D-Link DES-3028 Cli Reference Manual

Managed 10/100mbps fast
Hide thumbs Also See for DES-3028:

Advertisement

CLI Reference Manual
DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P
Product Model :
Managed 10/100Mbps Fast Ethernet Switch
Release 2

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DES-3028

  • Page 1 CLI Reference Manual DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P Product Model : Managed 10/100Mbps Fast Ethernet Switch Release 2...
  • Page 2 Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
  • Page 3: Table Of Contents

    Table of Contents INTRODUCTION ................................1 USING THE CONSOLE CLI............................3 COMMAND SYNTAX ..............................7 BASIC SWITCH COMMANDS.............................9 MODIFY BANNER AND PROMPT COMMANDS .....................22 SWITCH PORT COMMANDS ............................25 PORT SECURITY COMMANDS ..........................29 NETWORK MANAGEMENT (SNMP) COMMANDS ....................33 SWITCH UTILITY COMMANDS ..........................53 NETWORK MONITORING COMMANDS ........................62 MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .................74 FORWARDING DATABASE COMMANDS.......................87 BROADCAST STORM CONTROL COMMANDS .....................94...
  • Page 4 ARP COMMANDS..............................195 ROUTING TABLE COMMANDS..........................199 MAC NOTIFICATION COMMANDS ........................201 ACCESS AUTHENTICATION CONTROL COMMANDS ..................205 SSH COMMANDS..............................226 SSL COMMANDS ..............................233 D-LINK SINGLE IP MANAGEMENT COMMANDS....................239 SMTP COMMANDS ..............................250 POE COMMANDS..............................254 CABLE DIAGNOSTICS COMMANDS........................259 DHCP LOCAL RELAY COMMANDS ........................260 GRATUITOUS ARP COMMANDS...........................262 VLAN TRUNKING COMMANDS ..........................266...
  • Page 5 DOS PREVENTION COMMANDS ...........................311 IP-MAC-PORT BINDING COMMANDS ........................316 LOOPBACK DETECTION COMMANDS.........................327 TECHNICAL SUPPORT COMMANDS ........................331 COMMAND HISTORY LIST.............................334 TECHNICAL SPECIFICATIONS..........................338 ARP PACKET CONTENT ACL..........................344 PASSWORD RECOVERY PROCEEDURE......................352...
  • Page 6: Introduction

    Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained in the CLI for members of this series, including the DES-3028, DES-3028P, DES-3028G, DES-3052, and DES-3052P. Examples present in this manual may refer to any member of this series and may show different port counts, but are universal to this series of switches, unless otherwise stated.
  • Page 7 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Setting the Switch’s IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default Switch IP address to meet the specification of your networking address scheme.
  • Page 8: Using The Console Cli

    SING THE ONSOLE The DES-3028/28P/28G/52/52P support a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 9 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual cable_diag ports clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear counters clear dos_prevention counters clear fdb clear igmp_snooping data_driven_group clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority...
  • Page 10 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config account Command: config account Next possible completions: <username> DES-3028P:4#config account Command: config account Next possible completions: <username> DES-3028P:4# Figure 2-4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned...
  • Page 11 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show Command: show Next possible completions: 802.1p 802.1x access_profile account acct_client address_binding arpentry asymmetric_vlan auth_client auth_diagnostics auth_session_statistics auth_statistics authen authen_enable authen_login authen_policy autoconfig bandwidth_control command_history config cpu_access_profile...
  • Page 12: Command Syntax

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted function that changes text case.
  • Page 13 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual {braces} however the effect of the system reset is dependent on which, if any, value is specified. Therefore, with this example there are three possible outcomes of performing a system reset. See the following chapter, Basic Commands for more details about the reset command.
  • Page 14: Basic Switch Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ASIC WITCH OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable password...
  • Page 15 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable password encryption Purpose Used to enable password encryption on a user account. Syntax enable password encryption Description The user account configuration information will be stored in the configuration file, and can be applied to the system at a time in the future.
  • Page 16 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create account Purpose Used to create user accounts. Syntax create [admin | user] <username 15> Description The create account command is used to create user accounts that consist of a username of 1 to 15 characters and a password of 0 to 15 characters.
  • Page 17 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config account dlink Command: config account dlink Enter a old password:**** Enter a case-sensitive new password:**** Enter password again confirmation:**** Success. DES-3028P:4# show account Purpose Used to display user accounts.
  • Page 18 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete account System Command: delete account System Success. DES-3028P:4# show session Purpose Used to display a list of currently logged-in users. Syntax show session Description This command displays a list of all the users that are logged-in at the time the command is issued.
  • Page 19 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the way that the users logged in: DES-3028P:4#show session Command: show session Login Time Live Time From Level Name -------------------- ----------- ----------- -----...
  • Page 20 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All show serial_port Purpose Used to display the current serial port settings. Syntax show serial_port Description This command displays the current serial port settings.
  • Page 21 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Success. DES-3028P:4# enable clipaging Purpose Used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging Description This command is used when issuing a command which causes the console screen to rapidly scroll through several pages.
  • Page 22 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable telnet Syntax enable telnet <tcp_port_number 1-65535> Description This command is used to enable the Telnet protocol on the Switch. The user can specify the TCP or UDP port number the Switch will use to listen for Telnet requests.
  • Page 23 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To connect to a device through telnet with an IP address of 10.53.13.99: DES-3028P:4#telnet 10.53.13.99 tcp_port 23 Command: telnet 10.53.13.99 tcp_port 23 enable web Purpose Used to enable the HTTP-based management software on the Switch.
  • Page 24 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual save Syntax save {[config|log|all]} Description This command is used to enter the current switch configuration into non-volatile RAM. The saved switch configuration will be loaded into the Switch’s memory each time the Switch is restarted.
  • Page 25 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To force the Switch to restart: DES-3028P:4#reboot force_agree Command: reboot force_agree Please wait, the switch is rebooting... reset Purpose Used to reset the Switch to the factory default settings.
  • Page 26 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#login Command: login UserName: logout Purpose Used to log out a user from the Switch’s console. Syntax logout Description This command terminates the current user’s session on the Switch’s console.
  • Page 27: Modify Banner And Prompt Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ODIFY ANNER AND ROMPT OMMANDS Administrator level users can modify the login banner (greeting message) and command prompt by using the commands described below. Command Parameters config command_ prompt [<string 16>...
  • Page 28 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config greeting _message message). Parameters default – If the user enters default to the modify banner command, then the banner will be reset to the original factory banner.
  • Page 29 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch. Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch.
  • Page 30: Switch Port Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual WITCH OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [<portlist>...
  • Page 31 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ports Restrictions Only Administrator-level users can issue this command. Example usage: To configure the speed of ports 13 to be 10 Mbps, full duplex, with learning and state enabled:...
  • Page 32 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the configuration of all ports on a standalone switch: DES-3028P:4#show ports Command show ports Port State/ Settings Connection Address Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning -----...
  • Page 33 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the configuration of all ports on a standalone switch, with description: DES-3028P:4#show ports description Command: show ports description Port State/ Settings Connection Address...
  • Page 34: Port Security Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ECURITY OMMANDS The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<auth_portlist>...
  • Page 35 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config port_security ports 1-5 admin_state enable max_learning_addr lock_address_mode DeleteOnReset Command: config port_security ports admin_state enable max_learning_addr lock_address_mode DeleteOnReset Success. DES-3028P:4# delete port_security_entry Purpose Used to delete a port security entry by MAC address, port number and VLAN ID.
  • Page 36 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# clear port_security_entry port 6 Command: clear port_security_entry port 6 Success. DES-3028P:4# show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <auth_portlist>}...
  • Page 37 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To enable the port security trap log setting: DES-3028P:4#enable port_security trap_log Command: enable port_security trap_log Success. DES-3028P:4# disable port_security trap_log Purpose Used to disable the trap log for port security.
  • Page 38: Network Management (Snmp) Commands

    OMMANDS The DES-3028/28G/28P/52/52P support the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. Users can specify which version of the SNMP users want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
  • Page 39 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters delete snmp host <ipaddr> show snmp host <ipaddr> create trusted_host <ipaddr>| network<network_address> delete trusted_host [all | ipaddr<ipaddr>| network<network_address>] show trusted_host enable snmp traps enable snmp authenticate traps...
  • Page 40 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp user <auth password 8-16>  An alphanumeric sting of between 8 and 16 characters that will be used to authorize the agent to receive packets for the host.
  • Page 41 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To delete a previously entered SNMP user on the Switch: DES-3028P:4#delete snmp user dlink Command: delete snmp user dlink Success. DES-3028P:4# show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table.
  • Page 42 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp view Restrictions Only Administrator-level users can issue this command. Example usage: To create an SNMP view: DES-3028P:4#create snmp view dlinkview 1.3.6 view_type included Command: create...
  • Page 43 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree View Type -------------------- ----------------------- ---------- ReadView Included WriteView Included NotifyView 1.3.6 Included restricted 1.3.6.1.2.1.1...
  • Page 44 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To create the SNMP community string “dlink:” DES-3028P:4#create snmp community dlink view ReadView read_write Command: create snmp community dlink view ReadView read_write Success. DES-3028P:4# delete snmp community Purpose Used to remove a specific SNMP community string from the Switch.
  • Page 45 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp community Command: show snmp community SNMP Community Table Community Name View Name Access Right ------------------ ------------------- ------------ private CommunityView read_write public CommunityView read_only dlink ReadView...
  • Page 46 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views. Syntax create snmp group <groupname 32> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] {read_view <view_name 32>...
  • Page 47 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create snmp group noauth_nopriv read_view v1 write_view v1 notify_view v1 Command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Success. DES-3028P:4# delete snmp group Purpose Used to remove an SNMP group from the Switch.
  • Page 48 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp groups Command: show snmp groups Vacm Access Table Settings Group Name : Group3 ReadView Name : ReadView WriteView Name : WriteView Notify View Name : NotifyView...
  • Page 49 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp host Description The create snmp host command creates a recipient of SNMP traps generated by the Switch’s SNMP agent. <ipaddr>  The IP address of the remote management station that will Parameters serve as the SNMP host for the Switch.
  • Page 50 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete snmp host <ipaddr>  The IP address of a remote SNMP manager that will Parameters receive SNMP traps generated by the Switch’s SNMP agent. Restrictions Only Administrator-level users can issue this command.
  • Page 51 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create trusted_host Management VLAN. If no IP addresses are specified, then there is nothing to prevent any IP address from accessing the Switch, provided the user knows the Username and Password.
  • Page 52 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example Usage: To display the list of trust hosts: DES-3028P:4#show trusted_host Command: show trusted_host Management Stations IP Address/Netmask ----------------------- 10.53.13.94 Total Entries: 1 DES-3028P:4# delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host command above.
  • Page 53 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Success. DES-3028P:4# delete trusted_host all Purpose Used to delete all trusted host entries made using the create trusted_host ipaddr and create trusted_host network commands above. Syntax delete trusted _host all...
  • Page 54 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable snmp authenticate traps Parameters None. Restrictions Only Administrator-level users can issue this command. Example Usage: To turn on SNMP authentication trap support: DES-3028P:4#enable snmp authenticate traps Command: enable snmp authenticate traps Success.
  • Page 55 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable snmp authenticate traps Purpose Used to disable SNMP authentication trap support. Syntax disable snmp authenticate traps Description This command is used to disable SNMP authentication support on the Switch.
  • Page 56 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config snmp system_location string is accepted if there is no location desired. Restrictions Only Administrator-level users can issue this command. Example usage: To configure the Switch location for “...
  • Page 57 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#enable rmon Command: enable rmon Success. DES-3028P:4# disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
  • Page 58: Switch Utility Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual WITCH TILITY OMMANDS The switch utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware_fromTFTP <ipaddr>...
  • Page 59 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To download a configuration file: DES-3028P:4#download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Connecting to server....Done. Download configuration....Done. DES-3028P:4# DES-3028P:4##------------------------------------------------------------------- DES-3028P:4## DES-3028P Configuration...
  • Page 60 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure firmware section image 1 as a boot up section: DES-3028P:4# config firmware image_id 1 boot_up Command: config firmware image_id 1 boot_up Success. DES-3028P:4# show firmware information Purpose Used to display the firmware section information.
  • Page 61 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show config 1. Basic (serial port, Telnet and 19. ACL web management status) 20. SNTP 2. storm control 21. IP route 3. IP group management 22. LACP 4.
  • Page 62 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show config current_config Command: show config current_config ------------------------------------------------------------------- DES-3028P Configuration Firmware: Build 2.00.B23 Copyright(C) 2009 D-Link Corporation. All rights reserved. #------------------------------------------------------------------- # BASIC config serial_port baud_rate 9600 auto_logout never...
  • Page 63 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#upload cfg_toTFTP 10.48.74.121 c:\cfg\log.txt Command: upload cfg_toTFTP 10.48.74.121 c:\cfg\log.txt Connecting to server....Done. Upload configuration....Done. DES-3028P:4# enable autoconfig Purpose Used to activate the auto configuration function for the Switch. This will load a previously saved configuration file for current use.
  • Page 64 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P Fast Ethernet Switch Command Line Interface Firmware: Build 2.00.B23 Copyright(C) 2009 D-Link Corporation. All rights reserved. DES-3028P:4# DES-3028P:4# DES-3028P:4#download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Connecting to server....
  • Page 65 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#disable autoconfig Command: disable autoconfig Success. DES-3028P:4# show autoconfig Purpose Used to display the current autoconfig status of the Switch. Syntax show autoconfig Description This command will list the current status of the auto configuration function.
  • Page 66 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#ping 10.48.74.121 times 4 Command: ping 10.48.74.121 Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Ping statistics for 10.48.74.121...
  • Page 67: Network Monitoring Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
  • Page 68 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show packet ports 2 Command: show packet ports 2 Port Number : 2 Frame Size Frame Counts Frames/sec Frame Type Total Total/sec ------------ ------------ ---------- ---------- ---------...
  • Page 69 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show utilization Purpose Used to display real-time port and CPU utilization statistics. Syntax show utilization [cpu | ports {<portlist>}] Description This command will display the real-time port and CPU utilization statistics for the Switch.
  • Page 70 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Five minutes - 14% DES-3028P:4# clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports <portlist>} Description This command will clear the counters used by the Switch to compile statistics.
  • Page 71 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show log Restrictions None. Example usage: To display the switch history log: DES-3028P:4#show log index 1-5 Command: show log index 1-5 Index Data Time Log Text -----...
  • Page 72 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#disable syslog Command: disable syslog Success. DES-3028P:4# show syslog Purpose Used to display the syslog protocol status as enabled or disabled. Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled.
  • Page 73 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create syslog host Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem...
  • Page 74 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create syslog host severity facility local0 Command: create syslog host 1 severity all facility local0 Success. DES-3028P:4# config syslog host Purpose Used to configure the syslog protocol to send system log data to a remote host.
  • Page 75 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem...
  • Page 76 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3028P:4# Example usage: To configure a Syslog host for all hosts:...
  • Page 77 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show syslog host Purpose Used to display the syslog hosts currently configured on the Switch. Syntax show syslog host {<index 1-4>} Description The show syslog host command is used to display the syslog hosts that are currently configured on the Switch.
  • Page 78 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config log_save_timing time_interval 30 Command: config log_save_timing time_interval 30 Success. DES-3028P:4# show log_save_timing Purpose Used to display the method configured for saving log files to the switch’s flash memory.
  • Page 79: Multiple Spanning Tree Protocol (Mstp) Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1D STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 80 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters show stp ports {<portlist>} {instance <value 0-4>} show stp instance {<value 0-4>} show stp mst_config id Each command is listed, in detail, in the following sections.
  • Page 81 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp version Parameters mstp – Selecting this parameter will set the Multiple Spanning Tree Protocol (MSTP) globally on the Switch. rstp  Selecting this parameter will set the Rapid Spanning Tree Protocol (RSTP) globally on the Switch.
  • Page 82 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp choose a time between 4 and 30 seconds. The default is 15 seconds. txholdcount <1-10>  The maximum number of BPDU Hello packets transmitted per interval. Default value = 6.
  • Page 83 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp ports Switch is configured for RSTP, the port will be capable to migrate from 802.1D STP to 802.1w RSTP. If the Switch is configured for MSTP, the port is capable of migrating from 802.1D STP to 802.1s MSTP.
  • Page 84 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure STP with path cost auto, hellotime set to 2 seconds, migration enable, and state enable for ports 1-2 of module 1. DES-3028P:4#config stp ports 1-2 externalCost auto hellotime 2 migrate...
  • Page 85 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp instance_id will add VIDs to the previously configured STP instance_id. remove_vlan  Along with the vid_range <vidlist> parameter, this command will remove VIDs to the previously configured STP instance_id.
  • Page 86 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp priority Purpose Used to update the STP instance configuration Syntax config stp priority <value 0-61440> instance_id <value 0-4> Description This command is used to update the STP instance configuration settings on the Switch.
  • Page 87 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config mst_config_id revision_level name Trinity Command : config stp mst_config_id revision_level 10 name Trinity Success. DES-3028P:4# config stp mst_ports Purpose Used to update the port configuration for a MSTP instance.
  • Page 88 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show stp Purpose Used to display the Switch’s current STP configuration. Syntax show stp Description This command displays the Switch’s current STP configuration. Parameters None Restrictions None.
  • Page 89 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual STP Bridge Global Settings --------------------------- STP Status : Enabled STP Version : MSTP Max Age : 20 Forward Delay : 15 Max Hops : 20 TX Hold Count...
  • Page 90 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show stp instance_id configuration for the CIST internally set on the Switch. Restrictions None Example usage: To display the STP instance configuration for instance 0 (the internal CIST) on the Switch:...
  • Page 91 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show stp mst_config_id Command: show stp mst_config_id Current MST Configuration Identification ---------------------------------------------------------- Configuration Name : [00:53:13:1A:33:24] Revision Level :0 MSTI ID VID list ------- ----------- CIST 2-4094...
  • Page 92: Forwarding Database Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command...
  • Page 93 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create default 00-00-00-00-01-02 port 5 Command: create fdb default 00-00-00-00-01-02 port Success. DES-3028P:4# create multicast_fdb Purpose Used to create a static entry to the multicast MAC address...
  • Page 94 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config multicast_fdb default 01-00-00-00-00- 01 add 1-5 Command: config multicast_fdb default 01-00-00-00-00-01 add 1-5 Success. DES-3028P:4# config fdb aging_time Purpose Used to set the aging time of the forwarding database.
  • Page 95 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete fdb Purpose Used to delete an entry to the Switch’s forwarding database. Syntax delete fdb <vlan_name 32> <macaddr> Description This command is used to delete a previous entry to the Switch’s MAC address forwarding database.
  • Page 96 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Success. DES-3028P:4# show multicast_fdb Purpose Used to display the contents of the Switch’s multicast forwarding database. Syntax show mulitcast_fdb [vlan <vlan_name 32> | mac_address <macaddr>] Description This command is used to display the current contents of the Switch’s multicast MAC address forwarding database.
  • Page 97 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display unicast MAC address table: DES-3028P:4#show fdb Command: show fdb Unicast MAC Address Ageing Time = 300 VLAN Name MAC Address Port Type ----...
  • Page 98 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config multicast port_filtering_mode 1-4 forward_unregistered_groups Command: config multicast port_filtering_mode 1-4 forward_unregistered_groups Success. DES-3028P:4# show multicast port_filtering_mode Purpose Used to show the multicast packet filtering mode on a port per port basis.
  • Page 99: Broadcast Storm Control Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ROADCAST TORM ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 100 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config traffic control detected on the Switch. The user has two options: drop  Utilizes the hardware Traffic Control mechanism, which means the Switch’s hardware will determine the Packet Storm based on the Threshold value stated and drop packets until the issue is resolved.
  • Page 101 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control { <portlist> } Description This command displays the current storm traffic control configuration on the Switch.
  • Page 102 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure notifications to be sent when a packet storm control has been detected and cleared by the Switch. DES-3028P:4# config traffic trap both Command: config traffic trap both Success.
  • Page 103: Cos Commands

    OMMANDS The DES-3028/28G/28P/52/52P supports 802.1p priority queuing. The Switch has four priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
  • Page 104 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections. config bandwidth_control Purpose Used to configure bandwidth control on a port by-port basis. Syntax config bandwidth_control [<portlist>] {rx_rate [no_limit | <value 64-1024000>] | tx_rate [no_limit <value 64-1024000>]}...
  • Page 105 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show bandwidth_control 1-5 Command: show bandwidth_control 1-5 Bandwidth Control Table Port RX Rate TX Rate Effective RX Effective TX (Kbit/sec) (Kbit/sec) (Kbit/sec) (Kbit/sec) ---- ---------- ---------- ----------------...
  • Page 106 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show scheduling Purpose Used to display the currently configured traffic scheduling on the Switch. Syntax show scheduling Description The show scheduling command will display the current traffic scheduling mechanisms in use on the Switch.
  • Page 107 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the traffic scheduling mechanism for each QoS queue: DES-3028P:4#config scheduling_mechanism strict Command: config scheduling_mechanism strict Note: The strict mode is only supported at the highest queue and the other lower queues will still work at WRR mode.
  • Page 108 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the Switch. Syntax config 802.1p user_priority <priority 0-7>...
  • Page 109 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To show 802.1p user priority: DES-3028P:4# show 802.1p user_priority Command: show 802.1p user_priority QOS Class of Traffic Priority-0 -> <Class-1> Priority-1 -> <Class-0> Priority-2 ->...
  • Page 110 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1p default_priority configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. <portlist>  Specifies a port or range of ports to be configured.
  • Page 111 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cos mapping Purpose Used to configure the CoS to port mapping method to be used on the switch. Syntax config cos mapping port [<portlist> | all] [none | {port_mapping | ethernet [802.1p | mac_mapping] | ip [tos | dscp]}]...
  • Page 112 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All...
  • Page 113 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos port_mapping Purpose Used to map the destination MAC address in incoming packets to one of the hardware queues available on the switch. Syntax show cos port_mapping {port <portlist>}...
  • Page 114 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos mac_mapping Purpose Used to show the mapping between destination MAC addresses and CoS traffic classes. Syntax show cos mac_mapping {destination_addr <macaddr>} Description The show cos mac_mapping command display the information of the destination MAC address mapped to a traffic class.
  • Page 115 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos tos Purpose Used to show TOS value to traffic class mapping. Syntax show cos tos {value <value 0-7>} Description The show cos tos command displays the information of ToS to traffic class mappings.
  • Page 116 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show dscp_mapping Purpose Used to show DSCP value map to traffic class. Syntax show dscp_mapping {dscp_value <value 0-63>} Description The show dscp_mapping command displays the information for DSCP mapping to traffic class.
  • Page 117: Port Mirroring Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port>...
  • Page 118 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command: config mirror port 1 add source ports 2-7 both Success. DES-3028P:4# Example usage: To delete the mirroring ports: DES-3028P:4#config mirror port 1 delete source port 2-4...
  • Page 119 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command: disable mirror Success. DES-3028P:4# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
  • Page 120: Vlan Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32>...
  • Page 121 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# delete vlan Purpose Used to delete a previously configured VLAN on the Switch. Syntax delete vlan <vlan_name 32> Description This command will delete a previously configured VLAN on the Switch.
  • Page 122 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To delete ports from a VLAN: DES-3028P:4#config vlan v1 delete 6-8 Command: config vlan v1 delete 6-8 Success. DES-3028P:4# create vlan vlanid Purpose Used to create multiple VLANs by VLAN ID list on the switch.
  • Page 123 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config vlan vlanid Syntax config vlan vlanid <vidlist> {add [ tagged | untagged | forbidden ] | delete <portlist> | advertisement [enable | disable] | name <name>}...
  • Page 124 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config gvrp ingress_checking [enable | disable]  Enables or disables ingress checking for the specified port list. acceptable_frame [tagged_only | admit_all] – This parameter states the frame type that will be accepted by the Switch for this function.
  • Page 125 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable gvrp Restrictions Only Administrator-level users can issue this command. Example usage: To disable the Generic VLAN Registration Protocol (GVRP): DES-3028P:4#disable gvrp Command: disable gvrp Success. DES-3028P:4#...
  • Page 126 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# DES-3028P:4#show vlan port 1 Command: show vlan ports 1 Port 1 VLAN ID Untagged Tagged Forbidden Dynamic ------- -------- ------ --------- ------- DES-3028P:4# show gvrp Purpose Used to display the GVRP status for a port list on the Switch.
  • Page 127: Link Aggregation Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-6>...
  • Page 128 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value 1-6> Description This command is used to delete a previously configured link aggregation group.
  • Page 129 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source | mac_destination | mac_source_dest ] Description This command configures the part of the packet examined by the Switch when selecting the egress port for transmitting load-sharing data.
  • Page 130 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source-dest Group ID Master Port Member Port : 1, 5-10 Active Port Status : Disabled Flooding Port DES-3028P:4#...
  • Page 131 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show lacp_port Purpose Used to display current LACP port mode settings. Syntax show lacp_port {<portlist>} Description This command will display the LACP mode settings as they are currently configured.
  • Page 132: Basic Ip Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IP C ASIC OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif [System] [{ipaddress <network_address>...
  • Page 133 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif Description This command will display the configuration of an IP interface on the Switch.
  • Page 134 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#enable autoconfig Command: enable autoconfig Success. DES-3028P:4# NOTE: More detailed information for this command and related commands can be found in the section titled Switch Utility Commands.
  • Page 135: Igmp Snooping Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [ vlan_name <vlan_name 32>...
  • Page 136 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config igmp_snooping leave_timer <sec 0-16711450>  Specifies the maximum amount of time in seconds between the Switch receiving a leave group message from a host, and the Switch issuing a group membership query. If no response to the membership query is received before the Leave Timer expires, the (multicast) forwarding entry for that host is deleted.
  • Page 137 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config igmp_snooping querier • By default, the robustness variable is set to 2. You might want to increase this value if you expect a subnet to be lossy.
  • Page 138 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config router_ports_forbidden Purpose Used to configure ports as forbidden multicast router ports. config router_ports_forbidden <vlan_name 32> [add | delete] Syntax <portlist> This command allows designation of a port or range of ports as being Description forbidden to multicast-enabled routers.
  • Page 139 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable igmp_snooping Used to enable IGMP snooping on the Switch. Purpose disable igmp_snooping {forward_mcrouter_only} Syntax This command disables IGMP snooping on the Switch. IGMP Description snooping can be disabled only if IP multicast routing is not being used.
  • Page 140 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast Router Only : Disabled Data Driven Learning Max Entries : 56 VLAN Name : default...
  • Page 141 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-2,10 Dynamic router port Total Entries: 1 DES-3028P:4# show igmp_snooping group Purpose Used to display the current IGMP snooping configuration on the Switch.
  • Page 142 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast group : 224.0.0.2 MAC address : 01-00-5E-00-00-02 Reports Port Member : 2,4 VLAN Name : default Multicast group : 224.0.0.9...
  • Page 143 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config igmp snooping data_driven_learning Purpose Used to configure the data driven learning of a IGMP snooping group. Syntax [ vlan_name <vlan_name 32> |all] { aged_out [enable|disable]} Description This command is used to enable/disable the data driven learning of a IGMP snooping group.
  • Page 144 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure igmp_snooping data_driven_learning max_learned_entry: DES-3028P:4# config igmp_snooping data_driven_learning max_learned_entry 1 Command: config igmp_snooping data_driven_learning max_learned_entry 1 Success. DES-3028P:4# clear igmp snooping data_driven_group Purpose Used to delete the IGMP snooping group learned by data driven.
  • Page 145 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config igmp access_authentication ports all state enable Command: config igmp access_authentication ports all state enable Success. DES-3028P:4# show igmp access_authentication Purpose Used to display the current IGMP Access Control configuration.
  • Page 146: Dhcp Relay

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DHCP R ELAY The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1-16>...
  • Page 147 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dhcp_relay add ipif <ipaddr>  The DHCP server IP address. Restrictions Only Administrator-level users can issue this command. Example usage: To add an IP destination to the DHCP relay table: DES-3028P:4#config dhcp_relay add ipif System 10.58.44.6...
  • Page 148 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dhcp_relay option_82 state restricting the number of IP addresses that can be assigned to a single remote ID or circuit ID. Then the DHCP server echoes the option 82 field in the DHCP reply.
  • Page 149 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dhcp_relay option_82 policy Purpose Used to configure the reforwarding policy of relay agent information option 82 of the switch. Syntax config dhcp_relay option_82 policy [replace | drop | keep]...
  • Page 150 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dhcp_relay option_82 remote id Purpose Used to configure the processing of DHCP 82 remote id option for the DHCP. Syntax config dhcp_relay option_82 remote_id [default | user_define <string 32>]...
  • Page 151 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show dhcp_relay Purpose Used to display the current DHCP/BOOTP relay configuration. Syntax show dhcp_relay {ipif [System]} Description This command will display the current DHCP relay configuration for the Switch.
  • Page 152 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To enable DHCP relay: DES-3028P:4#enable dhcp_relay Command: enable dhcp_relay Success. DES-3028P:4# disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay...
  • Page 153: Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual 802.1X C OMMANDS The DES-3028/28G/28P/52/52P implements IEEE 802.1X Port-based and Host-based Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 154 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections enable 802.1x Purpose Used to enable the 802.1X server on the Switch. Syntax enable 802.1x Description The enable 802.1x command enables the 802.1X Network Access control application on the Switch.
  • Page 155 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1x auth_configuration Purpose Used to display the current configuration of the 802.1X server on the Switch. Syntax show 802.1x auth_configuration {ports <auth_portlist>} Description The show 802.1x auth_configuration command is used to display the 802.1X Port-based or Host-based Network Access control local users...
  • Page 156 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x auth_configuration ports 1 Command: show 802.1x auth_configuration ports 1 802.1X : Enabled Authentication Mode : Port_based Authentication Protocol : Radius_Eap Port number Capability : None...
  • Page 157 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x auth_state Command: show 802.1x auth_state Port Auth PAE State Backend State Port Status ------ ----------------- ----------------- ----------------- ForceAuth Success Authorized ForceAuth Success Authorized ForceAuth Success...
  • Page 158 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ForceAuth Success Authorized ForceAuth Success Authorized ForceAuth Success Authorized ForceAuth Success Authorized CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry a All config 802.1x auth_mode Purpose Used to configure the 802.1X authentication mode on the Switch.
  • Page 159 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config 802.1x auth_parameter Purpose Used to configure the 802.1X Authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1X settings.
  • Page 160 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure 802.1X authentication parameters for ports 1 – 20: DES-3028P:4#config 802.1x auth_parameter ports 1–20 direction both Command: config 802.1x auth_parameter ports 1–20 direction both Success.
  • Page 161 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config 802.1x init port_based ports all Command: config 802.1x init port_based ports Success. DES-3028P:4# config 802.1x reauth Purpose Used to configure the 802.1X re-authentication feature of the Switch.
  • Page 162 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config radius add <server_ip>  The IP address of the RADIUS server. key  Specifies that a password and encryption key will be used between the Switch and the RADIUS server.
  • Page 163 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config radius acct_port <udp_port_number 1-65535>} Description The config radius command is used to configure the Switch’s RADIUS settings. <server_index 1-3>  Assigns a number to the current set of Parameters RADIUS server settings.
  • Page 164 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show radius Purpose Used to display the current RADIUS configurations on the Switch. Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the Switch.
  • Page 165 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create 802.1x guest_vlan Trinity Command: create 802.1x guest_vlan Trinity Success. DES-3028P:4# config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1X guest VLAN. Syntax config 802.1x guest_vlan ports [<portlist>...
  • Page 166 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Setting ----------------------------------------------------------- Guest VLAN : Trinity Enable guest VLAN ports: 1-5 DES-3028P:4# delete 802.1x guest_vlan Purpose Used to delete a 802.1X Guest VLAN.
  • Page 167 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show acct_client Command: show acct_client radiusAcctClient --------------------------------------------------------------------------------- radiusAcctClientInvalidServerAddresses radiusAcctClientIdentifier D-Link radiusAuthServerEntry --------------------------------------------------------------------------------- radiusAccServerIndex radiusAccServerAddress 10.53.13.199 radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators radiusAccClientPendingRequests radiusAccClientTimeouts radiusAccClientUnknownTypes radiusAccClientPacketsDropped CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry a All...
  • Page 168 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show auth_client Command: show auth_client radiusAuthClient ---------------------------------------------------------------------------------- radiusAuthClientInvalidServerAddresses radiusAuthClientIdentifier D-Link radiusAuthServerEntry ---------------------------------------------------------------------------------- radiusAuthServerIndex radiusAuthServerAddress : 0.0.0.0 radiusAuthClientServerPortNumber radiusAuthClientRoundTripTime radiusAuthClientAccessRequests radiusAuthClientAccessRetransmissions radiusAuthClientAccessAccepts radiusAuthClientAccessRejects radiusAuthClientAccessChallenges radiusAuthClientMalformedAccessResponses radiusAuthClientBadAuthenticators radiusAuthClientPendingRequests radiusAuthClientTimeouts...
  • Page 169 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show auth_diagnostics ports 1 Command: show auth_diagnostics ports 1 Port number : 1 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated BackendResponses BackendAccessChallenges...
  • Page 170 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show auth_session_statistics ports 1 Command: show auth_session_statistics ports 1 Port number : 1 SessionOctetsRx SessionOctetsTx SessionFramesRx SessionFramesTx SessionId SessionAuthenticMethod Remote Authentication Server SessionTime SessionTerminateCause SupplicantLogoff SessionUserName Trinity...
  • Page 171 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create 802.1x user Purpose Used to create a new 802.1X user. Syntax create 802.1x user <username 15> Description The create 802.1x user command is used to create new 802.1X users.
  • Page 172 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete 802.1x user configured on the Switch. <username 15>  A username can be as many as 15 alphanumeric Parameters characters. Restrictions Only Administrator-level users can issue this command.
  • Page 173: Access Control List (Acl) Commands

    ONTROL OMMANDS The DES-3028/28G/28P/52/52P implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address. The access profile commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 174 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0-255>...
  • Page 175 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0- 0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}] profile_id <value 1-256>...
  • Page 176 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile protocol_id_mask  Specifies that the Switch will examine the protocol field in each packet and if this field contains the value entered here, apply the following rules.
  • Page 177 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile Purpose Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operational method, with the values the Switch finds in the specified frame header fields.
  • Page 178 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile ip  Specifies that the Switch will look into the IP fields in each packet. Parameters vlan <vlan_name 32>  Specifies that the access profile will apply to only this VLAN.
  • Page 179 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile implemented using the following equation – 64 value = 64kbit/sec. The user may select a value between 64- 1024000 or no limit. The default setting is no limit.
  • Page 180 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display all of the currently configured access profiles on the Switch: DES-3028P:4#show access_profile Command: show access_profile Access Profile Table ================================================================================ Profile ID: 101 Type: IPv4 Frame Filter - ICMP...
  • Page 181 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create cpu access_profile frame’s header. ip  Specifies that the switch will examine the IP address in each frame’s header. vlan  Specifies a VLAN mask. ...
  • Page 182 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# create access_profile profile_id vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code Command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code Success.
  • Page 183 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete cpu access_profile Purpose Used to delete a previously created CPU access profile. Syntax delete cpu access_profile profile_id <value 1-3> Description The delete cpu access_profile command is used to delete a previously created CPU access profile.
  • Page 184 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cpu access_profile The value is used to index the rule created. ethernet  Specifies that the Switch will look only into the layer 2 part of each packet.
  • Page 185 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cpu access_profile profile ID. Restrictions Only Administrator-level users can issue this command. Example usage: To configure CPU access list entry: DES-3028P:4#config cpu access_profile profile_id 3 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port all...
  • Page 186 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To show the CPU filtering state on the Switch: DES-3028P:4#show cpu access_profile profile_id 2 Command: show cpu access_profile profile_id 2 CPU Interface Filtering state: Disabled Access Profile Table...
  • Page 187: Time Range Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ANGE OMMANDS The Time Range commands are used in conjunction with the Access Profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the Switch.
  • Page 188 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config time_range Restrictions Only Administrator-level users can issue this command. Example usage: To configure the time range time1 to be between 6:30 a.m. and 9:40 p.m., Monday to Friday:...
  • Page 189: Safeguard Engine Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 190 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config safeguard_engine Restrictions Only Administrator-level users can issue this command. Example usage: To configure the safeguard engine for the Switch: DES-3028P:4#config safeguard_engine state enable utilization rising Command: config safeguard_engine state enable utilization rising 45 Success.
  • Page 191: Traffic Segmentation Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied.
  • Page 192 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show traffic_segmentation Restrictions The port lists for segmentation and the forward list must be on the same Switch. Example usage: To display the current traffic segmentation configuration on the Switch.
  • Page 193: Time And Sntp Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 194 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll- interval 30 Success. DES-3028P:4# show sntp Purpose Used to display the SNTP information.
  • Page 195 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#enable sntp Command: enable sntp Success. DES-3028P:4# disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp).
  • Page 196 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config time 30jun2003 16:30:30 Command: config time 30jun2003 16:30:30 Success. DES-3028P:4# config time_zone Purpose Used to determine the time zone used in order to adjust the system clock.
  • Page 197 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dst Purpose Used to enable and configure time adjustments to allow for the use of Daylight Savings Time (DST). Syntax config dst [disable | repeating {s_week <start_week 1-4,last> | s_day <start_day sun-sat>...
  • Page 198 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dst e_time  Configure the time of day to end DST.  <end_time hh:mm>  Time is expressed using a 24-hour clock, in hours and minutes.
  • Page 199 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show time Command: show time Current Time Source : System Clock Current Time : 1 Days 01:39:17 Time Zone : GMT +02:30 Daylight Saving Time: Repeating Offset in minutes...
  • Page 200: Arp Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr>...
  • Page 201 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config arpentry Restrictions Only Administrator-level users can issue this command. Example Usage: To configure a static ARP entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: DES-3028P:4#config arpentry 10.48.74.12 00-50-BA-...
  • Page 202 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config arp_aging time 30 Command: config arp_aging time 30 Success. DES-3028P:4# show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif [System] | ipaddress <ipaddr> | static} Description This command is used to display the current contents of the Switch’s ARP...
  • Page 203 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual clear arptable Purpose Used to remove all dynamic ARP table entries. Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch’s ARP table. Static ARP table entries are not affected.
  • Page 204: Routing Table Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OUTING ABLE OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr>...
  • Page 205 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete iproute default 10.53.13.254 Command: delete iproute default 10.53.13.254 Success. DES-3028P:4# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute {<network_address> | static} Description This command will display the Switch’s current IP routing table.
  • Page 206: Mac Notification Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters...
  • Page 207 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500>} Description MAC address notification is used to monitor MAC addresses learned and entered into the FDB.
  • Page 208 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings. Syntax show mac_notification Description This command is used to display the Switch’s MAC address table notification global settings.
  • Page 209 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh...
  • Page 210: Access Authentication Control Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 211 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15> method_list_name config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15>...
  • Page 212 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 213 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_policy Restrictions None. Example usage: To display the system access authentication policy: DES-3028P:4#show authen_policy Command: show authen_policy Authentication Policy: Enabled DES-3028P:4# create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for users logging on to the Switch.
  • Page 214 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_login same sequence with the following protocol listed, xtacacs. If no authentication takes place using the xtacacs list, the local account database set in the Switch is used to authenticate the user. When the local method is used, the privilege level will be dependant on the local account privilege configured on the Switch.
  • Page 215 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_login NOTE: Entering none or local as an authentication protocol will override any other authentication that follows it on a method list or on the default method list.
  • Page 216 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_login Purpose Used to display a previously configured user defined method list of authentication methods for users logging on to the Switch. Syntax show authen_login [default | method_list_name <string 15> | all]...
  • Page 217 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create authen_enable method_list_name Switch. Once a user acquires normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch, which is defined by the Administrator.
  • Page 218 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_enable  xtacacs – Adding this parameter will require the user to be authenticated using the XTACACS protocol from the remote XTACACS server hosts of the XTACACS server group list.
  • Page 219 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# Example usage: To configure the default method list with authentication methods XTACACS, TACACS+ and local, in that order: DES-3028P:4#config authen_enable default method xtacacs tacacs+ local Command: config authen_enable default method xtacacs tacacs+ local Success.
  • Page 220 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_enable  Priority – Defines which order the method list protocols will be queried for authentication when a user attempts to log on to the Switch. Priority ranges from 1(highest) to 4 (lowest).
  • Page 221 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen application Shell login method.  http – Choose this parameter to configure the web interface login method.  all – Choose this parameter to configure all applications (console, telnet, ssh, web) login method.
  • Page 222 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual HTTP default default DES-3028P:4# create authen server_host Purpose Used to create an authentication server host. Syntax create authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255>...
  • Page 223 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Success. DES-3028P:4# config authen server_host Purpose Used to configure a user-defined authentication server host. Syntax config authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255>...
  • Page 224 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout 12 retransmit 4 Command: config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout 12 retransmit 4 Success. DES-3028P:4#...
  • Page 225 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen server_host Timeout  The time in seconds the Switch will wait for the server host to reply to an authentication request. Retransmit  The value in the retransmit field denotes how many times the device will resend an authentication request when the TACACS server does not respond.
  • Page 226 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen server_group Purpose Used to configure a user-defined authentication server group. Syntax config authen server_group [tacacs | xtacacs | tacacs+ | radius | <string 15>] [add | delete] server_host <ipaddr> protocol [tacacs |...
  • Page 227 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# delete authen server_group Purpose Used to delete a user-defined authentication server group. Syntax delete authen server_group <string 15> Description This command will delete an authentication server group.
  • Page 228 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show authen server_group Command: show authen server_group Group Name IP Address Protocol ----------- ----------------------------- ------------ radius -------------------------------------------------------- tacacs -------------------------------------------------------- tacacs+ -------------------------------------------------------- xtacacs -------------------------------------------------------- Total Entries : 4...
  • Page 229 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen parameter attempt Restrictions Only Administrator-level users can issue this command. Example usage: To set the maximum number of authentication attempts at 5: DES-3028P:4#config authen parameter attempt 5 Command: config authen parameter attempt 5 Success.
  • Page 230 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable admin authentication (none). Because XTACACS and TACACS do not support the enable function, the user must create a special account on the server host which has the username “enable”, and a password configured by the administrator that will support the “enable”...
  • Page 231: Ssh Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 232 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable ssh Purpose Used to enable SSH. Syntax enable ssh Description This command allows users to enable SSH on the Switch. Parameters None. Restrictions Only Administrator-level users can issue this command.
  • Page 233 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh authmode Parameters password – This parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the Switch. publickey  This parameter may be chosen if the administrator wishes to use a publickey configuration set on a SSH server, for authentication.
  • Page 234 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh server Description This command allows users to configure the SSH server. maxsession <int 1-8>  Allows the user to set the number of users Parameters that may simultaneously access the Switch.
  • Page 235 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh user Purpose Used to configure the SSH user. Syntax config ssh user <username 15> authmode [hostbased [hostname <domain_name 32>] [hostname_IP <domain_name 32> <ipaddr>] | password | publickey]...
  • Page 236 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Current Accounts: UserName Authentication Host Name Host IP ----------- ------------------ ---------------- -------- Trinity Password DES-3028P:4# Note: To configure the SSH user, the administrator must create a user account on the Switch.
  • Page 237 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config ssh algorithm Blowfish enable Command: config ssh algorithm Blowfish enable Success. DES-3028P:4# show ssh algorithm Purpose Used to display the SSH algorithm setting. Syntax show ssh algorithm Description This command will display the current SSH algorithm setting status.
  • Page 238: Ssl Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a...
  • Page 239 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
  • Page 240 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
  • Page 241 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssl cachetimeout timeout key exchange. Specifying a longer timeout will allow the SSL session to reuse the master key on future connections with that particular host, therefore speeding up the negotiation process.
  • Page 242 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show ssl Command: show ssl SSL Status Disabled RSA_WITH_RC4_128_MD5 0x0004 Enabled RSA_WITH_3DES_EDE_CBC_SHA 0x000A Enabled DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_MD5 0x0003 Enabled DES-3028P:4# show ssl certificate Purpose Used to view the SSL certificate file status on the Switch.
  • Page 243 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#download certificate 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Command: download certificate 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Certificate Loaded Successfully! DES-3028P:4#...
  • Page 244: D-Link Single Ip Management Commands

    SIM allows intermediate devices that do not support SIM. This enables the user to manage a switch that is more than one hop away from the CS. The SIM group is a group of switches that are managed as a single entity. The DES-3028/28G/28P/52/52P may take on three different roles: Commander Switch(CS) –...
  • Page 245 CS, do not belong. The Upgrade to v1.6 To better improve SIM management, the DES-3028/28G/28P/52/52P Switches have been upgraded to version 1.6 in this release. Many improvements have been made, including: The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction.
  • Page 246 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable sim Purpose Used to enable Single IP Management (SIM) on the Switch Syntax enable sim Description This command will enable SIM globally on the Switch. SIM features and functions will not function properly unless this function is enabled.
  • Page 247 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show sim MAC Address  Displays the MAC Address of the Switch. Capabilities – Displays the type of switch, be it Layer 2 (L2) or Layer 3 (L3).
  • Page 248 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show sim candidates Command: show sim candidates MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ---------------- ----------------- ------- ---------- -------------- 00-01-02-03-04-00 DES-3028P L2 Switch 2.00.B23...
  • Page 249 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show sim group Command: show sim group SIM Group Name : default MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ----------------- ------------------- -----...
  • Page 250 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual reconfig Restrictions Only Administrator-level users can issue this command. Example usage: To connect to the MS, with member ID 2, through the CS, using the command line interface:...
  • Page 251 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [[commander {group_name <groupname 64>} | candidate] | dp_interval <sec 30-90> | hold_time <sec 100-255>}] Description This command is used to configure parameters of switches of the SIM.
  • Page 252 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To transfer the CS (commander) to be a CaS (candidate): DES-3028P:4# config sim candidate Command: config sim candidate Success. DES-3028P:4# To transfer the Switch to be a CS:...
  • Page 253 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command: download sim_ms firmware_from_tftp 10.53.13.94 c:/des3028.had all This device is updating firmware. Please wait several minutes... Download Status : MAC Address Result ----------------- ---------------- 00-36-28-10-35-00 Success DES-3028P:4#...
  • Page 254 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# upload sim_ms configuration_to_tftp 10.55.47.1 D:\configuration.txt 1 Command: upload sim_ms configuration 10.55.47.1 D:\configuration.txt 1 This device is upload configuration. Please wait several minutes ... Upload Status :...
  • Page 255: Smtp Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
  • Page 256 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual The SMTP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable smtp disable smtp config smtp {server <ipaddr>...
  • Page 257 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client. Syntax config smtp {server <ipaddr> | server_port <tcp_port_number 1-65535> | self_mail_addr <mail_addr 64> | [add mail_receiver <mail_addr 64>...
  • Page 258 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028:4#show smtp Command: show smtp smtp status: Enabled smtp server address : 166.99.66.33 smtp server port : 25 self mail address: smtp@30XX.dev Index Mail Receiver Address -------- --------------------------------- darren_tremblett@nhl.com...
  • Page 259: Poe Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMANDS DES-3028P and the DES-3052P support Power over Ethernet (PoE) as defined by the IEEE 802.3af specification. Ports 1-24/1-48 supply 48 VDC power to PDs over Category 5 or Category 3 UTP Ethernet cables. The DES-3028P and the DES-3052P follow the standard PSE pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6.
  • Page 260 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config poe system deny_low_priority_port} Description Allows the user to configure the parameters for the whole PoE system. power_limit  The power limit parameter allows the user to Parameters configure the power budget of whole PoE system.
  • Page 261 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config poe ports priority if the power disconnect method is set to deny_ low_priority_port. critical – Specifying this parameter will nominate these ports has having the highest priority for all configured PoE ports.
  • Page 262 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show poe system Parameters system – Choosing this parameter will display the system settings for PoE, such as switch power limit, consumption, remaining useable power and the power disconnection method.
  • Page 263 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show poe ports Command: show poe ports Port State Priority Power Limit(mW) Class Power(mW) Voltage(decivolt) Current(mA) Status ============================================================== Enabled 15400(User Defined) : Interim state during line detection...
  • Page 264: Cable Diagnostics Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ABLE IAGNOSTICS OMMANDS The Cable Diagnostics commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports [<portlist>| all]...
  • Page 265: Dhcp Local Relay Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DHCP L OCAL ELAY OMMANDS The DHCP Local Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 266 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To enable DHCP local relay function: DES-3028P:4#enable dhcp_local_relay Command: enable dhcp_local_relay Success. DES-3028P:4# disable dhcp_local_relay Purpose Used to disable the DHCP local relay function on the switch.
  • Page 267: Gratuitous Arp Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ARP C RATUITOUS OMMANDS The Gratuitous ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters...
  • Page 268 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config gratuitous_arp send duplicate_ip_detected enabled. For this command, the duplicate IP detected means that the system has received an ARP request packet that was sent by an IP address that matched the system’s own IP address.
  • Page 269 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config gratuitous_arp periodical_send Purpose Used to configure the interval for periodical sending of gratuitous ARP request packets. Syntax config gratuitous_arp send periodically ipif <ipif_name 12> interval <value 0-65535>...
  • Page 270 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable gratuitous_arp trap and log Restrictions Only Administrator-level users can issue this command. Example usage: To disable the System’s interface gratuitous ARP log and trap: DES-3028P:4#disable gratuitous_arp System trap log Command: disable gratuitous_arp System trap log Success.
  • Page 271: Vlan Trunking Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual VLAN T RUNKING OMMANDS The VLAN Trunking commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters...
  • Page 272 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config vlan_trunk Purpose Used to configure a port as a VLAN trunk port. Syntax config vlan_trunk ports [<portlist>|all] | state [enable|disable] Description This command is used to configure a port as a VLAN trunk port. By default, none of the ports on the Switch are VLAN trunk ports.
  • Page 273 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure a VLAN Trunk port if Port 6 is LA-1 member port; port 7 is LA-2 master port. DES-3028P:4# config vlan_trunk ports 6-7 state enable Command: config vlan_trunk ports 6-7 state enable Can not operate the member ports of any trunk.
  • Page 274 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display VLAN Trunk information: DES-3028P:4#show vlan_trunk Command: show vlan_trunk VLAN Trunk :Enable VLAN Trunk Port :1-5,7 DES-3028P:4#...
  • Page 275: Qinq Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMANDS The QinQ commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable qinq disable qinq...
  • Page 276 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable qinq Restrictions Only Administrator-level users can issue this command. Example usage: To disable QinQ: DES-3028P:4#disable qinq Command: disable qinq Success. DES-3028P:4# show qinq Purpose Used to show global qinq...
  • Page 277 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure port list 1-4 as NNI port, set outer TPID to 0x88a8: DES-3028P:4# config qinq ports 1-4 role nni tpid 0x88a8 Command: config qinq ports 1-4 role nni tpid 0x88a8 Success.
  • Page 278: Asymmetric Vlan Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual VLAN C SYMMETRIC OMMANDS The asymmetric VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters...
  • Page 279 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show asymmetric_vlan Purpose Used to view the asymmetric VLAN state on the Switch. Syntax show asymmetric_vlan Description This command displays the asymmetric VLAN state on the Switch Parameters None.
  • Page 280: Mld Snooping Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual MLD S NOOPING OMMANDS The MLD Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mld_snooping [ vlan <vlan_name 32>...
  • Page 281 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config mld_snooping the chosen VLAN. fast_done  enable or disable MLD snooping fast_done function.If enable, the membership is immediately removed when the system receives the MLD done message.
  • Page 282 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config mld_snooping mrouter_ports_forbidden Purpose Used to configure ports as forbidden router ports. Syntax config mld_snooping mrouter_ports_forbidden [<vlan_name 32> | vlanid <vlanid >] [add|delete] <portlist> Description The config mld_snooping mrouter_ports_forbidden command allows you to designate a range of ports as being not connected to multicast-enabled routers.
  • Page 283 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable mld_snooping Purpose Used to disable MLD snooping on the switch. Syntax disable mld_snooping Description The disable mld_snooping command disables MLD snooping on the switch. Disabling MLD snooping allows all MLD and IPv6 multicast traffic to flood within a given IPv6 interface by default.
  • Page 284 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show mld_snooping Command: show mld_snooping MLD Snooping Global State : Disabled Multicast router Only : Disabled VLAN Name : default Query Interval : 125 Max Response Time...
  • Page 285 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To show MLD snooping group: DES-3028P:4#show mld_snooping group Command: show mld_snooping group Source/Group 2000::100:10:10:5/FF0E::100:0:0:20 VLAN Name/VID default/1 Member Ports Filter Mode INCLUDE Source/Group 2000::100:10:10:5/FF0E::100:0:0:20 VLAN Name/VID default/1...
  • Page 286 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show mld_snooping mrouter_ports Command: show mld_snooping mrouter_ports VLAN Name : default Static mrouter port : 1-10 Dynamic mrouter port Forbidden mrouter port VLAN Name : vlan2...
  • Page 287: Igmp Snooping Multicast Vlan Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IGMP S VLAN C NOOPING ULTICAST OMMANDS The IGMP Snooping Multicast VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 288 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To create IGMP snoop multicast VLAN mv12: DES-3028P:4# create igmp_snoop multicast_vlan mv1 2 Command: create igmp_snoop multicast_vlan mv1 2 Success. DES-3028P:4# config igmp_snooping multicast_vlan Purpose Used to configure the parameter of the specific multicast VLAN.
  • Page 289 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config igmp_snooping multicast_vlan_group Purpose Used to configure the multicast group which will be learned with the specific multicast VLAN. Syntax <vlan_name 32> [ add <mcast_address_list> | delete [<mcast_address_list>...
  • Page 290 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show multicast_vlan_group v1 Command: show multicast_vlan_group v1 VLAN Name VLAN ID From ----------- --------- ---------- --------- 224.19.62.34 224.19.162.200 DES-3028P:4# delete igmp_snooping multicast_vlan Purpose Used to delete a multicast VLAN.
  • Page 291 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable igmp_snooping multicast_vlan Purpose Used to disable the multicast VLAN function. Syntax disable igmp_snooping multicast_vlan Description This command controls the multicast VLAN function. The ISM VLAN will take effect when igmp snooping multicast vlan is enabled. By default, the multicast VLAN is in a disabled state.
  • Page 292: Limited Ip Multicast Address Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IP M IMITED ULTICAST DDRESS OMMANDS The Limited IP Multicast Address command allows the administrator to permit or deny access to a port or range of ports by specifying a range of multicast addresses.
  • Page 293 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config mcast_filter_profile Purpose This command configures a multicast addresses profile. Syntax config mcast_filter_profile [profile_id < value 1-24>| profile_name <name> ] { profile_name <name> | [add | delete ] <mcast_address_list>}...
  • Page 294 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete mcast_filter_profile Description This command deletes a multicast address profile. profile_name  Name of the profile. Parameters Restrictions Only Administrator-level users can issue this command. Example usage:...
  • Page 295 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config limited_multicast_addr ports Purpose Used to configure the multicast address filtering function on a port. Syntax config limited_multicast_addr ports <portlist> {[add | delete ] [profile_id <value 1-24> | profile_name <name 1-32> ] } Description Used to configure the multicast address filtering function on a port.
  • Page 296 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Port: 3 Profile Id: DES-3028P:4# config max_mcast_group Purpose This command configures the maximum number of multicast groups that a port can join. Syntax config max_mcast_group <portlist> max_group <value 1-256>...
  • Page 297: Lldp Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual LLDP C OMMANDS The LLDP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable lldp...
  • Page 298 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections. enable lldp Purpose Used to enable LLDP operations on the switch. Syntax enable lldp Description This is a global control for the LLDP function.
  • Page 299 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config lldp message_tx_interval transmissions of LLDP advertisements on any given port. The range is from 5 to 32768 seconds. The default setting is 30 seconds. Restrictions Only Administrator-level users can issue this command.
  • Page 300 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To configure the delay-interval interval: DES-3028P:4# config lldp tx_delay 8 Command: config lldp tx_delay 8 Success. DES-3028P:4# config lldp reinit_delay Purpose Change the minimum time of reinitialization delay interval.
  • Page 301 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To change the notification interval: DES-3028P:4# config lldp notification_interval 10 Command: config lldp notification_interval 10 Success. DES-3028P:4# config lldp ports notification Purpose Used to configure each port for sending notifications to configured SNMP trap receiver(s).
  • Page 302 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config lldp admin_status LLDP packets. disable: Disable LLDP packet transmit and receive on the specified port(s). The default per port state is tx_and_rx. Restrictions Only Administrator-level users can issue this command.
  • Page 303 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config lldp basic_tlvs Description An active LLDP port on the switch always includes the mandatory data in its outbound advertisements. And there are four optional data that can be configured for an individual port or group of ports to exclude one or more of these data types from outbound LLDP advertisements.
  • Page 304 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To configure the vlan name TLV from the outbound LLDP advertisements for all ports: DES-3028P:4# config lldp ports all dot1_tlv_pvid enable Command: config lldp ports all dot1_tlv_pvid enable Success.
  • Page 305 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config lldp dot1_tlv_protocol_identity and it is enabled to be advertised, then this protocol identity will be advertised. <portlist>  Specified a range of ports to be configured.
  • Page 306 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config lldp dot3_tlvs disable . Restrictions Only Administrator-level users can issue this command. Example usage To configure the MAC/PHY configuration/status TLV from the outbound LLDP advertisements for all ports:...
  • Page 307 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display the LLDP system level configuration status: DES-3028P:4# show lldp Command: show lldp LLDP system information Chassis Id Subtype : MACADDRESS Chassis Id : 00-15-E9-41-5A-A7...
  • Page 308 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show lldp ports Purpose Display the LLDP per port configuration for advertisement options. Syntax show lldp ports {<portlist> } Description This command displays LLDP port configuration advertisement options.
  • Page 309 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show lldp local_ports Restrictions None. Example usage To display outbound LLDP advertisements for individual ports in detail: DES-3028P:4# show lldp local_ports 1 mode detailed Command: show lldp local_ports 1 mode detailed...
  • Page 310 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show lldp local_ports 1 mode normal Command: show lldp local_ports 1 mode normal Port ID : 1: ---------------------------------------------------------- Port Id Subtype : LOCAL Port Id : 1/1...
  • Page 311 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display remote table entries in brief mode: DES-3028P:4# show lldp remote_ports 1-2 mode brief Command: show lldp remote_ports 1-2 mode brief Port ID: 1...
  • Page 312 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show lldp remote_ports ports 1 mode normal Command: show lldp remote_ports ports 1 mode normal Port ID : 1 ----------------------------------------------------------- Remote Entities Count : 2 Entity 1...
  • Page 313 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show lldp remote_ports 1 mode detailed Command: show lldp remote_ports 1 mode detailed Port ID : 1 ---------------------------------------------------------------------- Remote Entities count : 1 Entity 1 Chassis Id Subtype...
  • Page 314 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Aggregation status : not currently in aggregation Aggregation port ID Maximum Frame Size : 1536 Unknown TLVs count (None.) DES-3028P:4# show lldp statistics Purpose Used to display the system LLDP statistics information.
  • Page 315 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display statistics information of port 1: DES-3028P:4# show lldp statistics ports 1 Command: show lldp statistics ports 1 Port ID: 1 ----------------------------------------------------------- lldpStatsTxPortFramesTotal : 27...
  • Page 316: Dos Prevention Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual REVENTION OMMANDS The DoS Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dos_prevention...
  • Page 317 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dos_prevention dos_type priority – change packet priority by the switch from 0 – 7 If the priority is not specified, the original priority will be used.
  • Page 318 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To disable dos_prevention trap_log : DES-3028P:4# disable dos_prevention trap_log Command: disable dos_prevention trap_log Success. DES-3028P:4# show dos_prevention Purpose Used to display DoS prevention information. Syntax...
  • Page 319 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display DoS prevention information: DES-3028P:4# show dos_prevention Command: show dos_prevention Trap/Log : Enabled DoS Type State Action Frame Counts Land Attack Disabled Drop Blat Attack...
  • Page 320 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual clear dos_prevention counters Description This command clears the counters of the prevention of each DoS attack. dos  The type of DoS attack. Possible values are as follows: Parameters ...
  • Page 321: Ip-Mac-Port Binding Commands

    The maximum number of IP-MAC binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the device. For the DES-3028/28P/28G/52/52P series, the maximum number of IP-MAC-PORT Binding ARP mode is 500.
  • Page 322 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters ports config address_binding [<portlist> | all] limit [<value 1-10> | no_limit] dhcp_snoop max_entry ports Each command is listed, in detail, in the following sections. create address_binding ip_mac ipaddress Purpose Used to create an IP-MAC Binding entry.
  • Page 323 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure address binding on the Switch: DES-3028P:4#config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00-00- Command: config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00-00- Success. DES-3028P:4# config address_binding ip_mac ports Purpose Used to configure an IP-MAC state to enable or disable for specified ports.
  • Page 324 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config address_binding ip_mac ports Syntax config address_binding ip_mac ports [<portlist> | all] allow_zeroip [enable|disable] Description This command will configure IP-MAC state to enable or disable for specified ports.
  • Page 325 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config address_binding ip_mac ports forward_dhcppkt enable Command: config address_binding ip_mac ports forward_dhcppkt enable Success. DES-3028P:4# show address_binding Purpose Used to display IP-MAC Binding entries. Syntax [ip_mac {[all | ipaddress <ipaddr> mac_address <macaddr>]} | blocked {[all | vlan_name <vlan_name>...
  • Page 326 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show address_binding ip_mac all Command: show address_binding ip_mac all IP Address MAC Address Mode Ports --------------- ----------------- ---- -------------------- 10.1.1.1 00-00-00-00-00-22 1-28 Total Entries: 1 DES-3028P:4# delete address_binding Purpose Used to delete IP-MAC Binding entries.
  • Page 327 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete address-binding ip-mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-06 Command: delete address-binding ip-mac ipaddress 10.1.1.1 mac_address 00- 00-00-00-00-06 Success. DES-3028P:4# enable address_binding trap_log Purpose Used to enable the trap log for the IP-MAC binding function.
  • Page 328 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#disable address_binding trap_log Command: disable address_binding trap_log Success. DES-3028P:4# show address_binding dhcp_snoop Purpose To show address_binding entries created by DHCP packet. Syntax show address_binding dhcp_snoop {[max_entry {ports <portlist>} | binding_entry {port <port>}]}...
  • Page 329 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show address_binding dhcp_snoop max_entry Command: show address_binding dhcp_snoop max_entry Port Max entry ---- --------- DES-3028P:4# enable address_binding dhcp_snoop Purpose Used to enable address_binding dhcp_snoop. Syntax enable address_binding dhcp_snoop...
  • Page 330 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To enable address_binding dhcp_snoop: DES-3028P:4# enable address_binding dhcp_snoop Command: enable address_binding dhcp_snoop Success. DES-3028P:4# disable address_binding dhcp_snoop Purpose Used to disable address_binding dhcp_snoop. Syntax disable address_binding dhcp_snoop.
  • Page 331 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To address_binding dhcp_snoop binding_entry: DES-3028P:4# clear address_binding dhcp_snoop binding_entry ports 1-3 Command: clear address_binding dhcp_snoop binding_entry ports Success. DES-3028P:4# config address_binding dhcp_snoop max_entry Purpose Specifies the max number of entries which can be learned by the specified ports.
  • Page 332: Loopback Detection Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OOPBACK ETECTION OMMANDS The Loopback Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config loopdetect {recover_timer [value 0| <value 60-1000000>] | interval <1-...
  • Page 333 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config loopdetect ports Purpose Used to configure loopback detection on the switch. Syntax config loopdetect ports [<portlist> | all] | state [enable | disable] Description Used to configure loopback detection on the switch.
  • Page 334 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#disable loopdetect Command: disable loopdetect Success DES-3028P:4# show loopdetect Purpose Used to display the current loopback detection settings on the switch. Syntax show loopdetect Description Used to display the current loopback detection settings on the switch Parameters None.
  • Page 335 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show loopdetect ports 1-3 Command: show loopdetect ports 1-3 Port Loopdetect State Loop Status ------ ------------------ ---------- Enabled Normal Enabled Normal Enabled Normal CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh...
  • Page 336: Technical Support Commands

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ECHNICAL UPPORT OMMANDS The Technical Support commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show tech_support upload <ipaddr>...
  • Page 337 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display technical support information on the Switch: DES-3028P:4# show tech_support Command: show tech_support [Device Information 3049620ms] Device Type : DES-3028G Fast Ethernet Switch MAC Address...
  • Page 338 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual 00-03-09-18-10-01 Dynamic 00-04-00-00-00-00 Dynamic 00-05-5D-04-D6-A4 Dynamic Total Entries : 264 DES-3028P:4# upload tech_support_to_TFTP Purpose Used to upload the information of technical support. Syntax upload tech_support_to_TFTP <ipaddr> <path_filename>...
  • Page 339: Command History List

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMAND ISTORY The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config command_history <value 1-40>...
  • Page 340 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display all of the commands in the CLI: DES-3028P:4#? cable_diag ports clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear counters clear dos_prevention counters...
  • Page 341 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Parameters None. Restrictions None. Example usage: To display all commands: DES-3028P:4#dir clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode...
  • Page 342 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# show command_history Purpose Used to display the command history. Syntax show command_history Description This command will display the command history. Parameters None. Restrictions None. Example usage...
  • Page 343: Technical Specifications

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Appendix A ECHNICAL PECIFICATIONS General IEEE 802.3 10BASE-T Ethernet Protocols IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D/s/w Spanning Tree IEEE 802.1Q VLAN...
  • Page 344 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Physical and Environmental Input: DES-3028/DES-3052/DES-3028G - 100~240V, AC/0.5A, 50~60Hz Internal Power Supply DES-3052P - 100~240V, AC/5A, 50~60Hz DES-3028P - 100~240V, AC/2.9A, 50~60Hz Output: DES-3028/DES-3052/DES-3028G: 12V, 3.3A (Max) DES-3028P: 12V, 3.3A/50V, 3.7A (Max)
  • Page 345 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Forwarding Table Age Max age: 10-1000000 seconds. Default = 300. Time PoE Features DES-3028P:Random 12 ports PoE Capable Ports DES-3052P:Random 24 ports Max 15.4W per port DES-3028P: Per port 15.4W (Default),...
  • Page 346 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual LED Indicators Location LED Indicative Color Status Description Solid Light Power On Power Green Light off Power Off Per Device Solid Light Console on Console Green Blinking POST is in progress/ POST is failure.
  • Page 347 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Light off No link Power Feature Detailed Description Internal Power Supply AC Input: 100 - 240 VAC, 50-60 Hz Performance Feature Detailed Description Wire speed on all FE/GE ports...
  • Page 348 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DEM-314GT (1000BASE-LH) DEM-315GT (1000BASE-ZX) DEM-210 (Single Mode 100BASE-FX) DEM-211 (Multi Mode 100BASE-FX) -WDM Transceiver Supported: 1.DEM-330T (TX-1550/RX-1310nm),up to 10km,Single-Mode 2.DEM-330R (TX-1310/RX-1550nm), up to 10km,Single-Mode 3.DEM-331T (TX-1550/RX-1310nm), up to 40km, Single-Mode 4.DEM-331R (TX-1310/RX-1550nm), up to 40km, Single-Mode...
  • Page 349: Arp Packet Content Acl

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Appendix B ARP P ACKET ONTENT Address Resolution Protocol (ARP) is the standard method for finding a host's hardware address (MAC address) when only its IP address is known. This protocol is vulnerable so hackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing).
  • Page 350 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Forwarding Table Port1 00-20-5C-01-11-11 In addition, when the switch receives the broadcasted ARP request, it will flood the frame to all ports except the source port, port 1 (see Figure –...
  • Page 351 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual When PC B replies to the query, “Destination Address” in the Ethernet frame it will change to PC A’s MAC address. The “Source Address” will be changed to PC B’s MAC address (see Table – 4).
  • Page 352: Dns Server

    DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual How ARP spoofing attacks a network ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogether (known as a Denial of Service - DoS attack).
  • Page 353 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Gratuitous ARP Ethernet Header Destination Source address Ethernet H/W type Protocol Protocol Operation Sender H/W Sender Target H/W Target address type type address address address protocol address...
  • Page 354 Configuration: The design of the Packet Content ACL on the DES-3028/28P/28G/52/52P series can inspect any specified content in the first 20 bytes of an ARP packet (up to 80 bytes in total at one time). It utilizes offsets to match individual fields in the Ethernet Frame. An offset contains 16 bytes and the switch supports 5 offsets with each offset being divided into a four 4-byte values in a HEX format.
  • Page 355 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Figure – 6...
  • Page 356 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Description – create access_profile ethernet source_mac FF-FF-FF-FF- Create access profile 1 Step 1 FF-FF ethernet_type profile_id 1 To match Ethernet Type Source MAC address. – config access_profile profile_id 1 add access_id 1 ethernet Configure access profile 1 –...
  • Page 357: Password Recovery Proceedure

    This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords. Complete these steps to reset the password: For security reasons, the Password Recovery feature requires the user to physically access the device.
  • Page 358 DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters {<username>} user. If a username is not specified, the password of all users will be reset. show account The show account command displays all previously created...

This manual is also suitable for:

Des-3052Des-3052pDes-3028pDes-3028g

Table of Contents