D-Link DES-3010F Command Line Interface Manual

Managed 8/16/24-port 10/100mbps n-way fast ethernet switch
Hide thumbs Also See for DES-3010F:

Advertisement

DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026
Managed 8/16/24-port 10/100Mbps N-Way Fast Ethernet Switch
Command Line Interface Reference Manual
Fourth Edition (May 2007)
651ES3026045G
Printed In Taiwan
RECYCLABLE

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DES-3010F

  • Page 1 DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 Managed 8/16/24-port 10/100Mbps N-Way Fast Ethernet Switch Command Line Interface Reference Manual Fourth Edition (May 2007) 651ES3026045G Printed In Taiwan RECYCLABLE...
  • Page 2: Table Of Contents

    CPU ACL Filtering Commands ..............................130 Port Security Commands................................138 802.1X Commands..................................142 Time and SNTP Commands................................. 160 Routing Table Commands................................166 ARP Commands................................... 168 D-Link Single IP Management Commands ..........................170 Command History List ................................. 180 Technical Specifications ................................183...
  • Page 3: Introduction

    DES-3000 Series Layer 2 Switch CLI Reference Manual NTRODUCTION This document is a reference guide for all DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 switches. Throughout this manual, the DES-3026 Switch will be the Switch referred to for all examples and configuration information. All DES- 3010F/DES-3010FL /DES-3010G/DES-3018/DES-3026 switches contain the same information and posses the same configuration capabilities.
  • Page 4 DES-3000 Series Layer 2 Switch CLI Reference Manual Setting the Switch’s IP Address Each switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. The default Switch IP address can be changed to meet the specification of your networking address scheme.
  • Page 5 DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 1-3. Assigning an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.33 with a subnet mask of 255.0.0.0 (8 in CIDR from). The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
  • Page 6: Using The Console Cli

    DES-3000 Series Layer 2 Switch CLI Reference Manual SING THE ONSOLE The DES-3026 supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 7 DES-3000 Series Layer 2 Switch CLI Reference Manual Commands are entered at the command prompt, DES-3026:4#. There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands.
  • Page 8 DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 2-4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous command (config account) at the command prompt.
  • Page 9 DES-3000 Series Layer 2 Switch CLI Reference Manual Figure 2-6. Next possible completions: show command In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts configured on the Switch.
  • Page 10: Command Syntax

    DES-3000 Series Layer 2 Switch CLI Reference Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. Note: All commands are case-sensitive.
  • Page 11 DES-3000 Series Layer 2 Switch CLI Reference Manual {braces} Purpose Encloses an optional value or set of optional arguments. Syntax reset {[config | system]} Description In the above syntax example, you have the option to specify config or system. It is not necessary to specify either optional value, however the effect of the system reset is dependent on which, if any, value is specified.
  • Page 12: Basic Switch Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual ASIC WITCH OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create account [admin | user] <username 15> config account <username>...
  • Page 13 Success. DES-3026:4# NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue. config account Purpose Used to configure user accounts.
  • Page 14 DES-3000 Series Layer 2 Switch CLI Reference Manual show account Purpose Used to display user accounts. Syntax show account Description Displays all user accounts created on the Switch. Up to 8 user accounts can exist on the Switch at one time. Parameters None.
  • Page 15 DES-3000 Series Layer 2 Switch CLI Reference Manual show session Restrictions None. Example usage: To display the way that the users logged in: DES-3026:4#show session Command: show session ID Login Time Live Time From Level Name -- --------------------------- --------------- -------------- ------- ------------------- *8 2204/01/26 3:36:27 0:0:20.260 Serial Port 4 Anonymous...
  • Page 16 DES-3000 Series Layer 2 Switch CLI Reference Manual show config Purpose Used to display a list of configuration commands entered into the Switch. Syntax show config [current_config | config_in_nvram] Description This command displays a list of configuration commands entered into the Switch. Parameters current_config –...
  • Page 17 DES-3000 Series Layer 2 Switch CLI Reference Manual config serial_port Purpose Used to configure the serial port. Syntax config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes | 15_minutes]} Description This command is used to configure the serial port’s baud rate and auto logout settings.
  • Page 18 DES-3000 Series Layer 2 Switch CLI Reference Manual To enable pausing of the screen display when the show command output reaches the end of the page: DES-3026:4#enable clipaging Command: enable clipaging Success. DES-3026:4# disable clipaging Purpose Used to disable the pausing of the console screen scrolling at the end of each page when the command displays more than one screen of information.
  • Page 19 DES-3000 Series Layer 2 Switch CLI Reference Manual disable telnet Purpose Used to disable the Telnet protocol on the Switch. Syntax disable telnet Description This command is used to disable the Telnet protocol on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To disable the Telnet protocol on the Switch: DES-3026:4#disable telnet...
  • Page 20 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable web Command: disable web Success. DES-3026:4# save Purpose Used to save changes in the Switch’s configuration to non-volatile RAM. Syntax save {config | log | all } Description This command is used to enter the current switch configuration into non-volatile RAM.
  • Page 21 DES-3000 Series Layer 2 Switch CLI Reference Manual reset Purpose Used to reset the Switch to the factory default settings. Syntax reset {[config | system]} {force_agree} Description This command is used to restore the Switch’s configuration to the default settings assigned from the factory. Parameters config −...
  • Page 22 DES-3000 Series Layer 2 Switch CLI Reference Manual logout Purpose Used to log out a user from the Switch’s console. Syntax logout Description This command terminates the current user’s session on the Switch’s console. Parameters None. Restrictions None. Example usage: To terminate the current user’s console session: DES-3026:4#logout ping...
  • Page 23 DES-3000 Series Layer 2 Switch CLI Reference Manual config terminal_line Purpose Used to configure the number of terminal lines produced from the command line interface. Syntax config terminal_line [default | <value 20-80>] Description This command is used to set the number of lines that will be produced by the command line interface of the switch.
  • Page 24: Switch Port Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual WITCH OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports config ports [<portlist> | all] {speed [auto | 10_half | 10_full | 100_half | 100_full | {1000_full {[master | slave]}}] | flow_control [enable | disable] | state [enable | disable] | description [<desc 1- 128>...
  • Page 25 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure the speed of ports 1-3 to be 10 Mbps, full duplex and state enabled: DES-3026:4#config ports 1-3 speed 10_full state enable Command: config ports 1-3 speed 10_full state enable Success.
  • Page 26 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show ports 1 description Command: show ports 1 description Port Port Settings Connection Address State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning ------ -------- --------------------- --------------------- -------- Enabled Auto/Enabled Link Down Enabled Description: Accounting CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh Example usage: To display error ports: DES-3026:4#show ports err_disabled...
  • Page 27: Network Management (Snmp) Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual (SNMP) C ETWORK ANAGEMENT OMMANDS The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. The DES-3026 supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The user may specify which version of the SNMP to use to monitor and control the Switch.
  • Page 28 DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters create snmp host <ipaddr> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] <auth_string 32> delete snmp host <ipaddr> show snmp host {<ipaddr>} enable rmon disable rmon create trusted_host [<ipaddr>...
  • Page 29 DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp user specifying the key in hex form below. This method is not recommended. auth - The user may also choose the type of authentication algorithms used to authenticate the snmp user. The choices are: •...
  • Page 30 DES-3000 Series Layer 2 Switch CLI Reference Manual delete snmp user Purpose Used to remove an SNMP user from an SNMP group and also to delete the associated SNMP group. Syntax delete snmp user <SNMP_name 32> Description The delete snmp user command removes an SNMP user from its SNMP group and then deletes the associated SNMP group.
  • Page 31 DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp view Parameters <view_name 32> − An alphanumeric string of up to 32 characters that identifies the SNMP view that will be created. <oid> − The object ID that identifies an object tree (MIB tree) that will be included or excluded from access by an SNMP manager.
  • Page 32 DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp view created on the Switch. <view_name 32> − An alphanumeric string of up to 32 characters Parameters that identifies the SNMP view that will be displayed. Restrictions None. Example usage: To display SNMP view configuration: DES-3026:4#show snmp view Command: show snmp view...
  • Page 33 DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp community is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. read_only − Specifies that SNMP community members using the community string created with this command can only read the contents of the MIBs on the Switch.
  • Page 34 DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp community SNMP managers access to MIB objects in the Switch’s SNMP agent. Restrictions None. Example usage: To display the currently entered SNMP community strings: DES-3026:4#show snmp community Command: show snmp community SNMP Community Table Community Name View Name...
  • Page 35 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To display the current name of the SNMP engine on the Switch: DES-3026:4#show snmp engineID Command: show snmp engineID SNMP Engine ID : 0035636666 DES-3026:4# create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views.
  • Page 36 DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp group request SNMP messages. <view_name 32> − An alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. write_view –...
  • Page 37 DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp groups Purpose Used to display the group-names of SNMP groups currently configured on the Switch. The security model, level, and status of each group are also displayed. Syntax show snmp groups Description The show snmp groups command displays the group-names of SNMP groups currently configured on the Switch.
  • Page 38 DES-3000 Series Layer 2 Switch CLI Reference Manual Group Name : ReadGroup ReadView Name : CommunityView WriteView Name Notify View Name : CommunityView Security Model : SNMPv1 Security Level : NoAuthNoPriv Group Name : ReadGroup ReadView Name : CommunityView WriteView Name Notify View Name : CommunityView Security Model : SNMPv2...
  • Page 39 DES-3000 Series Layer 2 Switch CLI Reference Manual create snmp host Authentication − determines if an SNMP message is from a valid source. Encryption − scrambles the contents of messages to prevent it being viewed by an unauthorized source. noauth_nopriv − Specifies that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager.
  • Page 40 DES-3000 Series Layer 2 Switch CLI Reference Manual show snmp host Purpose Used to display the recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax show snmp host {<ipaddr>} Description The show snmp host command is used to display the IP addresses and configuration information of remote SNMP managers that are designated as recipients of SNMP traps that are generated by the Switch’s SNMP agent.
  • Page 41 DES-3000 Series Layer 2 Switch CLI Reference Manual disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
  • Page 42 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create trusted_host network 11.0.0.0/8 Command: create trusted_host network 11.0.0.0/8 Success. DES-3026:4# show trusted_host Purpose Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above. Syntax show trusted_host Description...
  • Page 43 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete trusted_host 10.48.74.121 Command: delete trusted_host 10.48.74.121 Success. DES-3026:4# enable snmp traps Purpose Used to enable SNMP trap support. Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the Switch.
  • Page 44 DES-3000 Series Layer 2 Switch CLI Reference Manual enable snmp authenticate trap Description This command is used to enable SNMP authentication trap support on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example Usage: To turn on SNMP authentication trap support: DES-3026:4#enable snmp authenticate trap Command: enable snmp authenticate trap Success.
  • Page 45 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show snmp traps Command: show snmp traps SNMP Trap : Enabled Authenticate Traps : Enabled DES-3026:4# config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch.
  • Page 46 DES-3000 Series Layer 2 Switch CLI Reference Manual config snmp system_name Purpose Used to configure the name for the Switch. Syntax config snmp system_name {<sw_name>} Description The config snmp system_name command configures the name of the Switch. Parameters <sw_name> - A maximum of 255 characters is allowed. A NULL string is accepted if no name is desired.
  • Page 47: Smtp Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
  • Page 48 DES-3000 Series Layer 2 Switch CLI Reference Manual • The maximum attempts for delivering mail to recipients is three. Mail message delivery attempts will be tried every five minutes until the maximum number of attempts is reached. Once reached and the message has not been successfully delivered, the message will be dropped and not received by the mail recipient.
  • Page 49 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable smtp Command: disable smtp Success. DES-3026:4# config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client. Syntax config smtp {server <ipaddr> | server_port <tcp_port_number 1- 65535>...
  • Page 50 DES-3000 Series Layer 2 Switch CLI Reference Manual show smtp Purpose Used to view configured parameters for the SMTP function on the Switch. Syntax show smtp Description This command will display parameters configured for SMTP on the Switch, including server information, mail recipients and the current running status of SMTP on the Switch.
  • Page 51 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4# smtp send_testmsg Command: smtp send_testmsg Subject: This is a SMTP test. Content: Hello everybody!! Sending mail, please wait… Success. DES-3026:4#...
  • Page 52: Download/Upload Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual OWNLOAD PLOAD OMMANDS The download/upload commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware <ipaddr> <path_filename 64> | configuration <ipaddr> <path_filename 64>...
  • Page 53 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#download configuration 10.48.74.121 c:\cfg\setting.txt Command: download configuration 10.48.74.121 c:\cfg\setting.txt Connecting to server....Done. Download configuration..... Done. DES-3026:4# upload Purpose Used to upload the current switch settings or the Switch history log to a TFTP server. Syntax upload [configuration | log] <ipaddr>...
  • Page 54 DES-3000 Series Layer 2 Switch CLI Reference Manual enable autoconfig Purpose Used to activate the autoconfiguration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 55 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026 Fast Ethernet Switch Command Line Interface Firmware: Build 2.00.016 Copyright(C) 2004-2007 D-Link Corporation. All rights reserved. UserName: Password: DES-3026:4# DES-3026:4##ROUTE DES-3026:4# DES-3026:4# DES-3026:4#create iproute default 172.18.212.253 Command: create iproute default 172.18.212.253 Success.
  • Page 56 DES-3000 Series Layer 2 Switch CLI Reference Manual show autoconfig Purpose Used to display the current autoconfig status of the Switch. Syntax show autoconfig Description This will list the current status of the autoconfiguration function. Parameters None. Restrictions None. Example usage: To show the autoconfig configuration set on the Switch: DES-3026:4#show autoconfig Command: show autoconfig...
  • Page 57: Network Monitoring Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist> show error ports <portlist>...
  • Page 58 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show packet ports 7 Command: show packet ports 7 Port number : 7 Frame Size Frame Counts Frames/sec Frame Type Total Total/sec ------------ ------------ ---------- ---------- ------- --------- 3275 RX Bytes 408973 1657 65-127 RX Frames...
  • Page 59 DES-3000 Series Layer 2 Switch CLI Reference Manual show utilization ports Restrictions None. Example usage: To display the port utilization statistics: DES-3026:4#show utilization ports 1-26 Command: show utilization ports 1-26 Port TX/sec RX/sec Util Port TX/sec RX/sec Util ---- ---------- ---------- ---- ---- ---------- ----------...
  • Page 60 DES-3000 Series Layer 2 Switch CLI Reference Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters [ports <portlist>] Description This command will clear the counters used by the Switch to compile statistics. Parameters <portlist> − Specifies a port or range of ports to be cleared for statistics.
  • Page 61 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show log index 1-4 Command: show log index 1-4 Index Time Log Text ----- ---------- --------------------------------------------------------------- 2005/12/22 03:03:58 Successful login through Console (Username: Anonymous, IP:0.0.0.0, MAC:00-00-00-00-00-00) 2005/12/22 03:02:58 Logout through Console (Username: Anonymous, IP:0.0.0.0, MAC:00-00-00-00-00-00) 2005/12/22 03:01:28 Successful login through Console (Username: Anonymous,...
  • Page 62 DES-3000 Series Layer 2 Switch CLI Reference Manual show syslog Purpose Used to display the syslog protocol status as enabled or disabled. Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled. Parameters None. Restrictions None.
  • Page 63 DES-3000 Series Layer 2 Switch CLI Reference Manual create syslog host Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem...
  • Page 64 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create syslog host 1 ipaddress 10.53.13.94 severity all facility local0 Command: create syslog host 1 ipaddress 10.53.13.94 severity all facility local0 Success. DES-3026:4# config syslog host Purpose Used to configure the syslog protocol to send system log data to a remote host. Syntax config syslog {host [all <index 1-4>]} {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] |...
  • Page 65 DES-3000 Series Layer 2 Switch CLI Reference Manual config syslog host Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem...
  • Page 66 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config syslog host all severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3026:4# delete syslog host Purpose Used to remove a syslog host, that has been previously configured, from the Switch.
  • Page 67 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show syslog host Command: show syslog host Syslog Global State: Disabled Host Id Host IP Address Severity Facility UDP port Status ------- --------------- -------------- -------- -------- -------- 10.1.1.2 Local0 Disabled 10.40.2.3 Local0 Disabled 10.21.13.1 Local0...
  • Page 68 DES-3000 Series Layer 2 Switch CLI Reference Manual To configure log timing: DES-3026:4#show log_save_timing Command: show log_save_timing Saving log method : on_demand DES-3026:4#...
  • Page 69: Spanning Tree Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual PANNING OMMANDS The Switch supports 802.1d STP and 802.1w Rapid STP. The spanning tree commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config stp...
  • Page 70 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config stp maxage 18 hellotime 4 Command: config stp maxage 18 hellotime 4 Success. DES-3026:4# config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports <portlist> {cost [auto | <value 1-200000000>] | priority <value 0- 240>...
  • Page 71 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config stp ports 1-5 cost 19 priority 15 state enabled Command: config stp ports 1-5 cost 19 priority 15 state enabled Success. DES-3026:4# enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description...
  • Page 72 DES-3000 Series Layer 2 Switch CLI Reference Manual show stp Restrictions None. Example usage: To display the status of STP on the Switch: Status 1: STP enabled with STP compatible version DES-3026:4#show stp Command: show stp STP Status : Enabled Max Age : 20 Hello Time...
  • Page 73 DES-3000 Series Layer 2 Switch CLI Reference Manual show stp ports Purpose Used to display the Switch’s current per-port group STP configuration. Syntax show stp ports <portlist> Description This command displays the Switch’s current per-port group STP configuration. Parameters <portlist> − Specifies a port or range of ports to be configured. Restrictions None.
  • Page 74: Loopback Detection Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual OOPBACK ETECTION OMMANDS The Loopback Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable loopdetect disable loopdetect config loopdetect [recover_timer [0 | <value 60-1000000>] | interval <value 1-32767>] show loopdetect config loopdetect ports...
  • Page 75 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable loopdetect Command: disable loopdetect Success. DES-3026:4# config loopdetect Purpose Used to configure the Loopback Detection function parameters on the switch. Syntax config loopdetect [recover_timer [0 | <value 60-1000000>] | interval <value 1-32767>] Description This command is used to set the parameters for the Loopback Detection function on the switch, without adjusting configurations.
  • Page 76 DES-3000 Series Layer 2 Switch CLI Reference Manual show loopdetect Purpose Used to display the Loopback Detection function parameters set on the switch. Syntax show loopdetect Description This command will display the loopdetect settings currently set on the switch. Parameters None.
  • Page 77 DES-3000 Series Layer 2 Switch CLI Reference Manual show loopdetect ports Purpose Used to display the Loopback Detection port settings on the switch. Syntax show loopdetect ports {<portlist>} Description This command will display the loopdetect port settings currently set on the switch. Parameters <portlist>...
  • Page 78: Forwarding Database Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32> <macaddr> port <port> create multicast_fdb <vlan_name 32>...
  • Page 79 DES-3000 Series Layer 2 Switch CLI Reference Manual create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table (database). Syntax create multicast_fdb <vlan_name 32> <macaddr> Description This command will make an entry into the Switch’s multicast MAC address forwarding database.
  • Page 80 DES-3000 Series Layer 2 Switch CLI Reference Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10-1000000> Description The aging time affects the learning process of the Switch. Dynamic forwarding table entries, which are made up of the source MAC addresses and their associated port numbers, are deleted from the table if they are not accessed within the aging time.
  • Page 81 DES-3000 Series Layer 2 Switch CLI Reference Manual clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan <vlan_name 32> | port <port> | all] Description This command is used to clear dynamically learned entries to the Switch’s forwarding database.
  • Page 82 DES-3000 Series Layer 2 Switch CLI Reference Manual show fdb Purpose Used to display the current unicast MAC address forwarding database. Syntax show fdb {port <port> | vlan <vlan_name 32> | mac_address <macaddr> | static | aging_time} Description This command will display the current contents of the Switch’s forwarding database.
  • Page 83 DES-3000 Series Layer 2 Switch CLI Reference Manual config multicast filtering_mode Purpose Used to configure the multicast packet filtering mode for the Switch. Syntax config multicast filtering_mode [forward_unregistered_groups | filter_unregistered_groups] Description This command will configure the multicast packet filtering mode on the Switch.
  • Page 84: Traffic Control Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual RAFFIC ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 85 DES-3000 Series Layer 2 Switch CLI Reference Manual config traffic control issue is resolved. • shutdown - Utilizes the Switch’s software Traffic Control mechanism to determine the Packet Storm occurring. Once detected, the port will deny all incoming traffic to the port except STP BPDU packets, which are essential in keeping the Spanning Tree operational on the Switch.
  • Page 86 DES-3000 Series Layer 2 Switch CLI Reference Manual config traffic control_recover Purpose Used to configure traffic control recover for any or all ports. Syntax config traffic control_recover [<portlist> | all] Description Configuring a port for traffic control recover will require an administrator to restart the specified ports if storm control shuts down the port or ports.
  • Page 87 DES-3000 Series Layer 2 Switch CLI Reference Manual show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control {<storm_grouplist>} Description This command displays the current storm traffic control configuration on the Switch. Parameters <storm_grouplist> - Specify a port or range of ports to display. If unspecified, all ports will be displayed.
  • Page 88: Qos Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual OMMANDS The DES-3000 Series switch supports priority classification for IEEE 802.1p Priority, DiffServ (DSCP) and IP TOS priority. Incoming packets with piority tags are classified into 4 priority queues in the Switch. Priority may also be set according to destination MAC address or Switch port.
  • Page 89 DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters config cos mapping port [<portlist> | all] [none | {port_mapping | ethernet [802.1p | mac_mapping | ip [tos | dscp]}] show cos mapping {port [<portlist> | all]} config dscp_mapping dscp_value <0–63> [class <class_id 0-3>] show dscp_mapping {dscp_value <value 0-63>} config scheduling...
  • Page 90 DES-3000 Series Layer 2 Switch CLI Reference Manual config cos mapping ip - Specifies port-based CoS mapping on selected ports to be tos or dscp • mapping. tos – Specifies CoS mapping for Type of Service (ToS) priority. Select the ToS •...
  • Page 91 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure CoS mapping for DSCP: DES-3026:4#config dscp_mapping dscp_value 1 class 0 Command: config dscp_mapping dscp_value 1 class 0 Success DES-3026:4# show dscp_mapping Purpose To display current DSCP mapping. Syntax show dscp_mapping {dscp_value <value 0-63>} Description Use this to display the CoS priority level currently mapped for DSCP...
  • Page 92 DES-3000 Series Layer 2 Switch CLI Reference Manual config scheduling specified. For example, if a value of 5 is specified, then the highest priority class of service (queue 3) will be allowed to transmit 5 packets. Then the next lower priority class of service (queue 2) will be allowed to transmit 5 packets, and so on, until all of the classes of service have transmitted 5 packets.
  • Page 93 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4# show scheduling Command: show scheduling QOS Output Scheduling Class ID Weight --------------- ------------- Class-0 Class-1 Class-2 Class-3 DES-3026:4# config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware classes of service available on the Switch.
  • Page 94 DES-3000 Series Layer 2 Switch CLI Reference Manual show 802.1p user_priority Purpose Used to display the current mapping between an incoming packet’s 802.1p priority value and one of the Switch’s four hardware priority classes of service. Syntax show 802.1p user_priority Description The show 802.1p user_priority command displays the current mapping of an incoming packet’s 802.1p priority value to one of the...
  • Page 95 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config 802.1p default_priority all 5 Command: config 802.1p default_priority all 5 Success. DES-3026:4# show 802.1p default_priority Purpose Used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination.
  • Page 96 DES-3000 Series Layer 2 Switch CLI Reference Manual config scheduling_mechanism contains four hardware priority classes of service. Incoming packets must be mapped to one of these four hardware priority classes of service. This command is used to specify the rotation by which these four hardware priority classes of service are emptied.
  • Page 97 DES-3000 Series Layer 2 Switch CLI Reference Manual config bandwidth_control Purpose Used to configure bandwidth control on a by-port basis. Syntax config bandwidth_control [<portlist>] {rx_rate [no_limit | <value 64-1024000>] | tx_rate [no_limit | <value 64-1024000>]} Description The config bandwidth_control command is used to configure bandwidth on a by-port basis.
  • Page 98 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show bandwidth_control 1-12 Command: show bandwidth_control 1-12 Bandwidth Control Table Port RX Rate (kbit/sec) TX_RATE (kbit/sec) ---- ------------------------ ---------------------- 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000 100000...
  • Page 99 DES-3000 Series Layer 2 Switch CLI Reference Manual show cos port_mapping are specified, all ports are listed. Restrictions None. Example usage: To view CoS port mapping for a range of ports: DES-3026:4#show cos port_mapping ports 1-2 Command: show cos port_mapping ports 1-2 Port Priority ---- -------- DES-3026:4#...
  • Page 100 DES-3000 Series Layer 2 Switch CLI Reference Manual show cos mac_mapping mapping entries are listed. Restrictions None. Example usage: To view the current CoS mapping for static MAC addresses: DES-3026:4#show cos mac_mapping Command: show cos mac_mapping MAC Address Class ----------------------------------- 01-00-D6-E4-FF-05 DES-3026:4# config cos tos value...
  • Page 101 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To show the CoS to ToS mapping. DES-3026:4#show cos tos Command: show cos tos TOS value Class --------------------------- DES-3026::4#...
  • Page 102: Traffic Segmentation Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows you to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied. The traffic segmentation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 103 DES-3000 Series Layer 2 Switch CLI Reference Manual show traffic_segmentation Restrictions The port lists for segmentation and the forward list must be on the same switch. Example usage: To display the current traffic segmentation configuration on the Switch. DES-3026:4#show traffic_segmentation Command: show traffic_segmentation Traffic Segmentation Table Port Forward Portlist...
  • Page 104: Port Mirroring Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port> | [add | delete] source ports <portlist> [rx | tx | both] enable mirror disable mirror show mirror...
  • Page 105 DES-3000 Series Layer 2 Switch CLI Reference Manual enable mirror Purpose Used to enable a previously entered port mirroring configuration. Syntax enable mirror Description This command, combined with the disable mirror command below, allows a mirror entry to be enabled on the Switch, without modifying the port mirroring configuration.
  • Page 106 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show mirror Command: show mirror Current Settings Mirror Status : enable Target Port Mirrored Port RX : TX : DES-3026:4#...
  • Page 107: Vlan Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32> {tag <vlanid 2-4094>} delete vlan <vlan_name 32>...
  • Page 108 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete vlan v1 Command: delete vlan v1 Success. DES-3026:4# config vlan Purpose Used to add additional ports to a previously configured VLAN. Syntax config vlan <vlan_name 32> {[add [tagged | untagged] | delete] <portlist>} Description This command allows the user to add or delete ports to the port list...
  • Page 109 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show vlan Command: show vlan VLAN Name : default VLAN TYPE : static Member ports : 1-26 Static ports : 1-26 Tagged ports Untagged ports : 1-26 Total Entries : 1 DES-3026:4#...
  • Page 110: Link Aggregation Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-3> {type [lacp | static]} delete link_aggregation group_id <value 1-3>...
  • Page 111 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create link_aggregation group_id 1 Command: create link_aggregation group_id 1 Success. DES-3026:4# delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value 1-3> Description This command is used to delete a previously configured link aggregation group.
  • Page 112 NOTE: group_id 3 is designed for the uplink modules only (the last two ports on the Switch (DES-3010F/FL/G ports 9-10, DES-3018 ports 17-18, DES-3026 ports 25-26) and can only be configured for them. Any other attempt at configuring group_id 3 with standard 10/100 Mbps ports will result in a configuration error.
  • Page 113 DES-3000 Series Layer 2 Switch CLI Reference Manual show link_aggregation ports on the Switch (9-10, 17-18, 25-26) and cannot be viewed here. algorithm − Displays the link aggregation algorithm in use on the Switch. Restrictions None. Example usage: To display Link Aggregation configuration: DES-3026:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = mac_source...
  • Page 114 DES-3000 Series Layer 2 Switch CLI Reference Manual config lacp_ports Restrictions Only administrator-level users can issue this command. Example usage: To configure LACP port mode settings: DES-3026:4#config lacp_port 1-6 mode active Command: config lacp_port 1-6 mode active Success. DES-3026:4# show lacp_port Purpose Used to display current LACP port mode settings.
  • Page 115: Basic Ip Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual IP C ASIC OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif [System] [{ipaddress <network_address> | vlan <vlan_name 32> | state [enable | disable] | [description <desc 128>...
  • Page 116 DES-3000 Series Layer 2 Switch CLI Reference Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif Description This command will display the configuration of an IP interface on the Switch. Parameters None.
  • Page 117: Ip-Mac Binding Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual IP-MAC B INDING OMMANDS The IP-MAC Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} <ipaddr>...
  • Page 118 DES-3000 Series Layer 2 Switch CLI Reference Manual config address_binding ip_mac ipaddress Purpose Used to configure a previously set IP-MAC address binding entry. Syntax config address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all ] } Description This command will configure an IP-MAC address binding entry. Parameters <ipaddr>...
  • Page 119 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config address_binding ip_mac ports 2 state enable allow_zeroip enable Command: config address_binding ip_mac ports 2 state enable allow_zeroip enable Success. DES-3026:4# show address_binding Purpose Used to display IP-MAC address binding entries. Syntax show address_binding [ip_mac {[all | ipaddress <ipaddr>...
  • Page 120 DES-3000 Series Layer 2 Switch CLI Reference Manual delete address_binding Purpose Used to delete an IP-MAC address binding entry. Syntax delete address_binding [ip_mac [ipaddress <ipaddr> mac_address <macaddr> | all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]] Description This command will delete IP-MAC address binding entries. Two methods of deletion can be applied.
  • Page 121 DES-3000 Series Layer 2 Switch CLI Reference Manual enable address_binding trap_log Purpose Used to enable the trap log for the IP-MAC binding function. Syntax enable address_binding trap_log Description This command, along with the disable address_binding trap_log will enable and disable the sending of trap log messages for IP-MAC binding.
  • Page 122: Mac Notification Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interval <int 1-2147483647>...
  • Page 123 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#disable mac_notification Command: disable mac_notification Success. DES-3026:4# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1- 500>} Description MAC address notificiation is used to monitor MAC addresses learned and entered into the FDB.
  • Page 124 DES-3000 Series Layer 2 Switch CLI Reference Manual show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings Syntax show mac_notification Description This command is used to display the Switch’s MAC address table notification global settings. Parameters None.
  • Page 125 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ----------------------------------------------------- Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 126: Igmp Snooping Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [vlan_name <vlan_name 32> | all] {host_timeout <sec 1-16711450> | router_timeout <sec 1-16711450>...
  • Page 127 DES-3000 Series Layer 2 Switch CLI Reference Manual To configure the igmp snooping: DES-3026:4#config igmp_snooping vlan_name default host_timeout 250 state enable Command: config igmp_snooping vlan_name default host_timeout 250 state enable Success. DES-3026:4# config igmp_snooping querier Purpose Used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members and the permitted packet loss that guarantees IGMP snooping.
  • Page 128 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To configure the igmp snooping: DES-3026:4#config igmp_snooping querier vlan_name default query_interval 125 state enable Command: config igmp_snooping querier vlan_name default query_interval 125 state enable Success. DES-3026:4# config router_ports Purpose Used to configure ports as router ports. Syntax config router_ports <vlan_name 32>...
  • Page 129 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#enable igmp_snooping Command: enable igmp_snooping Success. DES-3026:4# disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping Description This command disables IGMP snooping on the Switch. IGMP snooping can be disabled only if IP multicast routing is not being used.
  • Page 130 DES-3000 Series Layer 2 Switch CLI Reference Manual Leave Timer Querier State : Disabled Querier Router Behavior : Non-Querier State : Disabled Multicast fast leave : Disabled Total Entries: 1 DES-3026:4# show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch.
  • Page 131 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-10 Dynamic router port : Total Entries: 1 DES-3026:4#...
  • Page 132: Cpu Acl Filtering Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual CPU ACL F ILTERING OMMANDS The DES-3000 switch series implements Access Control Lists for the CPU that enable the Switch to deny network access to specific devices or device groups based on IP settings, MAC address and packet content settings. Access profiles allow users to establish criteria to determine whether or not the Switch will forward packets to the CPU based on the information contained in each packet’s header.
  • Page 133 DES-3000 Series Layer 2 Switch CLI Reference Manual Command Parameters create cpu access_profile profile_id <value 1-3> [ethernet {vlan | source_mac <macmask> | destination_mac <macmask> | 802.1p | ethernet_type} | ip {vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0-0xffff>...
  • Page 134 DES-3000 Series Layer 2 Switch CLI Reference Manual create cpu access_profile Purpose Used to create an access profile specifically for CPU Interface Filtering on the Switch and to define which parts of each incoming frame’s header the Switch will examine. Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields.
  • Page 135 DES-3000 Series Layer 2 Switch CLI Reference Manual create cpu access_profile tcp − Specifies that the Switch will examine each frames Transport Control Protocol • (TCP) field. src_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the source port. •...
  • Page 136 DES-3000 Series Layer 2 Switch CLI Reference Manual delete cpu access_profile access_profile command. Restrictions Only administrator-level users can issue this command. Example usage: To delete the CPU access profile with a profile ID of 1: DES-3026:4#delete cpu access_profile profile_id 1 Command: delete cpu access_profile profile_id 1 Success.
  • Page 137 DES-3000 Series Layer 2 Switch CLI Reference Manual config cpu access_profile destination_mac <macaddr> − Specifies that the access profile will apply to this • destination MAC address. 802.1p <value 0-7> − Specifies that the access profile will apply only to packets with this •...
  • Page 138 DES-3000 Series Layer 2 Switch CLI Reference Manual config cpu access_profile offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63. • offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79. •...
  • Page 139 DES-3000 Series Layer 2 Switch CLI Reference Manual disable cpu_interface_filtering Restrictions Only administrator-level users can issue this command. Example usage: To disable RMON: DES-3026:4#disable cpu_interface_filtering Command: disable cpu_interface_filtering Success. DES-3026:4# show cpu_access_profile Purpose Used to view the CPU access profile entry currently set in the Switch. Syntax show cpu_access_profile {profile_id <value 1-3>} Description...
  • Page 140: Port Security Commands

    Each command is listed, in detail, in the following sections. NOTE: The uplink module ports (DES-3010F/FL/G ports 9-10, DES-3018 ports 17-18, DES-3026 ports 25-26) do not support the port security function. config port_security ports Purpose Used to configure port security settings.
  • Page 141 DES-3000 Series Layer 2 Switch CLI Reference Manual To configure the port security: DES-3026:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Success DES-3026:4# show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <portlist>} Description...
  • Page 142 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To delete an entry from the port security list: DES-3026:4#delete port_security_entry vlan_name default mac_address 00-0C-6E-73-2B-C9 port 1 Command: delete port_security_entry vlan_name default mac_address 00-0C-6E-73-2B-C9 port 1 Success DES-3026:4# clear port_security_entry Purpose Used to clear MAC address entries learned from a specified port for the port security function.
  • Page 143 DES-3000 Series Layer 2 Switch CLI Reference Manual disable port_security trap_log Purpose Used to disable the trap log function for port security. Syntax disable port_security trap_log Description This command is used to disable sending trap messages to the Switch’s log when a new MAC address violates the pre-defined port security configuration.
  • Page 144: Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual 802.1X C OMMANDS The DES-3000 switch series implements the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 145 DES-3000 Series Layer 2 Switch CLI Reference Manual Each command is listed, in detail, in the following sections. NOTE: The uplink module ports (DES-3010F/FL/G ports 9-10, DES-3018 ports 17-18, DES-3026 ports 25-26) do not support the 802.1X function. enable 802.1x Purpose Used to enable the 802.1x server on the Switch.
  • Page 146 DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x auth_mode Purpose Used to configure the 802.1x authentication mode on the Switch. Syntax config 802.1x auth_mode {port_based | mac_based] Description The config 802.1x authentication mode command is used to enable either the port-based or MAC-based 802.1x authentication feature on the Switch.
  • Page 147 DES-3000 Series Layer 2 Switch CLI Reference Manual Example usage: To display the 802.1x authentication states (stacking disabled) for Port-based 802.1x: DES-3026:4#show 802.1x auth_state ports 1-5 Command: show 802.1x auth_state ports 1-5 Port Auth PAE State Backend State Port Status ------ -------------- -------------...
  • Page 148 DES-3000 Series Layer 2 Switch CLI Reference Manual show 802.1x auth_configuration /ForceAuth/ForceUnauth − Shows the current state of the Authenticator PAE. Backend State: Request/Response/Fail/Idle/Initialize − Shows the current state of the Backend Authenticator. AdminCtlDir: Both/In − Shows whether a controlled Port that is unauthorized will exert control over communication in both receiving and transmitting directions, or just the receiving direction.
  • Page 149 DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x capability ports Purpose Used to configure the 802.1x capability of a range of ports on the Switch. Syntax config 802.1x capability ports [<portlist> | all] [authenticator | none] Description The config 802.1x command has four capabilities that can be set for each port.
  • Page 150 DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x auth_parameter ports force_unauth − Forces the Authenticator for the port to become unauthorized. Network access will be blocked. quiet_period <sec 0-65535> − Configures the time interval between authentication failure and the start of a new authentication attempt. tx_period <sec 1-65535>...
  • Page 151 DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x init Purpose Used to initialize the 802.1x function on a range of ports. Syntax config 802.1x init [port_based ports [<portlist> | all] | mac_based ports [<portlist> | all] {mac_address <macaddr>}] Description The config 802.1x init command is used to immediately initialize the 802.1x functions on a specified range of ports or for specified MAC...
  • Page 152 DES-3000 Series Layer 2 Switch CLI Reference Manual config 802.1x reauth mac_address <macaddr> - Specifies the MAC address of the client to add. Restrictions Only administrator-level users can issue this command. Example usage: To configure 802.1x reauthentication for ports 1-18: DES-3026:4#config 802.1x reauth port_based ports 1-18 Command: config 802.1x reauth port_based ports 1-18 Success.
  • Page 153 DES-3000 Series Layer 2 Switch CLI Reference Manual config radius delete Purpose Used to delete a previously entered RADIUS server configuration. Syntax config radius delete <server_index 1-3> Description The config radius delete command is used to delete a previously entered RADIUS server configuration.
  • Page 154 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-3026:4# show radius Purpose Used to display the current RADIUS configurations on the Switch. Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the Switch.
  • Page 155 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create 802.1x user dtremblett Command: create 802.1x user dtremblett Enter a case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3026:4# show 802.1x user Purpose Used to display the 802.1x user accounts on the Switch. Syntax show 802.1x user Description...
  • Page 156 RADIUS accounting client currently configured on the Switch. Parameters None. Restrictions None. Example usage: To view the current RADIUS accounting client: DES-3026:4#show acct_client Command: show acct_client radiusAcctClient ==> radiusAcctClientInvalidServerAddresses radiusAcctClientIdentifier D-Link radiusAuthServerEntry ==> radiusAccServerIndex radiusAccServerAddress 10.53.13.199 radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators...
  • Page 157 DES-3000 Series Layer 2 Switch CLI Reference Manual To view the current RADIUS authentication client: DES-3026:4#show auth_client Command: show auth_client radiusAuthClient ==> radiusAuthClientInvalidServerAddresses radiusAuthClientIdentifier D-Link radiusAuthServerEntry ==> radiusAuthServerIndex radiusAuthServerAddress : 0.0.0.0 radiusAuthClientServerPortNumber radiusAuthClientRoundTripTime radiusAuthClientAccessRequests radiusAuthClientAccessRetransmissions radiusAuthClientAccessAccepts radiusAuthClientAccessRejects radiusAuthClientAccessChallenges radiusAuthClientMalformedAccessResponses 0...
  • Page 158 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show auth_diagnostics ports 1 Command: show auth_diagnostics ports 1 Port number : 1 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated BackendResponses BackendAccessChallenges BackendOtherRequestsToSupplicant BackendNonNakResponsesFromSupplicant BackendAuthSuccesses BackendAuthFails CTRL+C ESC q Quit SPACE n Next Page...
  • Page 159 DES-3000 Series Layer 2 Switch CLI Reference Manual show auth_statistics Purpose Used to display the current authentication statistics. Syntax show auth_statistics {ports <portlist>]} Description The show auth_statistics command is used to display the current authentication statistics of the Switch on a per port basis. Parameters ports <portlist>...
  • Page 160 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#create 802.1x guest_vlan Trinity Command: create 802.1x guest_vlan Trinity Success. DES-3026:4# config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1x guest VLAN. Syntax config 802.1x guest_vlan ports [<portlist> | all] state [enable | disable] Description The config 802.1x guest_vlan ports command is used to configure ports to be enabled or disabled for the 802.1x guest VLAN.
  • Page 161 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Setting ----------------------------------------------------------- Guest VLAN : Trinity Enable Guest VLAN ports: 5-8 DES-3026:4# delete 802.1x guest_vlan Purpose Used to delete a 802.1x Guest VLAN. Syntax delete 802.1x guest_vlan <vlan_name 32>...
  • Page 162: Time And Sntp Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config sntp...
  • Page 163 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3026:4# show sntp Purpose Used to display the SNTP information. Syntax show sntp Description This command will display SNTP settings information including the source IP address, time and poll interval.
  • Page 164 DES-3000 Series Layer 2 Switch CLI Reference Manual disable sntp Purpose Disables SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp). Parameters None. Restrictions Only administrator-level users can issue this command. Example: To stop SNTP support: DES-3026:4#disable sntp...
  • Page 165 DES-3000 Series Layer 2 Switch CLI Reference Manual config time_zone Parameters operator – Choose to add (+) or subtract (-) time to adjust for time zone relative to GMT. hour – Select the number hours offset from GMT (Greenwich Mean Time). min –...
  • Page 166 DES-3000 Series Layer 2 Switch CLI Reference Manual config dst e_wday - Configure the day of the week in which DST ends. • <end_weekday sun-sat> - The day of the week in which DST ends expressed using a three character abbreviation (sun, mon, tue, wed, thu, fri, sat) s_mth - Configure the month in which DST begins.
  • Page 167 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#show time Command: show time Current Time Source : System Clock Current Time : 0 Days 01:09:49 Time Zone : GMT -06:00 Daylight Saving Time : Disabled Offset in minutes : 60 Repeating From : Apr 1st Sun 00:00 : Oct last Sun 00:00...
  • Page 168: Routing Table Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual OUTING ABLE OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr> {<metric 1-65535>} delete iproute [default] show iproute...
  • Page 169 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#delete iproute default 10.53.13.254 Command: delete iproute default 10.53.13.254 Success. DES-3026:4# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute {<network address>} {static} Description This command will display the Switch’s current IP routing table. Parameters network address –...
  • Page 170: Arp Commands

    DES-3000 Series Layer 2 Switch CLI Reference Manual ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show arpentry {ipif <ipif_name 12> | ipaddress <ipaddr> | static} config arp_aging time <value 0-65535>...
  • Page 171 DES-3000 Series Layer 2 Switch CLI Reference Manual System 10.90.90.90 00-01-02-03-04-00 Local System 10.255.255.255 FF-FF-FF-FF-FF-FF Local/Broadcast Total Entries = 20 DES-3026:4# config arp_aging time Purpose Used to configure the age-out timer for ARP table entries on the Switch. Syntax config arp_aging time <value 0-65535> Description This command sets the maximum amount of time, in minutes, that an ARP entry can remain in the Switch’s ARP table, without being...
  • Page 172: D-Link Single Ip Management Commands

    ANAGEMENT OMMANDS Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using Single IP Management (labeled here as SIM) must conform to the following rules: •...
  • Page 173 For more information on adding the DES-3000 switch as a member of an SIM group, please see the commander switch’s user guide or command line interface reference manual. The D-Link Single IP Management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 174 DES-3000 Series Layer 2 Switch CLI Reference Manual disable sim Purpose Used to disable Single IP Management (SIM) on the Switch. Syntax disable sim Description This command will disable SIM globally on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command. Example usage: To disable SIM on the Switch: DES-3026:4#disable sim...
  • Page 175 DES-3000 Series Layer 2 Switch CLI Reference Manual show sim Port – Displays the physical port number of the commander switch where the uplink • to the neighbor switch is located. MAC Address – Displays the MAC Address of the neighbor switch. •...
  • Page 176 DES-3000 Series Layer 2 Switch CLI Reference Manual To show other groups information in summary, if group is specified: DES-3026:4#show sim group Command: show sim group SIM Group Name : default ID MAC Address Platform / Hold Firmware Device Name Capability Time Version...
  • Page 177 DES-3000 Series Layer 2 Switch CLI Reference Manual reconfig Restrictions Only administrator-level users can issue this command. Example usage: To connect to the MS, with member ID 2, through the CS, using the command line interface: DES-3026:4#reconfig member_id 2 Command: reconfig member_id 2 DES-3026:4# config sim_group Purpose...
  • Page 178 DES-3000 Series Layer 2 Switch CLI Reference Manual config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [[commander {group_name <groupname 64>} | candidate] | dp_interval <30-90> | hold_time <sec 100-255>]] Description This command is used to configure parameters of switches of the SIM.
  • Page 179 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#config sim candidate Command: config sim candidate Success. DES-3026:4# To transfer the Switch to be a commander: DES-3026:4#config sim commander Command: config sim commander Success. DES-3026:4# To update the name of a group: DES-3026:4#config sim commander group_name Trinity Command: config sim commander group_name Trinity Success.
  • Page 180 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#download sim_ms firmware 10.53.13.94 c:/des3000.had members all Command: download sim_ms firmware 10.53.13.94 c:/des3000.had members all This device is updating firmware. Please wait... Download Status : MAC Address Result ----------------- ---------------- 00-01-02-03-04-00 Success 00-07-06-05-04-03 Success 00-07-06-05-04-03 Success DES-3026:4#...
  • Page 181 DES-3000 Series Layer 2 Switch CLI Reference Manual upload sim_ms Purpose Used to upload a configuration file to a TFTP server from a specified member of a SIM group. Syntax upload sim_ms [configuration_to_tftp | log_to_tftp] <ipaddr> <path_filename> {members <mslist> | all} Description This command will upload a configuration file to a TFTP server from a specified member of a SIM group.
  • Page 182: Command History List

    DES-3000 Series Layer 2 Switch CLI Reference Manual OMMAND ISTORY The command history list commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters {<command>} show command_history config command_history <value 1-40> Each command is listed, in detail, in the following sections.
  • Page 183 DES-3000 Series Layer 2 Switch CLI Reference Manual To display the parameters for a specific command: DES-3026:4#? config igmp_snooping Command: config igmp_snooping Command: config igmp_snooping Usage: [vlan_name <vlan_name 32> | all] {host_timeout <sec 1-16711450> | router_timeout <sec 1-16711450> | leave_timer <sec 1-16711450> | state [enabled | disabled | fast_leave [enabled | disabled]} Description: Used to configure IGMP snooping on the switch.
  • Page 184 DES-3000 Series Layer 2 Switch CLI Reference Manual DES-3026:4#dir Command: dir clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol config 802.1x capability ports config 802.1x guest_vlan ports config 802.1x init config 802.1x reauth...
  • Page 185: Technical Specifications

    Operating: 5% to 95% RH non-condensing; Storage: 0% to 95% RH non-condensing Dimensions: DES-3010F/G - 280 mm x 180 mm x 44 mm (1U), 11 inch rack-mount width DES-3018/3026 - 441 mm x 207mm x 44 mm (1U), 19 inch rack-...
  • Page 186 EIA/TIA-568 100-ohm STP (100 m) Number of Ports DES-3010F - 8 x 10/100 Mbps NWay ports, 1 x 1000BASE-T Gigabit Port, 1 x 100BASE-FX (MM) Fiber Optic Port DES-3010FL - 8 x 10/100 Mbps NWay ports, 1 x 1000BASE-T Gigabit Port,...
  • Page 187 DES-3000 Series Layer 2 Switch CLI Reference Manual Performance Transmission Method Store-and-forward RAM Buffer 32M Bytes per device Filtering Address Table: 8K MAC address per device Packet Filtering / 14,880 pps per 10Mbps Forwarding Rate: 148,809 pps per 100Mbps 1,488,100 pps per 1000Mbps MAC Address Learning Automatic update.

This manual is also suitable for:

Des-3010flDes-3010gDes-3018Des-3026

Table of Contents