Management Software ® AT-S39 ◆ Command Line User’s Guide AT-8012M, AT-8012M-QS, AT-8016F/xx (MT, SC and ST), AT-8024, AT-8024GB, AT-8024M, AT-8026FC, AT-8026T, and AT-8088/xx (MT and SC) FAST ETHERNET SWITCHES VERSION 3.3.
Copyright © 2004 Allied Telesyn, Inc. 960 Stewart Drive Suite B, Sunnyvale, CA 94085 USA All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc. Microsoft is a registered trademark of Microsoft Corporation, Netscape Navigator is a registered trademark of Netscape Communications Corporation.
Table of Contents Preface ...................................................................................................................................................................................................................... 7 Document Conventions ...................................................................................................................................................................................... 8 Where to Find Web-based Guides ...............................
Table of Contents SET IP ROUTE ......................................................................................................................................................................................................... 36 SET SYSTEM ............................................................................................................................................................................................................ 37 SHOW CONFIG ............................................
AT-S39 Command Line Interface User’s Guide Chapter 10 Port Mirroring Commands ............................................................................................................................................................................87 ADD SWITCH MIRROR .........................................................................................................................................................................................88 CREATE SWITCH MIRROR ...............................
Table of Contents Chapter 16 Broadcast Frame Control Command .....................................................................................................................................................145 SET SWITCH BROADCAST ...............................................................................................................................................................................146 SET SWITCH PORT BCLIMIT .........................................................................
Preface This guide contains instructions on how configure an AT-8000 Series Fast Ethernet Switch using the AT-S39 command line interface.
Preface Document Conventions This document uses the following conventions: Note Notes provide additional information. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data.
AT-S39 Command Line Interface User’s Guide Where to Find Web-based Guides The installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF) from on our web site at www.alliedtelesyn.com. You can view the documents on-line or download them onto a local workstation or server.
Preface Contacting Allied Telesyn This section provides Allied Telesyn contact information for technical support as well as sales or corporate information. Online Support Email and Telephone Support Returning Products You can request technical support online by accessing the Allied Telesyn Knowledge Base from the following web site: http://kb.alliedtelesyn.com. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
AT-S39 Command Line Interface User’s Guide Management Software Updates You can download new releases of management software for our managed products from either of the following Internet sites: ❑ Allied Telesyn web site: http://www.alliedtelesyn.com ❑ Allied Telesyn FTP server: ftp://ftp.alliedtelesyn.com To download new software from the Allied Telesyn FTP server using your workstation’s command prompt, you need FTP client software and you must log in to the server.
Chapter 1 Starting a Command Line Management Session This chapter contains the following sections: ❑ Starting a Management Session on page 13 ❑ Key Features on page 14 ❑ Command Formatting on page 15 12
AT-S39 Command Line Interface User’s Guide Starting a Management Session To manage an AT-8000 Series switch using the command line commands, you must first start a local or Telnet management session. For instructions on how to start a management session, refer to the AT-S39 Management Software User’s Guide. Note The command line interface is not supported from a web browser management session. Once you have started a management session, you will see the AT-S39 Main Menu.
Chapter 1: Starting a Command Line Management Session Key Features The following features are supported in the command line interface: ❑ Command history using the up and down arrow keys. (Not supported in a Telnet management session.) ❑ Context-specific help - Type a question mark at any time to see a list of legal next parameters. ❑ Keyword abbreviations - Any keyword can be recognized just by typing an unambiguous prefix (e.g., “sh” for “show”).
AT-S39 Command Line Interface User’s Guide Command Formatting The following formatting conventions are used in this manual: ❑ screen text font - This font is used for command formats and examples. ❑ screen text font - Italicized screen text indicates a variable for you to enter. ❑ [ ] - Brackets indicate optional parameters. ❑ | - The bar symbol separates parameter options from which you must choose.
Chapter 2 Basic Command Line Commands ❑ CLEAR SCREEN on page 17 ❑ HELP on page 18 ❑ LOGOFF and QUIT on page 19 ❑ MENU on page 20 ❑ SAVE CONFIGURATION on page 21 ❑ SET PROMPT on page 22 ❑ SET SWITCH CONSOLEMODE on page 23 ❑ SHOW USER on page 24 Note Remember to save your changes with the SAVE CONFIGURATION command.
AT-S39 Command Line Interface User’s Guide CLEAR SCREEN Syntax clear screen Parameters None. Description This command clears the screen.
Chapter 2: Basic Command Line Commands HELP Syntax help Parameters None. Description This command displays a list of the command keywords with a brief description for each keyword.
AT-S39 Command Line Interface User’s Guide LOGOFF and QUIT Syntax logoff quit Parameters None. Description Both commands perform the same function. They end a management session. If you are managing a slave switch, the commands return you to the master switch on which you started the management session.
Chapter 2: Basic Command Line Commands MENU Syntax menu Parameters None. Description This command displays the AT-S39 Main Menu. For instructions on how to use the management menus, refer to the AT-S39 Management Software User’s Guide.
AT-S39 Command Line Interface User’s Guide SAVE CONFIGURATION Syntax save configuration Parameters None. Description This command saves your changes to the switch’s flash memory for permanent storage. Whenever you make a change one of the operating parameters of the switch, such as enter a new IP address or create a new VLAN, the switch stores the change in temporary memory. It will be lost the next time you reset or power cycle the unit. To save your changes, you must use this command.
Chapter 2: Basic Command Line Commands SET PROMPT Syntax set prompt=”prompt” Parameter Prompt Specifies the command line prompt. The prompt can be from one to fifteen alphanumeric characters. Spaces are allowed. If spaces are included, the prompt must be enclosed in double quotes. Otherwise, the quotes are optional. Description This command changes the command prompt.
AT-S39 Command Line Interface User’s Guide SET SWITCH CONSOLEMODE Syntax set switch consolemode=cli|menu Parameter consolemode Specifies the mode you want management sessions to start in. Options are: cli Starts a management session with the command line prompt. menu Starts a management session with the ATS39 Main Menu. Description You can use this command to specify whether you want your management sessions to display the command line interface or the menu interface when you start a session.
Chapter 2: Basic Command Line Commands SHOW USER Syntax show user Parameters None. Description This command displays the manager account username you used to log onto the switch.
Chapter 3 Basic Switch Commands ❑ DISABLE DHCPBOOTP on page 26 ❑ ENABLE DHCPBOOTP on page 27 ❑ PING on page 28 ❑ PURGE IP on page 29 ❑ RESET IP on page 30 ❑ RESET SYSTEM on page 31 ❑ RESTART REBOOT on page 32 ❑ RESTART SWITCH on page 33 ❑ SET IP on page 34 ❑ SET IP ROUTE on page 36 ❑ SET SYSTEM on page 37 ❑ SHOW CONFIG on page 38 ❑ SHOW DHCPBOOTP on page 39 ❑ SHOW IP on page 40 ❑ SHOW IP ROUTE on page 41 ❑ SHOW SWITCH on page 42 ❑ SHOW SYSTEM on page 43 Note Remember to save your changes with the SAVE CON
Chapter 3: Basic Switch Commands DISABLE DHCPBOOTP Syntax disable dhcpbootp Parameters None. Description This command deactivates the DHCP and BOOTP client software on the switch.
AT-S39 Command Line Interface User’s Guide ENABLE DHCPBOOTP Syntax enable dhcpbootp Parameters None. Description This command activates the DHCP and BOOTP client software on the switch. When activated, this software instruct the switch to obtain its IP configuration from a DHCP or BOOTP server on your network, whenever the unit is power cycled or reset. The switch will make continuous requests for its IP configuration until a DHCP or BOOTP server responds.
Chapter 3: Basic Switch Commands PING Syntax ping ipaddress Parameter ipaddress Specifies the IP address of an end node you want the switch to ping. Description This command instructs the switch to ping an end node. You can use this command to determine whether a valid link exists between the switch and another device. Example The following command pings an end node with the IP address 149.245.22.22 ping 149.245.22.
AT-S39 Command Line Interface User’s Guide PURGE IP Syntax purge ip [ipaddress] [netmask] [route] Parameters ipaddress Returns the switch’s IP address to the default setting 0.0.0.0. netmask Returns the subnet mask to the default setting 255.255.0.0. route Returns the gateway address to the default setting 0.0.0.0. Description This command returns the switch’s IP address, subnet mask, and default gateway address to the default settings. This command is similar in function to the RESET IP command.
Chapter 3: Basic Switch Commands RESET IP Syntax reset ip interface=1 Parameter interface Specifies the interface number. This value is always “1”. Description This command returns a switch’s IP address, subnet mask, and gateway address to the default values. To return just one parameter to its default value, refer to the PURGE IP command.
AT-S39 Command Line Interface User’s Guide RESET SYSTEM Syntax reset system [name] [contact] [location] Parameters name Deletes the name of the switch. contact Deletes the name of the network administrator responsible for managing the unit. location Deletes the location of the switch. Description This command deletes the information listed above in Parameters. Omitting the parameters deletes all three items from the switch.
Chapter 3: Basic Switch Commands RESTART REBOOT Syntax restart reboot Parameters None. Description This command returns the switch’s operating parameters to the default settings. Caution This command involves a switch reset. Some network traffic may be lost. Example The following command returns the switch’s operating parameters to the default settings: restart reboot Follow the prompts.
AT-S39 Command Line Interface User’s Guide RESTART SWITCH Syntax restart switch Parameter None. Description This command resets the switch. The system reset will take only a few seconds. The unit will not forward traffic during time required to reload the operating software. Some network traffic may be lost. Caution Be sure to use the SAVE CONFIGURATION command to save your changes before resetting the switch. Any changes not saved will be lost.
Chapter 3: Basic Switch Commands SET IP Syntax set ip interface=1 ipaddress=ipaddress|DHCP netmask=subnetmask Parameters interface Specifies the interface number. This value is always “1”. ipaddress Specifies an IP address for the switch or activates DHCP and BOOTP. The default value is 0.0.0.0. netmask Specifies the subnet mask for the switch. The default value is 0.0.0.0. You must specify a subnet mask if you manually assigned the switch an IP address.
AT-S39 Command Line Interface User’s Guide Examples The following command sets a switch’s IP address to 140.35.22.22 and subnet mask to 255.255.255.0: set ip interface=1 ipaddress=140.35.22.22 netmask=255.255.255.0 The following command sets just the subnet mask: set ip interface=1 netmask=255.255.255.
Chapter 3: Basic Switch Commands SET IP ROUTE Syntax set ip route ipaddress=ipaddress Parameter ipaddress Specifies the IP address of the default gateway for the switch. The default value is 0.0.0.0. Description This command specifies the IP address of the default gateway for the switch. This address is required if you will be managing the unit from a remote management station that is separated from the switch by a router.
AT-S39 Command Line Interface User’s Guide SET SYSTEM Syntax set system [name=”name”] [contact=”contact”] [location=”location”] Parameters The parameters are defined below: name Specifies the name of the switch. The name can be from 1 to 30 alphanumeric characters in length and must be enclosed in quotes (“ “). contact Specifies the name of the network administrator responsible for managing the switch.
Chapter 3: Basic Switch Commands SHOW CONFIG Syntax show config Parameters None. Description This command displays overall information on the switch and the ports.
AT-S39 Command Line Interface User’s Guide SHOW DHCPBOOTP Syntax show dhcpbootp Parameters None. Description This command displays the status of the DHCP and BOOTP client software on the switch. The client software will be either “enabled” or “disabled.” When enabled, the switch obtains its IP configuration information from a DHCP or BOOTP server on the network. The default setting is disabled. To enable the client software, refer to the ENABLE DHCPBOOTP command.
Chapter 3: Basic Switch Commands SHOW IP Syntax show ip interface=1 Parameters interface Specifies the interface number. This value is always “1”. Description This command displays the current values for the following switch parameters: ❑ IP address ❑ Subnet mask ❑ Default gateway To set these parameters, refer to the SET IP and the SET IP ROUTE commands.
AT-S39 Command Line Interface User’s Guide SHOW IP ROUTE Syntax show ip route Parameters None. Description This command displays the switch’s default gateway address. To set this parameter, refer to the SET IP ROUTE command.
Chapter 3: Basic Switch Commands SHOW SWITCH Syntax show switch Parameters None.
AT-S39 Command Line Interface User’s Guide SHOW SYSTEM Syntax show system Parameters None. Description This command displays the following information: ❑ Application software version and build date ❑ Bootloader version and build date ❑ Serial number ❑ Model name ❑ Switch’s name ❑ Name of the network administrator responsible for managing the unit ❑ Location of the unit. Note For instructions on how to set this information, see the SET SYSTEM command.
Chapter 4 Enhanced Stacking Commands ❑ ACCESS SWITCH on page 45 ❑ EXIT on page 46 ❑ SET SWITCH STACKMODE on page 47 ❑ SHOW REMOTELIST on page 48 Note Remember to save your changes with the SAVE CONFIGURATION command. Note Refer to the AT-S39 Management Software User’s Guide for background information on enhanced stacking.
AT-S39 Command Line Interface User’s Guide ACCESS SWITCH Syntax access switch number=number|macaddress=macaddress Parameters number Specifies the number of the switch in an enhanced stack that you want to manage. You can view this number using the SHOW REMOTELIST command. macaddress Specifies the MAC address of the switch you want to manage. This is also displayed using the SHOW REMOTELIST command.
Chapter 4: Enhanced Stacking Commands EXIT Syntax exit Parameters None. Description Ends a management session. The menu or screen that is displayed as a result of this command depends on whether your switch is a master or slave as well as the configuration of the console mode on your switch. If you have configured your switch with the command line as the console mode, entering the EXIT command ends the management session. For a master switch, this command actually disconnects the session.
AT-S39 Command Line Interface User’s Guide SET SWITCH STACKMODE Syntax set switch stackmode=master|slave|unavailable Parameter stackmode Specifies the enhanced stacking mode of the switch. Possible settings are: master Specifies the switch’s stacking mode as master. A master switch must be assigned an IP address and subnet mask. slave Specifies the switch’s stacking mode as slave. A slave does not need an IP address. This is the default setting for a switch.
Chapter 4: Enhanced Stacking Commands SHOW REMOTELIST Syntax show remotelist [sorted by=macaddress|name] Parameters sorted by Sorts the list either by MAC address or by name. The default is by MAC address. Description This command displays a lists of the switches in an enhanced stack. The list does not include the master switch on which you started the management session. Note You must perform the SHOW REMOTELIST command from a management session of a master switch.
Chapter 5 SNMP Community Strings and Trap Commands ❑ ADD SNMP COMMUNITY TRAPHOST on page 50 ❑ CREATE SNMP COMMUNITY on page 51 ❑ DELETE SNMP COMMUNITY TRAPHOST on page 52 ❑ DESTROY SNMP COMMUNITY on page 53 ❑ RESET SNMP on page 54 ❑ SET SNMP COMMUNITY on page 55 ❑ SHOW SNMP on page 56 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 5: SNMP Community Strings and Trap Commands ADD SNMP COMMUNITY TRAPHOST Syntax add snmp community=”community” traphost=ipaddress Parameters community Specifies the switch’s SNMP Read or Write community string. The string is case sensitive. The string must be enclosed in double quotes if it contains a space or special character, such as an exclamation point; otherwise, the quotes are optional.
AT-S39 Command Line Interface User’s Guide CREATE SNMP COMMUNITY Syntax create snmp community=”community” access=read|write [traphost=ipaddress] Parameter community Specifies the new community string. A community string can be up to thirteen characters. Community strings are case sensitive. If the string contains a space or special character, such as an exclamation point, it must be enclosed in double quotes; otherwise, the quotes are optional. access Specifies the string’s access level.
Chapter 5: SNMP Community Strings and Trap Commands DELETE SNMP COMMUNITY TRAPHOST Syntax delete snmp community=”community” traphost=ipaddress Parameters community Specifies the switch’s SNMP Read or Write community string. Community strings are case sensitive. The string must be enclosed in double quotes if it contains a space or special character, such as an exclamation point; otherwise, the quotes are optional.
AT-S39 Command Line Interface User’s Guide DESTROY SNMP COMMUNITY Syntax destroy snmp community=”community” Parameter community Specifies the community string you want to delete from the switch. Community strings are case sensitive. The string must be enclosed in double quotes if it contains a space or special character, such as an exclamation point; otherwise, the quotes are optional. Description This command deletes the Read or Write community string from the switch.
Chapter 5: SNMP Community Strings and Trap Commands RESET SNMP Syntax reset snmp Parameters None. Description This command performs the following functions: ❑ Returns the SNMP community strings to the default values, which are “public” for Read access and “private” for Write access. ❑ Disables SNMP access so that the switch cannot be managed using an SNMP application. ❑ Deletes IP addresses of management workstations to receive traps from the switch.
AT-S39 Command Line Interface User’s Guide SET SNMP COMMUNITY Syntax set snmp community=”community” access=read|write Parameter community Specifies the community string whose access level is to be changed. Community strings are case sensitive. The string must be enclosed in double quotes if it contains a space or special character, such as an exclamation point; otherwise, the quotes are optional. access Specifies the new access level for the community string. Options are Read and Write.
Chapter 5: SNMP Community Strings and Trap Commands SHOW SNMP Syntax show snmp Parameters None. Description This command displays the community strings for SNMP Read and Write access on the switch. The default community string for Read access is “public” and the default string for Write access is “private”. This command also displays the IP addresses of management workstations that receive traps from the switch.
Chapter 6 Management Security Commands ❑ DISABLE HTTP SERVER on page 58 ❑ DISABLE SNMP on page 59 ❑ ENABLE HTTP SERVER on page 60 ❑ ENABLE SNMP on page 61 ❑ SET PASSWORD MANAGER on page 62 ❑ SET PASSWORD OPERATOR on page 63 ❑ SET SWITCH CONSOLETIMER on page 64 ❑ SHOW HTTP SERVER on page 65 Note Remember to use the SAVE CONFIGURATION command to save your changes.
Chapter 6: Management Security Commands DISABLE HTTP SERVER Syntax disable http server Parameters None. Description This command disables the HTTP server on the switch so that the device cannot be managed from a web browser. The default setting is enabled.
AT-S39 Command Line Interface User’s Guide DISABLE SNMP Syntax disable snmp Parameters None. Description This command disables SNMP on the switch so that the device cannot be managed from a SNMP application program. The default setting is disabled.
Chapter 6: Management Security Commands ENABLE HTTP SERVER Syntax enable http server Parameters None. Description This command activates the HTTP server on the switch to allow management of the device from a web browser. The default setting is enabled.
AT-S39 Command Line Interface User’s Guide ENABLE SNMP Syntax enable snmp Parameters None. Description This command enables SNMP on the switch to permit management of the device from a SNMP application program. The default setting is disabled.
Chapter 6: Management Security Commands SET PASSWORD MANAGER Syntax set password manager Parameters None. Description This command sets the manager’s password. The default password is “friend”. The password can be from 1 to 20 alphanumeric characters. Spaces and special characters, such as exclamation points (!) and asterisks (*), should be avoided. The password is case sensitive.
AT-S39 Command Line Interface User’s Guide SET PASSWORD OPERATOR Syntax set password operator Parameters None. Description This command sets the operator’s password. The default password is “operator”. The password can be from 1 to 20 alphanumeric characters. Spaces and special characters, such as exclamation points (!) and asterisks (*), should be avoided. The password is case sensitive.
Chapter 6: Management Security Commands SET SWITCH CONSOLETIMER Syntax set switch consoletimer=value Parameter consoletimer Specifies the console timer in minutes. The range is 1 to 60 minutes. The default is 10 minutes. Description This command sets the console timer. The management software automatically ends a management session if it does not detect any activity from the local or remote management station after the specified period of time set by the console timer.
AT-S39 Command Line Interface User’s Guide SHOW HTTP SERVER Syntax show http server Parameters None. Description This command displays the status of the HTTP server on the switch. If the status shows enabled, which is the default, you can manage the device from a web browser. If the status shows disabled, the device cannot be managed from a web browser.
Chapter 7 Port Parameter Commands ❑ RESET SWITCH PORT on page 67 ❑ SET SWITCH PORT on page 68 ❑ SHOW SWITCH PORT on page 73 Note Remember to save your changes with the SAVE CONFIGURATION command.
AT-S39 Command Line Interface User’s Guide RESET SWITCH PORT Syntax reset switch port=port Parameter port Specifies the port to be reset. You can specify more than one port at a time. You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9), or both (e.g., 2,5,7-9). Description This command resets a port. This can prove useful in situations where a port is experiencing a problem establishing a valid connection to the end node. The reset takes less than a second to complete.
Chapter 7: Port Parameter Commands SET SWITCH PORT Syntax set switch port=port [status=forwarding|disabled] [description=”description”] [flowcontrol=none|transmit|receive|both] [backpressure=enable|disable] [mdimode=mdi|mdix|auto] [renegotiation=auto] [softreset=yes|no] [speed=autonegotiate|10mhalf|10mfull|10mhauto| 10mfauto|100mhalf|100mfull|100mhauto|100mfauto| 1000mfull|1000mfauto|auto10m100m|auto1000m] [priority=priority] [overridepriority=yes|no] Parameters port Specifies the port you want to configu
AT-S39 Command Line Interface User’s Guide sending frames. Possible values for this parameter are: backpressure mdimode none No flow control. transmit Flow control when transmitting frames. receive Flow control when receiving frames. both Flow control when both transmitting and receiving frames. Activates and deactivates backpressure on the port. This parameter only applies to ports operating in half-duplex mode. Backpressure is used by a port to control the flow of ingress packets.
Chapter 7: Port Parameter Commands parameter settings are not changed by this command. This parameter performs the same function as the RESET SWITCH PORT command. speed Sets the speed and duplex mode of the port. Setting for this parameter are: autonegotiate The port Auto-Negotiates both speed and duplex mode.This is the default setting. 10mfull 10 Mbps and full-duplex mode. 10mhauto 10 Mbps and half-duplex mode with autonegotiation. 10mfauto 10 Mbps and full-duplex mode with autonegotiation.
AT-S39 Command Line Interface User’s Guide priority Specifies the port’s priority. Entering a value of 0 to 3 directs all ingress frames received on the port to the low priority queue on the egress port. Entering a value of 4 to 7 directs all ingress frames to the high priority queue on the egress port. For background information, refer to the description of Class of Service in the AT-S39 Management Software User’s Guide.
Chapter 7: Port Parameter Commands Examples The following command assigns Port 11 the description “Printer port” and configures it to operate at 100 Mbps, half duplex: set switch port=11 description=”printer port” speed=100mhalf The following command sets the wiring configuration for Ports 12 to 16 to MDI-X: set switch port=12-16 mdimode=mdix The following command disables Ports 12 to 16: set switch port=12-16 status=disabled The following command resets Ports 2: set switch port=2 softreset=yes 72
AT-S39 Command Line Interface User’s Guide SHOW SWITCH PORT Syntax show switch port=port Parameters port Specifies the port whose parameter settings you want to view. You can specify more than one port at a time. You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9), or both (e.g., 2,5,7-9). To view all ports, do not specify a port. Description This command displays a port’s operating parameters, such as speed and duplex mode.
Chapter 8 Port Security Commands ❑ SET SWITCH SECURITYMODE on page 75 ❑ SET SWITCH THRESHOLD on page 77 ❑ SHOW SWITCH THRESHOLD on page 78 Note Remember to save your changes with the SAVE CONFIGURATION command. Note Refer to the AT-S39 Management Software User’s Guide for background information on port security. Note You can only configure port security from a local management session. You cannot set the feature through enhanced stacking or from a Telnet management session.
AT-S39 Command Line Interface User’s Guide SET SWITCH SECURITYMODE Syntax set switch securitymode=automatic|limited|secure| locked Parameter securitymode Specifies the switch’s security mode. Values are: automatic Disables port security on the switch. This is the default setting. limited Sets the switch to the Limited security mode. This mode allows you to specify a maximum number of MAC addresses each port can learn. To specify a MAC address limit for a port, use the SET SWITCH THRESHOLD command.
Chapter 8: Port Security Commands Examples The following command sets the switch’s port security mode to limited: set switch securitymode=limited The following command disables port security: set switch securitymode=automatic 76
AT-S39 Command Line Interface User’s Guide SET SWITCH THRESHOLD Syntax set switch threshold=threshold port=port Parameters threshold Specifies the maximum number of dynamic MAC addresses a port on the switch can learn. The range is 1 to 150 addresses. The default is 100. port Specifies the port whose threshold you want to change. You can specify more than one port at a time. You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9), or both (e.g., 2,5,7-9).
Chapter 8: Port Security Commands SHOW SWITCH THRESHOLD Syntax show switch threshold Parameters None. Description This command displays the threshold limits for all the ports. The threshold limits apply when the switch is operating in the Limited Security Mode. They state the maximum number of dynamic MAC addresses each port can learn. A port that has learned its maximum number of MAC addresses will discard ingress frames from end nodes with MAC addresses not already learned by the port.
Chapter 9 Port Trunking Commands ❑ ADD SWITCH TRUNK on page 80 ❑ CREATE SWITCH TRUNK on page 81 ❑ DELETE SWITCH TRUNK on page 83 ❑ DESTROY SWITCH TRUNK on page 84 ❑ SET SWITCH TRUNK on page 85 ❑ SHOW SWITCH TRUNK on page 86 Note Remember to save your changes with the SAVE CONFIGURATION command. Note Refer to the AT-S39 Management Software User’s Guide for guidelines and background information on port trunking.
Chapter 9: Port Trunking Commands ADD SWITCH TRUNK Syntax add switch trunk=name port=ports Parameters trunk Specifies the name of the trunk. (You can enter any alphanumeric character for the name and this command will work. This is useful if you have forgotten the name you assigned the trunk.) port Specifies the port to be added to the existing port trunk. You can add more than one port. The ports can be specified individually (e.g., 1,2) or as a range (e.g.,12).
AT-S39 Command Line Interface User’s Guide CREATE SWITCH TRUNK Syntax create switch trunk=name port=ports [select=macsrc|macboth] Parameters trunk Specifies the name of the trunk. The name can be up to 10 alphanumeric characters. No spaces or special characters are allowed. port Specifies the ports of the trunk. A trunk can have up to 4 ports. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 2-5), or both (e.g., 1113,18). select Specifies the load distribution method.
Chapter 9: Port Trunking Commands are the same. You should also check to be sure that the ports are untagged members of the same VLAN. You cannot create a trunk of ports that are untagged members of different VLANs. Examples The following command creates a port trunk of Ports 3 through 6 on the switch and assigns it the name “load22.
AT-S39 Command Line Interface User’s Guide DELETE SWITCH TRUNK Syntax delete switch trunk=name port=ports Parameters trunk Specifies the name of the trunk to be modified. (You can enter any alphanumeric character for the name and this command will work. This is useful if you have forgotten the name you assigned the trunk.) port Specifies the port to be removed from the existing port trunk. You can remove more than one port at a time. The ports can be specified individually (e.g., 1,4) or as a range (e.
Chapter 9: Port Trunking Commands DESTROY SWITCH TRUNK Syntax destroy switch trunk=name Parameter trunk Specifies the name of the trunk to be deleted. (You can enter any alphanumeric character for the name and this command will still work. This is useful if you forgot the name you assigned the trunk.) Description This command deletes the port trunk from a switch. Once a port trunk has been deleted, the ports that made up the trunk can be connected to different end nodes.
AT-S39 Command Line Interface User’s Guide SET SWITCH TRUNK Syntax set switch trunk=name select=macsrc|macboth Parameters trunk Specifies the name of the trunk. (You can enter any alphanumeric character for the name and this command will still work. This is extremely useful if you forgot the name you assigned the trunk.) select Specifies the load distribution method. Options are: macsrc Source address (SA) trunking. macboth Source address / destination address (SA/DA) trunking. This is the default.
Chapter 9: Port Trunking Commands SHOW SWITCH TRUNK Syntax show switch trunk Parameters None. Description This command displays the ports and the load distribution method of the port trunk.
Chapter 10 Port Mirroring Commands ❑ ADD SWITCH MIRROR on page 88 ❑ CREATE SWITCH MIRROR on page 89 ❑ DELETE SWITCH MIRROR on page 90 ❑ DESTROY SWITCH MIRROR on page 91 ❑ SET SWITCH MIRROR on page 92 ❑ SET SWITCH PORT MIRROR on page 93 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on port mirroring, refer to the AT-S39 Management Software User’s Guide.
Chapter 10: Port Mirroring Commands ADD SWITCH MIRROR Syntax add switch mirror srcport=port Parameter srcports Specifies the port(s) whose data are to the copied to the destination port. You can specify more than one port. The ports can be specified individually (e.g., 1,2), as a range (e.g., 2-3), or both (1,4,7-9). Description This command adds source ports to an existing port mirror.
AT-S39 Command Line Interface User’s Guide CREATE SWITCH MIRROR Syntax create switch mirror destport=destinationport srcport=sourceport Parameters destport Specifies the destination port where the data will be copied to and where the network analyzer will be connected. You can specify only one destination port. srcport Specifies the port whose traffic is to be mirrored. You can specify more that one port. The ports can be specified individually (e.g., 1,4,6), as a range (e.g., 1114), or both (1,4,7-9).
Chapter 10: Port Mirroring Commands DELETE SWITCH MIRROR Syntax delete switch mirror srcport=port Parameters srcports Specifies the source port(s) to be removed from an existing port mirror. The ports can be specified individually (e.g., 1,2), a range (e.g., 2-3), or both (1,4,79). Description This command removes a source port(s) from a port mirror.
AT-S39 Command Line Interface User’s Guide DESTROY SWITCH MIRROR Syntax destroy switch mirror Parameters None. Description This command deletes a port mirror. Once a port mirror has been deleted, the port that was functioning as the destination (mirror) port can be disconnected from the network analyzer and connected to an end node for normal network operations.
Chapter 10: Port Mirroring Commands SET SWITCH MIRROR Syntax set switch mirror=port Parameter mirror Specifies the new destination port for the mirrored traffic. You can specify only one port. Description This command specifies a new destination port of an existing port mirror. The destination port is where the network analyzer is located and where the traffic from the source ports is copied to. Example The following command makes Port 11 the new destination port of the port mirror.
AT-S39 Command Line Interface User’s Guide SET SWITCH PORT MIRROR Syntax set switch port=port mirror=yes|all|no|none Parameters ports Specifies the source port(s) to be added or removed from an existing port mirror. The ports can be specified individually (e.g., 1,2), a range (e.g., 2-3), or both (1,4,7-9). mirror Specifies whether the source port is to be added or removed. Values are: yes, all Adds the port as a source port to the port mirror. The values are equivalent.
Chapter 11 STP Commands ❑ ACTIVATE STP on page 95 ❑ DISABLE STP on page 96 ❑ ENABLE STP on page 97 ❑ RESET STP on page 98 ❑ SET STP on page 99 ❑ SET STP PORT on page 101 ❑ SHOW STP on page 103 Note Remember to save your changes with the SAVE CONFIGURATION command. Note Refer to the AT-S39 Management Software User’s Guide for background information on the Spanning Tree Protocol (STP).
AT-S39 Command Line Interface User’s Guide ACTIVATE STP Syntax activate stp Parameters None Description Use this command to designate STP as the active spanning tree on the switch. Once you have selected STP, you can enable or disable it using the ENABLE STP and DISABLE STP commands. A spanning tree protocol is active on a switch only after you designate it as the active spanning tree and enable it. The default active spanning tree is RSTP.
Chapter 11: Spanning Tree Protocol Commands DISABLE STP Syntax disable stp Parameters None. Description This command disables STP on the switch. The default setting for STP is disabled. To view the current status of STP, use the SHOW STP command.
AT-S39 Command Line Interface User’s Guide ENABLE STP Syntax enable stp Parameters None. Description This command enables STP on the switch. The default setting for STP is disabled. To view the current status of STP, use the SHOW STP command.
Chapter 11: Spanning Tree Protocol Commands RESET STP Syntax reset stp Parameters None. Description This command returns all STP bridge and port parameters to the default settings. STP must be disabled in order for you to use this command. To disable STP, use the DISABLE STP command.
AT-S39 Command Line Interface User’s Guide SET STP Syntax set stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] Parameters default Returns all bridge and port STP settings to the default values. This parameter performs the same function as the RESET STP command. This parameter should not be used with any other command parameter. STP must be disabled in order for you to use this parameter. To disable STP, use the DISABLE STP command.
Chapter 11: Spanning Tree Protocol Commands For example, if you use the default 20, all bridges delete current configuration messages after 20 seconds. The range is 6 to 40 seconds. The default is 20 seconds. Note The value for the maxage parameter must be greater than (2 x (hellotime +1)) and less than (2 x (forwarddelay -1)).
AT-S39 Command Line Interface User’s Guide SET STP PORT Syntax set stp port=port [default] [portcost=auto|portcost] [portpriority=portpriority] [fastmode=enable|disable][participate=yes|no] Parameters port Specifies the port you want to configure. You can specify more than one port at a time. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 25), or both (e.g., 11-13,18). default Returns the port’s STP settings to the default values.
Chapter 11: Spanning Tree Protocol Commands participate Activates and deactivates STP on the port. If you select Yes, which is the default, the port will participate in the spanning tree. If you select No, the port will continue to receive and transmit Ethernet frames, but will not participate in spanning tree. Note A port that is not participating in spanning tree is immediately placed in the forwarding state.
AT-S39 Command Line Interface User’s Guide SHOW STP Syntax show stp [port=port] Parameters port Specifies the port whose STP parameters you want to view. You can specify more than one port at a time. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 2-5), or both (e.g., 11-13,18). Description This command displays the STP bridge and port parameter settings.
Chapter 12 RSTP Commands ❑ ACTIVATE RSTP on page 105 ❑ DISABLE RSTP on page 106 ❑ ENABLE RSTP on page 107 ❑ RESET RSTP on page 108 ❑ SET RSTP on page 109 ❑ SET RSTP PORT on page 112 ❑ SHOW RSTP on page 115 Note Remember to save your changes with the SAVE CONFIGURATION command. Note Refer to the AT-S39 User’s Guide for background information on the Rapid Spanning Tree Protocol (RSTP).
AT-S39 Command Line Interface User’s Guide ACTIVATE RSTP Syntax activate rstp Parameters None Description Use this command to designate RSTP as the active spanning tree on the switch. A spanning tree protocol is active on a switch only if you designate it as the active spanning tree and enable it. Note A change to the active spanning tree protocol will reboot the switch. Some network traffic may be lost.
Chapter 12: Rapid Spanning Tree Protocol Commands DISABLE RSTP Syntax disable rstp Parameters None Description This command disables the Rapid Spanning Tree Protocol on the switch. The default setting for RSTP is disabled.
AT-S39 Command Line Interface User’s Guide ENABLE RSTP Syntax enable rstp Parameters None Description This command enables the Rapid Spanning Tree Protocol on the switch. The default setting for RSTP is disabled.
Chapter 12: Rapid Spanning Tree Protocol Commands RESET RSTP Syntax reset rstp Parameters None. Description This command returns all bridge and port RSTP parameters to the default settings. RSTP must be disabled in order for you to use this command. To disable RSTP, use the DISABLE RSTP command.
AT-S39 Command Line Interface User’s Guide SET RSTP Syntax set rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] [forceversion=forcestpcompatible|normalrstp] Parameters default Disables RSTP and returns all bridge and port RSTP settings to the default values. This option performs the same function as the RESET RSTP command. This parameter should not be used with any other command parameter. RSTP must be disabled in order for you to use this parameter.
Chapter 12: Rapid Spanning Tree Protocol Commands Table 1 RSTP Bridge Priority Value Increments Increment Bridge Priority Increment Bridge Priority 7 28672 15 61440 hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds. The default is 2 seconds. forwarddelay Specifies the waiting period before a bridge changes to a new state, for example, becomes the new root bridge after the topology changes.
AT-S39 Command Line Interface User’s Guide Description This command is used to configure the following RSTP parameter settings.
Chapter 12: Rapid Spanning Tree Protocol Commands SET RSTP PORT Syntax set rstp port=port [default] [portcost=auto|portcost] [portpriority=portpriority][edgeport=yes|no] [pointtopoint=yes|no|autoupdate] [migrationcheck=yes|no] Parameters port Specifies the port you want to configure. You can specify more than one port at a time. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 25), or both (e.g., 11-13,18). default Returns the port’s RSTP settings to their default values.
AT-S39 Command Line Interface User’s Guide portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridge. The range is 0 to 240 in increments of 16. There are sixteen increments. You specify the increment of the desired value. The default is 128 (increment 8).
Chapter 12: Rapid Spanning Tree Protocol Commands migrationcheck Instructs the switch to send out RSTP BPDU packets for several seconds from the selected port. The purpose is to determine if there are any RSTP or STP bridges connected to the port. If the port receives STP BPDU packets in response, the port changes to STP compatible mode. If the port receives RSTP BPDU packets, it operates in RSTP. Description This command sets a port’s RSTP settings.
AT-S39 Command Line Interface User’s Guide SHOW RSTP Syntax show rstp [portconfig=port|portstate=port] Parameters portconfig Displays the RSTP port settings. You can specify more than one port at a time. portstate Displays the RSTP port status. You can specify more than one port at a time. Description You can use this command to display the parameter settings for RSTP.
Chapter 13 VLAN Commands ❑ ADD VLAN on page 117 ❑ CREATE VLAN on page 119 ❑ DELETE VLAN on page 123 ❑ DESTROY VLAN on page 126 ❑ RESET VLAN on page 127 ❑ SET SWITCH INFILTERING on page 128 ❑ SET SWITCH MANAGEMENTVLAN on page 129 ❑ SET SWITCH SWITCHMODE on page 130 ❑ SET SWITCH VLANMODE on page 131 ❑ SET SWITCH VLANSTATUS on page 132 ❑ SHOW VLAN on page 133 Note Remember to use the SAVE CONFIGURATION command to save your changes on the switch.
AT-S39 Command Line Interface User’s Guide ADD VLAN Syntax 1 add vlan=name|vid ports=ports frame=untagged|tagged [mirrorport=port] Syntax 2 add vlan=name|vid taggedports=ports untaggedports=ports [mirrorport=port] Parameters vlan Specifies the name or VID of the VLAN where you want to add tagged or untagged ports. ports Specifies the ports to be added to the VLAN. This parameter must be used with the FRAME parameter. frame Specifies whether the ports to be added will be tagged or untagged.
Chapter 13: VLAN Commands This command, just like the CREATE VLAN command, has two syntaxes. You can use either command to add ports to a VLAN. The difference between the two is that Syntax 1 can add only one type of port, tagged or untagged, at a time to a VLAN, while Syntax 2 can add both in the same command. This is illustrated in Examples below. When you add a port as an untagged port to a VLAN, it is automatically removed from its current untagged VLAN assignment.
AT-S39 Command Line Interface User’s Guide CREATE VLAN Syntax 1 create vlan=name vid=vid ports=ports|all frame=untagged|tagged [mirrorport=port] Syntax 2 create vlan=name vid=vid taggedports=ports|all untaggedports=ports|all [mirrorport=port] Parameters vlan Specifies the name of the VLAN. A VLAN must be assigned a name. The name can be from one to ten characters in length. The name should reflect the function of the nodes that will be a part of the VLAN (for example, Sales or Accounting).
Chapter 13: VLAN Commands ports Specifies the ports on the switch that are to be either tagged or untagged members of the new VLAN. You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9), or both (e.g., 2,5,7-9). To specify all ports on the switch, use ALL. This parameter must be followed by the FRAME parameter. frame Specifies whether the ports of the VLAN are to be tagged or untagged. This parameter must be used with the PORTS parameter.
AT-S39 Command Line Interface User’s Guide When you create a new VLAN, untagged ports of the new VLAN are automatically removed from their current untagged VLAN assignment. This is because a port can be an untagged member of only one VLAN at a time. For example, creating a new VLAN with untagged Ports 1 to 4 automatically removes these ports from whichever VLAN where they are currently untagged members.
Chapter 13: VLAN Commands create vlan name=Service vid=16 ports=1,4,5-7 frame=untagged Then, to add the other ports to the VLAN (in this case tagged ports), you would use the ADD VLAN command. Syntax 2 can create a VLAN of both tagged and untagged ports all in one command. Here is the command that would create our example: create vlan name=Service vid=16 untaggedports=1,4,5-7 taggedports=11,14 That’s the advantage of Syntax 2 over Syntax 1.
AT-S39 Command Line Interface User’s Guide DELETE VLAN Syntax 1 delete vlan=name|vid ports=ports|all frame=untagged|tagged [mirrorport=port] Syntax 2 delete vlan=name|vid taggedports=ports|all untaggedports=ports|all [mirrorport=port] Parameters vlan Specifies the name or VID of the VLAN from which ports are to be removed. ports Specifies the ports to be removed from the VLAN. This parameter must be used with the FRAME parameter. frame Specifies whether the ports to be removed are tagged or untagged.
Chapter 13: VLAN Commands Note To delete a VLAN, see the command DESTROY VLAN. Note You cannot change the name or VID of a VLAN. When an untagged port is deleted from a VLAN, it is automatically returned to the Default_VLAN as an untagged member. If a port is also functioning as a tagged member of other VLANs, it remains a member of the other VLANs. For example, if you remove Port 4 from a VLAN, the port is automatically returned as an untagged port to the Default VLAN.
AT-S39 Command Line Interface User’s Guide Using Syntax 2, you can do the whole thing with just one command: delete vlan name=Service untaggedports=10-12 taggedports=5 125
Chapter 13: VLAN Commands DESTROY VLAN Syntax destroy vlan=name Parameter vlan Specifies the name of the VLAN to be deleted. Description This command deletes port-based and tagged VLANs from a switch. All untagged ports in a deleted VLAN are automatically returned to the Default_VLAN. You cannot delete the Default_VLAN.
AT-S39 Command Line Interface User’s Guide RESET VLAN Syntax reset vlan Parameters none Description This command deletes all port-based and tagged VLANs on a switch, except for the Default_VLAN. All ports are returned to the Default_VLAN as untagged ports. To delete individual VLANs, refer to the DESTROY VLAN command.
Chapter 13: VLAN Commands SET SWITCH INFILTERING Syntax set switch infiltering=on|off Parameter infiltering Specifies the status of ingress filtering. Options are: on Ingress filtering is activated. off Ingress filtering is deactivated. Description This command controls the status of ingress filtering. When ingress filtering is activated, which is the default, tagged frames are filtered when they are received on a port.
AT-S39 Command Line Interface User’s Guide SET SWITCH MANAGEMENTVLAN Syntax set switch managementvlan=name|vid Parameters managementvlan Specifies the management VLAN. You can specify the VLAN by name or VID. You can specify only one management VLAN. The VLAN must already exist on the switch. The default management VLAN is Default_VLAN (VID 1). Description This command sets the management VLAN.
Chapter 13: VLAN Commands SET SWITCH SWITCHMODE Syntax set switch switchmode=tagged|basic Parameters vlanmode Specifies the switch’s mode. Specifying TAGGED means the switch will support user-configured (portbased and tagged) and multiple (801.Q compliant and non-801.Q compliant) VLANs. Specifying BASIC means the switch will support the Basic switch mode. The default is tagged. Only one mode can be active on a switch at a time.
AT-S39 Command Line Interface User’s Guide SET SWITCH VLANMODE Syntax set switch vlanmode=userconfig|multiple| dotqmultiple Parameters vlanmode Specifies the switch’s VLAN mode. Options are: USERCONFIG Sets the switch to support portbased and tagged VLANs. This is the default. MULTIPLE Configures the switch for the non801.Q compliant multiple VLANs mode. DOTQMULTIPLE Configures the switch for the 801.Q compliant multiple VLANs mode. The default is USERCONFIG.
Chapter 13: VLAN Commands SET SWITCH VLANSTATUS Syntax set switch vlanstatus=enable|disable Parameters vlanstatus Specifies the switch’s mode. Specifying ENABLE means the switch will support user-configured (portbased and tagged) and multiple (801.Q compliant and non-801.Q compliant) VLANs. Specifying DISABLE means the switch will support the Basic switch mode. The default is tagged and untagged VLANs. Only one mode can be active on a switch at a time.
AT-S39 Command Line Interface User’s Guide SHOW VLAN Syntax show vlan[=name|vid] Parameters vlan Specifies the name or VID of the VLAN. Description This command displays all the port-based and tagged VLANs on a switch. The information includes the names of the VLANs, the VIDs, and the port members.
Chapter 14 MAC Address Table Commands ❑ ADD SWITCH FDB on page 135 ❑ DELETE SWITCH FDB on page 136 ❑ SET SWITCH AGINGTIMER on page 137 ❑ SHOW SWITCH FDB on page 138 Note Remember to save your changes with the SAVE CONFIGURATION command.
AT-S39 Command Line Interface User’s Guide ADD SWITCH FDB Syntax add switch fdb macaddress=macaddress port=port Parameters macaddress Specifies the static unicast or multicast address to add to the switch’s MAC address table. The address can be entered in either of the following formats: xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx port Specifies the port to which the MAC address is to be assigned. For a unicast address, you can specify only one port. For a multicast address, you can specify multiple ports.
Chapter 14: MAC Address Commands DELETE SWITCH FDB Syntax delete switch fdb macaddress=macaddress [vlan=name|VID] Parameters address Specifies the dynamic or static unicast or multicast MAC address to delete from the MAC address table. The address can be entered in either of the following formats: xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx vlan Specifies the VLAN containing the port where the address was learned or assigned. The VLAN can be specified by name or VID.
AT-S39 Command Line Interface User’s Guide SET SWITCH AGINGTIMER Syntax set switch agingtimer=value Parameter agingtimer Specifies the aging timer for the MAC address table. The value is in seconds. The range is 1 to 1048575. The default is 300 seconds (5 minutes). Description The switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table.
Chapter 14: MAC Address Commands SHOW SWITCH FDB Syntax show switch fdb [address=macaddress] [port=port] [status=static|dynamic|multicast] [vlan=name|VID] Parameters address Specifies a MAC address. Use this parameter to determine the port on the switch on which a particular MAC address was learned (dynamic) or assigned (static). The address can be entered in either of the following formats: xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx port Specifies a port on the switch.
AT-S39 Command Line Interface User’s Guide Port The port on the switch where the unicast MAC address was learned or assigned. This column is empty for a multicast address. PMAP The ports on the switch that are members of a multicast group. This column is useful in determining which ports belong to different multicast groups. (The abbreviation PMAP is derived from “port mapping.”) Each “0” is a hexadecimal value for the binary value “0000”. Each binary “0” represents a port on the switch.
Chapter 14: MAC Address Commands The following command displays just the multicast addresses: show switch fdb status=multicast The following command displays the port number on which the MAC address 00:A0:D2:18:1A:11 was learned (dynamic) or added (static): show switch fdb address=00A0D2181A11 The following command displays the dynamic MAC addresses learned on Port 11: show switch fdb port=11 The following command displays the MAC addresses learned on the ports in the Sales VLAN: show switch fdb vlan=sales
Chapter 15 IGMP Snooping Commands ❑ SET IP IGMP on page 142 ❑ SHOW IP IGMP on page 144 Note Remember to use the SAVE CONFIGURATION command to save your changes on the switch. Note For background information on IGMP snooping, refer to the AT-S39 Management Software User’s Guide.
Chapter 15: IGMP Snooping Commands SET IP IGMP Syntax set ip igmp [snoopingstatus=enable|disable] [hoststatus=singlehost|multihost] [timeout=timeout] [numbermulticastgroups=number] [routerport=portnumber|auto] Parameters snoopingstatus hoststatus Activates and deactivates IGMP snooping on the switch. Possible settings are: enable Activates IGMP snooping. disable Deactivates IGMP snooping. This is the default setting Specifies the IGMP host node topology.
AT-S39 Command Line Interface User’s Guide from filling up with multicast addresses, leaving no room for dynamic or static MAC addresses. The range is 1 to 2048 addresses. The default is 256 addresses. routerport Specifies the port(s) on the switch connected to a multicast router. Specifying AUTO activates auto-detect, where the switch automatically determines the ports with multicast routers. Auto-detect is the default setting. Description This command configures the IGMP snooping parameters.
Chapter 15: IGMP Snooping Commands SHOW IP IGMP Syntax show ip igmp [hostlist|routerlist] Parameters hostlist Displays a list of the multicast groups learned by the switch, as well as the ports on the switch that are connected to host nodes. routerlist Displays the ports on the switch that are connected to multicast routers. Description Displays the IGMP parameter settings. This command can also display a list of host nodes as well as a list of switch ports connected to multicast routers.
Chapter 16 Broadcast Frame Control Command ❑ SET SWITCH BROADCAST on page 146 ❑ SET SWITCH PORT BCLIMIT on page 148 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on broadcast frame control, refer to the AT-S39 Management Software User’s Guide.
Chapter 16: Broadcast Frame Control Commands SET SWITCH BROADCAST Syntax set switch broadcast timer10_100mbps=integer timer1000mbps=integer Parameters timer10_100mbps Specifies the broadcast timer interval for ports operating at 10 Mbps or 100 Mbps. The range is 10 to 120 milliseconds, in increments of 10, with a default of 10 milliseconds. timer1000mbps Specifies the length of time, in microseconds, for ports operating at 1000 Mbps.
AT-S39 Command Line Interface User’s Guide The following command sets a broadcast timer of 200 microseconds for ports operating at 1000 Mbps: set switch broadcast timer1000mbps=200 147
Chapter 16: Broadcast Frame Control Commands SET SWITCH PORT BCLIMIT Syntax set switch port=port bclimit=broadcastlimit Parameters port Specifies the port where you want to configure the broadcast limit. You can specify more than one port at a time. You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9), or both (e.g., 2,5,7-9). bclimit Specifies the maximum number of broadcast frames the port will transmit during the interval specified by the broadcast timer.
Chapter 17 TACACS+ and RADIUS Commands ❑ ADD RADIUSSERVER on page 150 ❑ ADD TACACSSERVER on page 151 ❑ DELETE RADIUSSERVER on page 152 ❑ DELETE TACACSSERVER on page 153 ❑ DISABLE AUTHENTICATION on page 154 ❑ ENABLE AUTHENTICATION on page 155 ❑ RESET AUTHENTICATION on page 156 ❑ SET AUTHENTICATION on page 157 ❑ SHOW AUTHENTICATION on page 159 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 17: TACACS+ and RADIUS Commands ADD RADIUSSERVER Syntax add radiusserver ipaddress=ipaddress order=integer [secret=string] [port=integer] Parameters ipaddress Specifies an IP address of a RADIUS server. order Specifies the order that your RADIUS server is queried by the switch. You can assign order to up to 3 servers with 1 being the first server queried. secret Specifies the encryption key used for this server. port Specifies the UDP (User Datagram Protocol) port of the RADIUS server.
AT-S39 Command Line Interface User’s Guide ADD TACACSSERVER Syntax add tacacsserver ipaddress=ipaddress order=integer [secret=string] Parameters ipaddress Specifies an IP address of a TACACS+ server. order Specifies the order that your TACACS+ server is queried by the switch. You can assign order to up to 3 servers with 1 being the first server queried. secret Specifies the optional encryption key used on this server.
Chapter 17: TACACS+ and RADIUS Commands DELETE RADIUSSERVER Syntax delete radiusserver ipaddress=ipaddress Parameters ipaddress Specifies the IP address of your RADIUS server to be deleted. Description Use this command to delete a RADIUS server with the specified IP address from your switch. Example The following command deletes the RADIUS server with the IP address 149.245.22.22: delete radiusserver ipaddress=149.245.22.
AT-S39 Command Line Interface User’s Guide DELETE TACACSSERVER Syntax delete tacacsserver ipaddress=ipaddress Parameters ipaddress Specifies the IP address of the TACACS+ server that you want to delete. Description Use this command to delete the IP address of a TACACS+ server from your switch. Example The following command deletes the TACACS+ server with the IP address of 149.245.22.20: delete tacacsserver ipaddress=149.245.22.
Chapter 17: TACACS+ and RADIUS Commands DISABLE AUTHENTICATION Syntax disable authentication Parameters None. Description Use this command to disable TACACS+ and RADIUS manager account authentication on your switch. When you disable authentication you retain your current authentication parameter settings. Note This command applies only to TACACS+ and RADIUS manager accounts. This command does not effect 802.1x port-based access control.
AT-S39 Command Line Interface User’s Guide ENABLE AUTHENTICATION Syntax enable authentication Parameters None. Description Use this command to activate TACACS+ or RADIUS manager account authentication on your switch. To select an authenticator protocol, refer to SET AUTHENTICATION on page 157. Note This command applies only to TACACS+ and RADIUS manager accounts. This command does not effect 802.1x port-based access control. If you are using the RADIUS authentication protocol for 802.
Chapter 17: TACACS+ and RADIUS Commands RESET AUTHENTICATION Syntax reset authentication Parameter None. Description This command performs nearly the same function as the DISABLE AUTHENTICATION command. It disables authentication and, additionally, returns the authentication method to TACACS+. The current authentication settings are retained, including server IP addresses and encryption keys (both local and global).
AT-S39 Command Line Interface User’s Guide SET AUTHENTICATION Syntax set authentication method=[tacacs|radius] [secret=string] [timeout=integer] Parameter method Specify either the TACACS+ or RADIUS protocol to run on your switch. secret Specify the global encryption key that is used for all of your TACACS+ or RADIUS servers. If the servers use different encryption keys, you can leave this parameter blank and set individual encryption keys with the ADD TACACSSERVER or ADD RADIUSSERVER commands.
Chapter 17: TACACS+ and RADIUS Commands The following command selects RADIUS as the authentication protocol with a global encryption key of leopard09 and a timeout of 15 seconds: set authentication method=radius secret=leopard09 timeout=15 158
AT-S39 Command Line Interface User’s Guide SHOW AUTHENTICATION Syntax show authentication Parameters None. Description Use this command to display the following information about the authenticated protocols on the switch: ❑ The status of your authenticated protocol: enabled or disabled. ❑ The authentication protocol activated on your switch. Either TACACS+ or RADIUS protocols may be active. The TACACS+ protocol is the default. ❑ The IP addresses of up to 3 authentication servers.
Chapter 18 802.1x Port-Based Access Control Commands ❑ DISABLE PORTACCESS on page 161 ❑ ENABLE PORTACCESS on page 162 ❑ SET PORTACCESS on page 163 ❑ SHOW PORTACCESS on page 166 Note Remember to save your changes with the SAVE CONFIGURATION command. Note You must use a local management session to configure port-based access control. You cannot configure this feature through enhanced stacking or from a Telnet management session. Note For background information on 802.
AT-S39 Command Line Interface User’s Guide DISABLE PORTACCESS Syntax disable portaccess Parameters None. Description This command disables 802.1x port-based access control on the switch. When disabled, supplicant end nodes can pass traffic through the switch without logging on. The default settings for 802.1x port-based access is disabled. Note This command must be performed from a local management session.
Chapter 18: 802.1x Port-based Access Control Commands ENABLE PORTACCESS Syntax enable portaccess Parameters None. Description Use this command to enable 802.1x port-based access control on your switch. When enabled, supplicant nodes must log on to pass traffic through the switch. Note You should configure the RADIUS client software on the switch before enabling port-based access control. Refer to SET AUTHENTICATION on page 157. Note This command must be performed from a local management session.
AT-S39 Command Line Interface User’s Guide SET PORTACCESS Syntax set portaccess port=port [role=none|authenticator] [control=auto|forceauthenticate| forceunauthenticate] [quietperiod=integer] [txperiod=integer] [reauthperiod=integer] [supptimeout=integer] [servtimeout=integer] [maxreq=integer] Parameters port Specifies the port whose port-based access control role or settings you want to change. You can specify more than one port at a time. role Specifies the role of the port.
Chapter 18: 802.1x Port-based Access Control Commands uniquely identified by the switch by using the client's MAC address. This is the default setting. forceauthenticate Disables 802.1X port-based authentication and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic without 802.1X-based authentication of the client. The parameters are equivalent.
AT-S39 Command Line Interface User’s Guide servtimeout This is the timer used by the switch to determine authentication server timeout conditions. The default value for this parameter is 30 seconds. The range is 1 to 65,535 seconds. maxreq This parameter specifies the maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session. The default value for this parameter is 2 retransmissions. The range is 1 to 10 retransmissions.
Chapter 18: 802.1x Port-based Access Control Commands SHOW PORTACCESS Syntax show portaccess config|status Parameters config Displays the port-based access control roles and settings for all ports. status Displays the status and role of the ports. You can use this parameter only when port-based access is enabled. Description This command displays 802.1x port-based access control configuration and status information on the switch ports.
Chapter 19 Statistics Commands ❑ RESET SWITCH COUNTER on page 168 ❑ RESET SWITCH PORT COUNTER on page 169 ❑ SHOW SWITCH COUNTER on page 170 ❑ SHOW SWITCH PORT COUNTER on page 171 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 19: Statistics Commands RESET SWITCH COUNTER Syntax reset switch counter Parameters None. Description This command returns all statistics counters on the switch to zero (0).
AT-S39 Command Line Interface User’s Guide RESET SWITCH PORT COUNTER Syntax reset switch port=port counter Parameters port Specifies the port whose statistics counter you want to return to zero. You can specify more than one port at a time. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 2-5), or both (e.g., 11-13,18). Description This command returns the statistics counters for a port to zero. Example The following command returns the counters on Ports 4 and 5 to zero.
Chapter 19: Statistics Commands SHOW SWITCH COUNTER Syntax show switch counter Parameters None. Description This command displays switch operating statistics, such as the number of packets received and transmitted, and the number of CRC errors. For definitions of the statistics, refer to the AT-S39 User’s Guide.
AT-S39 Command Line Interface User’s Guide SHOW SWITCH PORT COUNTER Syntax show switch port[=port] counter Parameters port Specifies the port whose statistics you want to view. You can view more than one port at a time. The ports can be specified individually (e.g., 1,2,5,8), as a range (e.g., 2-5), or both (e.g., 11-13,18). To view all ports, do not specify a port. Description This command displays the operating statistics for a port on the switch.
Chapter 20 Download and Upload Commands ❑ LOAD on page 173 ❑ UPLOAD on page 178 Note For background information on downloading and uploading software images and configuration files, refer to the AT-S39 User’s Guide.
AT-S39 Command Line Interface User’s Guide LOAD Syntax load method=tftp|xmodem|remoteswitch type=image|config|bootloader switchnumber=switches Parameters method type Specifies the method of the download. Options are: tftp Indicates that the download will use TFTP. This download method can be used from either a local or remote management session. xmodem Indicates that the download will use Xmodem. This download method can be used from a local management session only.
Chapter 20: Download and Upload Commands Description This command can download a new version of the AT-S39 software image file or switch configuration onto an AT-8000 Series switch. You can use this command to download files as follows: ❑ From a local management session ❑ From a remote management session ❑ From a master switch to other switches in an enhanced stack To download a file locally, you must start a local management session directly on the switch.
AT-S39 Command Line Interface User’s Guide ❑ The image file and bootloader were offered as two separate files in several earlier software versions. In this version, the two files are combined into one file. ❑ It is not recommended that you download the bootloader by itself. If the bootloader on a switch needs to be updated, you should download the entire AT-S39 software image.
Chapter 20: Download and Upload Commands Here are guidelines that apply to a TFTP download: ❑ There must be a node on your network that contains the TFTP server software. The AT-S39 image file or configuration file to be downloaded must be stored on the server. ❑ You should start the TFTP server before you begin the download procedure. ❑ The switch on which you are downloading the file must have an IP address and subnet mask, such as a master switch of an enhanced stack.
AT-S39 Command Line Interface User’s Guide After entering this command, you must specify the location of the AT-S39 configuration file stored on your workstation using your terminal emulation program. TFTP Examples The following command downloads the AT-S39 image file using TFTP: load method=tftp type=image You are prompted for the IP address of the TFTP server and the name of the image file to download.
Chapter 20: Download and Upload Commands UPLOAD Syntax upload method=tftp|xmodem type=image|config Parameters method type Specifies the method of the upload. Options are: tftp Indicates that the upload will be performed using TFTP. This upload method can be used from either a local or remote management session. xmodem Indicates that the upload method will be Xmodem. This upload method can be used from a local management session only. Specifies the file to be uploaded.
AT-S39 Command Line Interface User’s Guide ❑ From a remote management session To upload a file locally, you must start a local management session directly on the switch. This involves connecting a terminal or PC with a terminal emulator program to the RS232 Terminal Port on the switch, as explained in the AT-S39 Management Software User’s Guide. You can use either Xmodem, or if the switch has an IP address and subnet mask, TFTP. You can also upload a file from a remote switch.
Chapter 20: Download and Upload Commands Xmodem Examples The following command uploads the switch’s configuration file to the management workstation: upload method=xmodem type=config After entering the command, use your terminal emulator program to indicate where you want to store the file on your workstation and the filename.
Chapter 21 ê Command Reference ❑ Basic Command Line Commands on page 182 ❑ Basic Switch Commands on page 183 ❑ Enhanced Stacking Commands on page 185 ❑ SNMP Community Strings and Trap Commands on page 186 ❑ Management Security Commands on page 187 ❑ Port Parameter Commands on page 188 ❑ Port Security Commands on page 189 ❑ Port Trunking Commands on page 189 ❑ Port Mirroring Commands on page 190 ❑ Spanning Tree Protocol Commands on page 191 ❑ Rapid Reconfiguration Spanning Tree Commands on page 192 ❑ VLAN
Chapter 21: Command Reference Basic Command Line Commands CLEAR SCREEN clear screen Clears the screen. HELP help Displays a list of command keywords. LOGOFF and QUIT logoff quit Ends a management session. MENU menu Displays the AT-S39 Main Menu. SAVE CONFIGURATION save configuration Saves your changes to the switch’s flash memory for permanent storage. SET PROMPT set prompt=”prompt” Sets the command line prompt.
AT-S39 Command Line Interface User’s Guide Basic Switch Commands DISABLE DHCPBOOTP disable dhcpbootp Deactivates the DHCP and BOOTP client software on the switch. ENABLE DHCPBOOTP enable dhcpbootp Activates the DHCP and BOOTP client software on the switch. PING ping ipaddress Instructs the switch to ping an end node. PURGE IP purge ip [ipaddress] [netmask] [route] Returns a switch’s IP address, subnet mask, or default gateway address to its default value.
Chapter 21: Command Reference SET IP set ip interface=1 ipaddress=IPaddress|DHCP netmask=subnetmask Configures the switch’s IP address and subnet mask, or activates the DHCP and BOOTP client software. SET IP ROUTE set ip route ipaddress=ipaddress Specifies the IP address of the default gateway for the switch.
AT-S39 Command Line Interface User’s Guide Displays a variety of switch information, including the MAC aging time, console timer, broadcast timers, and VLAN mode. SHOW SYSTEM show system Displays the AT-S39 software version and build date, bootloader version and build date, serial number, model name, switch name, name of the network administrator responsible for managing the unit, and location of the unit.
Chapter 21: Command Reference SNMP Community Strings and Trap Commands ADD SNMP COMMUNITY TRAPHOST add snmp community=”community” traphost=ipaddress Adds to a community string the IP address of a management workstation to receive management traps from the switch. CREATE SNMP COMMUNITY create snmp community=”community” access=read|write [traphost=ipaddress] Creates a new Read or Write community string on the switch.
AT-S39 Command Line Interface User’s Guide Management Security Commands DISABLE HTTP SERVER disable http server Disables the HTTP server on the switch so that the device cannot be managed from a web browser. DISABLE SNMP disable snmp Disables SNMP on the switch so that the device cannot be managed from a SNMP application program. ENABLE HTTP SERVER enable http server Enables the HTTP server on the switch so that the device can be managed from a web browser.
Chapter 21: Command Reference SHOW HTTP SERVER show http server Displays the status of the HTTP server on the switch. Port Parameter Commands RESET SWITCH PORT reset switch port=port Resets a port.
AT-S39 Command Line Interface User’s Guide Port Security Commands SET SWITCH SECURITYMODE set switch securitymode=automatic|limited|secure| locked Sets a switch’s port security mode. SET SWITCH THRESHOLD set switch threshold=threshold port=ports Sets the maximum number of dynamic MAC addresses a port can learn when the switch is operating in the Limited security mode.
Chapter 21: Command Reference SET SWITCH TRUNK set switch trunk=name select=macsrc|macboth Changes the load distribution method of a port trunk. SHOW SWITCH TRUNK show switch trunk Displays the ports of a port trunk and the load distribution method. Port Mirroring Commands ADD SWITCH MIRROR add switch mirror srcport=port Adds a source port(s) to an existing port mirror. CREATE SWITCH MIRROR create switch mirror destport=destinationport srcport=sourceport Creates a port mirror.
AT-S39 Command Line Interface User’s Guide Spanning Tree Protocol Commands ACTIVATE STP activate stp Designates STP as the active spanning tree. DISABLE STP disable stp Disables STP on the switch. ENABLE STP enable stp Enables STP on the switch. RESET STP reset stp Returns all STP bridge and port parameters to the default settings. SET STP set stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] Sets the STP bridge parameter settings.
Chapter 21: Command Reference Rapid Reconfiguration Spanning Tree Commands ACTIVATE RSTP activate rstp Designates RSTP as the active spanning tree on the switch. DISABLE RSTP disable rstp Disables RSTP on the switch. ENABLE RSTP enable rstp Enables RSTP on the switch. RESET RSTP reset rstp Returns all bridge and port RSTP parameters to the default settings.
AT-S39 Command Line Interface User’s Guide VLAN Commands ADD VLAN Syntax 1 add vlan=name|vid ports=ports frame=untagged|tagged [mirrorport=port] Syntax 2 add vlan=name|vid taggedports=ports untaggedports=ports [mirrorport=port] Adds tagged and untagged ports to existing port-based and tagged VLANs.
Chapter 21: Command Reference RESET VLAN reset vlan Deletes all port-based and tagged VLANs, except for the Default_VLAN. SET SWITCH INFILTERING set switch infiltering=on|off Activates and deactivates ingress filtering. SET SWITCH MANAGEMENTVLAN set switch managementvlan=name|vid Sets the switch’s management VLAN, used for remote Telnet and web browser management. SET SWITCH SWITCHMODE set switch switchmode=tagged|basic Configures a switch to support either port-based and tagged VLANs or the Basic mode.
AT-S39 Command Line Interface User’s Guide MAC Address Table Commands ADD SWITCH FDB add switch fdb macaddress=macaddress port=port Adds static unicast and multicast MAC addresses to the switch’s MAC address table. DELETE SWITCH FDB delete switch fdb macaddress=macaddress [vlan=name|VID] Deletes dynamic and static unicast and multicast addresses from the switch’s MAC address table. SET SWITCH AGINGTIMER set switch agingtimer=value Sets the aging timer for the MAC address table.
Chapter 21: Command Reference Broadcast Frame Control Commands SET SWITCH BROADCAST set switch broadcast timer10_100mbps=integer timer1000mbps=integer Specifies the broadcast interval timers. SET SWITCH PORT BCLIMIT set switch port=port bclimit=broadcastlimit Specifies the maximum number of egress broadcast frames the port will transmit during the interval specified by the broadcast timer.
AT-S39 Command Line Interface User’s Guide ENABLE AUTHENTICATON enable authentication Enables TACACS+ and RADIUS management account authentication on the switch. RESET AUTHENTICATON reset authentication Disables TACACS+ and RADIUS authentication. SET AUTHENTICATON set authentication method=[tacacs|radius] [secret=string] [timeout=integer] Selects the authentication protocol. SHOW AUTHENTICATON show authentication Displays information about the authenticated protocols on the switch. 802.
Chapter 21: Command Reference SHOW PORTACCESS STATUS show portaccess status Displays the port-based access control status on the switch. Statistics Commands RESET SWITCH COUNTER reset switch counter Returns all statistics counters on the switch to zero (0). RESET SWITCH PORT COUNTER reset switch port=port counter Returns the statistics counters for a port to zero.
AT-S39 Command Line Interface User’s Guide Download and Upload Commands LOAD load method=tftp|xmodem|remoteswitch type=image|config|bootloader switchnumber=switches Downloads a new version of the AT-S39 software image or a configuration file onto an AT-8000 Series switch. UPLOAD upload method=tftp|xmodem type=image|config Uploads the AT-S39 software image or configuration file from a switch to a management workstation or tftp server.
Index Numerics 802.1x port-based access DISABLE PORTACCESS, 161 ENABLE PORTACCESS, 162 SET PORTACCESS, 163 SHOW PORTACCESS STATUS, 166 802.
AT-S39 Command Line Interface User’s Guide STP, 94 TACACs and RADIUS, 149 trap 49 VLAN, 116 commands ACCESS SWITCH, 45 ACTIVATE RSTP, 105 ACTIVATE STP, 95 ADD RADIUSSERVER, 150 ADD SNMP COMMUNITY TRAPHOST, 50 ADD SWITCH FDB, 135 ADD SWITCH MIRROR, 88 ADD SWITCH TRUNK, 80 ADD TACACSSERVER, 151 ADD VLAN, 117 CLEAR SCREEN, 17 CREATE SNMP COMMUNITY, 51 CREATE SWITCH MIRROR, 89 CREATE SWITCH TRUNK, 81 CREATE VLAN, 119 DELETE RADIUSSERVER, 152 DELETE SNMP COMMUNITY TRAPHOST, 52 DELETE SWITCH FDB, 136 DELETE SWIT
Index SET SWITCH VLANSTATUS, 132 SET SYSTEM, 37 SHOW AUTHENTICATION, 159 SHOW CONFIG, 38 SHOW DHCPBOOTP, 39 SHOW HTTP SERVER, 65 SHOW IP IGMP, 144 SHOW IP ROUTE, 41 SHOW IP, 40 SHOW PORTACCESS STATUS, 166 SHOW REMOTELIST, 48 SHOW RSTP, 115 SHOW SNMP, 56 SHOW STP, 103 SHOW SWITCH COUNTER, 170 SHOW SWITCH FDB, 138 SHOW SWITCH PORT COUNTER, 171 SHOW SWITCH PORT, 73 SHOW SWITCH THRESHOLD, 78 SHOW SWITCH TRUNK, 86 SHOW SWITCH, 42 SHOW SYSTEM, 43 SHOW USER, 24 SHOW VLAN, 133 UPLOAD, 178 D document conventions, 8
AT-S39 Command Line Interface User’s Guide port trunking commands ADD SWITCH TRUNK, 80 CREATE SWITCH TRUNK, 81 DELETE SWITCH TRUNK, 83 DESTROY SWITCH TRUNK, 84 SET SWITCH TRUNK, 85 SHOW SWITCH TRUNK, 86 R RSTP commands ACTIVATE RSTP, 105 DISABLE RSTP, 106 ENABLE RSTP, 107 RESET RSTP, 108 SET RSTP PORT, 112 SET RSTP, 109 SHOW RSTP, 115 U upload commands LOAD, 173 UPLOAD, 178 V VLAN commands ADD VLAN, 117 CREATE VLAN, 119 SET SWITCH MANAGEMENTVLAN, 129 SET SWITCH SWITCHMODE, 130 SET SWITCH VLANMODE, 131 SHO
