 10 B014 dat Image1 R1 10 B014 dat Image2 Switch 37 6 show running config This command is used to display the commands in the running configuration file show running config Parameters None Default None Command Mode Privileged EXEC Mode Command Default Level Level 15 Usage Guideline This command displays the current running system configuration Example This example shows how to display...

Page 215: ...hport mode access mls qos cos 3 interface Ethernet 1 0 3 switchport mode access rate limit input 1300 mls qos scheduler sp speed 1000 flowcontrol on duplex full interface Ethernet 1 0 4 switchport mode access mls qos cos 3 interface Ethernet 1 0 5 switchport mode access interface Ethernet 1 0 6 switchport mode access interface Ethernet 1 0 7 switchport mode access interface Ethernet 1 0 8 switchpo...

Page 216: ...DIS 200G Series Gigabit Ethernet Switch CLI Reference Guide 212 interface Ethernet 1 0 12 switchport mode access interface vlan 1 ip address 10 10 1 19 255 255 248 0 end Switch ...

Page 217: ...isplays the configuration settings that the system will be initialized with Example This example shows how to display the content of the startup configuration file Switch show startup config ddp vlan 1 multicast filtering mode filter unregistered clock timezone 0 0 ip http secure server ip http timeout policy idle 60 snmp server enable traps storm control multicast level pps 8 cpu protect safeguar...

Page 218: ...his command deletes all the log messages in the system Example This example shows how to delete all the log messages in the system Switch clear logging Switch 38 2 logging buffered This command is used to enable logging of system messages Use the no form of this command to disable the logging of messages logging buffered Parameters none Default By default the logging buffered is enabled Command Mo...

Page 219: ...es the severity level of system messages The messages at that severity level or a more severe level will be logged to the log server This value must be between 3 and 6 0 is the most severe level If not specified the default severity level is informational 6 SEVERITY NAME Optional Specifies the severity level of system messages by one of the following names errors warnings notifications information...

Page 220: ... config 38 4 logging source interface This command is used to specify the interface whose IP address will be used as the source address for sending the SYSLOG packet Use the no form of this command to disabled sending the packet logging source interface INTERFACE ID no logging source interface Parameters source interface INTERFACE ID Specifies the interface whose IP address will be used as the sou...

Page 221: ...C Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline Use this command to display the system messages logged in the system Example This example shows how to display the messages in the system Switch show logging Total number of buffered messages 100 286 10 45 28 2017 06 23 INFO 6 Successful login through telnet Username admin IP 10 10 1 141 285 18 16 25 2017 06 22 INFO 6 P...

Page 222: ...this option is disabled Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to enable the SSH server function Example This example shows how to delete all the log messages in the system Switch configure terminal Switch config ip ssh server Switch config 39 2 show ip ssh This command is used to display the user SSH configuration settings show ip ss...

Page 223: ... so on YEAR Specifies the current year no abbreviation Default None Command Mode Privilege EXEC Mode Command Default Level Level 15 Usage Guideline Generally if the system is synchronized by a valid outside timing mechanism such as SNTP there is mp need to set the software clock Use this command if no other time sources are available The time specified in this command is assumed to be in the time ...

Page 224: ... end on the specified date of the specified month DATE Specifies the date of the month 1 to 31 MONTH Specifies the month 1 to 12 YEAR Specifies the start and end years for the summer time data HH MM Specifies the time 24 hours format in hours and minutes OFFSET Optional Specifies the number of minutes to add during summer time The default value is 60 The range of this offset is 30 60 90 and 120 De...

Page 225: ...onal Specifies the minutes difference from UTC Default By default this option is set to UTC Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline The time obtained by the SNTP server refers to the UTC time The local time will be calculated based on UTC time time zone and the daylight saving configuration Example This example shows how to set the time zone to the Pac...

Page 226: ...tem Clock Current Time 08 05 01 2017 03 16 Time Zone UTC 08 00 Daylight Saving Time Date Offset In Minutes 60 Date From 1 Jun 2017 02 00 To 31 Dec 2017 21 00 Switch 40 5 show sntp This command is used to display information about the SNTP server show sntp Parameters None Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline This command is used...

Page 227: ...tion Mode Command Default Level Level 15 Usage Guideline SNTP is a compact client only version of the NTP Unlike NTP SNTP can only receive the time from NTP servers it cannot be used to provide time services to other systems SNTP typically provides time within 100 milliseconds of the accurate time but it does not provide the complex filtering and statistical mechanisms of NTP Use the no form of th...

Page 228: ... Guideline This command is used to enable or disable the SNTP function Example This example shows how to enable the SNTP function Switch configure terminal Switch config sntp enable Switch config 40 8 sntp interval This command is used to set the interval for the SNTP client to synchronize its clock with the server sntp interval SECONDS no sntp interval Parameters SECONDS Specifies the synchroniza...

Page 229: ... day HH MM where the day of the week is spelled out monday tuesday wednesday thursday friday saturday and sunday If the ending day of the week is the same as the starting day of the week it can be omitted Default None Command Mode Time range Configuration Mode Command Default Level Level 15 Usage Guideline A new period can be partially overlapped with an older one If a new period s starting and en...

Page 230: ...DIS 200G Series Gigabit Ethernet Switch CLI Reference Guide 226 Switch config time range no periodic daily 9 00 to 12 00 Switch config time range ...

Page 231: ...displayed Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline If the name is not specified all configured time range profiles will be displayed Example This example shows how to display all the configured time ranges Switch show time range Time Range Profile rdtime Daily 09 00 to 12 00 Weekly Saturday 00 00 to Monday 00 00 Time Range Profile ...

Page 232: ...ers Default None Command Mode Global Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to enter the time range configuration mode before using the periodic command to specify a time period When a time range is created without any time interval periodic setting it implies that there is not any active period for the time range Example This example shows how to enter ...

Page 233: ...terfaces from a previous range No space before and after the comma Optional Specifies a range of interfaces No space before and after the hyphen Default None Command Mode EXEC Mode or Any Configuration Mode Command Default Level Level 1 Usage Guideline While entering this command without any other keywords the traffic segmentation configuration for all ports is displayed Otherwise only the specifi...

Page 234: ...ket forwarding to interfaces within the domain When the forwarding domain of a port is empty Layer 2 forwarding for packets received by the port is not restricted The traffic segmentation forward command can be entered multiple times The following interfaces will be appended into the forwarding domain Use the no form command will remove the specified interface from the traffic segmentation forward...

Page 235: ...y Specifies that only untagged frames are admitted admit all Specifies that all frames are admitted Default For the access VLAN mode the default option is untagged only For the other VLAN mode the default option is admit all Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline This command is used to set the acceptable types of frames by a port Example This exam...

Page 236: ...he VLAN classified for the received packet Example This example shows how to set ingress checking to enabled port eth1 0 2 Switch configure terminal Switch config interface Ethernet 1 0 2 Switch config if ingress checking Switch config if 43 3 show vlan This command is used to display the parameters for all configured VLANs or one VLAN on the Switch show vlan VLAN ID interface INTERFACE ID Paramet...

Page 237: ...ault Tagged Member Ports Untagged Member Ports 1 0 1 1 0 14 Total Entries 1 Switch This example shows how to display the PVID ingress checking and acceptable frame type information for ports eth1 0 1 1 0 4 Switch show vlan interface Ethernet 1 0 1 4 Ethernet1 0 1 VLAN mode Access Access VLAN 1 Ingress checking Disabled Acceptable frame type Admit All Ethernet1 0 2 VLAN mode Access Access VLAN 1 In...

Page 238: ...Command Default Level Level 15 Usage Guideline The command takes effect when the interface is set to access mode The VLAN specified as the access VLAN does not need to exist to configure the command Only one access VLAN can be specified The succeeding command overwrites the previous command Example This example shows how to configure the interface 1 0 1 to access mode with access VLAN 1000 Switch ...

Page 239: ...e Interface Configuration Mode Command Default Level Level 15 Usage Guideline By setting the hybrid VLAN command multiple times with different VLAN IDs a port can be a tagged member port or an untagged member port of multiple VLANs When the allowed VLAN is only specified as the VLAN ID the succeeding command will overwrites the previous command If the new untagged allowed VLAN list is overlap with...

Page 240: ...brid allowed vlan command to add the native VLAN into its allowed VLAN The specified VLAN does not need to exist to apply the command The command takes effect when the interface is set to hybrid mode Example This example shows how to configure interface eth1 0 1 to become a hybrid interface and configure the PVID to 20 Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config ...

Page 241: ...setting associated with previous mode will be lost Example This example shows how to set the interface eth1 0 1 as a trunk port Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if switchport mode trunk Switch config if 43 8 switchport trunk allowed vlan This command is used to configure the VLANs that are allowed to receive and send traffic on the specified interface ...

Page 242: ...tomatically added to all the VLAN created by the system Example This example shows how to configure interface eth1 0 1 as a tagged member of VLAN 1000 Switch configure terminal Switch config interface Ethernet 1 0 1 Switch config if switchport mode trunk Switch config if switchport trunk allowed vlan add 1000 Switch config if 43 9 switchport trunk native vlan This command is used to specify the na...

Page 243: ...nk Switch config if switchport trunk native vlan 20 Switch config if 43 10 vlan This command is used to add VLANs and enter the VLAN configuration mode Use the no form of this command to remove VLANs vlan VLAN ID no vlan VLAN ID Parameters VLAN ID Specifies the ID of the VLAN to be added removed or configured The valid VLAN ID range is from 1 to 4094 VLAN ID 1 cannot be removed Specifies a series ...

Page 244: ...this command to reset the VLAN name to the default VLAN name name VLAN NAME no name Parameters VLAN NAME Specifies the VLAN name with a maximum of 32 characters The VLAN name must be unique within the administrative domain Default The default VLAN name is VLANx where x represents four numeric digits including the leading zeros that are equal to the VLAN ID Command Mode VLAN Configuration Mode Comm...

Page 245: ...mode need to be enabled for a port to start the voice VLAN function When the voice VLAN is enabled for a port the received voice packets will be forwarded in the voice VLAN The received packets are determined as voice packets if the source MAC addresses of packets comply with the organizationally unique identifier OUI addresses configured by the voice vlan mac address command The VLAN to be specif...

Page 246: ...If voice traffic resumes during the aging time the aging timer will be cancelled Example This example shows how to configure the aging time of the voice VLAN to 30 minutes Switch configure terminal Switch config voice vlan aging 30 Switch config 44 3 voice vlan enable This command is used to enable the voice VLAN state of ports Use the no form of this command to disable the voice VLAN s port state...

Page 247: ...he user defined voice device OUI voice vlan mac address MAC ADDRESS MASK description TEXT no voice vlan mac address MAC ADDRESS MASK Parameters MAC ADDRES Specifies the OUI MAC address MASK Specifies the OUI MAC address matching bitmask description TEXT Optional Specifies the description for the user defined OUI with a maximum of 32 characters Default The default OUI is listed in the following tab...

Page 248: ...e VLAN membership will be manually configured auto Specifies that voice VLAN membership will be automatically learned tag Specifies to learn voice VLAN tagged members untag Specifies to learn voice VLAN untagged members Default By default this option is set to untag and auto Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline Use this command to configure autom...

Page 249: ...itch config if voice vlan mode auto tag Switch config if 44 6 voice vlan qos This command is used to configure the CoS priority for the incoming voice VLAN traffic Use the no form of this command to revert to the default setting voice vlan qos COS VALUE no voice vlan qos Parameters COS VALUE Specifies the priority of the voice VLAN This value must be between 0 and 7 Default By default this value i...

Page 250: ...Time 30 minutes Member Ports eth1 0 1 1 0 5 Dynamic Member Ports eth1 0 1 1 0 3 Voice VLAN OUI OUI Address Mask Description 00 01 E3 00 00 00 FF FF FF 00 00 00 Siemens 00 03 6B 00 00 00 FF FF FF 00 00 00 Cisco 00 09 6E 00 00 00 FF FF FF 00 00 00 Avaya interface Optional Specifies to display voice VLAN information of ports INTERFACE ID Optional Specifies the interface to display Optional Specifies ...

Page 251: ...nual Switch This example shows how to display the learned voice devices on ports eth1 0 1 1 0 2 Switch show voice vlan device interface eth1 0 1 2 Interface Device Address Start Time Status eth1 0 1 00 03 6B 00 00 01 2012 03 19 09 00 Active eth1 0 1 00 03 6B 00 00 02 2012 03 20 10 09 Aging eth1 0 1 00 03 6B 00 00 05 2012 03 20 12 04 Active eth1 0 2 00 03 6B 00 00 0a 2012 03 19 08 11 Aging eth1 0 2...

Page 252: ...h CLI Reference Guide 248 Index 2 Interface eth1 0 2 Chassis ID Subtype MAC Address Chassis ID 00 E0 BB 00 00 12 Port ID Subtype Network Address Port ID 172 18 1 2 Create Time 2012 03 20 11 00 Remain Time 105 Seconds Total Entries 2 Switch ...

Page 253: ...h enable no web auth enable Parameters None Default By default this option is disabled Command Mode Interface Configuration Mode Command Default Level Level 15 Usage Guideline This command allows hosts connected to the port to do authentication via the Web browser Example This example shows how to enable the Web authentication function on interface eth1 0 1 Switch configure terminal Switch config ...

Page 254: ...m number can be up to 32 characters logout window title STRING Specifies the title of the Web authentication logout window The maximum number can be up to 64 characters copyright line LINE NUMBER title STRING Specifies the copyright information by lines in Web authentication pages The total copyright information can be up to 5 lines and 128 characters for each line Default By default the page titl...

Page 255: ...this command to remove the specification web auth success redirect path STRING no web auth success redirect path Parameters STRING Specifies the default URL the client Web browser will be redirected to after successful authentication If no default redirect URL is specified the Web authentication logout page will be displayed The default redirect path can be up to 128 characters Default By default ...

Page 256: ...e Switch itself can be the authentication server and do the authentication via RADIUS protocol with remote RADIUS server The authentication process uses either the HTTP or HTTPS protocol Example This example shows how to enable the Web authentication function globally on the Switch Switch configure terminal Switch config web auth system auth control Switch config 45 5 web auth virtual ip This comm...

Page 257: ...tart a Web authentication Example This example shows how to configure the Web authentication virtual IPv4 to be 1 1 1 1 and virtual IPV6 to be 2018 1 Switch configure terminal Switch config web auth virtual ip ipv4 1 1 1 1 Switch config web auth virtual ip ipv6 2018 1 Switch config 45 6 snmp server enable traps web auth This command is used to enable sending SNMP notifications for Web Authenticati...

Page 258: ...Informational Event description When an IPC is added in the surveillance VLAN the log message will be sent Log Message ASV Add IPC IP ipaddr MAC mac address Parameters description ipaddr Represent the IP address of the IPC mac address Represent the MAC address of the IPC Informational Event description When an IPC is removed from the surveillance VLAN the log message will be sent Log Message ASV R...

Page 259: ... threshold Warning Event description when the any of SFP parameters exceeds from the alarm threshold Log Message Optical transceiver interface id component high low alarm threshold exceeded Parameters description interface id port interface ID component DDM threshold type It can be one of the following types temperature supply voltage bias current TX power RX power high low High or low threshold W...

Page 260: ...detected Errors Login Logout CLI Log Description Severity Event description Login through console successfully Log Message Successful login through Console Username username Parameters description username Represent current login user Informational vent description Login through console unsuccessfully Log Message Login failed through Console Username username Parameters description username Repres...

Page 261: ... Event description Total power usage threshold is exceeded Log Message Unit unit id usage threshold percentage is exceeded Parameters description unit id box id percentage usage threshold Warning Event description Total power usage threshold is recovered Log Message Unit unit id usage threshold percentage is recovered Parameters description unit id box id percentage usage threshold Warning Event d...

Page 262: ...escription ipaddr The IP address of telnet client username the user name that used to login telnet server Informational Event description Login failed through Telnet Log Message Login failed through Telnet Username username IP ipaddr Parameters description ipaddr The IP address of telnet client username the user name that used to login telnet server Warning Event description Logout through Telnet ...

Page 263: ...ent description Login failed through Web Log Message Login failed through Web Username username IP ipaddr Parameters description username The use name that used to login HTTP server ipaddr The IP address of HTTP client Warning Event description Web session timed out Log Message Web session timed out Username usrname IP ipaddr Parameters description username The use name that used to login HTTP ser...

Page 264: ... Web Authentication host login fail Username string IP ipaddr ipv6address MAC mac address interface id VID vlan id Parameters description Username The host username IP The host IP address mac address The host MAC addresses interface id The interface on which the host is authenticated vlan id The VLAN ID on which the host exists Error ...

Page 265: ...rm situation to normal status Only when the current value low warning or current value high warning will send recover trap Binding objects 1 dDdmNotifyInfoIfIndex 2 dDdmNotifyInfoComponent 3 dDdmNotifyInfoAbnormalLevel 4 dDdmNotifyInfoThresholdExceedOrRecover 1 3 6 1 4 1 171 11 155 1000 72 0 1 dDdmWarningTrap A notification is generated when an abnormal warning situation occurs or recovers from an...

Page 266: ... its configured ports transitions from the Learning state to the Forwarding state or from the Forwarding state to the Blocking state The trap is not sent if a newRoot trap is sent for the same transition Implementation of this trap is optional 1 3 6 1 2 1 17 0 2 PoE Trap Name Description OID pethMainPowerUsageOn Notification This trap indicates PSE Threshold usage indication is on the usage power ...

Page 267: ...t Trap Name Description OID coldStart A coldStart trap signifies that the SNMPv2 entity acting in an agent role is reinitializing itself and that its configuration may have been altered 1 3 6 1 6 3 1 1 5 1 warmStart A warmStart trap signifies that the SNMPv2 entity acting in an agent role is reinitializing itself such that its configuration is unaltered 1 3 6 1 6 3 1 1 5 2 Web Authentication Trap ...

Page 268: ...DIS 200G Series Gigabit Ethernet Switch CLI Reference Guide 264 2 isnaSessionAuthVlan 3 isnaSessionClientMacAddress 4 isnaSessionClientAddrType 5 isnaSessionClientAddress 6 isnaSessionAuthUserName ...

Page 269: ...ch RADIUS attributes are supported by the IETF standard and Vendor Specific Attribute VSA VSA allows the vendor to create an additionally owned RADIUS attribute IETF standard RADIUS attributes are defined in the RFC 2865 Remote Authentication Dial In User Service RADIUS RFC 2866 RADIUS Accounting RFC 2868 RADIUS Attributes for Tunnel Protocol Support and RFC 2869 RADIUS Extensions The following ta...

Reviews:

No comments

Related manuals for Dis-200G Series

Magnetrol T20 Series Instruction Manual And Replacement Parts List preview
T20 Series
Brand: Magnetrol Pages: 12
Magnetrol T20 Series Installation And Operating Manual preview
T20 Series
Brand: Magnetrol Pages: 24
NEC 2400 Integration Manual preview
2400
Brand: NEC Pages: 168
A SYSTEMS AV50 User Manual preview
AV50
Brand: A SYSTEMS Pages: 16
Patton electronics 6511RC User Manual preview
6511RC
Brand: Patton electronics Pages: 104
IDEM SAFETY SWITCHES KLM-P2L Operating Instructions preview
KLM-P2L
Brand: IDEM SAFETY SWITCHES Pages: 2
Indu-Sol PROmesh P10 Quick Start User Manual preview
PROmesh P10
Brand: Indu-Sol Pages: 9
EtherWAN EX62000 Installation Manual preview
EX62000
Brand: EtherWAN Pages: 2
Inscape Data Link Power LPS2400-T1 User Manual preview
Link Power LPS2400-T1
Brand: Inscape Data Pages: 8
H3C S6520X-30QC-EI Manual preview
S6520X-30QC-EI
Brand: H3C Pages: 57
ALFAtron ALF-WP70T/RS User Manual preview
ALF-WP70T/RS
Brand: ALFAtron Pages: 15
AETEK C11-082-32-120 Quick Installation Manual preview
C11-082-32-120
Brand: AETEK Pages: 2
SignaMax 065-7331GPOEP User Manual preview
065-7331GPOEP
Brand: SignaMax Pages: 6
Videosec PS04PGE+1PD User Manual preview
PS04PGE+1PD
Brand: Videosec Pages: 5
Sunix ESW-5162GP User Manual preview
ESW-5162GP
Brand: Sunix Pages: 55
hager EG170 User Instruction preview
EG170
Brand: hager Pages: 2
Stahl 8070/2 Series Manual preview
8070/2 Series
Brand: Stahl Pages: 58
Festo SMT-8-...-B Series Manual preview
SMT-8-...-B Series
Brand: Festo Pages: 2

Brands by name

Popular brands

Load more brands