DGS-3224TGR Layer 2 Gigabit Ethernet Switch Command Line Interface Reference Manual (September 2004) 6S24TGRCLI03 Printed In China RECYCLABLE
Trademarks Copyright 2004 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors. Copyright Statement No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc.
Table of Contents Introduction ....................................................................................................................................................................................1 Using the Console CLI...................................................................................................................................................................4 Command Syntax ..................................................................................................
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 1 I NTRODUCTION The switch can be managed through the switch’s serial port, Telnet, or the Web-based management agent. The Command Line Interface (CLI) can be used to configure and manage the switch via the serial port or Telnet interfaces. This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the switch via the Web-based management agent is discussed in the User’s Guide.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Figure 1-2. Boot screen The switch’s MAC address can be found from the console program under the Switch Information menu item, as shown below. The IP address for the switch must be set before it can be managed with the web-based manager. The switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the switch must be known.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Figure 1-3. Assigning the Switch an IP Address In the above example, the switch was assigned an IP address of 10.24.22.8 with a subnet mask of 255.0.0.0. The system message “Success” indicates that the command was executed successfully. The switch can now be configured and managed via Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 2 U SING THE C ONSOLE CLI The DGS-3224TGR supports a console management interface that allows the user to connect to the switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol. The console program can be used to configure the switch to use an SNMP-based network management software over the network.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Figure 2-1. Initial Console screen Commands are entered at the command prompt, DGS-3224TGR:4#. There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands. Figure 2-2. The ? Command The dir command has the same function as the ? command. When you enter a command without its required parameters, the CLI will prompt you with a Next possible completions: message.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Figure 2-3. Example Command Parameter Help In this case, the command config account was entered with the parameter . The CLI will then prompt you to enter the with the message, Next possible completions:. Every command in the CLI has this feature, and complex commands have several layers of parameter prompting. To re-enter the previous command at the command prompt, press the up arrow cursor key.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Figure 2-5. The Available Commands Prompt The top-level commands consist of commands like show or config. Most of these commands require one or more parameters to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter. For example, if you enter the show command with no additional parameters, the CLI will then display all of the possible next parameters. Figure 2-6.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 3 C OMMAND S YNTAX The following symbols are used in this manual to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. Purpose Encloses a variable or value that must be specified.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual {braces} Purpose Encloses an optional value or set of optional arguments.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 4 B ASIC S WITCH C OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections. create account Purpose Used to create user accounts Syntax Description create account [admin|user] The create account command is used to create user accounts that consist of a username of 1 to 15 characters and a password of 0 to 15 characters. Up to eight user accounts can be created.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config account dlink Command: config account dlink Enter a old password:**** Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success. DGS-3224TGR:4# show account Purpose Used to display user accounts Syntax show account Description Displays all user accounts created on the switch. Up to eight user accounts can exist on the switch at one time. Parameters None. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#delete account System Command: delete account System Success. DGS-3224TGR:4# show session Purpose Used to display a list of currently logged-in users. Syntax show session Description This command displays a list of all the users that are logged-in at the time the command is issued. Parameters None Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#sh sw Command: show switch Device Type : DGS-3224TGR Gigabit-Ethernet Switch MAC Address : 00-01-02-03-04-00 IP Address : 10.90.90.90 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version: Build 0.01.004 Firmware Version : Build 0.03.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config serial_port Purpose Used to configure the serial port. Syntax config serial_port {baud_rate[9600|19200|38400|115200]|auto_logout [never|2_minutes|5_minutes|10_minutes| 15_minutes]} Description This command is used to configure the serial port’s baud rate and auto logout settings. Parameters [9600|19200|38400|115200] − The serial bit rate that will be used to communicate with the management host.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual disable jumbo_frame Purpose Used to disable support for Jumbo Frames. Syntax disable jumbo_frame Description This command is used to disable support for Jumbo Frames of up to 9216 bytes. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To disable jumbo frame support on the switch: DGS-3224TGR:4#disable jumbo_frame Command: disable jumbo_frame Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable clipaging Purpose Used to pause the scrolling of the console screen when the show command displays more than one page. Syntax enable clipaging Description This command is used when issuing the show command will cause the console screen to rapidly scroll through several pages. This command will cause the console to pause at the end of each page. The default setting is enabled. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable telnet Purpose Used to enable communication with and management of the switch using the Telnet protocol. Syntax enable telnet Description This command is used to enable the Telnet protocol on the switch. The user can specify the TCP or UDP port number the switch will use to listen for Telnet requests. Parameters − the TCP port number. TCP ports are numbered between 1 and 65535.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable web Purpose Used to enable the HTTP-based management software on the switch. Syntax enable web Description This command is used to enable the Web-based management software on the switch. The user can specify the TCP port number the switch will use to listen for Telnet requests. Parameters − The TCP port number. TCP ports are numbered between 1 and 65,535.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual save Purpose Used to save changes in the switch’s configuration to non-volatile RAM. Syntax save Description This command is used to enter the current switch configuration into non-volatile RAM. The saved switch configuration will be loaded into the switch’s memory each time the switch is restarted. Parameters None. Restrictions Only administrator-level users can issue this command.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual reset Purpose Used to reset the switch to the factory default settings. Syntax reset {config|system} Description This command is used to restore the switch’s configuration to the default settings assigned from the factory. Parameters config − If config is specified, all of the factory default settings are restored on the switch except for the IP address and user accounts.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual logout Purpose Used to log out a user from the switch’s console. Syntax logout Description This command terminates the current user’s session on the switch’s console. Parameters None. Restrictions None. Example Usage: To terminate the current user’s console session: DGS-3224TGR:4#logout config realtime date Purpose Used to configure the date and time on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show realtime Command: show realtime The current time : 2003/09/23 11:00:59 DGS-3224TGR:4# show config Purpose Used to collect and show all system configurations in a single CLI command. Syntax show config [dram|flash] Description This command displays all system configurations. The continuous display configuration can be aborted by an interrupt key, which may be a sequential keying process or a single key.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 5 S WITCH P ORT C OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config ports Purpose Used to configure the Switch’s Ethernet port settings. Syntax [ [speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master |slave]} ] | flow_control [enable | disable] | learning [enable | disable] state [enable | disable] description | clear] Description This command allows for the configuration of the Switch’s Ethernet ports.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show ports Purpose Used to display the current configuration of a range of ports. Syntax show ports {description} Description This command is used to display the current configuration of a range of ports. Parameters − Specifies a range of ports to be displayed. The port list is specified by listing the beginning port number and the highest port number of the range.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 6 N ETWORK M ANAGEMENT C OMMANDS The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Command Parameters create snmp view [all | ] config snmp engineID create snmp group [v1 | v2c | v3 [noauth_nopriv | auth_nopriv| auth_priv]] {read_view | write_view | notify_view } delete snmp group create snmp host [v1 | v2c |v3 [noauth_nopriv | auth_nopriv | auth_priv]] delete snmp host
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create snmp community Purpose Used to create an SNMP community string. Syntax create snmp community view [read_only|read_write] Description This command is used to create an SNMP community string and to specify the string as enabling read only or read-write privileges for the SNMP management host.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#delete snmp community System Command: delete snmp community System Success. DGS-3224TGR:4# delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host command above. Syntax delete trusted _host Description This command is used to delete a trusted host entry made using the create trusted_host command above. Parameters − The IP address of the trusted host.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config snmp system_location Purpose Used to enter a description of the location of the switch. Syntax config snmp system_location Description This command is used to enter a description of the location of the switch. A maximum of 128 characters can be used. Parameters − A description of the location of the switch. A maximum of 128 characters can be used.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable rmon Purpose Used to enable RMON on the switch. Syntax enable rmon Description This command is used, in conjunction with the disable rmon command below, to enable and disable remote monitoring (RMON) on the switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To enable RMON: DGS-3224TGR:4#enable rmon Command: enable rmon Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show trusted_host Purpose Used to display a list of trusted hosts entered on the switch using the create trusted_host command above. Syntax show trusted_host Description This command is used to display a list of trusted hosts entered on the switch using the create trusted_host command above. Parameters None. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual disable snmp traps Purpose Used to disable SNMP trap support on the switch. Syntax enable snmp traps Description This command is used to disable SNMP trap support on the switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To prevent SNMP traps from being sent from the switch: DGS-3224TGR:4#disable snmp traps Command: disable snmp traps Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To turn off SNMP authentication trap support: DGS-3224TGR:4#disable snmp authenticate traps Command: disable snmp authenticate traps Success. DGS-3224TGR:4# ping Purpose Used to test the connectivity between network devices. Syntax ping {times } {timeout } Description This command sends Internet Control Message Protocol (ICMP) echo messages to a remote IP address.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 7 D OWNLOAD /U PLOAD C OMMANDS The download/upload commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download firmware configuration {increment} upload configuration log Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual download Purpose Used to download and install new firmware or a switch configuration file from a TFTP server. Syntax download [ firmware |configuration {increment}] Description This command is used to download a new firmware or a switch configuration file from a TFTP server. Parameters firmware − Download and install new firmware on the switch from a TFTP server.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual upload Purpose Used to upload the current switch settings or the switch history log to a TFTP server. Syntax upload [configuration|log] Description This command is used to upload either the switch’s current settings or the switch’s history log to a TFTP server. Parameters configuration − Specifies that the switch’s current settings will be uploaded to the TFTP server.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 8 N ETWORK M ONITORING C OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show packet ports Purpose Used to display statistics about the packets sent and received by the switch. Syntax show packet ports Description This command is used to display statistics about packets sent and received by ports specified in the port list. Parameters − specifies a range of ports to be configured. The port list is specified by listing the beginning port number and the highest port number of the range.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show error ports Purpose Used to display the error statistics for a range of ports. Syntax show error ports Description This command will display all of the packet error statistics collected and logged by the swtich for a given port list. Parameters − Specifies a range of ports to be configured. The port list is specified by listing the beginning port number and the highest port number of the range.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show utilization ports Command: show utilization ports Port TX|sec RX|sec Util ---- ---------- ---------- ---1 0 0 0 2 0 0 0 3 0 0 0 4 0 0 0 5 0 0 0 6 0 0 0 7 0 0 0 8 0 0 0 9 0 0 0 10 0 0 0 11 0 0 0 12 0 0 0 13 0 0 0 14 0 0 0 15 0 0 0 16 0 0 0 17 0 0 0 18 0 0 0 19 0 0 0 20 0 0 0 21 0 0 0 Port TX|sec RX|sec Util ------------- ---------- ---22 0 0 0 23 0 0 0 24 0 0 0 To display the CPU utilization: DGS-3224TGR:4# show utilization cpu C
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#clear counters ports 7-9 Command: clear counters ports 7-9 Success. DGS-3224TGR:4# clear log Purpose Used to clear the switch’s history log. Syntax clear log Description This command will clear the switch’s history log. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To clear the log information: DGS-3224TGR:4#clear log Command: clear log Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show log Command: show log Index ----8 7 6 5 4 3 2 1 Time Log Text ---------------------------- ------------------------------------------------------------------------------------2003/09/18 09:03:45 Successful login through Console (Username: Anonymous) 2003/09/18 09:03:30 Logout through Console (Username: Anonymous) 2003/09/18 09:03:28 Successful login through Console (Username: Anonymous) 2003/09/18 09:03:26 System started up 2003/
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 9 S PANNING T REE C OMMANDS The spanning tree commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config stp Purpose Used to configure Bridge management parameters for STP on the switch. Syntax config stp {maxage |hellotime |forwarddelay |priority |version [rstp|stp] |txholdcount |fbpdu [enabled|disabled]} Description This command is used to setup the Spanning Tree Protocol (STP) for the entire switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports {cost [auto|]|priority |migrate [yes|no] | edge [true|false]|p2p [true|false|auto]|state [enable|disable] Description This command is used to create and configure STP for a group of ports. Parameters − Specifies a range of ports to be configured.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable stp Purpose Used to globally enable STP on the switch. Syntax enable stp Description This command allows the Spanning Tree Protocol to be globally enabled on the switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To enable STP on the switch: DGS-3224TGR:4#enable stp Command: enable stp Success. DGS-3224TGR:4# disable stp Purpose Used to globally disable STP on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: Status 1: STP enabled DGS-3224TGR:4#show stp Command: show stp STP Status Max Age Hello Time Forward Delay Priority Default Path Cost STP Version TX Hold Count Forwarding BPDU Designated Root Bridge Root Priority Cost to Root Root Port Last Topology Change Topology Changes Count Protocol Specification Max Age Hello Time Forward Delay Hold Time : Enabled : 20 :2 : 15 : 32768 : 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show stp ports Purpose Used to display the switch’s current per-port group STP configuration. Syntax show stp ports Description This command displays the switch’s current per-port group STP configuration. Parameters − Specifies a range of ports to be configured. The port list is specified by listing the beginning port number and the highest port number of the range.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 10 L AYER 2 F ORWARDING D ATABASE C OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create fdb Purpose Used to create a static entry to the unicast MAC address forwarding table (database) Syntax create fdb [port ] Description This command will make an entry into the switch’s unicast MAC address forwarding database. Parameters − The name of the VLAN on which the MAC address resides. − The MAC address that will be added to the forwarding table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config multicast_fdb Purpose Used to configure the switch’s multicast MAC address forwarding database. Syntax config multicast_fdb [add|delete] Description This command configures the multicast MAC address forwarding table. Parameters − The name of the VLAN on which the MAC address resides. − The MAC address that will be added to the forwarding table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual clear fdb Purpose Used to clear the switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan |port |all] Description This command is used to clear dynamically learned entries to the switch’s forwarding database. Parameters − The name of the VLAN on which the MAC address resides. − The port number corresponding to the MAC destination address.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show fdb Purpose Used to display the current unicast MAC address forwarding database. Syntax show fdb {port |vlan |mac_address |static|aging_time} Description This command will display the current contents of the switch’s forwarding database. Parameters − The port number corresponding to the MAC destination address. The switch will always forward traffic to the specified device through this port.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 11 B ROADCAST S TORM C ONTROL C OMMANDS The broadcast storm control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config traffic control all broadcast [enable|disable] multicast [enable|disable] dlf [enable|disable] show traffic control port_list Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config traffic control 2-3 broadcast enable Command: config traffic control 2-3 broadcast enable Success. DGS-3224TGR:4# show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control Description This command displays the current storm traffic control configuration on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 12 ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config arp_aging time show arpentry {ipif(1) | ipaddress(2) | static(3)} clear arptable Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif |ipaddress |static} Description This command is used to display the current contents of the switch’s ARP table. Parameters − The name of the IP interface the end node or station for which the ARP table entry was made, resides on. − The network address corresponding to the IP interface name above.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 13 QOS C OMMANDS The MAC address priority commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config scheduling weight config scheduling_mechanism [strict|weight_fair] show scheduling show scheduling_mechanism config 802.1p user_priority show 802.1p user_priority config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config scheduling Purpose Used to configure the traffic scheduling mechanism for each COS queue. Syntax config scheduling weight Description The switch contains eight hardware priority queues. Incoming packets must be mapped to one of these eight queues. This command is used to specify the rotation by which these eight hardware priority queues are emptied.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show scheduling Command: show scheduling QOS Output Scheduling Class ID ------------Class-0 Class-1 Class-2 Class-3 Class-4 Class-5 Class-6 Class-7 MAX. Weight -----------------1 2 3 4 5 6 7 8 DGS-3224TGR:4# config scheduling_mechanism Purpose Used to configure the traffic scheduling mechanism for each COS queue.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To show the scheduling mechanism: DGS-3224TGR:4# show scheduling_mechanism Command: show scheduling_mechanism Scheduling Mechanism : weight_fair DGS-3224TGR:4# config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the eight hardware queues available on the switch. Syntax config 802.1p user_priority Description The config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# config 802.1p user_priority 1 3 Command: config 802.1p user_priority 1 3 Success. DGS-3224TGR:4# show 802.1p user_priority Purpose Used to display the current 802.1p user priority to hardware priority queue mapping in use by the switch. Syntax show 802.1p user_priority Description This command will display the current 802.1p user priority to hardware priority queue mapping in use by the switch. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the switch. If an untagged packet is received by the switch, the priority configured with this command will be written to the packet’s priority field. Syntax config 802.1p default_priority [|all] Description This command allows you to specify default priority handling of untagged packets received by the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To show 802.1p default priority: DGS-3224TGR:4# show 802.1p default_priority Command: show 802.1p default_priority Port ------1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 Priority ----------0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 DGS-3224TGR:4# enable hol_prevention Purpose Used to enable HOL prevention.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# enable hol_prevention Command: enable hol_prevention Success. DGS-3224TGR:4# disable hol_prevention Purpose Used to disable HOL prevention. Syntax disable hol_prevention Description The disable hol_prevention command disables Head of Line prevention. Parameters None. Restrictions You must have administrator privileges.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 14 P ORT M IRRORING C OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port [add|delete] source ports [rx|tx|both] enable mirror disable mirror show mirror Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config mirror port 10 add source ports 1-5 both Command: config mirror port 10 add source ports 1-5 both Success. DGS-3224TGR:4# config mirror delete Purpose Used to delete a port mirroring configuration| Syntax config mirror delete source [rx|tx|both] Description This command is used to delete a previously entered port mirroring configuration.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#enable mirror Command: enable mirror Success. DGS-3224TGR:4# disable mirror Purpose Used to disable a previously entered port mirroring configuration. Syntax disable mirror Description This command, combined with the enable mirror command above, allows you to enter a port mirroring configuration into the switch, and then turn the port mirroring on and off without having to modify the port mirroring configuration.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 15 P ORT S ECURITY C OMMANDS The port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config port_security Restrictions Only administrator-level users can issue this command. Example Usage: To config port security: DGS-3224TGR:4#config port_security ports 1-6 admin_state enable max_learning_addr 10 lock_address_mode Permanent Command: config port_security ports 1-6 admin_state enable max_learning_addr 10 lock_address_mode Permanent Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To clear port security entry by port(s): DGS-3224TGR:4#clear port_security_entry port 1-6 Command: clear port_security_entry port 1-6 Success. DGS-3224TGR:4# show port_security Purpose Used to display the port security related information of the switch ports.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 16 VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create vlan Purpose Used to create a VLAN on the switch. Syntax create vlan {tag |advertisement} Description This command allows you to create a VLAN on the switch. Parameters − The name of the VLAN to be created. − The VLAN ID of the VLAN to be created. advertisement − Specifies the VLAN participates normally in GARP/GVRP protocol exchanges.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config vlan add ports Purpose Used to add additional ports to a previously configured VLAN. Syntax config vlan add [tagged|untagged|forbidden] Description This command allows you to add ports to the port list of a previously configured VLAN. You can specifiy the additional ports as tagging, untagging, or forbidden. Parameters − The name of the VLAN you want to add ports to.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config vlan v1 delete 4-8 Command: config vlan v1 delete 4-8 Success. DGS-3224TGR:4# config vlan advertisement Purpose Used to enable or disable the VLAN advertisement. Syntax config vlan advertisement [enable|disable] Description This command is used to enable or disable sending GVRP messages on the specified VLAN.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config gvrp Only administrator-level users can issue this command. Restrictions Example Usage: To sets the ingress checking status and the GVRP status: DGS-3224TGR:4#config gvrp 1-5 state enable ingress_checking enable pvid 2 Command: config gvrp 1-5 state enable ingress_checking enable pvid 2 Success. DGS-3224TGR:4# enable gvrp Purpose Used to enable GVRP on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#disable gvrp Command: disable gvrp Success. DGS-3224TGR:4# show vlan Purpose Used to display the current VLAN configuration on the switch Syntax show vlan {} Description This command displays summary information about each VLAN including the VLAN ID, VLAN name, the Tagging/Untagging status, and the Member/Non-member/Forbidden status of each port that is a member of the VLAN.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual To display 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#enable asymmetric_vlan Command: enable asymmetric_vlan Success. DGS-3224TGR:4# disable asymmetric_vlan Purpose Used to disable asymmetric VLANs on the switch. Syntax disable asymmetric_vlan Description This command disables asymmetric VLANs. Parameters None. Restrictions Only administrator-level users can issue this command.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 17 L INK A GGREGATION C OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create link_aggregation group_id Purpose Used to create a link aggregation group on the switch. Syntax create link_aggregation group_id (type [lacp|static]} Description This command will create a link aggregation group. Parameters − Specifies the group id. The switch allows up to 32 link aggregation groups to be configured. The group number identifies each of the groups.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config link_aggregation Purpose Used to configure a previously created link aggregation group. Syntax config link_aggregation group_id {master_port |ports | state [enable|disable] Description This command allows you to configure a link aggregation group that was created with the create link_aggregation command above. Parameters − Specifies the group id.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source|mac_destination|mac_source_dest| ip_source|ip_destination|ip_source_dest] Description This command configures to part of the packet examined by the switch when selecting the egress port for transmitting load-sharing data. This feature is only available using the address-based load-sharing algorithm.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source Group ID : 1 Type : TRUNK Master Port : 10 Member Port : 5-10 Active Port : Status : Disabled Flooding Port : 0 DGS-3224TGR:4# config lacp_ports Purpose Used to configure the current mode of LACP for specified ports. Syntax config lacp_ports mode [active|passive] Description This command configures per-port LACP mode.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual To show the LACP status for ports 1 to 3: DGS-3224TGR:4#show lacp_ports Command: show lacp_ports 1-3 Port -------1 2 3 Activity -----------Active Active Active DGS-3224TGR:4# 87
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 18 IP I NTERFACE C OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif System vlan ipaddress state [enable|disable] bootp dhcp show ipif Each command is listed, in detail, in the following sections. config ipif System Purpose Used to configure the System IP interface.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config ipif System ipaddress 10.48.74.122/8 Command: config ipif System ipaddress 10.48.74.122/8 Success. DGS-3224TGR:4# show ipif Purpose Used to display the configuration of an IP interface on the switch. Syntax show ipif {} Description This command will display the configuration of an IP interface on the switch. Parameters − The name of the IP interface you want to show. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 19 IGMP S NOOPING C OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config igmp_snooping Purpose Used to configure IGMP snooping on the switch. Syntax config igmp_snooping [|all] {host_timeout |router_timeout |leave_timer |state [enable|disable]} fast_leave [enable|disable] Description This command allows you to configure IGMP snooping on the switch. Parameters − The name of the VLAN for which IGMP snooping is to be configured.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config igmp_snooping querier Purpose Used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members, the permitted packet loss that guarantees IGMP snooping.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config igmp_snooping querier default query_interval 125 state enable Command: config igmp_snooping querier default query_interval 125 state enable Success. DGS-3224TGR:4# config router_ports Purpose Used to configure ports as router ports. Syntax config router_ports [add|delete] Description This command allows you to designate a range of ports as being connected to multicastenabled routers.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable igmp_snooping Purpose Used to enable IGMP snooping on the switch. Syntax enable igmp_snooping {forward_mcrouter_only} Description This command allows you to enable IGMP snooping on the switch. If forward_mcrouter_only is specified, the switch will forward all multicast traffic to the multicast router, only. Otherwise, the switch forwards all mulitcast traffic to any IP router.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show igmp_snooping Purpose Used to show the current status of IGMP snooping on the switch. Syntax show igmp_snooping {vlan } Description This command will display the current IGMP snooping configuration on the switch. Parameters − The name of the VLAN for which you want to view the IGMP snooping configuration. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the switch. Syntax show igmp_snooping group {vlan } Description This command will display the current IGMP snooping group configuration on the swtich. Parameters − The name of the VLAN for which you want to view IGMP snooping group configuration information. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To display the router ports: DGS-3224TGR:4#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-10 Dynamic router port : Total Entries : 1 DGS-3224TGR:4# 97
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 20 R OUTING TABLE C OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute default delete iproute default show iproute static rip ospf Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#create iproute 10.48.74.121/255.0.0.0 10.1.1.254 1 Command: create iproute 10.48.74.121/8 10.1.1.254 1 Success. DGS-3224TGR:4# delete iproute Purpose Used to delete an IP route entry from the switch’s IP routing table. Syntax delete iproute [default|] Description This command will delete an existing entry from the switch’s IP routing table. Parameters default − Deletes a default IP route entry.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show iproute Command: show iproute IP Address /Netmask -----------------------------10.0.0.0/9 Total Entries Gateway ----------------0.0.0.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 21 802.1X C OMMANDS The DGS-3224TGR implements the server-side of the IEEE 802.1x Port-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the switch that a user or network device must meet before allowing that port to forward or receive frames. Command enable 802.1x disable 802.1x config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Command Parameters show auth_session_statistics show radius auth_client show radius acct_client config 802.1x auth_mode {ports } [port_based |mac_based] enable 802.1x Purpose Used to enable the 802.1x server on the switch. Syntax enable 802.1x Description The enable 802.1x command enables the 802.1x Port-based Network Access control server application on the switch. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config 802.1x auth_protocol Purpose Used to configure the 802.1x authentication protocol on the switch. Syntax config 802.1x auth_protocol [local|radius_eap] Description The config 802.1x auth_protocol command enables you to configure the authentication protocol. Parameters local|radius_EAP – Specify the type of authentication protocol desired. Restrictions Only administrator-level users can issue this command.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config 802.1x auth_parameter Purpose Used to configure the 802.1x Authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1x settings. Syntax config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config 802.1x init Purpose Used to initialize the 802.1x functions on a range of ports. Syntax config 802.1x init [port_based [|all] |mac_based[|all] {mac_address }] Description The config 802.1x init command is used to immediately initialize the 802.1x functions on a range of ports. Parameters port_based – Configure the authentication as port-based mode. mac_based – Configure the authentication as MAC-based mode.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example Usage: To configure 802.1x reauthentication for ports 15-18: DGS-3224TGR:4#config 802.1x reauth port_based 15-18 Command: config 802.1x reauth port_based 15-18 Success. DGS-3224TGR:4# config radius add Purpose Used to configure the settings the switch will use to communicate with a RADIUS server.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config radius delete Purpose Used to delete a previously entered RADIUS server configuration. Syntax config radius delete Description The config radius delete command is used to delete a previously entered RADIUS server configuration. Parameters − Assigns a number to the current set of RADIUS server settings. Up to three groups of RADIUS server settings can be entered on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config radius add 1 10.48.74.121 key dlink default Command: config radius add 1 10.48.74.121 key dlink default Success. DGS-3224TGR:4# show radius Purpose Used to display the current RADIUS configurations on the switch. Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the switch. Parameters None. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show 802.1x user Command: show 802.1x user Index UserName ------- -------------------1 ctsnow DGS-3224TGR:4# create 802.1x user Purpose Used to create a new 802.1x user. Syntax create 802.1x user Description The create 802.1x user command is used to create new 802.1x users. Parameters − A username can be as many as 15 alphanumeric characters.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show auth_statistics Purpose Used to display the switch’s authentication statistics. Syntax show auth_statistics {ports } Description The show auth_statistics command is used to display authentication statistics. Parameters ports − Specifies a range of ports. The port list is specified by listing the beginning port number and the highest port number of the range.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show auth_diagnostics Command: show auth_diagnostics Port number : 1 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated BackendResponses BackendAccessChallenges BackendOtherRequ
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show auth_session_statistics Command: show auth_session_statistics Port number : 1 SessionOctetsRx SessionOctetsTx SessionFramesRx SessionFramesTx SessionId SessionAuthenticMethod SessionTime SessionTerminateCause SessionUserName 0 0 0 0 Remote Authentication Server 0 SupplicantLogoff CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh show radius auth_client Purpose Used to display the switch’s RADIUS authentication clie
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show radius auth_client Command: show radius auth_client radiusAuthClient ==> radiusAuthClientInvalidServerAddresses radiusAuthClientIdentifier 0 D-Link radiusAuthServerEntry ==> radiusAuthServerIndex :1 radiusAuthServerAddress 0.0.0.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4# show radius acct_client Command: show radius acct_client radiusAcctClient ==> radiusAcctClientInvalidServerAddresses 0 radiusAcctClientIdentifier D-Link radiusAuthServerEntry ==> radiusAccServerIndex : 1 radiusAccServerAddress radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators radi
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 22 A CCESS C ONTROL L IST (ACL) C OMMANDS The DGS-3224TGR implements Access Control Lists that enable the switch to deny network access to specific devices or device groups based on IP settings or MAC address. Command Parameters create access_profile ethernet vlan source_mac destination_mac 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Command Parameters add access_id ethernet vlan source_mac destination_mac 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Command Parameters user_define packet_content_mask {offset_0-15 offset_16-31 offset_32-47 offset_48-63
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create access_profile Purpose Used to create an access profile on the switch and to define which parts of each incoming frame’s header the switch will examine. Masks can be entered that will be combined with the values the switch finds in the specified frame header fields. Specific values for the rules are entered using the config access_profile command, below.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create access_profile tcp − Specifies that the switch will examine each frames Transport Control Protocol (TCP) field. src_port_mask − Specifies a TCP port mask for the source port. dst_port_mask − Specifies a TCP port mask for the destination port. udp − Specifies that the switch will examine each frame’s Universal Datagram Protocol (UDP) field. flag_mask − Specifies the TCP flag fields.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#delete access_profile profile_id 1 Command: delete access_profile profile_id 1 Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config access_profile Purpose Used to configure an access profile on the switch and to define specific values that will be used to by the switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operation, with the values the switch finds in the specified frame header fields.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config access_profile Parameters profile_id − An integer between 1 and 8 that is used to identify the access profile that will be configured with this command. add access_id − Adds an additional rule to the above specified access profile. The value specifies the relative priority of the additional rule. A lower access ID, the higher the priority the rule will be given.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config access_profile Parameters igmp − Specifies that the switch will examine the Internet Group Management Protocol (IGMP) field within each packet. type − Specifies that the access profile will apply to packets that have this IGMP type value. tcp − Specifies that the switch will exmamine the Transmission Control Protocol (TCP) field within each packet.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#config access_profile profile_id 1 add access_id 1 ethernet vlan default 802.1p 5 permit Command: config access_profile profile_id 1 add access_id 1 ethernet vlan default 802.1p 5 permit Success. DGS-3224TGR:4# show access_profile Purpose Used to display the currently configured access profiles on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 23 SSH C OMMANDS The Secure Shell (SSH) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES|Blowfish|MD5|SHA1|DSA|RSA] [enable|disable] Description This command allows you to configure the desired type of SSH algorithm. Parameters [3DES|Blowfish|MD5|SHA1|DSA|RSA] – Choose the desired security algorithm. [enable|disable] – This allows you to enable or disable the SSH algorithm.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config ssh authmode Purpose Used to configure the SSH authentication mode setting. Syntax config ssh authmode [password |publickey|hostbased] [enable|disable] Description This command will allow you to configure the SSH authentication mode. Parameters [password |publickey|hostbased] – Choose the desired SSH authentication mode. [enable|disable] – This allows you to enable or disable SSH authentication.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config ssh user Purpose Used to configure the SSH user. Syntax config ssh user authmode [Publickey |Password|Hostbased [host_name |hostname_IP ]] Description This command allows you to modify the parameters of the SSH user. Parameters – Enter an optional SSH user name.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config ssh server Purpose Used to configure the SSH server. Syntax config ssh server {maxsession | contimeout | authfail |rekey [10min |30min | 60min |never]} Description This command allows you to configure the SSH server. Parameters maxsession – Allows the user to set the number of times an outside guest may attempt to log on to the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show ssh server Command: show ssh server The SSH server configuration: max Session : 8 Connection timeout : 300 Authfail attempts : 2 Rekey Timeout : never SSH server status : Disable Listened Port Number : 22 DGS-3224TGR:4# enable ssh Purpose Used to enable SSH. Syntax enable ssh Description This command allows you to enable SSH on the switch. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 24 SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable ssl Purpose To enable the SSL function on the switch. Syntax enable ssl [ ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} | version {ssl_v3 | tls_v1}] Description This command will enable SSL on the switch by implementing any one or combination of listed ciphersuites on the switch. This command will also enable the SSL v3 or TLS v1 status on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#enable ssl version ssl_v3 Command: enable ssl version ssl_v3 Note: WEB will be disabled if SSL is enabled. Success. DGS-3224TGR:4# NOTE: Enabling the SSL function on the switch will disable the port for the web manager (port 80). To log on to the web based manager, the entry of your url must begin with https://. (ex. https://10.90.90.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual disable ssl Purpose To disable the SSL function on the switch. Syntax disable ssl [ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} | version {ssl_v3 | tls_v1} ] Description This command will disable SSL on the switch and can be used to disable any one or combination of listed ciphersuites on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#disable ssl version ssl_v3 Command: disable ssl version ssl_v3 SSL V3 successfully disabled. Success. DGS-3224TGR:4# To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only: DGS-3224TGR:4#disable ssl ciphersuite RSA_EXPORT with_RC4_40_MD5 Command: disable ssl ciphersuite RSA_EXPORT with_RC4_40_MD5 Success. DGS-3224TGR:4# show ssl Purpose Used to view the SSL status and the ciphersuites status on the switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show certificate Purpose Used to view the SSL certificate file status on the switch. Syntax show certificate Description This command is used to view the certificate file status on the switch. Parameters None. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#download certificate 172.18.211.69 certfilename cert.der keyfilename pkey.der Command: download certificate 172.18.211.69 certfilename cert.der keyfilename pkey.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 25 A CCESS A UTHENTICATION C ONTROL C OMMANDS The Access Authentication Control commands let you secure access to the Switch using the TACACS/XTACACS/TACACS+ protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password. If TACACS/XTACACS/TACACS+ authentication is enabled on the Switch, it will contact a TACACS/XTACACS/TACACS+ server to verify the user.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Command Parameters enable authentication _policy disable authentication _policy show authentication _policy create authentication login method_list_name config authentication login [default | method_list_name ] method { { {}}} delete authentication login method_list_name show authentication login {default | method_list_name } create authentication server_group
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections. enable authentication_policy Purpose Used to enable system access authentication policy. Syntax enable authentication_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To disable the system access authentication policy: DGS-3224TGR:4#disable authentication_policy Command: disable authentication_policy Success. DGS-3224TGR:4# show authentication_policy Purpose Used to display the system access authentication policy status on the Switch. Syntax show authentication_policy Description This command will show the current status of the access authentication policy on the Switch Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To create the method list “Trinity.”: DGS-3224TGR:4#create authentication login method_list_name Trinity Command: create authentication login method_list_name Trinity Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config authentication login Purpose Used to configure a user-defined or default method list of authentication methods for user login. Syntax config authentication login [default | method_list_name ] method { { {}}} Description This command will configure a user-defined or default method list of authentication methods for users logging on to the Switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config authentication login method_list_name – Enter a previously implemented method list name defined by the user. The user may add one, or a combination of up to four of the following authentication methods to this method list: tacacs – Adding this parameter will require the user to be authenticated using the TACACS protocol from a remote TACACS server.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual delete authentication login method_list_name Purpose Used to delete a previously configured user defined method list of authentication methods for users logging on to the Switch. Syntax delete authentication login method_list_name Description This command is used to delete a list for authentication methods for user login.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show authentication login Purpose Used to display a previously configured user-defined method list of authentication methods for users logging on to the Switch. Syntax show authentication login [default | method_list_name ] Description This command is used to show a list of authentication methods for user login. The table includes the following items: Method List Name – The name of a previously configured method list name.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create authentication server_host Purpose Used to create an authentication server host. Syntax create authentication server_host protocol [tacacs|xtacacs|tacacs+] Description This command will create an authentication server host for the TACACS/XTACACS/TACACS+ security protocols on the Switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config authentication server_host Purpose Used to configure a user-defined authentication server host. Syntax config authentication server_host protocol [tacacs|xtacacs|tacacs+] {port |key | timeout | retransmit } Description This command will configure a user-defined authentication server host for the TACACS/XTACACS/TACACS+ security protocols on the Switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To configure a TACACS authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit count of 4. DGS-3224TGR:4#config authentication server_host 10.1.1.121 protocol tacacs port 4321 timeout 12 retransmit 4 Command: config authentication server_host 10.1.1.121 protocol tacacs port 4321 timeout 12 retransmit 4 Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show authentication server_host Purpose Used to view a user-defined authentication server host. Syntax show authentication server_host Description This command is used to view user-defined authentication server hosts previously created on the Switch. The following parameters are displayed: IP address – The IP address of the authentication server host. Protocol – he protocol used by the server host.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual create authentication server_group Purpose Used to create a user-defined authentication server group. Syntax create authentication server_group Description This command will create an authentication server group. A server group is a technique used to group TACACS, XTACACS, and TACACS+ server hosts into user defined categories for authentication using method lists.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config authentication server_group Purpose Used to create a user-defined authentication server group. Syntax config authen server_ ] [add | delete] server_host protocol [tacacs | xtacacs | tacacs+] Description This command will configure an authentication server group. A server group is a technique used to group TACACS/XTACACS/TACACS+ server hosts into user defined categories for authentication using method lists.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To add an authentication host to server group “group_1”: DGS-3224TGR:4#config authentication server_group group_1 add server_host 10.1.1.121 protocol tacacs+ Command: config authentication server_group group_1 add server_host 10.1.1.121 protocol tacacs+ Success. DGS-3224TGR:4# delete authentication server_group Purpose Used to delete a user-defined authentication server group.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show authentication server_group Purpose Used to view authentication server groups on the Switch. Syntax show authentication server_group Description This command will display authentication server groups currently configured on the Switch. This command will display the following fields: Group Name: The name of the server group currently configured on the Switch, including built in groups and user defined groups.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config login_authentication response_timeout Purpose Used to configure the amount of time the Switch will wait for a user to enter authentication before timing out. Syntax config login_authentication response_timeout Description This command will set the time the Switch will wait for a response of authentication from the user.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To set the maximum number of authentication attempts at 5: DGS-3224TGR:4# config login_authentication attempt 5 Command: config login_authentication attempt 5 Success. DGS-3224TGR:4# show login_authentication Purpose Used to display current login authentication information.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config login_authentication method_list_name – Enter an alphanumeric string of up to 15 characters to define the login_authentication method list the user wishes to configure. Restrictions None. DGS-3224TGR:4#config login_authentication console default Command: config login_authentication console default Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 26 T RAFFIC S EGMENTATION C OMMANDS The traffic segmentation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config traffic_segmentation forward_list [null | ] show traffic_segmentation {} Each command is listed, in detail, in the following sections.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show traffic_segmentation Purpose Used to display the current traffic segmentation table. Syntax show traffic_segmentation {} Description This command displays the current traffic segmentation table. Parameters – Specifes a range of ports to be displayed. If no parameter is specified, the system will display all current traffic segmentation tables. Restrictions None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 27 D-L INK S INGLE IP M ANAGEMENT C OMMANDS Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using Single IP Management (labeled here as SIM) must conform to the following rules: SIM is an optional feature on the Switch and can easily be enabled or disabled. SIM grouping has no effect on the normal operation of the Switch in the user’s network.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual It is connected to the CS through the CS management VLAN The following rules also apply to the above roles: 1. Each device begins in a Commander state. 2. CS’s must change their role to CaS and then to MS, to become a MS of a SIM group. Thus the CS cannot directly be converted to a MS. 3. The user can manually configure a CS to become a CaS. 4. A MS can become a CaS by: a. Being configured as a CaS through the CS. b.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual enable sim Purpose Used to enable Single IP Management (SIM) on the Switch Syntax enable sim Description This command will enable SIM globally on the Switch. SIM features and functions will not function properly unless this function is enabled. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To enable SIM on the Switch: DGS-3224TGR:4#enable sim Command: enable sim Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual show sim Purpose Used to view the current information regarding the SIM group on the Switch. Syntax show sim {[candidates {} | members {} | group {commander_mac } neighbor]} Description This command will display the current information regarding the SIM group on the Switch, including the following: SIM Version - Displays the current Single IP Management version on the Switch.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To show the SIM information in detail: DGS-3224TGR:4#show sim Command: show sim SIM Version Firmware Version Device Name MAC Address Capabilities Platform SIM State Role State Discovery Interval Hold Time : VER-1 : Build 3.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Port -----23 23 24 MAC Address -----------------00-35-26-00-11-99 00-35-26-00-11-91 00-35-26-00-11-90 Role --------Commander Member Candidate Total Entries: 3 DGS-3224TGR:4# To show other groups information in summary, if group is specified: DGS-3224TGR:4#show sim group Command: show sim group SIM Group Name : default ID MAC Address --- ----------------*1 00-01-02-03-04-00 Platform / Capability -----------------------DGS-3324SR L3 Switch Hold Fi
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual reconfig Syntax reconfig {member_id - Select the ID number of the member switch the user desires to configure. exit – This command is used to exit from managing the member switch and will return to managing the commander switch. Restrictions Only administrator-level users can issue this command.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To add a member: DGS-3224TGR:4#config sim_group add 2 Command: config sim_group add 2 Please wait for ACK... SIM Config Success !!! Success. DGS-3224TGR:4# To delete a member: DGS-3224TGR:4#config sim delete 1 Command: config sim delete 1 Please wait for ACK... Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [{[commander {group_name | candidate] | dp_interval <30-90> | hold_time }] Description This command is used to configure parameters of switches of the SIM.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual To change the hold time of the discovery protocol: DGS-3224TGR:4# config sim commander hold_time 120 Command: config sim commander hold_time 120 Success. DGS-3224TGR:4# To transfer the commander switch to be a candidate: DGS-3224TGR:4#config sim candidate Command: config sim candidate Success. DGS-3224TGR:4# To transfer the Switch to be a commander: DGS-3224TGR:4#config sim commander Command: config sim commander Success.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual download sim_ms Purpose Used to download firmware or configuration file to an indicated device. Syntax download sim_ms [ firmware | configuration] {members | all} Description This command will download a firmware file or configuration file to a specified device from a TFTP server. Parameters firmware – Specify this parameter if the user wishes to download firmware to members of a SIM group.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual Example usage: To download firmware: DGS-3224TGR:4# download sim firmware 10.53.13.94 c:/dgssri.had members all Command: download sim firmware 10.53.13.94 c:/dgssri.had members all This device is updating firmware. Please wait...
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual upload sim_ms configuration Purpose User to upload a configuration file to a TFTP server from a specified member of a SIM group. Syntax upload sim_ms configuration Description This command will upload a configuration file to a TFTP server from a specified member of a SIM group. Parameters Enter the IP address of the TFTP server the user wishes to upload a configuration file to.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 28 C OMMAND H ISTORY L IST The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters ? show command_history dir config command_history Each command is listed, in detail, in the following sections. ? Purpose Used to display all commands in the Command Line Interface (CLI).
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#? Command: ? .. ? clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol config 802.1x capability ports config 802.1x init config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#show command_history Command: show command_history ? ? show show vlan config router_ports vlan2 add 1:1-1:10 config router_ports vlan2 add config router_ports vlan2 config router_ports show vlan create vlan vlan2 tag 3 create vlan vlan2 tag 2 show router_ports show router ports login DGS-3224TGR:4# dir Purpose Used to display all commands. Syntax dir Description This command will display all commands. Parameters None.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual DGS-3224TGR:4#dir Command: dir .. ? clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol config 802.1x capability ports config 802.1x init config 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual A T ECHNICAL S PECIFICATIONS Performance Transmission Method Store-and-forward RAM Buffer 2 MB per device Packet Filtering/ Forwarding Rate Full-wire speed for all connections. 1,488,095 pps per port (for 1000Mbps) MAC Address Learning Automatic update. Supports 16K MAC address. Priority Queues 8 Priority Queues per port. Forwarding Table Age Time Max age: 10–1000000 seconds. Default = 300.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual General Standards Protocols Data Transfer Rates Ethernet: Fast Ethernet: Gigabit Ethernet: Topology Network Cables IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3z Gigabit Ethernet IEEE 802.1Q Tagged VLAN IEEE 802.1P Tagged Packets IEEE 802.3ab 1000BASE-T IEEE 802.3x Full-duplex Flow Control ANSI/IEEE 802.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual 179
