DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 Managed 8/16/24-port 10/100Mbps N-Way Fast Ethernet Switch Command Line Interface Reference Manual Fourth Edition (May 2007) 651ES3026045G Printed In Taiwan RECYCLABLE
Table of Contents Introduction ...................................................................................................................................................................................... 1 Using the Console CLI..................................................................................................................................................................... 4 Command Syntax ............................................................................................
DES-3000 Series Layer 2 Switch CLI Reference Manual 1 I NTRODUCTION This document is a reference guide for all DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 switches. Throughout this manual, the DES-3026 Switch will be the Switch referred to for all examples and configuration information. All DES3010F/DES-3010FL /DES-3010G/DES-3018/DES-3026 switches contain the same information and posses the same configuration capabilities. The difference in switches reside in the port type and the port count only.
DES-3000 Series Layer 2 Switch CLI Reference Manual Setting the Switch’s IP Address Each switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. The default Switch IP address can be changed to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory.
DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 1-3. Assigning an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.33 with a subnet mask of 255.0.0.0 (8 in CIDR from). The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 2 U SING THE C ONSOLE CLI The DES-3026 supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based network management software over the network.
DES-3000 Series Layer 2 Switch CLI Reference Manual Commands are entered at the command prompt, DES-3026:4#. There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands. Figure 2-2. The ? Command The dir command has the same function as the ? command. When you enter a command without its required parameters, the CLI will prompt you with a Next possible completions: message. Figure 2-3.
DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 2-4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter , the CLI returned the Next possible completions: prompt. The up arrow cursor control key was pressed to re-enter the previous command (config account) at the command prompt. Now the appropriate user name can be entered and the config account command re-executed.
DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 2-6. Next possible completions: show command In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts configured on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 3 C OMMAND S YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. Note: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted function that changes text case. Purpose Encloses a variable or value that must be specified.
DES-3000 Series Layer 2 Switch CLI Reference Manual {braces} Purpose Encloses an optional value or set of optional arguments. Syntax reset {[config | system]} Description In the above syntax example, you have the option to specify config or system. It is not necessary to specify either optional value, however the effect of the system reset is dependent on which, if any, value is specified. Therefore, with this example there are three possible outcomes of performing a system reset.
DES-3000 Series Layer 2 Switch CLI Reference Manual 4 B ASIC S WITCH C OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual create account Usernames can be between 1 and 15 characters. Passwords can be between 0 and 15 characters. Example usage: To create an administrator-level user account with the username “dlink”. DES-3026:4#create account admin dlink Command: create account admin dlink Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual show account Purpose Used to display user accounts. Syntax show account Description Displays all user accounts created on the Switch. Up to 8 user accounts can exist on the Switch at one time. Parameters None. Restrictions Only Administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual show session Restrictions None. Example usage: To display the way that the users logged in: DES-3026:4#show session Command: show session ID Login Time Live Time From Level -- --------------------------- --------------- -------------- ------*8 2204/01/26 3:36:27 0:0:20.
DES-3000 Series Layer 2 Switch CLI Reference Manual show config Purpose Used to display a list of configuration commands entered into the Switch. Syntax show config [current_config | config_in_nvram] Description This command displays a list of configuration commands entered into the Switch. Parameters current_config – Entering this parameter will display configurations entered without being saved to NVRAM.
DES-3000 Series Layer 2 Switch CLI Reference Manual config serial_port Purpose Used to configure the serial port. Syntax config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes | 15_minutes]} Description This command is used to configure the serial port’s baud rate and auto logout settings. Parameters baud rate [9600 | 19200 | 38400 | 115200] − The serial bit rate that will be used to communicate with the management host.
DES-3000 Series Layer 2 Switch CLI Reference Manual To enable pausing of the screen display when the show command output reaches the end of the page: DES-3026:4#enable clipaging Command: enable clipaging Success. DES-3026:4# disable clipaging Purpose Used to disable the pausing of the console screen scrolling at the end of each page when the command displays more than one screen of information.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable telnet Purpose Used to disable the Telnet protocol on the Switch. Syntax disable telnet Description This command is used to disable the Telnet protocol on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To disable the Telnet protocol on the Switch: DES-3026:4#disable telnet Command: disable telnet Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable web Command: disable web Success. DES-3026:4# save Purpose Used to save changes in the Switch’s configuration to non-volatile RAM. Syntax save {config | log | all } Description This command is used to enter the current switch configuration into non-volatile RAM. The saved switch configuration will be loaded into the Switch’s memory each time the Switch is restarted. Parameters config – Save configuration to NV-RAM.
DES-3000 Series Layer 2 Switch CLI Reference Manual reset Purpose Used to reset the Switch to the factory default settings. Syntax reset {[config | system]} {force_agree} Description This command is used to restore the Switch’s configuration to the default settings assigned from the factory. Parameters config − If the keyword ‘config’ is specified, all of the factory default settings are restored on the Switch including the IP address, user accounts, and the Switch history log.
DES-3000 Series Layer 2 Switch CLI Reference Manual logout Purpose Used to log out a user from the Switch’s console. Syntax logout Description This command terminates the current user’s session on the Switch’s console. Parameters None. Restrictions None. Example usage: To terminate the current user’s console session: DES-3026:4#logout ping Purpose Used to test the connectivity between network devices.
DES-3000 Series Layer 2 Switch CLI Reference Manual config terminal_line Purpose Used to configure the number of terminal lines produced from the command line interface. Syntax config terminal_line [default | ] Description This command is used to set the number of lines that will be produced by the command line interface of the switch. Users may employ various types of programs to view and configure the Command Line Interface management program for the switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 5 S WITCH P ORT C OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure the speed of ports 1-3 to be 10 Mbps, full duplex and state enabled: DES-3026:4#config ports 1-3 speed 10_full state enable Command: config ports 1-3 speed 10_full state enable Success. DES-3026:4# show ports Purpose Used to display the current configuration of a range of ports.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show ports 1 description Command: show ports 1 description Port Port Settings Connection Address State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning -----------------------------------------------------------1 Enabled Auto/Enabled Link Down Enabled Description: Accounting CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh Example usage: To display error ports: DES-3026:4#show ports err_disabled Command: show ports err_disabled
DES-3000 Series Layer 2 Switch CLI Reference Manual 6 N ETWORK M ANAGEMENT (SNMP) C OMMANDS The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. The DES-3026 supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The user may specify which version of the SNMP to use to monitor and control the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters create snmp host [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] delete snmp host show snmp host {} enable rmon disable rmon create trusted_host [ | network ] delete trusted_host [ | network | all] show trusted_host enable snmp traps disable snmp traps enable snmp authenticate traps disable snmp authenticate traps show snm
DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp user specifying the key in hex form below. This method is not recommended. auth - The user may also choose the type of authentication algorithms used to authenticate the snmp user. The choices are: • md5 − Specifies that the HMAC-MD5-96 authentication level will be used.
DES-3000 Series Layer 2 Switch CLI Reference Manual delete snmp user Purpose Used to remove an SNMP user from an SNMP group and also to delete the associated SNMP group. Syntax delete snmp user Description The delete snmp user command removes an SNMP user from its SNMP group and then deletes the associated SNMP group. Parameters − An alphanumeric string of up to 32 characters that identifies the SNMP user that will be deleted.
DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp view Parameters − An alphanumeric string of up to 32 characters that identifies the SNMP view that will be created. − The object ID that identifies an object tree (MIB tree) that will be included or excluded from access by an SNMP manager. included − Include this object in the list of objects that an SNMP manager can access. excluded − Exclude this object from the list of objects that an SNMP manager can access.
DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp view created on the Switch. Parameters − An alphanumeric string of up to 32 characters that identifies the SNMP view that will be displayed. Restrictions None. Example usage: To display SNMP view configuration: DES-3026:4#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree -------------------------------------------ReadView 1 WriteView 1 NotifyView 1.3.6 restricted 1.3.6.1.2.1.1 restricted 1.3.6.
DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp community is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. read_only − Specifies that SNMP community members using the community string created with this command can only read the contents of the MIBs on the Switch. read_write − Specifies that SNMP community members using the community string created with this command can read from and write to the contents of the MIBs on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp community SNMP managers access to MIB objects in the Switch’s SNMP agent. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To display the current name of the SNMP engine on the Switch: DES-3026:4#show snmp engineID Command: show snmp engineID SNMP Engine ID : 0035636666 DES-3026:4# create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views.
DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp group request SNMP messages. − An alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. write_view – Specifies that the SNMP group being created has write privileges.
DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp groups Purpose Used to display the group-names of SNMP groups currently configured on the Switch. The security model, level, and status of each group are also displayed. Syntax show snmp groups Description The show snmp groups command displays the group-names of SNMP groups currently configured on the Switch. The security model, level, and status of each group are also displayed. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual Group Name : ReadGroup ReadView Name : CommunityView WriteView Name : Notify View Name : CommunityView Security Model : SNMPv1 Security Level : NoAuthNoPriv Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level : ReadGroup : CommunityView : : CommunityView : SNMPv2 : NoAuthNoPriv Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level : WriteGroup : CommunityView : CommunityView : Community
DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp host Authentication − determines if an SNMP message is from a valid source. Encryption − scrambles the contents of messages to prevent it being viewed by an unauthorized source. noauth_nopriv − Specifies that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager.
DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp host Purpose Used to display the recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax show snmp host {} Description The show snmp host command is used to display the IP addresses and configuration information of remote SNMP managers that are designated as recipients of SNMP traps that are generated by the Switch’s SNMP agent.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To disable RMON: DES-3026:4#disable rmon Command: disable rmon Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create trusted_host network 11.0.0.0/8 Command: create trusted_host network 11.0.0.0/8 Success. DES-3026:4# show trusted_host Purpose Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above. Syntax show trusted_host Description This command is used to display a list of trusted hosts entered on the Switch using the create trusted_host command above. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete trusted_host 10.48.74.121 Command: delete trusted_host 10.48.74.121 Success. DES-3026:4# enable snmp traps Purpose Used to enable SNMP trap support. Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual enable snmp authenticate trap Description This command is used to enable SNMP authentication trap support on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To turn on SNMP authentication trap support: DES-3026:4#enable snmp authenticate trap Command: enable snmp authenticate trap Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show snmp traps Command: show snmp traps SNMP Trap Authenticate Traps : Enabled : Enabled DES-3026:4# config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch. Syntax config snmp system_contact {} Description The config snmp system_contact command is used to enter the name and/or other information to identify a contact person who is responsible for the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual config snmp system_name Purpose Used to configure the name for the Switch. Syntax config snmp system_name {} Description The config snmp system_name command configures the name of the Switch. Parameters - A maximum of 255 characters is allowed. A NULL string is accepted if no name is desired. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual 7 SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual • The maximum attempts for delivering mail to recipients is three. Mail message delivery attempts will be tried every five minutes until the maximum number of attempts is reached. Once reached and the message has not been successfully delivered, the message will be dropped and not received by the mail recipient. • If the Switch shuts down or reboots, mail messages in the waiting queue will be lost.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable smtp Command: disable smtp Success. DES-3026:4# config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client.
DES-3000 Series Layer 2 Switch CLI Reference Manual show smtp Purpose Used to view configured parameters for the SMTP function on the Switch. Syntax show smtp Description This command will display parameters configured for SMTP on the Switch, including server information, mail recipients and the current running status of SMTP on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4# smtp send_testmsg Command: smtp send_testmsg Subject: This is a SMTP test. Content: Hello everybody!! Sending mail, please wait… Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual 8 D OWNLOAD /U PLOAD C OMMANDS The download/upload commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#download configuration 10.48.74.121 c:\cfg\setting.txt Command: download configuration 10.48.74.121 c:\cfg\setting.txt Connecting to server................... Done. Download configuration............. Done. DES-3026:4# upload Purpose Used to upload the current switch settings or the Switch history log to a TFTP server.
DES-3000 Series Layer 2 Switch CLI Reference Manual enable autoconfig Purpose Used to activate the autoconfiguration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name. It will then request the file from the TFTP server specified in the reply.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026 Fast Ethernet Switch Command Line Interface Firmware: Build 2.00.016 Copyright(C) 2004-2007 D-Link Corporation. All rights reserved. UserName: Password: DES-3026:4# DES-3026:4##ROUTE DES-3026:4# DES-3026:4# DES-3026:4#create iproute default 172.18.212.253 Command: create iproute default 172.18.212.253 Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual show autoconfig Purpose Used to display the current autoconfig status of the Switch. Syntax show autoconfig Description This will list the current status of the autoconfiguration function. Parameters None. Restrictions None. Example usage: To show the autoconfig configuration set on the Switch: DES-3026:4#show autoconfig Command: show autoconfig Autoconfig disabled.
DES-3000 Series Layer 2 Switch CLI Reference Manual 9 N ETWORK M ONITORING C OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show packet ports 7 Command: show packet ports 7 Port number : 7 A Frame Size Frame Counts Frames/sec Frame Type ----------------------------------------64 3275 10 RX Bytes 65-127 755 10 RX Frames 128-255 316 1 256-511 145 0 TX Bytes 512-1023 15 0 TX Frames 1024-1518 0 0 C Unicast RX 152 1 Multicast RX 557 2 Broadcast RX 3686 16 B Total Total/sec --------------408973 1657 4395 19 7918 111 178 2 CTRL+C ESC q Quit SPACE n Next Page p Previous
DES-3000 Series Layer 2 Switch CLI Reference Manual show utilization ports Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters [ports ] Description This command will clear the counters used by the Switch to compile statistics. Parameters − Specifies a port or range of ports to be cleared for statistics. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show log index 1-4 Command: show log index 1-4 Index Time -------------4 2005/12/22 03:03:58 3 2005/12/22 03:02:58 2 2005/12/22 03:01:28 1 2005/12/22 03:00:01 Log Text --------------------------------------------------------------Successful login through Console (Username: Anonymous, IP:0.0.0.0, MAC:00-00-00-00-00-00) Logout through Console (Username: Anonymous, IP:0.0.0.
DES-3000 Series Layer 2 Switch CLI Reference Manual show syslog Purpose Used to display the syslog protocol status as enabled or disabled. Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled. Parameters None. Restrictions None. Example usage: To display the current status of the syslog function: DES-3026:4#show syslog Command: show syslog Syslog Global State: Enabled DES-3026:4# create syslog host Purpose Used to create a new syslog host.
DES-3000 Series Layer 2 Switch CLI Reference Manual create syslog host Parameters Numerical Code 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 Facility kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1)
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create syslog host 1 ipaddress 10.53.13.94 severity all facility local0 Command: create syslog host 1 ipaddress 10.53.13.94 severity all facility local0 Success. DES-3026:4# config syslog host Purpose Used to configure the syslog protocol to send system log data to a remote host.
DES-3000 Series Layer 2 Switch CLI Reference Manual config syslog host Parameters Numerical Code 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 Facility kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1)
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config syslog host all severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3026:4# delete syslog host Purpose Used to remove a syslog host, that has been previously configured, from the Switch. Syntax delete syslog host [ | all] Description The delete syslog host command is used to remove a syslog host that has been previously configured from the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show syslog host Command: show syslog host Syslog Global State: Disabled Host Id ------1 2 3 Host IP Address --------------10.1.1.2 10.40.2.3 10.21.13.1 Severity -------------All All All Facility UDP port --------------Local0 514 Local0 514 Local0 514 Status -------Disabled Disabled Disabled Total Entries : 3 DES-3026:4# config log_save_timing Purpose Used to configure automatic saving of log to Syslog host.
DES-3000 Series Layer 2 Switch CLI Reference Manual To configure log timing: DES-3026:4#show log_save_timing Command: show log_save_timing Saving log method : on_demand DES-3026:4# 66
DES-3000 Series Layer 2 Switch CLI Reference Manual 10 S PANNING T REE C OMMANDS The Switch supports 802.1d STP and 802.1w Rapid STP. The spanning tree commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config stp maxage 18 hellotime 4 Command: config stp maxage 18 hellotime 4 Success. DES-3026:4# config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports {cost [auto | ] | priority | migrate [yes | no] | edge [true | false] | p2p [true | false | auto] | state [enabled | disabled]} Description This command is used to create and configure STP for a group of ports.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config stp ports 1-5 cost 19 priority 15 state enabled Command: config stp ports 1-5 cost 19 priority 15 state enabled Success. DES-3026:4# enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description This command allows the Spanning Tree Protocol to be globally enabled on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual show stp Restrictions None. Example usage: To display the status of STP on the Switch: Status 1: STP enabled with STP compatible version DES-3026:4#show stp Command: show stp STP Status : Enabled Max Age : 20 Hello Time :2 Forward Delay : 15 Priority : 32768 Default Path Cost : 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual show stp ports Purpose Used to display the Switch’s current per-port group STP configuration. Syntax show stp ports Description This command displays the Switch’s current per-port group STP configuration. Parameters − Specifies a port or range of ports to be configured. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual 11 L OOPBACK D ETECTION C OMMANDS The Loopback Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable loopdetect Command: disable loopdetect Success. DES-3026:4# config loopdetect Purpose Used to configure the Loopback Detection function parameters on the switch. Syntax config loopdetect [recover_timer [0 | ] | interval ] Description This command is used to set the parameters for the Loopback Detection function on the switch, without adjusting configurations.
DES-3000 Series Layer 2 Switch CLI Reference Manual show loopdetect Purpose Used to display the Loopback Detection function parameters set on the switch. Syntax show loopdetect Description This command will display the loopdetect settings currently set on the switch. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual show loopdetect ports Purpose Used to display the Loopback Detection port settings on the switch. Syntax show loopdetect ports {} Description This command will display the loopdetect port settings currently set on the switch. Parameters - Enter a port or range of ports to be displayed. Not enetering this parameter will display all ports on the switch. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual 12 F ORWARDING D ATABASE C OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table (database). Syntax create multicast_fdb Description This command will make an entry into the Switch’s multicast MAC address forwarding database. Parameters − The name of the VLAN on which the MAC address resides. − The MAC address that will be added to the forwarding table.
DES-3000 Series Layer 2 Switch CLI Reference Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time Description The aging time affects the learning process of the Switch. Dynamic forwarding table entries, which are made up of the source MAC addresses and their associated port numbers, are deleted from the table if they are not accessed within the aging time.
DES-3000 Series Layer 2 Switch CLI Reference Manual clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan | port | all] Description This command is used to clear dynamically learned entries to the Switch’s forwarding database. Parameters − The name of the VLAN on which the MAC address resides. port − The port number corresponding to the MAC destination address.
DES-3000 Series Layer 2 Switch CLI Reference Manual show fdb Purpose Used to display the current unicast MAC address forwarding database. Syntax show fdb {port | vlan | mac_address | static | aging_time} Description This command will display the current contents of the Switch’s forwarding database. Parameters port − The port number corresponding to the MAC destination address. The Switch will always forward traffic to the specified device through this port.
DES-3000 Series Layer 2 Switch CLI Reference Manual config multicast filtering_mode Purpose Used to configure the multicast packet filtering mode for the Switch. Syntax config multicast filtering_mode [forward_unregistered_groups | filter_unregistered_groups] Description This command will configure the multicast packet filtering mode on the Switch. Parameters [forward_unregistered_groups | filter_unregistered_groups] – The user may set the filtering mode to any of these two options.
DES-3000 Series Layer 2 Switch CLI Reference Manual 13 T RAFFIC C ONTROL C OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch network.
DES-3000 Series Layer 2 Switch CLI Reference Manual config traffic control issue is resolved. • shutdown - Utilizes the Switch’s software Traffic Control mechanism to determine the Packet Storm occurring. Once detected, the port will deny all incoming traffic to the port except STP BPDU packets, which are essential in keeping the Spanning Tree operational on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual config traffic control_recover Purpose Used to configure traffic control recover for any or all ports. Syntax config traffic control_recover [ | all] Description Configuring a port for traffic control recover will require an administrator to restart the specified ports if storm control shuts down the port or ports.
DES-3000 Series Layer 2 Switch CLI Reference Manual show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control {} Description This command displays the current storm traffic control configuration on the Switch. Parameters - Specify a port or range of ports to display. If unspecified, all ports will be displayed. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual 14 Q O S C OMMANDS The DES-3000 Series switch supports priority classification for IEEE 802.1p Priority, DiffServ (DSCP) and IP TOS priority. Incoming packets with piority tags are classified into 4 priority queues in the Switch. Priority may also be set according to destination MAC address or Switch port. For 802.1p Priority, the Switch has 4 priority classes of service.
DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters config cos mapping port [ | all] [none | {port_mapping | ethernet [802.1p | mac_mapping | ip [tos | dscp]}] show cos mapping {port [ | all]} config dscp_mapping dscp_value <0–63> [class ] show dscp_mapping {dscp_value } config scheduling weight show scheduling config 802.1p user_priority show 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual config cos mapping • ip - Specifies port-based CoS mapping on selected ports to be tos or dscp mapping. • Restrictions tos – Specifies CoS mapping for Type of Service (ToS) priority. Select the ToS value (value ) and the class (class ) Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure CoS mapping for DSCP: DES-3026:4#config dscp_mapping dscp_value 1 class 0 Command: config dscp_mapping dscp_value 1 class 0 Success DES-3026:4# show dscp_mapping Purpose To display current DSCP mapping. Syntax show dscp_mapping {dscp_value } Description Use this to display the CoS priority level currently mapped for DSCP levels.
DES-3000 Series Layer 2 Switch CLI Reference Manual config scheduling specified. For example, if a value of 5 is specified, then the highest priority class of service (queue 3) will be allowed to transmit 5 packets. Then the next lower priority class of service (queue 2) will be allowed to transmit 5 packets, and so on, until all of the classes of service have transmitted 5 packets. The process will then repeat.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4# show scheduling Command: show scheduling QOS Output Scheduling Class ID Weight --------------- ------------Class-0 1 Class-1 2 Class-2 4 Class-3 15 DES-3026:4# config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware classes of service available on the Switch. Syntax config 802.1p user_priority Description The config 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual show 802.1p user_priority Purpose Used to display the current mapping between an incoming packet’s 802.1p priority value and one of the Switch’s four hardware priority classes of service. Syntax show 802.1p user_priority Description The show 802.1p user_priority command displays the current mapping of an incoming packet’s 802.1p priority value to one of the Switch’s four hardware priority classes of service. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config 802.1p default_priority all 5 Command: config 802.1p default_priority all 5 Success. DES-3026:4# show 802.1p default_priority Purpose Used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p default_priority {} Description The show 802.1p default_priority command displays the currently configured 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual config scheduling_mechanism contains four hardware priority classes of service. Incoming packets must be mapped to one of these four hardware priority classes of service. This command is used to specify the rotation by which these four hardware priority classes of service are emptied.
DES-3000 Series Layer 2 Switch CLI Reference Manual config bandwidth_control Purpose Used to configure bandwidth control on a by-port basis. Syntax config bandwidth_control [] {rx_rate [no_limit | ] | tx_rate [no_limit | ]} Description The config bandwidth_control command is used to configure bandwidth on a by-port basis. Parameters − Specifies a port or range of ports to be configured for bandwidth control.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show bandwidth_control 1-12 Command: show bandwidth_control 1-12 Bandwidth Control Table Port RX Rate (kbit/sec) --------------------------1 100000 2 100000 3 100000 4 100000 5 100000 6 100000 7 100000 8 100000 9 100000 10 100000 11 no_limit 12 no_limit TX_RATE (kbit/sec) ---------------------100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 no_limit no_limit DES-3026:4# config cos port_mapping Purpose Used to map a speci
DES-3000 Series Layer 2 Switch CLI Reference Manual show cos port_mapping are specified, all ports are listed. Restrictions None. Example usage: To view CoS port mapping for a range of ports: DES-3026:4#show cos port_mapping ports 1-2 Command: show cos port_mapping ports 1-2 Port Priority ---- -------1 0 10 2 DES-3026:4# config cos mac_mapping destination_addr Purpose Used to map the destination MAC address of an incoming packet to one of the hardware queues available on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual show cos mac_mapping mapping entries are listed. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To show the CoS to ToS mapping.
DES-3000 Series Layer 2 Switch CLI Reference Manual 15 T RAFFIC S EGMENTATION C OMMANDS Traffic segmentation allows you to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied. The traffic segmentation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual show traffic_segmentation Restrictions The port lists for segmentation and the forward list must be on the same switch. Example usage: To display the current traffic segmentation configuration on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 16 P ORT M IRRORING C OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port | [add | delete] source ports [rx | tx | both] enable mirror disable mirror show mirror Each command is listed, in detail, in the following sections.
DES-3000 Series Layer 2 Switch CLI Reference Manual enable mirror Purpose Used to enable a previously entered port mirroring configuration. Syntax enable mirror Description This command, combined with the disable mirror command below, allows a mirror entry to be enabled on the Switch, without modifying the port mirroring configuration. Parameters None. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show mirror Command: show mirror Current Settings Mirror Status : enable Target Port :2 Mirrored Port RX : TX : DES-3026:4# 104
DES-3000 Series Layer 2 Switch CLI Reference Manual 17 VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan {tag } delete vlan config vlan {[add [tagged | untagged] | delete] } show vlan {} Each command is listed, in detail, in the following sections.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete vlan v1 Command: delete vlan v1 Success. DES-3026:4# config vlan Purpose Used to add additional ports to a previously configured VLAN. Syntax config vlan {[add [tagged | untagged] | delete] } Description This command allows the user to add or delete ports to the port list of a previously configured VLAN. Additional ports may be specified as tagging or untagging.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show vlan Command: show vlan VID VLAN TYPE Member ports Static ports Tagged ports Untagged ports :1 : static : 1-26 : 1-26 : : 1-26 VLAN Name Total Entries : 1 DES-3026:4# 107 : default
DES-3000 Series Layer 2 Switch CLI Reference Manual 18 L INK A GGREGATION C OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create link_aggregation group_id 1 Command: create link_aggregation group_id 1 Success. DES-3026:4# delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id Description This command is used to delete a previously configured link aggregation group. Parameters − Specifies the group ID.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To define a load-sharing group of ports, group-id 1,master port 5 of module 1 with group members ports 5-7 plus port 9: DES-3026:4#config link_aggregation group_id 1 master_port 5 ports 5-7,9 Command: config link_aggregation group_id 1 master_port 5 ports 5-7,9 Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual show link_aggregation ports on the Switch (9-10, 17-18, 25-26) and cannot be viewed here. algorithm − Displays the link aggregation algorithm in use on the Switch. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual config lacp_ports Restrictions Only administrator-level users can issue this command. Example usage: To configure LACP port mode settings: DES-3026:4#config lacp_port 1-6 mode active Command: config lacp_port 1-6 mode active Success. DES-3026:4# show lacp_port Purpose Used to display current LACP port mode settings. Syntax show lacp_port {} Description This command will display the LACP mode settings as they are currently configured.
DES-3000 Series Layer 2 Switch CLI Reference Manual 19 B ASIC IP C OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif [System] [{ipaddress | vlan | state [enable | disable] | [description | clear_description} | bootp | dhcp] show ipif Each command is listed, in detail, in the following sections.
DES-3000 Series Layer 2 Switch CLI Reference Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif Description This command will display the configuration of an IP interface on the Switch. Parameters None. Restrictions None. Example usage: To display IP interface settings. DES-3026:4#show ipif Command: show ipif IP Interface Settings Interface Name IP Address Subnet Mask VLAN Name Admin.
DES-3000 Series Layer 2 Switch CLI Reference Manual 20 IP-MAC B INDING C OMMANDS The IP-MAC Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual config address_binding ip_mac ipaddress Purpose Used to configure a previously set IP-MAC address binding entry. Syntax config address_binding ip_mac ipaddress mac_address {ports [ | all ] } Description This command will configure an IP-MAC address binding entry. Parameters - The IP address of the device to be bound to the MAC address stated below.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config address_binding ip_mac ports 2 state enable allow_zeroip enable Command: config address_binding ip_mac ports 2 state enable allow_zeroip enable Success. DES-3026:4# show address_binding Purpose Used to display IP-MAC address binding entries.
DES-3000 Series Layer 2 Switch CLI Reference Manual delete address_binding Purpose Used to delete an IP-MAC address binding entry. Syntax delete address_binding [ip_mac [ipaddress mac_address | all] | blocked [all | vlan_name mac_address ]] Description This command will delete IP-MAC address binding entries. Two methods of deletion can be applied. IP_MAC – Individual Address Binding entries can be deleted by entering the physical and IP addresses of the device.
DES-3000 Series Layer 2 Switch CLI Reference Manual enable address_binding trap_log Purpose Used to enable the trap log for the IP-MAC binding function. Syntax enable address_binding trap_log Description This command, along with the disable address_binding trap_log will enable and disable the sending of trap log messages for IP-MAC binding.
DES-3000 Series Layer 2 Switch CLI Reference Manual 21 MAC N OTIFICATION C OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable mac_notification Command: disable mac_notification Success. DES-3026:4# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval | historysize } Description MAC address notificiation is used to monitor MAC addresses learned and entered into the FDB. Parameters interval - The time in seconds between notifications.
DES-3000 Series Layer 2 Switch CLI Reference Manual show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings Syntax show mac_notification Description This command is used to display the Switch’s MAC address table notification global settings. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ----------------------------------------------------1 Disabled 2 Disabled 3 Disabled 4 Disabled 5 Disabled 6 Disabled 7 Disabled 8 Disabled 9 Disabled 10 Disabled 11 Disabled 12 Disabled 13 Disabled 14 Disabled 15 Disabled 16 Disabled 17 Disabled 18 Disabled 19 Disabled 20 Disabled CTRL+C ESC q Quit SPACE n Next Page p Previous Pag
DES-3000 Series Layer 2 Switch CLI Reference Manual 22 IGMP S NOOPING C OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual To configure the igmp snooping: DES-3026:4#config igmp_snooping vlan_name default host_timeout 250 state enable Command: config igmp_snooping vlan_name default host_timeout 250 state enable Success. DES-3026:4# config igmp_snooping querier Purpose Used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members and the permitted packet loss that guarantees IGMP snooping.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure the igmp snooping: DES-3026:4#config igmp_snooping querier vlan_name default query_interval 125 state enable Command: config igmp_snooping querier vlan_name default query_interval 125 state enable Success. DES-3026:4# config router_ports Purpose Used to configure ports as router ports.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#enable igmp_snooping Command: enable igmp_snooping Success. DES-3026:4# disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping Description This command disables IGMP snooping on the Switch. IGMP snooping can be disabled only if IP multicast routing is not being used. Disabling IGMP snooping allows all IGMP and IP multicast traffic to flood within a given IP interface. Parameters None.
DES-3000 Series Layer 2 Switch CLI Reference Manual Leave Timer Querier State Querier Router Behavior State Multicast fast leave :2 : Disabled : Non-Querier : Disabled : Disabled Total Entries: 1 DES-3026:4# show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch. Syntax show igmp_snooping group {vlan } Description This command will display the current IGMP snooping group configuration on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-10 Dynamic router port : Total Entries: 1 DES-3026:4# 129
DES-3000 Series Layer 2 Switch CLI Reference Manual 23 CPU ACL F ILTERING C OMMANDS The DES-3000 switch series implements Access Control Lists for the CPU that enable the Switch to deny network access to specific devices or device groups based on IP settings, MAC address and packet content settings. Access profiles allow users to establish criteria to determine whether or not the Switch will forward packets to the CPU based on the information contained in each packet’s header.
DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters create cpu access_profile profile_id [ethernet {vlan | source_mac | destination_mac | 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual create cpu access_profile Purpose Used to create an access profile specifically for CPU Interface Filtering on the Switch and to define which parts of each incoming frame’s header the Switch will examine. Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields. Specific values for the rules are entered using the config cpu access_profile command, below.
DES-3000 Series Layer 2 Switch CLI Reference Manual create cpu access_profile • tcp − Specifies that the Switch will examine each frames Transport Control Protocol (TCP) field. • src_port_mask − Specifies a TCP port mask for the source port. • dst_port_mask − Specifies a TCP port mask for the destination port. • flag_mask [ all | {urg | ack | psh | rst | syn | fin}] – Enter the appropriate flag_mask parameter.
DES-3000 Series Layer 2 Switch CLI Reference Manual delete cpu access_profile access_profile command. Restrictions Only administrator-level users can issue this command. Example usage: To delete the CPU access profile with a profile ID of 1: DES-3026:4#delete cpu access_profile profile_id 1 Command: delete cpu access_profile profile_id 1 Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual config cpu access_profile • destination_mac − Specifies that the access profile will apply to this destination MAC address. • 802.1p − Specifies that the access profile will apply only to packets with this 802.1p priority value. • ethernet_type − Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
DES-3000 Series Layer 2 Switch CLI Reference Manual config cpu access_profile • offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63. • offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79. port - The access profile for the CPU may be defined for each port on the Switch. permit | deny – Specify that the packet matching the criteria configured with command will either be permitted entry to the CPU or denied entry to the CPU.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable cpu_interface_filtering Restrictions Only administrator-level users can issue this command. Example usage: To disable RMON: DES-3026:4#disable cpu_interface_filtering Command: disable cpu_interface_filtering Success. DES-3026:4# show cpu_access_profile Purpose Used to view the CPU access profile entry currently set in the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 24 P ORT S ECURITY C OMMANDS The port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual To configure the port security: DES-3026:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Success DES-3026:4# show port_security Purpose Used to display the current port security configuration.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To delete an entry from the port security list: DES-3026:4#delete port_security_entry vlan_name default mac_address 00-0C-6E-73-2B-C9 port 1 Command: delete port_security_entry vlan_name default mac_address 00-0C-6E-73-2B-C9 port 1 Success DES-3026:4# clear port_security_entry Purpose Used to clear MAC address entries learned from a specified port for the port security function.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable port_security trap_log Purpose Used to disable the trap log function for port security. Syntax disable port_security trap_log Description This command is used to disable sending trap messages to the Switch’s log when a new MAC address violates the pre-defined port security configuration. This information will include the MAC address of the undefined device along with the port being infringed upon. Parameters None.
DES-3000 Series Layer 2 Switch CLI Reference Manual 25 802.1X C OMMANDS The DES-3000 switch series implements the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames. Command Parameters enable 802.1x disable 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual Each command is listed, in detail, in the following sections. NOTE: The uplink module ports (DES-3010F/FL/G ports 9-10, DES-3018 ports 17-18, DES-3026 ports 25-26) do not support the 802.1X function. enable 802.1x Purpose Used to enable the 802.1x server on the Switch. Syntax enable 802.1x Description The enable 802.1x command enables the 802.1x Port-based or MACbased Network Access control server application on the Switch. Parameters None.
DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x auth_mode Purpose Used to configure the 802.1x authentication mode on the Switch. Syntax config 802.1x auth_mode {port_based | mac_based] Description The config 802.1x authentication mode command is used to enable either the port-based or MAC-based 802.1x authentication feature on the Switch. Parameters [port_based | mac_based ports] − The Switch may authenticate 802.1x by either port or MAC address.
DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To display the 802.1x authentication states (stacking disabled) for Port-based 802.1x: DES-3026:4#show 802.1x auth_state ports 1-5 Command: show 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual show 802.1x auth_configuration /ForceAuth/ForceUnauth − Shows the current state of the Authenticator PAE. Backend State: Request/Response/Fail/Idle/Initialize − Shows the current state of the Backend Authenticator. AdminCtlDir: Both/In − Shows whether a controlled Port that is unauthorized will exert control over communication in both receiving and transmitting directions, or just the receiving direction.
DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x capability ports Purpose Used to configure the 802.1x capability of a range of ports on the Switch. Syntax config 802.1x capability ports [ | all] [authenticator | none] Description The config 802.1x command has four capabilities that can be set for each port. Authenticator, Supplicant, Authenticator and Supplicant, and None. Parameters − Specifies a port or range of ports to be configured.
DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x auth_parameter ports force_unauth − Forces the Authenticator for the port to become unauthorized. Network access will be blocked. quiet_period − Configures the time interval between authentication failure and the start of a new authentication attempt. tx_period - Configures the time to wait for a response from a supplicant (user) to send EAP Request/Identity packets.
DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x init Purpose Used to initialize the 802.1x function on a range of ports. Syntax config 802.1x init [port_based ports [ | all] | mac_based ports [ | all] {mac_address }] Description The config 802.1x init command is used to immediately initialize the 802.1x functions on a specified range of ports or for specified MAC addresses operating from a specified range of ports.
DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x reauth mac_address - Specifies the MAC address of the client to add. Restrictions Only administrator-level users can issue this command. Example usage: To configure 802.1x reauthentication for ports 1-18: DES-3026:4#config 802.1x reauth port_based ports 1-18 Command: config 802.1x reauth port_based ports 1-18 Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual config radius delete Purpose Used to delete a previously entered RADIUS server configuration. Syntax config radius delete Description The config radius delete command is used to delete a previously entered RADIUS server configuration. Parameters − Assigns a number to the current set of RADIUS server settings. Up to three groups of RADIUS server settings can be entered on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-3026:4# show radius Purpose Used to display the current RADIUS configurations on the Switch. Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the Switch. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create 802.1x user dtremblett Command: create 802.1x user dtremblett Enter a case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3026:4# show 802.1x user Purpose Used to display the 802.1x user accounts on the Switch. Syntax show 802.1x user Description The show 802.1x user command is used to display the 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete 802.1x user dtremblett Command: delete 802.1x user dtremblett Success. DES-3026:4# show radius acct_client Purpose Used to display the current RADIUS accounting client. Syntax show acct_client Description The show acct_client command is used to display the current RADIUS accounting client currently configured on the Switch. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual To view the current RADIUS authentication client: DES-3026:4#show auth_client Command: show auth_client radiusAuthClient ==> radiusAuthClientInvalidServerAddresses radiusAuthClientIdentifier 0 D-Link radiusAuthServerEntry ==> radiusAuthServerIndex : 1 radiusAuthServerAddress : 0.0.0.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show auth_diagnostics ports 1 Command: show auth_diagnostics ports 1 Port number : 1 EntersConnecting 0 EapLogoffsWhileConnecting 0 EntersAuthenticating 0 SuccessWhileAuthenticating 0 TimeoutsWhileAuthenticating 0 FailWhileAuthenticating 0 ReauthsWhileAuthenticating 0 EapStartsWhileAuthenticating 0 EapLogoffWhileAuthenticating 0 ReauthsWhileAuthenticated 0 EapStartsWhileAuthenticated 0 EapLogoffWhileAuthenticated 0 BackendResponses 0 BackendAcce
DES-3000 Series Layer 2 Switch CLI Reference Manual show auth_statistics Purpose Used to display the current authentication statistics. Syntax show auth_statistics {ports ]} Description The show auth_statistics command is used to display the current authentication statistics of the Switch on a per port basis. Parameters ports − Specifies a range of ports to be viewed. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create 802.1x guest_vlan Trinity Command: create 802.1x guest_vlan Trinity Success. DES-3026:4# config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1x guest VLAN. Syntax config 802.1x guest_vlan ports [ | all] state [enable | disable] Description The config 802.1x guest_vlan ports command is used to configure ports to be enabled or disabled for the 802.1x guest VLAN.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Setting ----------------------------------------------------------Guest VLAN : Trinity Enable Guest VLAN ports: 5-8 DES-3026:4# delete 802.1x guest_vlan Purpose Used to delete a 802.1x Guest VLAN. Syntax delete 802.1x guest_vlan Description The delete 802.1x guest_vlan command is used to delete an 802.1x Guest VLAN. Guest 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual 26 T IME AND SNTP C OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3026:4# show sntp Purpose Used to display the SNTP information. Syntax show sntp Description This command will display SNTP settings information including the source IP address, time and poll interval. Parameters None. Restrictions None.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable sntp Purpose Disables SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp). Parameters None. Restrictions Only administrator-level users can issue this command. Example: To stop SNTP support: DES-3026:4#disable sntp Command: disable sntp Success. DES-3026:4# config time Purpose Used to manually configure system time and date settings.
DES-3000 Series Layer 2 Switch CLI Reference Manual config time_zone Parameters operator – Choose to add (+) or subtract (-) time to adjust for time zone relative to GMT. hour – Select the number hours offset from GMT (Greenwich Mean Time). min – Select the number of minutes difference added or subtracted to adjust the time zone. Restrictions Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual config dst e_wday - Configure the day of the week in which DST ends. • - The day of the week in which DST ends expressed using a three character abbreviation (sun, mon, tue, wed, thu, fri, sat) s_mth - Configure the month in which DST begins. • - The month to begin DST expressed as a number. e_mth - Configure the month in which DST ends. • - The month to end DST expressed as a number.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show time Command: show time Current Time Source : System Clock Current Time : 0 Days 01:09:49 Time Zone : GMT -06:00 Daylight Saving Time : Disabled Offset in minutes : 60 Repeating From : Apr 1st Sun 00:00 To : Oct last Sun 00:00 Annual From : 29 Apr 00:00 To : 12 Oct 00:00 DES-3026:4# 165
DES-3000 Series Layer 2 Switch CLI Reference Manual 27 R OUTING TABLE C OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] {} delete iproute [default] show iproute {} {static} Each command is listed, in detail, in the following sections.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete iproute default 10.53.13.254 Command: delete iproute default 10.53.13.254 Success. DES-3026:4# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute {} {static} Description This command will display the Switch’s current IP routing table. Parameters network address – IP address and netmask of the IP interface that is the destination of the route.
DES-3000 Series Layer 2 Switch CLI Reference Manual 28 ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show arpentry {ipif | ipaddress | static} config arp_aging time clear arptable Each command is listed, in detail, in the following sections. show arpentry Purpose Used to display the ARP table.
DES-3000 Series Layer 2 Switch CLI Reference Manual System System 10.90.90.90 00-01-02-03-04-00 10.255.255.255 FF-FF-FF-FF-FF-FF Local Local/Broadcast Total Entries = 20 DES-3026:4# config arp_aging time Purpose Used to configure the age-out timer for ARP table entries on the Switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual 29 D-L INK S INGLE IP M ANAGEMENT C OMMANDS Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using Single IP Management (labeled here as SIM) must conform to the following rules: • • • • • • • • SIM is an optional feature on the Switch and can easily be enabled or disabled.
DES-3000 Series Layer 2 Switch CLI Reference Manual With SIM enabled, the applications in the CS will redirect the packet instead of executing the packets. The applications will decode the packet from the administrator, modify some data, then send it to the MS. After execution, the CS may receive a response packet from the MS, which it will encode and send it back to the administrator.
DES-3000 Series Layer 2 Switch CLI Reference Manual disable sim Purpose Used to disable Single IP Management (SIM) on the Switch. Syntax disable sim Description This command will disable SIM globally on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To disable SIM on the Switch: DES-3026:4#disable sim Command: disable sim Success.
DES-3000 Series Layer 2 Switch CLI Reference Manual show sim Restrictions • Port – Displays the physical port number of the commander switch where the uplink to the neighbor switch is located. • MAC Address – Displays the MAC Address of the neighbor switch. • Role – Displays the role (CS, CaS, MS) of the neighbor switch. Only administrator-level users can issue this command.
DES-3000 Series Layer 2 Switch CLI Reference Manual To show other groups information in summary, if group is specified: DES-3026:4#show sim group Command: show sim group SIM Group Name : default ID MAC Address Platform / Capability -----------------------DES-3018 L2 Switch --- ----------------*1 00-01-02-03-04-00 Hold Firmware Device Name Time Version ---------------------------40 4.00.
DES-3000 Series Layer 2 Switch CLI Reference Manual reconfig Restrictions Only administrator-level users can issue this command. Example usage: To connect to the MS, with member ID 2, through the CS, using the command line interface: DES-3026:4#reconfig member_id 2 Command: reconfig member_id 2 DES-3026:4# config sim_group Purpose Used to add candidates and delete members from the SIM group.
DES-3000 Series Layer 2 Switch CLI Reference Manual config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [[commander {group_name } | candidate] | dp_interval <30-90> | hold_time ]] Description This command is used to configure parameters of switches of the SIM.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config sim candidate Command: config sim candidate Success. DES-3026:4# To transfer the Switch to be a commander: DES-3026:4#config sim commander Command: config sim commander Success. DES-3026:4# To update the name of a group: DES-3026:4#config sim commander group_name Trinity Command: config sim commander group_name Trinity Success. DES-3026:4# download sim_ms Purpose Used to download firmware or configuration file to an indicated device.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#download sim_ms firmware 10.53.13.94 c:/des3000.had members all Command: download sim_ms firmware 10.53.13.94 c:/des3000.had members all This device is updating firmware. Please wait... Download Status : ID MAC Address Result --- -------------------------------1 00-01-02-03-04-00 Success 2 00-07-06-05-04-03 Success 3 00-07-06-05-04-03 Success DES-3026:4# To download configuration files: DES-3026:4#download sim_ms configuration 10.53.13.
DES-3000 Series Layer 2 Switch CLI Reference Manual upload sim_ms Purpose Used to upload a configuration file to a TFTP server from a specified member of a SIM group. Syntax upload sim_ms [configuration_to_tftp | log_to_tftp] {members | all} Description This command will upload a configuration file to a TFTP server from a specified member of a SIM group. Parameters configuration_to_tftp - Specify this parameter to upload a switch configuration file to a TFTP server.
DES-3000 Series Layer 2 Switch CLI Reference Manual 30 C OMMAND H ISTORY L IST The command history list commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters ? {} show command_history dir config command_history Each command is listed, in detail, in the following sections. ? Purpose Used to display all commands in the Command Line Interface (CLI).
DES-3000 Series Layer 2 Switch CLI Reference Manual To display the parameters for a specific command: DES-3026:4#? config igmp_snooping Command: config igmp_snooping Command: config igmp_snooping Usage: [vlan_name | all] {host_timeout | router_timeout | leave_timer | state [enabled | disabled | fast_leave [enabled | disabled]} Description: Used to configure IGMP snooping on the switch.
DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#dir Command: dir .. ? clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol config 802.1x capability ports config 802.1x guest_vlan ports config 802.1x init config 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual A T ECHNICAL S PECIFICATIONS Physical and Environmental AC input 100 –240 VAC, 50/60 Hz (internal universal power supply) Power Consumption: DES-3010FL – 14.8W DES-3010F – 15W DES-3010G – 14.8W DES-3018 – 15.
DES-3000 Series Layer 2 Switch CLI Reference Manual General Standards IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3z 1000BASE-SX Gigabit Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1 d/w Spanning Tree IEEE 802.1 P/Q VLAN IEEE 802.3x Full-duplex Flow Control IEEE 802.
DES-3000 Series Layer 2 Switch CLI Reference Manual Performance Transmission Method Store-and-forward RAM Buffer 32M Bytes per device Filtering Address Table: 8K MAC address per device Packet Filtering / Forwarding Rate: 14,880 pps per 10Mbps 148,809 pps per 100Mbps 1,488,100 pps per 1000Mbps MAC Address Learning Automatic update.
