Manual

ManualsBrandsAsus ManualsCommunicationGigaX2024B

GigaX2024B/M

CLI Manual

Layer 2 Managed Switch

Summary of content (245 pages)

PAGE 1
GigaX2024B/M Layer 2 Managed Switch CLI Manual
PAGE 2
E2644 May 2006 V1 No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK COMPUTER INC. (ASUS).
PAGE 3
Table of content CLI Command Modes.................................................................. 1 1 IGMP.......................................................................................... 2 1.1 ip igmp snooping............................................................................... 2 1.2 ip igmp snooping last-member-query-interval TIMEVALUE.............. 2 1.3 ip igmp snooping vlan <1-3000>....................................................... 3 1.
PAGE 4
.7 show gvrp interface IFNAME ..........................................................11 4.8 garp join-timer <1-100000000>........................................................11 4.9 garp leaveall-timer <1-100000000>.................................................11 4.10 garp leave-timer <1-100000000>.................................................... 12 4.11 show garp timer IFNAME................................................................ 12 5. VLAN:...................................
PAGE 5
6.15 show dot1x radius........................................................................... 23 6.16 show dot1x user.................................................................................. 23 7. Mirror...................................................................................... 23 7.1 mirror session <1-8> destination IFNAME...................................... 23 7.2 mirror session <1-8> source IFLIST (rx|tx|both))............................ 24 7.3 show mirror session......
PAGE 6
iv 10.4 show mac-address-table aging-time............................................... 34 10.5 mac-address-table static MACADDR VLANID IFNAME................. 34 10.6 mac-address-table multicast MACADDR vlan VLANID interface IFLIST COS_DEST......................................................................... 35 10.7 no mac-address-table multicast MACADDR vlan VLANID interface IFLIST COS_DEST......................................................................... 35 10.
PAGE 7
10.31 spanning-tree forward-time <4-30>................................................. 45 10.32 spanning-tree hello time <1-10>..................................................... 45 10.33 spanning-tree link-type (auto|point-to-point|shared)....................... 46 10.34 spanning-tree max-age <6-40>....................................................... 46 10.35 spanning-tree port-priority <0-240>................................................ 47 10.36 spanning-tree priority <0-61440>......
PAGE 8
vi 11.4 show snmp-server community network........................................... 56 11.5 show snmp-server contact.............................................................. 56 11.6 show snmp-server host................................................................... 56 11.7 show snmp-server location............................................................. 57 11.8 show snmp-server trap community................................................. 57 11.
PAGE 9
11.31 show snmp-server view.................................................................. 72 11.32 show snmp-server group................................................................ 72 11.33 show snmp-server user................................................................... 72 11.34 snmp-server host A.B.C.D version (1|2) [COMMUNITY]................ 73 11.35 no snmp-server community trap .................................................... 73 11.36 show rmon alarms....................
PAGE 10
12.3 show mac access-list [ACLNAME].................................................. 83 12.4 (permit|deny) any any [IFNAME].................................................... 83 12.5 (permit|deny) MACADDR MACADDR any [IFNAME]..................... 83 12.6 (permit|deny) host MACADDR any [IFNAME]................................ 84 12.7 (permit|deny) host MACADDR host MACADDR [IFNAME]............ 85 12.8 (permit|deny) MACADDR MACADDR MACADDR MACADDR [IFNAME].........................................
PAGE 11
[IFNAME]........................................................................................ 97 13.16 (permit|deny) (ip|tcp|udp|icmp) host IPADDR any [IFNAME].......... 97 13.17 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME].................................................................... 98 13.18 (permit|deny) icmp host IPADDR any [<1-255>] code [<1-255>] [IFNAME]........................................................................................ 99 13.
PAGE 12
13.34 (permit|deny) (ip|tcp|udp|icmp) any IPADDR MASK [IFNAME]......112 13.35 (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME]...................................................................113 13.36 (permit|deny) icmp any IPADDR MASK <1-255> code <1-255> [IFNAME].......................................................................................114 13.37 (permit|deny) (tcp|udp) IPADDR MASK IPADDR MASK [eq] [<0-65535>] [IFNAME]...............................
PAGE 13
.53 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME]...................................................................................... 127 13.54 (permit|deny) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME]...................................................................................... 128 13.55 (permit|deny) icmp IPADDR MASK IPADDR MASK <1-255> [IFNAME]...................................................................................... 129 13.
PAGE 14
(ip|tcp|udp|icmp) IPADDR MASK any [IFNAME]........................... 141 xii 13.74 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME]..... 142 13.75 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> code <0-255> [IFNAME]............................... 143 13.76 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any IPADDR MASK [IFNAME]........................... 144 13.
PAGE 15
7 13.90 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR host IPADDR <0-255> code <0-255> [IFNAME]............ 158 13.91 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any host IPADDR [IFNAME].............................. 159 13.92 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME]......... 160 13.
PAGE 16
xiv 13.107 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [IFNAME]................................. 174 13.108 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] host IPADDR [IFNAME]..................................... 175 13.109 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME]..................................... 176 13.
PAGE 17
14. Port Security...................................................................... 190 14.1 show port-security......................................................................... 191 14.2 show port-security address [IFNAME].......................................... 191 14.3 show port-security interface [IFNAME]......................................... 191 14.4 switch port-security ...................................................................... 191 14.
PAGE 18
15.17 mdix.............................................................................................. 201 15.18 description .LINE........................................................................... 201 15.19 line loopback................................................................................. 202 16. DHCP Client:...................................................................... 202 16.1 ip dhcp client..............................................................................
PAGE 19
GigaX2024B/M L2 Managed Switch CLI Manual 19.9 copy tftp: URL startup-config..........................................................211 19.10 disable........................................................................................... 212 19.11 enable........................................................................................... 212 19.12 end................................................................................................ 212 19.13 exit...........................
PAGE 20
GigaX2024B/M L2 Managed Switch CLI Manual xviii 19.38 syslog server-ip A.B.C.D............................................................... 221 19.39 syslog severity <0-7>.................................................................... 222 19.40 syslog timestamp.......................................................................... 222 19.41 telnet WORD................................................................................. 222 19.42 telnet WORD PORT.............................
PAGE 21
GigaX2024B/M L2 Managed Switch CLI Manual CLI Command Modes Command mode Access method Prompt Switch> Privileged EXEC This is the first level of access.(For the switch) Change terminal settings, perform basic tasks, and list system information. From user EXEC mode, enter the enable command. User EXEC Global configuration Switch# From privileged EXEC Switch mode, enter the (config)# configure command.
PAGE 22
GigaX2024B/M L2 Managed Switch CLI Manual 1. IGMP 1.1 ip igmp snooping Syntax: ip igmp snooping Parameters: igmp Internet Group Management Protocol snooping IGMP snooping on all the existing VLANs Command Mode: Configure terminal mode No/clear: no ip igmp snooping Show: show ip igmp snooping Default: The default setting of IGMP snooping is globally disable Description: This command sets the IGMP snooping function enabled globally. Example: ASUS(config)# ip igmp snooping 1.
PAGE 23
GigaX2024B/M L2 Managed Switch CLI Manual 1.
PAGE 24
GigaX2024B/M L2 Managed Switch CLI Manual disabled after IGMP snooping function is globally enable. Description: This command sets the IGMP snooping immediate-leave function enabled on indicated vlan. Example: ASUS(config)# ip igmp snooping vlan 1 immediate-leave 1.
PAGE 25
GigaX2024B/M L2 Managed Switch CLI Manual LACP: 2.1 lacp aggregation-link group <1-32> (add|set) IFLIST GX2024B GROUPID range is 1-6 Syntax lacp aggregation-link trunk <1-32> (add|set) IFLIST Parameters aggregation-link aggregation-link <1-32> GROUPID add append ports to lacp enabled port list set set lacp enabled port list for this group PORTLIST valid format is port_id,[,port_id...],[-port_id,...],...
PAGE 26
GigaX2024B/M L2 Managed Switch CLI Manual No/clear lacp aggregation-link group delete IFNAME Show show aggregation-link group [GROUPID] Default No default lacp aggregation-link trunk group enable Description This command sets the Link Aggregation Control Protocol (LACP) operation add/set or disable for the trunk group ports on the switch stack or on a standalone switch. Example ASUS(config)# lacp aggregation-link group delete fa1/0/1 2.
PAGE 27
GigaX2024B/M L2 Managed Switch CLI Manual 3. Static Link Aggregation 3.
PAGE 28
GigaX2024B/M L2 Managed Switch CLI Manual dst-ip -> Destination IP address. src-dst-ip -> Source and Destination IP address. Command Mode Configure terminal mode No/clear show show aggregation-link group <1-32> Default None or depends on ODM customer Description Use the aggregation-link trunk group configuration command on the switch stack or standalone switch to configure trunk load balancing by using source-based or destination-based forwarding methods.
PAGE 29
GigaX2024B/M L2 Managed Switch CLI Manual No/clear Show Default None or depends on ODM customer Description Use the clear gvrp statistics configuration command on the switch stack or standalone switch to clear all the GVRP statistics information on one or all interfaces. Example ASUS(config)# clear gvrp statistics fa1/0/1 4.
PAGE 30
GigaX2024B/M L2 Managed Switch CLI Manual 4.
PAGE 31
GigaX2024B/M L2 Managed Switch CLI Manual Default Description To show gvrp statistics IFNAME status. Example ASUS# show gvrp statistics fa1/0/1 4.7 show gvrp interface IFNAME Syntax show gvrp interface IFNAME Parameters gvrp General Attribute Registration Protocol [IFNAME] Interface’s name, ex: fastethernet1/0/1 or gigabitethernet1/0/26 Command Mode Privileged EXEC mode Default Description To show gvrp port status. Example ASUS#show gvrp interface fa1/0/1 2 4.
PAGE 32
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Interface mode No/clear no garp leaveall-timer Show show garp timer IFNAME Default The default is 1000 (centi-seconds) Description This command sets the garp leaveall-timer value in the indicated interface port. Example ASUS(config-if)#garp leaveall-time 2000 4.
PAGE 33
GigaX2024B/M L2 Managed Switch CLI Manual 5. VLAN: 5.1 show vlan name VLANAME Syntax show vlan name VLANAME Parameters VLANAME vlan name Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch. Example ASUS#show vlan name VLAN1 5.
PAGE 34
GigaX2024B/M L2 Managed Switch CLI Manual 5.4 name VLANAME Syntax name VLANAME Parameters VLANAME - vlan name string No/clear no name Command Mode Config-vlan mode Default None or depends on ODM customer Description Use the name string command to create vlan entry with string on the switch. Example ASUS(config-vlan)#name ABC 5.
PAGE 35
GigaX2024B/M L2 Managed Switch CLI Manual Show show interface [IFNAME] Default None or depends on ODM customer Description Set access mode characteristics of all interfaces and Set Virtual LAN Example ASUS(config-if)#switchport mode access 5.
PAGE 36
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Interface mode No/clear switchport trunk allowed vlan remove VLANLIST Show show vlan [VLANID] Default None or depends on ODM customer Description Use the switchport trunk allowed vlan configuration command on the switch stack or standalone switch to add or remove the allowed VLANs that can receive and send traffic on this interface in tagged format when in trunking mode Example ASUS(config-if)# switchport trunk allowed vlan add 2-20 6. 802.
PAGE 37
GigaX2024B/M L2 Managed Switch CLI Manual Default The default is 2 Description Use the dot1x max-req interface configuration command on the switch stack or on a standalone switch to set the maximum number of times that the switch sends an Extensible Authentication Protocol (EAP)-request/identity frame (assuming that no response is received) to the client before restarting the authentication process. Use the no form of this command to return to the default setting.
PAGE 38
GigaX2024B/M L2 Managed Switch CLI Manual 6.4 dot1x radius server A.B.C.D RADIUS_KEY [PORTID] Syntax dot1x radius server A.B.C.D RADIUS_KEY [PORTID] Parameters A.B.C.D: IP address RADIUS_KEY: RADIUS key [PORTID]: RADIUS port Command Mode Configure mode No/clear Show show dot1x radius / show running-config Default Description This command sets the radius server ip, radius key, and radius port for 802.1X configuration. Example ASUS(config)# dot1x radius server 192.192.1.1 testing 1812 6.
PAGE 39
GigaX2024B/M L2 Managed Switch CLI Manual 6.6 dot1x re-authenticate interface [IFNAME] Syntax dot1x re-authenticate interface [IFNAME] Parameters IFNAME: interface’s name Command Mode Configure terminal mode No/clear Show show dot1x interface IFNAME Default Description Use the dot1x reauthenticate privileged EXEC command on the switch stack or on a standalone switch to manually initiate a re-authentication of all 802.1X-enabled ports or the specified 802.1X-enabled port.
PAGE 40
GigaX2024B/M L2 Managed Switch CLI Manual Show show dot1x / show running-config Default The default is global disable Description Use the dot1x system-auth-control global configuration command on the switch stack or on a standalone switch to globally enable 802.1X. Use the no form of this command to return to the default setting. Example ASUS(config)# dot1x system-auth-control 6.
PAGE 41
GigaX2024B/M L2 Managed Switch CLI Manual server-timeout: 20 seconds Description This command sets the dot1x reauthentication timer. Example ASUS(config-if)# dot1x timeout reauth-period 3600 6.
PAGE 42
GigaX2024B/M L2 Managed Switch CLI Manual Parameters First WORD : User Name Second WORD : User Password Command Mode Configure terminal mode No/clear no dot1x username WORD Show show dot1x username Default N/A Description Add user into local radius database. Example ASUS(config)#dot1x user test testing123 1 6.13 show dot1x Syntax show dot1x Parameters dot1x Get IEEE 802.
PAGE 43
GigaX2024B/M L2 Managed Switch CLI Manual Example ASUS#show dot1x interface fa1/0/1 6.15 show dot1x radius Syntax show dot1x radius Parameters radius Remote Access Dial-In User Service Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show dot1x radius privileged EXEC command to display 802.1X Remote Access Dial-In User Service statistics, administrative status, and operational status for the switch or for the specified interface.
PAGE 44
GigaX2024B/M L2 Managed Switch CLI Manual No/clear No mirror session <1-8> Default Disable Description To set monitor port in mirror mode Example ASUS(config)# mirror session 1 destination fa1/0/1 7.
PAGE 45
GigaX2024B/M L2 Managed Switch CLI Manual 7.4 no mirror session <1-8> source IFLIST Syntax no mirror session <1-8> source IFLIST Parameters no Negate a command or set its defaults IFLIST source interface list ,ex fa1/0/1,fa1/0/3-5,fai1/0/7 Command Mode Configure terminal mode Show show mirror session Default There are some mirroring rules on Switch. Description This command resets the source interfaces’ received or transmitted traffic or both the destination interface.
PAGE 46
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Command Mode Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description Show which cos queue agiven priority current maps to Example ASUS# show cos cos-map 8.3 cos policy wrr-queue weight <1-10> <1-10> <1-10> <1-10> <1-10> <1-10> GX2024B Queue weight parameter is 4.
PAGE 47
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Configure terminal mode No/clear No low-queue delay bound Show show qos mode Default The default setting of qos mode is highfirst mode Description This command sets qos mode to highfirst mode Example ASUS(config)# cos policy strict 8.5 show cos policy Syntax show cos policy Parameters qos quality of service (QoS) mode CoS Scheduling mode of IEEE 802.
PAGE 48
GigaX2024B/M L2 Managed Switch CLI Manual 8.7 show qos Ingress bandwidth [IFNAME] Syntax show qos ingress bandwidth [IFNAME] Parameters inress ingress keyword [IFNAME] Interface’s name, ex: fa1/0/1 or fa1/0/12 Command Mode Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description This command used to show the Qos bandwidth informational parameter for the outcoming packets. Example ASUS# show qos ingress bandwidth fa1/0/1 8.
PAGE 49
GigaX2024B/M L2 Managed Switch CLI Manual Parameters egress Outgoing packets bandwidth Set bandwidth informational parameter Command Mode Interface mode No/clear Show Default None or depends on ODM customer Description This command used to disable the Qos bandwidth informational parameter for the outcoming packets. Example ASUS(config-if)#no qos egress bandwidth 8.
PAGE 50
GigaX2024B/M L2 Managed Switch CLI Manual Show Default None or depends on ODM customer Description This command used to disable the Qos bandwidth informational parameter for the outcoming packets. Example ASUS(config-if)#no qos ingress bandwidth 8.
PAGE 51
GigaX2024B/M L2 Managed Switch CLI Manual <1-262143> Syntax storm-control (broadcast|dlf|multicast) <1-262143> Parameters broadcast Broadcast packets dlf Destination Lookup Failure multicast Multicast packets LIMIT_RATE value 1~262143 (packets/s) Command Mode Interface mode (GX2024M)/ Configure terminal mode(GX2024B) No/clear no storm-control (broadcast|dlf|multicast) Show show storm-control IFNAME (broadcast|dlf|multicast) Default None or depends on ODM customer Description Use
PAGE 52
GigaX2024B/M L2 Managed Switch CLI Manual 9.3 show storm-control (broadcast|dlf|multicast) Syntax show storm-control (broadcast|dlf|multicast) Parameters broadcast Broadcast packets dlf Destination Lookup Failure multicast Multicast packets Command Mode Privileged EXEC mode No/clear Show Default Description Use the show storm-control configuration command on the switch stack or standalone switch to show the limit rate of the port’s total bandwidth used by broadcast/dlf/multicast.
PAGE 53
GigaX2024B/M L2 Managed Switch CLI Manual database. Example ASUS(config)# clear mac-address-table dynamic vlan 1 10.2 mac-address-table aging-time TIMEVALUE Syntax mac-address-table aging-time TIMEVALUE Parameters aging-time the length of time that a dynamic entry remains in the MAC address table TIMEVALUE Aging time in seconds (10~1000000) Command Mode Configure terminal mode No/clear no mac-address-table aging-time Show show mac-address-table aging-time Default The default is 300 seconds.
PAGE 54
GigaX2024B/M L2 Managed Switch CLI Manual The real aging-time is the triple of the command input radix number. Example ASUS(config)# no mac-address-table aging-time 10.
PAGE 55
GigaX2024B/M L2 Managed Switch CLI Manual Default No static addresses are configured. Description Use the mac-address-table static configuration command on the switch stack or on a standalone switch to add unicast static addresses to the MAC address table. Example ASUS(config)# mac-address-table static 0000.0000.0001 2 fa1/0/2 10.
PAGE 56
GigaX2024B/M L2 Managed Switch CLI Manual interface IFLIST COS_DEST Parameters multicast Multicast MACADDR Destination MAC address xxxx.xxxx.xxxx (multicast) to the address table vlan Vlan VLANID Valid range is 1 ~ 3000 interface the specified interface IFLIST Interface’s name list, ex: fa1/0/1-12 COS_DEST Cos priority Command Mode Configure terminal mode No/clear Show Default No static addresses are configured.
PAGE 57
GigaX2024B/M L2 Managed Switch CLI Manual 10.9 s h o w m a c - a d d r e s s - t a b l e s t a t i c m a c [MAC_ADDR] Syntax show mac-address-table static mac [MAC_ADDR] Parameters [MAC_ADDR] MAC address Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show mac-address-table ucast static user EXEC command to display static/dynamic ucast MAC address table entries only. Example ASUS# show mac-address-table static mac 0000.0000.0001 10.
PAGE 58
GigaX2024B/M L2 Managed Switch CLI Manual 10.12 show mac-address-table static Syntax show mac-address-table static Parameters Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show mac-address-table ucast static user EXEC command to display static ucast MAC address table entries only. Example ASUS# show mac-address-table static 10.
PAGE 59
GigaX2024B/M L2 Managed Switch CLI Manual Use the command in privileged EXEC mode to display specific multicast entries. Example ASUS# show mac-address-table multicast 0100.5e0a.0a0a vlan 1 10.15 show mac-address-table dynamic Syntax show mac-address-table dynamic Parameters Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show mac-address-table ucast dynamic user EXEC command to display static ucast MAC address table entries only.
PAGE 60
GigaX2024B/M L2 Managed Switch CLI Manual Default None or depends on ODM customer Description Use the show mac-address-table ucast dynamic user EXEC command to display dynamic ucast MAC address table entries only. Example ASUS# show mac-address-table dynamic mac 0000.0000.0001 10.
PAGE 61
GigaX2024B/M L2 Managed Switch CLI Manual Syntax clear mac-address-table dynamic Parameters Command Mode Configure terminal mode No/clear Show Default None or depends on ODM customer Description Use the write configuration command on the switch stack or standalone switch to clear dynamic L2 MAC addresses in the database. Example ASUS(config)# clear mac-address-table dynamic 10.
PAGE 62
GigaX2024B/M L2 Managed Switch CLI Manual Show Default None or depends on ODM customer Description Use the write configuration command on the switch stack or standalone switch to clear dynamic L2 MAC addresses in the database. Example ASUS(config)# clear mac-address-table dynamic vlan 1 10.
PAGE 63
GigaX2024B/M L2 Managed Switch CLI Manual 0100.5e0a.0a0a 1 10.25 clear mac-address-table vlan VLANID Syntax clear mac-address-table dynamic vlan VLANID Parameters [VLANID] vlan range (1~3000) Command Mode Configure terminal mode No/clear Show Default None or depends on ODM customer Description Use the write configuration command on the switch stack or standalone switch to clear dynamic L2 MAC addresses in the database. Example ASUS(config)# clear mac-address-table dynamic vlan 1 10.
PAGE 64
GigaX2024B/M L2 Managed Switch CLI Manual Default Description To show spanning-tree summary. Example ASUS# show spanning-tree interface fa1/0/1 10.
PAGE 65
GigaX2024B/M L2 Managed Switch CLI Manual Syntax spanning-tree edge-port Parameters edge-port the interface is attached to a LAN segment that is at the end of a bridged LAN or to an end node Command Mode Interface mode No/clear No spanning-tree edge-port Show show spanning-tree port detail IFNAME Default None or depends on ODM customer Description Use the spanning-tree cost configuration command on the switch stack or standalone switch to set the spanning-tree interface attached to a LAN segmen
PAGE 66
GigaX2024B/M L2 Managed Switch CLI Manual No/clear No spanning-tree hello time Show show spanning-tree port detail IFNAME Default 2 sec Description Use the spanning-tree cost configuration command on the switch stack or standalone switch to set the hello time to send hello BPDUs. Example ASUS(config)# spanning-tree hello time 2 10.
PAGE 67
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Configure terminal mode No/clear No spanning-tree max-age Show show spanning-tree port detail IFNAME Default 20 sec Description Use the spanning-tree max-age configuration command on the switch stack or standalone switch to set the spanning-tree interval (sec) between messages the spanning tree receive. Example ASUS(config)# spanning-tree max-age 20 10.
PAGE 68
GigaX2024B/M L2 Managed Switch CLI Manual Description Use the spanning-tree priority configuration command on the switch stack or standalone switch to set the spanning-tree switch priority Example ASUS(config)# spanning-tree priority 32768 10.
PAGE 69
GigaX2024B/M L2 Managed Switch CLI Manual Example ASUS(config)# spanning-tree mode pvst 10.39 spanning-tree uplink-fast Syntax spanning-tree uplink-fast Parameters Command Mode Configure terminal mode No/clear No spanning-tree uplink-fast Show show spanning-tree summary Default disable Description Accelerate the root port transitions to the forwarding state Example ASUS(config)# spanning-tree uplink-fast 10.
PAGE 70
GigaX2024B/M L2 Managed Switch CLI Manual Disable Command Mode Interface mode No/clear Show show spanning-tree port detail IFNAME Default None or depends on ODM customer Description If the switch recieve the bpdu send by self, the switch port will be blocked. Example ASUS(config-if)# spanning-tree bpdu-guard enable 10.
PAGE 71
GigaX2024B/M L2 Managed Switch CLI Manual Syntax show spanning-tree mst Parameters Command Mode Privileged EXEC mode Default None or depends on ODM customer Description 顯示目前MSTP相關之Configuration及Instance對應資訊 Examples ASUS# show spanning-tree mst 10.
PAGE 72
GigaX2024B/M L2 Managed Switch CLI Manual Default None or depends on ODM customer Description 顯示目前MSTP在指定Instance的target Port之Configuration資訊 Examples ASUS# show spanning-tree mst instance 1 interface fa1/0/1 10.48 spanning-tree mode mst Syntax spanning-tree mode mst Parameters Command Mode configuration terminal mode Default None or depends on ODM customer Description 改變spanning tree運作方式為MSTP Examples ASUS(config)# spanning-tree mode mst 10.
PAGE 73
GigaX2024B/M L2 Managed Switch CLI Manual 10.51 spanning-tree mst name [NAME] Syntax Spanning-tree mst name [NAME] Parameters Command Mode Configure terminal mode Show Default None or depends on ODM customer Description 設定目前MSTP Region之區域名稱資訊 Result ASUS(config)# spanning-tree mst name abcd 10.
PAGE 74
GigaX2024B/M L2 Managed Switch CLI Manual Syntax spanning-tree mst [mstis] cost [value] Parameters mstis Instance of MST 1-15 Value 1-200000000 Command Mode Interface Mode No/clear no spanning-tree mst [mstis] cost Show Default None or depends on ODM customer Description Setup path cost for a specific port Examples ASUS(config)#interfcae fa1/0/1 ASUS(config-if)#spanning-tree mst 1 cost 2000 10.
PAGE 75
GigaX2024B/M L2 Managed Switch CLI Manual 11.1 show rmon statistics [IFNAME] Syntax show rmon statistics [IFNAME] Parameters rmon Remote monitoring statistics the contents of the switch’s RMON statistics table [IFNAME] Interface’s name, ex: fa1/0/1 or gigabitethernet1/0/26 Command Mode Privileged EXEC mode Default Description To show rmon statistics IFNAME status. Examples ASUS# show rmon statistics [fa1/0/1] 11.
PAGE 76
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS# show snmp-server community 11.4 show snmp-server community network Syntax show snmp-server community network Parameters snmp-server the SNMP server community SNMP server community network the network bind to this community Command Mode Privileged EXEC mode Default Description To show snmp-server community network. Examples ASUS# show snmp-server community network 11.
PAGE 77
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS# show snmp-server host 11.7 show snmp-server location Syntax show snmp-server location Parameters snmp-server the SNMP server location show the system location string Command Mode Privileged EXEC mode Default Description To show snmp-server location. Examples ASUS# show snmp-server location 11.
PAGE 78
GigaX2024B/M L2 Managed Switch CLI Manual Show show snmp-server trap community / show running-config Default Public Description This command sets the trap community string for SNMP protocol. Examples ASUS(config)# snmp-server community trap public 11.10 snmp-server community WORD (ro/rw) network A.B.C.D/MASK Syntax snmp-server community WORD (ro/rw) network A.B.C.
PAGE 79
GigaX2024B/M L2 Managed Switch CLI Manual Syntax snmp-server contact DWORD Parameters contact the system contact string DWORD string that describes the system contact information Command Mode Configure terminal mode No/clear no snmp-server contact Show show snmp-server contact Default None or depends on ODM customer Description This command sets the SNMP Contact information Examples ASUS(config)# snmp-server contact asus@asus.com.tw 11.12 snmp-server host A.B.C.
PAGE 80
GigaX2024B/M L2 Managed Switch CLI Manual Default None or depends on ODM customer Description This command sets the SNMP location string. Examples ASUS(config)# snmp-server location ASUS 11.
PAGE 81
GigaX2024B/M L2 Managed Switch CLI Manual No/clear no snmp-server user WORD WORD v3 Show show snmp-server user Default None Description Define a user who can access the SNMP engine Examples ASUS(config)# snmp-server user test g1 v3 auth sha 12345678 11.
PAGE 82
GigaX2024B/M L2 Managed Switch CLI Manual 11.
PAGE 83
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)# snmp-server group g1 v3 noauth 11.
PAGE 84
GigaX2024B/M L2 Managed Switch CLI Manual read The option that allows you to specify a read view (default sysView) WORD A string that he name of the view that enables you only to view the contents of the agent write The option that allows you to specify a write view (default none) WORD A string that is the name of the view that enables you to enter and configure the contents of the agent Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noa
PAGE 85
GigaX2024B/M L2 Managed Switch CLI Manual WORD A string that is the name of the view that enables you to enter and configure the contents of the agent notify The option that allows you to specify a notify view (default none) WORD A string that is the name of the view that enables you to specify a notify, inform, or trap Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description C
PAGE 86
GigaX2024B/M L2 Managed Switch CLI Manual 11.
PAGE 87
GigaX2024B/M L2 Managed Switch CLI Manual WORD A string that he name of the view that enables you only to view the contents of the agent write The option that allows you to specify a write view (default none) WORD A string that is the name of the view that enables you to enter and configure the contents of the agent Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Descript
PAGE 88
GigaX2024B/M L2 Managed Switch CLI Manual enables you to enter and configure the contents of the agent notify The option that allows you to specify a notify view (default none) WORD A string that is the name of the view that enables you to specify a notify, inform, or trap Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description Configure a new SNMP group, that maps SNMP
PAGE 89
GigaX2024B/M L2 Managed Switch CLI Manual 11.
PAGE 90
GigaX2024B/M L2 Managed Switch CLI Manual view (default sysView) WORD A string that he name of the view that enables you only to view the contents of the agent write The option that allows you to specify a write view (default none) WORD A string that is the name of the view that enables you to enter and configure the contents of the agent Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server g
PAGE 91
GigaX2024B/M L2 Managed Switch CLI Manual WORD A string that is the name of the view that enables you to enter and configure the contents of the agent notify The option that allows you to specify a notify view (default none) WORD A string that is the name of the view that enables you to specify a notify, inform, or trap Command Mode Configure terminal mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description Configure a new SNMP group
PAGE 92
GigaX2024B/M L2 Managed Switch CLI Manual 11.31 show snmp-server view Syntax show snmp-server view Parameters snmp-server the SNMP server view Show the view name which is used to reference the record Command Mode Privileged EXEC mode Default Description Show the view name which is used to reference the record. Examples ASUS# show snmp-server view 11.
PAGE 93
GigaX2024B/M L2 Managed Switch CLI Manual 11.34 snmp-server host A.B.C.D version (1|2) [COMMUNITY] Syntax snmp-server host A.B.C.D version (1|2) [COMMUNITY] Parameters host the recipient (host) of a SNMP notification operation A.B.C.D IP address Version(1|2) snmp version1 or version2 COMMUNITY trap community name Command Mode Configure terminal mode No/clear no snmp-server host A.B.C.
PAGE 94
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Command Mode Privileged EXEC mode Default Description Displays the RMON alarm table Examples ASUS# show rmon alarms 11.37 show rmon events Syntax show rmon alarms Parameters Command Mode Privileged EXEC mode Default Description Displays the RMON event table Examples ASUS# show rmon events 11.
PAGE 95
GigaX2024B/M L2 Managed Switch CLI Manual etherStatsPkts of port 1 <1-4294967295> The time interval of alarm monitor, in seconds absolute To test each MIB variable directly delta To test the change between samples of a MIB variable VALUE The rising threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when rising threshold exceeds VALUE The falling threshold value, the range is -2147483648 to 2147483647
PAGE 96
GigaX2024B/M L2 Managed Switch CLI Manual absolute To test each MIB variable directly delta To test the change between samples of a MIB variable VALUE The rising threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when rising threshold exceeds VALUE The falling threshold value, the range is -2147483648 to 2147483647 [OWNER] Specify the owner of this RMON alarm Command Mode Configure terminal mode No/clear no rmon
PAGE 97
GigaX2024B/M L2 Managed Switch CLI Manual VALUE The falling threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when falling threshold exceeds [OWNER] Specify the owner of this RMON alarm Command Mode Configure terminal mode No/clear no rmon alarm <1-65536> Default Description To add rmon alarm entry Examples ASUS(config)# rmon alarm 33 1.3.6.1.2.1.16.1.1.1.5.1 10 delta rising-threshold 10000 falling-threshold 1000 10 asus 11.
PAGE 98
GigaX2024B/M L2 Managed Switch CLI Manual Default Description To add rmon alarm entry Examples ASUS(config)# rmon alarm 33 1.3.6.1.2.1.16.1.1.1.5.1 10 delta rising-threshold 10000 falling-threshold 1000 asus 11.
PAGE 99
GigaX2024B/M L2 Managed Switch CLI Manual 11.
PAGE 100
GigaX2024B/M L2 Managed Switch CLI Manual Default Description To add RMON event entry Examples ASUS(config)# rmon event 20 description falling-threshold log trap public asus 11.47 rmon history <1-65536> IFNAME [OWNER] Syntax rmon history <1-65536> IFNAME [OWNER] Parameters <1-65536> Specify the RMON group of statistics IFNAME Interface name (e.g.
PAGE 101
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)# rmon history 20 fa1/0/1 buckets 30 asus 11.49 rmon history <1-65536> IFNAME interval <1-4294967295> [OWNER] Syntax rmon history <1-65536> IFNAME interval <1-4294967295> [OWNER] Parameters <1-65536> Specify the RMON group of statistics IFNAME Interface name (e.g.
PAGE 102
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Configure terminal mode No/clear no rmon history <1-65536> Default Description To add RMON history entry Examples ASUS(config)# rmon history 20 fa1/0/1 buckets 30 interval 30 asus 12. ACL : MAC Filter 12.
PAGE 103
GigaX2024B/M L2 Managed Switch CLI Manual display the parameters for an mac access on the switch. Examples ASUS# show mac access-group [fa1/0/1] 12.3 show mac access-list [ACLNAME] Syntax show mac access-list [ACLNAME] Parameters [ACLNAME] ex: mac access list name Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show mac access-list [IFNAME] EXEC command to display the parameters for an mac access on the switch.
PAGE 104
GigaX2024B/M L2 Managed Switch CLI Manual Parameters permit-> Specify packets to forward deny-> Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MACADDR Source MAC address mask xxxx.xxxx.
PAGE 105
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)# permit host 0000.0000.0001 any[ fa1/0/2] 12.7 (permit|deny) host MACADDR host MACADDR [IFNAME] Syntax (permit|deny) host MACADDR host MACADDR [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject. host A single source host MACADDR Source MAC address xxxx.xxxx.xxxx host A single destination host MACADDR Destination MAC address xxxx.xxxx.
PAGE 106
GigaX2024B/M L2 Managed Switch CLI Manual MACADDR xxxx Destination MAC address mask xxxx.xxxx. [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no (permit|deny) MACADDR MACADDR MACADDR MACADDR [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# permit 0000.0000.0001 0000.0000.0000 0000.0000.0002 0000.0000.
PAGE 107
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)# permit host 0000.0000.0001 0000.0000.0002 0000.0000.0000 [fa1/0/2] 12.10 (permit|deny) MACADDR MACADDR host MACADDR [IFNAME] Syntax (permit|deny) MACADDR MACADDR host MACADDR [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MACADDR Source address mask xxxx.xxxx.xxxx host A single destination host MACADDR Destination MAC address xxxx.
PAGE 108
GigaX2024B/M L2 Managed Switch CLI Manual [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no (permit|deny) any host MACADDR [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# permit any host 0000.0000.0002 [fa1/0/1] 12.
PAGE 109
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Access-list named access-list extended extended access-list WORD access-list name Command Mode Interface mode No/clear no mac access-group WORD Show show mac access-group [INTERFACE] Default Description This command define an extended MAC access list using a name , and enter access-list configuration mode. Examples ASUS(config-if)# mac access-group abc in 13. ACL: IP Filter 13.
PAGE 110
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)# ip access-list extended 100 13.
PAGE 111
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Command Mode Privileged EXEC mode Default None or depends on ODM customer Description Use the show ip access list EXEC command to display the parameters for all ip access on the switch. Examples ASUS# show ip access list 13.5 show ip access list WORD Syntax show ip access list WORD Parameters WORD ip access name.
PAGE 112
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject. any Any source host [IFNAME] Egress interface name Command Mode IP standard access-list mode No/clear no (permit|deny) any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-std-nacl)#permit any [fa1/0/1] 13.
PAGE 113
GigaX2024B/M L2 Managed Switch CLI Manual host A single host address IPADDR Host address MASK Wildcard bits [IFNAME] Egress interface name Command Mode IP standard access-list terminal mode No/clear no (permit|deny) host IPADDR A.B.C.D [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-std-nacl)#permit 10.0.0.1 0.0.0.0 [fa1/0/1] 13.
PAGE 114
GigaX2024B/M L2 Managed Switch CLI Manual permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit ip any any [fa1/0/1] 13.11 (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 115
GigaX2024B/M L2 Managed Switch CLI Manual Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 116
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit ip 10.0.0.1 0.0.0.0 any [fa1/0/1] 13.
PAGE 117
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config-ext-acl)#permit tcp 10.0.0.1 0.0.0.0 eq 12 any eq 12 [fa1/0/1] 13.15 (permit|deny) icmp IPADDR MASK any <1-255> code <1-255> [IFNAME] Syntax (permit|deny) icmp IPADDR MASK any [<1-255>] code [<1-255>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 118
GigaX2024B/M L2 Managed Switch CLI Manual Ip -> Any Internet Protocol Tcp-> Transmission Control Protocol Udp-> User Datagram Protocol Icmp-> Internet Control Message Protocol host A single source host IPADDR Source address.
PAGE 119
GigaX2024B/M L2 Managed Switch CLI Manual <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit tcp host 10.0.0.1 eq 6 any eq 65 [fa1/0/1] 13.
PAGE 120
GigaX2024B/M L2 Managed Switch CLI Manual permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.1 any 12 code 12 [fa1/0/1] 13.19 (permit|deny) (ip|tcp|udp|icmp) host IPADDR host IPADDR [IFNAME] Syntax (permit|deny) (ip|tcp|udp|icmp) host IPADDR host IPADDR [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 121
GigaX2024B/M L2 Managed Switch CLI Manual 13.20 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 122
GigaX2024B/M L2 Managed Switch CLI Manual [<1-255>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 123
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR Source address MASK Source address mask IPADDR Destination address MASK Destination address mask [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 124
GigaX2024B/M L2 Managed Switch CLI Manual eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp|) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 125
GigaX2024B/M L2 Managed Switch CLI Manual Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit icmp 10.0.0.1 0.0.0.0 10.0.0.2 0.0.0.0 2 code 2 [fa1/0/2] 13.25 (permit|deny) (ip|tcp|udp|icmp) host IPADDR IPADDR MASK [IFNAME] Syntax (permit|deny) (ip|tcp|udp|icmp) host IPADDR IPADDR MASK [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 126
GigaX2024B/M L2 Managed Switch CLI Manual 13.26 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 127
GigaX2024B/M L2 Managed Switch CLI Manual 13.27 (permit|deny) icmp host IPADDR IPADDR MASK <1-255> code <1-255> [IFNAME] Syntax (permit|deny) icmp host IPADDR IPADDR MASK <1-255> code <1-255> [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 128
GigaX2024B/M L2 Managed Switch CLI Manual Ip -> Any Internet Protocol Tcp-> Transmission Control Protocol Udp-> User Datagram Protocol Icmp-> Internet Control Message Protocol IPADDR Source address MASK Source address mask host A single destination host IPADDR Destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK host IPADDR [IFNAME] Show Show acces-lists [number|name]
PAGE 129
GigaX2024B/M L2 Managed Switch CLI Manual host A single destination host IPADDR Destination address eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet
PAGE 130
GigaX2024B/M L2 Managed Switch CLI Manual code <1-255> [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp 10.0.0.1 0.0.0.0 host 10.0.0.2 1 code 1 [fa1/0/2] 13.31 (permit|deny) (ip|tcp|udp|icmp) any host IPADDR [IFNAME] Syntax (permit|deny) (ip|tcp|udp|icmp) any host A.B.C.
PAGE 131
GigaX2024B/M L2 Managed Switch CLI Manual 13.32 (permit|deny) (tcp|udp) any [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) any [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject. Ip -> Any Internet Protocol Tcp-> Transmission Control Protocol Udp-> User Datagram Protocol Icmp-> Internet Control Message Protocol .
PAGE 132
GigaX2024B/M L2 Managed Switch CLI Manual 13.33 (permit|deny) icmp any host IPADDR <1-255> code <1-255> [IFNAME] Syntax (permit|deny) icmp any host IPADDR <1-255> code <1-255> [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 133
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject.
PAGE 134
GigaX2024B/M L2 Managed Switch CLI Manual eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 135
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config-ext-acl)# permit icmp any 10.0.0.1 0.0.0.0 2 code 3 [fa1/0/2] 13.37 (permit|deny) (tcp|udp) IPADDR MASK IPADDR MASK [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp|) IPADDR MASK IPADDR MASK [eq] [<0-65535>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 136
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR MASK [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 137
GigaX2024B/M L2 Managed Switch CLI Manual MASK Source wildcard bits eq Match only packets on a given port numbe <0-65535> Port number any any destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 138
GigaX2024B/M L2 Managed Switch CLI Manual [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp 10.0.0.1 0.0.0.0 any eq 22 [fa1/0/1] 13.
PAGE 139
GigaX2024B/M L2 Managed Switch CLI Manual 10.0.0.2 [fa1/0/1] 13.42 (permit|deny) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 140
GigaX2024B/M L2 Managed Switch CLI Manual Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 141
GigaX2024B/M L2 Managed Switch CLI Manual eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any IPADDR MASK [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any 10.0.0.1 0.0.0.
PAGE 142
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config-ext-acl)#permit tcp any any eq 2 [fa1/0/1] 13.46 (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [IFNAME] Syntax (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 143
GigaX2024B/M L2 Managed Switch CLI Manual Udp-> User Datagram Protocol Icmp-> Internet Control Message Protocol .any any source address eq Match only packets on a given port numbe <0-65535> Port number .
PAGE 144
GigaX2024B/M L2 Managed Switch CLI Manual eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any host 10.0.0.
PAGE 145
GigaX2024B/M L2 Managed Switch CLI Manual Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit tcp host 10.0.0.1 eq 2 host 10.0.0.2 [fa1/0/1] 13.
PAGE 146
GigaX2024B/M L2 Managed Switch CLI Manual 13.51 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 147
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject.
PAGE 148
GigaX2024B/M L2 Managed Switch CLI Manual <0-65535> Port number any any destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit tcp host 10.0.0.1 eq 2 any [fa1/0/1] 13.
PAGE 149
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp host 10.0.0.1 any eq 2 [fa1/0/1] 13.55 (permit|deny) icmp IPADDR MASK IPADDR MASK <1-255> [IFNAME] Syntax (permit|deny) icmp IPADDR MASK IPADDR MASK <1-255> [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 150
GigaX2024B/M L2 Managed Switch CLI Manual Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 151
GigaX2024B/M L2 Managed Switch CLI Manual [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) icmp IPADDR MASK host IPADDR <1-255> [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp 10.0.0.1 0.0.0.0 host 10.0.0.2 2 [fa1/0/1] 13.
PAGE 152
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config-ext-acl)#permit icmp any host 10.0.0.1 2 [fa1/0/1] 13.59 (permit|deny) icmp any IPADDR MASK <1-255> [IFNAME] Syntax (permit|deny) icmp any IPADDR MASK <1-255> [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 153
GigaX2024B/M L2 Managed Switch CLI Manual <1-255> ICMP message type [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) ICMP any any [<1-255>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit icmp any any 2 [fa1/0/1] 13.
PAGE 154
GigaX2024B/M L2 Managed Switch CLI Manual 13.62 (permit|deny) icmp host IPADDR any [<1-255>] [IFNAME] Syntax (permit|deny) icmp host IPADDR any [<1-255>] [IFNAME] Parameters permit-> Specify packets to forward deny-> Specify packets to reject. Icmp-> Internet Control Message Protocol host A single source host IPADDR Source address.
PAGE 155
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR Destination address <1-255> ICMP message type [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) icmp host IPADDR host IPADDR [<1-255>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)#permit icmp host 10.0.0.1 host 10.0.0.
PAGE 156
GigaX2024B/M L2 Managed Switch CLI Manual No/clear no remark Show Show running-config Default Description This command add a description to a specify ACL group. Examples ASUS(config-std-nacl)# remark abc 13.66 access-list (<1-99>|<100-199>|<1300-1999>|<2 000-2699>) remark .LINE Syntax access-list (<1-99>|<100-199>|<1300-1999>|<2000-2699>) remark .LINE Parameters .LINE string Command Mode Configure terminal mode No/clear no access-list (<1-99>|<100-199>|<1300-1999>|<2000-2699>) remark .
PAGE 157
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject. IPADDR Source address MASK Source address mask [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR MASK [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 99 permit 1.
PAGE 158
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 99 permit host 1.1.1.1 13.
PAGE 159
GigaX2024B/M L2 Managed Switch CLI Manual <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 160
GigaX2024B/M L2 Managed Switch CLI Manual <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 161
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR MASK IPADDR MASK <0-255> code <0-255> [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 162
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 163
GigaX2024B/M L2 Managed Switch CLI Manual <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 164
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject.
PAGE 165
GigaX2024B/M L2 Managed Switch CLI Manual Udp-> User Datagram Protocol Icmp-> Internet Control Message Protocol Any Any Source host IPADDR destination address MASK destination wildcard bits [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any IPADDR MASK [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permi
PAGE 166
GigaX2024B/M L2 Managed Switch CLI Manual <0-65535> Port number IPADDR destination address MASK destination wildcard bits eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditio
PAGE 167
GigaX2024B/M L2 Managed Switch CLI Manual Any Any Source host IPADDR destination address MASK destination wildcard bits <0-255> ICMP message type <0-255> ICMP message code [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> code <0-255> [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to de
PAGE 168
GigaX2024B/M L2 Managed Switch CLI Manual Any [IFNAME] Any destination host Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp any any 13.
PAGE 169
GigaX2024B/M L2 Managed Switch CLI Manual [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit tcp any eq 21 any eq 22 13.
PAGE 170
GigaX2024B/M L2 Managed Switch CLI Manual Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp any any 2 code 3 13.
PAGE 171
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp 1.1.1.1 0.0.0.0 host 1.1.1.4 13.
PAGE 172
GigaX2024B/M L2 Managed Switch CLI Manual Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit udp 1.1.1.1 0.0.0.0 eq 21 host 1.1.1.4 eq 22 13.
PAGE 173
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp 1.1.1.1 0.0.0.0 host 1.1.1.4 2 code 3 13.
PAGE 174
GigaX2024B/M L2 Managed Switch CLI Manual permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 1.1.1.1 1.1.1.4 0.0.0.0 13.
PAGE 175
GigaX2024B/M L2 Managed Switch CLI Manual Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit tcp host 1.1.1.1 eq 21 1.1.1.4 0.0.0.0 eq 22 13.
PAGE 176
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 1.1.1.1 1.1.1.4 0.0.0.0 2 code 3 13.
PAGE 177
GigaX2024B/M L2 Managed Switch CLI Manual permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 1.1.1.1 host 1.1.1.4 13.
PAGE 178
GigaX2024B/M L2 Managed Switch CLI Manual Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 1.1.1.1 eq 21 host 1.1.1.4 eq 21 13.
PAGE 179
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 1.1.1.1 host 1.1.1.4 3 code 3 13.
PAGE 180
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)#access-list 100 permit icmp any host 1.1.1.1 13.
PAGE 181
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)#access-list 100 permit tcp any eq 21 host 1.1.1.1 eq 22 13.
PAGE 182
GigaX2024B/M L2 Managed Switch CLI Manual 13.94 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) host IPADDR any [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) host IPADDR any [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 183
GigaX2024B/M L2 Managed Switch CLI Manual 13.
PAGE 184
GigaX2024B/M L2 Managed Switch CLI Manual 13.96 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR any <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR any <0-255> code <0-255> [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 185
GigaX2024B/M L2 Managed Switch CLI Manual 13.97 a c c e s s - l i s t ( < 1 - 9 9 > | < 1 3 0 0 - 1 9 9 9 > ) (deny|permit) IPADDR [IFNAME] Syntax access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR [IFNAME] Parameters Access-list Add an access list entry <1-99> Standard IP access-list number <2000-2699> range) Standard IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 186
GigaX2024B/M L2 Managed Switch CLI Manual permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 187
GigaX2024B/M L2 Managed Switch CLI Manual deny-> Specify packets to reject.
PAGE 188
GigaX2024B/M L2 Managed Switch CLI Manual Tcp-> Transmission Control Protocol Udp-> User Datagram Protocol IPADDR Source address MASK Source wildcard bits Any Any destination host eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK any [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default
PAGE 189
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR Source address MASK Source wildcard bits eq Match only packets on a given port numbe <0-65535> Port number Any Any destination host [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitt
PAGE 190
GigaX2024B/M L2 Managed Switch CLI Manual eq Match only packets on a given port numbe <0-65535> Port number .
PAGE 191
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR Destination address eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or droppe
PAGE 192
GigaX2024B/M L2 Managed Switch CLI Manual <0-65535> Port number [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any IPADDR MASK [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit tcp any 1.1.1.1 0.0.0.0 eq 21 13.
PAGE 193
GigaX2024B/M L2 Managed Switch CLI Manual No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any any [eq] [<0-65535>] [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit tcp any any eq 21 13.
PAGE 194
GigaX2024B/M L2 Managed Switch CLI Manual Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit tcp any eq 21 any 13.107 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR A.B.C.
PAGE 195
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS(config)#access-list 100 permit tcp any eq 21 10.0.0.1 0.0.0.0 13.
PAGE 196
GigaX2024B/M L2 Managed Switch CLI Manual 13.109 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 197
GigaX2024B/M L2 Managed Switch CLI Manual 13.
PAGE 198
GigaX2024B/M L2 Managed Switch CLI Manual 13.
PAGE 199
GigaX2024B/M L2 Managed Switch CLI Manual 13.112 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 200
GigaX2024B/M L2 Managed Switch CLI Manual 13.113 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 201
GigaX2024B/M L2 Managed Switch CLI Manual 13.
PAGE 202
GigaX2024B/M L2 Managed Switch CLI Manual 13.
PAGE 203
GigaX2024B/M L2 Managed Switch CLI Manual 13.116 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK IPADDR MASK <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK IPADDR MASK <0-255> [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 204
GigaX2024B/M L2 Managed Switch CLI Manual 13.117 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 205
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 206
GigaX2024B/M L2 Managed Switch CLI Manual Icmp-> Internet Control Message Protocol IPADDR source address MASK source wildcard bits .
PAGE 207
GigaX2024B/M L2 Managed Switch CLI Manual IPADDR destination address MASK destination wildcard bits <0-255> ICMP message type [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR IPADDR MASK <0-255> [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 208
GigaX2024B/M L2 Managed Switch CLI Manual [IFNAME] Egress interface name Command Mode Configure terminal mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR host IPADDR <0-255> [IFNAME] Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp host 10.0.0.1host 10.0.0.4 1 13.
PAGE 209
GigaX2024B/M L2 Managed Switch CLI Manual Show Show acces-lists [number|name] Default Description This command specify one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)#access-list 100 permit icmp any host 10.0.0.1 1 13.
PAGE 210
GigaX2024B/M L2 Managed Switch CLI Manual 13.124 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> [IFNAME] Parameters Access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> range) Extended IP access-list number (expanded permit-> Specify packets to forward deny-> Specify packets to reject.
PAGE 211
GigaX2024B/M L2 Managed Switch CLI Manual 14.1 show port-security Syntax show port-security Parameters Command Mode Privileged EXEC mode Default Description To show port-security status. Examples ASUS# show port-security 14.2 show port-security address [IFNAME] Syntax show port-security address [IFNAME] Parameters [IFNAME] Interface’s name, ex: fastethernet1/0/1 or gigabitethernet1/0/26 Command Mode Privileged EXEC mode Default Description To show secure addresses of the port.
PAGE 212
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Interface mode No/clear no switch port-security Default Disable port security Description To enable port-security of the port. Examples ASUS(config-if)# switch port-security 14.5 switch port-security aging-time <0-1440> Syntax switch port-security aging-time <0-1440> Parameters <0-1440> aging time, 0 means no age. Command Mode Interface mode No/clear no switch port-security aging-time Default Aging time is 0.
PAGE 213
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Interface mode No/clear no switch port-security mac-address MACADDR Default Description To configure secure mac of the port. Examples ASUS(config-if)# switch port-security mac-address 0011.2222.3344 14.8 switch port-security maximun <1-132> Syntax switch port-security maximun <1-132> Parameters <1-132> Number of addresses (default is 1).
PAGE 214
GigaX2024B/M L2 Managed Switch CLI Manual No/clear No switch port-security shutdown Default Description To configure maximum shutdown time Examples ASUS(config-if)# switch port-security shutdown 30 14.
PAGE 215
GigaX2024B/M L2 Managed Switch CLI Manual No/clear Show show ingress filtering IFNAME Default The default is disable Description This command sets the 802.1Q ingress filtering features Examples ASUS(config-if)#ingress filter enable 15.2 show ingress filter IFNAME Syntax show ingress filter IFNAME Parameters [IFNAME] Interface’s name, ex: fastethernet1/0/1 or gigabitethernet1/0/26 Command Mode Privileged EXEC mode Default Description To show ingress filtering IFNAME status.
PAGE 216
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Configure terminal mode No/clear no interface IFNAME Show show interface IFNAME Default Description This command changes the operation to interface command mode. Examples ASUS(config)#interface fa1/0/1 15.5 show interface IFNAME Syntax Show interface IFNAME Parameters IFNAME: interface’s name Command Mode Privileged EXEC mode Default Description This command shows the interface detail status. Examples ASUS#show interface fa1/0/1 15.
PAGE 217
GigaX2024B/M L2 Managed Switch CLI Manual Description This command shows the interface detail status with specific stack . Examples ASUS#show interface stack 1 15.8 interface vlanVLAN-ID Syntax interface vlanVLAN-ID Parameters vlan Select a vlan to configure VLAN-ID Vlan’s id Command Mode Configure terminal mode No/clear Show show vlan[VLANID] Default Description This command changes the system vlan to specific vlan interface command mode. Examples ASUS(config)#interface vlan1 15.
PAGE 218
GigaX2024B/M L2 Managed Switch CLI Manual discardall -> discard all frame is accepted vlan-tagged-only -> only vlan-tag frame is accepted Command Mode Interface mode No/clear show show interface IFNAME Default None or depends on ODM customer Description Use the acceptable frame type configuration command on the switch stack or standalone switch to set the type of the acceptable frame, for any kind of frame type is accepted or only vlan-tag frame is accepted.
PAGE 219
GigaX2024B/M L2 Managed Switch CLI Manual tx -> sets whether the interface can send flowcontrol packets to a remote device both -> sets whether the interface can receive and send flow-control packets from a remote device off -> disable an interface to operate with an attached device that is required to send or receive flow-control packets on -> allows an interface to operate with an attached device that is required to send or receive flow-control packets Command Mode Interface mode No/clear No flo
PAGE 220
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode Interface mode No/clear no speed Show show l2_interface IFNAME Default None or depends on ODM customer Description Use the speed configuration command on the switch stack or standalone switch to set speed status of the port. Examples ASUS(config-if)#speed 100 15.
PAGE 221
GigaX2024B/M L2 Managed Switch CLI Manual No/clear no default-priority Show Default None or depends on ODM customer Description Use the default_priority configuration command on the switch stack or standalone switch to set cos priority of the port. Examples ASUS(config-if)# default-priority 3 15.
PAGE 222
GigaX2024B/M L2 Managed Switch CLI Manual 15.19 line loopback Syntax Line loopback Parameters Command Mode Interface mode No/clear no line loopback Show Default Enable or depends on ODM customer Description Use the line loopback command on the switch stack or standalone switch to detect loopback of the port. Examples ASUS(config-if)#no line loopback 16. DHCP Client: 16.
PAGE 223
GigaX2024B/M L2 Managed Switch CLI Manual 16.3 ip dhcp client renew Syntax ip dhcp client renew Parameters Command Mode Interface mode Default Description To get the dhcp ip again Examples ASUS(config-if)# ip dhcp client renew 17. DHCP Snooping: 17.1 ip dhcp snooping Syntax ip dhcp snooping Parameters Command Mode Configure Terminal Mode No/clear no ip dhcp snooping show show ip dhcp snooping Default Description Enable dhcp snooping globally. Examples ASUS(config)# ip dhcp snooping 17.
PAGE 224
GigaX2024B/M L2 Managed Switch CLI Manual Description Enable DHCP snooping on a VLAN or range of VLANs. The range is 1 to 3000. You can enter a single VLAN ID identified by VLAN ID number, a series of VLAN IDs separated by commas, a range of VLAN IDs separated by hyphens, or a range of VLAN IDs separated by entering the starting and ending VLAN IDs separated by a space. Examples ASUS(config)# ip dhcp snooping vlan 1-100 17.
PAGE 225
GigaX2024B/M L2 Managed Switch CLI Manual 17.5 show ip dhcp snooping binding Syntax show ip dhcp snooping binding Parameters Command Mode Enable Mode No/clear show Default Description To display logged information, If “binding” is given, snooped DHCP bindings are displayed. Examples ASUS#show ip dhcp snooping binding 18. IP Route: 18.
PAGE 226
GigaX2024B/M L2 Managed Switch CLI Manual A.B.C.D IP destination prefix mask A.B.C.D IP gateway address INTERFACE IP gateway interface name Command Mode Configure terminal mode No/clear no ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) Show show ip route show ip route A.B.C.D show running-config Default Description This command sets the ip route in this system Examples ASUS(config)#ip route 192.192.1.254 255.255.255.0 18.3 i p r o u t e A . B . C . D A . B . C . D (A.B.C.
PAGE 227
GigaX2024B/M L2 Managed Switch CLI Manual 18.4 ip route A.B.C.D/M (A.B.C.D|INTERFACE) Syntax ip route A.B.C.D/M (A.B.C.D|INTERFACE) Parameters route Establish static routes A.B.C.D/M IP destination prefix (e.g. 10.0.0.0/8) A.B.C.D IP gateway address INTERFACE IP gateway interface name Command Mode Configure terminal mode No/clear no ip route A.B.C.D/M (A.B.C.D|INTERFACE) Show show ip route show ip route A.B.C.
PAGE 228
GigaX2024B/M L2 Managed Switch CLI Manual value for this route Examples ASUS(config)#ip route 192.192.1.254/24 10 18.6 show ip route supernets-only Syntax show ip route supernets-only Parameters Command Mode Privileged EXEC mode No/clear Default Description Examples ASUS# show ip route supernets-only 19. System Management: 19.
PAGE 229
GigaX2024B/M L2 Managed Switch CLI Manual Parameters Command Mode Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description Show stacking information Examples ASUS# show switch status 19.3 switch <1-8> GX2024M stacking only Syntax switch <1-8> Parameters <1-8> stack id Command Mode Configure terminal mode No/clear Default Description To configure the stack id the switch belong to. Examples ASUS(config)# switch 3 19.
PAGE 230
GigaX2024B/M L2 Managed Switch CLI Manual 19.5 archive download-sw /overwrite tftp: IMAGE Syntax archive download-sw /overwrite tftp: IMAGE Parameters IMAGE Image file Command Mode Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description Use the archive download-sw /overwrite configuration command on the switch stack or standalone switch to download a new copy of software from a server and overwrite an existing image.
PAGE 231
GigaX2024B/M L2 Managed Switch CLI Manual No/clear Show Default None or depends on ODM customer Description Use the copy configuration command on the switch stack or standalone switch to copy running configuration startup-config. Examples ASUS# copy running-config startup-config 19.
PAGE 232
GigaX2024B/M L2 Managed Switch CLI Manual Examples ASUS# copy tftp: 192.192.1.31 startup-config 19.10 disable Syntax disable Parameters Command Mode Privileged EXEC mode No/clear Show Default Description This command turn off privileged mode and back to user mode Examples ASUS#disable 19.11 enable Syntax enable Parameters Command Mode User mode No/clear Show Default Description This command let user enter enable mode and turn on privileged mode command. Examples ASUS>enable 19.
PAGE 233
GigaX2024B/M L2 Managed Switch CLI Manual Default Description This command let user end current mode and down to enable mode. Examples ASUS(config)#end 19.13 exit Syntax exit Parameters Command Mode User mode, Privileged EXEC mode , Configure terminal mode, Interface mode No/clear Show Default Description This command let user exit current mode and down to previous mode. Examples ASUS(config)#exit 19.
PAGE 234
GigaX2024B/M L2 Managed Switch CLI Manual Command Mode User mode, Privileged EXEC mode, Configure terminal mode, Interface mode No/clear Show Default Description This command lists all of the command of the operation mode. Examples ASUS#list 19.
PAGE 235
GigaX2024B/M L2 Managed Switch CLI Manual 19.18 ping ip WORD Syntax ping ip WORD Parameters WORD Ping destination address or hostname Command Mode Privileged EXEC mode No/clear Show Default Enable Description This command used to send echo messages to ping destination address or hostname Examples ASUS#ping ip 192.192.1.1 19.
PAGE 236
GigaX2024B/M L2 Managed Switch CLI Manual Description Use the command to exit current mode and down to previous mode. Examples ASUS#quit 19.21 reboot Syntax reboot Parameters Command Mode Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description Use this command to reboot the system. Examples ASUS#reboot 19.
PAGE 237
GigaX2024B/M L2 Managed Switch CLI Manual Default Description To show running-config fule. Examples ASUS# show running-config 19.24 show startup-config Syntax show startup-config Parameters startup-config Contentes of startup configuration Command Mode Privileged EXEC mode Default Description To show startup-config. Examples ASUS# show startup-config 19.
PAGE 238
GigaX2024B/M L2 Managed Switch CLI Manual 19.27 show private health Syntax show private health Parameters Command Mode Privileged EXEC mode No/clear Default Description To show system monitor information Examples ASUS# show private health 19.28 show private led Syntax show private led Parameters Command Mode Privileged EXEC mode No/clear Default Description To show system led information Examples ASUS# show private led 19.
PAGE 239
GigaX2024B/M L2 Managed Switch CLI Manual 19.30 show uptime Syntax show uptime Parameters Command Mode Privileged EXEC mode No/clear Default Description To display system uptime Examples ASUS# show uptime 19.31 show clock Syntax show clock Parameters Command Mode Privileged EXEC mode No/clear Default Description To show clock Examples ASUS# show clock 19.
PAGE 240
GigaX2024B/M L2 Managed Switch CLI Manual 19.33 show syslog Syntax show syslog Parameters Command Mode Privileged EXEC mode No/clear Default Description To show system log messages Examples ASUS# show syslog 19.34 show syslog configuration Syntax show syslog configuration Parameters Command Mode Privileged EXEC mode No/clear Default Description To show system log configuration Examples ASUS# show syslog configuration 19.
PAGE 241
GigaX2024B/M L2 Managed Switch CLI Manual 19.36 syslog facility <0-23> Syntax syslog facility <0-23> Parameters facility Assign message facility <0-23> Facility code Command Mode Configure terminal mode No/clear Default Description To configure system log Facility code Examples ASUS(config)# syslog facility 3 19.
PAGE 242
GigaX2024B/M L2 Managed Switch CLI Manual 19.39 syslog severity <0-7> Syntax syslog severity <0-7> Parameters <0-7> Severity code Command Mode Configure terminal mode No/clear Default Description Assign message priority Examples ASUS(config)# syslog severity 2 19.40 syslog timestamp Syntax syslog timestamp Parameters Command Mode Configure terminal mode No/clear Default Description Turn on message timestamp Examples ASUS(config)# syslog timestamp 19.
PAGE 243
GigaX2024B/M L2 Managed Switch CLI Manual 19.42 telnet WORD PORT Syntax telnet WORD PORT Parameters WORD IP address or hostname of a remote system PORT TCP Port number Command Mode User mode, Privileged EXEC mode No/clear Show Default None or depends on ODM customer Description to telnet a ip address Examples ASUS# telnet 192.192.1.11 21 19.
PAGE 244
GigaX2024B/M L2 Managed Switch CLI Manual Description Use the write configuration command on the switch stack or standalone switch to write running configuration to memory, network, or terminal Examples ASUS#write 19.45 show arp Syntax show arp Parameters Command Mode Privileged EXEC mode Default Description To show arp table. Examples ASUS#show arp 19.46 no arp A.B.C.D Syntax no arp A.B.C.D Parameters Command Mode Privileged EXEC mode Default Description To delete arp table.
PAGE 245
GigaX2024B/M L2 Managed Switch CLI Manual 19.48 user delete USERNAME Syntax user delete USERNAME Parameters ACCOUNT user name Command Mode Privileged EXEC mode Default Description To delete a user account Examples ASUS# user delete test 19.