ECS2020 10/28-Port Gigabit Web Smart PoE & Non-PoE Switch Software Release v1.0.2.11 CLI Reference Guide www.edge-core.
CLI Reference Guide ECS2020-10T Web-smart Gigabit Ethernet Switch with 8 10/100/1000BASE-T (RJ-45) and 2 Gigabit SFP Ports ECS2020-10P Web-smart Gigabit Ethernet Switch with 8 10/100/1000BASE-T (RJ-45) 802.3af/at PoE Ports and 2 Gigabit SFP Ports ECS2020-28T Web-smart Gigabit Ethernet Switch with 24 10/100/1000BASE-T (RJ-45) and 4 Gigabit SFP Ports ECS2020-28P Web-smart Gigabit Ethernet Switch with 24 10/100/1000BASE-T (RJ-45) 802.
About This Guide This guide includes detailed information on the switch software, including how to operate and use the management functions of the switch. To deploy this switch effectively and ensure trouble-free operation, you should first read the relevant sections in this guide so that you are familiar with all of its software features. Who Should Read This This guide is for network administrators who are responsible for operating and Guide? maintaining network equipment.
Contents 1 MTU .................................................................................................................................. 14 2 Link-Aggregate Port Commands ................................................................................... 15 2.1 Configure relevant commands .................................................................................................... 15 link-aggregation load-balance ...........................................................................
10 DDOS PROTECTION ....................................................................................................... 31 10.1 Configuration ddos protection ..................................................................................................... 31 Turn on DDOS protection ................................................................................................. 31 Turn off DDOS protection ...............................................................................................
Trunk native VLAN ........................................................................................................... 55 Hybrid VLAN .................................................................................................................... 56 Hybrid native VLAN .......................................................................................................... 57 16.3 Display-relevant commands ..........................................................................................
21.1 Configure commands.................................................................................................................. 78 Loopback-detection.......................................................................................................... 78 21.2 Display relevant commands........................................................................................................ 79 show loop-detection ..................................................................................
26 IGMP Snooping ............................................................................................................. 100 26.1 command related to configuration ............................................................................................ 100 ip igmp snooping ............................................................................................................ 100 ip igmp snooping version ..........................................................................................
27.2 Commands related to display and monitoring .......................................................................... 128 clear ipv6 mld snooping statistics ................................................................................... 128 clear ipv6 mld snooping groups ...................................................................................... 129 show ipv6 mld snooping .................................................................................................
radius host ..................................................................................................................... 153 TACACS host ............................................................................................................................... 154 aaa authentication enable .............................................................................................. 154 aaa authentication login ....................................................................................
show poe interface ......................................................................................................... 177 show poe interfaces ....................................................................................................... 178 show poe powersupply .................................................................................................. 178 show poe timer...............................................................................................................
38 System Setting Commands .......................................................................................... 206 38.1 Basic System Settings.............................................................................................................. 206 Management VLAN ........................................................................................................ 206 ip dhcp ...................................................................................................................
Configure Static Route ................................................................................................... 238 40 MVR ............................................................................................................................... 239 configure mvr ................................................................................................................. 239 configure source port ...........................................................................................
1 MTU In global configuration mode, use this command to set the MTU of the interface. Mtu <1522-10240> Parameter Parameter Description Can be set in the range 1522-10240 Default The default configuration is 1522. Mode Global configuration mode Usage Null Example Set the mtu value ECS2020-10P(config)# mtu 10240 Command Command Description show interfaces gigabitEthernet id mtu Example View the interface mtu status information.
2 Link-Aggregate Port Commands 2.1 Configure relevant commands link-aggregation load-balance Configures a traffic balancing algorithm for link-aggregation ports (AGG). Use the no option of this command to set the traffic balance back to the default. link-aggregation load-balance {mac|ip-mac} no link-aggregation load-balance Parameter Description The traffic is allocated according to the source MAC address of incoming packets.
Mode Global configuration mode Usage You can configure manual mode and lacp mode. The no command removes all interfaces from the aggregation group. Example The following example creates a link aggregation group 1 ECS2020-10P(config)#link-aggregation 1 mode manual Interface link-aggreation Sets a physical port as a member port of a link-aggregation group. Use the no option of the command to remove the link-aggregation port member from the group.
Mode Privilege mode Usage If you do not specify the aggregate port interface number, all the information of the aggregate port will be displayed.
3 Port mirroring commands 3.1 Configure-relevant commands monitor session Create a SPAN session and specify the destination port (monitor port) and source port (monitored port). Use the no option of the command to delete the session or remove the source port or destination port separately.
3.
4 Port isolation commands 4.1 Configure-relevant commands isolate-port Configures port isolation in interface mode. Use the no command to delete the configuration. By default, port isolation is disabled.
Default Null Mode Privilege mode Usage Null Example ECS2020-10P#show isolate-port Command Command Description show interfaces port-id protected 21 View the current port isolation information
5 Port speed limit 5.1 Configure-relevant commands rate-limit In port mode, enables/disables the port input/output rate. rate-limit {input | output} no rate-limit {input | output} Parameter parameter Description Enable the port speed limit function, limiting the input and output speed. Disable the port speed limit function, limiting the input and output speed.
Mode Privilege mode Usage Displays the upstream rate limit configuration information for all the ports Example ECS2020-10P# show rate-limit interfaces GigabitEthernet 0/1 Interface |Ingress |Egress |kbps |kbps --------------------+--------------------+-------------------gi0/1 |IGR-UNLIMIT |10000 Command Command Description View the current port rate configuration information.
6 Storm control 6.1 Configure-relevant commands storm-control Enable or disable storm control in interface mode: Use the storm-control command to enable storm control, Use the no command to turn off storm control.
6.
7 Port Security 7.1 Configure-relevant commands Port-security After you enable port-security, configure the MAC address limit for the port. The no form of the command disables port-security. port-security [address-limit ] { Number of limitation} action {[discard|forward|shutdown] } no port-security Parameter Parameter Description number of limitation Limit the number of MACs in the range of 1-256. discard|forward|shutdown Action to be taken when the limit is reached.
Mode Privilege mode Usage Null Example Display the port security configuration information for gig1: ECS2020-10P# show port-security interfaces GigabitEthernet 0/1 Port | Security | CurrentAddr | Action ----------+------------------+-----------------+-----------------gi0/1 | Enabled ( 200) | 13 | Discard Command Description Show port-security 27 View the port security global status
8 NTP/SNTP COMMANDS 8.1 NTP Configure-relevant commands server Configure the NTP/SNTP server IP address. {[ntp|sntp]} server{server-ip} Parameter parameter Server-ip Default default server ip 216.229.0.179 Mode Description Server IP address Global configuration mode Usage Use this command to configure the NTP/SNTP server IP address Example ECS2020-10P(config)# ntp server 192.168.100.150 ECS2020-10P(config)# sntp server 192.168.100.
Default Mode Usage Example Null privilege mode Display NTP/SNTP function status, server address, and port number. Display NTP configuration information: ECS2020-10P# show ntp NTP is Enabled NTP Server address: 192.168.100.150 NTP Server port: 123 Display SNTP configuration information: ECS2020-10P# show sntp SNTP is Enabled SNTP Server address: 192.168.100.
9 EEE Enable the EEE function and the switch will automatically turn off part of the idle circuit, effectively reducing power consumption and saving energy.
10 DDOS PROTECTION 10.1 Configuration ddos protection Turn on DDOS protection Enable the DDOS protection function to defend against DDOS attacks.
Turn off DDOS protection no dos {attack-name} Command Command no dos {attack-name} Default Null Mode Global configuration mode description Turn off a specific DDOS protection Usage Turn off the defense against a specified DDOS attack Example Turn off land-deny attack protection: ECS2020-10P(config)# no dos land-deny 10.2 show DDOS protection View the configuration information for DOS protection.
Example View the configuration information for DOS protection: ECS2020-10P# show dos Type | State (Length) ------------------------------------------+--------------------------------DMAC equal to SMAC | disabled Land (DIP = SIP) | enabled UDP Blat (DPORT = SPORT) | disabled TCP Blat (DPORT = SPORT) | disabled POD (Ping of Death) | disabled IPv6 Min Fragment Size | disabled (1240 Bytes) ICMP Fragment Packets | disabled IPv4 Ping Max Packet Size | disabled (512 Bytes) IPv6 Ping Max Packet Size | disabled (51
11 CPU Guard 11.1 Configuration CPU Guard Configuring each type of packet bandwidth can suppress high-speed attack packets in the network.
11.2 show CPU Guard View the configuration information for CPU Guard. show cpu-protect show cpu-protect cpu show cpu-protect sub-interface {[manage | protocol | route]} Parameter Default Mode Usage Example Parameter Description show cpu-protect View the configuration information for CPU Guard.
12 Dual Configuration 12.1 Backup the configuration file copy {[running-config | startup-config]} backup-config Parameter Parameter Description running-config Backup the current configuration file to backup-config startup-config] Backup the startup-config file to backup-config Default Null Mode Privilege mode Usage Example 12.
Usage Example Restore the configuration file Restore the running-config file: ECS2020-10P# copy backup-config running-config Restore the startup-config file: ECS2020-10P# copy backup-config startup-config 37
13 RMON 13.1 rmon event rmon event<1-65535>[log][trap COMMUNITY][description DESCRIPTION][owner NAME] Parameter Default Parameter Description <1-65535> Specify event index to create or modify log Specify to show syslog trap COMMUNITY Specify SNMP community to show SNMP trap description DESCRIPTION Specify description of event owner NAME Specify owner of event Null Mode Global configuration mode Usage Use the rmon event command to add or modify a RMON event entry.
13.
Rmon Alarm Rising Threshold : 1000 Rmon Alarm Rising Event 1 Rmon Alarm Falling Threshold 100 Rmon Alarm Falling Event 1 Rmon Alarm Owner : admin Example 13.
Example 13.4 Rmon Collection Interface: gi0/1 Rmon History Bucket : 50 Rmon history Interval : 30 Rmon History Owner : admin clear rmon interface statistics clear rmon interface {port-id} statistics Parameter Description Parameter port-id Specify the interface to clear Default Null Mode privilege mode Usage Use the clear rmon interface statistics command to clear RMON etherStat Statistics recorded on an interface. You can verify results by the show rmon interface statistics command.
13.5 show rmon interface statistics Show rmon interface {port-id} statistics Parameter Default Parameter Description port-id Specify the port to show Null Privilege mode Mode Usage Use the show rmon interface statistics command to show RMON etherStat Statistics of an interface. You can verify results by the show rmon interface statistics command. The example shows how to show RMON etherStat Statistics on interface gig0/1.
Privilege mode Mode Usage Example 13.7 Use the show rmon event command to show existing an RMON event entry. The example shows how to show RMON event entry.
13.8 show rmon history show rmon history [<1-65535>|all] Parameter Default Parameter Description <1-65535> Specify history index to show all Show all existing history Null Mode Privilege mode Usage Use the show rmon history command to show existed RMON history entry. The example shows how to show an RMON history entry.
14 ARP Inspection 14.1 arp inspection arp-inspection no arp-inspection Parameter Parameter Description - Default ARP inspection is disabled Mode Global Configuration Usage Example 14.2 - Use the arp-inspection command to enable Dynamic Arp Inspection function. Use the no form of this command to disable ARP inspection. The example shows how to enable Dynamic Arp Inspection on VLAN 1. You can verify settings by the show arp-inspection command.
Usage Example 14.3 Use the arp-inspection rate-limit command to set rate limitation on interface.The switch drops ARP packets after it receives more than the configured rate of packets per second. Use the no form of this command to return to default settings. The example shows how to set a rate limit to 30 pps on interface gig0/1. You can verify settings by the following show arp-inspection interface command.
14.4 arp inspection validate arp-inspection validate {[src-mac|dst-mac|ip[allow-zeros]]} no arp-inspection validate {[src-mac|dst-mac|ip[allow-zeros]]} Parameter Description src-mac The ”src-mac” drops ARP requests and reply packets when the arp-sender-mac and ethernet-source-mac do not match. The ”dst-mac” drops ARP reply packets when the arptarget-mac and ethernet-dest-mac do not match.
Privilege mode Mode Usage Example 14.6 Use the clear arp-inspection interfaces {port-id} statistics command to clear statistics that are recorded on an interface. The example shows how to clear statistics on interiface gig0/1t. You can verify settings by the show arp-inspection interface statistics command.
Parameter Parameter Port-id Default Null Mode Privilege mode U sage Description Specifies ports to show statistics Use the show arp-inspection inferfaces command to show settings or statistics of an interface. The example shows how to show settings of interface gig0/1.
15 Flow Control Commands 15.1 Flow Control Configuration Commands flowcontrol Turn on port flow control flowcontrol {[on|off]} parameter Default Parameter Description on Turn on flow control off Turn off flow control Turn off flow control. Mode Interface configuration mode Usage Use this command to enable or disable port flow control.
16 VLAN COMMANDS 16.1 Configure commands VLAN description Configure the name of the VLAN. Use this command's no option to revert the settings to a default values.
vlan Use the command vlan vlan-id to enter configuration mode .Use the no option of the command to remove the existing VLAN. vlan vlan-id no vlan vlan-id Parameter Parameter Description VLAN ID number (1-4094). Notice：The default VLAN（VLAN 1）cannot be deleted. vlan-id Default VLAN 1 Mode Global configuration mode Usage If the input vlan vlan-id does not exist, the system creates the VLAN and enters the vlan. When the VLAN exists, the system enters the VLAN.
Default The switch port default mode is access Mode Interface configuration mode If a switch port mode is access, this port can only be a member of a VLAN. Use command: switch access vlan to specify which VLAN is the member of the interface. If a switch port mode is trunk or hybrid, this port can be a member of multiple VLANs. The port VLAN that the interface can belong to is determined by the VLAN list of the interface.
16.2 Configure different types of VLAN Access VLAN In port mode, configure the access attributes of the port. switch access vlan vlan-id Parameter Parameter Description Port to join VLAN's ID. vlan-id Default Port default mode is access, default VLAN is VLAN 1 Command Interface configuration mode Usage Enter a VLAN ID. If the input is a VLAN ID that is not created, the device will indicate that the VLAN does not exist.
Parameter Description Configure the VLAN permission list for this trunk port. The parameter vlan-list can be either a VLAN or a series of VLANs, beginning with a small VLAN ID and ending with a large VLAN ID, with the (-) symbol connection in the middle. Parameter Such as 10-20. Segments can be separated by allowed vlan vlan-list symbols, such as: 1-10,20- 25,30,33.
Parameter Parameter Description Trunk port packet received: if the packet has a VLAN tag, then put this packet in the corresponding VLAN; if the packet has no VLAN tag, then the packet is forwarded to the port of the native VLAN. native vlan Default Default VLAN is VLAN 1 Mode Interface configuration mode Usage To configure the trunk native VLAN of a port, the port must be configured as a trunk.
Usage Example NULL ECS2020-10P(config)# interface GigabitEthernet 0/1 ECS2020-10P(config-if-GigabitEthernet0/1)# switch hybrid vlan 3 untagged Command Command Description Displays the VLAN configuration. show vlan Hybrid native VLAN Specify a native VLAN as a hybrid port. Use the no option of this command to restore the hybrid property of the interface to the default value.
16.3 Display-relevant commands show vlan Display VLAN member ports and other information. show vlan [id vlan-id] Parameter Parameter vlan-id Description The number of VLAN ID Default Show all information by default Mode Privileged mode Usage To return to privileged mode, enter the end command, or type the Ctrl+Z combination key.
17 Voice VLAN 17.1 Configure commands voice VLAN Create a VLAN first and then specify the VLAN when creating a Voice VLAN for voice traffic using the VLAN ID. Use the “no” command to close voice VLAN .Voice VLAN is disable by default.
Default The voice-vlan default mode is autoTag Mode Interface configuration mode Usage If the port voice VLAN mode is set to autoTag, the port is set to add tags of the Voice VLAN. If the mode is autountag, the port will not add tags to any traffic.
voice VLAN aging-time and cos In global configuration mode, sets the voice VLAN aging-time (1-65535)and cos (0-7).
Default Show voice-vlan global information by default Show the ports in voice vlan by default Mode Privileged mode Usage To return to privileged mode, enter the end command, or type the Ctrl+Z combination keys. To return to global configuration mode, enter the exit command ECS2020-10P# show voice-vlan device Interface | MAC Address | start-time -------------+-------------------+-------------------------gi0/1 | 00E0.BB00.
18 Surveillance VLAN 18.1 Configure commands surveillance VLAN First create a VLAN, and when creating a surveillance VLAN specify the VLAN created to enable a surveillance VLAN ID. Use the “no” command to remove a surveillance VLAN. Surveillance VLANs are disabled by default.
Default The surveillance-vlan default mode is auto. Mode Interface configuration mode Usage Example If the port set surveillance VLAN mode is auto, the port is automatically a member of the surveillance VLAN, Note when adding the surveillance VLAN mode to manually join a port, you need to forward the port to the surveillance VLAN in advance.
Command Command Description Displays the configuration of the surveillance-vlan oui-table. Show surveillance-vlan surveillance VLAN aging-time and cos In global configuration mode, sets the surveillance VLAN aging-time (1-65535) and cos (0-7).
Parameter Parameter Description Vlan-id The number of surveillance VLAN ID surveillance-vlan device The ports in surveillance VLAN Default N/A Mode Privileged mode Usage To return to privileged mode, enter the end command, or type the Ctrl+Z combination keys. To return to global configuration mode, enter the exit command.
19 ONVIF 19.1 Configure commands ONVIF enable In global configuration mode, enables ONVIF and activates IPC and NVR discovery.
Mode Global configuration mode Usage Use this command to configure the surveillance VLAN ID Example ECS2020-28P(config)# surveillance-vlan-v2 vlan 2 Command Command Description Display ONVIF VLAN information show surveillance-vlan ONVIF vlan priority surveillance-vlan-v2 cos Parameter Parameter cos Description <0-7> Specify the Surveillance VLAN v2 Class Of Service Default Mode Global configuration mode Usage Use this command to configure the surveillance VLAN priority Example ECS2020-28P(
ONVIF discover port surveillance-vlan-v2 onvif_discover_port Parameter Parameter port Description range <80,443,554,1025-65535>, default value is 554 Default 554 Mode Global configuration mode Usage Use this command to configure the NVR and IPC discovery port.
Example ECS2020-28P(config)# surveillance-vlan-v2 trap enable Command Command Description Display ONVIF trap state show surveillance-vlan 70
20 DHCP-snooping 20.1 Configure commands DHCP-Snooping When enabling DHCP-Snooping, if a port is a non trusted port, then the port discards the service message DHCP_OFFER, DHCP_ACK, DHCP_NCK). If a port is a trusted port, then the port can forward the DHCP service messages.
DHCP-Snooping trust Open the DHCP-Snooping trust function, if a port is an untrusted port, then the port DHCP service messages received will be discarded if a port is trusted then it can normal forward DHCP service messages. dhcp-snooping trust no dhcp-snooping trust Parameter Parameter Description dhcp-snooping trust Configure the port as dhcp-cnooping trust no dhcp-snooping trust Configure the port as dhcp-cnooping untrusted.
Usage Example Enables DHCP snooping on a VLAN. ECS2020-10P(config)# dhcp-snooping vlan 1-4094 Command Command Description show dhcp-snooping Displays the DHCP snooping configuration. enable dhcp snooping option 82 Enable Parameter DHCP snooping information 82 Parameter Description dhcp-snooping option Enable the dhcp snooping option 82. Default Disabled Mode interface configuration mode Usage Enables DHCP snooping option 82.
option 82 of remote-ID Configure DHCP snooping option 82 of a remote-ID. Parameter Parameter STRING Description ID string (1~63 Default DUT’s mac address Mode global configuration mode Usage A“remote ID” contains the switch’s information of a trusted identifier for a remote high-speed modem. Example ECS2020-10P(config)# dhcp-snooping option remote-id 192.168.100.145 Command Command Description Displays the DHCP snooping configuration.
Example ECS2020-10P(config-if-GigabitEthernet0/1)# option circuit-id 192.168.100.145 dhcp-snooping Command Command Description show dhcp-snooping interfaces GigabitEthernet 0/x Displays the DHCP snooping interface configuration. DHCP snooping policy Configures the global DHCP snooping policy.
Command 20.2 Command Description show dhcp-snooping interfaces GigabitEthernet 0/x Displays the DHCP snooping interface configuration Display relevant commands show DHCP-Snooping Displays the current DHCP-Snooping open, shutdown, and configuration information.
Command Command Description show dhcp-snooping Displays the DHCP-Snooping configuration. show dhcp-snooping interfacegigabitEthernet 0/x Displays DHCP-Snooping interface (including aggregate ports 1-8) configuration.
21 Loopback-detection 21.1 Configure commands Loopback-detection Configures loop detection, activates the function, and when a loop appears on the network, the loop port is disabled (link-down) or a warning is issued. Loopback-detection Parameter [enable|ctp-interval|resume-interval|snmp-trap] Parameter Description enable Enables the loop detection function, default is disabled.
21.2 Display relevant commands show loop-detection Use the following command to view the loop detection configuration. show loopback-detection Parameter Parameter Description show loopback-detection View the current port loop detection status and configuration. Default NULL Mode Privileged mode Usage In privileged mode, view configuration and status. Check the loop-detection port configuration and status.
22 Spanning-tree When configuring Spanning Tree, use the web manager for general settings and the CLI commands for both general and detailed settings. 22.1 Configure Commands spanning-tree enable Enable spanning-tree function, to avoid network loops, enabling spanning tree function on the switch will block a port on a looped path according to the port role.
spanning-tree mode Configure spanning-tree mode to one of three versions:stp、rstp、mstp spanning-tree mode [rstp|stp|mstp] Parameter Parameter stp Description Running the stp protocol rstp Running the rstp protocol mstp Running the mstp protocol Default rstp Mode Global configuration mode Usage Set the spanning tree protocol version of the switch running in global mode. Example Set the protocol version of the switch running to RSTP.
Usage Configuring forwarding delay in global mode. Example Configure the spanning-tree forwarding delay: ECS2020-10P(config)# spanning-tree forward-time 17 Command Command Description View the current spanning tree status and configuration. show spanning-tree spanning-tree hello-time Configures the spanning tree to send BPDU messages to neighboring devices at intervals, that is, the transmission frequency of BPDUs.
spanning-tree max-age Configure the port BPDU aging time. The timer aging reset is updated upon receipt of a BPDU, when participating in a spanning tree. When a port (root port and port blocking) timer reaches maxage due to no BPDU message being received, the switch will recalculate the topology.
Default 20 Mode Global configuration mode Usage Sets the maximum hops count of the switch BPDU in global mode. Example Set the BPDU maximum hops count to 30 times: ECS2020-10P(config)# spanning-tree max-hops 30 Command Command Description View the current spanning tree status and configuration. show spanning-tree spanning-tree pathcost method By default, the port automatically calculates path consumption based on port rate and specifies the criteria used when calculating path consumption.
spanning-tree priority The bridge priority setting for spanning-tree, selects one of the highest priority switches as the root bridge. spanning-tree priority [0-61440] Parameter Parameter Description priority [0-61440] Configure the bridge priority of the switch, range 0-61440, must be a multiple of 4096, default 32768 Default 32768 Mode Global configuration mode Usage Sets switch bridge priority in global mode.
Parameter Description spanning-tree mst configure Enter the MSTP configuration mode Note that "cr" means no arguments Configures the mapping relationship between the MSTP instance and the VLAN Configuration Bridge name (Max.
Parameter Parameter Description Enables the port spanning tree function, the default is all ports opened to using the spanning tree function.
Command Command Description show spanning-tree interface gigabitEthernet 0/1 Display the spanning tree status and configuration of GigabitEthernet 0/1. spanning-tree cost Configure the port external path cost, and the switch sends BPDUs to a downstream switch, which adds to the cast value of the transmission port’s cast field of a BPDU.
Default None Mode Port configuration mode Usage Enters the port configuration mode and sets the port protection function. Example Set the loop guard on GigabitEthernet0/1: ECS2020-10P(config-if-GigabitEthernet0/1)# spanning-tree guard loop Command Command Description show spanning-tree interface gigabitEthernet Display the spanning tree status and configuration of GigabitEthernet0/1. 0/1 spanning-tree link-type Sets the link type of the port.
spanning-tree portfast edgeport When a port is directly connected with a PC, and the port is not possible to be part of a loop, the ports do not need to participate in the spanning tree operations. Configured as an edge port the port will linkup directly to the forwarding state and will not experience learn, listen STP states. spanning-tree portfast [edgeport|network] Parameter Parameter Description edgeport Sets the specified port as an edge port. network Sets the specified port as a network port.
Mode Port configuration mode Usage In the port configuration mode it sets the bridge priority of the port. Example Set the priority of GigabitEthernet0/1 to 112: ECS2020-10P(config-if-GigabitEthernet0/1)# spanning-tree port-priority 112 Command Command show spanning-tree interface gigabitEthernet 0/1 Description Display the spanning tree status and configuration of GigabitEthernet0/1. spanning-tree bpdu [filtering|flooding] BPDU packets are filtered or flooded when STP is disabled on ports.
Parameter Parameter Description new-root new root trap toplogy-change toplogy change trap Default NULL Mode Global configuration mode Usage In global mode, it configures the spanning-tree trap information. Example Enable the spanning-tree trap of a new-root: ECS2020-10P(config)# spanning-tree trap new-root Command 22.2 Command Description Display the spanning tree trap newroot status and configuration.
Command Command Description show spanning-tree View the current spanning tree global state and configuration. Ruijie#show spanning-tree interface gigabitEthernet 0/x View the spanning tree status and configuration of Gi0/1.
23 DHCP v4 server 23.1 Configure commands DHCP v4 server Configures the DHCP server parameters, enable the DHCP sever to allow downstream devices to receives IP address allocations from the switch. ip dhcpserver pool ip dhcpserver mask ip dhcpserver gate-way ip address ip dhcpserver leasetime ip dhcpserver major ip dhcpserver minor ip dhcp server dhcp-snooping Parameter Description ip dhcpserver pool Configures the v4 server pool. ip dhcpserver mask Configures the v4 server mask.
ECS2020-10P(config)# ip dhcpserver pool 192.168.6.100-192.168.6.200 pt1:192.168.6.100, pt2:192.168.6.200 ECS2020-10P(config)# ip dhcpserver mask 255.255.255.0 ECS2020-10P(config)# ip dhcpserver gate-way 192.168.6.1 ECS2020-10P(config)# ip address 192.168.6.1 ECS2020-10P(config)# ip dhcp server ECS2020-10P(config)# dhcp-snooping Example Command Command Description Displays the ip dhcp server configuration. show ip dhcp server 23.
24 ipv4 client 24.1 Configure commands ipv4 client Configure the switch as an IPv4 DHCP client. ip dhcp no ip dhcp Parameter Parameter Description ip dhcp Enables the switch as an ip dhcp client. no ip dhcp Disables the switch as an ip dhcp clients. Default disable Mode Global configuration mode Usage In the global configure mode, enable ip dhcp so the switch can be allocated an IP address from a connected DHCP server.
24.2 Display relevant commands show ip DHCP Used to view the IP DHCP status. Show ip dhcp Show ip Parameter Parameter show ip dhcp Display the status of IP DHCP. Show ip Display the switch’s IP address from a DHCP server. Default NULL Mode Privileged mode Usage View the ip dhcp informat Example Description ECS2020-10P# show ip IP Address: 192.168.0.143 Subnet Netmask: 255.255.255.0 Default Gateway: 192.168.0.
25 ipv6 Client 25.1 Configure commands ipv6 client Configure the switch as an IPv6 DHCP client.
Parameter Parameter show ipv6 dhcp Display the status of IPv6 DHCP. Show ipv6 Display the switch’s IPv6 address from a DHCP server.
26 IGMP Snooping When configuring IGMP Snooping, use the web manager for general settings and the CLI commands for both general and detailed settings. 26.1 command related to configuration ip igmp snooping Enables IGMP snooping in global configuration mode. Use the "no" to the command to disable IGMP snooping. ip igmp snooping no ip igmp snooping Parameter Parameter None Description None Default Enabled Mode Global configuration.
Usage Use the ip igmp snooping version command to change the IGMP support version. You can verify settings by using the show ip igmp snooping command. Example The following example specifies that set ip igmp snooping version 2: Switch(config)#ip igmp snooping version 2 Command Command Description Displays the IGMP snooping status. Show ip igmp snooping Ip igmp snooping vlan To enable IGMP snooping of a specific vlan, input ip igmp snooping vlan vlan-list in Global configuration mode.
Command Command Description Display the IGMP snooping settings.
Ip igmp snooping fast-leave Used to enable the igmp snooping fast-leave function. If there is only one member of the group and a device receives a leave report from a member, the group will leave immediately. ip igmp snooping fast-leave Parameter Parameter None Default Default is disable. Mode Global configuration. Description None Usage Use the ip igmp snooping fast-leave enable command to enable fast-leave function.
Mode Global configuration. Usage Use the ip igmp snooping suppression command to enable the suppression function. Use the no form of this command to disable it. You can verify settings by the show ip igmp snooping vlan command. Example The following example specifies that set ip igmp snooping suppression test： ECS2020-10P(config)# ip igmp snooping suppression Command Command Description Show ip igmp snooping vlan Display the IGMP snooping settings.
Command Command Description Show ip igmp snooping vlan Display the IGMP snooping settings. ip igmp snooping vlan mrouter Adds a static router port for a VLAN.
Command Command Description Show ip igmp snooping vlan Display the IGMP snooping settings. ip igmp snooping vlan mrouter learn Use this command to enable learning router port by routing protocol packets such as PIM/PIMv2,DVMRP,MOSPF. Use the no form of this command to disable it.
ip igmp snooping vlan static Use this command to add a static VLAN group. ip igmp snooping vlan VLAN-LIST static group-address interfaces GigabitEthernet|Aggregateport IF_PORTS no ip igmp snooping vlan VLAN-LIST static group-address interfaces GigabitEthernet|Aggregateport IF_PORTS Parameter Parameter Ip-addr Specifies multicast group ipv4 address IF-PORTS Specifies a port list to set or remove Default No static groups by default. Mode Global configuration.
Parameter Parameter VLAN-LIST Description Specifies VLAN ID list to set Default No ip igmp snooping querier by default. Mode Global configuration Usage When enabling an ip igmp vlan querier, there will be a router selected, the selection success will end general and specific queries. Use the ip igmp snooping vlan querier command to add a querier. Use the no form of this command to delete a querier. You can verify settings by the show ip igmp snooping querier command.
The following example specifies to set ip the igmp snooping querier version： ECS2020-10P(config)# ip igmp snooping vlan 2 querier version 3 Example Command Command Description Show ip igmp snooping querier Display the IGMP snooping settings. ip igmp snooping vlan querier last-member-query-count Use this command to set the igmp snooping querier last-member-query-count.
ip igmp snooping vlan querier last-member-query-interval Use this command to set the igmp snooping querier last-member-query-interval. ip igmp snooping vlan VLAN-LIST querier last-member-query-interval <1-25> no ip igmp snooping vlan VLAN-LIST querier last-member-query-interval Parameter Parameter Description VLAN-LIST Specifies VLAN ID list to set. last-member-query-interval <125> Specifies last member query interval to set. Default 1 Mode Global configuration.
ip igmp snooping vlan querier max-response-time Use this command to set the IGMP snooping querier maximum response time. ip igmp snooping vlan VLAN-LIST querier max-response-time <5-20> no ip igmp snooping vlan VLAN-LIST querier max-response-time Parameter Parameter Description VLAN-LIST Specifies VLAN ID list to set. last-member-query-interval <520> Specifies a response time to set.
Default 125 Mode Global configuration Usage Use the ip igmp snooping vlan querier query-interval command to set the interval between each query. Use the no form of this command to restore it to default. You can verify settings by the show ip igmp snooping vlan command.
Example The following example specifies to set the ip igmp snooping querier robustness-variable： ECS2020-10P(config)# ip igmp snooping vlan 1 robustness-variable 5 Command Command Description Show ip igmp snooping Display the IGMP snooping settings. ip igmp profile Adds an igmp profile to permit or deny some groups. ip igmp profile <1-128> no Ip igmp profile <1-128> Parameter Parameter <1-128> Default No profile exists by default. Mode Global configuration.
profile range Configure an igmp profile to permit or deny some groups. Profile rang ip [ip-addr] action (permit|deny) Parameter Parameter Description Start ipv4 multicast address [ip-addr] End ipv4 multicast address (permit|deny) Permit: allow Multicast address range ip address learning. Deny:do not allow Multicast address range ip address learning. Default None Mode igmp profile configuration mode.
Default None. Mode Port configuration Use the ip igmp filter command to bind a profile to a port. When a port is binded to a profile the port learning group will update, if the group does not match the profile rule it will remove the port from the group. Static groups are excluded. Use the no form of this command to delete a profile. You can verify settings by using the show running-config command. Usage Example The following example specifies that set ip igmp filter test.
The following example specifies that show ip igmp snooping statistics test.
The following example specifies to clear and show pi igmp snooping groups. ECS2020-10P#clear p i igmp snooping groups ECS2020-10P#show p i igmp snooping groups VLAN | Group IP Address | Type | Life(Sec) | Port ------+------------------+--------+-----------+-----------------Total Number of Entry = 0 Command Command Description show ip igmp snooping groups Verifies the igmp snooping groups are cleared. show ip igmp snooping Use this command to view the igmp snooping global configuration.
Command Command Description Show ip igmp snooping Display the igmp snooping global configuration. show ip igmp snooping vlan Use this command to view the igmp snooping vlan information. show ip igmp snooping vlan [VLAN-LIST] Parameter Parameter Description None Shows all ip igmp snooping vlan information. [VLAN-LIST] Shows specific vlan ip igmp snooping information. Default None Mode Privileged EXEC. Usage This command will display ip igmp snooping vlan information.
Parameter Description None Shows all ip igmp snooping vlan forward-all information. [VLAN-LIST] Shows specific vlan ip igmp snooping forward-all information. Default Null Mode Privileged EXEC Usage This command will display ip igmp snooping forward-all information. The following example specifies to display the ip igmp snooping forward-all test.
Example The following example specifies to show the ip igmp snooping groups test. ECS2020-10P#show ip igmp snooping groups VLAN | Group IP Address | Type | Life(Sec) | Port ------+------------------+--------+-----------+-----------------1| 239.1.1.1 | Static| -| gi0/3 1 | 239.255.255.250 | Dynamic| 253 | gi0/1 Total Number of Entry = 2 Command Command Description Show ip igmp snooping groups Display the igmp snooping groups configuration.
show ip igmp snooping querier Use this command to display the igmp snooping querier configuration show ip igmp snooping querier Default Null Mode Privileged EXEC Usage This command will display ip igmp snooping querier state per VLAN Example The following example specifies to show the ip igmp snooping querier states: ECS2020-10P#show ip igmp snooping querier VID | State | Status | Version | Querier IP -------+-------------+-------------+------------+-------------------1 | Disabled | Non-Querier
27 MLD Snooping 27.1 MLD Snooping configuration commands ipv6 mld snooping Use this command to enable mld snooping in global configuration mode, and use the "no" form of the command to disable mld snooping. ipv6 mld snooping no ipv6 mld snooping Parameter command Description None None Default Enabled Mode Global configuration Usage Use command ipv6 mld snooping to enable the igmp snooping function for IPv6. Use the no form of this command to disable it.
Usage Example Use the ipv6 mld snooping version command to change the MLD supported version.For example, version 2 packets will not be processed if version 1 is. You can verify the settings by using the show ipv6 mld snooping command. The following example specifies to set ipv6 mld snooping version to version 2. Switch(config)#ipv6 mld snooping version 2 command Description show ipv6 mld snooping Display the settings of ipv6 mld snooping.
ipv6 mld snooping vlan immediate-leave Use this command to enable the mld snooping vlan immediate-leave function. If there is only one member of the group, and the device receives a leave packet from a member, then the group will leave immediately.
Use the ipv6 mld snooping report-suppression command to enable the reportsuppression function. Use the no form of this command to disable it. Disable report -supression will forward all received reports to vlan router ports. You can verify settings by the show ipv6 mld snooping command.
ipv6 mld snooping vlan static-router-port Use this command to add a static router port for a VLAN. ipv6 mld snooping vlan VLAN-LIST static-router-port GigabitEthernet|Aggregateport IF_PORTS No ipv6 mld snooping vlan VLAN-LIST static-router-port GigabitEthernet|Aggregateport IF_PORTS Parameter parameter VLAN-LIST Specifies a VLAN ID list to set. IF-PORTS Specifies a port list to set or remove.
Default Enabled Mode Global configuration Usage Use the ipv6 mld snooping vlan mrouter learn pim-dvmrp command to enable learning router port by routing protocol packets such as PIM/PIMv2,DVMRP or MOSPF. Use the no form of this command to disable it. You can verify the settings by using the show ipv6 mld snooping vlan command.
The following example specifies to set ipv6 mld snooping static group for VLAN1. ECS2020-10P(config)# ipv6 mld snooping vlan 1 static-group ff08::9 interfaces Example Aggregateport 0/6 Command 27.2 command description Show ipv6 mld snooping groups. Verify the static group information. Commands related to display and monitoring clear ipv6 mld snooping statistics Use this command to the clear ipv6 mld statistics.
General Query RX : 0 Specail Group Query RX : 0 Specail Group & Source Query RX : 0 Leave TX : 0 Report TX : 0 General Query TX : 0 Specail Group Query TX : 0 Specail Group & Source Query TX : 0 Example Command Command Description Show ipv6 mld snooping Verifys ipv6 mld statistics information. clear ipv6 mld snooping groups Use this command to clear the mld snooping groups.
show ipv6 mld snooping View mld snooping global info. show ipv6 mld snooping Parameter Parameter Description None None Default None. Mode Privileged EXEC Usage This command will display ipv6 mld snooping global info. The following example specifies to show ipv6 mld snooping.
show ipv6 mld snooping vlan Use this command to view the mld snooping vlan information. show ipv6 mld snooping vlan [VLAN-LIST] Parameter parameter description None Show all mld snooping vlan information. [VLAN-LIST] Show specific VLAN mld snooping information. Default Null Mode Privileged EXEC Usage This command will display ipv6 mld snooping vlan information. The following example specifies to show ipv6 mld snooping vlan.
Default Null Mode Privileged EXEC Usage This command will display ipv6 mld snooping forward-all information. The following example specifies to show ipv6 mld snooping forward-all information: ECS2020-10P#show ipv6 mld snooping forward-all 27.2.5.1.1.1.1 MLD Snooping VLAN 1 27.2.5.1.1.1.2 MLD Snooping static port : None MLD Snooping forbidden port : None 27.2.5.1.1.1.3 MLD Snooping VLAN 2 27.2.5.1.1.1.4 MLD Snooping static port : None MLD Snooping forbidden port : None 27.2.5.1.1.1.
This command will display ipv6 mld snooping groups for dynamic, static or both. Usage The following example specifies to show ipv6 mld snooping groups.
The following example specifies to show ipv6 mld snooping router for all types.
28 Path detection 28.1 ping Use to detect if a specified host is reachable or not. Include either the ipv4 address, ipv6 address or a domain name. ping [HOSTNAME] Parameter parameter [HOSTNAME] description Host name information Default None. Mode Privileged EXEC Usage This command will detect if a host is reachable or not. The following example shows a ping test to an IPv6 address.
28.2 traceroute Use this command to trace the route to a network host and record the routing information to the host. Either the ipv4 address, ipv6 address or the domain name must be included with the command. traceroute [HOSTNAME] Parameter Parameter Description [HOSTNAME] Host name information. Default Null Mode Privileged EXEC Usage This command will record the routing information to a specified host. Example The following example shows a traceroute test: ECS2020-10P#traceroute www.baidu.
29 Access Control List 29.1 Configure commands standard ip access-list Configures a standard ip access-list. Using a series of match rules, network data can be filtered.
Usage Configuration access control list Example Command ip access-list extended 10 Command Description Displays the access control list information. show access-list ACE configuration Use this command in relation to an ip access-list to configure its specific rules. ip access-list {standard|extended} {0-9|10-19} [0-9|deny|end|exit|hlep|no|permit] Parameter Description 0-9 Configure the ace number optional and the default is 0.
standard ip access-list deny|permit Under a standard ip access-list, this command configures the deny or permit rules.
extended ip access-list deny|permit Under an extended ip access-list, this command configures the deny or permit rules.
ip access-list commit Using this command with an ACL applied to an interface the received network data can be filtered.
Example ipv6 access-list standard 26 Command Command Description n Displays access control list information. show access-list extended ipv6 access-list Configures an extended ipv6 access-list to use a series of match rules, in order to filter network ipv6 data.
Default Null Mode ipv6 ACL configuration mode Usage Configuration ACE ipv6 access-list standard 26 permit any Example ipv6 access-list extended 36 permit ip any any Command Command Description Displays the access control list information. show access-list standard ipv6 access-list deny|permit Under an tandard ip access-list, this command configures its deny or permit rules.
extended ipv6 access-list deny|permit Under an extended ip access-list, this command configures deny or permit rules.
Default Null Mode interface configuration mode Usage Apply the ACL Example Command interface GigabitEthernet 0/1 ipv6 access-list 26 commit Null mac access-list extended Use this command to Configures a MAC access-list to use a series of match rules that can network data.
mac ACE configuration Under a MAC access-list, this command configures specific rules. mac access-list extended {20-25} [0-9|deny|end|exit|hlep|no|permit] Parameter Description 0-9 Config ace number, optional, Default value is 0.
Default Null Mode ACL configuration mode Usage Configuration ACE Example ip access-list extended 10 permit ip any any Command Command Description Display access control list information. show access-list mac access-list commit When this command is used a MAC ACL will be applied to an interface to filter network data.
29.2 Display commands show access-list This command shows the access-list information. show access-lists Parameter Parameter Description show access-lists Displays access control list information. Default Null Mode Privileged mode Usage Displays the access control list information.
30 802.1X Note: 802.1X requires an 802.1x RADIUS server to be configured. 30.1 Configure commands authentication dot1x Use this command to enable 802.1x authentication. Use the no form of the command to disable it. authentication dot1x no authentication dot1x Parameter Parameter Description Null Null Default Null Mode Global Configuration Usage Configuration 802.1X Example authentication dot1x Command Command Description Show authentication n Displays the 802.1x information.
Mode interface configuration mode Usage Configuration 802.1X Example Command interface GigabitEthernet 0/3 authentication dot1x Command Description Displays 802.1x port information. show authentication interface GigabitEthernet port_id authentication port-control Use this command to configure 802.1X port-control mode at the interface level.
authentication host-mode Use this command to configure the 802.1X host-mode at the interface level. interface GigabitEthernet {port_id} authentication host-mode {single-host|multi-host|multi-auth} interface GigabitEthernet {port_id} no authentication host-mode Parameter Parameter Description port_id Interface ID single-host Single Host Mode multi-host Multiple Host Mode multi-auth Multiple Authentication Mode Default multi-auth Mode interface configuration mode Usage Configuration 802.
Mode Privileged mode Usage display 802.1X information.
31 AAA 31.1 Configure commands radius host Use this command to configure a RADIUS server in conjunction with the switch. radius host {host_name} [auth-port] {port_id} [key] {key} [priority] {pri_value} [retransmit] {retransmit_times} [timeout] {timeout_vlaue} [type] {auth_type} no radius host {ip_addr} Parameter Parameters Description host_name Radius server IP address or domain name port_id TCP/UDP port number, default is 1812.
TACACS host Use this command to configure a TACACS server in conjunction with the switch. tacacs host {host_name} [port] {port_id} [key] {key} [priority] {pri_value} [timeout] {timeout_vlaue} no tacacs host {ip_addr} Parameter Parameter Description host_nam Tacacs sever IP address or domain name port_id TCP/UDP port number,default is 49.(0-65535) key Tacacs server key pri_value priority vlaue,(1-65534) timeout_vlaue Timeout value in seconds to wait for the server to reply.
Mode Global Configuration mode Usage Configure eable authentication method. Example aaa authentication enable Xn enable tacacs+ radius Command Command Description show aaa authentication enable lists n Displays the enable authentication information. aaa authentication login This command configures the login authentication method.login including console, telnet and SSH.
line console no login authentication no enable authentication Parameter Parameter Description Login_auth_list_name Login auth Method List Name enable_auth_list_name Enable auth Method List Name Default Null Mode Global Configuration mode Usage Configures a login authentication method. Example line console login authentication Xn enable authentication Xn Command Command Description n Displays the login authentication information.
Example Command line telnet login authentication Xn enable authentication Xn Command Description n Displays the Telnet authentication information. show line lists line ssh Use this command to turn on login from ssh using AAA authentication.
31.2 Display commands show radius Use this command to display the RADIUS information. show radius Parameter Parameter Description Null Null Default Null Mode Privileged mode Usage display radius information. Example show radius Prio | IP Address | Auth-Port| Retries| Timeout| Type | Key ------+-----------------+------------+--------+--------+-----------+--------1 | 192.168.100.1 | 1812 | 1 | 1 | All | public Command Null show tacacs Use this command to display the TACACS information.
Example show tacacs Prio | Timeout | IP Address | Port | Key ------+---------+-------------------+--------+---------1 | 30 | 192.168.100.1 | 49 | public Command Null show aaa authentication enable list Use this command to display the aaa authentication information. show aaa authentication enable list Parameter Parameter Description Null Null Default Null Mode Privileged mode Usage display aaa authentication information.
Mode Privileged mode Usage display aaa authentication information..
32 SSH 32.1 Configure commands ip ssh Use this command to enable the ssh function.
33 SSL 33.1 Configure commands ssl Use this command to generate an SSL digital certificate. ssl Parameter Parameter Null Description Null Default Null Mode Privileged mode Usage Generates a new SSL certificate Example ssl Command Null ssl replace Enabled a new SSL digital certificate to function. ssl replace Parameter Default Null Mode Privileged mode Usage Enables a new SSL certificate.
Example ssl replace Command Null 163
34 QoS 34.1 Configure commands qos trust This command configures the QoS classify mode. qos trust {classify_mode} no qos trust Parameter Parameter classify_mode Default Null Mode Global Configuration mode Usage config qos classify mode Example qos queue trust dscp Command Description QoS Classify mode. [cos|dscp] Command Description show qos n Displays the QoS information. qos queue schedule Config qos schedule algorithm.
Parameter Parameter Description schedule_mode QoS schedule mode. [sp|wrr|hybird] Default Null Mode Global Configuration mode Usage Configures the QoS schedule algorithm. Example qos queue schedule wrr Command Command Description Displays the QoS queue information. show qos queueing qos map cos-queue Use this command to configure the QoS queue mapping relationship. qos map cos-queue {cos_value} to {queue_num} Parameter Parameter Description cos_value Cos value.
qos map dscp-queue Use this command to configure the QoS queue mapping relationship. qos map dscp-queue {dscp_value} to {queue_num} parameter Parameter description dscp_value DSCP value. queue_num Queue number(1-8) Default Null Mode Global Configuration mode Usage Configures the QoS queue mapping relationship. Example qos map dscp-queue 1 to 8 Command Command Description show qos map dscp-queue Displays the qos map information.
Command Command Description Displays the qos queue information. show qos map queueing qos queue strict-priority-num Use this command to configure the SP schedule queue’s number when hybrid mode is enabled. qos queue strict-priority-num {SP_num} Parameter Parameter weight_values Description weight_values.(1-127) Default Null Mode Global Configuration mode Usage Configures the qos queue weight. Example qos queue weight 1 1 1 50 50 50 100 100 Command 34.
Mode Privileged mode Usage Use this command to display the QoS information. Example show qos QoS Mode: enable Basic trust: cos Command Null show qos queueing show qos queue information. show qos queueing Parameter Parameter Description Null Null Default Null Mode Privileged mode Usage Display the QoS queueing information.
show qos map cos-queue Use this command to display the QoS mapped COS queue information. show qos map cos-queue Parameter Parameter Description Null Null Default Null Mode Privileged mode Usage Displays the QoS COS map information. show qos map cos-queue Example CoS to Queue mappings COS 0 1 2 3 4 5 6 7 -------------------------------Queue 2 1 1 2 3 3 4 4 Command Null show qos map dscp-queue Use this command to show the qos mapped DSCP queue information.
show qos map dscp-queue DSCP to Queue mappings d1: d2 0 1 2 3 4 5 6 7 8 9 -------------------------------------0: 8 8 8 8 8 8 2 2 2 2 1: 2 2 2 2 2 2 2 2 2 2 2: 2 2 2 2 2 2 2 2 2 2 3: 2 2 2 2 2 2 2 2 2 2 4: 2 2 2 2 2 2 2 2 2 2 5: 2 2 2 2 2 2 2 2 2 2 6: 2 2 2 2 Command Null 170
35 POE commands 35.1 configure command PoE enable Use this command to enable the power supply capability of a PoE port. poe enable no poe enable Parameter Parameter Description poe enable Enables the PoE power supply function, the default is on. no poe enable Turns off the PoE power supply. Default Enabled Mode Interface configuration mode Usage Use this command to enable or disable the remote power supply capability of the port.
poe mode Use this command to configure the power management mode of the PoE system. poe mode auto poe mode energy-saving poe mode static Parameter Parameter Description auto Set the power management mode to automatic mode, which is the default mode for PoE devices.
poe max-power Use this command to set the system maximum power. poe max-power no poe max-powe Parameter Description int Maximum power in the range <6,11,20,32,35W> Parameter Default 35W Mode Interface configuration mode Usage Use this command to configure the maximum power of the port.
poe alloc-power Use this command to set the system allocation power. poe alloc-power no poe alloc-power Parameter Description Parameter Allocation power in the range <6,11,20,32,35W> int Default 35W Mode Interface configuration mode Usage Use this command to configure the allocation power of the port in static mode.
poe timer enable Use this command to enable the PoE timer. enable the POE timer poe timer enable no poe timer enable Parameter Parameter Description poe timer enable Enable PoE timer no poe timer enable Disable PoE timer Default Disabled POE timer Mode Global configuration mode Usage Example Use this command to enable or disable the remote power supply capability timer of a port.
poe timer configuration Use this command to set the PoE timer mode. Parameter Parameter Description absolute Sets the PoE power to the absolute time. periodic Sets the PoE power cycle time. Default NULL Mode Interface configuration mode Usage Example Command Use the command to set the PoE power supply time.
35.2 Display relevant commands show poe interface Use this command to view the PoE configuration and status information of a specified port. show poe interface gigabitEthernet port-id Parameter Description port-id Allocation power in the range <6,11,20,32,35W> Parameter Default NULL Mode Privilege configuration mode. Usage Execute this command to view the PoE status of a specified port.
show poe interfaces Use this command to view the PoE status or configuration of all ports. show poe interfaces status show poe interfaces configuration Parameter Parameter Description Null Null Default null Mode Privilege configuration mode. Usage Execute this command to view the PoE status or configuration of all ports.
Parameter Default Parameter Description Null Null - Mode Privilege configuration mode. Usage Execute this command to view the power supply status of the PoE system. ECS2020-10P# show poe powersupply Powerring Port List : Power Management Method : Energy-saving Poe uninterruptible power : Disable System Total Power : 70 W Power Consumption : 0 W Available power : 70 W [100%] Example show poe timer Issue this command to view the PoE timer value.
36 SNMP command 36.1 SNMP configuration commands snmp enable Use this command to enable the SNMP agent on the switch. Snmp enable Parameter Parameter Description snmp enable Enables the SNMP agent, the default is off Default Disabled Mode Global configuration mode Usage Use this command to configure and enable the SNMP agent, an IPv6 SNMP agent is enabled at the same time. Example ECS2020-10P(config)# snmp enable Command Description show snmp Views the current SNMP status.
no snmp enable Use this command to disable the SNMP agent. no snmp enable Parameter Parameter Description snmp enable Enable the SNMP agent, the default is off. Default Disabled. Mode Global configuration mode Usage Use this command to shut down the SNMP agent. Example ECS2020-10P(config)# no snmp enable Command Description show snmp View the SNMP status.
snmp enable traps Use this command to enable SNMP to actively send trap messages to an NMS. The no form of this command disables SNMP from sending an NMS traps.
parameter Parameter Description community name Community name Default - Mode Global configuration mode Usage This command is used with the global configuration command snmp-server enable traps to send trap messages to the NMS. Example ECS2020-10P(config)# snmp-server community test rw Command Command Description show snmp community View the configured Community Information. snmp-server host Use this command to configure an SNMP host (NMS) to receive switch trap messages.
Example ECS2020-10P(config)# snmp-server host 192.168.100.149 traps version 1 test ECS2020-10P(config)# no snmp-server host 192.168.100.149 traps version 1 test Command Command Description View the SNMP host settings configured on the switch. show snmp host snmp trap auth Use this command to enable sending a trap (authTrap) message when an authemtication fails on the switch. Use the no option for this command and the SNMP function will not issue an authTrap.
snmp trap link-status Use this command to enable sending a link-status trap (LinkTrap) should a port link status change. Use the no option of this command and SNMP will not send LinkTrap. snmp trap linkup snmp trap linkDown parameter Parameter Description Null Null Default When this function is enabled and the link status of a port changes, SNMP will send a LinkTrap. Mode Global configuration mode.
Default If this function is enabled and the switch reboots or restarts, a trap message is sent after a successful reboot. Mode Global configuration mode Usage For either warm-start and cold-starts a trap function can be enabled. After a successful restart the relevant trap message will be sent if enabled. Example ECS2020-10P(config)# snmp trap cold-start ECS2020-10P(config)# snmp trap warm-start Command Description show snmp trap Views the snmp trap configuration.
Command Command 36.2 Description Views the snmp trap configuration. show snmp trap SNMP display relevant commands show snmp-status Use this command to displays the current SNMP on state. show snmp parameter Parameter Description Null Null Default Mode Privilege configuration mode Usage Example ECS2020-10P# show snmp SNMP is enabled. show snmp trap Use this command to display the current SNMP trap status.
36.2.2.1.1.1.1 ECS2020-10P# show snmp trap SNMP global trap : Enable SNMP auth failed trap : Enable SNMP linkUp trap : Enable SNMP linkDown trap : Enable SNMP cold-start trap : Enable SNMP warm-start trap : Enable SNMP stp trap : Enable show community Use this command to display the current SNMP community name and status.
show snmp host Use this command to display the host that receives the trap information. show snmp host parameter Parameter Description Null Null Default - Mode Privilege configuration mode Usage - ECS2020-10P# show snmp host Server Community/User Name Notification Version Retries Timeout Example Notification Type UDP Port --------------------------------------------------------------------------------------------------------------------192.168.100.
37 lldp settings 37.1 lldp settings LLDP enable This command enables LLDP. LLDP is a Layer 2 protocol that allows network devices to advertise their own device identities and performance on the local subnet. lldp no lldp Parameter Parameter Description Null Null Default Enabled Mode Global configuration mode Use the “lldp” command to enable LLDP RX/TX ability. The LLDP enabled status is displayed by using the “show lldp” command. Use the no form of this command to disable LLDP.
Default default is disable Mode Interface configuration mode Usage Use the “lldp rx” command to enable the LLDP PDU RX ability. The configuration is displayed by using the “show lldp” command. Example ECS2020-10P(config-if-GigabitEthernet0/1)# lldp rx ECS2020-10P(config-if-GigabitEthernet0/1)# no lldp rx Command Command Description show lldp Display LLDP information LLDP tx-interval Use this command to set the LLDP message transmission interval.
LLDP reinit-delay Use this command to set the LLDP module re-initialization delay. Use the no form of the command to remove any delay. lldp reinit-delay <1-10> no lldp reinit-delay Parameter Description <1-10> Specifies the LLDP re-initial delay time in seconds. Parameter Default 2s Mode Global configuration mode Use the “lldp reinit-delay” command to configure the LLDP reinit-delay. The delay avoids LLDP generating too many PDUs if the port status toggles up and dow Usage frequently.
Parameter Default Parameter Description <2-10> Specifies the LLDP hold time multiplier. 4 Mode Global configuration mode Use the “lldp holdtime-multiplier” command to configure the LLDP PDU hold multiplier that decides the time-to-live (TTL) value sent in LLDP advertisements. Usage TTL = (tx-interval * holdtime-multiplier). The configuration can be displayed using the “show lldp” command.
Mode Global configuration mode Usage Use the “lldp lldpdu” command to configure the LLDP PDU handling behavior when LLDP is globally disabled. Note that if LLDP is globally enabled and per port LLDP receive status is configured to disabled, the received LLDP PDU would be dropped instead of using the global disable behavior. The configuration can be displayed by using the “show lldp” command.
Command Description show lldp Display lldp information Command lldp med fast-start-repeat-count Use this command to configure LLDP MED fast start repeat count. lldp med f ast-start-repeat-count <1-10 > no lldp med fast-start-repeat-count Parameter Default Parameter Description <1-10> LLDP PDU fast start TX repeat counts. 3 Mode Global Configuration Usage Use the “lldp lldp med fast-start-repeat-count” command to configure LLDP bpdu fast start tx repeat.
lldp med tlv-select Use this command to configure the selected MED TLVs for LLDP packets. lldp med tlv-select MEDTLV [MEDTLV] [MEDTLV] [MEDTLV] no lldp med tlv-select Parameter Parameter Description MEDTLV MED optional TLV. Available optional TLVs are network-policy, location, poe-pse, and inventory. Default network-policy TLV Mode Interface configuration mode Usage Use the “lldp med tlv-select” command to configure the LLDP MED TLV selection.
Parameter Parameter Description TLV Select from the following optional LLDP optional TLV: port-desc, sys-name, sys-desc, sys-cap, macphy, lag, max-frame-size, or management-addr. Default No TLV selected Mode Interface configuration mode Use the “lldp tlv-select” command to attach selected TLV to LLDP PDU. The configuration can be viewed using the “show lldp” command. Use the no form of this command to remove all selected TLV.
Default Enabled Mode Interface configuration mode Usage Use the “lldp tlv-select pvid” command to configure the 802.1 PVID TLV attached enable status. The configuration can be viewed using the “show lldp” command. Example ECS2020-10P(config-if-GigabitEthernet0/1)# lldp tlv-select pvid enable ECS2020-10P(config-if-GigabitEthernet0/1)# lldp tlv-select pvid disable Command Description Command show lldp interfaces GigabitEthernet 0/1 Displays the LLDP information.
Mode Interface configuration mode Use the command“lldp tlv-select vlan-name” to add or remove VLAN names to the VLAN list of the 802.1 VLAN-NAME TLV. The configuration can be viewd by using the comamnd“show lldp”. Usage Example ECS2020-10P(config-if-GigabitEthernet0/1)# lldp tlv-select vlanname add 1 ECS2020-10P(config-if-GigabitEthernet0/1)# no lldp tlv-select Command Command Description show lldp interfaces GigabitEthernet 0/1 Displays the LLDP information.
Usage Use the “lldp tx” command to enable the LLDP PDU T X ability. The configuration can be viewed using the “show lldp” command. Example ECS2020-10P(config-if-GigabitEthernet0/1)# lldp tx ECS2020-10P(config-if-GigabitEthernet0/1)# no lldp tx Command Description show lldp Displays the LLDP information Command LLDP tx-delay Use this command to specify a delay in seconds between successive LLDP transmissions. Use the no form of the command to set the delay to the default value.
Command Command Description Displays the LLDP information. show lldp show lldp Use this command to view the LLDP configuration. show lldp show lldp interfaces GigabitEthernet <1-10> parameter Parameter Description <1-10> GigabitEthernet device number Default Null Mode Privilege configuration mode. Usage Displays the LLDP configuration and port-related LLDP information.
show lldp local-device Use this command to view the LLDP local device configuration. show lldp show lldp interfaces GigabitEthernet <1-10> local-device Parameter Parameter Description <1-10> GigabitEthernet device number Default - Mode Privilege configuration mode. Usage Use “show lldp local-device ” command to show the local configuration of LLDP PDU. ECS2020-10P# show lldp local-device LLDP Local Device Information: Chassis Type : Mac Address Chassis ID : 00E0.4C01.
Default - Mode Privilege configuration mode. Usage Use “show lldp med ” command to display the LLDP MED configuration.
Mode Privilege configuration mode. Use the “show lldp neighbor” command to display the received neighbor LLDP PDU information. When LLDP PDUs are received on LLDP RX enable ports, the system stores the PDU information in a database until the time to live timer parameter of the PDU packets counts down to zero. Usage ECS2020-10P# show lldp neighbor Port | Device ID | Port ID | SysName | Capabilities | TTL ---- + ----------------- + ---------------- + ----------------- + -------------- + ----gi0/4 | 00E0.
ECS2020-10P# show lldp statistics LLDP Global Statistics: Insertions : 1 Deletions : 0 Drops : 0 Age Outs : 0 | TX Frames | RX Frames | RX TLVs | RX Ageouts Port | Total | Total | Discarded | Errors | Discarded | Unrecognized | Total --------+-----------+-------+-----------+--------+-----------+--------------+---------gi0/1 | 12 | 0 | 0| 0| 0| 0| 0 gi0/2 | 0| 0| 0| 0| 0| 0| 0 gi0/3 | 0| 0| 0| 0| 0| 0| 0 gi0/4 | 3| 3| 0| 0| 0| 0| 0 gi0/5 | 0| 0| 0| 0| 0| 0| 0 gi0/6 | 0| 0| 0| 0| 0| 0| 0 gi0/7 | 0| 0| 0| 0| 0
38 System Setting Commands 38.1 Basic System Settings Management VLAN Use the command below to configure the system management VLAN ID. management-vlan vlan vlanid Parameter Parameter Description vlanid The VLAN ID is In the range of <1-4094> Default 1 (VLAN ID 1) Mode Global configuration mode Usage Use this command to configure the system management VLAN ID.
Mode Global configuration mode Usage Use this command to Configure the management IP address of the switch as dynamic. Example ECS2020-10P(config)# ip dhcp Command Description Command Displays the switch management IP address information. show ip Management ip Use the command below to configure the switch management IP address with a static address. Ip address x.x.x.
location command Use this command to configure the system location text string in the switch.
Default Null Mode Global configuration mode Usage Use this command to configure a static IPv6 address for the switch management IP address. Example ECS2020-10P(config)# ipv6 address 2001::5 prefix 64 ECS2020-10P(config)# ipv6 default-gateway 2001::1 Command Command Description show ipv6 Displays the IPv6 management address information. ipv6 DHCP command Use the command below to configure the switch’s IPv6 management address as dynamic.
Command Command Description Displays the management IPv6 information show ipv6 Telnet Use the command below to enable the Telnet server on the switch. ip telnet Parameter Parameter Description Null Null Default Null Mode Global configuration mode Usage Use this command configure the system Telnet server to allow Telnet client connections to connect.
Upload the switch log file Use the command below to upload the system log file to a TFTP server. copy flash://ram.log tftp:// Parameter Parameter Description Specifies the ram.log file to be copied from flash. flash:// Specifies the TFTP server IP address for example: tftp://192.168.100.149 tftp:// Null Default Mode Privilege configuration mode. Usage Use this command to upload the switch log file to a TFTP server. Example ECS2020-10P# copy flash://ram.log tftp://192.168.100.
Example ECS2020-10P# reload change password Use the command below to change the administrator (admin) user login password for browser access only. username web xx password xx Parameter Parameter Description web Browser manager user name i.e. admin password The specified user password. Default admin Mode Global configuration mode Usage Use this command to change the administrator user login password for the browser only.
Mode Privilege configuration mode. Usage Use this command to display the system log.
ARP table Use the command below to display the ARP table. show arp Parameter Parameter Description Null Null Default Null Mode Privilege configuration mode. Usage Use this command to display the system ARP table. Example ECS2020-10P# show arp Address HWtype HWaddress Flags Mask 192.168.100.
Configure static MAC bindings Use the command below to configure the MAC addresses binded to specified ports and VLANs. mac-address static mac-address vlan vlan-id interface gigabitEthernet port-id no mac-address static mac-address vlan vlan-id interface gigabitEthernet port-id Parameter Description mac-address Specifies the MAC address to be binded. vlan-id Specifies the VLAN ID to bind the MAC address to. Parameter Specifies the port number to bind the MAC address to.
Mode Global configuration mode Usage The command is used to specify a MAC address of a specified VLAN to be filtered out. Any traffic with that MAC address on the specified VLAN will not be forwarded through the switch. Example ECS2020-10P(config)# mac-address static 0001.7A55.E7D5 vlan 1 drop Command Description show mac-address drop Displays the MAC addresses configured to drop. Command configure mac-address aging-time This command below configures the aging time of dynamic MAC addresses.
show mac-address count Use this command to display the number of MAC addresses in the FDB table. show mac-address count Paremeter Default Parameter Description count Displays the current number of MAC addresses Null Mode Usage Example Privilege configuration mode. - ECS2020-10P# show mac-address count Static Mac Address Count : 0 Drop Mac Address Count : 0 Dynamic Mac Address Count : 15 Total number of entries : 15 Command Description Displays the static MAC address.
display bound mac-addresses Use the command below to view information about all bound MAC address tables. show mac-address [ all | drop | dynamic | static | vlan vlan-id { dynamic | static } | interface port-number { drop | dynamic | static } ] Parameter Parameter Description Show mac-address all Displays all the MAC addresses binded to the switch. show mac-address static Displays the static MAC address. show mac-address drop Displays the filtered MAC address. Displays the dynamic MAC address.
Null Default Mode Privilege configuration mode. Usage Use this command to view the current configuration. Example ECS2020-10P# show running-config save configuration Save the current (running) configuration of the switch to the startup configuration file. write Parameter Default Parameter Description Null Null Null Mode Privilege configuration mode. Usage Use this command to Save the current running configuration of the switch to the startup configuration file.
restore-defaults Use this command to restore the switch configuration to the factory default settings. restore-defaults Parameter Default Parameter Description Null Null Null Mode Privilege configuration mode. Usage Used to restore the switch configuration to the default settings.
Firmware Upgrade Use this command to upgrade the firmware copy tftp://xxx.xxx.xxx.xxx/firmware_name.bix flash://image.bin Parameter Description Firmware filename in the switch file system – target for the copy command from TFTP server. Copy source firmware file from the tftp: file system.(tftp://serverip/filename) flash://image.bin Parameter tftp:// Default Null Mode Privilege configuration mode Usage Use this command to upgrade the system firmware. Example ECS2020-10P# copy tftp://192.168.100.
Firmware backup Use this command to backup the switch firmware to an offline TFTP server. copy flash://image.bin tftp://xxx.xxx.xxx.xxx Parameter Description Copy from the source flash file system. flash://image.bin flash:// Copy to target TFTP server file system: file system.(tftp://serverip/filenameme flash://image.bin Parameter tftp:// Default Null Mode Privilege configuration mode Usage Use this command to backup system Example ECS2020-10P#copy flash://image.bin tftp://192.168.100.
Uploading the startup configuration Use the command below to upload the startup configuration file. copy flash://startup-config tftp://xxx.xxx.xxx.xxx/filename Parameter Parameter Description flash:// Copy from flash: file system. flash://startup-config tftp:// Copy to tftp: file system.(tftp://serverip/filename) Default Null Mode Privilege configuration mode Usage Use this command to export the current startup configuration of the system to a TFTP file server.
Downloading a configuration file Use this command to download a switch configuration file from a TFTP file server. copy tftp://xxx.xxx.xxx.xxx/config-file running-config Parameter Default Mode Usage Example Parameter Description flash:// Copy to flash: file system. flash://startup-config tftp:// Copy from tftp: file system.(tftp://serverip/filename) - Privilege configuration mode Use this command import a new configuration file to the system running configuration. copy tftp://192.168.100.
Memory information Use the command below to display the switch memory information. show memory Parameter Default Mode Usage Example Parameter Description Null Null Null Privilege configuration mode Use this command to display memory information.
CPU information Use the command below to display the switch CPU information. show cpu Parameter Default Mode Usage Parameter Description Null Null Null Privilege configuration mode Use this command to Display CPU information.
Flash information Use the command below to display the switch flash information. show flash Parameter Default Parameter Description Null Null Null Mode Privilege configuration mode Usage Use this command to display the flash information.
Cable detection Use the command below to display the switch cable information. show cable-diag Parameter Default Mode Usage Parameter Description Null Null Null Privilege configuration mode Use this command to display the cable information. ECS2020-10P# show cable-diag interfaces GigabitEthernet 0/1 Port | Speed | Local pair | Pair length | Pair status --------+--------+------------+-------------+--------------gi0/1 | auto | Pair A | 6.00 | Normal Pair B | 6.00 | Normal Pair C | 6.
web-language Use the command below to configure the switch web-language. web-language en Parameter Default Parameter Description en Management Browser will be in English zh_CN Management Browser will be in Simplified Chinese zh_TW Management Browser will be in Traditional Chinese Null Mode Global configuration mode Usage Use this command to configure the switch web-language to one of the available languages by inputting one of the three available language parameter options.
Management static IPv4 address This command sets the static IPv4 management address of the switch. ip address x.x.x.x Parameter Description ip address The int is In the rang of <0-255> mask The int is In the rang of <0-255> default-gateway The int is In the rang of <0-255> Parameter Default 192.168.2.10 Mode Global configuration mode Usage Use this command to configure the system management ip. Example Command ECS2020-10P(config)# ip address 192.168.2.10 mask 255.255.255.
show version Use this command to display the current firmware version utilized by the switch. show version Parameter Parameter Null Null Default Mode Usage Description Null Privilege configuration mode Views the current firmware version. ECS2020-10P Operating System Software ECS2020-10P system image file (system-firmware.bin), version 17257, Compiled on Jun 15 2017 - 18:52:19 Copyright@2016 ECS2020-10P Systems, Inc.
DHCP server enable Use this command to enable the switch’s DHCP server. Ip dhcp server parameter Parameter Description Null Null Default Disabled Mode Global configuration mode Usage Enables the DHCP server. Example Command ECS2020-10P(config)# ip dhcp server ECS2020-10P(config)# no ip dhcp server Command Description show ip dhcp server Displays the DHCP server information.
DHCP server configuration Use the command below to configure the switch DHCP server. ip dhcpserver Parameter parameter Default pool Description IP Pool is A.B.C.D-E.F.G.H,start to end IP address range separated by a dash. Null Mode Global configuration mode Usage Sets the DHCP server with an IP address range to assign clients. Example Command ECS2020-10P(config)# ip dhcpserver pool 192.168.2.100192.168.2.200 Command Description show ip dhcp server Displays the DHCP server information.
Show fiber-transceiver Use this command to view the fiber port transceiver signal information such as temperature, voltage, power etc… This command is only available through the CLI command interface. show fiber-transceiver interfaces GigabitEthernet port-id parameter Default Parameter Description port-id The fiber port selection. None Privilege configuration mode Mode Use this command to view the fiber port transceiver signal information.
Show fiber-info Use this command to view the fiber port and fiber information such as fiber mode, baud rate, fiber type etc… show fiber-info interfaces GigabitEthernet port-id parameter Default Mode Usage Example Parameter Description port-id Chose the fiber port to view info None Privilege configuration mode Used to view the fiber port and fiber type information.
39 Static Route 39.1 Configure commands Turn off switch management VLAN management-vlan disable Parameter Parameter disable Description Disable management-vlan Default Mode Global configuration mode Usage Use this command to turn off the switch management VLAN.
Interface VLAN IP ip address x.x.x.x Parameter Parameter Description disable The int is in the range <0-255> mask The int is in the range <0-255> Default-gateway The int is in the range <0-255> Default Mode Interface VLAN configuration mode Usage Use this command to configure the interface VLAN IP. Example ECS2020-28P(config)# interface vlan 100 ECS2020-28P(config-if-vlan)# ip add 20.1.1.1 mask 255.255.255.
Configure Static Route route-entry ip add x.x.x.x Parameter Parameter Description ip address The int is in the range <0-255> netmask The int is in the range <0-255> gw The int is in the range <0-255> Default Mode global configuration mode Usage Use this command to configure a static route. Example ECS2020-28P(config)#route-entry add ip 30.1.1.0 netmask 255.255.255.0 gw 20.1.1.
40 MVR configure mvr Parameter Parameter Description vlan The int is in the range <1-4094> mode compatible or dynamic group IPV4 multicast address Default Mode global configuration mode Usage MVR function solves the problem that the receiver of multicast message is in a different VLAN. Example ECS2020-28T(config)# ECS2020-28T(config)# ECS2020-28T(config)# ECS2020-28T(config)# Command mvr mvr vlan 30 mvr mode compatible mvr group 239.1.1.
Usage Port connected to the upper end.
configure static mvr multicast group Parameter Parameter Description port Receiver port group MVR group Default Mode Usage When MVR mode is compatible mode, static group needs to be configured. Example ECS2020-28T(config)# mvr vlan 30 group 239.1.1.
E072021-CS-R04
