ZyXEL Communications Ethernet Switch Cli Reference Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Network Router
  5. Ethernet Switch
  6. Cli reference manual

ZyXEL Communications Ethernet Switch Cli Reference Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Ethernet Switch

Default Login Details
IP Address
http://192.168.0.1
(Out-of-band MGMT
http://192.168.1.1
(In-band ports)
User Name
Password
Firmware Version 3.79, 3.80, 3.90
and 4.00
Edition 3, 11/2011
www.zyxel.com
www.zyxel.com
CLI Reference Guide
port)
admin
1234
Copyright © 2011
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications Ethernet Switch

Summary of Contents for ZyXEL Communications Ethernet Switch

  • Page 1: Ethernet Switch

    Ethernet Switch CLI Reference Guide Default Login Details IP Address http://192.168.0.1 (Out-of-band MGMT port) http://192.168.1.1 (In-band ports) User Name admin Password 1234 Firmware Version 3.79, 3.80, 3.90 and 4.00 Edition 3, 11/2011 www.zyxel.com www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...

  • Page 3: Ethernet Switch Cli Reference Guide

    Each chapter describes commands related to a feature. • To find specific information in this guide, use the Contents Overview, the Index of Commands, or search the PDF file. E-mail techwriters@zyxel.com.tw if you cannot find the information you require. Ethernet Switch CLI Reference Guide...

  • Page 4: Document Conventions

    [contact <system contact>], system contact can be replaced by the administrator’s name. • A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “Enter” or “Return” key on your keyboard. Ethernet Switch CLI Reference Guide...
  • Page 5 The P column identifies the privilege level of the command. If you don’t have a high enough privilege level you may not be able to view or execute some of the commands. See Chapter 2 on page 17 for more information on privilege levels. Ethernet Switch CLI Reference Guide...
  • Page 6 Icons Used in Figures Figures in this guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router Ethernet Switch CLI Reference Guide...

  • Page 7: Table Of Contents

    IEEE 802.1x Authentication Commands ..................107 IGMP and Multicasting Commands ..................111 IGMP Snooping Commands ....................115 IGMP Filtering Commands .......................123 Interface Commands ........................125 Interface Route-domain Mode ....................131 IP Commands ..........................133 IP Source Binding Commands ....................137 IPv6 Commands ........................139 Ethernet Switch CLI Reference Guide...

  • Page 8: Table Of Contents

    Running Configuration Commands ..................255 sFlow ............................257 Smart Isolation Commands ......................259 SNMP Server Commands ......................263 STP and RSTP Commands .....................267 SSH Commands ........................271 Static Multicast Commands ......................273 Static Route Commands ......................275 Subnet-based VLAN Commands .....................279 Syslog Commands ........................281 Ethernet Switch CLI Reference Guide...

  • Page 9: Table Of Contents

    VLAN Commands ........................297 VLAN IP Commands ........................303 VLAN Mapping Commands ......................305 VLAN Port Isolation Commands ....................307 VLAN Stacking Commands ......................309 VLAN Trunking Commands .....................313 VRRP Commands ........................315 Additional Commands ......................319 Appendices and Index of Commands ................329 Ethernet Switch CLI Reference Guide...
  • Page 10 Contents Overview Ethernet Switch CLI Reference Guide...

  • Page 11: Introduction

    Introduction How to Access and Use the CLI (13) Privilege Level and Command Mode (17) Initial Setup (23)

  • Page 13: How To Access And Use The Cli

    Table 3 Default Management IP Address SETTING DEFAULT VALUE IP Address 192.168.1.1 Subnet Mask 255.255.255.0 Make sure your computer IP address is in the same subnet, unless you are accessing the Switch through one or more routers. Ethernet Switch CLI Reference Guide...
  • Page 14 [TAB]. The Switch finishes the word configure. Displays the keywords and/or input values that are allowed in place of the ?. Displays the (full) commands that are allowed in place of help. help Ethernet Switch CLI Reference Guide...

  • Page 15: Saving Your Configuration

    Switch. 1.5 Logging Out Enter to log out of the CLI. You have to be in user, enable, or config mode. See logout Chapter 2 on page 17 for more information about modes. Ethernet Switch CLI Reference Guide...
  • Page 16 Chapter 1 How to Access and Use the CLI Ethernet Switch CLI Reference Guide...

  • Page 17: Privilege Level And Command Mode

    You can manage the privilege levels for login accounts in the following ways: • Using commands. Login accounts can be configured by the admin account or any login account with a privilege level of 14. See Chapter 38 on page 175. Ethernet Switch CLI Reference Guide...
  • Page 18 This command raises the session’s privilege level to the specified level. It also changes the session to enable mode, if the specified level is 13 or 14. This command is available in user mode or enable mode, and users have to know the password for the specified privilege level. Ethernet Switch CLI Reference Guide...

  • Page 19: Command Modes

    2.2.1 Command Modes for Privilege Levels 0-12 If the session’s privilege level is 0-12, the user and all of the allowed commands are in user mode. Users do not have to change modes to run any allowed commands. Ethernet Switch CLI Reference Guide...
  • Page 20 <1-4094> config-route-domain interface route domain <ip-address>/<mask-bits> exit config-dvmrp exit router dvmrp config-igmp exit router igmp config-ospf exit router ospf <router-id> config-rip exit router rip config-vrrp exit router vrrp network <ip-address>/<mask-bits> vr-id <1~7> uplink-gateway <ip-address> Ethernet Switch CLI Reference Guide...

  • Page 21: Listing Available Commands

    <1-4094> fixed <port-list> 6 Copy and paste the results into a text editor of your choice. This creates a list of all the executable commands in config and the other submodes, for example, the config-vlan mode. Ethernet Switch CLI Reference Guide...
  • Page 22 Chapter 2 Privilege Level and Command Mode Ethernet Switch CLI Reference Guide...

  • Page 23: Initial Setup

    See Chapter 50 on page 211 for more information. Use this command to change the enable password. password <password> where <password> may be 1-32 alphanumeric characters long. sysname# configure sysname(config)# password k8s8s3dl0 Ethernet Switch CLI Reference Guide...

  • Page 24: Changing The Management Ip Address

    This example shows you how to change the out-of-band management IP address to 10.10.10.1 with subnet mask 255.255.255.0 and the default gateway 10.10.10.254 sysname# configure sysname(config)# ip address 10.10.10.1 255.255.255.0 sysname(config)# ip address default-gateway 10.10.10.254 Ethernet Switch CLI Reference Guide...
  • Page 25 This is illustrated in the following example. sysname# show running-config Building configuration... Current configuration: vlan 1 name 1 normal "" fixed 1-9 forbidden "" untagged 1-9 ip address default-management 172.16.37.206 255.255.255.0 ip address default-gateway 172.16.37.254 exit Ethernet Switch CLI Reference Guide...
  • Page 26 Chapter 3 Initial Setup Ethernet Switch CLI Reference Guide...

  • Page 27: Reference A-G

    Reference A-G AAA Commands (29) ARP Commands (31) ARP Inspection Commands (33) ARP Learning Commands (39) Bandwidth Commands (41) Broadcast Storm Commands (45) CFM Commands (49) Classifier Commands (59) Cluster Commands (63) Date and Time Commands (67) DHCP Commands (71) DHCP Snooping &...

  • Page 29: Aaa Commands

    (0-14) for the command sessions that <privilege> stop-only tacacs+ should be recorded. Optionally, sends accounting information [broadcast] for command sessions to all configured accounting servers at the same time. Ethernet Switch CLI Reference Guide...
  • Page 30 VLAN ID assigned via the external server. Disables authorization of allowing an administrator which logs no aaa authorization exec in the Switch through Telnet or SSH to have different access privilege level assigned via the external server. Ethernet Switch CLI Reference Guide...

  • Page 31: Arp Commands

    The following table describes the labels in this screen. Table 13 show ip arp LABEL DESCRIPTION Index This field displays the index number. This field displays the learned IP address of the device. This field displays the MAC address of the device. Ethernet Switch CLI Reference Guide...
  • Page 32 CPU indicates this IP address is the Switch’s management IP address. Age(s) This field displays how long the entry remains valid. Type This field displays how the entry was learned. dynamic: The Switch learned this entry from ARP packets. Ethernet Switch CLI Reference Guide...

  • Page 33: Arp Inspection Commands

    Specifies the MAC address filter to be permanent. arp inspection filter-aging-time none Resets how long (1-2147483647 seconds) the MAC address no arp inspection filter-aging- filter remains in the Switch after the Switch identifies an time unauthorized ARP packet to the default value. Ethernet Switch CLI Reference Guide...
  • Page 34 Enables logging of ARP inspection events on the specified arp inspection vlan <vlan-list> VLAN(s). Optionally specifies which types of events to log. logging [all|none|permit|deny] Disables logging of messages generated by ARP inspection no arp inspection vlan <vlan- for the specified VLAN(s). list> logging Ethernet Switch CLI Reference Guide...

  • Page 35: Command Examples

    Total Log Buffer Size : 32 Syslog rate : 5 entries per 1 seconds Port Vlan Sender MAC Sender IP Pkts Reason Time ---- ---- ----------------- --------------- ---- ---------- ---- --------------------- Total number of logs: 0 Ethernet Switch CLI Reference Guide...
  • Page 36 This example displays whether ports are trusted or untrusted ports for ARP inspection. sysname# show arp inspection interface port-channel 1 Interface Trusted State Rate (pps) Burst Interval --------- ------------- ---------- -------------- Untrusted Ethernet Switch CLI Reference Guide...
  • Page 37 1 second, then the switch accepts a maximum of 15 ARP packets in every one-second interval. If the burst interval is 5 seconds, then the switch accepts a maximum of 75 ARP packets in every five-second interval. Ethernet Switch CLI Reference Guide...
  • Page 38 Chapter 6 ARP Inspection Commands Ethernet Switch CLI Reference Guide...

  • Page 39: Arp Learning Commands

    Resets the ARP learning mode to its default setting (arp- no arp-learning reply). 7.2 Command Examples This example changes the ARP learning mode on port 8 from arp-reply arp-request sysname# configure sysname(config)# interface port-channel 8 sysname(config-interface)# arp-learning arp-request Ethernet Switch CLI Reference Guide...
  • Page 40 Chapter 7 ARP Learning Commands Ethernet Switch CLI Reference Guide...

  • Page 41: Bandwidth Commands

    The port number or a range of port numbers that you want to configure. port-list The rate represents a bandwidth limit. Different models support different rate rate limiting incremental steps. See your User’s Guide for more information. Ethernet Switch CLI Reference Guide...
  • Page 42 This example sets the outgoing traffic bandwidth limit to 5000 Kbps and the incoming traffic bandwidth limit to 4000 Kbps for port 1. sysname# configure sysname(config)# bandwidth-control sysname(config)# interface port-channel 1 sysname(config-interface)# bandwidth-limit egress 5000 sysname(config-interface)# bandwidth-limit ingress 4000 sysname(config-interface)# exit sysname(config)# exit Ethernet Switch CLI Reference Guide...
  • Page 43 This example displays the bandwidth limits configured on port 1. sysname# show running-config interface port-channel 1 bandwidth-limit Building configuration... Current configuration: interface port-channel 1 bandwidth-limit cir 4000 bandwidth-limit cir bandwidth-limit pir 5000 bandwidth-limit pir Ethernet Switch CLI Reference Guide...
  • Page 44 Chapter 8 Bandwidth Commands Ethernet Switch CLI Reference Guide...

  • Page 45: Broadcast Storm Commands

    Enables broadcast storm control on the Switch. storm-control Disables broadcast storm control on the Switch. no storm-control Enters subcommand mode for configuring the specified ports. C interface port-channel <port- list> Enables broadcast storm control on the specified port(s). bmstorm-limit Ethernet Switch CLI Reference Guide...
  • Page 46 9.3 Command Example: broadcast-limit, multicast-limit & dlf- limit This example enables broadcast storm control on the Switch, and configures port 1 to accept up to: • 128 broadcast packets per second, • 256 multicast packets per second, Ethernet Switch CLI Reference Guide...
  • Page 47 128 sysname(config-interface)# multicast-limit sysname(config-interface)# multicast-limit 256 sysname(config-interface)# dlf-limit sysname(config-interface)# dlf-limit 64 sysname(config)# exit sysname# show interfaces config 1 bstorm-control Broadcast Storm Control Enabled: Yes Port Broadcast|Enabled Multicast|Enabled DLF-Limit|Enabled 128 pkt/s|Yes 256 pkt/s|Yes 64 pkt/s|Yes Ethernet Switch CLI Reference Guide...
  • Page 48 Chapter 9 Broadcast Storm Commands Ethernet Switch CLI Reference Guide...

  • Page 49: Cfm Commands

    MD (Maintenance Domain) network. An MA (Maintenance Association) defines a VLAN and associated ports on the device under an MD level. In this MA, a port can be an MEP (Maintenance End Point) port or an MIP (Maintenance Intermediate Point) port. Ethernet Switch CLI Reference Guide...
  • Page 50 MD level and multiple MA groups in one MD. An MA (Maintenance Association) is a group of MEPs and identified by a VLAN ID. One MA should belong to one and only one MD group. Ethernet Switch CLI Reference Guide...
  • Page 51 CFM ports, you need to assign virtual MAC addresses. If you use virtual MAC addresses, make sure that all virtual MAC addresses are unique in both the switch and the network to which it belongs. Ethernet Switch CLI Reference Guide...

  • Page 52: Command Summary

    An entry can remains in the MIP CCM DB for at least 24 hours. ttl: This is the time-to-live value (the number of transmissions, 64 hops by default). Sets this to stop a test once it exceeds the time duration without receiving any response. Ethernet Switch CLI Reference Guide...
  • Page 53 Deletes a specified destination MEP. no remote-mep <mep-id> Deletes a specified MEP. no mep <mep-id> Enables an MEP. no mep <mep-id> inactive Disallows an MEP sending Connectivity Check no mep <mep-id> cc-enable Messages (CCMs) periodically to other MEPs. Ethernet Switch CLI Reference Guide...
  • Page 54 Displays a list of MA(s), MEP(s) and the remote MEP(s) show ethernet cfm remote under the configured MD(s). Displays all virtual MAC addresses. show ethernet cfm virtual-mac Displays the MAC address(es) of the specified port(s). show ethernet cfm virtual-mac port <port-list> Ethernet Switch CLI Reference Guide...
  • Page 55 3 format string name MA3 md 1 primary-vlan sysname(config-ma)# mep 301 interface port-channel 1 direction up priority 2 sysname(config-ma)# mep 301 interface port-channel 1 direction up priority 2 cc-enable sysname(config-ma)# mhf-creation default sysname(config-ma)# remote-mep 117 sysname(config-ma)# exit sysname(config)# exit sysname# write mem Ethernet Switch CLI Reference Guide...
  • Page 56 Displays the number of the port on which this CCM was received. Displays the MA VLAN ID of the last received CCM. Source Address Displays the MAC address of the remote MEP. Retained Displays how long an entry has been kept in the database. Ethernet Switch CLI Reference Guide...
  • Page 57 MD Index: 1 MD Name: customer123(string) MD Level: 2 MA Index: 1 MA Name: 123(vid) Primary Vlan: 123 MEP: 11 Remote MEP ID: MAC Address: 00:19:cb:6f:91:5a Chassis Id: MGS-3712F Management Address: 192.168.100.1:161 sysname# Ethernet Switch CLI Reference Guide...
  • Page 58 Chapter 10 CFM Commands Ethernet Switch CLI Reference Guide...

  • Page 59: Classifier Commands

    <dest-ip-addr> [mask-bits <mask- bits>]] [ipv6-destination-ip <dest-ipv6-addr> [prefix-length <prefix-length>]] [destination- socket <socket-num>] [inactive]> Deletes the classifier. no classifier <name> If you delete a classifier you cannot use policy rule related information. Enables a classifier. no classifier <name> inactive Ethernet Switch CLI Reference Guide...
  • Page 60 IPv6 Next Header values. Table 34 Common IPv6 Next Header Values PROTOCOL TYPE VALUE IPv6 Hop-by-Hop Option IPv4 IPv6 Routing Header for IPv6 Fragment Header for IPv6 Encapsulation Security Payload Authentication Header ICMP for IPv6 Ethernet Switch CLI Reference Guide...
  • Page 61 Class1 to apply policy rules to this traffic flow. See the policy example in Chapter 52 on page 217. sysname# config sysname(config)# classifier Class1 source-mac 11:22:33:45:67:89 source-port sysname(config)# exit sysname# show classifier Index Active Name Rule 1 Yes Class1 SrcMac = 11:22:33:45:67:89; S... Ethernet Switch CLI Reference Guide...
  • Page 62 Chapter 11 Classifier Commands Ethernet Switch CLI Reference Guide...

  • Page 63: Cluster Commands

    Displays the running status of the cluster member(s). show cluster member mac <mac> Logs into the CLI of the specified cluster member. cluster rcommand <mac> Removes the cluster member. no cluster member <mac> Ethernet Switch CLI Reference Guide...
  • Page 64 This status also appears while the Switch finishes adding a new member to the cluster. Offline: The member is disconnected. It takes approximately 1.5 minutes after the link goes down for this status to appear. Ethernet Switch CLI Reference Guide...
  • Page 65 00:13:49:00:00:01 Connected to 127.0.0.2 Escape character is '^]'. User name: admin Password: **** Copyright (c) 1994 - 2007 ZyXEL Communications Corp. ES-2108PWR# show version Current ZyNOS version: V3.80(ABS.0)b2 | 05/28/2007 ES-2108PWR# exit Telnet session with remote host terminated.
  • Page 66 Chapter 12 Cluster Commands Ethernet Switch CLI Reference Guide...

  • Page 67: Date And Time Commands

    1970-2037 Selects the time difference between UTC (formerly time timezone <-1200|...|1200> known as GMT) and your time zone. Enables daylight saving time. The current time is time daylight-saving-time updated if daylight saving time has started. Ethernet Switch CLI Reference Guide...
  • Page 68 Sunday --> March 2 sysname(config)# time daylight-saving-time end-date first Sunday --> November 2 sysname(config)# time 13:24:00 sysname(config)# exit sysname# show time Current Time 13:24:03 (UTC-05:00 DST) Current Date 2007-06-04 Ethernet Switch CLI Reference Guide...
  • Page 69 This field displays the status of the connection with the time server. NONE: The time server is disabled. CONNECTING: The Switch is trying to connect with the specified time server. OK: Synchronize with time server done. FAIL: Synchronize with time server fail. Ethernet Switch CLI Reference Guide...
  • Page 70 Chapter 13 Date and Time Commands Ethernet Switch CLI Reference Guide...

  • Page 71: Dhcp Commands

    Allows the Switch to add DHCP relay agent information. dhcp smart-relay option Disables the relay agent information option 82 for global dhcp no dhcp smart-relay option settings. Ethernet Switch CLI Reference Guide...
  • Page 72 <vlan-id> primary-dns Disables DHCP server secondary DNS settings. no dhcp server <vlan-id> secondary-dns Displays DHCP server settings. show dhcp server Displays DHCP server settings in a specified VLAN. show dhcp server <vlan-id> Ethernet Switch CLI Reference Guide...
  • Page 73 VLAN. The Switch forwards DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with IP address 192.168.1.100. DHCP requests from the academic buildings (VLAN 2) are sent to the other DHCP server with IP address 172.16.10.100. Ethernet Switch CLI Reference Guide...
  • Page 74 Figure 5 on page 74. It also provides the DHCP clients with the IP address of the default gateway and the DNS server. sysname# configure sysname(config)# dhcp server 1 starting-address 192.168.1.100 255.255.255.0 size-of-client-ip-pool 100 default-gateway 192.168.1.1 primary-dns 192.168.5.1 Ethernet Switch CLI Reference Guide...
  • Page 75 Resets how long (10-65535 seconds) the Switch waits to no dhcp snooping database write- update the DHCP snooping database the first time the current delay <seconds> bindings change after an update to the default value (300). Ethernet Switch CLI Reference Guide...

  • Page 76: Dhcp Snooping & Dhcp Vlan Commands

    Disables DHCP VLAN on the Switch. no dhcp dhcp-vlan 15.2 Command Examples This example: • Enables DHCP snooping Switch. • Sets up an external DHCP snooping database on a network server with IP address 172.16.37.17. Ethernet Switch CLI Reference Guide...
  • Page 77 Option 82 is configured on the following VLANs: 1-3,200,300 Appending system name is configured on the following VLANs: DHCP VLAN is enabled on VLAN 300 Interface Trusted Rate Limit (pps) --------- ------- ---------------- unlimited unlimited unlimited Ethernet Switch CLI Reference Guide...
  • Page 78 Chapter 15 DHCP Snooping & DHCP VLAN Commands Ethernet Switch CLI Reference Guide...

  • Page 79: Diffserv Commands

    Sets the DSCP-to-IEEE 802.1q mappings. diffserv dscp <0-63> priority <0-7> Enters config-interface mode for the specified port(s). interface port-channel <port- list> Enables DiffServ on the port(s). diffserv Disables DiffServ on the port(s). no diffserv Ethernet Switch CLI Reference Guide...
  • Page 80 Chapter 16 DiffServ Commands Ethernet Switch CLI Reference Guide...

  • Page 81: Display Commands

    Displays authorization information in the configuration file. server: Displays authentication server information in the configuration file. Hide all or specific AAA information in the configuration no display aaa file. <[authentication][authorization][s erver]> Ethernet Switch CLI Reference Guide...
  • Page 82 Chapter 17 Display Commands Ethernet Switch CLI Reference Guide...

  • Page 83: Dvmrp Commands

    TTL (Time-To-Live) value lower than the threshold are not forwarded by the Switch. Disables DVMRP on the Switch. no router dvmrp Enters the configuration mode for this interface route-domain <ip-address>/<mask- routing domain. bits> Ethernet Switch CLI Reference Guide...
  • Page 84 172.16.1.1/24 sysname(config-if)# ip dvmrp sysname(config-if)# exit sysname(config)# exit sysname# show router dvmrp TTL threshold: 50 IP Address Subnet Mask Active ---------------------------------------- 10.10.10.1 255.255.255.0 172.16.1.1 255.255.255.0 192.168.1.1 255.255.255.0 Ethernet Switch CLI Reference Guide...

  • Page 85: Error Disable And Recovery Commands

    This section lists the common term definition appears in this chapter. Table 51 errdisable recovery command user input values USER INPUT DESCRIPTION The port number or a range of port numbers that you want to configure. port-list Ethernet Switch CLI Reference Guide...

  • Page 86: Error Disable And Recovery Commands

    Turns off the disabled port recovery function on the Switch. no errdisable recovery Disables the recovery timer for the specified feature that no errdisable recovery cause causes the Switch to shut down a port. <loopguard|ARP|BPDU|IGMP> Ethernet Switch CLI Reference Guide...
  • Page 87 Port : 7 Reason Rate Mode Total Drops ------ ------- --------------- ----------- inactive-port BPDU inactive-port IGMP inactive-port systemname# show errdisable detect Reason Status Mode ------ ------- --------------- enable inactive-port BPDU enable rate-limitation IGMP enable inactive-port systemname# Ethernet Switch CLI Reference Guide...
  • Page 88 Errdisable Recovery Status:Enable Reason Timer Status Time ---------- ------------ ------- loopguard Enable Disable BPDU Disable IGMP Disable Interfaces that will be enabled at the next timeout: Interface Reason Time left(sec) Mode --------- ---------- -------------- --------------- sysname# Ethernet Switch CLI Reference Guide...

  • Page 89: Ethernet Oam Commands

    Enable Loopback Control PDUs to the remote start <port> device. Terminates a remote-loopback test from the specified port by ethernet oam remote-loopback sending Disable Loopback Control PDUs to the remote stop <port> device. Ethernet Switch CLI Reference Guide...
  • Page 90 This example enables Ethernet OAM on port 7 and sets the mode to active. sysname# configure sysname(config)# ethernet oam sysname(config)# interface port-channel 7 sysname(config-interface)# ethernet oam sysname(config-interface)# ethernet oam mode active sysname(config-interface)# exit sysname(config)# exit Ethernet Switch CLI Reference Guide...
  • Page 91 Ethernet counters and statistics, about link events. Max. OAMPDU size This field displays the maximum size of PDU for receipt and delivery. Operational status Link status This field indicates that the link is up or down. Ethernet Switch CLI Reference Guide...
  • Page 92 Event Notification OAMPDU Rx : 0 Loopback Control OAMPDU Tx Loopback Control OAMPDU Rx Variable Request OAMPDU Tx Variable Request OAMPDU Rx Variable Response OAMPDU Tx Variable Response OAMPDU Rx Unsupported OAMPDU Tx Unsupported OAMPDU Rx Ethernet Switch CLI Reference Guide...
  • Page 93 This field displays the port number. Mode This field displays the operational state of the port. Remote This section displays information about the remote device. MAC Addr This field displays the MAC address of the remote device. Ethernet Switch CLI Reference Guide...
  • Page 94 This field displays the OUI (first three bytes of the MAC address) of the remote device. Mode This field displays the operational state of the remote device. Config This field displays the capabilities of the Switch and remote device. THe capabilities are identified in the OAM Config section. Ethernet Switch CLI Reference Guide...

  • Page 95: External Alarm Commands

    Enters a name of up to 32 ASCII characters. Removes the name of the specified external alarm. no external-alarm <index> Removes the name of all external alarms. no external-alarm all Displays external alarm settings and status. show external-alarm Ethernet Switch CLI Reference Guide...
  • Page 96 External Alarm 1 Status: Not asserted Name: dooropen External Alarm 2 Status: Not asserted Name: External Alarm 3 Status: Not asserted Name: External Alarm 4 Status: Not asserted Name: sysname# Ethernet Switch CLI Reference Guide...

  • Page 97: Garp Commands

    Leave Time <200-65535> leaveall <200-65535> must be at least two times larger than Join Timer, and Leave All Timer must be larger than Leave Timer. Ethernet Switch CLI Reference Guide...
  • Page 98 Leave Timer :600 Leave All Timer :10000 sysname# configure sysname(config)# garp join 300 leave 800 leaveall 11000 sysname(config)# exit sysname# show garp GARP Timer ------------------------ Join Timer :300 Leave Timer :800 Leave All Timer :11000 Ethernet Switch CLI Reference Guide...

  • Page 99: Gvrp Commands

    This example shows the Switch’s GVRP settings. sysname# show vlan1q gvrp GVRP Support ----------------------- gvrpEnable = YES gvrpPortEnable: This example turns off GVRP on ports 1-5. sysname# configure sysname(config)# interface port-channel 1-5 sysname(config-interface)# no gvrp sysname(config-interface)# exit sysname(config)# exit Ethernet Switch CLI Reference Guide...
  • Page 100 Chapter 23 GVRP Commands Ethernet Switch CLI Reference Guide...

  • Page 101: Reference H-M

    Reference H-M HTTPS Server Commands (103) IEEE 802.1x Authentication Commands (107) IGMP and Multicasting Commands (111) IGMP Snooping Commands (115) IGMP Filtering Commands (123) Interface Commands (125) Interface Route-domain Mode (131) IP Commands (133) IP Source Binding Commands (137) IPv6 Commands (139) Layer 2 Protocol Tunnel (L2PT) Commands (163) Link Layer Discovery Protocol (LLDP) Commands (167) Load Sharing Commands (171)
  • Page 102 Multiple Login Commands (199) MVR Commands (201)

  • Page 103: Https Server Commands

    Displays the HTTPS settings, statistics, and sessions. show https Displays the HTTPS certificates. show https certificate Displays the HTTPS key. show https key <rsa|dsa> Displays current HTTPS session(s). show https session Re-generates a certificate. https cert-regeneration <rsa|dsa> Ethernet Switch CLI Reference Guide...
  • Page 104 RSA authentication. See SSL v2.0, SSL v3.0, TLS v1.0, and RFC 3268 for more information. Statistics Total connects This field displays the total number of HTTPS connections since the Switch started up. Current connects This field displays the current number of HTTPS connections. Ethernet Switch CLI Reference Guide...
  • Page 105 This field displays the session ID context, which is used to label the data and cache in the sessions and to ensure sessions are only reused in the appropriate context. Master-Key This field displays the SSL session master key. Ethernet Switch CLI Reference Guide...
  • Page 106 This field displays the timeout for the session. If the session is idle longer than this, the Switch automatically disconnects. Verify return code This field displays the return code when an SSL client certificate is verified. Ethernet Switch CLI Reference Guide...
  • Page 107 Disables the guest VLAN feature on the listed ports. no port-access-authenticator <port-list> guest-vlan Resets the guest VLAN host-mode to its default settings no port-access-authenticator (Multi-host). <port-list> guest-vlan Host-mode Enables 802.1x authentication on the Switch. port-access-authenticator Ethernet Switch CLI Reference Guide...

  • Page 108: Ieee 802.1X Authentication Commands

    2 Specifies the timeout period of 30 seconds that the Switch will wait for a response from the RADIUS server. 3 Enables port authentication on the Switch. 4 Enables port authentication on ports 4 to 8. Ethernet Switch CLI Reference Guide...
  • Page 109 1 Disables authentication on the Switch. 2 Disables re-authentication on ports 1, 3, 4, and 5. 3 Disables authentication on ports 1, 6, and 7. sysname(config)# no port-access-authenticator sysname(config)# no port-access-authenticator 1,3-5 reauthenticate sysname(config)# no port-access-authenticator 1,6-7 Ethernet Switch CLI Reference Guide...
  • Page 110 Chapter 25 IEEE 802.1x Authentication Commands Ethernet Switch CLI Reference Guide...

  • Page 111: Igmp Overview

    Enters the configuration mode for the specified interface route-domain <ip-address>/<mask- routing domain. bits> Enables IGMP in this routing domain and ip igmp <v1|v2|v3> specifies the version of the IGMP packets that the Switch should use. Ethernet Switch CLI Reference Guide...

  • Page 112: Igmp And Multicasting Commands

    IP multicast packets. 26.3 Command Examples This example configures IGMP on the Switch with the following settings: • Sets the Switch to flood unknown multicast frames. • Sets the Switch to non-querier mode. Ethernet Switch CLI Reference Guide...
  • Page 113 Chapter 26 IGMP and Multicasting Commands • Configures the IP interface 172.16.1.1 with subnet mask 255.255.255.0 to route IGMP version 3 packets. sysname(config)# router igmp sysname(config-igmp)# non-querier sysname(config-igmp)# unknown-multicast-frame flooding sysname(config-igmp)# exit sysname(config)# interface route-domain 172.16.1.1/24 sysname(config-if)# ip igmp v3 Ethernet Switch CLI Reference Guide...
  • Page 114 Chapter 26 IGMP and Multicasting Commands Ethernet Switch CLI Reference Guide...

  • Page 115: Igmp Snooping Commands

    IGMP filtering profile that is assigned to any <name> ports. Clears the specified rule of the specified IGMP filtering no igmp-snooping filtering profile profile. <name> start-address <ip> end- address <ip> Ethernet Switch CLI Reference Guide...
  • Page 116 <port-list>] [multicast-group <group-address>] > Displays client IP information for all multicast groups on show igmp-snooping group client the Switch. Displays the total number of the multicast groups on the show igmp-snooping group count Switch. Ethernet Switch CLI Reference Guide...
  • Page 117 Table 70 interface igmp Command Summary COMMAND DESCRIPTION Displays the group limits for IGMP snooping. show interfaces config <port- list> igmp-group-limited Displays the immediate leave settings for IGMP snooping. show interfaces config <port- list> igmp-immediate-leave Ethernet Switch CLI Reference Guide...
  • Page 118 Switch uses to update the forwarding table for the port(s). <200-6348800> This defines how many seconds the Switch waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. Ethernet Switch CLI Reference Guide...
  • Page 119 This example enables IGMP snooping on the Switch, sets the value to 30 host-timeout seconds, and sets the Switch to drop packets from unknown multicast groups. sysname(config)# igmp-snooping sysname(config)# igmp-snooping host-timeout 30 sysname(config)# igmp-snooping unknown-multicast-frame drop Ethernet Switch CLI Reference Guide...
  • Page 120 This field displays how long the port will belong to the multicast group. This example shows the current multicast VLAN on the Switch. sysname# show multicast vlan Multicast Vlan Status Index Type ----- ---- ---------- Ethernet Switch CLI Reference Guide...
  • Page 121 This example restricts ports 1-4 to multicast IP addresses 224.255.255.0 through 225.255.255.255. sysname# configure sysname(config)# igmp-snooping filtering sysname(config)# igmp-snooping filtering profile example1 start-address --> 224.255.255.0 end-address 225.255.255.255 sysname(config)# interface port-channel 1-4 sysname(config-interface)# igmp-snooping filtering profile example1 sysname(config-interface)# exit sysname(config)# exit Ethernet Switch CLI Reference Guide...
  • Page 122 Chapter 27 IGMP Snooping Commands Ethernet Switch CLI Reference Guide...

  • Page 123: Igmp Filtering Commands

    IGMP filtering is enabled on the Switch, the port(s) can only <name> join the multicast groups in the specified profile. Prohibits the port(s) from joining any multicast groups if IGMP no igmp-filtering profile filtering is enabled on the Switch. Ethernet Switch CLI Reference Guide...
  • Page 124 This example restricts ports 1-4 to multicast IP addresses 224.255.255.0 through 225.255.255.255. sysname# configure sysname(config)# igmp-filtering sysname(config)# igmp-filtering profile example1 start-address --> 224.255.255.0 end-address 225.255.255.255 sysname(config)# interface port-channel 1-4 sysname(config-interface)# igmp-filtering profile example1 sysname(config-interface)# exit sysname(config)# exit Ethernet Switch CLI Reference Guide...

  • Page 125: Interface Commands

    Note: Intrusion lock is not available on a 10 Gigabit Ethernet port. Sets a name for the port(s). name <port-name-string> port-name-string: up to 64 English keyboard characters Ethernet Switch CLI Reference Guide...
  • Page 126 Resets the port counters for the specified port(s). no interface <port-num> Displays the current interface status for the specified show interfaces <port-list> port(s). Displays current interface configuration for the specified show interfaces config <port-list> port(s). Ethernet Switch CLI Reference Guide...
  • Page 127 If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. LACP This field shows if LACP is enabled on this port or not. TxPkts This field shows the number of transmitted frames on this port Ethernet Switch CLI Reference Guide...
  • Page 128 This field shows the number of packets (including bad packets) received that were between 65 and 127 octets in length. 128-255 This field shows the number of packets (including bad packets) received that were between 128 and 255 octets in length. Ethernet Switch CLI Reference Guide...
  • Page 129 This example configures ports 1-5 in the following ways: 1 Sets the default port VID to 200. 2 Sets these ports to accept only tagged frames. sysname (config)# interface port-channel 1-5 sysname (config-interface)# pvid 200 sysname (config-interface)# frame-type tagged Ethernet Switch CLI Reference Guide...
  • Page 130 Chapter 29 Interface Commands Ethernet Switch CLI Reference Guide...

  • Page 131: Interface Route-Domain Mode

    Use this command to enable/create the specified routing domain for configuration. • Enter the configuration mode. • Enable default routing domain (the 192.168.1.1 subnet) for configuration. • Begin configuring for this domain. sysname# config sysname(config)# interface route-domain 192.168.1.1/24 sysname(config-if)# Ethernet Switch CLI Reference Guide...
  • Page 132 Chapter 30 Interface Route-domain Mode Ethernet Switch CLI Reference Guide...

  • Page 133: Ip Commands

    Displays the number of IP interfaces configured on the show ip iptable count Switch. Displays the static IP address table. show ip iptable static Table 77 tcp and udp Command Summary COMMAND DESCRIPTION Displays IP TCP information. show ip tcp Ethernet Switch CLI Reference Guide...
  • Page 134 In particular, when the timeout algorithm is rsre(3), an object of this type has the semantics of the UBOUND quantity described in RFC 793. Ethernet Switch CLI Reference Guide...
  • Page 135 This field displays the local IP address and port number in this TCP connection. In the case of a connection in the LISTEN state that is willing to accept connections for any IP interface associated with the node, the value is 0.0.0.0. Ethernet Switch CLI Reference Guide...
  • Page 136 This field displays the local IP address and port number for this UDP listener. In the case of a UDP listener that is willing to accept datagrams for any IP interface associated with the node, the value is 0.0.0.0. Ethernet Switch CLI Reference Guide...

  • Page 137: Ip Source Binding Commands

    <mac-addr> vlan <vlan-id> 32.2 Command Examples This example shows the current binding table. sysname# show ip source binding MacAddress IpAddress Lease Type VLAN Port ----------------- --------------- ------------ ------------- ---- Total number of bindings: 0 Ethernet Switch CLI Reference Guide...
  • Page 138 This binding was learned from information provided manually by an administrator. VLAN This field displays the source VLAN ID in the binding. Port This field displays the port number in the binding. If this field is blank, the binding applies to all ports. Ethernet Switch CLI Reference Guide...

  • Page 139: Ipv6 Commands

    2001:db8:1a2b:15:0:0:1a2f:0 • Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So can be written as 2001:0db8:0000:0000:1a2f:0000:0000:0015 2001:0db8::1a2f:0000:0000:0015 2001:0db8:0000:0000:1a2f::0015 Ethernet Switch CLI Reference Guide...
  • Page 140 Multicast Addresse In IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6. A multicast address allows a host to send packets to all hosts in a multicast group. Ethernet Switch CLI Reference Guide...
  • Page 141 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Loopback A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4. Ethernet Switch CLI Reference Guide...
  • Page 142 MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device. In IPv6, all network interfaces can be associated with several addresses. Ethernet Switch CLI Reference Guide...
  • Page 143 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report errors encountered in packet processing and perform other diagnostic functions, such as "ping". Ethernet Switch CLI Reference Guide...
  • Page 144 IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join. Ethernet Switch CLI Reference Guide...
  • Page 145 If one upstream port requests to leave a group, all other upstream ports on the same device will also be removed from the group. Ethernet Switch CLI Reference Guide...
  • Page 146 Manually configures a static IPv6 global address for the ipv6 address <ipv6-address>/ VLAN. <prefix> Manually configures a static IPv6 global address for the ipv6 address <ipv6-address>/ VLAN and have the interface ID be generated <prefix> eui-64 automatically using the EUI-64 format. Ethernet Switch CLI Reference Guide...
  • Page 147 Sets the Switch to send a Release message for the restart ipv6 dhcp client vlan <1- assigned IPv6 address to the DHCP server and start 4094> DHCP message exchange again. Displays IPv6 settings in all VLANs on the Switch. show ipv6 Ethernet Switch CLI Reference Guide...
  • Page 148 Sets the Switch to not add the remote-ID option in the no ipv6 dhcp relay vlan <1-4094> DHCPv6 requests from the clients in the specified VLAN option remote-id before the Switch forwards them to a DHCP server. Ethernet Switch CLI Reference Guide...
  • Page 149 Removes the MLD snooping-proxy statistics of the clear ipv6 mld snooping-proxy multicast VLAN(s). statistics vlan Enters config-interface mode for the specified port(s). interface port-channel <port-list> Enables multicast group limits for MLD snooping-proxy. ipv6 mld snooping-proxy filtering group-limited Ethernet Switch CLI Reference Guide...
  • Page 150 <vlan-id> downstream query- interval <1000-31744000> Sets the maximum time (in miliseconds) that the Switch ipv6 mld snooping-proxy vlan waits for a response to a general query message sent by <vlan-id> downstream query-max- the downstream port. response-time <1000-25000> Ethernet Switch CLI Reference Guide...
  • Page 151 (learned only on the upstream port) can remain in the forwarding table. Disables IPv6 MLD snooping-proxy on the Switch. no ipv6 mld snooping-proxy Disables IPv6 MLD filtering on the Switch. no ipv6 mld snooping-proxy filtering Ethernet Switch CLI Reference Guide...
  • Page 152 VLAN(s). statistics vlan <vlan-list> Displays MLD proxy settings for the specified VLAN. show ipv6 mld snooping-proxy vlan <vlan-id> Displays the multicast group addresses learned on the show ipv6 multicast Switch’s ports and the timeout values. Ethernet Switch CLI Reference Guide...
  • Page 153 VLAN. Specifies how long (in milliseconds) a neighbor is ipv6 nd reachable-time <1000- considered reachable for this VLAN. 2147483647> Resets the number of the DAD attempts to the default no ipv6 nd dad-attempts settings (3). Ethernet Switch CLI Reference Guide...
  • Page 154 Table 92 ipv6 neighbor Command Summary COMMAND DESCRIPTION Removes all IPv6 neighbor information on the Switch. clear ipv6 neighbor Removes IPv6 neighbor information for a specified clear ipv6 neighbor <interface- interface on the Switch. type> <interface-number> Ethernet Switch CLI Reference Guide...
  • Page 155 VLAN 1, and then display the result. Before using ipv6 address commands, you have to enable IPv6 in the VLAN and this has the Switch generate a link-local address for the interface. Ethernet Switch CLI Reference Guide...
  • Page 156 VLAN 1 is reachable from the Switch. sysname# show ipv6 neighbor Address T Interface --------------------------------------- ----------------- -- - ------------ 2001::1234 00:19:cb:0:0:0:1 L vlan 1 fe80::219:cbff:fe00:1 00:19:cb:0:0:0:1 L vlan 1 fe80::2d0:59ff:feb8:103c 00:d0:59:b8:10:3c R D vlan 1 S: reachable(R),stale(S),delay(D),probe(P),invalid(IV),incomplete(I),unknown(?) T: local(L),dynamic(D),static(S),other(O) Ethernet Switch CLI Reference Guide...
  • Page 157 16 bytes from fe80::2d0:59ff:feb8:103c, icmp_seq=1 hlim=64 time=1.0 16 bytes from fe80::2d0:59ff:feb8:103c, icmp_seq=2 hlim=64 time=1.0 --- fe80::2d0:59ff:feb8:103c ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0 % packet loss round-trip min/avg/max = 1.0 /1.0 /1.0 sysname# Ethernet Switch CLI Reference Guide...
  • Page 158 Tunnel adapter Automatic Tunneling Pseudo-Interface: Connection-specific DNS Suffix IP Address... . : fe80::5efe:10.1.1.46%2 Default Gateway ..: Ethernet Switch CLI Reference Guide...
  • Page 159 1 Make sure you have enabled IPv6 on your computer (see Section 33.4). Use the ipconfig command in the command prompt to check the IPv6 address on your computer. The example uses an interface with address “fe80::2d0:59ff:feb8:103c” to Ethernet Switch CLI Reference Guide...
  • Page 160 3b In the step 1, the Ethernet interface identifier you want to use to connect to the Switch is “%4”. Replace the percentage character “%” with “s” and then append it to the address. The address becomes: fe80--219-cbff-fe00-1s4 3c Append “.ipv6-literal.net” at the end. The address becomes: fe80--219-cbff-fe00-1s4.ipv6-literal.net Ethernet Switch CLI Reference Guide...
  • Page 161 Open an Internet Explorer 7.0 browser and type http://fe80--219-cbff-fe00- 1s4.ipv6-literal.net. The login page appears. 4 Alternatively, you can use the global address to access the Switch. Type http:// [2001::1234] on your browser and the login page appears. Ethernet Switch CLI Reference Guide...
  • Page 162 Chapter 33 IPv6 Commands Ethernet Switch CLI Reference Guide...
  • Page 163 Detection) packets on the specified port(s). Enables point-to-point layer 2 protocol tunneling for l2protocol-tunnel point-to- LACP packets on the specified port(s). point lacp Enables point-to-point layer 2 protocol tunneling for l2protocol-tunnel point-to- PAgP packets on the specified port(s). point pagp Ethernet Switch CLI Reference Guide...
  • Page 164 34.2 Command Examples This example enables L2PT on the Switch and sets the destination MAC address for encapsulating layer 2 protocol packets received on an access port. sysname# configure sysname(config)# l2protocol-tunnel sysname(config)# l2protocol-tunnel mac 00:10:23:45:67:8e sysname(config)# Ethernet Switch CLI Reference Guide...
  • Page 165 Layer 2 Protocol Tunneling: Enable Destination MAC Address: 00:10:23:45:67:8e Port Protocol State Encapsulation Decapsulation Drop Counter Counter Counter ---- -------- ------ ------------- ------------- ------- Enable Enable 1280 2548 Enable lacp Disable pagp Disable udld Disable sysname# Ethernet Switch CLI Reference Guide...
  • Page 166 Chapter 34 Layer 2 Protocol Tunnel (L2PT) Commands Ethernet Switch CLI Reference Guide...

  • Page 167: Link Layer Discovery Protocol

    • MAC/PHY Configuration/Status TLV (optional) • Power via MDI TLV (optional) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. Ethernet Switch CLI Reference Guide...
  • Page 168 Disables the sending of System Capabilities TLVs on the no lldp basic-tlv system- port(s). capabilities Disables the sending of System Description TLVs on the no lldp basic-tlv system- port(s). description Ethernet Switch CLI Reference Guide...
  • Page 169 Displays the device information from the neighboring show lldp info remote devices. Displays the neighboring device information received on show lldp info remote interface the specified port(s). port-channel <port-list> Displays LLDP statistics on the Switch. show lldp statistic Ethernet Switch CLI Reference Guide...
  • Page 170 802.3 TLV Flags: (L)Link Aggregation, (M)MAC/PHY Configuration/Status (F)Maximun Frame Size, (P)Power Via MDI sysname# show lldp config LLDP Global Configuration: Active: Yes Transmit Interval: 30 seconds Transmit Hold: 4 Transmit Delay: 2 seconds Reinitialize Delay: 2 seconds sysname# Ethernet Switch CLI Reference Guide...

  • Page 171: Load Sharing Commands

    Sets the time interval (from 0 to 86400 in increments of 10) in ip load-sharing discover-time seconds at which the Switch sends an ARP request to update <0-86400> an unresolved next-hop’s MAC address. Disables load sharing on the Switch. no ip load-sharing Ethernet Switch CLI Reference Guide...
  • Page 172 This example enables Equal-Cost MultiPath (ECMP) routing on the Switch and sets the Switch to use a packet’s source and destination IP addresses to determine the routing path for the packet. sysname# configure sysname(config)# ip load-sharing sysname(config)# ip load-sharing sip-dip sysname(config)# Ethernet Switch CLI Reference Guide...

  • Page 173: Logging Commands

    1 00:00:14 1970 PINI INFO main: init completed 11 Thu Jan 1 00:00:04 1970 PP05 -WARN SNMP TRAP 3: link up 11 Thu Jan 1 00:00:04 1970 PP05 -WARN SNMP TRAP 3: link up sysname# Ethernet Switch CLI Reference Guide...
  • Page 174 Chapter 37 Logging Commands Ethernet Switch CLI Reference Guide...

  • Page 175: Login Account Commands

    This is used for password cipher <password> privilege <0- encryption. The privilege level is applied the next time the 14> user logs in. name: 1-32 alphanumeric characters. password: 32 alphanumeric characters. Removes the specified account. no logins username <name> Ethernet Switch CLI Reference Guide...
  • Page 176 Chapter 38 Login Account Commands 38.3 Command Examples This example creates a new user user2 with privilege 13. sysname# configure sysname(config)# logins username user2 password 1234 privilege 13 sysname(config)# exit sysname# show logins Login Username Privilege user2 Ethernet Switch CLI Reference Guide...

  • Page 177: Loopguard Commands

    Switch as well. The Switch shuts down a port if the Switch detects that packets sent out on the port loop back to the Switch. Disables the loopguard feature on the port(s). no loopguard Clears loopguard counters. clear loopguard Ethernet Switch CLI Reference Guide...
  • Page 178 Bad Pkts This field displays the number of invalid probe packets that were received on this port. Shutdown Time This field displays the last time the port was shut down because a loop state was detected. Ethernet Switch CLI Reference Guide...

  • Page 179: Mac Address Commands

    Displays and changes all dynamically learned MAC address mac-transfer dynamic-to-filter entries in the specified VLAN(s) into MAC filtering entries vlan <vlan-list> Displays and changes a dynamically learned MAC address mac-transfer dynamic-to-forward entry into a MAC forwarding entry. mac <mac-addr> Ethernet Switch CLI Reference Guide...
  • Page 180 This is the MAC address of the device from which this frame came. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered using mac-forward commands, see Chapter 43 on page 185). Ethernet Switch CLI Reference Guide...

  • Page 181: Mac Authentication Commands

    Specifies the amount of time before the Switch allows a client mac-authentication timeout <1- MAC address that fails authentication to try and authenticate 3000> again. This settings is superseded by the mac-aging-time command. Disables MAC authentication on the Switch. no mac-authentication Ethernet Switch CLI Reference Guide...
  • Page 182 1 - 5 and configuration details are displayed. sysname(config)# mac-authentication sysname(config)# mac-authentication nameprefix clientName sysname(config)# mac-authentication password Lech89 sysname(config)# interface port-channel 1-5 sysname(config-interface)# mac-authentication sysname(config-interface)# exit sysname(config)# exit sysname# show mac-authentication NamePrefix: clientName Password: Lech89 Update Time: None Deny Number: Ethernet Switch CLI Reference Guide...

  • Page 183: Mac Filter Commands

    <vlan-id> inactive name: 1-32 alphanumeric characters Enables the specified MAC-filter rule. no mac-filter mac <mac-addr> vlan <vlan-id> inactive Specifies the source and or destination filter parameters. mac-filter name <name> mac <mac- addr> vlan <vlan-id> drop <src|dst|both> Ethernet Switch CLI Reference Guide...
  • Page 184 The next example is for Switches that support the filtering of frames based on the source or destination MAC address only. This example creates a filter “sourcefilter” that drops packets originating from the MAC address af:af:01:01:ff:02 on VLAN 2. sysname(config)# mac-filter name sourcefilter mac af:af:01:01:ff:02 vlan 2 drop src Ethernet Switch CLI Reference Guide...

  • Page 185: Mac Forward Commands

    Disables a static MAC address forwarding rule. mac-forward name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> inactive Enables the specified MAC address, belonging to a VLAN no mac-forward mac <mac-addr> group forwarded through an interface. vlan <vlan-id> interface <interface-id> inactive Ethernet Switch CLI Reference Guide...
  • Page 186 Chapter 43 MAC Forward Commands Ethernet Switch CLI Reference Guide...

  • Page 187: Mirror Commands

    11 indicates port 11 on the card in the third slot. Use a comma (,) to separate individual ports or a desh (-) to indicates a range of ports. For example, “3/11,4/5” or “3/7-3/9”. Enables port mirroring in the interface. mirror Ethernet Switch CLI Reference Guide...
  • Page 188 44.2 Command Examples This example enables port mirroring and copies outgoing traffic from ports 1, 4, 5, and 6 to port 3. sysname(config)# mirror-port sysname(config)# mirror-port 3 sysname(config)# interface port-channel 1,4-6 sysname(config-interface)# mirror sysname(config-interface)# mirror dir egress Ethernet Switch CLI Reference Guide...
  • Page 189 Chapter 44 Mirror Commands This example displays the mirror settings of the Switch after you configured in the example above. sysname# show mirror Mirroring: enable Monitor port: Mirrored port: 1,4-6 Ingress: Egress: 1,4-6 Both: Ethernet Switch CLI Reference Guide...
  • Page 190 Chapter 44 Mirror Commands Ethernet Switch CLI Reference Guide...

  • Page 191: Mrstp Commands

    Sets the Hello Time, Maximum Age and Forward mrstp <tree-index> hello-time <1-10> Delay values on the Switch for the specified MRSTP maximum-age <6-40> forward-delay <4- configuration. 30> Activates MRSTP on the specified ports. mrstp interface <port-list> Ethernet Switch CLI Reference Guide...
  • Page 192 In this example, we enable MRSTP on ports 21-24. Port 24 is connected to the host while ports 21-23 are connected to another switch. sysname(config)# configure sysname(config)# spanning-tree mode MRSTP sysname(config)# mrstp 1 sysname(config)# mrstp interface 21-24 sysname(config)# no mrstp interface 21-23 edge-port Ethernet Switch CLI Reference Guide...

  • Page 193: Mstp Commands

    Note: An edge port becomes a non-edge port as soon as it receiveds a Bridge Protocol Data Units (BPDU). Sets the listed ports as non-edge ports. no mstp interface port-channel <port- list> edge-port Ethernet Switch CLI Reference Guide...
  • Page 194 This example shows the current MSTP configuration. sysname# show mstp (a)BridgeMaxAge: (seconds) (b)BridgeHelloTime: (seconds) (c)BridgeForwardDelay: (seconds) (d)BridgeMaxHops: (e)TransmissionLimit: (f)ForceVersion: (g)MST Configuration ID Format Selector: Configuration Name: 001349aefb7a Reveision Number: Configuration Digest: 0xAC36177F50283CD4B83821D8AB26DE62 msti vlans mapped ----------------------------- 1-4094 ----------------------------- Ethernet Switch CLI Reference Guide...
  • Page 195 0 Bridge Info: MSTID: 0 (a)BridgeID: 8000-001349aefb7a (b)TimeSinceTopoChange: 756003 (c)TopoChangeCount: (d)TopoChange: (e)DesignatedRoot: 8000-001349aefb7a (f)RootPathCost: (g)RootPort: 0x0000 (h)RootMaxAge: (seconds) (i)RootHelloTime: (seconds) (j)RootForwardDelay: (seconds) (k)BridgeMaxAge: (seconds) (l)BridgeHelloTime: (seconds) (m)BridgeForwardDelay: (seconds) (n)ForceVersion: mstp (o)TransmissionLimit: (p)CIST_RRootID: 8000-001349aefb7a (q)CIST_RRootPathCost: Ethernet Switch CLI Reference Guide...
  • Page 196 This field displays the unique identifier for the CIST regional root bridge, consisting of bridge priority plus MAC address. CIST_RRootPathCost This field displays the path cost from the root port on this Switch to the CIST regional root switch. Ethernet Switch CLI Reference Guide...
  • Page 197 1. In MSTRegionNorth, VLAN 2 is in MST instance 1, and VLAN 3 is in MST instance 2. sysname# configure sysname(config)# mstp sysname(config)# mstp configuration-name MSTRegionNorth sysname(config)# mstp revision 1 sysname(config)# mstp instance 1 vlan 2 sysname(config)# mstp instance 2 vlan 3 sysname(config)# exit Ethernet Switch CLI Reference Guide...
  • Page 198 Chapter 46 MSTP Commands Ethernet Switch CLI Reference Guide...

  • Page 199: Multiple Login Commands

    (*) next to the index number, this entry is your session. session This field displays the service the administrator used to log in. remote ip This field displays the IP address of the administrator’s computer. Ethernet Switch CLI Reference Guide...
  • Page 200 Chapter 47 Multiple Login Commands Ethernet Switch CLI Reference Guide...

  • Page 201: Mvr Commands

    1-32 English keyboard characters Disables all MVR group settings. no group Disables the specified MVR group setting. no group <name-str> Removes an MVR configuration of the specified VLAN from no mvr <vlan-id> the Switch. Ethernet Switch CLI Reference Guide...
  • Page 202 5 Configures MVR multicast group addresses 224.0.0.1 through 224.0.0.255 by the name of ipgroup. 6 Exits MVR mode. sysname(config)# mvr 3 sysname(config-mvr)# name multivlan sysname(config-mvr)# source-port 2,3,5 sysname(config-mvr)# receiver-port 6-8 sysname(config-mvr)# mode dynamic sysname(config-mvr)# group ipgroup start-address 224.0.0.1 end-address --> 224.0.0.255 sysname(config-mvr)# exit Ethernet Switch CLI Reference Guide...

  • Page 203: Reference N-S

    Reference N-S OSPF Commands (205) Password Commands (211) PoE Commands (213) Policy Commands (217) Policy Route Commands (221) Port Security Commands (223) Port-based VLAN Commands (225) PPPoE IA Commands (227) Private VLAN Commands (233) Protocol-based VLAN Commands (237) Queuing Commands (239) RADIUS Commands (243) Remote Management Commands (245) RIP Commands (247)
  • Page 204 Syslog Commands (281)

  • Page 205: Ospf Commands

    Specifies the authentication key for OSPF. ip ospf authentication-key <key> Disables OSPF authentication in this no ip ospf authentication-key <key> routing domain. Sets the same OSPF authentication ip ospf authentication-same-aa settings in the routing domain as the associated area. Ethernet Switch CLI Reference Guide...
  • Page 206 Deletes the virtual link from the area. no area <area-id> virtual-link <router- id> Enables simple authentication and sets the area <area-id> virtual-link <router-id> authentication key for the specified virtual authentication-key <key> link in the area. Ethernet Switch CLI Reference Guide...
  • Page 207 Route redistribution allows your Switch to import and translate external routes learned through other routing protocols (RIP and Static) into the OSPF network transparently. Sets the Switch not to learn RIP routing no redistribute rip information. Ethernet Switch CLI Reference Guide...
  • Page 208 Disables OSPF on the Switch. no router ospf 49.3 Command Examples In this example, the Switch (A) is an Area Border Router (ABR) in an OSPF network. Figure 7 OSPF Network Example Area 1 Area 0 Backbone IP: 172.16.1.1 Ethernet Switch CLI Reference Guide...
  • Page 209 It summarizes 4 routing entries 192.168.8.0/24 ~ 192.168.11.0/24 (learned from RIP router A) into 192.168.8.0/22 and then sends it to OSPF router B. Figure 8 OSPF Redistribution Summary Address Example OSPF IP: 172.16.1.1 Redistributor 192.168.8.0/24 192.168.8.0/22 192.168.9.0/24 192.168.10.0/24 192.168.11.0/24 Ethernet Switch CLI Reference Guide...
  • Page 210 OSPF Router with ID (172.16.1.1) (Omit not external part °K) AS External Link States Link ID ADV Router Seq# CkSum Route 192.168.8.0 192.168.2.2 6 0x80000001 0xf209 E1 192.168.8.0/22 Ethernet Switch CLI Reference Guide...

  • Page 211: Password Commands

    <0-14> prevents users from entering the specified privilege level. Sets all password setting encryption. password encryption Disables password encryption. The encrypted password will no password encryption not be changed back to plain text. Ethernet Switch CLI Reference Guide...
  • Page 212 Chapter 50 Password Commands 50.3 Command Examples Section 2.1.3.2 on page Ethernet Switch CLI Reference Guide...

  • Page 213: Poe Commands

    <1-99> traps. Set the power management mode. pwr mode <classification|consumption> • Classification - Reserve the maximum power to each PD according to the priority level. • Consumption - Reserve the consuming power to each PD. Ethernet Switch CLI Reference Guide...
  • Page 214 7 Enable 8 Enable 9 Enable 10 Enable 11 Enable 12 Enable 13 Enable 14 Enable 15 Enable 16 Enable 17 Enable 18 Enable 19 Enable 20 Enable 21 Enable 22 Enable 23 Enable 24 Enable Ethernet Switch CLI Reference Guide...
  • Page 215 This field displays the amount of power the Switch can still provide for PoE. Note: The Switch must have at least 16 W of remaining power in order to supply power to a PoE device, even if the PoE device requested less than 16 W. Ethernet Switch CLI Reference Guide...
  • Page 216 Chapter 51 PoE Commands Ethernet Switch CLI Reference Guide...

  • Page 217: Policy Commands

    52.1 Command Summary The following section lists the commands for this feature. Table 122 policy Command Summary COMMAND DESCRIPTION Displays all policy related information. show policy Displays the specified policy related information. show policy <name> Ethernet Switch CLI Reference Guide...
  • Page 218 - discards the out of profile packets (drop). - queues the packets that are marked for dropping (forward). - marks the out of profile traffic and drops it when network is congested (set-drop-precedence). inactive - disables the policy rule. Ethernet Switch CLI Reference Guide...
  • Page 219 VLAN = 1; Priority = 0; DSCP = 0; TOS = 7; Egress Port = 1; Outgoing packet format = tagged; Bandwidth = 0; Out-of-profile DSCP = 0; Action: Replace the 802.1 priority field with the IP TOS value; Ethernet Switch CLI Reference Guide...
  • Page 220 Policy1 classifier Class1 egress-port 8 outgoing- eport sysname(config)# exit sysname# show policy Policy1 Policy Policy1: Classifiers: Class1; Parameters: VLAN = 1; Priority = 0; Egress Port = 8; Bandwidth = 64; Action: Send the packet to the egress port; sysname# Ethernet Switch CLI Reference Guide...

  • Page 221: Policy Route Commands

    Deletes the specified policy routing profile. no ip policy-route <name> Enables a policy routing profile. no ip policy-route <name> inactive Deletes a rule from the specified policy routing profile. no ip policy-route <name> sequence <number> Ethernet Switch CLI Reference Guide...
  • Page 222 ActiveProfile Name Sequence State Classifier ----------------------------------------------------------------- Profile-1 permit Class-1 sysname# show ip policy-route Profile-1 sequence 5 Policy route profile: Profile-1 Yes Information: permit 5 Classifier: Class-1 Action: Next hop: 10.1.1.99 Matched policy route: 19074 packets sysname# Ethernet Switch CLI Reference Guide...

  • Page 223: Port Security Commands

    Note: All previously-learned dynamic MAC addresses are saved to the static MAC address table. Limits the number of (dynamic) MAC addresses that may be port-security <port-list> vlan learned on the specified port(s) in a specified VLAN. <vlan-id> address-limit <number> Ethernet Switch CLI Reference Guide...
  • Page 224 1 sysname(config)# no port-security 1 learn inactive sysname(config)# port-security 1 address-limit 5 sysname(config)# exit sysname# show port-security 1 Port Security Active : YES Port Active Address Learning Limited Number of Learned MAC Address Ethernet Switch CLI Reference Guide...

  • Page 225: Port-Based Vlan Commands

    This example looks at the ports to which incoming traffic from ports 1 and 2 can be forwarded. sysname# show interfaces config 1-2 egress Port 1: Enabled egress ports cpu, eg1 Port 2: Enabled egress ports cpu, eg1-eg4 Ethernet Switch CLI Reference Guide...
  • Page 226 Chapter 55 Port-based VLAN Commands Ethernet Switch CLI Reference Guide...

  • Page 227: Pppoe Ia Commands

    • If a PADI, PADR, or PADT packet is sent from a PPPoE client and received on an untrusted port, the Switch adds a vendor-specific tag to the packet and then forwards it to the trusted port(s). Ethernet Switch CLI Reference Guide...
  • Page 228 VLAN(s). vlan <vlan-id> format-type remote-id Disables PPPoE IA globally. no pppoe intermediate-agent Disables the PPPoE IA Remote ID settings for the specified no pppoe intermediate-agent vlan VLAN(s). <vlan-list> remote-id Ethernet Switch CLI Reference Guide...
  • Page 229 Shows the statistics of PPPoE packets handled (received, show pppoe intermediate-agent forwarded and dropped) by PPPoE IA on the Switch. statistic Shows the statistics of PPPoE packets for the specified show pppoe intermediate-agent VLAN(s). statistic vlan <vlan-list> Ethernet Switch CLI Reference Guide...
  • Page 230 2 sysname(config)# interface port-channel 2 sysname(config-interface)# pvid 2 sysname(config-interface)#exit sysname(config)# interface port-channel 5 sysname(config-interface)# pvid 2 sysname(config-interface)# pppoe intermediate-agent trust sysname(config-interface)#exit sysname(config)# pppoe intermediate-agent vlan 2 circuit-id sysname(config)# pppoe intermediate-agent vlan 2 remote-id Ethernet Switch CLI Reference Guide...
  • Page 231 1 format-type remote-id string ForPortVlanRemoteIdTest sysname(config-interface)# exit Similarly, we can let the circuit-id carry the information which we configure: sysname# configure sysname(config)# interface port-channel 2 sysname(config-interface)# pppoe intermediate-agent vlan 1 format-type circuit-id string ForPortVlanCircuitIdTest sysname(config-interface)# exit Ethernet Switch CLI Reference Guide...
  • Page 232 ForPortCircuitIdTest sysname(config-interface)# pppoe intermediate-agent format-type remote- id string ForPortRemoteIdTest sysname(config-interface)# exit Since we didn't assign the appended string for remote-id in example 1 and 2, it will carry the client's MAC address as default. Ethernet Switch CLI Reference Guide...

  • Page 233: Private Vlan Commands

    If you change the VLAN settings, make sure you keep at least one port in the promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this VLAN is blocked from the whole network. Ethernet Switch CLI Reference Guide...
  • Page 234 123 can send and receive traffic from ports 7 and 8. This example also shows all private Switch VLAN rules configured on the sysname# configure sysname(config)# private-vlan name pvlan-123 vlan 123 promiscuous-port 7-8 sysname(config)# exit sysname# show private-vlan Private VLAN: 123 Active: Yes Name Promiscuous Port ------------ -------------------------- pvlan-123 sysname# Ethernet Switch CLI Reference Guide...
  • Page 235 24. This example also shows all private VLAN rules configured on the sysname# configure sysname(config)# private-vlan name pvlan-111 vlan 111 sysname(config)# exit sysname# show private-vlan Private VLAN: 111 Active: Yes Name Promiscuous Port ------------ -------------------------- pvlan-111 sysname# Ethernet Switch CLI Reference Guide...
  • Page 236 Chapter 57 Private VLAN Commands Ethernet Switch CLI Reference Guide...

  • Page 237: Protocol-Based Vlan Commands

    Table 128 protocol-based-vlan Command Summary COMMAND DESCRIPTION Displays the protocol based VLAN settings for the specified show interfaces config <port- port(s). list> protocol-based-vlan Enters subcommand mode for configuring the specified ports. C interface port-channel <port- list> Ethernet Switch CLI Reference Guide...
  • Page 238 1-4 protocol-based-vlan Name Port Packet type Ethernet type Vlan Priority Active ------- ---- ----------- ------------- ---- -------- ------ IP_VLAN EtherII IP_VLAN EtherII IP_VLAN EtherII IP_VLAN EtherII sysname# Ethernet Switch CLI Reference Guide...

  • Page 239: Queuing Commands

     Switch models which have only 4 queues, support a limited version of SPQ. The highest level queue is serviced using SPQ and the remaining queues use WRR queuing. Ethernet Switch CLI Reference Guide...
  • Page 240 Note: Some models only support 4 queues. Enters subcommand mode for configuring the specified ports. C interface port-channel <port- list> Sets the switch to use Strictly Priority Queuing (SPQ) on the specified ports. Ethernet Switch CLI Reference Guide...
  • Page 241 This example configures WFQ on ports 1-5 and assigns weight values (1,2,3,4,12,13,14,15) to the physical queues (Q0 to Q8). sysname(config)# interface port-channel 1-5 sysname(config-interface)# wfq sysname(config-interface)# weight 1 2 3 4 12 13 14 15 Ethernet Switch CLI Reference Guide...
  • Page 242 This example configures the Switch to use WRR as a queueing method but configures the Gigabit ports 9-12 to use SPQ for queues 5, 6 and 7. sysname(config)# wrr sysname(config)# interface port-channel 9-12 sysname(config-interface)# ge-spq 5 Ethernet Switch CLI Reference Guide...

  • Page 243: Radius Commands

    Resets the specified RADIUS server to its default values. no radius-server <index> Table 132 radius-accounting Command Summary COMMAND DESCRIPTION Displays RADIUS accounting server settings. show radius-accounting Specifies the RADIUS accounting server timeout value. radius-accounting timeout <1- 1000> Ethernet Switch CLI Reference Guide...
  • Page 244 RADIUS server (172.16.10.11). The secondary RADIUS server is also the accounting server. sysname# configure sysname(config)# radius-server mode index-priority sysname(config)# radius-server host 1 172.16.10.10 sysname(config)# radius-server host 2 172.16.10.11 sysname(config)# radius-accounting host 1 172.16.10.11 sysname(config)# exit Ethernet Switch CLI Reference Guide...

  • Page 245: Remote Management Commands

    [icmp] [snmp] [ssh] [https]> Table 135 service-control Command Summary COMMAND DESCRIPTION Displays service control settings. show service-control Allows FTP access to the Switch. service-control ftp Specifies the service port for the FTP service. service-control ftp <socket- number> Ethernet Switch CLI Reference Guide...
  • Page 246 2 start-addr 192.168.10.1 end-addr --> 192.168.10.1 service snmp sysname(config)# exit Switch This example disables all SNMP and ICMP access to the sysname# configure sysname(config)# no service-control snmp sysname(config)# no service-control icmp sysname(config)# exit Ethernet Switch CLI Reference Guide...

  • Page 247: Rip Commands

    Displays global RIP settings. show router rip Displays the routing protocol the Switch is show ip protocols using and its administrative distance value. Enables and enters the RIP configuration router rip mode on the Switch. Ethernet Switch CLI Reference Guide...
  • Page 248 • Sets the RIP direction in this routing domain to Both and the version to 2 with subnet broadcasting (v2b); the Switch will send and receive RIP packets in this routing domain. sysname(config)# router rip sysname(config-rip)# exit sysname(config)# interface route-domain 172.16.1.1/24 sysname(config-if)# ip rip direction Both version v2b Ethernet Switch CLI Reference Guide...

  • Page 249: Rmon

    This is an entry’s index number in the history control table, between 1 and 65535. historycontro l-index This is a person’s name who will handle the event, alarm, historycontrol, or owner Ethernet statistics entry. This is a port that the Switch will poll for data. interface-id Ethernet Switch CLI Reference Guide...
  • Page 250 <interface-id> Displays all current network traffic statistics show rmon statistics etherstats [index or only the specified entry’s. <etherstats-index>] Displays current network traffic statistics for show rmon statistics etherstats port-channel the specified port. <interface-id> Ethernet Switch CLI Reference Guide...
  • Page 251 [ifAdminStatus.<port>] • [ifOperStatus.<port>] • [ifLastChange.<port>] • [ifInOctets.<port>] • [ifInUcastPkts.<port>] • [ifInNUcastPkts.<port>] • [ifInDiscards.<port>] • [ifInErrors.<port>] • [ifInUnknownProtos.<port>] • [ifOutOctets.<port>] • [ifOutUcastPkts.<port>] • [ifOutNUcastPkts.<port>] • [ifOutDiscards.<port>] • [ifOutErrors.<port>] • [ifOutQLen.<port>] • [sysMgmtCPUUsage.<index>] • [sysMemoryPoolUtil.<index>] • [<OID>] Ethernet Switch CLI Reference Guide...
  • Page 252 Section 63.3.1 on page 251) • the falling threshold: 0 • which event’s action should be taken for the falling alarm: 0 (see Section 63.3.1 on page 251) • who will handle this alarm: operator Ethernet Switch CLI Reference Guide...
  • Page 253 1576159 etherStatsPkts: 19861 etherStatsBroadcastPkts: 16721 etherStatsMulticastPkts: 1453 etherStatsCRCAlignErrors: 2 etherStatsUndersizePkts: 0 etherStatsOversizePkts: 0 etherStatsFragments: 0 etherStatsJabbers: 0 etherStatsCollisions: 0 Packet length distribution: 64: 17952 65-127: 666 128-255: 671 256-511: 509 512-1023: 26 1024-1518: 37 ras# Ethernet Switch CLI Reference Guide...
  • Page 254 Monitored history 2: Monitored at 0 days 00h:09m:08s etherHistoryIntervalStart: 548 etherHistoryDropEvents: 0 etherHistoryOctets: 673408 etherHistoryPkts: 7759 etherHistoryBroadcastPkts: 5978 etherHistoryMulticastPkts: 519 etherHistoryCRCAlignErrors: 2 etherHistoryUndersizePkts: 0 etherHistoryOversizePkts: 0 etherHistoryFragments: 0 etherHistoryJabbers: 0 etherHistoryCollisions: 0 etherHistoryUtilization: 0 ras# Ethernet Switch CLI Reference Guide...

  • Page 255: Running Configuration

    Table 140 running-config User-input Values COMMAND DESCRIPTION Possible values: active, name, speed-duplex, bpdu-control, attribute flow-control, intrusion-lock, vlan1q, vlan1q-member, bandwidth-limit, vlan-stacking, port-security, broadcast- storm-control, mirroring, port-access-authenticator, queuing-method, igmp-filtering, spanning-tree, mrstp, protocol-based-vlan, port-based-vlan, mac-authentication, trtcm, ethernet-oam, loopguard, arp-inspection, dhcp- snooping. Ethernet Switch CLI Reference Guide...

  • Page 256: Running Configuration Commands

    This example copies all attributes of port 1 to port 2 and copies selected attributes (active, bandwidth limit and STP settings) from port 1 to ports 5-8 sysname# copy running-config interface port-channel 1 2 sysname# copy running-config interface port-channel 1 5-8 active bandwidth-limit spanning-tree Ethernet Switch CLI Reference Guide...

  • Page 257: Sflow

    You can also set a sample rate (N) from 256 to 65535. The Switch captures every one out of N packets for this port to create sFlow datagram. Disables the sFlow agent on the Switch. no sflow Ethernet Switch CLI Reference Guide...
  • Page 258 UDP port ----- ----------------- -------- 10.1.1.58 6343 sFlow Port Information: Port Active Sample-rate Poll-interval Collector Address ---- ------ ----------- ------------- ----------------- 2500 10.1.1.58 2500 10.1.1.58 2500 10.1.1.58 2500 10.1.1.58 32768 0.0.0.0 32768 0.0.0.0 32768 0.0.0.0 ..Ethernet Switch CLI Reference Guide...

  • Page 259: Smart Isolation Commands

    In the following example, switch A is the root bridge. Switch B’s root port 7 connects to switch A and switch B’s designated port 8 Ethernet Switch CLI Reference Guide...
  • Page 260 The following section lists the commands for this feature. Table 143 smart-isolation Command Summary COMMAND DESCRIPTION Disables smart isolation on the Switch. no smart-isolation Enables smart isolation on the Switch. show smart-isolation Displays the smart isolation status and information on the smart-isolation Switch. Ethernet Switch CLI Reference Guide...
  • Page 261 This field displays the isolated port list after smart isolation is enabled. Private VLAN This section is available only when you have configured private VLAN on the Switch. The following fields display the private VLAN information before and after smart isolation is enabled. Ethernet Switch CLI Reference Guide...
  • Page 262 This section displays the VLAN ID and isolated and promiscuous port list before smart isolation is enabled Smart Isolated VLAN This section displays the VLAN ID and isolated and promiscuous port list after smart isolation is enabled Ethernet Switch CLI Reference Guide...

  • Page 263: Snmp Server Commands

    Sets the get community. Only for SNMPv2c or lower. snmp-server get-community <property> Sets the set community. Only for SNMPv2c or lower. snmp-server set-community <property> Sets the trap community. Only for SNMPv2c or lower. snmp-server trap-community <property> Ethernet Switch CLI Reference Guide...
  • Page 264 Prevents the Switch from sending any AAA traps to the no snmp-server trap-destination specified manager. <ip> enable traps aaa Sends the specified AAA traps to the specified manager. snmp-server trap-destination <ip> enable traps aaa <options> Ethernet Switch CLI Reference Guide...
  • Page 265 Sends the specified system traps to the specified manager. snmp-server trap-destination <ip> enable traps system <options> Prevents the Switch from sending the specified system traps no snmp-server trap-destination to the specified manager. <ip> enable traps system <options> Ethernet Switch CLI Reference Guide...
  • Page 266 0.0.0.0 0.0.0.0 This example shows you how to display all SNMP user information on the Switch. sysname# show snmp-server user [ User Information ] Index Name SecurityLevel GroupName ----- ------ ------------- -------------- admin noauth admin Ethernet Switch CLI Reference Guide...

  • Page 267: Stp And Rstp Commands

    <0-61440> Sets the bridge priority of the Switch. The lower the numeric value you assign, the higher the priority for this bridge. priority: Must be a multiple of 4096. Enables STP on a specified ports. spanning-tree <port-list> Disables STP on listed ports. no spanning-tree <port-list> Ethernet Switch CLI Reference Guide...
  • Page 268 4 Enables STP on port 5 with a path cost of 150. 5 Sets the priority for port 5 to 20. sysname(config)# spanning-tree sysname(config)# spanning-tree priority 0 sysname(config)# spanning-tree hello-time 4 maximum-age 20 forward-delay --> 15 sysname(config)# spanning-tree 5 path-cost 150 sysname(config)# spanning-tree 5 priority 20 Ethernet Switch CLI Reference Guide...
  • Page 269 This field displays the time interval (in seconds) at which the Switch transmits a configuration message. BridgeForwardDelay This field displays the time (in seconds) the Switch will wait before changing states (that is, listening to learning to forwarding). Ethernet Switch CLI Reference Guide...
  • Page 270 In this example, we enable RSTP on ports 21-24. Port 24 is connected to the host while ports 21-23 are connected to another switch sysname(config)# configure sysname(config)# spanning-tree sysname(config)# spanning-tree 21-24 sysname(config)# no spanning-tree 21-23 edge-port Ethernet Switch CLI Reference Guide...

  • Page 271: Ssh Commands

    This example disables the secure shell RSA1 encryption key and removes remote hosts 172.165.1.8 and 172.165.1.9 (with an SSH-RSA encryption key) from the list of known hosts. sysname(config)# no ssh key rsa1 sysname(config)# no ssh known-hosts 172.165.1.8 sysname(config)# no ssh known-hosts 172.165.1.9 ssh-rsa Ethernet Switch CLI Reference Guide...
  • Page 272 Bytes In This field displays the number of bytes the SSH server has received from the SSH client. Bytes Out This field displays the number of bytes the SSH server has sent to the SSH client. Ethernet Switch CLI Reference Guide...

  • Page 273: Static Multicast Commands

    <mac-addr> vlan <vlan-id> interface port-channel <port- list> Removes a specified static multicast rule. no multicast-forward mac <mac- addr> vlan <vlan-id> Activates a specified static multicast rule. no multicast-forward mac <mac- addr> vlan <vlan-id> inactive Ethernet Switch CLI Reference Guide...
  • Page 274 This example creates a static multicast forwarding rule. The rule forwards frames with destination MAC address 01:00:5e:00:00:06 to ports 10~12 in VLAN 1. sysname# configure sysname(config)# multicast-forward name AAA mac 01:00:5e:00:00:06 vlan 1 interface port-channel 10-12 Ethernet Switch CLI Reference Guide...

  • Page 275: Static Route Commands

    Removes a specified static route. no ip route <ip> <mask> <next- hop-ip> no ip route <ip> <mask> inactive Enables a specified static route. Enables a specified static route. no ip route <ip> <mask> <next- hop-ip> inactive Ethernet Switch CLI Reference Guide...
  • Page 276 192.168.10.1 255.255.255.0 192.168.1.1 Error : The Action is failed. Please re-configure setting. You can create this static route if it is inactive, however. sysname# configure sysname(config)# ip route 192.168.10.1 255.255.255.0 192.168.1.1 inactive Ethernet Switch CLI Reference Guide...
  • Page 277 You can create an active static route that routes traffic for 192.168.10.1/24 to 172.16.37.254. sysname# configure sysname(config)# ip route 192.168.10.1 255.255.255.0 172.16.37.254 sysname(config)# exit sysname# show ip route static Idx Active Name Dest. Addr. Subnet Mask Gateway Addr. Metric static 192.168.10.1 255.255.255.0 172.16.37.254 Ethernet Switch CLI Reference Guide...
  • Page 278 Chapter 71 Static Route Commands Ethernet Switch CLI Reference Guide...

  • Page 279: Subnet-Based Vlan Commands

    Note: Implementation on a per port basis is not available on all models. Disables the specified subnet-based VLAN. subnet-based-vlan name <name> source-ip <ip> mask-bits <mask- bits> vlan <vlan-id> priority <0-7> inactive Disables subnet-based VLAN on the Switch. no subnet-based-vlan Ethernet Switch CLI Reference Guide...
  • Page 280 172.16.37.1 mask-bits --> 24 vlan 200 priority 6 sysname(config)# exit sysname# show subnet-vlan Global Active :Yes Name Src IP Mask-Bits Vlan Priority Entry Active ----------- ----------- --------- ---- -------- ------------ subnet1VLAN 172.16.37.1 Ethernet Switch CLI Reference Guide...

  • Page 281: Syslog Commands

    Enables syslog logging for the specified log type. syslog type <type> Sets the file location for the specified log type. syslog type <type> facility <0- 7> Disables syslog logging for the specified log type. no syslog type <type> Ethernet Switch CLI Reference Guide...
  • Page 282 Chapter 73 Syslog Commands Ethernet Switch CLI Reference Guide...

  • Page 283: Reference T-Z

    Reference T-Z TACACS+ Commands (285) TFTP Commands (287) Trunk Commands (289) trTCM Commands (293) VLAN Commands (297) VLAN IP Commands (303) VLAN Mapping Commands (305) VLAN Port Isolation Commands (307) VLAN Stacking Commands (309) VLAN Trunking Commands (313) VRRP Commands (315) Additional Commands (319)

  • Page 285: Tacacs+ Commands

    Optionally, sets the port number and key of <ip> [acct-port <socket-number>] the external TACACS+ accounting server. [key <key-string>] index: 1 or 2. key-string: 1-32 alphanumeric characters Disables TACACS+ accounting on the specified server. no tacacs-accounting <index> Ethernet Switch CLI Reference Guide...
  • Page 286 Chapter 74 TACACS+ Commands Ethernet Switch CLI Reference Guide...

  • Page 287: Tftp Commands

    TFTP server, keeping the original configuration file and simply adding those parts that are different. Backs up running configuration to the specified TFTP server copy running-config tftp <ip> with the specified file name. <remote-file> Ethernet Switch CLI Reference Guide...
  • Page 288 Chapter 75 TFTP Commands Ethernet Switch CLI Reference Guide...

  • Page 289: Trunk Commands

    Enables LACP for a trunk group. trunk <T1|T2|T3|T4|T5|T6> lacp Disables LACP in the specified trunk group. no trunk <T1|T2|T3|T4|T5|T6> lacp Defines LACP timeout period (in seconds) for the specified trunk interface <port-list> port(s). timeout <lacp-timeout> lacp-timeout: 1 or 30 Ethernet Switch CLI Reference Guide...
  • Page 290 This trunk is enabled. Status This field displays how the ports were added to the trunk. -: The trunk is disabled. Static: The ports are static members of the trunk. LACP: The ports joined the trunk via LACP. Ethernet Switch CLI Reference Guide...
  • Page 291 This field displays the system priority, MAC address, key, port priority, and 00,0000,00,0000)] port number. LINKS This field displays the ports whose link state are up. SYNCS These are the ports that are currently transmitting data as one logical link in this trunk group. Ethernet Switch CLI Reference Guide...
  • Page 292 Chapter 76 Trunk Commands Ethernet Switch CLI Reference Guide...

  • Page 293: Trtcm Commands

    <port-list> trtcm dscp specified port(s). profile Displays all DSCP profiles settings on the show trtcm dscp profile Switch. Enters subcommand mode for configuring interface port-channel <port-list> the specified ports. Enables trTCM on the specified port(s). trtcm Ethernet Switch CLI Reference Guide...
  • Page 294 1 trtcm Building configuration... Current configuration: interface port-channel 1 trtcm trtcm cir 4000 trtcm pir 4500 trtcm dscp green 7 trtcm dscp yellow 22 trtcm dscp red 44 exit Ethernet Switch CLI Reference Guide...
  • Page 295 1 yellow 2 red 3 interface port-channel 1 diffserv trtcm trtcm cir 4000 trtcm pir 4500 trtcm dscp profile abc exit diffserv sysname # Ethernet Switch CLI Reference Guide...
  • Page 296 Chapter 77 trTCM Commands Ethernet Switch CLI Reference Guide...

  • Page 297: Vlan Commands

    Use the exit command when you are finished configuring the ports. sysname (config)# vlan 2000 sysname (config-vlan)# name up1 sysname (config-vlan)# fixed 5-8 sysname (config-vlan)# no untagged 5-8 sysname (config-vlan)# exit sysname (config)# interface port-channel 5-8 sysname (config-interface)# pvid 2000 sysname (config-interface)# exit Ethernet Switch CLI Reference Guide...
  • Page 298 <port-list> transmitted with this VLAN Group ID. Deletes a VLAN. no vlan <vlan-id> The following section lists the commands for the ingress checking feature  VLAN ingress checking implementation differs across Switch models. Ethernet Switch CLI Reference Guide...
  • Page 299 This example shows the VLAN table. sysname# show vlan The Number of VLAN: Idx. VID Status Elap-Time TagCtl ---- ---- -------- ------------ ------------------------ Static 0:12:13 Untagged :1-2 Tagged Static 0:00:17 Untagged : Tagged :1-4 Static 0:00:07 Untagged :1-2 Tagged :3-8 Ethernet Switch CLI Reference Guide...
  • Page 300 Untagged: These ports do not tag outgoing frames with the VLAN ID. Tagged: These ports tag outgoing frames with the VLAN ID. This example enables ingress checking on ports 1-5. sysname (config)# interface port-channel 1-5 sysname (config-vlan)# ingress-check Ethernet Switch CLI Reference Guide...
  • Page 301 This field shows the number of good multicast packets flowing through this VLAN.. Broadcast This field shows the number of good broadcast packets flowing through this VLAN.. Tagged This field shows the number of VLAN-tagged packets flowing through this VLAN. Distribution Ethernet Switch CLI Reference Guide...
  • Page 302 This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. See Product Specification chapter in your User's Guide. Ethernet Switch CLI Reference Guide...

  • Page 303: Vlan Ip Commands

    VLAN. Some switch models require that you <mask> manageable execute this command to ensure that remote management via HTTP, Telnet or SNMP is activated. Deletes the IP address and subnet mask from this VLAN. no ip address <ip-address> <mask> Ethernet Switch CLI Reference Guide...
  • Page 304 79.3 Command Examples Section 3.4 on page 24 for an example of how to configure a VLAN management IP addressusing IPv4. See Chapter 33 on page 146 for IPv6 VLAN commands. Ethernet Switch CLI Reference Guide...

  • Page 305: Vlan Mapping Commands

    <port> vlan <1-4094> translated-vlan <1-4094> priority <0-7> inactive Enters config-interface mode for the specified port(s). interface port-channel <port- list> Enables VLAN mapping on the port(s). vlan-mapping Disables VLAN mapping on the port(s). no vlan-mapping Ethernet Switch CLI Reference Guide...
  • Page 306 4 vlan 123 translated-vlan 234 priority 3 sysname(config)# This example enables VLAN mapping on port 4. sysname# configure sysname(config)# interface port-channel 4 sysname(config-interface)# vlan-mapping sysname(config-interface)# exit sysname(config)# Ethernet Switch CLI Reference Guide...

  • Page 307: Vlan Port Isolation Commands

    Disables VLAN port isolation. no vlan1q port-isolation Enters config-interface mode for the specified port(s). interface port-channel <port- list> Enables VLAN port isolation on the port(s). no vlan1q port-isolation Disables VLAN port isolation on the port(s). vlan1q port-isolation Ethernet Switch CLI Reference Guide...
  • Page 308 Chapter 81 VLAN Port Isolation Commands Ethernet Switch CLI Reference Guide...

  • Page 309: Vlan Stacking Commands

    <port> cvid <vlan-id> Enables the specified selective VLAN stacking rule. no vlan-stacking selective-qinq interface port-channel <port> cvid <vlan-id> inactive Displays VLAN stacking settings. show vlan-stacking Enables VLAN stacking on the Switch. vlan-stacking Ethernet Switch CLI Reference Guide...
  • Page 310 B at edge device x and then stripping those tags at edge device y as the data frames leave the network. Figure 10 Example: VLAN Stacking VLAN 24 VLAN 24 Customer A Customer A A: 37, 24 B: 48, 24 VLAN 24 VLAN 24 Customer B Customer B Ethernet Switch CLI Reference Guide...
  • Page 311 37 sysname(config-interface)# vlan-stacking priority 3 sysname(config-interface)# exit sysname(config)# exit sysname# show vlan-stacking Switch Vlan Stacking Configuration Operation: active STPID: 0x8100 Port Role SPVID Priority access access access access access access access access ..Ethernet Switch CLI Reference Guide...
  • Page 312 Chapter 82 VLAN Stacking Commands Ethernet Switch CLI Reference Guide...

  • Page 313: Vlan Trunking Commands

    Enables VLAN trunking on ports connected to other switches vlan-trunking or routers (but not ports directly connected to end users). This allows frames belonging to unknown VLAN groups to go out via the VLAN-trunking port. Disables VLAN trunking on the port(s). no vlan-trunking Ethernet Switch CLI Reference Guide...
  • Page 314 Chapter 83 VLAN Trunking Commands Ethernet Switch CLI Reference Guide...

  • Page 315: Vrrp Commands

    Sets the network to use the default no secondary-virtual-ip secondary virtual gateway (0.0.0.0). Resets the network to use the default no primary-virtual-ip primary virtual gateway (interface IP address). Disables the VRRP settings. inactive Activates this VRRP. no inactive Ethernet Switch CLI Reference Guide...
  • Page 316 Figure 11 Example: VRRP 10.10.1.252 Priority = 200 PVID = 100 172.16.1.1 PVID = 200 VRID = 1 Default Gateway 172.16.1.200 10.10.1.254 10.10.1.254 PVID = 200 172.16.1.10 10.10.1.253 Priority = 100 PVID = 100 Ethernet Switch CLI Reference Guide...
  • Page 317 24-28 sysname(config-interface)# pvid 200 sysname(config-interface)# exit sysname(config)# router vrrp network 10.10.1.252/24 vr-id 1 uplink-gateway 172.16.1.200 sysname(config-vrrp)# name VRRP-networkA sysname(config-vrrp)# priority 200 sysname(config-vrrp)# interval 2 sysname(config-vrrp)# primary-virtual-ip 10.10.1.254 sysname(config-vrrp)# exit sysname(config)# Ethernet Switch CLI Reference Guide...
  • Page 318 172.16.1.10 255.255.255.0 sysname(config-vlan)# exit sysname(config)# interface port-channel 24-28 sysname(config-interface)# pvid 200 sysname(config-interface)# exit sysname(config)# router vrrp network 10.10.1.253/24 vr-id 1 uplink-gateway 172.16.1.200 sysname(config-vrrp)# name VRRP-networkB sysname(config-vrrp)# interval 2 sysname(config-vrrp)# primary-virtual-ip 10.10.1.254 sysname(config-vrrp)# exit sysname(config)# Ethernet Switch CLI Reference Guide...

  • Page 319: Additional Commands

    Changes the console port speed. baudrate <1|2|3|4|5> 1: 38400 bps 2: 19200 bps 3: 9600 bps 4: 57600 bps 5: 115200 bps Restarts the Switch (cold reboot) with the specified boot config <index> configuration file. Ethernet Switch CLI Reference Guide...
  • Page 320 [flash] Switch. Optionally, display the version of the currently installed firmware on the flash memory. Performs an internal loopback test on the specified ports. The test interface port-channel test returns Passed! or Failed!. <port-list> Ethernet Switch CLI Reference Guide...
  • Page 321 This defines how often (in miliseconds) the Switch sends the digital diagnostic monitoring (DDM) information via the installed transceiver(s). 85.2 Command Examples This example checks the cable pairs on port 7. sysname# cable-diagnostics 7 port 7 cable diagnostics result pairA: Ok pairB: Ok Ethernet Switch CLI Reference Guide...
  • Page 322 Table 183 show alarm-status LABEL DESCRIPTION name This field displays the name or type of the alarm. status This field displays the status of the alarm. Normal: The alarm is off. Error: The alarm is on. Ethernet Switch CLI Reference Guide...
  • Page 323 This field displays the number of CPU clock cycles the CPU was not used during the interval. util This field displays the CPU utilization during the interval. util = [(baseline - ticks) / baseline] * 100 Ethernet Switch CLI Reference Guide...
  • Page 324 Error: This fan is running below the minimum speed. Voltage(V) This field displays the various power supplies in the Switch. Each power supply has a sensor that is capable of detecting and reporting when the voltage is outside tolerance. Ethernet Switch CLI Reference Guide...
  • Page 325 LABEL DESCRIPTION Total Power This field displays the total power the Switch can provide to PoE-enabled devices. Consuming Power This field displays the amount of power the Switch is currently supplying to the PoE-enabled devices. Ethernet Switch CLI Reference Guide...
  • Page 326 ZyNOS F/W Version This field displays the firmware version the Switch is running. RomRasSize This field displays how much ROM is used. ZyNOS CODE This field displays the ZyNOS operating system version the Switch is using. Ethernet Switch CLI Reference Guide...
  • Page 327 Tx Power(dBm) -5.80 -2.99 -3.49 -8.96 -9.50 Rx Power(dBm) -3.36 -2.99 -3.49 -20.50 -21.02 sysname# This example displays the firmware version the Switch is currently using.. sysname# show version Current ZyNOS version: V3.80(BBA.3)b1 | 04/17/2008 Ethernet Switch CLI Reference Guide...
  • Page 328 This example displays route information to an Ethernet device with IP address 192.168.1.100 sysname> traceroute 192.168.1.100 traceroute to 192.168.1.100, 30 hops max, 40 byte packet 1:192.168.1.100 (10 ms) (10 ms) (0 ms) traceroute done: sysname> Ethernet Switch CLI Reference Guide...

  • Page 329: Appendices And Index Of Commands

    Appendices and Index of Commands Default Values (331) Legal Information (333) Index of Commands (337)

  • Page 331: Default Values

    5 syslog messages no arp inspection log-buffer logs 1 second IP address: 0.0.0.0 no radius-server <index> Port number: 1812 Key: blank IP address: 0.0.0.0 no radius-accounting <index> Port number: 1813 Key: blank Ethernet Switch CLI Reference Guide...
  • Page 332 Appendix A Default Values Ethernet Switch CLI Reference Guide...

  • Page 333: Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.

  • Page 334: Zyxel Limited Warranty

    During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to Ethernet Switch CLI Reference Guide...
  • Page 335 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/ support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. Ethernet Switch CLI Reference Guide...
  • Page 336 Appendix B Legal Information Ethernet Switch CLI Reference Guide...

  • Page 337: Index Of Commands

    <0-1024> ........34 arp inspection log-buffer logs <0-1024> interval <0-86400> ....... 34 arp inspection trust ............. 34 arp inspection vlan <vlan-list> ..........34 arp inspection vlan <vlan-list> logging [all|none|permit|deny] ....34 Ethernet Switch CLI Reference Guide...
  • Page 338 ........149 clear ipv6 neighbor ............. 154 clear ipv6 neighbor <interface-type> <interface-number> ......154 clear l2protocol-tunnel ............163 clear lldp remote_info ............170 clear lldp remote_info interface port-channel <port-list> ....... 170 clear lldp statistic ............170 Ethernet Switch CLI Reference Guide...
  • Page 339 <10-255> ............... 207 distance <10-255> ............... 248 dlf-limit ................ 46 dlf-limit <pkt/s> ..............46 egress set <port-list> ............225 enable ................319 enable <0-14> ..............319 erase running-config ............256 erase running-config help ............256 Ethernet Switch CLI Reference Guide...
  • Page 340 <rsa|dsa> ..........103 hybrid-spq <q0|q1|...|q7> ............241 hybrid-spq lowest-queue <q0|q1| ... |q7> ........241 id-permission < none | chassis | management | chassis-management> ....53 igmp-filtering ..............123 igmp-filtering profile <name> ........... 123 Ethernet Switch CLI Reference Guide...
  • Page 341 <port-list> ..........42 interface port-channel <port-list> ..........45 interface port-channel <port-list> ..........54 interface port-channel <port-list> ..........76 interface port-channel <port-list> ..........79 interface port-channel <port-list> ..........86 interface port-channel <port-list> ..........90 Ethernet Switch CLI Reference Guide...
  • Page 342 <ipv6-address>/<prefix> eui-64 ........146 ipv6 address <ipv6-address>/<prefix> link-local ......... 147 ipv6 address autoconfig ............147 ipv6 address default-gateway <gateway-ipv6-address> ......147 ipv6 address dhcp client <ia-na> ..........147 ipv6 address dhcp client <ia-na> [rapid-commit] ......... 147 Ethernet Switch CLI Reference Guide...
  • Page 343 <1-65535> ..........290 lldp ................169 lldp admin-status <tx-only|rx-only|tx-rx> ........168 lldp basic-tlv management-address ..........168 lldp basic-tlv port-description ..........168 lldp basic-tlv system-capabilities ..........168 lldp basic-tlv system-description ..........168 lldp basic-tlv system-name ............168 Ethernet Switch CLI Reference Guide...
  • Page 344 <port-num> ............187 mode <dynamic|compatible> ............201 mode zynos ..............321 mrstp <tree-index> .............. 191 mrstp <tree-index> hello-time <1-10> maximum-age <6-40> forward-delay <4-30> ..191 mrstp <tree-index> priority <0-61440> ........... 191 mrstp interface <port-list> ............. 191 Ethernet Switch CLI Reference Guide...
  • Page 345 ..........331 no arp inspection log-buffer entries ..........331 no arp inspection log-buffer entries ..........34 no arp inspection log-buffer logs ..........331 no arp inspection log-buffer logs ..........34 no arp inspection trust ............34 Ethernet Switch CLI Reference Guide...
  • Page 346 ........90 no ethernet oam remote-loopback supported ........90 no external-alarm <index> ............95 no external-alarm all ............95 no fixed <port-list> ............298 no flow-control ..............126 no forbidden <port-list> ............298 Ethernet Switch CLI Reference Guide...
  • Page 347 ............. 147 no ipv6 address dhcp client [rapid-commit] ........147 no ipv6 address dhcp client option ..........147 no ipv6 address dhcp client option <[dns][domain-list]> ......147 no ipv6 dhcp relay vlan <1-4094> ..........148 Ethernet Switch CLI Reference Guide...
  • Page 348 <mep-id> ..............53 no mep <mep-id> cc-enable ............53 no mep <mep-id> inactive ............53 no mirror ............... 188 no mirror-port ..............187 no mirror-port <port-num> ............187 no mrstp <tree-index> ............192 Ethernet Switch CLI Reference Guide...
  • Page 349 <index> ............331 no receiver-port <port-list> ............ 201 no redistribute rip ............. 207 no redistribute static ............208 no remote-management <index> ............ 245 no remote-management <index> service <[telnet] [ftp] [http] [icmp] [snmp] [ssh] [https]> Ethernet Switch CLI Reference Guide...
  • Page 350 <type> ............281 no tacacs-accounting <index> ............ 285 no tacacs-server <index> ............285 no tagged <port-list> ............201 no time daylight-saving-time ............. 68 no timesync ..............68 no trtcm ................ 293 no trtcm ................ 294 Ethernet Switch CLI Reference Guide...
  • Page 351 <port-list> tx-period <1-65535> ....... 108 port-security ..............223 port-security <port-list> ............223 port-security <port-list> address-limit <number> ........ 223 port-security <port-list> learn inactive ........223 port-security <port-list> MAC-freeze ..........223 port-security <port-list> vlan <vlan-id> address-limit <number> ....223 Ethernet Switch CLI Reference Guide...
  • Page 352 <absolute|delta> startup-alarm <startup-alarm> rising-threshold <rising- integer> <event-index> falling-threshold <falling-integer> <event-index> [owner <owner>] ..............250 rmon alarm alarmtable <alarm-index> variable <variable> interval <interval-integer> sam- ple-type <absolute|delta> startup-alarm <startup-alarm> rising-threshold <rising- integer> <event-index> falling-threshold <falling-integer> <event-index> [owner <owner>] ..............251 Ethernet Switch CLI Reference Guide...
  • Page 353 ............63 show cluster member mac <mac> ............ 63 show cpu-protection interface port-channel <port-list> ......86 show cpu-utilization ............320 show dhcp relay <vlan-id> ............72 show dhcp server ..............72 Ethernet Switch CLI Reference Guide...
  • Page 354 <port-list> igmp-filtering ....... 123 show interfaces config <port-list> igmp-group-limited ......117 show interfaces config <port-list> igmp-immediate-leave ......117 show interfaces config <port-list> igmp-query-mode ......118 show interfaces config <port-list> igmp-snooping filtering ...... 118 Ethernet Switch CLI Reference Guide...
  • Page 355 ............154 show ipv6 router ..............155 show ipv6 router <interface-type> <interface-number> ......155 show l2protocol-tunnel ............164 show l2protocol-tunnel interface port-channel <port-list> ....... 164 show lacp ............... 290 show lldp config ..............169 Ethernet Switch CLI Reference Guide...
  • Page 356 <interface-id> ..... 250 show router dvmrp ..............83 show router igmp ..............112 show router ospf ..............205 show router ospf area ............205 show router ospf network ............205 show router ospf redistribute ........... 205 Ethernet Switch CLI Reference Guide...
  • Page 357 <ip> enable traps switch <options> ....265 snmp-server trap-destination <ip> enable traps system ......265 snmp-server trap-destination <ip> enable traps system <options> ....265 snmp-server username <name> sec-level <noauth|auth|priv> [auth <md5|sha> auth-password <password>] | [priv <des|aes> priv-password <password>] group <group-name> Ethernet Switch CLI Reference Guide...
  • Page 358 <ip|host-name> [vlan <vlan-id>] [ttl <1-255>] [wait <1-60>] [queries <1-10>] traceroute help ..............321 transceiver-ddm timer <1 - 4294967> ..........321 trtcm ................293 trtcm ................293 trtcm cir <rate> ..............294 trtcm dscp green <0-63> ............294 trtcm dscp profile <name> ............294 Ethernet Switch CLI Reference Guide...
  • Page 359 <802.1q|port-based> ........... 298 weight <wt1> <wt2> ... <wt8> ............ 241 wfq ................241 wfq ................242 write memory [<index>] ............321 wrr ................241 wrr ................242 wrr <wt1> <wt2> ... <wt8> ............241 Ethernet Switch CLI Reference Guide...
  • Page 360 Index of Commands Ethernet Switch CLI Reference Guide...

This manual is also suitable for:

Gs3700 series

Table of Contents