Siemens SCALANCE XB-200 Configuration Manual Download

Page: 528 / 618

Further notes

You also still need to enable MAC authentication for every port intended to use this function.

You do this with the

dot1x mac-auth

command in the Interface configuration mode.

You disable the function with the

no dot1x mac-auth

command.

You display this setting and other information with the

show dot1x

command.

11.5.2.4

no dot1x mac-auth

Description

With this command, you disable MAC authentication for the device.

Requirement

You are in the Global configuration mode.
The command prompt is as follows:

cli(config)#

Syntax

Call the command without parameters:

no dot1x mac-auth

Result

MAC authentication is disabled for the device.

Further notes

You enable the function with the

dot1x mac-auth

command.

You display this setting and other information with the

show dot1x

command.

11.5.3

Commands in the interface configuration mode

This section describes commands that you can call up in the interface configuration mode.

Depending on the Interface selected, various command sets are available.
In the Global configuration mode, enter the

interface

command to change to this mode.

Security and authentication
11.5 Port Based Network Access Control

SCALANCE XB-200/XC-200/XF-200BA/XP-200/XR-300WG Command Line Interface

528

Configuration Manual, 07/2017, C79000-G8976-C361-06

Summary of Contents for SCALANCE XB-200

Page 1: ...face Configuration Manual 07 2017 C79000 G8976 C361 06 Introduction 1 General information 2 Configuration 3 Functions specific to SCALANCE 4 System time 5 Network structures 6 Network protocols 7 Layer 2 management protocols 8 Layer 3 functions 9 Load control 10 Security and authentication 11 Diagnostics 12 ...

Page 2: ... those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the following WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation If products and components from other manufacturers are used th...

Page 3: ...4 2 The command 41 2 9 4 3 Completion of command entries 42 2 9 4 4 Abbreviated notation of commands 42 2 9 4 5 Reusing the last used commands 43 2 9 4 6 Working through a command sequence 43 2 9 4 7 The show commands 44 2 9 4 8 clear history 44 3 Configuration 47 3 1 System 48 3 1 1 The show commands 48 3 1 1 1 show cli console timeout 48 3 1 1 2 show coordinates 48 3 1 1 3 show device informatio...

Page 4: ...tion 73 3 1 9 12 system name 73 3 1 9 13 username 74 3 1 10 Commands in the interface configuration mode 75 3 1 10 1 alias 76 3 1 10 2 no alias 76 3 1 10 3 broadcast block 77 3 1 10 4 no broadcast block 78 3 1 10 5 duplex 78 3 1 10 6 no duplex 79 3 1 10 7 lldp 80 3 1 10 8 no lldp 81 3 1 10 9 media type 82 3 1 10 10 multicast block 83 3 1 10 11 no multicast block 84 3 1 10 12 negotiation 84 3 1 10 ...

Page 5: ...ation mode 111 3 5 2 1 poe pse usage 112 3 5 2 2 no poe pse usage 112 3 5 3 Commands in the Interface Configuration mode 113 3 5 3 1 poe active 113 3 5 3 2 no poe active 114 3 5 3 3 poe custom maxpwr 114 3 5 3 4 no poe custom maxpwr 115 3 5 3 5 poe custom maxpwr active 116 3 5 3 6 no poe custom maxpwr active 116 3 5 3 7 poe type 117 3 5 3 8 no poe type 118 3 5 3 9 poe prio 118 3 5 3 10 no poe prio...

Page 6: ...l hsr manager 137 4 3 1 6 no panel button control hsr manager 137 4 4 Signaling contact 139 4 4 1 The show commands 139 4 4 1 1 show signaling contact 139 4 4 2 Commands in the global configuration mode 139 4 4 2 1 signaling contact mode 140 4 4 2 2 signaling contact status 140 5 System time 143 5 1 System time setting 143 5 1 1 The show commands 143 5 1 1 1 show dst info 143 5 1 1 2 show time 143...

Page 7: ...vlan port config 169 6 1 1 11 show vlan private vlan 170 6 1 2 Commands in the global configuration mode VLAN bridge 171 6 1 2 1 base bridge mode 171 6 1 2 2 interface range 173 6 1 2 3 no interface range 174 6 1 2 4 mgmt vlan 175 6 1 2 5 vlan 176 6 1 2 6 no vlan 176 6 1 2 7 vlan range 177 6 1 3 Commands in the Interface configuration mode VLAN Bridge 178 6 1 3 1 private vlan mapping 178 6 1 3 2 n...

Page 8: ... 1 ip address 210 6 1 7 2 no ip address 211 6 2 Link aggregation 213 6 2 1 The show commands 213 6 2 1 1 show etherchannel 213 6 2 1 2 show interfaces etherchannel 214 6 2 1 3 show lacp 214 6 2 2 Commands in the interface configuration mode 215 6 2 2 1 channel group 215 6 2 2 2 no channel group 216 6 3 Spanning Tree 218 6 3 1 The show commands 218 6 3 1 1 show spanning tree 218 6 3 1 2 show spanni...

Page 9: ...6 3 5 9 no spanning tree layer2 gateway port 249 6 3 5 10 spanning tree loop guard 249 6 3 5 11 no spanning tree loop guard 250 6 3 5 12 spanning tree mst 251 6 3 5 13 no spanning tree mst 252 6 3 5 14 spanning tree mst hello time 253 6 3 5 15 no spanning tree mst hello time 254 6 3 5 16 spanning tree mst PseudoRootId 255 6 3 5 17 no spanning tree mst PseudoRootId 256 6 3 5 18 spanning tree restri...

Page 10: ...tion mode 283 7 2 2 1 ip dhcp config file request 283 7 2 2 2 no ip dhcp config file request 284 7 2 2 3 ip dhcp client mode 284 7 2 3 Commands in the Interface configuration mode 285 7 2 3 1 ip address dhcp 285 7 2 3 2 no ip address 286 7 3 DHCP server 288 7 3 1 The show commands 288 7 3 1 1 show ip dhcp server bindings 288 7 3 1 2 show ip dhcp server pools 289 7 3 2 Commands in the global config...

Page 11: ...11 no service dhcp relay 317 7 4 3 Commands in the Interface Configuration mode 318 7 4 3 1 ip dhcp relay circuit id 318 7 4 3 2 no ip dhcp relay circuit id 319 7 4 3 3 ip dhcp relay remote id 319 7 4 3 4 no ip dhcp relay remote id 320 7 5 SNMP 322 7 5 1 The show commands 323 7 5 1 1 show snmp 323 7 5 1 2 show snmp community 323 7 5 1 3 show snmp engineID 324 7 5 1 4 show snmp filter 324 7 5 1 5 s...

Page 12: ... server 353 7 6 2 2 no smtp server 353 7 6 2 3 sender mail address 354 7 6 2 4 no sender mail address 355 7 6 2 5 send test mail 355 7 6 2 6 smtp port 356 7 6 2 7 no smtp port 357 7 7 HTTP server 358 7 7 1 The show commands 358 7 7 1 1 show ip http server status 358 7 7 2 Commands in the global configuration mode 358 7 7 2 1 ip http 359 7 7 2 2 no ip http 359 7 8 HTTPS server 361 7 8 1 The show co...

Page 13: ...mp snooping switch ip 382 8 2 2 6 ip igmp snooping port purge interval 383 8 2 2 7 no ip igmp snooping port purge interval 384 8 2 3 Commands in the VLAN configuration mode 384 8 2 3 1 ip igmp snooping static group 385 8 2 3 2 no ip igmp snooping static group 386 8 3 IGMP querier 387 8 3 1 Commands in the Global Configuration mode 387 8 3 1 1 ip igmp snooping querier 387 8 3 1 2 no ip igmp snoopin...

Page 14: ...1d mac address table static unicast 416 8 5 3 3 show unicast block config 417 8 5 4 Commands in the global configuration mode Transparent Bridge 417 8 5 4 1 mac address table static unicast 418 8 5 4 2 no mac address table static unicast 419 8 6 Multicast 420 8 6 1 The show commands VLAN bridge 420 8 6 1 1 show mac address table 420 8 6 1 2 show mac address table dynamic multicast 421 8 6 1 3 show...

Page 15: ...ntrol 453 10 1 Rate control 454 10 1 1 The show commands 454 10 1 1 1 show rate limit output 454 10 1 2 Commands in the interface configuration mode 455 10 1 2 1 rate limit output 455 10 1 2 2 no rate limit output 456 10 1 2 3 storm control 456 10 1 2 4 no storm control 457 10 1 2 5 storm control level 458 10 1 2 6 no storm control level 459 10 2 Static MAC filtering 461 10 2 1 Commands in the glo...

Page 16: ...0 5 1 5 show qos dscp map 481 10 5 1 6 show qos scheduling mode 482 10 5 1 7 show qos trust mode 482 10 5 2 Commands in the Global configuration mode 483 10 5 2 1 qos 483 10 5 3 Commands in the QOS configuration mode 484 10 5 3 1 agent priority 485 10 5 3 2 no agent priority 485 10 5 3 3 broadcast priority 486 10 5 3 4 no broadcast priority 487 10 5 3 5 cos map 487 10 5 3 6 cos remap 489 10 5 3 7 ...

Page 17: ... clear all static unicast 519 11 4 2 2 auto learn 519 11 4 3 Commands in the interface configuration mode 520 11 4 3 1 switchport lock 520 11 4 3 2 no switchport lock 521 11 4 4 Commands in the AUTOLEARN mode 522 11 4 4 1 start 522 11 4 4 2 stop 523 11 5 Port Based Network Access Control 524 11 5 1 The show commands 524 11 5 1 1 show dot1x 524 11 5 1 2 show dot1x guest vlan mac info 525 11 5 1 3 s...

Page 18: ... 9 show interface transceiver details 548 12 1 3 10 show power line state 549 12 1 4 clear logbook 549 12 1 5 clear fault counter 550 12 1 6 fault report ack 550 12 1 7 Commands in the global configuration mode 551 12 1 7 1 events 551 12 1 7 2 cabletest interface 552 12 1 8 Commands in the Events configuration mode 553 12 1 8 1 add log 553 12 1 8 2 client config 554 12 1 8 3 no client config 555 1...

Page 19: ... 1 2 show monitor barrier 588 12 5 1 3 show monitor session 588 12 5 2 Commands in the global configuration mode 589 12 5 2 1 monitor 589 12 5 2 2 no monitor 590 12 5 2 3 monitor barrier enabled 591 12 5 2 4 no monitor barrier enabled 592 12 5 2 5 monitor session destination 592 12 5 2 6 no monitor session destination 593 12 5 2 7 monitor session source 594 12 5 2 8 no monitor session source 595 1...

Page 20: ...reaction local 607 12 6 3 6 no loopd reaction local 607 12 6 3 7 loopd reaction remote 608 12 6 3 8 no loopd reaction remote 609 Index 611 Table of contents SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 20 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 21: ...tware versions SCALANCE XB 200 firmware as of version 3 0 SCALANCE XC 200 firmware as of version 3 0 SCALANCE XF 200BA firmware as of version 3 1 SCALANCE XP 200 firmware as of version 3 0 SCALANCE XR 300WG firmware as of version 3 0 Factory settings PROFINET variants Industrial Ethernet protocol PROFINET Base Bridge mode 802 1D transparent bridge Redundancy mechanism Ring redundancy Trust mode Tr...

Page 22: ...ocuments contain information on installing connecting up and approvals for the products You will find the documentation here On the data medium that ships with some products Product CD product DVD SIMATIC NET Manual Collection On the Internet pages of Siemens Industry Online Support at SCALANCE XB 200 https support industry siemens com cs ww en ps 15291 man SCALANCE XC 200 https support industry s...

Page 23: ...ion can be found in the SIMATIC NET glossary You will find the SIMATIC NET glossary here SIMATIC NET Manual Collection or product DVD The DVD ships with certain SIMATIC NET products On the Internet under the following entry ID 50305045 http support automation siemens com WW view en 50305045 Security information Siemens provides products and solutions with industrial security functions that support...

Page 24: ...ibe to the Siemens Industrial Security RSS Feed under https support industry siemens com cs ww en ps 15247 pm https support industry siemens com cs ww ene ps 15247 pm License conditions Note Open source software Read the license conditions for open source software carefully before using the product You can download the license conditions in the WBM on the System Load Save Copyright page Trademarks...

Page 25: ...NCE XB 200 SCALANCE XR 300WG SCALANCE XC 200 SCALANCE XP 200 SCALANCE XF 200BA Informa tion ARP table Log table Ethernet Statistics Diagnostics tempera ture System SMTP client DHCP client DHCP server restricted restricted SNMP Manual time setting DST SNTP NTP SIMATIC Time Client NFC Auto logout Syslog Client Fault monitoring PROFINET EtherNet IP not with DNA devices Power over Ethernet PoE identi ...

Page 26: ...ith RSTP Standby HRP not with DNA devices Observer HRP Link Check not with DNA devices Spanning Tree RSTP MSTP Enhanced Passive Lis tening Compatibility Loop detection Link aggregation not with DNA devices DCP forwarding LLDP Unicast filter Locked ports Unicast learning Unicast blocking Multicast groups IGMP GMRP Multicast blocking Broadcast blocking RMON RMON history General information 2 1 Syste...

Page 27: ...to make technical changes SCALANCE XB 200 SCALANCE XR 300WG SCALANCE XC 200 SCALANCE XP 200 SCALANCE XF 200BA C PLUG support SELECT SET button 1 2 3 2 3 RESET button 1 1 1 SET button 1 2 3 Signaling contact Serial interface Display modes Pluggable transceiver slots Combo ports Bus adapter slots Function of the buttons 1 Restore Factory Defaults 2 Switch over the redundancy manager 3 Set fault mask...

Page 28: ...HCP pool 24 SNMPv1 trap recipient 10 SNTP server 1 NTP server 1 Agent TIA interfaces 2 1 Layer 2 Virtual LANs port based including VLAN 1 17 257 3 Private VLAN 1 Primary PVLANs 1 Secondary isolated PVLANs 24 Secondary community PVLANs 256 Mirroring sessions 1 Standby ports 1 Multiple Spanning Tree instances 4 Link aggregations or Etherchannels each with a maximum of 8 ports per aggregation 8 4 Por...

Page 29: ...1 With the SCALANCE XB 200 and SCALANCE XR 300WG the number of DHCP pools and manageable IPv4 addresses depends on the number of ports The number of ports corresponds to the maximum number of DHCP pools and manageable IPv4 addresses 2 This is an IP interface 3 Devices with Y functionality do not support VLANs 4 If the maximum number of MAC authentications per device is exceeded all MAC authenticat...

Page 30: ...DN IPv6 Layer 3 features Loopback PIM UMAC Even if these features are are listed as parameters in the documentation and are displayed by the help functions help and you cannot execute them with a SCALANCE XB 200 SCALANCE XC 200 SCALANCE XF 200BA SCALANCE XP 200 and SCALANCE XR 300WG General information 2 3 Features not supported SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interfac...

Page 31: ...ype in the command telnet followed by the IP address of the device you are configuring C telnet IP address 2 Enter your login and password As an alternative you can also enter the command telnet followed by the IP address of the device you are configuring in the Start Run menu Note Requirement for use of the CLI You should only use the command line interface if you are an experienced user Even com...

Page 32: ... overview of the available modes AUTOLEARN LOADSAVE Redundancy User EXEC Mode Privileged EXEC Mode Global Configuration Mode Interface Configuration NTP SNTP VLAN QOS Events User EXEC mode This mode is active after you log in with the role user in a console window In this mode you can use show commands to display the current values of configuration parameters It is not possible to modify parameter...

Page 33: ...rompt prompt appears 2 The disable command brings you back one level from the Privileged EXEC mode to the User EXEC mode The disable command is not available in the User EXEC mode Global configuration mode In this mode you can make basic configuration settings In addition to this you can also call up modes for the configuration of special interfaces or functions for example to configure a VLAN You...

Page 34: ...ifier when the Trial mode is enabled If you first test changes to the configuration and then want to discard them disable the Auto save function with the no auto save command You are then in Trial mode Changes to the configuration that you have not saved are indicated by an asterisk in front of the command prompt CLI You save the changes to the configuration with the command write startup config W...

Page 35: ... a b Instead of the expression in parentheses enter a value from the range a to b variable 1 variable 2 The parameter pair is optional If you use the parameter assignment you need to en ter a permitted value to replace both expressions in parenthesis keyword variable a b The parameter assignment is optional If you use the keyword you need to enter a value from the range a to b to replace the expre...

Page 36: ...n the second port of module 0 with the following command interface fa 0 2 Addressing logical interfaces The following notation applies to all commands that address a logical interface Enter the command interface Enter the keyword for the logical interface port channel abbreviation po vlan After a space enter the number of the interface you assigned when you created it port channel id 1 8 vlan id 1...

Page 37: ... risk To add an interface to an Etherchannel use the channel group command Identification of the interfaces in the command prompt of the Interface configuration mode To configure the interface use the command interface in the global configuration mode Since you configure precisely one of the existing interfaces in the Interface configuration mode the command prompt shows not only the mode but also...

Page 38: ...rk masks In contrast to the notation described above network masks can also be represented as a number of 1 bits The mask of the decimal representation 255 255 0 0 is then written as 16 The syntax is then for example ipaddress 16 Note that there must be a space before and after the MAC addresses In the syntax of the Command Line Interface a MAC address is represented as a sequence of 6 bytes in he...

Page 39: ... command prompt is displayed 2 9 2 end Description With this command you exit the configuration mode and are then in the Privileged EXEC mode Requirement You are in a configuration mode Syntax Call the command without parameters end Result You are in the Privileged EXEC mode The command prompt is as follows cli General information 2 9 General CLI commands SCALANCE XB 200 XC 200 XF 200BA XP 200 XR ...

Page 40: ...ey Automatic completion of incomplete commands Paging in the list of most recently used commands Display of the list of most recently used commands show history 2 9 4 1 help Description With this command you display the help entry for a command or the command list Syntax Call up help with the following parameters help command Here you replace command with the command for which you require help If ...

Page 41: ...ou call up the command list Syntax Enter a question mark to obtain a list of all permitted commands in the current mode For this command you do not need to press the enter key The command executes immediately after you type the character Result The mode specific as well as the global commands are displayed Note Incomplete command names If you have specified an incomplete command when calling the h...

Page 42: ... the tab key Result The command interpreter completes the input as long as the command is unambiguous If you enter a character string that cannot be completed to form a command an error message is displayed The command is not unique Ambiguous Command The command is unknown Invalid Command The command is incomplete Incomplete command If the entry is not yet complete enter further characters With yo...

Page 43: ...through the list of the commands most recently used using the arrow up and arrow down keys If the command you are looking for is displayed you can edit the command line as required and execute the command with the enter key Further notes You display the list of commands last used with the show history command This function is available in every mode 2 9 4 6 Working through a command sequence Separ...

Page 44: ...mand to be entered The list depends on the mode In the Global configuration mode the last 14 commands entered in this mode are displayed These commands are not included in the list of the Interface configuration mode Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show history Result The...

Page 45: ...s clear history Result The last commands to be input are deleted Further notes You display a list of the last 14 commands entered with the show history command General information 2 9 General CLI commands SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 45 ...

Page 46: ...General information 2 9 General CLI commands SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 46 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 47: ...gs Saving and loading configurations and firmware Restart of the device and restoring the factory defaults Saving and restoring configuration backups SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 47 ...

Page 48: ...e User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show cli console timeout Result The configuration for the timeout is displayed 3 1 1 2 show coordinates Description This command shows the system coordinates Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows c...

Page 49: ...w environmental temperature Description This command shows the temperature values of internal and external modules of the device The modules are only shown if they make temperature information available If the temperature value falls below or exceeds the displayed threshold values the status changes accordingly With the event config command you can configure that you are informed of the status cha...

Page 50: ...i or cli Syntax Call the command without parameters show ethernetip Result The current EtherNet IP configuration is displayed 3 1 1 6 show hardware Description This command shows the type and number as well as the position of the installed interface cards of the system Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows Configuration 3 1 System...

Page 51: ...y one row 3 1 1 7 show im Description This command shows information on device specific vendor and maintenance data such as the article number serial number version numbers etc Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show im Result The information is displayed Configuration 3 1 S...

Page 52: ... Module no and port no of the interface description Shows the description of the interface stormcontrol Shows the storm control settings flowcontrol Shows the flow control settings status Shows the status of the interface vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 port channel Keyword for a port channel connection port channel id Number of the addressed port cha...

Page 53: ...arameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameter from...

Page 54: ...an Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface loopback Loopback For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameter from the parameter list the co...

Page 55: ... is displayed 3 1 1 12 show lldp neighbors Description This command shows the current content of the neighborhood table Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show lldp neighbors Result The neighborhood table is displayed Configuration 3 1 System SCALANCE XB 200 XC 200...

Page 56: ... interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on identifiers of interfaces and addresses refer to the section Addresses and interface names Page 36 Result The information is displayed 3 1 1 14 show broadcast block config Description This command shows the broadcast blocking settings for ports Requirement Y...

Page 57: ...command shows the unicast blocking settings for ports Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show unicast block config port interface type interface id The parameters have the following meaning Parameter Description Range of values note port Keyword for a port desc...

Page 58: ... a port description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If no parameters are specified the settings for all ports are displayed Result The multicast blocking settings for ports are displayed 3 1 1 17 sh...

Page 59: ...ar counters interface type interface id The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Specify a valid interface interface id Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 If no parameters are specified th...

Page 60: ... following parameters clear line vty line number 2 9 all forceful clear The parameters have the following meaning Parameter Description Range of values note line number Number of the connection that will be terminated 2 9 all terminates all connections forceful clear closes a session that is not reacting Result The console session is closed Further notes You show the logged on users with the show ...

Page 61: ...r notes You exit the Global configuration mode with the end command 3 1 5 disable With the commands enable and disable you temporarily change the function rights of the logged in user the login data remains unchanged Description With this command you close the Privileged EXEC mode You are then in the User EXEC mode Requirement You are in the Privileged EXEC mode The command prompt is as follows cl...

Page 62: ...this command you change to the Privileged EXEC mode Requirement You are in the User EXEC mode The command prompt is as follows cli Syntax Call the command without parameters enable Result You are prompted to enter the administrator password After logging in successfully you are in the Privileged EXEC mode The command prompt is as follows cli Configuration 3 1 System SCALANCE XB 200 XC 200 XF 200BA...

Page 63: ...displayed 3 1 8 ping Description With this command you request a response from a device in the network This allows you to check whether or not another node is reachable Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters ping destination address size byte 0 2080 count packet_co...

Page 64: ...eter list the default values are used At system start or when using the restart command with the option memoryor factory the following defaults apply Parameter Default value size 32 count 3 timeout 1 Result The messages relating to the response of the called node are displayed 3 1 9 Commands in the global configuration mode This section describes commands that you can call up in the Global configu...

Page 65: ...ter Description Values vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 port channel Keyword for a port channel connection port channel id Number of the addressed port channel 1 8 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the se...

Page 66: ...rface command You display the status and the configuration of the interfaces with the show interfaces command See also Features not supported Page 30 3 1 9 2 no interface Description With this command you delete a logical interface Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no interface v...

Page 67: ... setting for the CLI Note No automatic logout from the CLI If the connection is not terminated after the set time check the setting of the keepalive function on the Telnet client If the set interval is shorter than the configured time the lower value applies You have set for example 300 seconds for the automatic logout and 120 seconds for the keepalive function In this case a packet is sent every ...

Page 68: ... 1 9 4 no cli console timeout Description With this command you disable the automatic logout Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no cli console timeout Result Automatic logout is disabled Further notes You enable automatic logout with the cli console timeout command You display the current timeo...

Page 69: ...or the height coordinate max 32 characters To use spaces in the entry enter the height coordinate in quotes coordinates height 123 456 Result The height coordinate is created 3 1 9 6 coordinates latitude Description With this command you enter a latitude coordinate Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the f...

Page 70: ...ment You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters coordinates longitude longitude The parameter has the following meaning Parameter Description Range of values note longitude Input box for the longitude coordinate max 32 characters To use spaces in the entry enter the longitude coordinate in quotes coo...

Page 71: ...d on PROFINET is turned off The switchover from EtherNet IP and PROFINET has no effect on DCP If a PROFINET connection is established in other words the PROFINET AR status is Online you cannot enable EtherNet IP Result EtherNet IP is enabled or disabled after the next restart Further notes You can display the current EtherNet IP configuration with the show ethernetip command You restore the defaul...

Page 72: ...r from PROFINET and EtherNet IP has no effect on DCP Result PROFINET is enabled or disabled after the next restart Further notes You display the current PROFINET configuration with the show pnio command You restore the default settings of the PROFINET profile with the restart command 3 1 9 10 system contact Description With this command you enter contact information for the system Requirement You ...

Page 73: ...ration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters system location location name The parameter has the following meaning Parameter Description Range of values note location name Input box for the location information max 255 characters Result The location information is created in the system 3 1 9 12 system name Description This command...

Page 74: ... 255 characters Result The name is created in the system 3 1 9 13 username Description With this command you change the password of the factory set default user admin Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters username admin password passwd Configuration 3 1 System SCALANCE XB 200 XC 200 ...

Page 75: ...he password in Trial mode Even if you change the password in Trial mode this change is saved immediately Further notes You show the created users with the show user accounts command You can also change the passwords with the user account command You display the currently valid password policy with the show password policy command 3 1 10 Commands in the interface configuration mode This section des...

Page 76: ...configuration Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters alias interface name The parameter has the following meaning Parameter Description Range of values note interface name Name of the interface max 63 characters Result The interface was assigned a name Further notes You delete t...

Page 77: ...th this command you enable the blocking of broadcast frames on an interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameter assignment broadcast block Result Broadcast frames are blocked Further notes You disable the blocking of broadcast frames with the no broadcast block command Configuration 3 1 Sys...

Page 78: ...n Electrical interfaces can be operated in full duplex mode or half duplex mode The options here depend on the connected device Optical connections are always operated in full duplex mode since they have a fiber for each transmission direction With this command you configure the duplex mode of an interface The same mode must be set for connected interfaces Requirement Autonegotiation is disabled Y...

Page 79: ...fault value with the no duplex command You disable autonegotiation with the no negotiation command 3 1 10 6 no duplex Description With this command you reset the duplex mode of an interface to the default value The default value is full Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no duplex Result ...

Page 80: ...eaning Parameter Description Range of values note transmit The sending of LLDP packets is ena bled Default enabled receive The receipt of LLDP packets is enabled Default enabled Note Enabling both options When you call this command you can only select one option If you want to enable both options call up the command again Result Sending or receipt of LLDP packets is enabled Further notes You disab...

Page 81: ...ter Description transmit the sending of LLDP packets is disabled receive the receipt of LLDP packets is disabled Note Disabling both options When you call this command you can only select one option If you want to disable both options call up the command again Result Sending or receipt of LLDP packets is disabled Further notes You enable the sending or receipt of LLDP packets with the lldp command...

Page 82: ...th this command an error message will be displayed Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters media type auto rj45 sfp Configuration 3 1 System SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 82 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 83: ...nd the power turned off sfp The sfp mode is enabled for the combo port In this mode the SFP transceiver port is used independent of the fixed RJ 45 port If an RJ 45 connection is established it is terminated because the power of the RJ 45 port is turned off Result The mode of the combo port is configured Further notes You display the mode of a combo port with the command show interface and the par...

Page 84: ...prompt is as follows cli config if Syntax Call the command without parameter assignment no multicast block Result The blocking of multicast frames is disabled Further notes You enable the blocking of multicast frames with the mulitcast block command 3 1 10 12 negotiation Description With this command you enable autonegotiation of connection parameters on an interface Autonegotiation must be set fo...

Page 85: ... With this command you disable autonegotiation of connection parameters on an interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no negotiation Result The automatic negotiation of connection parameters on an interface is deactivated Further notes You enable the autonegotiation of connection par...

Page 86: ...very optical port that you disable with the shutdown complete command the current con sumtion of the device is re duced by 30 mA Result The Interface is shut down If you execute this command without parameters a connection remains displayed The LED for the port status flashes However no data is sent or received Further notes You activate the interface with the no shutdown command You can display t...

Page 87: ...eed Description With this command you configure the transmission speed of an interface Note Availability of this function The transmission speed can only be configured for electrical data transfer On optical connections the transmission speed is fixed Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following...

Page 88: ...nd prompt is as follows cli config if Syntax Call the command without parameter assignment unicast block Result Unicast frames are blocked Further notes You disable the blocking of unicast frames with the no unicast block command You display the status of this function with show unicast block config 3 1 10 18 no unicast block Description With this command you disable the blocking of unknown unicas...

Page 89: ...st block Result The blocking of unicast frames is disabled Further notes You enable the blocking of unicast frames with the unicast block command You display the status of this function with show unicast block config Configuration 3 1 System SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 89 ...

Page 90: ...rNet IP mode Firmware The firmware is signed and encrypted This ensures that only firmware created by Siemens can be downloaded to the device GSDML PROFINET information on the device properties HTTPSCert Default HTTPS certificates including key The preset and automatically created HTTPS certificates are self signed We strongly recommend that you create your own HTTPS certificates and make them ava...

Page 91: ...isplay various settings 3 2 2 1 show loadsave files Description This command shows the current Load Save file information Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show loadsave files Result The current Load Save file information is displayed 3 2 2 2 show loadsave tftp Description ...

Page 92: ...d the files from a TFTP server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters load tftp ipv4 ipv4 address port tcp port 1 65535 file filename filetype filetype The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 add...

Page 93: ... loadsave files command you can display the file types 3 2 4 save filetype Description With this command you save files on a TFTP server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters save filetype filetype tftp ipv4 ipv4 address port tcp port 1 65535 file filename The par...

Page 94: ...types 3 2 5 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end ...

Page 95: ...e with the global command show loadsave tftp If you exit the LOADSAVE configuration mode with the exitcommand you return to the Global Configuration mode If you exit the LOADSAVE configuration mode with the end command you return to the Privileged EXEC mode For information on the file types refer to this list Page 90 3 2 6 1 delete Description With this command you call up the possible files or de...

Page 96: ... for a file Requirement You are in the LOADSAVE configuration mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters password showfiles filetype filetype pw password The parameters have the following meaning Parameter Description Values showfiles Shows the available files filetype Shows that the file type follows that will be loaded filet...

Page 97: ...type filetype The parameters have the following meaning Parameter Description Values showfiles Shows the available files filetype Shows that the file type follows that will be loaded filetype Name of the file type max 100 characters Result The password for the file is disabled Further notes You enable the password for the user certificate with the password command 3 2 6 4 tftp filename Description...

Page 98: ...type max 100 characters name Keyword for a file name to be assigned to the file type filename Name of the file max 100 characters Result The file types are displayed or the file type is assigned a name Further notes With the show loadsave files command you can display the file types 3 2 6 5 tftp load Firmware The firmware is signed and encrypted This ensures that only firmware created by Siemens c...

Page 99: ... notes You configure the name of the file with the tftp filename command With the show loadsave files command you can display the file types 3 2 6 6 tftp save Description With this command you copy a file from the file system of the device to a TFTP server The TFTP protocol is used for the transfer You can also display a list of available files Requirement The name of the file is specified You are...

Page 100: ...ration mode The command prompt is as follows cli config loadsave Syntax Call up the command with the following parameters tftp server ipv4 ipv4 address port tcp port 1 65535 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ipv4 address Value for an IPv4 unicast address Enter a valid IPv4 unicast address port Keyword for the port ...

Page 101: ...ngs for the access to the selected TFTP server are configured Configuration 3 2 Load and Save SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 101 ...

Page 102: ...wing meaning Parameter Description Range of values note without parame ters The system restarts with the current configuration You can only restart the device with administrator privileges A device should only be restarted by this CLI command or the corresponding buttons in the WBM and not by a poer cycle on the device factory Restores the factory settings of the device and restarts the device The...

Page 103: ...e configured IP address is lost so that device can then only be accessed via the serial interface using the Primary Setup Tool or using DHCP With the appropriate attachment a previously correctly configured device can cause circulating frames and therefore the failure of the data traffic ethernetip Restores the default settings of the EtherNet IP profile and restarts the device ie Restores the def...

Page 104: ...rompt is as follows cli or cli Syntax Call up the command with the following parameters show running config syslog dhcp qos stp la dot1x vlan vlan id 1 4094 interface port channel port channel id 1 8 interface type interface list vlan vlan id 1 4094 ssh ssl acl ip snmp radius rmon igmp sntp http broadcast blocking multicast blocking locked port auto logout time ntp auto save panel button cos map d...

Page 105: ...f the Secure Shell protocol ssl Shows the configuration settings of the Secure Sockets Layer protocol acl Shows the configuration settings of the access control lists ip Shows the configuration settings of the Internet Protocol snmp Shows the configuration settings of the Simple Network Management Protocol radius shows the configuration settings of the Remote Authentication Dial In User service rm...

Page 106: ...ncy Protocol loopd Shows the configuration settings of loop detection events Shows the configuration settings of the events redundancy Shows the configuration settings of the redundancy passive Shows the configuration settings of pas sive listening umac Shows the configuration settings of the user configuration nat Shows the configuration settings of the Network Address Translation fmp Shows the c...

Page 107: ...on file Use the restart command without parameters to restart the system with this configuration Further notes You enable the auto save function or disable the Trial mode with the auto save command You disable the auto save function or enable the Trial mode with the no auto save command 3 4 3 Commands in the global configuration mode This section describes commands that you can call up in the Glob...

Page 108: ...e write startup config command With the auto save command you enable the auto save function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters auto save As default the function is enabled Result The auto save function is enabled Further notes You save changes to the configuration in the Trial mode with the wri...

Page 109: ...s disabled The Trial mode is activated Further notes You enable the function with the auto save command You can display the status of this function and other information with the show device informationcommand You save changes to the configuration in the Trial mode with the write startupconfig command Configuration 3 4 Configuration Save Restore SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Comm...

Page 110: ...parameters have the following meaning Parameter Description Range of values note interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface If you use the command without setting parameters information about all PoE interfaces is displayed For information on names of addresses and interf...

Page 111: ...ilable PSEs Result The current settings of the PoE power supply of the device are displayed 3 5 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can ...

Page 112: ...e The command prompt is as follows cli config Syntax Call up the command with the following parameters poe pse integer 1 4 usage integer 1 100 The parameters have the following meaning Parameter Description Range of values note integer Number of the PSE 1 4 integer Value for Usage Threshold as a per centage 1 100 Default 80 Result The value for Usage Threshold is configured 3 5 2 2 no poe pse usag...

Page 113: ...r topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 3 5 3 1 poe active Description With this command you activate PoE for the interfac...

Page 114: ...tivated for the corresponding interface 3 5 3 3 poe custom maxpwr Description With this command you set the maximum power that a port makes available to supply a connected device This value is taken into account when the function is enabled with the poe custom maxpwr active command Requirement You are in the Interface Configuration mode of a PoE interface The command prompt is as follows cli confi...

Page 115: ...axpwr active command You delete the user defined maximum power for the interface with the no poe custom maxpwr command 3 5 3 4 no poe custom maxpwr Description With this command you delete the user defined maximum power for a port Requirement You are in the Interface Configuration mode of a PoE interface The command prompt is as follows cli config if Syntax Call the command without parameters no p...

Page 116: ...ode of a PoE interface The command prompt is as follows cli config if Syntax Call the command without parameters poe custom maxpwr active Result The user defined maximum power is enabled for the relevant interface Further notes You configure the user defined maximum power for an interface with the poe custom maxpwr command You disable the use of the user defined maximum power with the no poe custo...

Page 117: ... poe custom maxpwr active command 3 5 3 7 poe type Description This command specifies a character string that describes a connected device in greater detail Requirement You are in the Interface configuration mode of a PoE interface The command prompt is as follows cli config if Syntax Call up the command with the following parameters poe type string The parameters have the following meaning Parame...

Page 118: ...o poe type Result The description of the corresponding device is deleted 3 5 3 9 poe prio Description With this command you specify the priority of the power supply for an interface Requirement You are in the Interface configuration mode of a PoE interface The command prompt is as follows cli config if Syntax Call up the command with the following parameters poe prio low high critical Configuratio...

Page 119: ...esult The priority of the corresponding interface has been specified 3 5 3 10 no poe prio Description With this command you set the priority of an interface to the default value low Requirement You are in the Interface configuration mode of a PoE interface The command prompt is as follows cli config if Syntax Call the command without parameters no poe prio Result The priority of the corresponding ...

Page 120: ...uration interface is displayed 3 6 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configu...

Page 121: ...erface with the no sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema 3 6 2 2 no sinema Description With this command you disable the SINEMA configuration interface Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment no...

Page 122: ...n interface with the sinema command You display the setting whether the SINEMA configuration interface is enabled or disabled with the command show sinema Configuration 3 6 SINEMA SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 122 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 123: ...ut parameters show nfc active status Result The status of the NFC function is displayed 3 7 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be f...

Page 124: ...mmand You display the status i e whether the NFC function is activated or deactivated with the command show nfc active status 3 7 2 2 no nfc active Description With this command you deactivate NFC Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no nfc active Configuration 3 7 NFC SCALANCE XB 2...

Page 125: ...e command You display the status i e whether the NFC function is activated or deactivated with the command show nfc active status Configuration 3 7 NFC SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 125 ...

Page 126: ...Configuration 3 7 NFC SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 126 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 127: ...ic to SCALANCE 4 This part contains the sections that describe functions specific to SCALANCE SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 127 ...

Page 128: ...cli Syntax Call the command without parameters show plug Result The current information of the PLUG is diplayed 4 1 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global con...

Page 129: ...ion mode This section describes commands that you can call up in the Plug Configuration mode In the Global Configuration mode enter the plug command to change to this mode If you exit the Plug Configuration mode with the exit command you return to the Global Configuration mode If you exit the Plug Configuration mode with the end command you return to the Privileged EXEC mode 4 1 3 1 factoryclean D...

Page 130: ...mand you format the PLUG and copy the current device configuration to it Requirement The PLUG is formatted You are in the Plug Configuration mode The command prompt is cli config plug Syntax Call the command without parameter assignment write Result The current device configuration has been copied to the formatted PLUG Functions specific to SCALANCE 4 1 PLUG SCALANCE XB 200 XC 200 XF 200BA XP 200 ...

Page 131: ...cli Syntax Call the command without parameters show web session timeout Result The timeout setting for the WBM is displayed 4 2 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in th...

Page 132: ...il automatic logout after the last entry 60 3600 Default 900 Result The time is configured and automatic logout is enabled Further notes You disable automatic logoff with the no web session timeout command You display the current timeout setting with the show web session timeout command 4 2 2 2 no web session timeout Description With this command you disable the automatic logoff Requirement You ar...

Page 133: ...tes You enable automatic logoff with the web session timeout command You display the current timeout setting with the show web session timeout command Functions specific to SCALANCE 4 2 WBM SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 133 ...

Page 134: ...Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 4 3 1 1 panel button control factory defaults Description With this command you enable the following function of the button When the button is pressed for more than 12 seconds there is a restart with the factory settings ...

Page 135: ...ut parameter assignment no panel button control factory defaults Result The function of the button for restarting with factory settings is enabled or disabled Further notes You enable this function with the panel button control factory defaults command 4 3 1 3 panel button control faultmask Description With this command you enable the following function of the button If display mode D fault mask i...

Page 136: ...th this command you disable the following function of the button If display mode D fault mask is displayed and the button is pressed for 5 12 seconds the fault mask is set Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment no panel button control faultmask Result The function of the button for settin...

Page 137: ...ol hsr manager Result The function of the button for switching over the redundancy manager is enabled Further notes You disable this function with the no panel button control hsr manager command 4 3 1 6 no panel button control hsr manager Description With this command you disable the following function of the button If display mode B is displayed and the button is pressed for 5 seconds the redunda...

Page 138: ...he button for switching over the redundancy manager is disabled Further notes You enable this function with the panel button control hsr manager command Functions specific to SCALANCE 4 3 Panel button SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 138 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 139: ...ult The current configuration of the signaling contact is displayed 4 4 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant...

Page 140: ...LED goes off and the signaling contact is closed aligned The way the signaling contact works does not depend on the error fault that has occurred The signaling contact can be opened or closed as required by user actions Result The reaction of the signaling contact is specified Further notes You display the setting with the show signaling contact command 4 4 2 2 signaling contact status Description...

Page 141: ...pen Signaling contact is opened close Signaling contact is closed Result The signaling contact is opened or closed Further notes You display the setting with the show signaling contact command Functions specific to SCALANCE 4 4 Signaling contact SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 141 ...

Page 142: ...Functions specific to SCALANCE 4 4 Signaling contact SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 142 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 143: ... for daylight saving time stored on the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show dst info Result The entries for daylight saving time are displayed 5 1 1 2 show time Description This command shows the settings of the system clock SCALANCE XB 200 XC 200 XF 200BA XP 200 ...

Page 144: ...o other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 5 1 2 1 time Description With this command you configure the way in which the system time is obtained Requirement You are in the Global Configuration mode The command prompt is as ...

Page 145: ...are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters time set hh mm ss day 1 31 january february march april may june july august september october november december year 2000 2035 The parameters have the following meaning Parameter Description Range of values note hh mm ss Time of day Hour minute second each sepa...

Page 146: ...begin MMDDhh end MMDDhh The parameters have the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters year Year 1900 2099 begin Keyword for the start of daylight saving time MMDDhh Time for the start of daylight saving time Time in the format MM Month DD Day hh Hour end Keyword for the end of daylight saving time MMDDhh Time for the end of daylig...

Page 147: ...last weekday month hour end week 1 5 last weekday month hour The parameters have the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters begin Keyword for the start of daylight saving time week Calendar week in a month 1 5 last Keyword for the last calendar week in a month weekday Weekday monday tuesday wednesday thursday friday saturday sunday...

Page 148: ...configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no time dst name 16 The parameter has the following meaning Parameter Description Range of values note name Name of the entry maximum 16 characters Result An entry or the entries for the start and end of daylight saving time was were deleted Further notes You display the settings...

Page 149: ...ntp info Result The current NTP settings are displayed 5 2 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You...

Page 150: ...he end or exit command 5 2 3 Commands in the NTP configuration mode This section describes commands that you can call up in the NTP configuration mode In the Global configuration mode enter the ntp command to change to this mode If you exit the NTP configuration mode with the exit command you return to the Global configuration mode If you exit the NTP configuration mode with the end command you re...

Page 151: ...e ipv4 Keyword for an IPv4 address ip_addr Value for the IPv4 address of the time server Enter a valid IPv4 address port UDP port of the time server 1025 36564 poll Keyword for the time after which the time of day is re quested again seconds Value for the time in seconds 64 1024 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result T...

Page 152: ...t Further notes You configure the connection to a server with the ntp server command 5 2 3 3 ntp time diff Description With this command you configure the time difference between the device and the NTP server Requirement You are in the NTP configuration mode The command prompt is as follows cli config ntp Syntax Call up the command with the following parameters ntp time diff hh mm System time 5 2 ...

Page 153: ...f hours difference mm Number of minutes difference Enter the number of hours and number of minutes with two digits each Default No time difference Result The time difference between the device and the NTP server is configured System time 5 2 NTP client SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 153 ...

Page 154: ...EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show sntp broadcast mode status Result The current SNTP broadcast configuration is displayed 5 3 1 2 show sntp unicast mode status Description This command shows the current configuration of the unicast mode of SNTP Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command pr...

Page 155: ...s of SNTP are displayed 5 3 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration ...

Page 156: ... section describes commands that you can call up in the SNTP configuration mode In the Global configuration mode enter the sntp command to change to this mode If you exit the SNTP configuration mode with the exit command you return to the Global configuration mode If you exit the SNTP configuration mode with the end command you return to the Privileged EXEC mode 5 3 3 1 sntp client addressing mode...

Page 157: ...t is configured Further notes You display this setting and other information with the show sntp status command You display the settings for the unicast mode with the show sntp unicast mode status command You display the settings for the broadcast mode with the show sntp broadcast mode status command 5 3 3 2 sntp time diff Description With this command you configure the time difference of the syste...

Page 158: ...t The time zone of the system time is configured Further notes You can display the settings of this function and other information with the show sntp statuscommand 5 3 3 3 sntp unicast server ipv4 Description With this command you configure an SNTP unicast server Note To avoid time jumps make sure that there is only one time server in the network Requirement The addressing mode of the SNTP client ...

Page 159: ...NTP unicast server is configured Further notes You can reset the setting to the default with the no sntp unicast server ipv4 command You display this setting and other information with the show sntp unicast mode status command 5 3 3 4 no sntp unicast server ipv4 Description With this command you delete the attributes for an SNTP unicast server and reset the address Requirement You are in the SNTP ...

Page 160: ...ion Addresses and interface names Page 36 Result The SNTP unicast server is reset to the default value Further notes You configure the setting with the sntp unicast server ipv4 command You display this setting and other information with the show sntp unicast mode status command System time 5 3 SNTP client SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 160 Configuration Manu...

Page 161: ...en priority for transfer Security The transition between VLANs can only be controlled by an administrator Aggregation of interfaces or connections between devices to increase the data transmission rate and reliability link aggregation port aggregation Detection and monitoring of parallel connections or loops in an Ethernet network by setting up a tree structure loop detection Improved reliability ...

Page 162: ...d is connected to the primary PVLAN Secondary PVLANs are divided into the following types Isolated Secondary PVLAN Devices within an isolated secondary PVLAN cannot communicate with each other via layer 2 Community Secondary PVLAN Devices within a community secondary PVLAN can communicate with each other directly via layer 2 The devices cannot communicate with devices in other communities of the P...

Page 163: ...o of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameter from the parameter list the entries are displayed for all available interfaces Result The entries of the MAC addresses table are displayed 6 1 1 2 show mac address table count Description With this command you show the number of MAC a...

Page 164: ...x Call up the command with the following parameters show mac address table dynamic multicast vlan vlan range address aa aa aa aa aa aa interface interface type interface id The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan range Number of the addressed VLAN 1 4094 address Keyword for a MAC address aa aa aa aa aa aa MAC addr...

Page 165: ...eters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan range Number of the addressed VLAN 1 4094 Enter the range limits with a hy phen without spaces address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interf...

Page 166: ...LAN connection vlan range Number of the addressed VLAN 1 4094 Enter the range limits with a hy phen without spaces address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfac...

Page 167: ...mits with a hy phen without spaces address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not sele...

Page 168: ...phen or a space summary Shows a summary of the VLANs If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The information for the selected VLAN is displayed 6 1 1 8 show vlan device info Description This command shows all the global information that is valid for all VLANs Requirement You are in the User EXEC mode or in the Privileg...

Page 169: ...iption Range of values note vlan Keyword for a VLAN or VLAN range vlan range Number of the addressed VLAN or VLAN range 1 4094 Enter the range limits with a hy phen or a space If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The settings for the automatic learning of addresses are displayed 6 1 1 10 show vlan port config Descri...

Page 170: ...s Page 36 If you do not select any parameter from the parameter list the entries of all available interfaces are displayed Result The information about the ports is displayed 6 1 1 11 show vlan private vlan Description This command shows the specific information for all or for a selected private VLAN type Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt i...

Page 171: ...lobal configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 6 1 2 1 base bridge mode Description With this comma...

Page 172: ... bridge mode 802 1D Transparent Bridge 802 1Q VLAN Bridge If you change the Base bridge mode from Transparent Bridge to VLAN Bridge this has the following effects All static and dynamic unicast entries are deleted All static and dynamic multicast entries are deleted With spanning tree you can set the following protocol compatibility STP RSTP and MSTP 802 1Q VLAN Bridge 802 1D Transparent Bridge If...

Page 173: ...l up the command with the following parameters interface range interface type 0 a b 0 c vlan vlan id 1 4094 vlan id 2 4094 The parameters have the following meaning Parameter Description Range of values note interface type Keyword for an interface Enter a valid interface 0 a b 0 c Module no and port no of the interface vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 ...

Page 174: ... is as follows cli config Syntax Call up the command with the following parameters no interface range vlan vlan id 1 4094 vlan id 2 4094 The parameters have the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 vlan id Number of the addressed VLAN 2 4094 For information on names of addresses and interfaces re...

Page 175: ...achable via Ethernet following the change Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters mgmt vlan vlan id 1 4094 The parameter has the following meaning Parameter Description Range of values vlan id Number of the addressed VLAN 1 4094 Result The Agent VLAN ID has been changed Further notes Y...

Page 176: ...ing Parameter Description Range of values note vlan id Number of the addressed VLAN 1 4094 Do not enter any leading zeros with the number of the VLAN Result The VLAN is created You are now in the VLAN configuration mode The command prompt is as follows cli config vlan Further notes You delete the VLAN with the no vlan command You can display information about the VLAN with the show vlan command 6 ...

Page 177: ...mand you create a VLAN on the device You can display information about the VLAN with the show vlan command 6 1 2 7 vlan range Description With this command you can select several VLANs and configure them together The configurations are valid for all selected VLANs Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the fo...

Page 178: ...ands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the ex...

Page 179: ...eached from the selected secondary PVLANs Further notes You delete the link between secondary PVLANs and the IP interface of the primary PVLAN with the command no private vlan mapping You display this setting with the show interfaces command with the private vlan mapping parameter 6 1 3 2 no private vlan mapping Description With this command you delete the link between secondary PVLANs and the IP ...

Page 180: ...e in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters switchport acceptable frame type all tagged untaggedAndPrioritytagged The parameters have the following meaning Parameter Description Range of values note all All frames are accepted Default On a ring port only the parameter all is supported tagged The devic...

Page 181: ... all The interface accepts tagged and untagged frames Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport acceptable frame type Result The setting is reset to the default value Further notes You configure the setting with the switchport acceptable frame type command You can display the statu...

Page 182: ...rface is added to the VLAN as an untagged port and the corresponding VLAN ID is set Further notes You can reset the setting to the default with the no switchport access vlan command You display the setting and other information with the show vlan port config command 6 1 3 6 no switchport access vlan Description With this command you reset the setting for the port VLAN identifier PVID for an interf...

Page 183: ...port configcommand 6 1 3 7 switchport mode Description With this command you specify the operating mode for the switch port Requirement The interface is configured as a switch port You are in the Interface configuration mode The command prompt is cli config if Syntax Call up the command with the following parameters switchport mode trunk hybrid Network structures 6 1 VLAN SCALANCE XB 200 XC 200 XF...

Page 184: ... in certain VLANs If you execute the acceptable frame type all com mand at the trunk port the port also receives untagged frames hybrid Configures the port as a hybrid port that accepts tagged and untagged frames Default hybrid Result The operating mode is configured Further notes You reset the operating mode to the default with the no switchport mode command You display this setting and other inf...

Page 185: ... prompt is cli config if Syntax Call up the command with the following parameters switchport mode private vlan promiscuous host The parameters have the following meaning Parameter Description Range of values note promiscuou s Configures the port as a promiscuous port Promiscuous ports belong to a primary PVLAN Connect de vices to promiscuous ports that are intended to communicate with all other de...

Page 186: ...You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters switchport priority default 0 7 The parameter has the following meaning Parameter Description Range of values note Value for the priority default 0 7 Default 0 Result The setting for the default priority of the interface is configured Further notes You...

Page 187: ...rity default with the switchport priority default command You display this setting and other information with the show vlan port config command 6 1 3 12 switchport private vlan host association Description With this command you configure a host port The following settings are made The interface becomes an untagged member of the primary PVLAN and its secondary PVLANs With incoming untagged frames t...

Page 188: ...rther notes You delete the configuration with the command You display this setting and other information with the commands show vlan port config show vlan and show vlan private vlan You configure the interface as a host port with the command 6 1 3 13 no switchport private vlan host association Description With this command you delete the configuration of a host port Requirement The interface is co...

Page 189: ...he primary PVLAN and all secondary PVLANs With incoming untagged frames the port VLAN ID of the primary VLAN is set Ingress filtering is enabled Requirement The interface is configured as a promiscuous port You are in the Interface configuration mode The command prompt is cli config if Syntax Call up the command with the following parameters switchport private vlan mapping primary_vlan_id 1 4094 a...

Page 190: ...omiscuous port with the switchport mode command 6 1 3 15 no switchport private vlan mapping Description With this command you delete the configuration of a promiscuous port Requirement The interface is configured as a promiscuous port You are in the Interface configuration mode The command prompt is cli config if Syntax Call the command without parameter assignment no switchport private vlan mappi...

Page 191: ... Syntax Call up the command with the following parameters switchport pvid vlan id 1 4094 The parameter has the following meaning Parameter Description Range of values note vlan id Number of the addressed VLAN 1 4094 Result The PVID is configured Further notes You can reset the setting to the default with the no switchport pvid command You configure the VLAN ID with the switchport access vlan comma...

Page 192: ...ands that you can call up in the VLAN Configuration mode In the Global Configuration mode enter the vlan command to change to this mode When doing this you need to replace the placeholders with the relevant VLAN ID Commands relating to other topics that can be called in the VLAN Configuration mode can be found in the relevant sections If you exit the VLAN Configuration mode with the exit command y...

Page 193: ...e VLAN is assigned a name Further notes You delete name assignment for a VLAN with the no name command 6 1 4 2 no name Description With this command you delete the name assignment for a VLAN Requirement You are in the VLAN configuration mode The command prompt is as follows cli config vlan Syntax Call the command without parameters no name Result The name of the VLAN is deleted Network structures ...

Page 194: ...a VLAN ID are forwarded according to the VLAN ID With outgoing frames the tag with the VLAN ID is removed Forbidden Ports This interface is not used for communication in a VLAN The tagged port and untagged port you specify with this command are used for outgoing data traffic Requirement You are in the VLAN configuration mode The command prompt is as follows cli config vlan Syntax Call up the comma...

Page 195: ...rts name Keyword for the name assignment vlan name Name of the VLAN max 32 characters For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The existing VLAN configuration is replaced To add individual interfaces you need to recreate the full list Further notes You display details of the function with the show vlan command You reset ...

Page 196: ...nel a b c d all name vlan name The parameters have the following meaning Parameter Description Range of values note interface type Type of interface Enter a valid interface a b 0 c Port no of the interface port channel Keyword for a port channel a b c d Port no of the interface Enter a valid interface untagged Keyword for interfaces or ports that transfer data packets without VLAN marking Network ...

Page 197: ...dresses and interface names Page 36 Result The ports are removed from the VLAN configuration Further notes It is possible to remove individual ports from a VLAN configuration without needing to rewrite the entire configuration You display details of the function with the show vlan command You configure the setting with the ports command 6 1 4 5 priority Description With this command you assign a p...

Page 198: ...e command You display the current priority with the show vlan command You configure the assignment of the priority to a queue with the cos map command 6 1 4 6 no priority Description With this command you reset the priority of the VLAN back to the default value Requirement You are in the VLAN Configuration mode The command prompt is as follows cli config vlan Syntax Call the command without parame...

Page 199: ...The command prompt is as follows cli config vlan Syntax Call the command without parameter assignment priority enable Result The priority of the VLAN is enabled Further notes You disable the priority with the no priority enable command You change the priority with the prioritycommand You reset the priority to the default value with the no priority command You display the current priority with the ...

Page 200: ... default value with the no priority command You display the current priority with the show vlan command 6 1 4 9 private vlan Description With this command you define a VLAN as a private VLAN and specify the PVLAN type Requirement You are in the VLAN Configuration mode The command prompt is as follows cli config vlan Syntax Call up the command with the following parameters private vlan primary isol...

Page 201: ...ondary PVLAN has a specific VLAN ID Result The PVLAN is defined and the PVLAN type specified Further notes You delete the configuration as a private VLAN with the no private vlan command You display this setting with the show vlan private vlan command 6 1 4 10 no private vlan Description With this command you delete the configuration as a private VLAN Requirement You are in the VLAN Configuration ...

Page 202: ...t The parameters have the following meaning Parameter Description Range of values note add Adds a secondary PVLAN remove Removes a secondary PVLAN secondary_Vla n_list Number of the secondary PVLAN Separate the PVLANs with commas if you specify several PVLANs Result The secondary PVLANs are assigned to the primary PVLAN Further notes You delete the link between secondary PVLANs and a primary PVLAN...

Page 203: ...LANs to a primary PVLAN with the command private vlan association You display this setting with the command You configure a an interface as a primary PVLAN with the private vlan command 6 1 5 The show commands Transparent Bridge This section describes commands with which you display various settings 6 1 5 1 show dot1d mac address table Description This command shows the table with the static and d...

Page 204: ...n on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameter from the parameter list the entries are displayed for all available interfaces Result The entries are displayed 6 1 5 2 show mac address table count Description With this command you show the number of MAC addresses for all or a selected VLAN Requirement You are in t...

Page 205: ...the following parameters show dot1d mac address table static multicast address aa aa aa aa aa aa interface interface type interface id The parameters have the following meaning Parameter Description Range of values note address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interfa...

Page 206: ...d for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameter from the parameter list the entr...

Page 207: ...nd in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 6 1 6 1 base bridge mode Description With this command you configure whether or not the device forwards frames with VLAN tags transparently IEEE 802 1D Transparent Bridge or takes VLAN information into account IEEE 802 1Q VLAN Bridge Note Changing base brid...

Page 208: ...e mode from Transparent Bridge to VLAN Bridge this has the following effects All static and dynamic unicast entries are deleted All static and dynamic multicast entries are deleted With spanning tree you can set the following protocol compatibility STP RSTP and MSTP 802 1Q VLAN Bridge 802 1D Transparent Bridge If you change the Base bridge mode from VLAN Bridge to Transparent Bridge this has the f...

Page 209: ...nd with the following parameters vlan vlan id 1 4094 The parameter has the following meaning Parameter Description Range of values note vlan id Number of the addressed VLAN 1 4094 In the transparent bridge mode on ly VLAN 1 is available Do not enter any leading zeros with the number of the VLAN Result You are now in the VLAN configuration mode The command prompt is as follows cli config vlan 1 Fur...

Page 210: ...EC mode 6 1 7 1 ip address Description With this command you assign an IP address Requirement You are in the Interface Configuration mode of VLAN The command prompt is as follows cli config if vlan Syntax Call up the command with the following parameters ip address ip address subnet mask prefix length 0 32 The parameter has the following meaning Parameter Description Range of values note ip addres...

Page 211: ...owing meaning Parameter Description Range of values note ucast addr Value for an IPv4 unicast address Enter a valid IPv4 unicast address dhcp Specify this parameter if you want to disable the DHCP function explicitly For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result If DHCP was enabled on this interface DHCP is now disabled Any e...

Page 212: ...ctive immediately If you configure the interface via which you access the device you can lose the connection Further notes You assign an IP address with the ip address or ip address dhcp command Network structures 6 1 VLAN SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 212 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 213: ...nnel summary protocol The parameters have the following meaning Parameter Description channel group number Number of the Channel Group detail Detailed display of the settings load balance Shows which load balancing method is enabled port Information on the Etherchannel port port channel Information on the Port Channel summary Brief overview of the settings of a Channel Group protocol Specification...

Page 214: ...ge 36 If you do not select an interface information for all interfaces is displayed Result The interface specific information for a port channel is displayed Note When a port is assigned to a link aggregation but is not active e g link down the values displayed may differ from the values configured for the link aggregation If the port in the link aggregation becomes active individual port configur...

Page 215: ...configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exi...

Page 216: ...hout LACP to a Channel Group This corresponds to manual bundling active The negotiation of a connection via LACP is started unconditionally passive The negotiation of a connection via LACP is started when an LACP packet arrives from the connection partner Result The Etherchannel is configured 6 2 2 2 no channel group Description With this command you remove the interface from an Etherchannel Requi...

Page 217: ...Result The interface is deleted from the Etherchannel Network structures 6 2 Link aggregation SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 217 ...

Page 218: ...ction describes commands with which you display various settings 6 3 1 1 show spanning tree Description This command shows the settings of the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spanning tree summary blockedports pathcost method The ...

Page 219: ...e settings for the active ports of the spanning tree function Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spanning tree active detail The parameter has the following meaning Parameter Description detail Shows settings in detail Result The settings for the active po...

Page 220: ...ode to the learning mode hello time Shows the time after which the bridge sends configuration frames BPDUs id Shows the ID of the bridge max age Shows the maximum age of the data packet after which it is deleted protocol Shows the protocol used priority Shows the priority of the bridge detail Shows detailed information about the spanning tree settings of the interface Result The settings for the s...

Page 221: ...id cost priority portfast rootcost restricted role restricted tcn state stats detail The parameters have the following meaning Parameter Description Range of values note interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface cost Shows the port costs used to calculate the lowest cost path priority Shows the priority of the port por...

Page 222: ...t L2GP For example the priority the MAC address and the status of L2GP are displayed Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show spanning tree interface interface type interface id layer2 gateway port The parameters have the following meaning Parameter Description ...

Page 223: ...il The parameters have the following meaning Parameter Description Range of values note instance id Number of the instance or range of in stances whose settings are displayed 1 64 4094 detail Shows detailed information about the selected interface Result The settings for the spanning tree configuration are displayed Further notes You display the general settings for the Spanning Tree Protocol with...

Page 224: ...d 6 3 1 9 show spanning tree mst interface Description This command shows port specific settings of a Multiple Spanning Tree configuration Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with one of the following parameter assignments show spanning tree mst instance id 1 64 4094 interface interface type...

Page 225: ...d interfaces refer to the section Addresses and interface names Page 36 Result The port specific settings are displayed Further notes You display the general settings for the Spanning Tree Protocol with the show spanning tree command 6 3 1 10 show spanning tree passive listening compatibility Description This command shows whether or not the Enhanced Passive Listening Compatibility function is ena...

Page 226: ...ree root address cost forward time id max age port priority detail The parameters have the following meaning Parameter Description address Shows the MAC address of the root bridge cost Shows the costs of the connection to the root bridge forward time Shows the time that the bridge is in the listening mode when changing from the blocking mode to the learning mode id Shows the ID of the root bridge ...

Page 227: ...face type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the process is restarted for all interfaces Result The connection settings for spanning tree are renegotiated 6...

Page 228: ...he Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 6 3 4 1 spanning tree Description The Spanning Tree Protocol is used to monitor a LAN for redundant connections These are blocked and reactivated when necessary if there are changes to the network topology With this command you enable the spanning tree function Requirement The ring redundancy i...

Page 229: ...isplay information about active ports with the show spanning tree active command 6 3 4 2 no spanning tree Description With this command you disable the spanning tree function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no spanning tree Result The spanning tree function is disabled Further notes You enab...

Page 230: ... version is compatible with the Span ning Tree protocol rst The version is compatible with the Rap ic Spanning Tree protocol Default enabled mst The version is compatible with the Mul tiple Spanning Tree protocol Result The compatibility version of the protocol is selected Further notes With the no spanning tree compatibility command you can reset the setting to the default value rst You can displ...

Page 231: ...default value Further notes You configure the setting with the spanning tree compatibility command You can display the status of this function and other information with the show spanning tree detail command 6 3 4 5 spanning tree mst configuration Description With this command you change to the MSTP configuration mode Requirement MSTP is enabled Compatibility mode MSTP You are in the Global config...

Page 232: ...r a substitute root bridge secondary Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters spanning tree mst instance id instance id 1 64 root primary secondary The parameters have the following meaning Parameter Description Range of values note instance id Keyword for the instance instance id Numbe...

Page 233: ...es You disable the root bridge with the no spanning tree mst instance id root command You display this setting and other information with the commands that start with show spanning tree 6 3 4 7 no spanning tree mst instance id root Description With this command you disable the root bridge function on the device Requirement You are in the Global Configuration mode The command prompt is as follows c...

Page 234: ...p the command with the following parameters spanning tree mst max hops value 6 40 The parameter has the following meaning Parameter Description Range of values note value Maximum number of hops that a path can run through in an MST 6 40 Default 20 Result The setting for the maximum number of hops is configured Further notes You can reset the setting for the maximum number of nodes to the default w...

Page 235: ...m number of nodes with the spanning tree mst max hops command You display this setting and other information with the show spanning tree mst configuration command 6 3 4 10 spanning tree priority Description With this command you configure the priority of the device Which device becomes the root bridge is decided based on the priority The bridge with the highest priority becomes the root bridge The...

Page 236: ...es You can reset the setting to the default with the no spanning tree priority command You display this setting and other information with the commands that start with show spanning tree 6 3 4 11 no spanning tree priority Description With this command you reset the priority of the device back to the default value The default value is 32768 Requirement You are in the Global Configuration mode The c...

Page 237: ...e Listening Compatibility function If you enable the Enhanced Passive Listening Compatibility function the IE switch sends topology change frames via the R STP edge port that caused the topology change Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment spanning tree passive listening compatibility Re...

Page 238: ... config Syntax Call the command without parameter assignment no spanning tree passive listening compatibility Result The Enhanced Passive Listening Compatibility function is disabled Further notes You enable the function with the spanning tree passive listening compatibility command You can display the status of this function with the show spanning tree passive listening compatibilitycommand Netwo...

Page 239: ... the command with the following parameters spanning tree forward time seconds 4 30 hello time seconds 1 2 max age seconds 6 40 The parameters have the following meaning Parameter Description Range of values note forward time Keyword for the time after which a port changes its spanning tree status from Blocking to Forwarding seconds Time after which the changeover takes place 4 30 Default 15 hello ...

Page 240: ...u display these settings and other information with the commands that start with show spanning tree no spanning tree time settings Description With this command in conjunction with the relevant parameter you reset the time settings of the spanning tree function to the default values If you call the command without parameters you disable the spanning tree function The configured time settings are r...

Page 241: ...tion with the commands that start with show spanning tree 6 3 5 Commands in the interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be c...

Page 242: ... mode With the port priority option you configure the priority of the interface for negotiating a spanning tree configuration Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning tree cost 0 200000000 disable link type point to point shared portfast port priority 0 240 The parameters...

Page 243: ...ty is configured Further notes You can reset the setting to the default with the no spanning tree properties command You display these settings and other information with the commands that start with show spanning tree 6 3 5 2 no spanning tree Description With this command you reset the various properties of the spanning tree function to the default value The default values are as follows Paramete...

Page 244: ...panning tree link type Connection status of the following network segment portfast Disables the PortFast function port priority Keyword for the priority of the interface Note Configure multiple properties With each call of the command you can configure precisely one property If you want to configure several properties call the command several times Result The selected setting was reset to the defa...

Page 245: ...otes The automatic discovery of a bridge on the interface is disabled with the no spanning tree auto edge command 6 3 5 4 no spanning tree auto edge Description With this command you disable automatic discovery of a bridge connected to the interface Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no s...

Page 246: ...and with the following parameters spanning tree bpdu transmit enabled disabled The parameters have the following meaning Parameter Description Range of values note enabled BPDU packets are transmitted at the port Default enabled disabled BPDU packets are not transmitted at the port Result The BPDU transmit status has switched over Further notes You can display the status of this function and other...

Page 247: ...the port Default enabled disabled BPDU packets are ignored at the port Result The BPDU receive status is enabled or disabled Further notes You can display the status of this function and other information with the show spanning tree interface command with the detail option 6 3 5 7 spanning tree bpdufilter Description With this command you configure the BPDU transmit status for a port Requirement Y...

Page 248: ...rt as a layer 2 gateway port Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters spanning tree layer2 gateway port Result The port is configured as a layer 2 gateway port Further notes You delete the configuration of a port as a layer 2 gateway port with the commandno spanning tree layer2 gateway port You...

Page 249: ...way port with the commandspanning tree layer2 gateway port You can display other information with the show spanning tree interface command with the detail option 6 3 5 10 spanning tree loop guard Description This function prevents alternative ports or root ports becoming designated ports if there is a disruption of a one way link With this command you enable the function Requirement Spanning tree ...

Page 250: ... This function prevents alternative ports or root ports becoming designated ports if there is a disruption of a one way link With this command you disable the function Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no spanning tree loop guard Result The Spanning Tree Loop Guard function is disabled F...

Page 251: ...t You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters spanning tree mst instance id 1 64 cost 0 200000000 port priority 0 240 disable The parameters have the following meaning Parameter Description Range of values note instance id Number of the addressed instance 1 64 cost Costs of the port for calculat...

Page 252: ...With this command you reset the various properties of the Multiple Spanning Tree function to the default value The default values are as follows Parameter Default value cost 200000 for physical interfaces 199999 for port channels port priority 128 disable MST is disabled RST is enabled Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Cal...

Page 253: ...otes You configure the setting with the spanning tree mst command properties You display these settings and other information with the commands that start with show spanning tree 6 3 5 14 spanning tree mst hello time Description With this command you configure the Hello time after which the bridge sends its configuration frames BPDUs A change to this value applies to all MST instances active on th...

Page 254: ... time Description With this command you reset the hello time after which the bridge sends its configuration BPDUs to the default value The default value is 2 seconds Requirement You are in the interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no spanning tree mst hello time Result The setting for the hello time is reset to the de...

Page 255: ... 0 61440 mac address ucast_mac The parameters have the following meaning Parameter Description Range of values note mst Keyword for a spanning tree instance instance id Number of the instance 1 64 priority Keyword for the priority value Value for the priority 0 61440 Default Priority of the device mac address Keyword for the pseudoroot unicast MAC address ucast_mac MAC address of the interface aa ...

Page 256: ... Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters no spanning tree mst instance id 1 64 pseudoRootId The parameters have the following meaning Parameter Description Range of values note mst Keyword for a spanning tree instance instance id Number of the instance 1 64 Result The pseudoroot MAC address and the priorit...

Page 257: ...otes You cancel the lock with the no spanning tree restricted role command You can display the status of this function and other information with the show spanning tree detailcommand 6 3 5 19 no spanning tree restricted role Description With this command you release the port for the role as root port Requirement You are in the interface configuration mode The command prompt is as follows cli confi...

Page 258: ...guration mode The command prompt is as follows cli config if Syntax Call the command without parameters spanning tree restricted tcn Result The port is prevented from using the TCN function Further notes You cancel the lock with the no spanning tree restricted tcn command You can display the status of this function and other information with the show spanning tree detailcommand 6 3 5 21 no spannin...

Page 259: ... the Global configuration mode enter the spanning tree mst configuration command to change to this mode If you exit the MSTP configuration mode with the exit command you return to the Global configuration mode If you exit the MSTP configuration mode with the end command you return to the Privileged EXEC mode 6 3 6 1 instance Description With this command you assign a range of VLANs to an MST insta...

Page 260: ...nstance Further notes You cancel the assignment of the VLAN to an MST instance with the no instance command You delete the MST instance with the no instance command You display this setting and other information with the show spanning tree mst configuration command 6 3 6 2 no instance Description With this command you cancel the assignment of a VLAN to an MST instance or delete the MST instance Re...

Page 261: ...You assign a VLAN to an MST instance with the instance command You display this setting and other information with the show spanning tree mst configuration command 6 3 6 3 name Description With this command you configure a name for the MST region Requirement You are in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call up the command with the following paramete...

Page 262: ...ice is configured as name Requirement You are in the MSTP Configuration mode The command prompt is as follows cli config mst Syntax Call the command without parameters no name Result The name is reset to the default value Further notes You configure the name of the MST region with the name command You display this setting and other information with the show spanning tree mst configuration command ...

Page 263: ...ult 0 Result The MST region is assigned a revision number Further notes You delete a revision number with the no revision command You display this setting and other information with the show spanning tree mst configuration command 6 3 6 6 no revision Description With this command you reset the revision number of the MST region to the default value The default value is 0 Requirement You are in the ...

Page 264: ...urther notes You assign a revision number to the MST region with the revision command You display this setting and other information with the show spanning tree mst configuration command Network structures 6 3 Spanning Tree SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 264 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 265: ... is as follows cli or cli Syntax Call up the command with the following parameters show passive listening Result disabled is displayed if passive listening is disabled If passive listening is enabled enabled is displayed 6 4 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure t...

Page 266: ...Further notes You disable this function with the no passive listening bpdu vlan flood command You display the status of passive listening with the show passive listening command 6 4 2 2 no passive listening bpdu vlan flood Description With this command you enable the flooding of BPDUs to all available ports of the device regardless of the configured VLANs Requirement You are in the Global configur...

Page 267: ...tion with spanning tree Passive listening can only be enabled when spanning tree is disabled You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters passive listening Result The passive listening function is enabled Further notes You disable passive listening with the no passive listening command You display the status of pass...

Page 268: ... parameters no passive listening Result The passive listening function is disabled Further notes You enable passive listening with the passive listening command You display the status of passive listening with the show passive listening command Network structures 6 4 Passive Listening SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 268 Configuration Manual 07 2017 C79000 G89...

Page 269: ... part contains the sections that describe the commands for working with the various network protocols SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 269 ...

Page 270: ...ged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip gateway Result The default gateway is displayed 7 1 1 2 show ip telnet Description This command shows the admin status and the port number of the Telnet server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protoc...

Page 271: ...ode The command prompt is as follows cli or cli Syntax Call the command without parameters show dcp server Result The overview of the status of the DCP function and access rights is displayed 7 1 1 4 show dcp forwarding Description This command shows an overview of the DCP forwarding behavior on one or all interfaces Requirement You are in the User EXEC mode or in the Privileged EXEC mode The comm...

Page 272: ...bes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 7 1 2 1 ip...

Page 273: ...e Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no ip gateway gateway The parameter has the following meaning Parameter Description Range of values gateway Specifies the IP address of the gateway Specify a valid IP address Result The entry is deleted Further notes You configure the default gateway with the ip gateway ...

Page 274: ...tax Call the command without parameters ip echo reply Result ICMP echo reply messages are enabled The network node reacts to ping queries Further notes You disable the setting with the no ip echo reply command 7 1 2 4 no ip echo reply Description With this command you stop the network node reacting to ping queries Requirement You are in the Global configuration mode The command prompt is as follow...

Page 275: ...ion mode The command prompt is as follows cli config Syntax Call the command without parameters telnet server As default the function is enabled Result The Telnet server is enabled Further notes You disable the Telnet server with the no telnet server command 7 1 2 6 no telnet server Description With this command you disable the Telnet server Network protocols 7 1 IPv4 protocol SCALANCE XB 200 XC 2...

Page 276: ... and enable it Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters dcp server read only read write The parameters have the following meaning Parameter Description Range of values note read only only reading is permitted on the DCP server read write reading and writing is permitted on the DPC serve...

Page 277: ...rs no dcp server Result The DCP server is disabled Further notes You enable and configure the DCP server with the dcp server command 7 1 3 Commands in the interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface com...

Page 278: ...a PROFINET protocol the configuration created here is only effective with the VLAN associated with the TIA interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters dcp forwarding block forward The parameters have the following meaning Parameter Description Range of values note block DCP...

Page 279: ...bnet mask Enter a valid subnet mask prefix length Decimal representation of the mask as a number of 1 bits 0 32 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The IP address is assigned Note Effectiveness of the command The command is effective immediately If you configure the interface via which you access the device the conn...

Page 280: ...nterface names Page 36 Result If DHCP was enabled on this interface DHCP is now disabled Any existing dynamically learned IP address will be automatically converted to a static IP address If static IP addresses were configured and if no explicit IP address was transferred as a parameter all static IP addresses will be deleted from this interface If a static IP address was specified explicitly this...

Page 281: ...ax Call the command without parameters ip address dhcp Result The DHCP assigns the IP address to the VLAN interface Further notes You delete the settings with the no ip address command You display this setting and other information with the show ip interface command Network protocols 7 1 IPv4 protocol SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 20...

Page 282: ...he Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip dhcp client stats Result The counters are displayed 7 2 1 2 show ip dhcp client Description With this command you display the configuration settings of the DHCP client Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or ...

Page 283: ...leged EXEC mode again 7 2 2 1 ip dhcp config file request Description If the DHCP config file request option is set the device requests the TFTP address and the name of a configuration file from the DHCP server If the device is restarted following the completed download the configuration settings are read from this file With this command you enable the DHCP config file request option Requirement Y...

Page 284: ...ig file request Result The DHCP config file request option is disabled Further notes You enable the DHCP config file request option with the ip dhcp config file request command 7 2 2 3 ip dhcp client mode Description With this command you configure the type of identifier with which the DHCP client logs on with its DHCP server Requirement You are in the Global configuration mode The command prompt ...

Page 285: ... commands that you can call up in the interface configuration mode Depending on the Interface selected various command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with t...

Page 286: ...as follows cli config if vlan Syntax Call up the command with the following parameters no ip address ucast_addr dhcp The parameter has the following meaning Parameter Description Range of values note ucast addr Value for an IPv4 unicast address Enter a valid IPv4 unicast address dhcp Specify this parameter if you want to disable the DHCP function explicitly For information on names of addresses an...

Page 287: ...his interface If a static IP address was specified explicitly this address is deleted from this interface Note Effectiveness of the command The command is effective immediately If you configure the interface via which you access the device you can lose the connection Further notes You assign an IP address with the ip address or ip address dhcp command Network protocols 7 2 DHCP client SCALANCE XB ...

Page 288: ...is enabled in the Port Range The DHCP server checks whether the IP interface of the port is located in the subnet of a pool You configure this criterion with the ip address command This section describes commands relevant for configuring the DHCP server Requirement The connected devices are configured so that they obtain the IPv4 address from a DHCP server 7 3 1 The show commands This section desc...

Page 289: ...rameters are specified the settings for all address bands are displayed Result The configuration of the DHCP server is displayed 7 3 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called ...

Page 290: ... command without parameter assignment ip dhcp server Result The DHCP server is enabled Further notes You disable the DHCP server with the no ip dhcp server command 7 3 2 2 no ip dhcp server Description With this command you disable the DHCP server on the device Requirement You are in the Global Configuration mode The command prompt is as follows cli config Network protocols 7 3 DHCP server SCALANC...

Page 291: ...n assigned If no reply is received the DHCP server can assign the IPv4 address Note With static assignments this check is not made Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment ip dhcp server icmp probe Result The function is enabled Further notes You disable the function with the no ip dhcp ser...

Page 292: ...the corresponding DHCPPOOL configuration mode The corresponding pool ID must have already been created 2 If you call the ip dhcp server pool command with the parameter vlan or interface type interface id an IPv4 address band with the next free pool ID is created and the specified interface assigned directly to it This is followed by a change to the DHCPPOOL configuration mode You then configure th...

Page 293: ...Module no and port no of the interface For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The ID of the addressed IPv4 address band is configured You are now in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Further notes You exit the DHCPPOOL configuration mode with the exit command...

Page 294: ... DHCPPOOL Configuration mode In the Global Configuration mode enter the ip dhcp server pool command to change to this mode If you exit the DHCPPOOL Configuration mode with the exit command you return to the Global Configuration mode If you exit the DHCPPOOL Configuration mode with the end command you return to the Privileged EXEC mode 7 3 3 1 lease time Description With this command you specify ho...

Page 295: ...is command you configure the IPv4 address band from which the DHCP client receives any IPv4 address Note Assignment of IP addresses When assigning IP addresses from a local address band the IPv4 address of the interface must be located within the IPv4 address band If this is not the case the interface does not assign any IPv4 addresses The IP address does not need to be within the IPv4 address ban...

Page 296: ...n be deleted Further notes You display the setting with the show ip dhcp server pools command You assign an IP address to an interface with the set interface command You configure the DHCP option 67 with the option value string command You configure the DHCP options 3 6 and 66 with the option command You delete the DHCP option with the no option command 7 3 3 3 Option IP address Description With t...

Page 297: ... Result The DHCP option is created Further notes You display the setting with the show ip dhcp server pools command You disable the IPv4 address band with the no pool enable command You delete the DHCP option with the no option command You configure the DHCP options 12 66 and 67 with the option value string command You configure the interface with the set interface command 7 3 3 4 option value str...

Page 298: ... pools command You delete the DHCP option with the no option command You configure the DHCP options 3 and 6 with the option IP address command You disable the IPv4 address band with the no pool enable command 7 3 3 5 no option Description With this command you delete the DHCP option with the specified number Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cl...

Page 299: ...pecify that this IPv4 address band will be used Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call the command without parameter assignment pool enable Result The setting is enabled Note If the IPv4 address band is enabled the following parameters can no longer be edited DHCP options option Port Range ports Relay Agent Inform...

Page 300: ...server bindings command Requirement You are in the DHCPPOOL configuration mode The command prompt is as follows cli config dhcp pool ID Syntax Call the command without parameter assignment no pool enable Result The setting is disabled Further notes You display the setting with the show ip dhcp server pools command You enable the setting with the pool enable command 7 3 3 8 ports Description With t...

Page 301: ...d of the interface Enter a valid interface 0 a b 0 c Port no of the interface For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The selected ports will be enabled Before the IPv4 address band can be used it still needs to be activated Further notes You disable the ports with the no ports command You display the setting with...

Page 302: ...u enable the ports with the ports command You display the setting with the show ip dhcp server pools command You enable the IPv4 address band with the pool enable command 7 3 3 10 relay information Description With this command you define that devices with a certain remote ID and circuit ID are assigned the IPv4 addresses from a specific address band If you create such an entry for an address band...

Page 303: ...ou cancel the assignment with the no relay information command You display the setting with the show ip dhcp relay information command You enable the IPv4 address band with the pool enable command 7 3 3 11 no relay information Description With this command you cancel the assignment of devices with a certain remote ID and circuit ID to IPv4 addresses from a specific address band Requirement You are...

Page 304: ...this command you specify the interface via which the IPv4 addresses are dynamically assigned Note Assignment of IP addresses When assigning IP addresses from a local address band the IPv4 address of the interface must be located within the IPv4 address band If this is not the case the interface does not assign any IPv4 addresses The IP address does not need to be within the IPv4 address band if re...

Page 305: ...l needs to be activated Further notes You display the setting with the show ip dhcp server pools command You enable the IPv4 address band with the pool enable command 7 3 3 13 static lease Description With this command you specify that devices with a certain MAC address or client ID are assigned to the preset IPv4 address Requirement The assignment has not yet been created You are in the DHCPPOOL ...

Page 306: ...s You display the setting with the show ip dhcp dhcp server bindings command You disable the IPv4 address band with the no pool enable command You delete the assignment with the no static lease command 7 3 3 14 no static lease Description With this command you delete the assignment of an IPv4 address to a MAC address Requirement You are in the DHCPPOOL configuration mode The command prompt is as f...

Page 307: ...d ee ff client id Keyword for a DHCP client ID string Freely definable DHCP client ID Enter the required designation Result The assignment is deleted Further notes You configure the assignment with the static lease command Network protocols 7 3 DHCP server SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 307 ...

Page 308: ... EXEC mode or in the Global Configuration mode The command prompt is as follows cli or cli Syntax Call the command without parameters show dhcp server Result The IP addresses of the DHCP servers are displayed Further notes With the ip dhcp server command you specify the IP addresses 7 4 1 2 show ip dhcp relay information Description This command displays the DHCP relay agent settings for all or fo...

Page 309: ...ration settings are displayed 7 4 2 Commands in the Global Configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configur...

Page 310: ...he IP address with the no ip dhcp server command You enable the DHCP Relay Agent with the service dhcp relay command You display the IP addresses with the show dhcp server command You display the settings with the show ip dhcp relay information command 7 4 2 2 no ip dhcp server Description With this command you delete the IP address of the DHCP server Requirement You are in the Global configuratio...

Page 311: ...hcp relay circuit id option Description The Circuit ID is a sub option of the DHCP Relay Information option The Circuit ID contains information about the origin of the DHCP packet With this command you specify the information contained in the Circuit ID The Circuit ID is encoded in the DHCP packet if the DHCP relay information option is enabled Requirement You are in the Global configuration mode ...

Page 312: ...he DHCP option 82 If the option is enabled prior to forwarding to the DHCP server information about the origin of the DHCP query is encoded in the packet If the DHCP server sends a response the information is removed again before forwarding to the DHCP client This information is only encoded in the data packet if the DHCP relay agent is enabled Requirement You are in the Global configuration mode ...

Page 313: ...yntax Call the command without parameter assignment no ip dhcp relay information option Result The option is disabled Further notes You enable the option with the ip dhcp relay information option command You can display the status of this option and other information with the show ip dhcp relay information command 7 4 2 6 ip dhcp relay common agent address Description With this command you enable ...

Page 314: ... the common agent address to the default value with the no ip dhcp relay common agent address interface command 7 4 2 7 no ip dhcp relay common agent address Description With this command you disable the use of a common agent address When the function is disabled the relay uses the address of the receiving port in DHCP requests Requirement You are in the Global Configuration mode The command promp...

Page 315: ...guration mode The command prompt is cli config Syntax Call up the command with the following parameters ip dhcp relay common agent address interface vlan vlan id 1 4094 interface type interface id The parameter has the following meaning Parameter Description Range of values note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 Default vlan1 interface type Type or spee...

Page 316: ...ut parameter assignment no ip dhcp relay common agent address interface Result The default value for the common agent address is used Further notes You define a common agent address with the ip dhcp relay common agent address interface command You enable the use of a common agent address with the ip dhcp relay common agent address command You disable the use of a common agent address with the no i...

Page 317: ... command You can display the status of this function and other information with the show ip dhcp relay informationcommand 7 4 2 11 no service dhcp relay Description This command disables the DHCP relay agent Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no service dhcp relay Result The DHCP Relay Agent is...

Page 318: ...f you exit the Interface Configuration mode of VLAN with the exit command you return to the Interface Configuration mode If you exit the Interface Configuration mode of VLAN with the end command you return to the Privileged EXEC mode 7 4 3 1 ip dhcp relay circuit id Description With this command you assign a Circuit ID to the interface Requirement The interface is an IP interface You are in the In...

Page 319: ...f VLAN The command prompt is as follows cli config if vlan Syntax Call the command without parameter assignment no ip dhcp relay circuit id Result The Circuit ID is removed Further notes You configure the Circuit ID with the ip dhcp relay circuit id command You display the IP addresses with the show dhcp server command You display the settings with the show ip dhcp relay information command 7 4 3 ...

Page 320: ...D with the no ip dhcp relay remote id command You display the IP addresses with the show dhcp server command You display the settings with the show ip dhcp relay information command 7 4 3 4 no ip dhcp relay remote id Description With this command you remove the device identifier Requirement The interface is an IPv4 interface You are in the Interface configuration mode The command prompt is as foll...

Page 321: ... id command You display the IP addresses with the show dhcp server command You display the settings with the show ip dhcp relay information command Network protocols 7 4 DHCP Relay SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 321 ...

Page 322: ...ipient is made using tags that are set when SNMP notifications are called Execute the following commands configure terminal snmp community index v2trapindex name public security v2secname snmp targetaddr trapringer param pav2c ipv4 192 168 1 254 taglist publictrapv2tag snmp targetparams pav2c user v2secname security model v2c message processing v2c snmp notify testnotify tag publictrapv2tag type t...

Page 323: ...Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show snmp Result The status information is displayed 7 5 1 2 show snmp community Description This command shows the details of the configured of SNMP communities Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network proto...

Page 324: ...mand prompt is as follows cli or cli Syntax Call the command without parameters show snmp engineID Result The SNMP identification number of the device is displayed 7 5 1 4 show snmp filter Description This command shows the configured SNMP filters Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 7 5 SNMP SCALANCE...

Page 325: ...lows cli or cli Syntax Call the command without parameters show snmp group Result The configured SNMP groups are displayed 7 5 1 6 show snmp group access Description This command shows the rights of the configured SNMP groups Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 7 5 SNMP SCALANCE XB 200 XC 200 XF 200B...

Page 326: ...s as follows cli or cli Syntax Call the command without parameters show snmp inform statistics Result The statistics of the Inform Messages are displayed 7 5 1 8 show snmp notif Description With this command you display the configured SNMP notification types Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 7 5 SN...

Page 327: ...as follows cli or cli Syntax Call the command without parameters show snmp targetaddr Result The configured SNMP target addresses are displayed 7 5 1 10 show snmp targetparam Description This command shows the configured SNMP target parameters Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 7 5 SNMP SCALANCE XB ...

Page 328: ... prompt is as follows cli or cli Syntax Call the command without parameters show snmp tcp Result The configuration for SNMP via TCP is displayed 7 5 1 12 show snmp user Description This command shows the settings for the SNMP user Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network protocols 7 5 SNMP SCALANCE XB 200 XC 200 XF...

Page 329: ...ew are displayed 7 5 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode wi...

Page 330: ...ed Further notes You disable the SNMP agent function with theno snmpagent command 7 5 2 2 no snmpagent Description With this command you disable the SNMP agent function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmpagent Network protocols 7 5 SNMP SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Com...

Page 331: ...command with the following parameters snmp agent version v3only all The parameters have the following meaning Parameter Description Range of values note v3only Only SNMPv3 queries are processed all All SNMP queries are processed Default all Result The setting is configured 7 5 2 4 snmp access Description With this command you configure the access to an SNMP group Requirement You are in the Global ...

Page 332: ...oauth No authentication priv Enables authentication and encryption read The data can be read Keyword ReadView none write The data can be read and written Keyword WriteView none notify Changes can be sent as a tag Keyword NotifyView none Storage Type Specifies whether the settings remain following a restart volatile The settings are lost after a restart nonvolatile The settings are retained after a...

Page 333: ...rompt is as follows cli config Syntax Call up the command with the following parameters no snmp access GroupName v1 v2c v3 auth noauth priv The parameters have the following meaning Parameter Description Range of values note GroupName Name of the group to which access is deleted max 32 characters Version Selects the version of the protocol used v1 v2c v3 Authentication Selects the authentication m...

Page 334: ...ame security SecurityName context Name volatile nonvolatile The parameters have the following meaning Parameter Description Range of values note CommunityIndex Index of the community max 32 characters name Keyword for the name of the community CommunityName Name of the community max 32 characters security Keyword for the security name SecurityName Security name max 32 characters context Keyword fo...

Page 335: ...he show snmp community command You show the status information of the SNMP communication with the show snmp command 7 5 2 7 no snmp community index Description With this command you delete the details of an SNMP community Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp community index ...

Page 336: ...ured SNMPv3 users to a different device If you enable this function and load the configuration of the device on another device configured SNMPv3 users are retained Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters snmp engineid migrate Result The SNMPv3 user migration is enabled Further notes You disable the ...

Page 337: ...ers no snmp engineid migrate Result The SNMPv3 user migration is disabled Further notes You enable the SNMPv3 user migration with the snmp engineid migrate command 7 5 2 10 snmp group Description With this command you configure the details of an SNMP group Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following ...

Page 338: ... apply Result The details of the group are configured Further notes You delete the details of an SNMP group with the no snmp group command You display the created SNMP groups with the show snmp group command You display the created SNMP user with the show snmp user command 7 5 2 11 no snmp group Description With this command you delete the details of an SNMP group Requirement You are in the Global...

Page 339: ...show snmp user command 7 5 2 12 snmp notify Description With this command you configure the details of the SNMP notifications Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters snmp notify NotifyName tag TagName type Trap Inform volatile nonvolatile The parameters have the following meaning Param...

Page 340: ...otifications with the show snmp notif command You display the configured SNMP target addresses with the show snmp targetaddr command 7 5 2 13 no snmp notify Description With this command you delete the details of the SNMP notifications Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no snmp no...

Page 341: ...getAddressName param ParamName ipv4 IPAddress timeout Seconds 1 1500 retries RetryCount 1 3 taglist TagIdentifier none volatile nonvolatile port integer 1 65535 The parameters have the following meaning Parameter Description Range of values TargetAddressName Name of the target address max 32 characters param Keyword for the parameter name ParamName Name of the destination address or the designatio...

Page 342: ...form messages integer Port number 1 65535 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If optional parameters are not specified when configuring the following defaults apply Parameter Default value taglist snmp Storage Type volatile port 162 Result The SNMP target address is configured Further notes You delete the SNMP target addre...

Page 343: ...e SNMP target address max 32 characters Result The SNMP target address is deleted Further notes You change the SNMP target address with the snmp targetaddr command You display the SNMP target address with the show snmp targetaddr command 7 5 2 16 snmp targetparams Description With this command you configure the SNMP target parameters Requirement You are in the Global configuration mode The command...

Page 344: ... v2c v3 Security level for v3 auth Authentication enabled no encryption enabled noauth No authentication enabled no encryption enabled priv Authentication enabled encryption enabled message processing Specifies which SNMP version is used for processing the messages and whether the settings remain following a restart SNMP version v1 v2c v3 Settings after the restart The settings are lost after a re...

Page 345: ...ax Call up the command with the following parameters no snmp targetparams ParamName The parameter has the following meaning Parameter Description Range of values note ParamName Name of the SNMP parameter max 32 characters Result The SNMP target parameters are deleted Further notes You change the SNMP target parameters with the snmp targetparams command You display settings of this function with th...

Page 346: ...y Description With this command you enable write access for SNMPv1 and SNMPv2 PDUs Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no snmp v1 v2 readonly Result Write access for SNMPv1 and SNMPv2 PDUs is enabled Further notes You block write access for SNMPv1 and SNMPv2 PDUs with the snmp v1 v2 readonly com...

Page 347: ...ation passwd Password for authentication max 32 characters If you enter user passwords for SNMPv3 via the CLI you cannot enter any special characters When using the WBM you can en ter special characters in user pass words for SNMPv3 priv DES Specifies that there is encryption Default No encryption passwd Value for the password of the encryption max 32 characters Storage type Specifies whether the ...

Page 348: ... command with the following parameters no snmp user UserName The parameter has the following meaning Parameter Description Range of values note UserName Name of the user max 32 characters Result The details of the SNMP user are deleted Further notes You change the settings with the snmp user command You display the configured users with the show snmp usercommand 7 5 2 22 snmp view Description With...

Page 349: ...ion of the MIB tree View type Specifies whether the filtered elements are used or excluded included Default excluded Storage type Specifies whether the settings remain following a restart volatile The settings are lost after a restart nonvolatile The settings are retained after a restart default If optional parameters are not specified when configuring the default values apply Result The SNMP view...

Page 350: ...he following meaning Parameter Description Range of values note ViewName Name of the view max 32 characters OIDTree Object ID Path information of the MIB tree Result The SNMP view is deleted Further notes You configure a view with the snmp view command You display the configured SNMP tree views with the show snmp viewtree command Network protocols 7 5 SNMP SCALANCE XB 200 XC 200 XF 200BA XP 200 XR...

Page 351: ...EC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events smtp server Result The configured e mail servers are displayed 7 6 1 2 show events sender email Description This command shows the configured e mail sender address Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Network prot...

Page 352: ...guration mode This section describes commands that you can call up in the EVENTS configuration mode In the Global configuration mode enter the events command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections If you exit the EVENTS configuration mode with the exit command you return to the Global config...

Page 353: ...ter a valid IPv4 unicast address receiver mail address Name of the recipient max 100 characters For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result An entry for the SMTP server is configured Further notes You delete an SMTP server entry with the no smtp server command 7 6 2 2 no smtp server Description With this command you delete ...

Page 354: ...nfigure an e mail server entry with the smtp server command 7 6 2 3 sender mail address Description With this command you configure the e mail name of the sender Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters sender mail address mail address The parameter has the following meaning Para...

Page 355: ...ents Syntax Call the command without parameters no sender mail address Result The e mail name of the sender is reset Further notes You configure the e mail name of the sender with the sender mail address You display the setting with the show events sender email command 7 6 2 5 send test mail Description With this command you send an e mail according to the currently configured SMTP settings Requir...

Page 356: ...nfigure an SMTP port Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters smtp port smtp port 1 65535 The parameter has the following meaning Parameter Description Range of values note smtp port Value for the SMTP port 1 65535 Default 25 Result An SMTP port is configured Network protocols 7 ...

Page 357: ...e in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call the command without parameters no smtp port Result The SMTP port is reset to the default value Further notes You configure the setting with the smtp port command You display the setting with the show smtp port command Network protocols 7 6 SMTP client SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Co...

Page 358: ...s Result The status of the HTTP server is displayed 7 7 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You ex...

Page 359: ... setting of this function and other information with the show ip http server statuscommand You deactivate HTTP on the device with the no ip http command 7 7 2 2 no ip http Description With this command you disable HTTP on the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters Network protocols 7 7 HTTP ...

Page 360: ...tting of this function and other information with the show ip http server statuscommand You enable HTTP with the ip http command Network protocols 7 7 HTTP server SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 360 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 361: ...mode The command prompt is as follows cli or cli Syntax Call the command without parameters show ip http secure server status Result The status cipher suite and version of the HTTPS server are displayed 7 8 1 2 show ssl server cert Description This command shows the SSL server certificate Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli ...

Page 362: ...rameters show ssl server cert Result The SSL server certificate is displayed Network protocols 7 8 HTTPS server SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 362 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 363: ...es note vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface ip address Shows the IP addresses of the entries in the ARP table mac address Shows the MAC addresses of the en tries in the ARP table summary Shows a summary of the entries in the ARP table ...

Page 364: ...ption With this command you configure the timeout setting of the ARP cache Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters arp timeout seconds 30 86400 The parameter has the following meaning Parameter Description Range of values note seconds Value for the timeout in seconds 30 86400 Default 3...

Page 365: ...onfiguration mode The command prompt is as follows cli config Syntax Call the command without parameters no arp timeout Result The timeout setting for the ARP cache is reset to the default value Further notes You change the timeout setting with the arp timeout command You can display the status of this function and other information with the show ip arp command Network protocols 7 9 ARP SCALANCE X...

Page 366: ...s for the SSH server are displayed 7 10 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global co...

Page 367: ... enabled on the device Further notes You disable the SSH protocol with the no ssh server command 7 10 2 2 no ssh server Description With this command you disable the SSH protocol on the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no ssh server Network protocols 7 10 SSH server SCALANCE XB 200 XC ...

Page 368: ... the device Further notes You enable the SSH protocol with the ssh server command Network protocols 7 10 SSH server SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 368 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 369: ...ols 8 In this part you will find sections relating to the topics GARP IGMP snooping and IGMP querying SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 369 ...

Page 370: ...quirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show forward all Result The entries of the GMRP forward all table are displayed 8 1 1 2 show forward unregistered Description With this command you display the entries of the GMRP forward unregistered table Requirement You are in the User EXE...

Page 371: ...lobal configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 1 2 1 gmrp Description With this command you enable the GMRP function for all or individual interfaces on the device Requirement You are in the Global configuration mode or You are in the Interface configuration mode The...

Page 372: ...iption With this command you disable the GMRP function for all or individual interfaces on the device Requirement You are in the Global configuration mode or You are in the Interface configuration mode The command prompt is as follows cli config cli config if Syntax Call the command without parameters no gmrp Result In the Global configuration mode The GMRP function is disabled on the device In th...

Page 373: ...s enabled on the device In the Interface configuration mode The GVRP function is enabled for this interface Further notes If you have enabled the GARP module you start GVRP explicitly with this command If you want to disable the function for a specific interface on the device use the no gvrp command You can display the status of this function and other information with the show vlan device info co...

Page 374: ...ed on the device In the Interface configuration mode The GVRP function is disabled for this interface Further notes If you want to enable the function for a specific interface on the device use the gvrp command You can display the status of this function and other information with the show vlan device info command Layer 2 management protocols 8 1 GARP SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300W...

Page 375: ...mmand with the following parameters show ip igmp snooping Vlan vlan id The parameters have the following meaning Parameter Description Range of values note Vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The information about IGMP snooping is display...

Page 376: ...addresses and interfaces refer to the section Addresses and interface names Page 36 Result The multicast forwarding entries are displayed 8 2 1 3 show ip igmp snooping globals Description This command shows an overview of the settings of IGMP snooping Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parame...

Page 377: ...n Range of values note Vlan Keyword for a VLAN connection vlan id Number of the addressed VLAN 1 4094 Group Address static dynamic For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The information about IGMP snooping is displayed 8 2 1 5 show ip igmp snooping mrouter Description This command shows the ports at which IGMP queriers...

Page 378: ...ormation about IGMP snooping for all or a selected VLAN Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show ip igmp snooping statistics Vlan vlan id The parameters have the following meaning Parameter Description Range of values note Vlan Keyword for a VLAN connection vlan...

Page 379: ... the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are...

Page 380: ...rompt is as follows cli config Syntax Call up the command with the following parameters ip igmp snooping version v1 v2 v3 The parameters have the following meaning Parameter Description v1 IGMPv1 v2 IGMPv2 v3 IGMPv3 Result The version of IGMP snooping used by the device is specified 8 2 2 2 ip igmp vlan snooping Description With this command you enable IGMP snooping for all VLANs Requirement You a...

Page 381: ... snooping for all VLANs Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no ip igmp vlan snooping Result IGMP snooping is disabled for all VLANs Further notes You enable IGMP snooping with the ip igmp vlan snooping command Layer 2 management protocols 8 2 IGMP snooping SCALANCE XB 200 XC 200 XF 200BA XP 200 ...

Page 382: ... Number of the addressed VLAN 1 4094 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select a VLAN the counters of all VLANs will be deleted Result The counters are deleted 8 2 2 5 ip igmp snooping switch ip Description With this command you configure the IP address of the source for IGMP snooping queries Requirement You...

Page 383: ...ist if no IGMP router control packets are received is known as the purge time With this command you configure this purge time for a port for a VLAN in seconds Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters ip igmp snooping port purge interval 130 1225 seconds The parameters have the following...

Page 384: ...purge interval Result The purge time is reset to the default value Further notes You configure the setting with the ip igmp snooping port purge interval command You can display the status of this function and other information with the show ip igmp snooping globalscommand 8 2 3 Commands in the VLAN configuration mode This section describes commands that you can call up in the VLAN Configuration mo...

Page 385: ...the following parameters ip igmp snooping static group mcast_addr ports interface type iface_list The parameter has the following meaning Parameter Description Range of values note static group Keyword for a static entry mcast_addr Value for a multicast address Enter a valid multicast address ports Keyword for a an interface description interface type Type or speed of the interface Enter a valid i...

Page 386: ...The parameter has the following meaning Parameter Description Range of values note static group Keyword for a static entry mcast_addr Value for a multicast address Enter a valid multicast address Result The static IGMP entry has been deleted Further notes You create a static IGMP entry with the ip igmp snooping static group command Layer 2 management protocols 8 2 IGMP snooping SCALANCE XB 200 XC ...

Page 387: ...e Privileged EXEC mode again 8 3 1 1 ip igmp snooping querier Description With this command you configure the IGMP snooping switch as querier Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ip igmp snooping querier As default the function is disabled Result The IGMP snooping switch is configured as querier ...

Page 388: ...meters no ip igmp snooping querier Result The configuration of the IGMP snooping switch as querier is deleted Further notes You configure the setting with the ip igmp snooping querier command You can display the status of this function and other information with the show ip igmp snooping command Layer 2 management protocols 8 3 IGMP querier SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command L...

Page 389: ...rox 200 ms HRP approx 300 ms Complex network topologies cannot be set up with this function Standby Two rings can be connected redundantly in each case via two links master slave This function is known as the standby connection With it the links of the interfaces of the master device are active and the links of the interfaces of the slave device are inactive Note Position of master and slave devic...

Page 390: ...eset the HRP counters Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear hrp counters Result The HRP counters have been reset 8 4 2 clear ring redundancy manager counters Description With this command you reset the following counters How often the device as redundancy manager switched to the active status i e opened...

Page 391: ...ters of the standby function Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear standby counter Result The standby counter is reset 8 4 4 The show commands This section describes commands with which you display various settings Layer 2 management protocols 8 4 Ring redundancy and standby connection SCALANCE XB 200 X...

Page 392: ...s follows cli or cli Syntax Call the command without parameters show hrp counters Result The counters are displayed 8 4 4 2 show linkcheck Description With this command you show the following information on the link check The ring ports on which you can enable Link Check The current status The statistics of sent and received Link Check frames of the monitored connections Requirement You are in the...

Page 393: ...rrent configurations are displayed 8 4 4 4 show ring redundancy manager counters Description With this command you display the following information How often the device as redundancy manager switched to the active status i e opened its blocked port because it no longer receives its sent RM frames The maximum delay time of the test frames of the redundancy manager Requirement You are in the User E...

Page 394: ...in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 4 5 1 ring redundancy configuration Description With this command you change to the Redundancy Configuration mode Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters ring...

Page 395: ...bserver no longer enables its port automatically The ring port remains permanently in the blocking status This is signaled by the error LED and a message text After the errors have been eliminated you can enable the port again with this command and the parameter restart Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with ...

Page 396: ...ring redundancy hrpobserver Result The observer is disabled Further notes You enable the observer with the ring redundancy hrpobserver command You can display the status of this function and other information with the show ring redundancy command 8 4 5 4 ring redundancy mode Description With this command you enable the ring redundancy function on a device Requirement You are in the Global configur...

Page 397: ...l as client hrpclient Enables ring redundancy with the HRP pro tocol as client hrpmanager Enables ring redundancy with the HRP pro tocol in ring redundancy manager mode Result The ring redundancy function is enabled and the redundancy mode is selected Further notes You disable the ring redundancy function with the no ring redundancy command 8 4 5 5 no ring redundancy Description With this command ...

Page 398: ...bal configuration mode The command prompt is cli config Syntax Call the command without parameters ring redundancy standby Result The standby function is enabled Further notes You disable the setting with the no ring redundancy standby command You can display the status of this function and other information with the show ring redundancycommand Layer 2 management protocols 8 4 Ring redundancy and ...

Page 399: ...dundancycommand 8 4 6 Commands in the redundancy configuration mode This section describes commands that you can call up in the Redundancy Configuration mode In the Global Configuration mode enter the ring redundancy configuration command to change to this mode If you exit the Redundancy Configuration mode with the exit command you return to the Global Configuration mode If you exit the Redundancy...

Page 400: ...nection wait 1 min before you enable Link Check for the next connection section Requirement You cannot enable Link Check on ports with 10 Gbps You can only enable the Link Check function with optical ring ports of an HRP or MRP ring Link Check must be enabled on two neighboring devices connection partners within an HRP or MRP ring The ring ports on which you enable Link Check must be connected tog...

Page 401: ...f addresses and interfaces refer to the section Addresses and interface names Page 36 Result Link Check is activated on the port Further notes You disable the function with the no linkcheck command You can display the status of this function and other information with the show linkcheck command With the event config command you can configure so that you are informed of a status change by a message...

Page 402: ...dancy manager or ring redundancy client on a device Redundancy manager In the normal status the network structure is operated via port The other port is only used by the ring redundancy manager for checking If there is a disruption the two parts of the ring operate via both ports Redundancy client The client forwards all frames of the redundancy manager to the ring ports Requirement The ports are ...

Page 403: ...rfaces Result The ports of the ring redundancy are configured 8 4 6 4 standby connection name Description With this command you assign a name to the standby connection on the device Requirement You are in the Redundancy configuration mode The command prompt is as follows cli config red Syntax Call up the command with the following parameters standby connection name string 32 The parameter has the ...

Page 404: ...deleted 8 4 6 6 standby force master Description With this command you enable the standby force master function Requirement HRPis enabed You are in the Redundancy configuration mode The command prompt is cli config red Syntax Call the command without parameters standby force master Result The standby force master function is enabled Layer 2 management protocols 8 4 Ring redundancy and standby conn...

Page 405: ...ll the command without parameters no standby force master Result The standby force master function is disabled Further notes You enable the setting with the standby force master command You can display the status of this function and other information with the show ring redundancycommand 8 4 6 8 standby port Description With this command you configure and enable the port for a standby connection o...

Page 406: ...and interface names Page 36 Result The port for a standby connection is configured and enabled Further notes You disable the setting with the no standby port command You can display the status of this function and other information with the show ring redundancy command 8 4 6 9 no standby port Description With this command disable the port for a standby connection on a device Requirement You are in...

Page 407: ... Description With this command you enable the Wait for standby partner function on the device A standby connection is enabled only after the standby master and the standby slave as well as their standby partners have established a connection This ensures that the redundant connection is really available before communication via a standby connection is enabled As default this function is enabled Re...

Page 408: ...dby slave Requirement You are in the Redundancy configuration mode The command prompt is as follows cli config red Syntax Call the command without parameters no standby wait for partner Result The Wait for standby partner function is disabled Layer 2 management protocols 8 4 Ring redundancy and standby connection SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 408 Configurat...

Page 409: ...mmand 8 5 1 The show commands VLAN bridge This section describes commands with which you display various settings 8 5 1 1 show mac address table Description This command shows the table with the static and dynamic unicast MAC addresses and multicast MAC addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the ...

Page 410: ...If you do not select any parameter from the parameter list the entries are displayed for all available interfaces Result The entries of the MAC addresses table are displayed 8 5 1 2 show mac address table dynamic unicast Description This command shows the table with the dynamic unicast MAC addresses assigned by the device Requirement You are in the User EXEC mode or in the Privileged EXEC mode The...

Page 411: ... Page 36 If you do not select any parameter from the parameter list the entries are displayed for all available interfaces Result The dynamic unicast MAC addresses are displayed 8 5 1 3 show mac address table static unicast Description This command shows the table with the static unicast MAC addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as...

Page 412: ...e displayed for all available interfaces Result The static unicast MAC addresses are displayed 8 5 1 4 show unicast block config Description This command shows the unicast blocking settings for ports Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show unicast block config ...

Page 413: ...ivileged EXEC mode again 8 5 2 1 mac address table static unicast Description With this command you generate a static unicast MAC address entry in the forwarding database Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters mac address table static unicast aa aa aa aa aa aa vlan vlan id 1 4094 inte...

Page 414: ...database is generated Further notes With the show mac address table static unicast command you display the list of configured entries With the no mac address table static unicast command you delete an entry 8 5 2 2 no mac address table static unicast Description With this command you delete a static unicast MAC address entry from the forwarding database Requirement You are in the Global configurat...

Page 415: ...le static unicast command you create an entry 8 5 3 The show commands Transparent Bridge This section describes commands with which you display various settings 8 5 3 1 show dot1d mac address table Description This command shows the table with the static and dynamic unicast entries and the dynamic multicast entries Requirement You are in the Privileged EXEC mode The command prompt is as follows cl...

Page 416: ...unicast Description This command shows the table with the static unicast MAC addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show dot1d mac address table static unicast address aa aa aa aa aa aa interface interface type interface id The parameters have the followi...

Page 417: ... The parameters have the following meaning Parameter Description Range of values note port Keyword for a port description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of interfaces and addresses refer to the section Addresses and interface names Page 36 Result The unicast blocking settings for por...

Page 418: ...nterface type 0 a b 0 c port channel interface list The parameters have the following meaning Parameter Description Range of values note aa aa aa aa aa aa MAC address of the interface interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface port channel Keyword for a port channel conne...

Page 419: ... address table static unicast aa aa aa aa aa aa The parameters have the following meaning Parameter Description Range of values note aa aa aa aa aa aa MAC address of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The entry is deleted from the forwarding database Further notes With the show dot1d mac address table...

Page 420: ...ommands VLAN bridge This section describes commands with which you display various settings 8 6 1 1 show mac address table Description This command shows the table with the static and dynamic unicast MAC addresses and multicast MAC addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the follo...

Page 421: ...arameter list the entries are displayed for all available interfaces Result The entries of the MAC addresses table are displayed 8 6 1 2 show mac address table dynamic multicast Description This command shows the table with the dynamic multicast MAC addresses assigned by the device Note The device does not learn any reserved multicast addresses see also RFC 5771 Requirement You are in the User EXE...

Page 422: ... 36 If you do not select any parameter from the parameter list the entries are displayed for all available interfaces Result The dynamic multicast MAC addresses are displayed 8 6 1 3 show mac address table static multicast Description This command shows the table with the static multicast MAC addresses Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is a...

Page 423: ...played for all available interfaces Result The static multicast MAC addresses are displayed 8 6 1 4 show multicast block config Description This command shows the multicast blocking settings for ports Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show multicast block conf...

Page 424: ... the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 8 6 2 1 mac address table static multicast Description With this command you generate a static multicast MAC address entry in the forwarding database Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following ...

Page 425: ...ses and interface names Page 36 Result The entry in the forwarding database is generated Further notes With the show mac address table static multicast command you display the list of configured entries With the no mac address table static multicast command you delete an entry 8 6 2 2 no mac address table static multicast Description With this command you delete a static multicast address Requirem...

Page 426: ...y various settings 8 6 3 1 show dot1d mac address table Description This command shows the table with the static and dynamic unicast entries and the dynamic multicast entries Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameters show dot1d mac address table address aa aa aa aa aa aa interface interface type int...

Page 427: ... as follows cli or cli Syntax Call up the command with the following parameters show dot1d mac address table static multicast address aa aa aa aa aa aa interface interface type interface id The parameters have the following meaning Parameter Description Range of values note address Keyword for a MAC address aa aa aa aa aa aa MAC address interface Keyword for a an interface description interface ty...

Page 428: ...s of addresses and interfaces refer to the section Addresses and interface names Page 36 If no parameters are specified the settings for all ports are displayed Result The multicast blocking settings for ports are displayed 8 6 4 Commands in the global configuration mode Transparent Bridge This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode...

Page 429: ...ription Range of values note aa aa aa aa aa aa MAC address of the interface interface Keyword for a an interface description interface type Type of interface Specify a valid interface interface id Module no and port no of the interface port channel Specifies the name of a port channel 1 8 forbidden ports Keyword for the interface description of the blocked ports For information on names of address...

Page 430: ...a aa aa The parameter has the following meaning Parameter Description Range of values note aa aa aa aa aa aa MAC address of the interface For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the default value is used Result The entry is deleted from the forwarding database Further...

Page 431: ...spective Local Global Position Inside An actual IP address that is as signed to a device in the internal network This address cannot be reached from the external network An IP address at which an internal device can be reached from the external network Outside An actual IP address that is assigned to a device in the external network Since only inside addresses are implemented there is no distincti...

Page 432: ...ination IP address via the NAT device the NAT device enters its own external source IP address in the header of these forwarded frames Since the forwarded frames have the same external source IP address the NAT device assigns the frames to the devices using a different port number If a device from the external network wants to use a service in the internal network the translation list for the stat...

Page 433: ... Description This command shows static port translations NAPT for an interface with a service Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show ip nat service Result The information is displayed Further notes You configure static port translations for an interface with the i...

Page 434: ... configure static port translations for an interface with a port range with the ip nat service portrange command You delete a configuration with the no ip nat service portrange command 9 1 1 4 show ip nat summary Description This command shows the NAT NAPT configuration of the interfaces Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli o...

Page 435: ...ranslations or active connections depending on the selected parameter Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show ip nat interface static translations The parameters have the following meaning Parameter Description Range of values note interface Shows the configura...

Page 436: ...al configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 9 1 2 1 ip nat Description With this command you enable NAT NAPT for the entire device Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameter...

Page 437: ...re device with the ip nat command You display the current configuration with the command 9 1 2 3 ip nat timeout Description With this command you define periods of time after which existing connections are deleted if there is no data exchange Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters Lay...

Page 438: ...sult The time periods are defined Further notes You can reset the time periods to the default with the ip nat timeout command You display the current configuration with the command 9 1 2 4 no ip nat timeout Description With this command you reset periods of time after which existing connections are deleted back to the default value Requirement You are in the Global Configuration mode The command p...

Page 439: ...ious command sets are available In the Global configuration mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode w...

Page 440: ...ed IP interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameter assignment no ip nat Result NAT is deactivated for the selected IP interface Further notes You enable NAT for the selected IP interface with the ip nat command You display the current configuration with the show ip nat summary command Laye...

Page 441: ... the selected IP interface with the no ip nat napt command You display the current configuration with the show ip nat summary command 9 1 3 4 no ip nat napt Description With this command you disable NAPT for the selected IP interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameter assignment no ip nat ...

Page 442: ...ses Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters ip nat pool inside global ip mask The parameters have the following meaning Parameter Description Range of values note inside global ip Start address for the dynamic assign ment of addresses at which devices will be reachable from exter...

Page 443: ...addresses at which devices are reachable from external Enter a valid IPv4 address Result A pool is deleted Further notes You configure a dynamic address translation with the ip nat pool command You display the current configuration with the show ip nat command 9 1 3 7 ip nat service Description With this command you configure static port translations NAPT for an interface with a service Requiremen...

Page 444: ...alid auth dns ftp pop3 pptp smtp telnet http nntp snmp other inside global port number Port that will be assigned to the in side global address If you have selected the other service you can enter a port If you have selected another service a port will be specified Protocol Protocol for which the port transla tion is valid tcp udp any description Description for the port translation Result The sta...

Page 445: ... Enter a valid IPv4 address inside local port number Port that is assigned to the inside local address Protocol Protocol for which the port transla tion is valid tcp udp any all Deletes all port translations Result The static port translation with a service is deleted Further notes You configure static port translations with a service for an interface with the ip nat service command You configure ...

Page 446: ...d tcp udp any inside local start port no Start port that will be assigned to the in side local address The port range you define will also be used for the port of the inside global address A port range can only be translated to the same port range inside local end port no End port that will be assigned to the in side local address description Description for the port translation Result The static ...

Page 447: ...valid IPv4 address Protocol Protocol for which the port translation is valid tcp udp any inside local start port no Start port that is assigned to the inside local address inside local end port no End port that is assigned to the inside local address Result The static port translation with a port range is deleted Further notes You configure static port translations for an interface with a port ran...

Page 448: ...l ip The parameters have the following meaning Parameter Description Range of values note inside local ip Actual address of the device that should be reachable from external Enter a valid IPv4 address inside global ip Address at which the device will be reachable from external Enter a valid IPv4 address Result A static address translation is defined Further notes You delete a static address transl...

Page 449: ...alues note inside local ip Actual address of the device that is reachable from external Enter a valid IPv4 address Result A static address translation is deleted Further notes You configure a static address translation with the ip nat static command You display the current configuration with the show ip nat command Layer 3 functions 9 1 NAT SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command L...

Page 450: ...forwards the frame to the corresponding port in the VLAN The IE switch only knows VLANs with which it is directly connected Connected With Single Hop Inter VLAN Routing it is therefore only possible to route between two local IP interfaces 9 2 1 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode en...

Page 451: ...mmand you enable the Single Hop Inter VLAN Routing function Requirement You are in the Global Configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no ip single hop inter vlan routing Result The function is disabled Further notes You enable the Single Hop Inter VLAN Routing function with the ip single hop inter vlan routing command Layer 3 functi...

Page 452: ...Layer 3 functions 9 2 Single Hop Inter VLAN Routing SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 452 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 453: ...s part contains the sections describing the functions for controlling and balancing network load SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 453 ...

Page 454: ...ers show rate limit output interface interface type interface id The parameters have the following meaning Parameter Description Range of values note interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface For information on names of addresses and interfaces refer to the section Addre...

Page 455: ... Description With this command you configure and enable the data rate in Kbps for limiting the outgoing data stream of the interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters rate limit output rate value The parameters have the following meaning Parameter Description Range of value...

Page 456: ...put Result The limitation of the outgoing data stream of the interface with the data rate is disabled Further notes You enable the function with the rate limit output command 10 1 2 3 storm control Description With this command you enable data rate for limiting the incoming data stream of the interface for broadcast multicast or unknown unicast packets Note Applications Storm control is only suppo...

Page 457: ... default value for the storm control level is 0 Kbps The incoming data stream is not limited To have the incoming data stream limited configure the threshold value with the storm control level command Result The storm control function is enabled Further notes You enable the function with the no storm controlcommand You configure the threshold value for the storm control function with the storm con...

Page 458: ...meters it is disabled for all types of transmission Result The storm control function is disabled Further notes You enable the function with the storm control command 10 1 2 5 storm control level Description With this command you configure the value for the storm control function in Kbps Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax C...

Page 459: ...o the default with the no storm control level command 10 1 2 6 no storm control level Description With this command you reset the value for the storm control function to the default value The default value for the storm control level is 0 Kbps The incoming data stream is not limited Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call t...

Page 460: ...e value for the storm control function with the storm control level command Load control 10 1 Rate control SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 460 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 461: ...d in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 10 2 1 1 mac address table static multicast Description With this command you generate a static multicast MAC address entry in the forwarding database Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Cal...

Page 462: ...names Page 36 Result The entry in the forwarding database is generated Further notes With the show mac address table static multicast command you display the list of configured entries With the no mac address table static multicast command you delete an entry 10 2 1 2 no mac address table static multicast Description With this command you delete a static multicast MAC address entry from the forwar...

Page 463: ...tries With the mac address table static multicast command you create an entry 10 2 1 3 mac address table static unicast Description With this command you generate a static unicast MAC address entry in the forwarding database Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters mac address table sta...

Page 464: ...nd interface names Page 36 Result The entry in the forwarding database is generated Further notes With the show mac address table static unicast command you display the list of configured entries With the no mac address table static unicast command you delete an entry 10 2 1 4 no mac address table static unicast Description With this command you delete a static unicast MAC address entry from the f...

Page 465: ...ridge This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged E...

Page 466: ...nterface description of the blocked ports For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the default value is used Result The entry in the forwarding database is generated Further notes With the show dot1d mac address table static multicast command you display the list of co...

Page 467: ...try is deleted from the forwarding database Further notes With the show dot1d mac address table static multicast command you display the list of configured entries With the mac address table static multicast command you create an entry 10 2 2 3 mac address table static unicast Description With this command you generate a static unicast MAC address entry in the forwarding database Requirement You a...

Page 468: ...rfaces refer to the section Addresses and interface names Page 36 Result The entry in the forwarding database is generated Further notes With the show dot1d mac address table static unicast command you display the list of configured entries With the no mac address table static unicast command you delete an entry 10 2 2 4 no mac address table static unicast Description With this command you delete ...

Page 469: ... enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 10 2 ...

Page 470: ...e ingress filter Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport ingress filter Result The ingress filter is deactivated Further notes You enable the filter with the switchport ingress filter command You can display the status of the ingress filter and other settings with the show vlan p...

Page 471: ...time after which the MAC addresses are removed from the address table Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show mac address table aging time Result The time is displayed 10 3 1 2 show mac address table aging status Description This command shows whether or not MAC aging is ena...

Page 472: ...tion mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 10 3 2 1 mac address table aging time Description With this command you configure the aging of a dynamically learned entry in the MAC address list Requirement You are in the Global configuration mode The command prompt is as follows cli ...

Page 473: ...ss table aging time command You display the setting with the show mac address table aging time command 10 3 2 2 no mac address table aging time Description With this command you reset the value for the aging of a dynamically learned entry in the MAC address list to the default value Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the com...

Page 474: ...command prompt is as follows cli config Syntax Call the command without parameters mac address table aging Result The Aging function is enabled Further notes You configure the time with the mac address table aging time command You disable the Aging function with the no mac address table aging command 10 3 2 4 no mac address table aging Description With this command you disable the Aging function R...

Page 475: ...Result The Aging function is disabled Further notes You enable the Aging function with the mac address table aging command Load control 10 3 Dynamic MAC aging SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 475 ...

Page 476: ...rompt is as follows cli or cli Syntax Call up the command with the following parameters show flow control interface interface type interface id The parameters have the following meaning Parameter Description Range of values note interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface ...

Page 477: ...ration mode with the end command you return to the Privileged EXEC mode 10 4 2 1 flowcontrol Description The flow control function monitors a connection at the receiving end to make sure that not more data is received than can be processed If flow control detects a threat of data overflow the partner at the sending end is sent a signal to stop transmitting With this command you configure the flow ...

Page 478: ...with flow control enabled the packet is not discarded if there is overflow If flow control is enabled only on the input port the packet can be discarded if there is overload off Disables the function Result The settings for the flow control function are configured Further notes You can display the status of this function with the show flow control command You disable Auto negotiation with the no n...

Page 479: ...n the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show qos agent priority Result The current priority of the agent frames is displayed Further notes You configure the priority of agent frames with the agent priority command 10 5 1 2 show qos broadcast priority Description This command shows the current priorit...

Page 480: ...cription This command shows the assignment table of CoS priorities to queues Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show qos cos map Result The assignment table of CoS priorities to queues is displayed Further notes You configure the assignment of the CoS priority to a queue wit...

Page 481: ...enable the the Cos reassignment with the cos remap enable command You change the priority with which frames are sent cos remapcommand 10 5 1 5 show qos dscp map Description This command shows the assignment table of DSCP priorities to queues Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter...

Page 482: ...cli Syntax Call the command without parameters show qos scheduling mode Result The method with which the frames are processed is displayed Further notes You configure the method for deciding the processing order with the scheduling mode command 10 5 1 7 show qos trust mode Description This command shows port by port the method according to which packets to be forwarded are prioritized Requirement ...

Page 483: ...hat can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 10 5 2 1 qos Description With this command you change to the QOS configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the...

Page 484: ...ueue according to the the cos map command 2 If the first condition is not met the switch checks whether the frame contains a VLAN tag If the second condition is met the switch checks whether the priority ia enabled priority enable If priority is enabled the switch sorts the frame into a queue according to the the cos map command 3 If the second condition is also not met the frames are further proc...

Page 485: ...priority of agent frames is configured Further notes You reset the priority of agent frames to the default value with the no agent priority command You display the current priority of agent frames with the show qos agent priority command You configure the assignment of the CoS priority to a queue with the cos map command 10 5 3 2 no agent priority Description With this command you reset the priori...

Page 486: ...h this command you specify the priority of broadcast frames The switch sorts incoming frames into a queue according to this prioritization Requirement You are in the QOS configuration mode The command prompt is as follows cli config qos Syntax Call up the command with the following parameters broadcast priority integer 0 7 The parameter has the following meaning Parameter Description Range of valu...

Page 487: ...as follows cli config qos Syntax Call the command without parameters broadcast priority Result The priority of broadcast frames has been reset to the default value Further notes You change the priority of broadcast frames with the broadcast priority command You display the current priority of broadcast frames with the show qos broadcast priority command You configure the assignment of the CoS prio...

Page 488: ...ty is assigned 1 4 Default 2 The CoS priorities are assigned to the queues as follows in the default setting COS 0 Queue 2 COS 1 Queue 1 COS 2 Queue 1 COS 3 Queue 2 COS 4 Queue 3 COS 5 Queue 3 COS 6 Queue 4 COS 7 Queue 4 Result The assignment table for service classes is configured Further notes You display the current assignment table of CoS priorities to queues with the show qos cos map command ...

Page 489: ...or speed of the interface Enter a valid interface interface id Module no and port no of the interface prio Priority with which a frame is received 0 7 remapped prio Priority with which a frame will be sent 0 7 Result The send priority has been changed Further notes You reset the send priority to the default value with the no cos remap command You enable the CoS reassignment with the cos remap enab...

Page 490: ...eassignment with the cos remap enable command You disable the the CoS reassignment with the no cos remap enable command You display the assignment table for the send priority with the show qos cos remap command 10 5 3 8 cos remap enable Description With this command you enable the CoS reassignment function Depending on the priority when receiving a frame you can change the priority with which it i...

Page 491: ...cription With this command you disable the CoS reassignment function Requirement You are in the QOS configuration mode The command prompt is as follows cli config qos Syntax Call the command without parameters no cos remap enable Result The CoS reassignment function is disabled Further notes You enable the function with the cos remap enable command You change the priority with which frames are sen...

Page 492: ...escription Range of values note dscp Priority 0 63 queue Keyword for a queue queue Queue to which this priority is assigned 1 4 The DSCP priorities are assigned to the queues as follows in the default setting DSCP codes 0 15 Queue 1 DSCP codes 16 31 Queue 2 DSCP codes 32 47 Queue 3 DSCP codes 48 63 Queue 4 Result The assignment table for DSCP codes is configured Further notes You display the curre...

Page 493: ...e id Module no and port no of the interface untrust The switch sorts the incoming frames into a queue according to the priori tization of the receiving port If there is a DSCP value in the IP header this is ignored If a VLAN tag exists it is replaced by the priority value of the receiving port cos If an incoming frame contains a VLAN tag the switch sorts it into a queue according to this prioritiz...

Page 494: ...he frame into a queue according to the prioritization of the receiving port For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The prioritization for forwarding frames is configured Further notes You configure the assignment of the CoS priority to a queue with the cos map command You configure the assignment of the DSCP priority t...

Page 495: ...re are frames with high priority in the queue frames with a lower priority will be pro cessed occasionally Result The method for the processing order of the frames is specified Further notes You display the method for the processing order of the frames with the show qos scheduling mode command Load control 10 5 Service classes SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface ...

Page 496: ...Load control 10 5 Service classes SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 496 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 497: ...ation 11 This part contains the sections that describe the access rights and authentication methods SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 497 ...

Page 498: ...d Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters show password policy Result The currently valid password policy is displayed Further notes You configure the password policy with the password policy command 11 1 1 2 show users Description This command shows the logged in CLI users Security and authentication 11 1 User...

Page 499: ...s the created users Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters show user accounts Result The created users are shown 11 1 2 change password Description With this command you change the password of the logged in user Security and authentication 11 1 User management SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Co...

Page 500: ...d policy is cur rently being used Result The password is changed Note Changing the password in Trial mode Even if you change the password in Trial mode this change is saved immediately Further notes You create a user with the user account command You delete a user with the no user account command You show the created users with the show user accounts command You configure the password policy with ...

Page 501: ...can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 11 1 4 1 password policy Description With this command you specify which password policy will be used when assigning new passwords Requirement You are in the Global configuration mode The command prom...

Page 502: ... setting with the show password policy command 11 1 4 2 user account Description With this command you specify a new user You can also change the password role of an already created user Requirement The user is logged in with the admin role You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters user account stri...

Page 503: ... letter At least 1 special character At least 1 number privilege Keyword for the role of the user user The user only has read rights admin The user can create edit or delete entries Result The new user has been created or the password role has been changed Note User name cannot be changed After creating a user the user name can no longer be modified because the user name is used for encryption of ...

Page 504: ...r Description Range of values note user name User name Enter a valid user name Result The user has been deleted Further notes You create a user with the user account command You show the created users with the show user accounts command 11 1 4 4 username Description With this command you change the password of the factory set default user admin Requirement You are in the Global Configuration mode ...

Page 505: ...ssword must meet the following conditions Password length at least 8 characters at least 1 uppercase letter at least 1 special character at least 1 number Result The password is changed Note Changing the password in Trial mode Even if you change the password in Trial mode this change is saved immediately Further notes You show the created users with the show user accounts command You can also chan...

Page 506: ...stics Description This command shows the connection statistics from the RADIUS client to the RADIUS server Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters show radius statistics Result The connection statistics are displayed 11 2 1 2 show radius server Description This command shows the RADIUS server configuration Requ...

Page 507: ...s commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 11 2 2 1 log...

Page 508: ...tion is performed only when the RADIUS server can not be reached in the network Result The authentication is made according to the selected parameter Further notes You disable the authentication via a RADIUS server with the no login authentication command You can display the status of this function and other information with the show device information command 11 2 2 2 no login authentication Desc...

Page 509: ...he command with the following parameters radius server ipv4 ipv4 address auth port portno 1 65535 retransmit 1 254 key secret key string primary login dot1x login dot1x test The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IPv4 address ipv4 address Value for the IPv4 address of the Syslog server Enter a valid IPv4 address auth port Keyword fo...

Page 510: ...tion Addresses and interface names Page 36 If optional parameters are not specified when configuring the default values apply Note Primary server In a network only one RADIUS server can be selected as the primary server If you select a RADIUS server as the primary server this replaces the server that previously had the role of primary server Result The entry for a connection between the RADIUS cli...

Page 511: ...ry server For information on addresses and interfaces refer to the section Addresses and interface names Page 36 Result The entry for a connection between the RADIUS client and a server or the identification as primary server is deleted Further notes You configure the connection of a RADIUS client to a server with the radius server command You show the configuration of a RADIUS server on the clien...

Page 512: ...s have the following meaning Parameter Description Range of values note ip source Keyword for the network or host address ip address Value for an IP address specify a valid IP address For information on identifiers of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The information about the configuration of the authorized managers is displayed 11 3 2 Comm...

Page 513: ...pt is as follows cli config Syntax Call the command without parameter assignment authorized manager Result The authorized manager is activated Further notes You disable the function with the no authorized manager command 11 3 2 2 no authorized manager Description With this command you disable the authorized manager Requirement You are in the Global configuration mode The command prompt is as follo...

Page 514: ...ess subnet mask prefixlength 0 32 interface interface type 0 a b 0 c interface type 0 a b 0 c vlan a b or a b or a b c d service snmp telnet http https ssh The parameters have the following meaning Parameter Description Range of values note ip address Specifies the network or the IP address for which the IP manager is authorized Enter a valid IPv4 address or a network subnet mask Subnet mask that ...

Page 515: ...eral options snmp telnet http https ssh For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 The IP address 0 0 0 0 means any manager If optional parameters are not specified when configuring the manager is authorized for all services Note Configuration of the first entry As long as the list of authorized managers is empty access to the sy...

Page 516: ...ized manager is allowed to access the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters no authorized manager ip source ip address subnet mask prefix length 0 32 The parameters have the following meaning Parameter Description Range of values note ip address Specifies the network or the IP...

Page 517: ...otocols via which an authorized manager is allowed to access the device with the authorized manager ip source command You show the information about the configuration of the authorized managers with the show authorized manager command Security and authentication 11 3 Management Access Control List SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C...

Page 518: ...hows whether or not the learning of MAC entries is enabled or locked on an interface Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show lock port interface type interface id The parameters have the following meaning Parameter Description Range of values note interface typ...

Page 519: ...then in the Privileged EXEC mode again 11 4 2 1 clear all static unicast Description With this command you delete all static unicast MAC address entries from the MAC address table Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters clear all static unicast Result The static unicast MAC address entries are delet...

Page 520: ...ion mode enter the interface command to change to this mode Commands relating to other topics that can be called in the interface configuration mode can be found in the relevant sections If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mo...

Page 521: ...tchport lock Description With this command you enable the learning of MAC addresses Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no switchport lock Result The learning of MAC addresses is enabled Further notes You block the learning of MAC addresses with the switchport lock command Security and aut...

Page 522: ...his command you start automatic learning During automatic learning the aging timer is disabled for all learned addresses Requirement You are in the AUTOLEARN mode The command prompt is as follows cli config auto learn Syntax Call the command without parameters start Result The learned MAC addresses are entered in the port database with the aging time 0 The entries are NOT deleted when the MAC Addr...

Page 523: ... auto learn Syntax Call the command without parameters stop Result Automatic learning is stopped and all learned entries are converted to static entries Further notes You start automatic learning with the start command Security and authentication 11 4 Port Access Control List Locked Ports SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G89...

Page 524: ...have the following meaning Parameter Description Range of values note interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface statistics interface Keyword for the display of the statistical data of the dot1x Authenticator for an interface interface type Type or speed of the interface ...

Page 525: ... port is displayed 11 5 1 3 show dot1x mac auth mac info Description This command shows the MAC addresses for which MAC authentication is enabled Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show dot1x mac auth mac info Result A list of the MAC addresses is displayed Security and auth...

Page 526: ...ration mode The command prompt is as follows cli config Syntax Call the command without parameters dot1x guest vlan Result The guest VLAN function is enabled for the device Further notes You also still need to enable the guest VLAN function for every port intended to use this function You do this with the dot1x guest vlan command in the Interface configuration mode You disable the function with th...

Page 527: ...mation with the show dot1x command 11 5 2 3 dot1x mac auth Description With this command you enable MAC authentication for the device Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters dot1x mac auth Result MAC authentication is enabled for the device Security and authentication 11 5 Port Based Network Access ...

Page 528: ... the command without parameters no dot1x mac auth Result MAC authentication is disabled for the device Further notes You enable the function with the dot1x mac auth command You display this setting and other information with the show dot1x command 11 5 3 Commands in the interface configuration mode This section describes commands that you can call up in the interface configuration mode Depending o...

Page 529: ...mode The command prompt is as follows cli config if Syntax Call the command without parameters dot1x guest vlan Result The guest VLAN function is enabled for a port Further notes You also need to enable the guest VLAN function for the device You do this with the dot1x guest vlan command in the Global configuration mode You disable the function with the no dot1x guest vlan command You display this ...

Page 530: ...ring authentication a port is assigned to a VLAN dynamically using this function assignment using the VLAN ID or the VLAN name is possible Configure the following values on the RADIUS server Tunnel Type VLAN Tunnel Medium Type IEEE 802 Tunnel Private Group Id VLAN ID or VLAN Name The IE switch distinguishes as follows VLAN ID The RADIUS server transfers a numeric string for the parameter Tunnel Pr...

Page 531: ...u display this setting and other information with the show dot1x command 11 5 3 4 no dot1x guest vlan vlan id Description With this command the guest VLAN ID is reset to the default value 1 Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no dot1x guest vlan vlan id Result The ID of the guest VLAN has ...

Page 532: ...mmand with the following parameters dot1x guest vlan reset mac aa aa aa aa aa aa The parameter has the following meaning Parameter Description Range of values note mac Keyword for the MAC address MAC address to be removed from the guest VLAN aa aa aa aa aa aa Result The specified MAC address or all MAC addresses are no longer assigned to the guest VLAN 11 5 3 6 set dot1x guest vlan mac addr count ...

Page 533: ...ther notes You display this setting and other information with the show dot1x command 11 5 3 7 dot1x mac auth Description With this command you enable MAC authentication for a port Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters dot1x mac auth Result MAC authentication is enabled for a port Security a...

Page 534: ...s as follows cli config if Syntax Call the command without parameters no dot1x mac auth Result MAC authentication is disabled for a port Further notes You enable the function with the dot1x mac auth command You display this setting and other information with the show dot1x command 11 5 3 9 dot1x mac auth port reset Description With this command you reset MAC authentication for a port Requirement Y...

Page 535: ...he port can only be assigned to the VLAN if the VLAN has been created on the device Otherwise Authentication is rejected Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters dot1x mac auth vlan assign Result The VLAN ID for a MAC address is assigned by the RADIUS server Further notes You disable the assign...

Page 536: ...S server Further notes You enable the assignment of the VLAN ID for a MAC address by the RADIUS server with the dot1x mac auth vlan assign command You display this setting and other information with the show dot1x command 11 5 3 12 set dot1x mac auth mac addr count Description With this command you specify how many MAC addresses can be authenticated on the port at the same time Requirement You are...

Page 537: ...mmand prompt is as follows cli config if Syntax Call up the command with the following parameters dot1x port control auto force authorized force unauthorized The parameters have the following meaning Parameter Description Range of values note auto Authentication according to IEEE 802 1x is enabled for the interface The data traffic via the interface is per mitted or blocked depending on the au the...

Page 538: ...ermitted without restrictions Requirement You are in the Interface Configuration mode The command prompt is as follows cli config if Syntax Call the command without parameters no dot1x port control Result The port control parameter of the authenticator is reset to the default value Further notes You configure the port control parameter with the dot1x port control command You can display the status...

Page 539: ...elected interface Further notes You disable the function with the no dot1x reauthentication command You can display the status of this function and other information with the show dot1xcommand 11 5 3 16 no dot1x reauthentication Description With this command you disable the function that repeats the authentication of the client by the authenticator periodically Requirement You are in the Interface...

Page 540: ... the function with the dot1x reauthentication command You can display the status of this function and other information with the show dot1xcommand Security and authentication 11 5 Port Based Network Access Control SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 540 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 541: ...or the violation of limit values and messages are generated if they do These messages are collected and can be distributed in the following ways Entry in the local log Sending as SNMP trap Transfer to the Syslog server Transfer to a network management station using SNMP Port mirroring Mirroring of ports to analyze the data stream without disturbing operation Loop detection Detection and eliminatio...

Page 542: ...vileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters logging console Result The logging function is enabled on the console Further notes You disable the setting with the no logging console command As default the function is disabled 12 1 2 no logging console Description With this command you disable the logging of inputs and outputs to the consol...

Page 543: ...tings 12 1 3 1 show events config Description This command shows the current configuration for forwarding the messages of the various event types Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events config Result The current configuration of the events display is displayed Diagnos...

Page 544: ...notification Further notes You configure the assignment of the degree of severity of an event and the type of notification with the severity command 12 1 3 3 show events faults config Description This command shows the current configuration of the following error monitoring functions Monitoring of the power supply for power outage Monitoring of the network connections for a change in the connectio...

Page 545: ...2 1 3 4 show events faults status Description This command shows the status messages of fault monitoring of the power supply and network connections Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events faults status Result A table with the status messages of the error monitoring f...

Page 546: ...and prompt is as follows cli or cli Syntax Call the command without parameters show logbook or Call up the command with the following parameters show logbook info warning critical The parameters have the following meaning Parameter Description info All log entries of the categories Information Warning and Critical are displayed warning All log entries of the categories Warning and Critical are dis...

Page 547: ...et the counter for the errors with the clear fault counter command 12 1 3 8 show cabletest interface Description This command shows the result of the cable test of the interface Requirement The interface has no active data traffic The cabletest interface function was used on the specified interface in the Global configuration mode You are in the User EXEC mode or in the Privileged EXEC mode The co...

Page 548: ...and in the Global configuration mode 12 1 3 9 show interface transceiver details Description This command runs error diagnostics for an SFP port Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameter assignment show interface transceiver details Result Hardware information model serial number an...

Page 549: ...he status of the power supply is displayed 12 1 4 clear logbook Description With this command you delete the content of the logbook Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call the command without parameters clear logbook Result The content of the logbook is deleted Diagnostics 12 1 Event and fault handling SCALANCE XB 200 XC 200 XF 200BA XP 200 ...

Page 550: ...the number of faults since the last startup with the show fault counter command 12 1 6 fault report ack Description With this command you acknowledge delete the messages of the Cold Warm start event Requirement You are in the Privileged EXEC mode The command prompt is as follows cli Syntax Call up the command with the following parameter fault report ack fault state id Diagnostics 12 1 Event and f...

Page 551: ...to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 12 1 7 1 events Description With this command you change to the EVENTS configuration mode Requirement You are in the Global configuration mode The command prompt is as follows cli...

Page 552: ...and prompt is cli config Syntax Call up the command without parameters or with the following parameter assignment cabletest interface interface type interface id force The parameters have the following meaning Parameter Description Range of values note interface type Type of interface Enter a valid interface interface id Interface identifier force Forces a link down during the test Necessary param...

Page 553: ...it the EVENTS configuration mode with the exit command you return to the Global configuration mode If you exit the EVENTS configuration mode with the end command you return to the Privileged EXEC mode 12 1 8 1 add log Description With this command you create an entry in the log Requirement You are in the EVENTS Configuration mode The command prompt is as follows cli config events Syntax Call the c...

Page 554: ...ing parameters client config syslog trap email all The parameters have the following meaning Parameter Description syslog Enables the client that sends the messages to the Syslog server trap Enables the client that sends the SNMP traps email Enables the client that sends the e mails all Enables all clients at once Result The function of the client selected for the transfer is enabled Further notes...

Page 555: ...o the Syslog server trap Disables the client that sends the SNMP traps email Disables the client that sends the e mails all Disables all clients at once Result The client selected for the transfer is disabled Further notes You display the status of the events and the clients with the show events config command You enable the function with the client config command 12 1 8 4 event config Note The IE...

Page 556: ...status change in the detection of network loops Message on status change of OSPF routers Message when there is a status change in the diagnostics data Message on status change of Link Check Message when an error was detected in the CLI script file These messages can be processed by the clients in different ways Entry in the logbook of the device Sending the message to the Syslog server Sending an ...

Page 557: ...ospf state change Message on status change of OSPF routers dot1x port auth state change Message when there is a status change in the 802 1X authentication poe state change Message on status change of PoE fmp state change Message on status change of FMP all All messages logtable Client that processes the logbook entries syslog Client that sends the messages to the Syslog server email Client that se...

Page 558: ...TS configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters no event config cold warmstart linkchange authentication failure rmon alarm power change rm state change standby state change faultstate change stp change vrrp state change loopd state change ospf state change dot1x port auth state change poe state change fmp state chan...

Page 559: ...state change Message on status change of FMP all All messages logtable Client that processes the logbook entries syslog Client that sends the messages to the Syslog server email Client that sends the e mails trap Client that sends the SNMP traps faults Error LED lights up The setting is possible only for a cold or warm restart env data change Message when there is a status change in the diagnostic...

Page 560: ...em event messages in the log table syslog Specifies the threshold value for enter ing system event messages in the Sy slog file info System events are processed as of the severity level Information warning System events are processed as of the severity level Warning critical System events are processed as of the severity level Critical Result The settings for sending system event messages are conf...

Page 561: ...ld value for entering system event messages in the log table disabled syslog The setting of the threshold value the entering event messages in the Syslog file is disabled If you do not select any parameters from the parameter list the default value is used Result The settings for sending system event messages are configured Further notes You enable the setting with the severity command You display...

Page 562: ...itoring the power supplies is configured Further notes You can display the current setting with the show events faults config command You disable the function with the no power command 12 1 8 9 no power Description With this command you disable the monitoring of the power supplies Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call up...

Page 563: ... connector Requirement You are in the EVENTS configuration mode The command prompt is as follows cli config events Syntax Call up the command with the following parameters link up down interface type interface id The parameters have the following meaning Parameter Description Range of values note up Only the establishment of a connection is signaled down Only a break on a connection is signaled in...

Page 564: ...x Call up the command with the following parameters no up down interface type interface id The parameters have the following meaning Parameter Description Range of values note up The message when establishing a connection is dis abled down The message when a connection is down is disabled interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of th...

Page 565: ...1 65535 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 address Enter a valid IPv4 address port Serverport 1 65535 Default 514 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the...

Page 566: ...pv4 ucast_addr The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 Address Enter a valid IPv4 address For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The Syslog server is deleted Further notes You add a Syslog server syslogserver Diagn...

Page 567: ... difference between the received power and the transmit power represents the power loss on the link The calculated power loss is also monitored for the set limit values If the value of the received power or the power loss falls below or exceeds the set limit values an event is triggered You can set limit values in two stages for messages with the severity levels Warning and Critical 12 2 1 The sho...

Page 568: ...ns that you monitor with fiber monitoring Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call up the command with the following parameters show fmp status port interface type interface id The parameters have the following meaning Parameter Description Range of values note port Keyword for a an interface description interf...

Page 569: ...guration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 12 2 2 1 fmp Description With this command you enable fiber monitoring Requirement To be able to use the fiber monitoring function enable LLDP The fiber monitoring information is appended to the LLDP packets You can only use fiber monitoring with transceivers capable of diagnostic...

Page 570: ...g if Syntax Call the command without parameter assignment no fmp Default enabled Result Fiber monitoring is disabled Further notes You enable this function with the fmp command You display the status of this function and other information with the and show fmp limit commands You define the limit values with the fmp power loss and fmp rx power commands 12 2 2 3 fmp power loss Description With this ...

Page 571: ...ow er loss of the connection by a message of the severity level Critical 0 55 dB Default 55 dB If you enter the value 0 the power loss is not monitored Result The limits for monitoring the power loss are defined Further notes You enable this function with the fmp command You disable this function with the no fmp command You display the status of this function and other information with the and sho...

Page 572: ...red dem Specify the value at which you are informed of the de terioration of the received power by a message of the severity level Critical 0 40 dBm The default value depends on the relevant pluggable transceiver If you enter the value 0 the received power is not monitored Result The limits for monitoring the received power are defined Further notes You enable this function with the fmp command Yo...

Page 573: ...Syslog server Requirement You are in the User EXEC mode or in the Privileged EXEC mode The command prompt is as follows cli or cli Syntax Call the command without parameters show events syslogserver Result The entries of the configured Syslog server are displayed 12 3 2 Commands in the Events configuration mode This section describes commands that you can call up in the EVENTS configuration mode I...

Page 574: ...r port 1 65535 The parameters have the following meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 address Enter a valid IPv4 address port Serverport 1 65535 Default 514 For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter l...

Page 575: ...ng meaning Parameter Description Range of values note ipv4 Keyword for an IP address ucast_addr Syslog server IPv4 Address Enter a valid IPv4 address For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 Result The Syslog server is deleted Further notes You add a Syslog server syslogserver Diagnostics 12 3 Syslog client SCALANCE XB 200 XC 2...

Page 576: ...is exceeded in the log table event 2 is triggered Execute the following commands configure terminal rmon event 1 description More than 10 log entries trap testnotify rmon event 2 description Less than 9 log entries trap testnotify rmon alarm 1 1 3 6 1 4 1 4329 20 1 1 1 1 31 2 0 1 absolute rising threshold 10 1 falling threshold 9 2 end 12 4 1 The show commands This section describes commands with ...

Page 577: ...play several parameters with one call If you do not select any parameters from the parameter list only the enabled or disabled status is shown Result The settings of the remote monitoring function are displayed 12 4 2 Commands in the global configuration mode This section describes commands that you can call up in the Global configuration mode In Privileged EXEC mode enter the configure terminal c...

Page 578: ...s function and other information with the show rmon command 12 4 2 2 no rmon Description With this command you disable the Remote Monitoring function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameter assignment no rmon Default disabled Result The Remote Monitoring function is disabled Diagnostics 12 4 RMON SCA...

Page 579: ...absolute delta rising threshold value 0 2147483647 risingevent number 1 65535 falling threshold value 0 2147483647 fallingevent number 1 65535 owner ownername 127 The parameters have the following meaning Parameter Description Range of values note alarm number Number of the alarm 1 250 mib object id OID of the MIB tag to be monitored max 255 characters sample interval time Interval for the check s...

Page 580: ...e Ethernet interfaces can be monitored Note Magnitude of the threshold values The threshold value for falling or low variable values should be less than the threshold value for rising or high variable values Note Conditions for working with alarms The events assigned to the alarms are configured The Remote monitoring function is started with the rmon command Result The alarm for monitoring a MIB v...

Page 581: ...he person responsible and specify which SNMP notification is generated You can configure the sending of traps globally with the command snmp notify Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters rmon event number 1 500 description event description 127 owner ownername 127 trap notify 127 The ...

Page 582: ...e no rmon event command You display the RMON Event Table with the show rmon events command You show the details of the SNMP community with the show snmp community command 12 4 2 6 no rmon event Description With this command you delete an entry from the RMON event table Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with t...

Page 583: ...iguration mode with the end command you return to the Privileged EXEC mode 12 4 3 1 rmon collection stats Description With this command you start the recording of statistical data of an interface Requirement You are in the Interface configuration mode The command prompt is as follows cli config if Syntax Call up the command with the following parameters rmon collection stats index 1 52 owner owner...

Page 584: ...ollowing meaning Parameter Description Range of values note index Number of the recording 1 52 Result The recording of statistical data is ended 12 4 3 3 rmon collection history Description With this command you configure whether or not samples of the statistics are saved for a port You can specify how many entries Buckets should be saved and at which intervals samples should be taken Requirement ...

Page 585: ...rding intervals in seconds 1 3600 Default 1800 owner User to which the event is assigned ownername User name of the user max 127 characters Default monitor If you do not select any parameter from the parameter list the default values are used Result The data is recorded Further notes You can display the content of a recording with the show rmon history command 12 4 3 4 no rmon collection history D...

Page 586: ...he parameter has the following meaning Parameter Description Range of values note index Number of the recording 1 52 Result The data recording is ended Diagnostics 12 4 RMON SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 586 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 587: ... port Several ports can be mirrored to one monitor port at the same time Several source ports from the same VLAN If in a VLAN you select more than one source port for the port based egress mirroring unknown unicast and multicast frames as well as broadcast frames are forwarded only once to the destination port 12 5 1 The show commands This section describes commands with which you display various ...

Page 588: ...s cli or cli Syntax Call the command without parameter assignment show monitor barrier Result The settings are displayed 12 5 1 3 show monitor session Description This command shows the settings used for mirroring ports You obtain information about the ports from which incoming and or outgoing data traffic is mirrored and the port at which the mirrored data is output Requirement You are in the Use...

Page 589: ...ode enter the configure terminal command to change to this mode Commands relating to other topics that can be called in the Global configuration mode can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 12 5 2 1 monitor Description With this command you enable the port mirroring function Requirement...

Page 590: ...ng function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters no monitor Result The port mirroring function is disabled Further notes You can display the status of this function with the show monitorcommand You enable the function with the monitor command Diagnostics 12 5 Port Mirroring SCALANCE XB 200 XC 200...

Page 591: ...s also allowed again If you do not require this make sure that only the data traffic you want to monitor is forwarded to the interface If mirroring is disabled the listed port specific functions are reset to the default values This reset takes place regardless of whether the functions were configured manually or automatically by enabling monitor barrier Requirement You are in the Global configurat...

Page 592: ...r enabled command You display the configuration settings with the show monitor barrier command 12 5 2 5 monitor session destination Description With this command you configure the destination for mirroring a port Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call up the command with the following parameters monitor session session id 1 1 de...

Page 593: ...o be monitored and the destination port the session is complete and active Note If you change the settings for an existing session all previous configurations of this session are lost Further notes You delete the destination for mirroring a port with the no monitor session destination command You end and delete a session with the no monitor session command You display the configuration settings wi...

Page 594: ...stination for the mirroring of a port is deleted Further notes You configure the destination for mirroring a port with the monitor session destination command You end and delete a session with the no monitor session command You display the configuration settings with the show monitor session command 12 5 2 7 monitor session source Description With this command you configure the source for mirrorin...

Page 595: ...eived and transmitted data traffic will be mirrored For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the default value both is used Result As soon as you have configured the settings for the port to be monitored and the destination port the session is complete and active Furth...

Page 596: ... traffic will be mirrored transmitted both Received and transmitted data traffic will be mirrored For information on names of addresses and interfaces refer to the section Addresses and interface names Page 36 If you do not select any parameters from the parameter list the default value both is used Result The source for the mirroring of a port is deleted Further notes You configure the source for...

Page 597: ...eter Description Range of values note session id Number of the session 1 Result The monitor session is deleted Further notes You display the configuration settings with the show monitor session command You configure and start mirroring of a port with the monitor session command Diagnostics 12 5 Port Mirroring SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manu...

Page 598: ...errors more quickly but does not eliminate them Note Note that loop detection is only possible at ports that were not configured as ring ports or standby ports Note Changing the configured port status with loop detection The configuration of the port status can be changed with the Loop Detection function If for example the administrator has disabled a port the port can be enabled again after a dev...

Page 599: ...erface type interface id port channel port channel id 1 8 The parameters have the following meaning Parameter Description Range of values note interface Keyword for a an interface description interface type Type or speed of the interface Enter a valid interface interface id Module no and port no of the interface port channel Keyword for a port channel connection port channel id Number of the addre...

Page 600: ...e can be found in the relevant sections You exit the Global configuration mode with the end or exit command and are then in the Privileged EXEC mode again 12 6 2 1 loopd Description With this command you enable the loop detection function Requirement You are in the Global configuration mode The command prompt is as follows cli config Syntax Call the command without parameters loopd Result The loop...

Page 601: ...command without parameters no loopd Result The loop detection function is disabled Further notes You enable the function with the loopd command You can display the status of this function and other information with the show loopd command 12 6 2 3 loopd vlan mode Description With this command you enable the loop detection function for VLAN Diagnostics 12 6 Loop detection SCALANCE XB 200 XC 200 XF 2...

Page 602: ...n and other information with the show loopd command 12 6 2 4 no loopd vlan mode Description With this command you disable the loop detection function for VLAN Requirement Loopd is activated You are in the Global configuration mode The command prompt is cli config Syntax Call the command without parameters no loopd vlan mode Result The loop detection function is disabled for VLAN Diagnostics 12 6 L...

Page 603: ...ctions If you exit the Interface configuration mode with the exit command you return to the Global configuration mode If you exit the Interface configuration mode with the end command you return to the Privileged EXEC mode 12 6 3 1 loopd blocked forwarder sender Description With this command you specify how the port handles loop detection frames Requirement Loop detection is enabled A Spanning Tre...

Page 604: ...detect threshold reaction timeout Description With this command you configure the send interval threshold value and reaction time for loop detection Requirement Loop detection is enabled You are in the Interface configuration mode The command prompt is cli config if Syntax Call up the command with the following parameters loopd tx interval mSec 500 5000 detect threshold integer 1 500 reaction time...

Page 605: ...and loopd port reset If you do not select any parameters from the parameter list the default value is used The default values apply only to a port enabled earlier with loopd sender Result The settings are suitably configured Further notes You can display the status of this function and other information with the show loopd command 12 6 3 3 loopd port reset Description With this command you enable ...

Page 606: ...op detection is enabled You are in the Interface configuration mode The command prompt is cli config if Syntax Call the command without parameters no loopd port reset Result The port reset function is disabled Further notes You enable the setting with the loopd port reset command You can display the status of this function and other information with the show loopd command See also Addresses and in...

Page 607: ...sable is the default after enabling loop detection Further notes You enable the no action reaction with the no loopd reaction local command You can display the status of this function and other information with the show loopd command See also Addresses and interface names Page 36 12 6 3 6 no loopd reaction local Description With this command you enable the no action reaction for a local loop If a ...

Page 608: ...us of this function and other information with the show loopd command See also Addresses and interface names Page 36 12 6 3 7 loopd reaction remote Description With this command you enable the disable reaction for a remote loop If a remote loop is detected the port is blocked Requirement Loop detection is enabled You are in the Interface configuration mode The command prompt is cli config if Synta...

Page 609: ...loop is detected this has no effect on the port Requirement loopd is enabled You are in the Interface configuration mode The command prompt is cli config if Syntax Call the command without parameters no loopd reaction remote Result no action is activated for the loop reaction remote function disable is the default after enabling loop detection Further notes You enable the disable setting with the ...

Page 610: ...ee also Addresses and interface names Page 36 Diagnostics 12 6 Loop detection SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 610 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Page 611: ...timeout 67 no cli console timeout 68 configure terminal 61 coordinates height 69 coordinates latitude 69 coordinates longitude 70 cos map 487 cos remap 489 cos remap enable 490 D dcp forwarding 278 dcp server 276 no dcp server 277 delete 95 disable 61 dot1x guest vlan 526 529 no dot1x guest vlan 526 529 dot1x guest vlan reset 532 dot1x guest vlan vlan id 530 no dot1x guest vlan vlan id 531 dot1x m...

Page 612: ...ip igmp snooping static group 385 ip igmp snooping switch ip 382 ip igmp snooping version 380 ip igmp vlan snooping 380 no ip igmp vlan snooping 381 ip nat 436 439 ip nat napt 441 ip nat pool 442 ip nat service 443 ip nat service portrange 446 ip nat static 448 ip nat timeout 437 438 ip single hop inter vlan routing 450 L lease time 294 link 563 no link 564 linkcheck 400 lldp 80 no lldp 81 load tf...

Page 613: ...listening bpdu vlan flood 266 no ports 301 no priority 198 no priority enable 199 no private vlan 201 no private vlan association 203 no private vlan mapping 179 no radius server 511 no relay information 303 no ring redundancy hrpobserver 396 no rmon 578 no sinema 121 no snmp engineid migrate 336 no spanning tree passive listening compatibility 238 no switchport private vlan host association 188 n...

Page 614: ... info 525 show dot1x mac auth mac info 525 show dst info 143 show environmental temperature 49 show etherchannel 213 show ethernetip 50 show events config 543 show events faults config 544 show events faults status 545 show events sender email 351 show events severity 544 show events smtp port 352 show events smtp server 351 show events syslogserver 573 show fault counter 547 show flow control 476...

Page 615: ...23 show snmp engineID 324 show snmp filter 324 show snmp group 325 show snmp group access 325 show snmp inform statistics 326 show snmp notif 326 show snmp targetaddr 327 show snmp targetparam 327 show snmp tcp 328 show snmp user 328 show snmp viewtree 329 show sntp broadcast mode status 154 show sntp status 155 show sntp unicast mode status 154 show spanning tree 218 show spanning tree active 219...

Page 616: ... no spanning tree mst instance id root 233 spanning tree mst max hops 234 no spanning tree mst max hops 235 spanning tree mst pseudoRootId 255 no spanning tree mst pseudoRootId 256 spanning tree passive listening compatibility 237 spanning tree priority 235 no spanning tree priority 236 spanning tree restricted role 257 no spanning tree restricted role 257 spanning tree restricted tcn 258 no spann...

Page 617: ...dst recurring 147 time set 145 U unicast block 88 user account 502 no user account 504 username 74 504 V vlan 176 209 no vlan 176 vlan range 177 W web session timeout 132 no web session timeout 132 whoami 500 write 130 write startup config 107 Index SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface Configuration Manual 07 2017 C79000 G8976 C361 06 617 ...

Page 618: ...Index SCALANCE XB 200 XC 200 XF 200BA XP 200 XR 300WG Command Line Interface 618 Configuration Manual 07 2017 C79000 G8976 C361 06 ...

Search results

Summary of Contents for SCALANCE XB-200

Reviews:

Related manuals for SCALANCE XB-200

Brands by name

Popular brands

Siemens SCALANCE XB-200, Configuration Manual

Search results

Summary of Contents for SCALANCE XB-200

Reviews:

Related manuals for SCALANCE XB-200

Brands by name

Popular brands