D-Link xStack DES-3528 Series Cli Reference Manual
D-Link xStack DES-3528 Series Cli Reference Manual

D-Link xStack DES-3528 Series Cli Reference Manual

Layer 2 managed stackable fast ethernet switch
Hide thumbs Also See for xStack DES-3528 Series:
Table of Contents

Advertisement

®
CLI Reference Guide
xStack
®
DES-3528/DES-3552 Series
Product Model:
Layer 2 Managed Stackable Fast Ethernet Switch
Release 2.60

Advertisement

Table of Contents
loading

Summary of Contents for D-Link xStack DES-3528 Series

  • Page 1 ® CLI Reference Guide xStack ® DES-3528/DES-3552 Series Product Model: Layer 2 Managed Stackable Fast Ethernet Switch Release 2.60...
  • Page 2: Table Of Contents

    Table of Contents INTRODUCTION ......................... 5 USING THE CONSOLE CLI ......................7 COMMAND SYNTAX ........................ 10 BASIC SWITCH COMMANDS ....................12 MODIFY BANNER AND PROMPT COMMANDS ..............24 SWITCH PORT COMMANDS ....................27 PORT SECURITY COMMANDS ....................31 STACKING COMMANDS ......................36 NETWORK MANAGEMENT (SNMP) COMMANDS ..............
  • Page 3 ACCESS AUTHENTICATION CONTROL COMMANDS ............297 SECURE SHELL (SSH) COMMANDS ..................315 SECURE SOCKETS LAYER (SSL) COMMANDS ..............321 D-LINK SINGLE IP MANAGEMENT COMMANDS ..............326 JWAC COMMANDS ........................ 335 LINK LAYER DISCOVERY PROTOCOL (LLDP) COMMANDS ..........350 Q-IN-Q COMMANDS ....................... 363 RSPAN COMMANDS ......................
  • Page 4 D-LINK UNIDIRECTIONAL LINK DETECTION (DULD) COMMANDS........476 ETHERNET RING PROTECTION SWITCHING (ERPS) COMMANDS ........478 IPV6 NEIGHBOR DISCOVER COMMANDS ................487 IPV6 ROUTE COMMANDS ..................... 491 LAYER 2 PROTOCOL TUNNELING (L2PT) COMMANDS ............ 493 LOCAL ROUTE COMMANDS ....................496 MSTP DEBUG ENHANCEMENT COMMANDS ..............498 PING COMMANDS ........................
  • Page 5: Introduction

    ® The DES-3528/DES-3552 Series Layer 2 stackable Fast Ethernet Switch Series are members of the D-Link xStack family. Ranging from 10/100Mbps edge Switches to core gigabit Switches, the xStack Switch family has been future- proof designed to provide a stacking architecture with fault tolerance, flexibility, port density, robust security and maximum throughput with a user-friendly management interface for the networking professional.
  • Page 6 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Boot Procedure V1.00.B008 ------------------------------------------------------------------------------- Power On Self Test ........100 % MAC Address : 00-22-B0-10-8A-00 H/W Version : A2 Please wait, loading V2.60..017 Runtime image ..... 100 % UART init ..........
  • Page 7: Using The Console Cli

    After the Switch reboots and users have logged in, the console looks like this: DES-3528 Fast Ethernet Switch Command Line Interface Firmware: Build 2.60.017 Copyright(C) 2010 D-Link Corporation. All rights reserved. UserName: Figure 2-1. Initial Console screen after logging in Commands are entered at the command prompt, DES-3528:admin# ..
  • Page 8 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear igmp_snooping data_driven_group clear igmp_snooping statistics counter clear jwac auth_state clear log clear mac_based_access_control auth_state clear mld_snooping data_driven_group CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry Figure 2-2.
  • Page 9 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide traceroute6 upload DES-3528:admin# Figure 2-5. The Next Available Commands Prompt The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters to narrow the top-level command.
  • Page 10: Command Syntax

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. NOTE: All commands are case-sensitive.
  • Page 11 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (parentheses) Purpose Indicates at least one or more of the values or arguments in the preceding syntax enclosed by braces must be specified. Syntax config dhcp_relay {hops <value 1-16> | time <sec 0-65535>}(1) Description In the above syntax example, users have the option to specify hops or time or both of them.
  • Page 12: Basic Switch Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ASIC WITCH OMMANDS The basic Switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create account [admin | operator | power_user | user] <username 15>...
  • Page 13 Enter the new password again for confirmation:**** Success. DES-3528:admin# NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue.
  • Page 14 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config account dlink Command: config account dlink Enter a old password:**** Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success. DES-3528:admin# show account Purpose Used to display user accounts.
  • Page 15 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable password encryption applied to the system later. If the password encryption is enabled, the password will be in encrypted form. When password encryption is diabled, if the user specifies the password in plain text form, the password will be in plain text form.
  • Page 16 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To display the way that the users logged in: DES-3528:admin# show session Command: show session Live Time From Level Name --------- ------------ ----- ------- 00:00:16.250 Serial Port Anonymous Total Entries: 1 CTRL+C ESC q Quit...
  • Page 17 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show device_status Restrictions None. Example usage: To display the Switch’s device status: DES-3528:admin# show device_status Command: show device_status Internal Power: Active External Power: Fail DES-3528:admin# show serial_port Purpose Used to display the current serial port settings.
  • Page 18 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config serial_port baud_rate 115200 Command: config serial_port baud_rate 115200 Success. DES-3528:admin# NOTE: If a user configures the serial port’s baud rate, the baud rate will take effect and save immediately.
  • Page 19 Command: telnet 172.18.168.12 tcp_port 50 Connecting to server,please wait..DES-3528 Gigabit Ethernet Switch Command Line Interface Firmware: Build 2.60.B010 Copyright(C) 2009 D-Link Corporation. All rights reserved. UserName: PassWord: enable telnet Purpose Used to enable communication with and management of the Switch using the Telnet protocol.
  • Page 20 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To disable the Telnet protocol on the Switch: DES-3528:admin# disable telnet Command: disable telnet Success. DES-3528:admin# enable web Purpose Used to enable the HTTP-based management software on the Switch. Syntax enable web <tcp_port_number 1-65535>...
  • Page 21 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide save all – Specify to save all configuration settings. If nothing is specified after “save”, the Switch will save all. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To save the Switch’s current configuration to non-volatile RAM: DES-3528:admin# save...
  • Page 22 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To restore all of the Switch’s parameters to their default values: DES-3528:admin# reset config Command: reset config Are users sure to proceed with system reset?(y/n)y Success. DES-3528:admin# login Purpose Used to log in a user to the Switch’s console.
  • Page 23 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To clear screen: DES-3528:admin# clear Command: clear DES-3528:admin# config terminal width Purpose The command is used to set current terminal width. Syntax config terminal width [default | <value 80-200>] Description The usage is described as below: 1.
  • Page 24: Modify Banner And Prompt Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ODIFY ANNER AND ROMPT OMMANDS Administrator level users can modify the login banner (greeting message) and command prompt by using the commands described below. Command Parameters config command_prompt [<string 16>...
  • Page 25 To modify the banner: DES-3528:admin#config greeting_message Command: config greeting_message Greeting Messages Editor ================================================================================ DES-3528 Fast Ethernet Switch Command Line Interface Firmware: Build 2.60.017 Copyright(C) 2010 D-Link Corporation. All rights reserved. ================================================================================ <Function Key> <Control Key> Ctrl+C Quit without save left/right/ Ctrl+W...
  • Page 26 DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show greeting_message Command: show greeting_message ================================================================================ DES-3528 Fast Ethernet Switch Command Line Interface Firmware: Build 2.60.017 Copyright(C) 2010 D-Link Corporation. All rights reserved. ================================================================================ DES-3528:admin#...
  • Page 27: Switch Port Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide WITCH OMMANDS The Switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | learning [enable | disable ] | state [enable | disable] | mdix [auto | normal | cross] | [description <desc 1-32>...
  • Page 28 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To configure the speed of ports 1-3 of unit 1 to be 10 Mbps, full duplex, learning enabled, state enabled and flow control enabled: DES-3528:admin# config ports 1-3 speed 10_full learning enable state enable flow_control enable Command: config ports 1-3 speed 10_full learning enable state enable flow_control enable...
  • Page 29 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Port State/ Settings Connection Address MDIX Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning ------- -------- --------------------- ---------------------- --------- Enabled Auto/Disabled Link Down Enabled Auto Description: Enabled Auto/Disabled Link Down Enabled Auto Description: Enabled Auto/Disabled Link Down...
  • Page 30 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable jumbo_frame Purpose Used to enable the jumbo frame function on the Switch. Syntax enable jumbo_frame Description This command will allow ethernet frames larger than 1536 bytes to be processed by the Switch.
  • Page 31: Port Security Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ECURITY OMMANDS The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<portlist>...
  • Page 32 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode deleteonreset Success. DES-3528:admin# delete port_security_entry Purpose Used to delete a port security entry by MAC address, port number and VLAN ID. Syntax delete port_security_entry [vlan <vlan_name 32>...
  • Page 33 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show port_security Syntax show port_security {ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}} Description This command is used to display port security information of the Switch’s ports. The information displayed includes port security trap/log state, admin state, maximum number of learning address and lock mode.
  • Page 34 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable port_security trap_log Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To disable the port security trap log setting: DES-3528:admin# disable port_security trap_log Command: disable port_security trap_log Success.
  • Page 35 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config port_security vlan learned by this VLAN. If this parameter is set to 0, it means that no user can be authorized on this VLAN. If the setting is lower than the number of current learned entries on the VLAN, the command will be rejected.
  • Page 36: Stacking Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide TACKING OMMANDS The stacking configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config box_priority current_box_id <value 1-8>...
  • Page 37 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show stack_information Purpose Used to display the stack information table. Syntax show stack_information Description This command display stack information. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Usage example: To display stack information: DES-3528:admin#...
  • Page 38 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show stacking_mode Purpose Used to view the current stacking mode. Syntax show stacking_mode Description This command will display whether the current stacking mode is enabled or disabled. Parameters None.
  • Page 39 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config stacking force_master_role state enable Command: config stacking force_master_role state enable Success. DES-3528:admin#...
  • Page 40: Network Management (Snmp) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (SNMP) C ETWORK ANAGEMENT OMMANDS The Switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. Users can specify which version of the SNMP users want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
  • Page 41 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters create trusted_host [<ipaddr> | <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr>] {snmp | telnet | ssh | http | https | ping} config trusted_host [<ipaddr> | <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr>] [add | delete] {snmp | telnet | ssh | http | https | ping | all} delete trusted_host [ipaddr <ipaddr>...
  • Page 42 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create snmp user • <auth password 8-16> - An alphanumeric string of between 8 and 16 characters that will be used to authorize the agent to receive packets for the host. •...
  • Page 43 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table. Syntax show snmp user Description This command displays information about each SNMP username in the SNMP group username table.
  • Page 44 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete snmp view Description This command is used to remove an SNMP view previously created on the Switch. <view_name 32> − An alphanumeric string of up to 32 characters that identifies the SNMP Parameters view to be deleted.
  • Page 45 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create snmp community community string: An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the Switch’s SNMP agent. An MIB view that defines the subset of all MIB objects that will be accessible to the SNMP community.
  • Page 46 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show snmp community Purpose Used to display SNMP community strings configured on the Switch. Syntax show snmp community {<community_string 32>} Description This command is used to display SNMP community strings that are configured on the Switch. <community_string 32>...
  • Page 47 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To display the current name of the SNMP engine on the Switch: DES-3528:admin# show snmp engineID Command: show snmp engineID SNMP Engine ID : 0035636666 DES-3528:admin# create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views.
  • Page 48 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete snmp group Purpose Used to remove an SNMP group from the Switch. Syntax delete snmp group <groupname 32> Description This command is used to remove an SNMP group from the Switch. <groupname 32>...
  • Page 49 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp host [<ipaddr> | v6host <ipv6addr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] <auth_string 32>...
  • Page 50 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To delete an SNMP host entry: DES-3528:admin# delete snmp host 10.48.74.100 Command: delete snmp host 10.48.74.100 Success. DES-3528:admin# show snmp host Purpose Used to display the recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax show snmp host {<ipaddr>} Description...
  • Page 51 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show snmp v6host Command: show snmp v6host SNMP Host Table ------------------------------------------------------------------ Host IPv6 Address : 3FFE::3 SNMP Version : V3 na/np Community Name/SNMPv3 User Name : initial Host IPv6 Address : 3FFE::2 SNMP Version : V2c...
  • Page 52 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config trusted_host network - The network address of the trusted network. The form of network address is xxx.xxx.xxx.xxx/y. <network_address> - Enter the network address used here. ipv6_prefix - The IPv6 subnet prefix of the trusted network. <ipv6networkaddr>...
  • Page 53 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete trusted_host Syntax delete trusted_host [ipaddr <ipaddr> | ipv6address <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr> | all] Description Used to delete a trusted host entry made using the create trusted_host command above. Parameters ipaddr - The IP address of the trusted host.
  • Page 54 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# show snmp traps Purpose Used to show SNMP traps support on the Switch . Syntax show snmp traps {linkchange_traps {ports <portlist>}} Description This command is used to view the SNMP traps support status currently configured on the Switch.
  • Page 55 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To disable the SNMP authentication trap support: DES-3528:admin# disable snmp authenticate_traps Command: disable snmp authenticate_traps Success. DES-3528:admin# config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch. Syntax config snmp system_contact <sw_contact>...
  • Page 56 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config snmp system_name Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To configure the Switch name for “DES-3526 Switch”: DES-3528:admin# config snmp system_name DES-3526 Switch Command: config snmp system_name DES-3526 Switch Success.
  • Page 57: Switch Utility Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide WITCH TILITY OMMANDS The Switch utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware_fromTFTP [<ipaddr> | <ipv6addr>] src_file <path_filename 64> {image_id <int 1-2>} {unit [all | <unitid 1-8>]} | cfg_fromTFTP <ipaddr>...
  • Page 58 DES-3528:admin# #------------------------------------------------------------------- DES-3528:admin# # DES-3528 Configuration DES-3528:admin# # DES-3528:admin# # Firmware: Build 2.60.B010 DES-3528:admin# # Copyright(C) 2009 D-Link Corporation. All rights reserved. DES-3528:admin# #------------------------------------------------------------------- DES-3528:admin# DES-3528:admin# DES-3528:admin# # BASIC DES-3528:admin# DES-3528:admin# config serial_port baud_rate 115200 auto_logout 10_minutes Command: config serial_port baud_rate 115200 auto_logout 10_minutes The download configuration command will initiate the loading of the various settings in the order listed in the configuration file.
  • Page 59 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show firmware information Purpose Used to display the firmware section information. Syntax show firmware information Description This command is used to display the firmware section information. Parameters None. Restrictions None Example usage:...
  • Page 60 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show config 1. Basic (serial port, Telnet and web 28. PPPoE management status) 29. MAC address table notification 2. storm control 30. STP 3. loop detect 31. BPDU protection 4.
  • Page 61 DES-3528:admin# show config current_config Command: show config current_config #------------------------------------------------------------------------------- DES-3528 Fast Ethernet Switch Configuration Firmware: Build 2.60.B010 Copyright(C) 2010 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------- # STACK config stacking force_master_role state disable # BASIC # ACCOUNT LIST # ACCOUNT END...
  • Page 62 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide upload exclude - Excludes lines that contain the specified filter string begin - The first line that contains the specified filter string will be the first line of the output. Restrictions The TFTP server must be on the same IP subnet as the Switch.
  • Page 63: Network Monitoring Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
  • Page 64 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To display the packets analysis for port 2 DES-3528:admin# show packet port 2 Command: show packet port 2 Port Number : 2 =============================================================== Frame Size/Type Frame Counts Frames/sec --------------- ------------...
  • Page 65 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show utilization Purpose Used to display real-time port and CPU utilization statistics. Syntax show utilization [ports | cpu] Description This command will display the real-time port and CPU utilization statistics for the Switch. Parameters cpu - Specifies to display information regarding the CPU.
  • Page 66 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To display the DRAM utilization: DES-3528:admin# show utilization dram Command: show utilization dram Unit 1 DRAM utilization : Total DRAM : 131072 Used DRAM : 124596 Utilization : 95 % CTRL+C ESC q...
  • Page 67 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear log Purpose Used to clear the Switch’s history log. Syntax clear log Description This command will clear the Switch’s history log. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To clear the log information: DES-3528:admin# clear log...
  • Page 68 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide 00000 days 00:06:31 Configuration saved to flash (Username: Anonymous) DES-3528:admin# NOTE: For detailed information regarding Log entries that will appear in this window, please refer to Appendix C at the back of the xStack DES-3528 Layer 2 Stackable Fast Ethernet Managed Switch User Manual.
  • Page 69 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show syslog Command: show syslog Syslog Global State: Enabled DES-3528:admin# create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1-4> ipaddress [<ipaddr> | <ipv6addr>] {severity [emergency | alert | critical | error | warning | notice | informational | debug | <level 0- 7>] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
  • Page 70 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create syslog host local0 − Specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from the list above. local1 − Specifies that local use 1 messages will be sent to the remote host. This corresponds to number 17 from the list above.
  • Page 71 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config syslog host Emergency: system is unusable Alert: action must be taken immediately Critical: critical conditions Error: error conditions Warning: warning conditions Notice: normal but significant condition Informational: informational messages Debug: debug-level messages facility −...
  • Page 72 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To configure a Syslog host: DES-3528:admin#config syslog host 1 severity alert Command: config syslog host 1 severity alert Success. DES-3528:admin# Example usage: To configure a syslog host for all hosts: DES-3528:admin#config syslog host all severity critical Command: config syslog host all severity critical Success.
  • Page 73 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IP Address : 192.168.69.123 Severity : Critical(2) Facility : Local0 UDP Port : 514 Status : Enabled Total Entries : 1 DES-3528:admin# config log_save_timing Purpose Used to configure the method to save log. Syntax config log_save_timing [time_interval <min 1-65535>...
  • Page 74 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show attack_log value_list X-Y − The show log command will display the dangerous log messages between the log number of X and Y. For example, show dangerous log index 1-5 will display the dangerous log messages from 1 to 5.
  • Page 75 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config system_severity log - Specifies the severity level control for the log. all - Specifies the severity level control for traps and the log. emergency - Severity level 0. alert - Severity level 1.
  • Page 76: Multiple Spanning Tree Protocol (Mstp) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol: 802.1D STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 77 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters config stp nni_bpdu_addr [dot1d | dot1ad] show stp mst_config_id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description...
  • Page 78 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To set the Switch globally for the Multiple Spanning Tree Protocol (MSTP): DES-3528:admin# config stp version mstp Command: config stp version mstp Success DES-3528:admin# config stp Purpose Used to setup STP, RSTP and MSTP on the Switch.
  • Page 79 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports <portlist> { externalCost [ auto | <value 1-200000000> ] | hellotime <value 1-2> | migrate [yes | no ] | edge [ true | false | auto ] | p2p [ true | false | auto ] | state [enable | disable ] | restricted_role [true | false] | restricted_tcn [true | false ] | fbpdu [enable | disable ] }(1) Description...
  • Page 80 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp ports the port cannot maintain this status (for example if the port is forced to half-duplex operation) the p2p status changes to operate as if the p2p value were false. The default setting for this parameter is auto.
  • Page 81 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp instance_id supports 16 STP instances with one unchangeable default instance ID set as 0. add_vlan – Along with the vid_range <vidlist> parameter, this command will add VIDs to the previously configured STP instance_id.
  • Page 82 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp priority priority <value 0-61440> − Select a value between 0 and 61440 to specify the priority for a Parameters specified instance ID for forwarding packets. The lower the value, the higher the priority. This value must be divisible by 4096.
  • Page 83 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp mst_ports instance_id <value 0-15> − Enter a numerical value between 0 and 15 to identify the instance_id previously configured on the Switch. An entry of 0 will denote the CIST (Common and Internal Spanning Tree.
  • Page 84 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide STP Bridge Global Settings --------------------------- STP Status : Enabled STP Version : RSTP Max Age : 20 Hello Time Forward Delay : 15 Max Hops : 20 TX Hold Count Forwarding BPDU : Disabled NNI BPDU Address...
  • Page 85 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show stp instance Purpose Used to display the Switch’s STP instance configuration Syntax show stp instance <value 0-15> Description This command displays the Switch’s current STP Instance Settings and the STP Instance Operational Status.
  • Page 86 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show stp mst_config_id Purpose Used to display the MSTP configuration identification. Syntax show stp mst_config_id Description This command displays the Switch’s current MSTP configuration identification. Parameters None. Restrictions None.
  • Page 87: Forwarding Database Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32>...
  • Page 88 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create fdb vlanid Description This command will make an entry into the Switch’s unicast MAC address forwarding database. <vlanid_list> − Specifies a range of VLANs to be configured. Parameters <macaddr>...
  • Page 89 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To add multicast MAC forwarding: DES-3528:admin# config multicast_fdb default 01-00-00-00-00-01 add 1-5 Command: config multicast_fdb default 01-00-00-00-00-01 add 1-5 Success. DES-3528:admin# config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10-1000000>...
  • Page 90 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan <vlan_name 32> | port <port> | all] Description This command is used to clear dynamically learned entries to the Switch’s forwarding database.
  • Page 91 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show fdb port <port> − The port number corresponding to the MAC destination address. Parameters <vlan_name 32> − The name of the VLAN on which the MAC address resides. vlanid <vidlist>...
  • Page 92 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config multicast vlan_filtering_mode vlan 200-300 forward_all_groups Command: config multicast vlan_filtering_mode vlan 200-300 forward_all_groups Success. DES-3528:admin# show multicast vlan_filtering_mode Purpose Used to show the multicast packet filtering mode for VLANs. Syntax show multicast vlan_filtering_mode {[vlanid <vidlist>...
  • Page 93: Traffic Control Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide RAFFIC ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 94 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config traffic control Switch. The user has two options: • drop − Utilizes the hardware Traffic Control mechanism, which means the Switch’s hardware will determine the Packet Storm based on the Threshold value stated and drop packets until the issue is resolved.
  • Page 95 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config traffic control log state Note: The log state is only applicable for shutdown mode. Since shutdown mode only support broadcast and multicast storm control, doesn’t support unicast storm control. The log only generate for broadcast and multicast storm control.
  • Page 96 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: show traffic control Traffic Control Trap : [None] Traffic Control Log : Enabled Traffic Control Auto Recover Time: 0 Minutes Port Thres Broadcast Multicast Unicast Action Count Time Shutdown hold...
  • Page 97: Qos Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMMANDS The Switch supports 802.1p priority queuing. The Switch has 8 priority queues, but it has 7 priority queues available . Q7 is reserved for stacking function. These priority queues are numbered from 6 (Class 6) — the highest priority queue —...
  • Page 98 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config bandwidth_control Description This command is used to configure bandwidth on a port-by-port basis. <portlist> − Specifies a port or range of ports to be configured. Parameters rx_rate − Specifies that one of the parameters below (no_limit or <value 64-1024000>) will be applied to the rate at which the above specified ports will be allowed to receive packets no_limit −...
  • Page 99 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config per_queue bandwidth_control Purpose Used to configure per port or flow bandwidth control. For per flow bandwidth control, it can be based on the assigned CoS queue. Syntax config per_queue bandwidth_control {ports [<portlist>...
  • Page 100 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show per_queue bandwidth_control Restrictions None. Example usage: To display port per CoS bandwidth control table: DES-3528:admin#show per_queue bandwidth_control 10 Command: show per_queue bandwidth_control 10 Queue Bandwidth Control Table On Port: 10 Queue Min Rate(Kbit/sec) Max Rate(Kbit/sec)
  • Page 101 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config scheduling ports 10 3 strict Command: config scheduling ports 10 3 strict Success. DES-3528:admin# config scheduling_mechanism Purpose Used to configure the traffic scheduling mechanism for a port or a range of ports. Syntax config scheduling_mechanism {ports [<portlist>...
  • Page 102 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide -------- ------ Class-0 Class-1 Class-2 Class-3 Class-4 Class-5 Class-6 CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry show scheduling_mechanism Purpose Used to show the current traffic scheduling mechanism for a port or a range of ports on the Switch.
  • Page 103 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1p user_priority <class_id 0-6> (the number of the hardware queue). Parameters [<portlist> | all] – Specifes a range of ports to be configured. All specifies all ports. <priority 0-7>...
  • Page 104 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the Switch. If an untagged packet is received by the Switch, the default priority configured with this command will be written to the packet’s priority field.
  • Page 105 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry enable hol_prevention Purpose Used to enable the HOL prevention state. Syntax enable hol_prevention Description This command is used to enable the HOL prevention function on the Switch. Parameters None.
  • Page 106 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show hol_prevention Command: show hol_prevention Device HOL Prevention State: Enabled DES-3528:admin#...
  • Page 107: Port Mirroring Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port>...
  • Page 108 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# enable mirror Purpose Used to enable a previously entered port mirroring configuration. Syntax enable mirror Description This command, combined with the disable mirror command below, allows the user to enter a port mirroring configuration into the Switch, and then turn the port mirroring on and off without having to modify the port mirroring configuration.
  • Page 109 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Mirror Status: Enabled Target Port Mirrored Port RX: 2-5 TX: 2-5 DES-3528:admin#...
  • Page 110: Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan < vlan_name 32> tag <vlanid 2-4094> {type 1q_vlan advertisement} create vlan vlanid <vidlist>...
  • Page 111 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create vlan Purpose Used to create a VLAN on the Switch. Syntax create vlan <vlan_name 32 > tag <vlanid 2-4094> { type 1q_vlan advertisement } Description This command allows the user to create a VLAN on the Switch. <vlan_name 32>...
  • Page 112 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# delete vlan v1 Command: delete vlan v1 Success. DES-3528:admin# delete vlan vlanid Purpose Used to delete multiple VLANs by VLAN ID on the Switch. Syntax delete vlan vlanid <vidlist> Description This command deletes previously configured multiple VLANs on the Switch.
  • Page 113 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config vlan v1 delete 6-8 Command: config vlan v1 delete 6-8 Success. DES-3528:admin# config vlan vlanid Purpose Used to add additional ports to a previously configured VLAN and enable or disable the VLAN advertisement.
  • Page 114 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config port_vlan port list. acceptable_frame [tagged_only | admit_all] – This parameter states the frame type that will be accepted by the Switch for this function. tagged_only implies that only VLAN tagged frames will be accepted, while admit_all implies tagged and untagged frames will be accepted by the Switch.
  • Page 115 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show vlan Purpose Used to display the current VLAN configuration on the Switch. Syntax show vlan { [<vlan_name 32> | vlanid < vidlist > | ports {<portlist>}]} Description This command displays summary information about each VLAN including the VLAN ID, VLAN name, the Tagging/Untagging status, and the Member/Non-member/Forbidden status...
  • Page 116 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show port_vlan Purpose Used to display the ports’ VLAN attibutes on the Switch. Syntax show port_vlan {<portlist>} Description This command displays the GVRP status for a port list on the Switch <portlist>...
  • Page 117 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dot1v_protocol_group Syntax config dot1v_protocol_group [group_id <id> | group_name <name 32>] [add protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value> | delete protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value>] Description This command adds/deletes a protocol to/from a protocol group.The selection of a protocol can be a pre-defined protocol type or a user specified protocol type.
  • Page 118 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show dot1v_protocol_group configured protocol groups will be displayed. group_name − The name of the protocol group. The maximum length is 32 characters. Restrictions None. Example usage: To display the protocol group ID 1: DES-3528:admin# show dot1v_protocol_group group_id 1 Command: show dot1v_protocol_group group_id 1 Protocol Group ID...
  • Page 119 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show port dot1v Syntax show port dot1v{ ports <portlist>} Description This command displays the VLAN to be associated with untagged packets ingressed from a port based on the protocol group. portlist −...
  • Page 120 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable pvid auto_assign Purpose Used to disable auto assignment of PVID. Syntax disable pvid auto_assign Description This command disables the auto-assign of PVID. When it is disabled, PVID only be changed by PVID configuration (user changes explicitly).
  • Page 121 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config gvrp Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To set the Join time to 200 milliseconds: DES-3528:admin# config gvrp timer join 200 Command: config gvrp timer join 200 Success.
  • Page 122 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable vlan_trunk Syntax disable vlan_trunk Description This command disables the VLAN trunk function. Parameters None. Restrictions Only Administrator-level users can issue this command. Example usage: To disable the VLAN trunk: DES-3528:admin# disable vlan_trunk Command: disable vlan_trunk Success.
  • Page 123 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show vlan_trunk Command: show vlan_trunk VLAN Trunk Global Setting ---------------------------- VLAN Trunk Status : Enabled VLAN Trunk Member Ports : 1-5 DES-3528:admin#...
  • Page 124: Voice Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C OICE OMMANDS The voice VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable voice_vlan [vlan <vlan_name 32>...
  • Page 125 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable voice_vlan Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To disable the voice VLAN: DES-3528:admin# disable voice_vlan Command: disable voice_vlan Success.
  • Page 126 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# config voice_vlan ports Purpose Used to enable or disable the voice VLAN function on ports. Syntax config voice_vlan ports [<portlist> | all] [state [enable | disable] | mode [auto | manual]] Description This command is used to enable/disable the voice VLAN function on ports.
  • Page 127 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config voice_vlan log state Syntax config voice_vlan log state [enable | disable] Description This command is used to configure the log state for voice VLAN. If there is a new voice device detected/ or a port join/leave the voice VLAN dynamically, and the log is enabled, a log will be triggered.
  • Page 128 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show voice_vlan oui Command: show voice_vlan oui OUI Address Mask Description ------------------ ----------------- -------------- 00-01-E3-00-00-00 FF-FF-FF-00-00-00 Siemens 00-03-6B-00-00-00 FF-FF-FF-00-00-00 Cisco 00-09-6E-00-00-00 FF-FF-FF-00-00-00 Avaya 00-0F-E2-00-00-00 FF-FF-FF-00-00-00 Huawei&3COM 00-60-B9-00-00-00 FF-FF-FF-00-00-00 NEC&Philips 00-D0-1E-00-00-00...
  • Page 129 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Ports Voice Device Start Time Last Active Time ----- ----------------- ---------------- ---------------- 00-01-E3-00-00-01 2009-09-15 18:38 2009-09-15 18:39 Total Entries : 1 DES-3528:admin#...
  • Page 130: Subnet-Based Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C UBNET BASED OMMANDS The subnet-based VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create subnet_vlan [network <network_address>...
  • Page 131 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete subnet_vlan ID. The VLAN must be existed static VLAN. vlanid − Specifies a list of VLAN ID. all – Specifes to delete all subnet-based VLAN entries. Restrictions Only Administrator and Operator-level users can issue this command.
  • Page 132 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config vlan_precedence ports <portlist> − Specifies a range of ports to be configured. Parameters mac_based_vlan – Specifies to precede subnet-based VLAN classification. subnet_vlan − Specifies to precede MAC-based VLAN classification. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 133: Asymmetric Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C SYMMETRIC OMMANDS The asymmetric VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable asymmetric_vlan disable asymmetric_vlan show asymmetric_vlan Each command is listed, in detail, in the following sections.
  • Page 134 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show asymmetric_vlan Restrictions None. Example usage: To display the asymmetric VLAN state currently set on the Switch: DES-3528:admin# show asymmetric_vlan Command: show asymmetric_vlan Asymmetric VLAN: Enabled DES-3528:admin#...
  • Page 135: Link Aggregation Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-8> {type [lacp | static]} delete link_aggregation group_id <value 1-8>...
  • Page 136 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete link_aggregation Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To delete link aggregation group: DES-3528:admin# delete link_aggregation group_id 6 Command: delete link_aggregation group_id 6 Success.
  • Page 137 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config link_aggregation algorithm destination address. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure link aggregation algorithm for mac-source-dest: DES-3528:admin# config link_aggregation algorithm mac_source_dest Command: config link_aggregation algorithm mac_source_dest Success.
  • Page 138 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lacp_port active. Both devices must support LACP. • passive – LACP ports that are designated as passive cannot process LACP control frames. In order to allow the linked port group to negotiate adjustments and make changes dynamically, at one end of the connection must have “active”...
  • Page 139: Ip-Mac-Port Binding (Impb) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IP–MAC-P (IMPB) C INDING OMMANDS IMPB is a security application found on edge Switches which are usually directly connected to hosts. IMPB enables administrators to configure (or snoop) pairs of MAC and IP addresses that are allowed to access networks through the Switch.
  • Page 140 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config address_binding ip_mac ports [<portlist> | all] {state [enable {[strict | loose] | [ipv6 | all]} | disable {[ipv6 | all]}] | mode [arp | acl] | allow_zeroip [enable | disable] | forward_dhcppkt [enable | disable] | stop_learning_threshold <int 0-500>} show address_binding...
  • Page 141 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create address_binding ip_mac ipaddress <macaddr> – The MAC address of the device where the IP–MAC–Port binding is made. <portlist> – Specifies a port or range of ports to be configured for address binding. all –...
  • Page 142 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create address_binding ip_mac ipv6address <macaddr> – The MAC address of the device where the IP–MAC–Port binding is made. <portlist> – Specifies a port or range of ports to be configured for address binding. all –...
  • Page 143 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config address_binding ip_mac ports has been equipped with a special ACL Mode for IP–MAC–Port Binding. When enabled, the Switch will create one entry in the Access Profile Table. The entry may only be created if there are at least a Profile ID available on the Switch.
  • Page 144 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config address_binding ip_mac ports entries and will not allow additional MAC entries, both legal or illegal, to be learned on this port. In the stop learning state, the port will also automatically purge all blocked MAC entries on this port.
  • Page 145 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To show IP–MAC–Port Binding configuration of port 1: DES-3528:admin#show address_binding ports 1 Command: show address_binding ports 1 Port IPv4 IPv6 Mode Zero IP DHCP Packet Stop Learning State State Threshold/Mode -----...
  • Page 146 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show address_binding dhcp_snoop Command: show address_binding dhcp_snoop DHCP_Snoop(IPv4) : Disabled DHCP_Snoop(IPv6) : Disabled DES-3528:admin# show address_binding dhcp_snoop binding_entry Purpose This command is used to display the DHCP snoop binding entries. show address_binding dhcp_snoop binding_entry {port <port>} Syntax Description...
  • Page 147 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show address_binding nd_snoop Purpose This command is used to display the IP–MAC–Port Binding ND snooping. Syntax show address_binding nd_snoop {ports <portlist>} Description This command is used to display the IP–MAC–Port Binding ND snooping. ports –...
  • Page 148 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete address_binding blocked delete address_binding blocked [all | vlan_name <vlan_name> mac_address Syntax <macaddr>] Description This command is used to delete IP–MAC–Port Binding blocked entries. Parameters all – Specifies that all the entries will be removed. vlan_name - Specifies the name of the VLAN to which the blocked MAC address belongs.
  • Page 149 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To enable address binding trap log on the Switch: DES-3528:admin# enable address_binding trap_log Command: enable address_binding trap_log Success. DES-3528:admin# disable address_binding trap_log Purpose Used to disable the trap log for the IP–MAC–Port Binding function. Syntax disable address_binding trap_log This command, along with the enable address_binding trap_log, will enable and...
  • Page 150 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide no debug address_binding Description This command is used to disable IMPB debugging on the Switch. Parameters None. Restrictions Only Administrator-level users can issue this command. Example usage: To close the debug: DES-3528:admin# no debug address_binding Command: no debug address_binding Success.
  • Page 151 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable address_binding dhcp_snoop ipv6 – Specifies the IPv6 address used for this configuration. Parameters all – Specifies that all the addresses will be used. Restrictions Only Administrator, Operator and Power User-level users can issue this command. Example usage: To disable the address binding DHCP snooping mode: DES-3528:admin# disable address_binding dhcp_snoop...
  • Page 152 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear address_binding dhcp_snoop binding_entry ports clear address_binding dhcp_snoop binding_entry ports [<portlist> | all] {[ipv6 | Syntax all]} Description This command is used to clear the DHCP snooping entries learned for the specified ports.
  • Page 153 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config address_binding dhcp_snoop max_entry ports ipv6 – Specifies the IPv6 address used for this configuration. Restrictions Only Administrator, Operator and Power User-level users can issue this command. Example usage: To set the maximum number of entries that ports 1-3 can learn to 10: DES-3528:admin# config address_binding dhcp_snoop max_entry ports 1-3 limit 10 Command: config address_binding dhcp_snoop max_entry ports 1-3 limit 10...
  • Page 154 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: config address_binding recover_learning ports 6-7 Success. DES-3528:admin#...
  • Page 155: Limited Ip Multicast Address

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IP M IMITED ULTICAST DDRESS The Limited IP Multicast command allows the administrator to permit or deny access to a port or range of ports by specifying a range of multicast addresses. The Limited IP Multicast Commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 156 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mcast_filter_profile You can either specifiy a single multicast IP address or a range of multicast addresses using Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To config a multicast filter profile: DES-3528:admin# config mcast_filter_profile profile_id 2 add 225.1.1.1 - 225.1.1.1...
  • Page 157 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show mcast_filter_profile profile_id − ID of the profile if not specified all profiles will be displayed. Parameters profile_name <name 1-32 > – Name of the profile if not specified all profiles will be displayed. Restrictions None Example usage:...
  • Page 158 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show limited_multicast_addr When the function is configured on a port or VLAN, it limits the multicast groups that hosts can join through the operation of IGMP snooping function and layer 3 function. <portlist>...
  • Page 159 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show max_mcast_group Description This command display the max number of multicast groups that a port can join. <portlist> − A range of ports to display the max number of multicast groups. Parameters <vidlist>...
  • Page 160: Basic Ip Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IP C ASIC OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif <ipif_name 12>...
  • Page 161 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config ipif dhcpv6_client - Specifies to enable or diable the assignment of an IP address to the Switch’s System IP interface from the DHCPv6 protocol. Restrictions Only Administrator, Operator and Power User-level users can issue this command. Example usage: To configure the IP interface System: DES-3528:admin# config ipif System ipaddress 10.48.74.122/8...
  • Page 162 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete ipif Description This command deletes an interface or all interfaces. Note that the system interface cannot be deleted. <ipif_name 12> − The name of the deleted IP interface. Parameters all –...
  • Page 163 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif {<ipif_name 12>} Description This command will display the configuration of an IP interface on the Switch. <ipif_name 12>...
  • Page 164 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable ipif_ipv6_link_local_auto all - Specifies that all the IP interfaces will be used. Restrictions Only Administrator, Operator and Power User-level users can issue this command. Example usage: Disable the automatic configuration of link local address for an interface: DES-3528:admin# disable ipif_ipv6_link_local_auto Intface_1 Command: disable ipif_ipv6_link_local_auto Intface_1 Success...
  • Page 165: Multicast Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C ULTICAST OMMANDS The Multicast VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create igmp_snooping multicast_vlan <vlan_name 32>...
  • Page 166 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters show mld_snooping {< vlan_name 32> } multicast_vlan_group delete mld_snooping multicat_vlan <vlan_name 32> enable mld_snooping multicast_vlan disable mld_snooping multicast_vlan show mld_snooping multicast_vlan {<vlan_name 32>} config mld_snooping multicast_vlan [disable | enable] forward_unmatched Each command is listed, in detail, in the following sections.
  • Page 167 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config igmp_snooping multicast_vlan source port and untagged source port can not overlap, the member port and source port can not overlap too. Before configuring the multicast VLAN member port by using this command, the multicast VLAN must be created first.
  • Page 168 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete igmp_snooping multicast_vlan Purpose Used to delete a muticast VLAN. Syntax delete igmp_snooping multicast_vlan <vlan_name 32> Description This command allows you to delete multicat_vlan. vlan_name − The name of the multicast VLAN to be deleted. Parameters Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 169 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show igmp_snooping multicast_vlan Purpose Used to show the information of multicast VLAN. Syntax show igmp_snooping multicast_vlan {<vlan_name 32>} Description This command allows you to show the information of multicast VLAN. <vlan_name>...
  • Page 170 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create igmp_snooping multicast_vlan_group_profile Description This command is used to create an IGMP multicast VLAN group profile on the Switch. The profile name used for IGMP snooping must be unique. <profile_name 32>...
  • Page 171 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete igmp_snooping multicast_vlan_group_profile Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To delete the IGMP multicast VLAN group profile "g1": DES-3528:admin# delete igmp_snooping multicast_vlan_group_profile g1 Command: delete igmp_snooping multicast_vlan_group_profile g1 Success.
  • Page 172 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config igmp_snooping multicast_vlan multicast_group <profile_name 32> − The name of the IGMP multicast VLAN group profile to be associated or de- associated to the specified multicast VLAN. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 173 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: create mld_snooping multicast_vlan mv1 2 Success. DES-3528:admin# config mld_snooping multicast_vlan Purpose Used to configure the parameter of the specific MLD multicast VLAN. Syntax config mld_snooping multicast_vlan <vlan_name 32> {[add | delete] [member_port <portlist>...
  • Page 174 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create mld_snooping multicast_vlan_group_profile profile name used for mld snooping must be unique. <profile_name 32> − Specifies the MLD multicast VLAN group profile name, max length is 32 Parameters Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 175 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To delete the MLD multicast VLAN group profile "g1": DES-3528:admin# delete mld_snooping multicast_vlan_group_profile g1 Command: delete mld_snooping multicast_vlan_group_profile g1 Success. DES-3528:admin# show mld_snooping multicast_vlan_group_profile Purpose Used to show the information about an MLD multicast VLAN group profile on the Switch. Syntax show mld_snooping multicast_vlan_group_profile {<profile_name 1-32>} Description...
  • Page 176 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To associate an MLD multicast VLAN group profile “g1” to MLD multicast VLAN “mv1”: DES-3528:admin# config mld_snooping multicast_vlan_group mv1 add profile_name g1 Command: config mld_snooping multicast_vlan_group mv1 add profile_name g1 Success.
  • Page 177 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable mld_snooping multicast_vlan Restrictions Only Administrator-level users can issue this command. Example usage: To enable MLD Multicast VLAN: DES-3528:admin# enable mld_snooping multicast_vlan Command: enable mld_snooping multicast_vlan Success. DES-3528:admin# disable mld_snooping multicast_vlan Purpose Used to disable the MLD Multicast VLAN function.
  • Page 178 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show igmp_snooping multicast_vlan newmulti Command: show igmp_snooping multicast_vlan newmulti IGMP Multicast VLAN Global State : Enabled IGMP Multicast VLAN Forward Unmatched : Disabled VLAN Name :newmulti Member(Untagged) Ports :5-10 Tagged Member Ports Source Ports...
  • Page 179: Igmp / Mld Snooping Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide IGMP / MLD S NOOPING OMMANDS The IGMP / MLD Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping...
  • Page 180 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters show mld_snooping mrouter_ports [vlan <vlan_name 32> | vlanid <vlanid_list> | all] {[static | dynamic | forbidden]} create mld_snooping static_group [vlan <vlan_name 32> | vlanid <vlanid_list>] <ipv6addr> delete mld_snooping static_group [vlan <vlan_name 32>...
  • Page 181 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To configure IGMP snooping: DES-3528:admin# config igmp_snooping vlan_name default state enable Command: config igmp_snooping vlan_name default state enable Success. DES-3528:admin# config igmp_snooping rate_limit Purpose The command configures the rate of IGMP control packet that is allowed per port or per VLAN.
  • Page 182 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config igmp_snooping querier all - Specify all VLANs for which IGMP snooping querier is to be configured. query_interval - (Optional) Specify the amount of time in seconds between general query transmissions.
  • Page 183 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config igmp_snooping querier vlan_name default query_interval 125 state enable Command: config igmp_snooping querier vlan_name default query_interval 125 state enable Success. DES-3528:admin# config router_ports Purpose This command allows you to designate a range of ports as being connected to multicast- enabled routers.
  • Page 184 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config router_ports_forbidden default add 1-10 Command: config router_ports_forbidden default add 1-10 Success. DES-3528:admin# create igmp_snooping static_group Purpose This command allows you to create an IGMP snooping static group. Syntax create igmp_snooping static_group [vlan<vlan_name 32>...
  • Page 185 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete igmp_snooping static_group Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To delete an IGMP snooping static group for VLAN 1, group 239.1.1.1: DES-3528:admin# delete igmp_snooping static_group vlan default 239.1.1.1 Command: delete igmp_snooping static_group vlan default 239.1.1.1 Success.
  • Page 186 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show igmp_snooping static_group <ipaddr> - Specify the multicast group IP address. Restrictions None. Example usage: To display all the IGMP snooping static groups: DES-3528:admin# show igmp_snooping static_group VLAN ID/Name IP Address Static Member Ports --------------...
  • Page 187 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config igmp_snooping data_driven_learning seconds. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To enable the data driven learning of an IGMP snooping group on the default VLAN: DES-3528:admin# config igmp_snooping data_driven_learning vlan default state enable Command: config igmp_snooping data_driven_learning vlan default state enable...
  • Page 188 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show igmp_snooping rate_limit Purpose This command displays the IGMP snooping rate limit setting. Syntax show igmp_snooping rate_limit [ports <portlist> | vlanid <vlanid_list>] Description This command displays the IGMP snooping rate limit setting. Parameters ports - Specify the port range.
  • Page 189 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide The third item means that for ports 4-5, the data from 225.0.0.2 will be forwarded, IGMP v2 group. The source address does not matter. The fourth item is a data-driven learned entry. If the member port list is empty, the multicast packets will be forwarded to the router ports.
  • Page 190 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast Group : 224.0.0.2 Reports Member Ports : 1:3, 1:4, 1:26,2:7 Router Ports : 24 UP Time : 3 days 50 mins Expiry Time : 120 secs...
  • Page 191 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show igmp_snooping forwarding Restrictions None. Example usage: To show all IGMP snooping forwarding entries located on the Switch: DES-3528:admin# show igmp_snooping forwarding Command: show igmp_snooping forwarding VLAN Name : default Source IP : 10.90.90.114...
  • Page 192 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show router_ports all Command: show router_ports all VLAN Name : default Static Router Port : 1-10 Dynamic Router Port Router IP : 10.0.0.1, 10.0.0.2, 10.0.0.3 Forbidden router port VLAN Name : vlan2 Static router port...
  • Page 193 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show igmp_snooping statistics counter vlanid 1 Command: show igmp_snooping statistics counter vlanid 1 VLAN Name : default ----------------------------------------------- Group Number : 10 Receive Statistics Query IGMP v1 Query IGMP v2 Query IGMP v3 Query Total...
  • Page 194 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show igmp_snooping statistics counter ports 1 Command: show igmp_snooping statistics counter ports 1 : 1 Port # ------------------------------------------------ Total Groups : 10 Receive Statistics Query IGMP v1 Query IGMP v2 Query IGMP v3 Query Total...
  • Page 195 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping Purpose This command is used to configure MLD snooping on the Switch. Syntax config mld_snooping [vlan_name <vlan_name 32> | vlanid <vlanid_list> | all] {state [enable | disable] | fast_done [enable | disable] | report_suppression [enable | disable]}(1) Description This command is used to configure MLD snooping on the Switch.
  • Page 196 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping querier long. vlanid - Specify the ID of the VLAN for which MLD snooping querier is to be configured. <vlanid_list> - Enter the VLAN ID list here. all - Specify all VLANs for which MLD snooping querier is to be configured.
  • Page 197 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping router_ports Purpose This command allows you to designate a range of ports as being connected to multicast- enabled routers. Syntax config mld_snooping mrouter_ports [vlan <vlan_name 32> | vlanid <vlanid_list>] [add | delete] <portlist>...
  • Page 198 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show mld_snooping Purpose This command will display the current MLD snooping configuration on the Switch. Syntax show mld_snooping {[vlan <vlan_name 32> | vlanid <vlanid_list>]} Description This command will display the current MLD snooping configuration on the Switch. Parameters vlan - (Optional) Specify the name of the VLAN for which you want to view the IGMP snooping configuration.
  • Page 199 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show mld_snooping group vlanid - (Optional) Specify the ID of the VLAN for which you want to view MLD snooping group information. <vlanid_list> - Enter the VLAN ID list here. ports - (Optional) Specify a list of ports for which you want to view MLD snooping group information.
  • Page 200 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show mld_snooping group data_driven Command: show mld_snooping group data_driven Source/Group : NULL/FF1E::5 VLAN Name/VID : default/1 Reports Member Ports Router Ports : 24 UP Time : 100 Expiry Time : 200 Filter Mode...
  • Page 201 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show mld_snooping forwarding Command: show mld_snooping forwarding VLAN Name : default Source IP : 2001::1 Multicast Group: FE1E::1 Port Member : 2,7 VLAN Name : default Source IP : 2001::2 Multicast Group: FF1E::1 Port Member...
  • Page 202 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create mld_snooping static_group Description Member ports can be added to the static group. The static member and the dynamic member ports form the member ports of a group. The static group will only take effect when MLD snooping is enabled on the VLAN.
  • Page 203 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping static_group Syntax config mld_snooping static_group [vlan <vlan_name 32> | vlanid <vlanid_list>] <ipv6addr> [add | delete] <portlist> Description When a port is configured as a static member port, the MLD protocol will not operate on this port.
  • Page 204 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping data_driven_learning Purpose This command is used to enable or disable the data-driven learning of an MLD snooping group. Syntax config mld_snooping data_driven_learning max_learned_entry <value 1-1024> [vlan_name <vlan_name> | vlanid <vlanid_list> | all] {state [enable | disable] | aged_out [enable | disable] | expiry_time <sec 1-65535>}(1) Description When data-driven learning is enabled for the VLAN, when the Switch receives the IP...
  • Page 205 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear mld_snooping data_driven_group vlan_name - Specify the VLAN name. <vlan_name> - Enter the VLAN name here. vlanid - Specify the VLAN ID. <vlanid_list> - Enter the VLAN ID list here. <ipaddr>...
  • Page 206 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show mld_snooping statistics counter vlanid 1 Command: show mld_snooping statistics counter vlanid 1 VLAN Name : default ----------------------------------------------- Group Number : 10 Receive Statistics Query MLD v1 Query MLD v2 Query Total Dropped By Rate Limitation...
  • Page 207 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mld_snooping rate_limit Syntax config mld_snooping rate_limit [ports <portlist> | vlanid <vlanid_list>] [<value 1-1000> | no_limit] Description The command configures the rate limit of MLD control packets that are allowed by each port or VLAN.
  • Page 208: Dhcp Relay Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DHCP R ELAY OMMANDS The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1-16>...
  • Page 209 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_relay relay the DHCP packet. The Default setting is 0. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To config DHCP relay: DES-3528:admin# config dhcp_relay hops 2 time 23 Command: config dhcp_relay hops 2 time 23 Success.
  • Page 210 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the Switch. Syntax config dhcp_relay option_82 state [enable | disable] Description This command is used to configure the state of DHCP relay agent information option 82 of the Switch.
  • Page 211 Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure DHCP relay option 82 remote ID: DES-3528:admin# config dhcp_relay option_82 remote_id user_define D-Link L2 Switch Command: config dhcp_relay option_82 remote_id user_define D-Link L2 Switch Success. DES-3528:admin# show dhcp_relay Purpose Used to display the current DHCP/BOOTP relay configuration.
  • Page 212 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show dhcp_relay Command: show dhcp_relay DHCP/BOOTP Relay Status : Disabled DHCP/BOOTP Hops Count Limit DHCP/BOOTP Relay Time Threshold : 0 DHCP Vendor Class Identifier Option 60 State: Disabled DHCP Client Identifier Option 61 State: Disabled DHCP Relay Agent Information Option 82 State : Disabled...
  • Page 213 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay Description This command is used to disable the DHCP/BOOTP relay function on the Switch. Parameters None.
  • Page 214 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_60 add string – The specified string. ipaddress – Specify a relay server IP address. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure a new dhcp relay with option 60: DES-3528:admin# config dhcp_relay option_60 add string "abc"...
  • Page 215 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_60 delete Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To delete the DHCP relay option 60: DES-3528:admin# config dhcp_relay option_60 delete all Command: config dhcp_relay option_60 delete all Success.
  • Page 216 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_61 state Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure the state of DHCP relay option 61: DES-3528:admin# config dhcp_relay option_61 state enable Command: config dhcp_relay option_61 state enable Success.
  • Page 217 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config dhcp_relay option_61 delete Purpose This command is used to delete an option 61 rule. Syntax config dhcp_relay option_61 delete [mac_address <macaddr> | string <desc_long 255> | all] Description This command is used to delete an option 61 rule.
  • Page 218 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp_local_relay vlan Parameters <vlan_name 32> – The name of the VLAN to be enabled by DHCP local relay. State – Enable or disable the DHCP local relay for a specified VLAN. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 219 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show dhcp_local_relay Description This command is used to display the current DHCP local relay configuration. Parameters None. Restrictions None. Example usage: To display the local dhcp relay status: DES-3528:admin# show dhcp_local_relay Command: show dhcp_local_relay DHCP/BOOTP Local Relay Status...
  • Page 220 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ------------- ------------------------------------ 10.43.21.12 1-10 DES-3528:admin# To delete DHCP/BOOTP server 10.43.21.12 from VLAN 2 and VLAN 3: DES-3528:admin# config dhcp_relay delete vlanid 2-3 10.43.21.12 Command: config dhcp_relay delete vlanid 2-3 10.43.21.12 Success.
  • Page 221: Commands (Including Guest Vlans)

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide 802.1X C VLAN OMMANDS NCLUDING UEST The Switch implements the server-side of the IEEE 802.1X Port-based and Host-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 222 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters show auth_session_statistics {ports <portlist>} show auth_client show acct_client config accounting service [network | shell | system] state [enable | disable] show accounting service Each command is listed, in detail, in the following sections: enable 802.1x Purpose Used to enable the 802.1X server on the Switch.
  • Page 223 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create 802.1x user Restrictions Only Administrator-level users can issue this command. Example usage: To create user “test”: DES-3528:admin# create 802.1x user test Command: create 802.1x user test Enter a case-sensitive new password: Enter the new password again for confirmation: Success.
  • Page 224 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1x auth_protocol Purpose Used to configure the 802.1X auth protocol Syntax config 802.1x auth_protocol [local | radius_eap] Description This command configures the 802.1X auth protocol. local − Specifies the auth protocol as local. Parameters radius_eap −...
  • Page 225 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config 802.1x authorization attributes radius disable Command: config 802.1x authorization attributes radius disable Success. DES-3528:admin# config 802.1x fwd_pdu ports Purpose Used to configure if the port will flood EAPOL PDU when 802.1X functionality is disabled. Syntax config 802.1x fwd_pdu ports [<portlilst>...
  • Page 226 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To display the 802.1X system level configurations: DES-3528:admin#show 802.1x Command: show 802.1x 802.1X : Disabled Authentication Protocol : RADIUS_EAP Forward EAPOL PDU : Disabled Max User : no_limit RADIUS Authorization : Enabled DES-3528:admin#...
  • Page 227 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1x max _users Purpose Used to configure the max number of users that can be learned through 802.1x authentication. Syntax config 802.1x max users [<value 1 – 448> | no_limit] Description The setting is a global limitation on the maximum number of users that can be learned through 802.1x authentication.
  • Page 228 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1x auth_parameter timer. The default value is 3600. max_users - Specifies per port maximum number of users. The range is 1 to m. The default value is 16. enable_reauth −...
  • Page 229 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config 802.1x reauth all − Specifies all of the ports on the Switch. mac_address <macaddr> − Enter the MAC address to be re-authorized. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure 802.1X reauthentication for ports 1 to 18: DES-3528:admin# config 802.1x reauth port_based ports 1-18...
  • Page 230 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To configure the ports for a previously created 802.1X Guest VLAN as enabled. DES-3528:admin# config 802.1x guest_vlan ports 1-5 state enable Command: config 802.1x guest_vlan ports 1-5 state enable Success.
  • Page 231 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1-3> [<server_ip> | <ipv6addr>] key <passwd 32> [default | {auth_port <udp_port_number 1-65535>...
  • Page 232 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config radius Purpose Used to configure the Switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddress [<server_ip> | <ipv6addr>] | key <passwd 32> | auth_port [<udp_port_number 1-65535> | default] | acct_port [<udp_port_number 1-65535>...
  • Page 233 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Total Entries : 1 DES-3528:admin# show auth_statistics Purpose Used to display authenticator statistics information. Syntax show auth_statistics {ports <portlist>} Description This command displays authenticator statistics information. portlist − Specifies a range of ports to be shown. Parameters all −...
  • Page 234 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show auth_diagnostics ports 1 Command: show auth_diagnostics ports 1 Port number : 1 Original RX VID MAC Address 00-05-5D-F9-16-76 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated...
  • Page 235 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show auth_client Purpose Used to display authentication client information Syntax show auth_client Description This command displays authentication client information Parameters None. Restrictions None. Example usage: To display authentication client information: DES-3528:admin# show auth_client Command: show auth_client radiusAuthClient ==>...
  • Page 236 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators radiusAccClientPendingRequests radiusAccClientTimeouts radiusAccClientUnknownTypes radiusAccClientPacketsDropped CTRL+C ESC q Quit SPACE n Next Page Previous Page Refresh config accounting service Purpose Used to configure the state of the specified RADIUS accounting service. Syntax config accounting service [network | shell | system] state [enable | disable] Description...
  • Page 237 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Accounting Service ------------------- Network : Enabled Shell : Enabled System : Enabled DES-3528:admin#...
  • Page 238: Access Control List (Acl) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (ACL) C CCESS ONTROL OMMANDS The Switch implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address. Access profiles allows establishment of a criteria to determine whether or not the Switch will forward packets based on the information contained in each packet’s header.
  • Page 239 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters delete access_profile [profile_id <value 1-14> | profile_name <name 1-32> | all] config access_profile [profile_id <value 1-14> | profile_name <name 1-32>] [add access_id [auto_assign | <value 1-128>] [ethernet {[vlan <vlan_name 32> | vlan_id <vlanid 1-4094>] {mask <hex 0x0-0x0fff>} | source_mac <macaddr>...
  • Page 240 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters 0x0-0xffffffff> } | ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6 <ipv6addr> | destination_ipv6 <ipv6addr>}] port [<portlist> | all] [permit | deny] {time_range <range_name 32>} | delete access_id <value 1-100>] show cpu profile_id <value 1-5>...
  • Page 241 With this advanced unique Packet Content Mask (also known as Packet Content Access Control List - ACL), D-Link xStack Switch family can effectively mitigate some network attacks like the common ARP Spoofing attack that is wide spread today. This is the reason why Packet Content ACL is able to inspect any specified content of a packet in different protocol layers.
  • Page 242 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create access_profile • class – Entering this parameter will instruct the Switch to examine the class field of the IPv6 header. This class field is a part of the packet header that is similar to the Type of Service (ToS) or Precedence bits field in IPv4.
  • Page 243 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config access_profile Purpose Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operational method, with the values the Switch finds in the specified frame header fields.
  • Page 244 • With this advanced unique Packet Content Mask (also known as Packet Content Access Control List - ACL), D-Link xStack Switch family can effectively mitigate some network attacks like the common ARP Spoofing attack that is wide spread today. This is the reason that Packet Content ACL is able to inspect any specified content of a packet in different protocol layers.
  • Page 245 ARP spoofing attack). For a more detailed explaination on how ARP protocol works and how to employ D-Link’s advanced unique Packet Content ACL to prevent an ARP spoofing attack, please see Appendix B, at the end of this manual.
  • Page 246 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show access_profile Purpose Used to display the currently configured access profiles on the Switch. Syntax show access_profile {profile_id <value 1-14> | profile_name <name 1-32 >} Description This command is used to display the currently configured access profiles. Parameters profile_id <value 1-14>...
  • Page 247 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create cpu access_profile Description This command is used to create an access profile used only for CPU Interface Filtering. Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields.
  • Page 248 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create cpu access_profile based on the rules configured in the config access_profile command for IPv6. • class – Entering this parameter will instruct the Switch to examine the class field of the IPv6 header.
  • Page 249 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config cpu access_profile Syntax config cpu access_profile profile_id <value 1-5> [add access_id <value 1-100> [ethernet {[vlan <vlan_name 32> | vlan_id <vlanid 1-4094>] | source_mac <macaddr> | destination_mac <macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} | ip {[vlan <vlan_name 32>...
  • Page 250 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config cpu access_profile this IGMP type value. tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field within each packet. • src_port <value 0-65535> − Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header.
  • Page 251 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config cpu access_profile profile_id 5 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny Success.
  • Page 252 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# disable cpu_interface_filtering Purpose Used to disable CPU interface filtering on the Switch. Syntax disable cpu_interface_filtering Description This command is used, in conjunction with the enable cpu_interface_filtering command above, to enable and disable CPU interface filtering on the Switch.
  • Page 253 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config flow_meter rate - This specifies the rate for single rate two color mode. Specify the committed bandwidth in Kbps for the flow. <value 0-1048576> - Enter the rate for single rate two color mode here. This value must be between 0 and 1048576.
  • Page 254 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config flow_meter when the function is disabled. enable - Specifies that the ACL counter option will be enabled. disable - Specifies that the ACL counter option will be disabled. sr_tcm - Specifies “single rate three color mode”.
  • Page 255 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show flow_meter Purpose Used to view the current state of ACL flow meter on the Switch. Syntax show flow_meter {[profile_id <value 1-14> | profile_name <name 1-32>] {access_id <value1-128>}} Description This command is used view the current state of ACL flow meter on the Switch.
  • Page 256 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config time_range end_time − Specifies the ending time in a day. (24-hr time) weekdays − Specify the list of days contained in the time range. Use a dash to define a period of days.
  • Page 257 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show current_config access_profile Restrictions None. Example usage: To show the current configuration access profile on the Switch: DES-3528:admin#show current_config access_profile Command: show current_config access_profile #------------------------------------------------------------------------------- # ACL create access_profile profile_id 1 profile_name ethacl ethernet vlan 0xFFF #------------------------------------------------------------------------------- DES-3528:admin#...
  • Page 258: Safeguard Engine Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 259 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config safeguard_engine subsided. fuzzy – If selected, this function will instruct the Switch to minimize the IP and ARP traffic flow to the CPU by dynamically allotting an even bandwidth to all traffic flows. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 260: Filter Commands (Dhcp Server / Netbios)

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (DHCP S BIOS) ILTER OMMANDS ERVER DHCP Server Screening Settings This function allows you not only to restrict all DHCP Server packets but also to receive any specified DHCP server packets by any specified DHCP client.
  • Page 261 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config filter dhcp_server and to allow some DHCP server packets to be forwarded if they are on the pre-defined server IP address/MAC address binding list. Thus the DHCP server can be restricted to service a specified DHCP client.
  • Page 262 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success DES-3528:admin# show filter dhcp_server Purpose Used to display current DHCP server/client filter list created on the Switch. Syntax Show filter dhcp_server Description This command is used to display DHCP server/client filter list created on the Switch. Parameters None.
  • Page 263 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show filter netbios Syntax show filter netbios Description This command will display the Switch settings to filter NetBIOS packets from the specified ports. Parameters None. Restrictions None. Example usage: To display the NetBIOS filter status: DES-3528:admin# show filter netbios Command: show filter netbios...
  • Page 264 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#...
  • Page 265: Layer 3 Cpu Filter Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide 3 CPU F AYER ILTER OMMANDS The L3 CPU Filter commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. When the Switch receives a packet such as PIM, DVMRP or IGMP query, the L3 CPU filter mode will determine how the packet is handled.
  • Page 266 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Port IGMP Query DVMRP ---- ---------- -------- ----------- Disabled Disabled Disabled Disabled Disabled Disabled DES-3528:admin#...
  • Page 267: Loop-Back Detection Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide BACK ETECTION OMMANDS The Loop-back Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config loopdetect {recover_timer [<value 0>...
  • Page 268 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config loopdetect ports <portlist> − Specifies a range of ports for the loop-back detection Parameters state [enabled | disabled] – Allows the loop-back detection to be disabled and enabled. Restrictions Only Administrator and Operator-level users can issue this command.
  • Page 269 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable loopdetect Purpose Used to globally disable loop-back detection on the Switch. Syntax disable loopdetect Description This command is used to globally disable loop-back detection on the Switch. Parameters None.
  • Page 270 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show loopdetect ports 1-3 Command: show loopdetect ports 1-3 Port LoopDetect State Loop Status ------ ------------------ ---------- Enabled Normal Enabled Normal Enabled Normal CTRL+C ESC q Quit SPACE n Next Page Previous Page...
  • Page 271: Traffic Segmentation Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied. Command Parameters config traffic_segmentation...
  • Page 272 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ---- ---------------------------- 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 1-26 CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry...
  • Page 273: Sflow Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMMANDS The sFlow commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable sflow disable sflow show sflow create sflow flow_sampler [<portlist>...
  • Page 274 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable sflow Purpose Used to disable the sFlow function. Syntax disable sflow Description This command disables the sFlow function. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To disable sflow: DES-3528:admin# disable sflow...
  • Page 275 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To create sflow flow_sampler: DES-3528:admin# create sflow flow_sampler ports all analyzer_server_id 1 rate 10 maxheadersize 100 Command: create sflow flow_sampler ports all analyzer_server_id 1 rate 10 maxheadersize 100 Success.
  • Page 276 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show sflow flow_sampler Purpose Used to show the sflow flow_sampler information of ports which have been created. Syntax show sflow flow_sampler Description This command is used to show the sFlow flow_sampler which has been configured for ports. The actual value rate is 256 times the displayed rate value.
  • Page 277 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config sflow counter_poller ports Syntax config sflow counter_poller ports [<portlist> | all] interval [disable | <sec 20-120>] Description This command is used to config the sflow counter_poller parameters. If the user wants the change the analyzer_server_id, he needs to delete the counter_poller and create a new one.
  • Page 278 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show sflow counter_poller Command: show sflow counter_poller Port Analyzer Server ID Polling Interval (secs) ---- ------------------ ----------------------- Total Entries: 2 DES-3528:admin# create sflow analyzer_server Purpose Used to create the analyzer_server. Syntax create sflow analyzer_server <...
  • Page 279 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config sflow analyzer_server null which means that the entry will be inactive. collectorport – The destination UDP port for sending the sFlow datagrams. If not specified, the default value is 6343. maxdatagramsize –...
  • Page 280 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show sflow analyzer_server Command: show sflow analyzer_server sFlow Analyzer_server Information ------------------------------ Server ID Owner : monitor Timeout : 400 Current Countdown Time: 400 Collector Address : 10.90.90.1 Collector Port : 6343 Max Datagram Size...
  • Page 281: Time And Sntp Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config sntp...
  • Page 282 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show sntp and poll interval. Parameters None. Restrictions None. Example usage: To display SNTP configuration information: DES-3528:admin# show sntp Command: show sntp Current Time Source : System Clock SNTP : Disabled SNTP Primary Server...
  • Page 283 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# disable sntp Command: disable sntp Success. DES-3528:admin# config time Purpose Used to manually configure system time and date settings. Syntax config time <date ddmmmyyyy> <time hh:mm:ss> Description This command configures the system time and date settings.
  • Page 284 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dst Syntax config dst [disable | repeating {s_week <start_week 1-4,last> | s_day <start_day sun- sat> | s_mth <start_mth 1-12> | s_time start_time hh:mm> | e_week <end_week 1- 4,last>...
  • Page 285 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To configure daylight savings time on the Switch: DES-3528:admin# config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
  • Page 286: Arp And Gratuitous Arp Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ARP C RATUITOUS OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr>...
  • Page 287 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config arpentry Description This command is used to configure a static entry in the ARP Table. The user may specify the IP address and the corresponding MAC address of an entry in the Switch’s ARP table. <ipaddr>...
  • Page 288 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif <ipif_name 12> | ipaddress <ipaddr> | static | mac_address <macaddr>} Description This command is used to display the current contents of the Switch’s ARP table. ipif <ipif_name 12>...
  • Page 289 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To remove dynamic entries in the ARP table: DES-3528:admin# clear arptable Command: clear arptable Success. DES-3528:admin# config gratuitous_arp send ipif_status_up Purpose Used to enable/disable the sending of gratuitous ARP requests while the IP interface status comes up.
  • Page 290 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config gratuitous_arp learning Purpose Used to enable/disable the learning of ARP entries in the ARP cache based on the received gratuitous ARP packets. Syntax config gratuitous_arp learning [enable | disable] Description The command is used to enable/disable updating the ARP cache based on the received gratuitous ARP packets.
  • Page 291 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example Usage: To disable the system interface’s gratuitous ARP log and trap: DES-3528:admin# disable gratuitous_arp ipif System trap log Command: disable gratuitous_arp ipif System trap log Success. DES-3528:admin# config gratuitous_arp send periodically Purpose Used to configure the interval for periodical sending of gratuitous ARP request packet.
  • Page 292: Routing Table Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OUTING ABLE OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default | <network_address>] <ipaddr>...
  • Page 293 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute {<network_address> | <ipaddr>} {static} Description This command will display the Switch’s current IP routing table. Parameters <network_address>...
  • Page 294: Mac Notification Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interval <int 1-2147483647>...
  • Page 295 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mac_notification Description This command is used to monitor MAC addresses learned and entered into the FDB. interval <sec 1-2147483647> − The time in seconds between notifications. The user may Parameters choose an interval between 1 and 2,147,483,647 seconds.
  • Page 296 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide State : Enabled Interval History Size DES-3528:admin# show mac_notification ports Purpose Used to display the Switch’s MAC address table notification status settings. Syntax show mac_notification ports {<portlist>} Description This command is used to display the Switch’s MAC address table notification status settings.
  • Page 297: Access Authentication Control Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 298 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide The Access Authentication Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15>...
  • Page 299 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 300 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Authentication Policy: Enabled DES-3528:admin# create authen_login method_list_name Purpose Used to create a user-defined method list of authentication methods for user login. Syntax create authen_login method_list_name <string 15> Description This command is used to create a list for authentication techniques for user login.
  • Page 301 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config authen_login group list. radius − Adding this parameter will require the user to be authenticated using the  RADIUS protocol from the remote RADIUS server hosts of the RADIUS server group list.
  • Page 302 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete authen_login method_list_name Purpose Used to delete a user-defined method list of authentication methods for user login. Syntax delete authen_login method_list_name <string 15> Description This command is used to delete a list for authentication methods for user login. <string 15>...
  • Page 303 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Darren User-defined Group local Keyword DES-3528:admin# create authen_enable method_list_name Purpose Used to create a user-defined method list of authentication methods for promoting user's privilege to Admin level. Syntax create authen_enable method_list_name <string 15>...
  • Page 304 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config authen_enable server group list.  tacacs+ – Adding this parameter will require the user to be authenticated using the TACACS+ protocol from the remote TACACS+ server hosts of the TACACS+ server group list.
  • Page 305 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete authen_enable method_list_name Purpose Used to delete a user-defined method list of authentication methods for promoting user's privilege to Admin level. Syntax delete authen_enable method_list_name <string 15> Description This command is used to delete a user-defined method list of authentication methods for promoting user level privileges to Administrator level privileges.
  • Page 306 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Permit tacacs+ Built-in Group tacacs Built-in Group Darren User-defined Group local Keyword default tacacs+ Built-in Group local Keyword Total Entries : 2 DES-3528:admin# config authen application Purpose Used to configure login or enable method list for all or the specified application. Syntax config authen application [console | telnet | ssh | http | all] [login | enable] [default | method_list_name <string 15>]...
  • Page 307 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show authen application Parameters None. Restrictions None. Example usage: To display the login and enable method list for all applications on the Switch: DES-3528:admin# show authen application Command: show authen application Application Login Method List Enable Method List...
  • Page 308 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide timeout 10 retransmit 5 Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234 timeout 10 retransmit 5 Success. DES-3528:admin# config authen server_host Purpose Used to configure an authentication server host. Syntax config authen server_host <ipaddr>...
  • Page 309 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete authen server_host Syntax delete authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] Description This command is used to delete a user-defined authentication server host previously created on the Switch.
  • Page 310 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create authen server_group Purpose Used to create a user-defined authentication server group. Syntax create authen server_group <string 15> Description This command will create an authentication server group. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user defined categories for authentication using method lists.
  • Page 311 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config authen server_group XTACACS authentication protocol.  tacacs+ – Use this parameter to define the protocol if the server host is using the TACACS+ authentication protocol.  radius – Use this parameter to define the protocol if the server host is using the RADIUS authentication protocol.
  • Page 312 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To view authentication server groups currently set on the Switch. DES-3528:admin# show authen server_group Command: show authen server_group Group Name IP Address Protocol --------------- -------------- -------- mix_1 10.1.1.222 TACACS+ 10.1.1.223 TACACS...
  • Page 313 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show authen parameter Purpose Used to show the authentication parameters. Syntax show authen parameter Description This command will display the authentication parameters currently configured on the Switch, including the response timeout and user authentication attempts.
  • Page 314 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config admin local_enable Description This command will configure the locally enabled password for the enable admin command. When a user chooses the local_enable method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is set locally on the Switch.
  • Page 315: Secure Shell (Ssh) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (SSH) C ECURE HELL OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 316 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable ssh Purpose Used to disable SSH. Syntax disable ssh Description This command allows users to disable SSH on the Switch. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Usage example: To disable SSH: DES-3528:admin# disable ssh...
  • Page 317 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To view the current authentication mode set on the Switch: DES-3528:admin#show ssh authmode Command: show ssh authmode The SSH Authentication Method: Password : Enabled Public Key : Enabled Host-based : Enabled...
  • Page 318 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide The SSH Server Configuration Max Session Connection Timeout : 120 Authfail Attempts Tcp Port Number : 22 Rekey Timeout : Never DES-3528:admin# config ssh user Purpose Used to configure the SSH user. Syntax config ssh user <username 15>...
  • Page 319 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide --------------- --------- -------------------------------- --------------- newuser1 Password Total Entries : 1 DES-3528:admin# NOTE: To configure the SSH user, the administrator must create a user account on the Switch. For information concerning configuring a user account, please see the section of this manual entitled Basic Switch Commands and then the command, create account.
  • Page 320 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show ssh algorithm Description This command will display the current SSH algorithm setting status. Parameters None. Restrictions None. Usage Example: To display SSH algorithms currently set on the Switch: DES-3528:admin# show ssh algorithm Command: show ssh algorithm Encryption Algorithm...
  • Page 321: Secure Sockets Layer (Ssl) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (SSL) C ECURE OCKETS AYER OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: Key Exchange: The first part of the cyphersuite string specifies the public key algorithm to be used.
  • Page 322 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable ssl encryption algorithms and key sizes to be used for an authentication session. The user may choose any combination of the following: RSA_with_RC4_128_MD5 – This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with 128-bit keys and the MD5 Hash Algorithm.
  • Page 323 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable ssl Restrictions Only Administrator-level users can issue this command. Example usage: To disable the SSL status on the Switch: DES-3528:admin# disable ssl Command: disable ssl Success. DES-3528:admin# To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only: DES-3528:admin# disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5 Command: disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5...
  • Page 324 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Cache timeout is 600 second(s). DES-3528:admin# show ssl Purpose Used to view the SSL status and the certificate file status on the Switch. Syntax show ssl Description This command is used to view the SSL status on the Switch. Parameters None.
  • Page 325 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide download ssl certificate users wish to download. keyfilename <path_filename 64> − Enter the path and the filename of the key exchange file users wish to download. path_filename − Private key file path respect to tftp server root path, and input characters max to 64 octets.
  • Page 326: D-Link Single Ip Management Commands

    ANAGEMENT OMMANDS Simply put, D-Link Single IP Management is a concept that will stack Switches together over Ethernet instead of using stacking ports or modules. Switches using D-Link Single IP Management (labeled here as SIM) must conform to the following rules: SIM is an optional feature on the Switch and can easily be enabled or disabled.
  • Page 327 Log – The Switch now supports uploading multiple MS log files to a TFTP server. NOTE: For more details regarding improvements made in SIMv1.6, please refer to the White Paper located on the D-Link website. The SIM commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 328 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To enable SIM on the Switch: DES-3528:admin# enable sim Command: enable sim Success. DES-3528:admin# disable sim Purpose Used to disable Single IP Management (SIM) on the Switch Syntax disable sim Description...
  • Page 329 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show sim group {commander_mac <macaddr>} − Entering this parameter will display information concerning the SIM group. To view a specific group, include the commander’s MAC address of the group. neighbor –...
  • Page 330 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show sim group Command: show sim group SIM Group Name : remote MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ----------------- ------------------------ ----- --------- ---------------- 00-00-00-00-00-50 DES-3528 L2 Switch 2.60.017 Total Entries: 1...
  • Page 331 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config sim_group add <candidate_id> <password> − Use this parameter to change a candidate Switch (CaS) to Parameters a member Switch (MS) of a SIM group. The CaS may be defined by its ID number and a password (if necessary).
  • Page 332 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To change the time interval of the discovery protocol: DES-3528:admin# config sim dp_interval 30 Command: config sim dp_interval 30 Success. DES-3528:admin# To change the hold time of the discovery protocol: DES-3528:admin# config sim hold_time 120 Command: config sim hold_time 120 Success.
  • Page 333 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide download sim_ms  all – Add this parameter to specify all members of the SIM group will receive the firmware or Switch configuration. Restrictions Only Administrator-level users can issue this command. Example usage: To download firmware: DES-3528:admin# download sim_ms firmware_from_tftp 10.53.13.94 des3528.had...
  • Page 334 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# upload sim_ms configuration_to_tftp 10.55.47.1 configuration.txt Command: upload sim_ms configuration_to_tftp 10.55.47.1 configuration.txt This device is uploading configuration. Please wait several minutes ... Upload Status : MAC Address Result ----------------- ---------------- 00-00-35-28-01-00 Success DES-3528:admin#...
  • Page 335: Jwac Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide JWAC C OMMANDS The Japanese Web-based Access Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable jwac disable jwac enable jwac redirect...
  • Page 336 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters show jwac authenticate_page config jwac authentication_page [japanese | english] [default | page_title <desc 128> | login_window_title element <desc 32> | user_name_title <desc 16> | password_title <desc 16> | logout_window_title <desc 32>...
  • Page 337 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable jwac redirect when it tries to access a random URL, or JWAC login page in the Switch. Parameters None. Restrictions When enabling redirect to quarantine server, a quarantine server must be configured first. Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 338 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable jwac forcible_logout Purpose Used to disable JWAC forcible logout function. Syntax disable jwac forcible_logout Description This command is used to disable JWAC forcible logout function. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 339 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable jwac quarantine_server_monitor Purpose Used to enable JWAC quarantine server monitor. Syntax enable jwac quarantine_server_monitor Description This command is for the JWAC Switch to monitor the quarantine server ensuring that the server is okay.
  • Page 340 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# config jwac redirect Purpose Used to configure redirect destination and delay time before an unauthenticated host is redirected to the Quarantine Server or the JWAC login web page. Syntax config jwac redirect {destination [quarantine_server | jwac_login_page] | delay_time <value 0-10>}(1)
  • Page 341 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config jwac Purpose Used to configure JWAC Quarantine Server URL Syntax config jwac [quarantine_server_url <string 128> | clear_quarantine_server_url] Description This command allows you to configure the URL of the Quarantine Server. If the redirect is enabled and the redirect destination is the Quarantine Server, when an HTTP request from unauthenticated host not to the Quarantine Server reaches the JWAC Switch, the Switch will handle this HTTP packet and send back a message to the host to make it access the...
  • Page 342 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To configure JWAC update server: DES-3528:admin# config jwac other_server add ipaddress 10.90.90.109/24 Command: config jwac other_server add ipaddress 10.90.90.109/24 Warning: the real added update server is 10.90.90.0/24 Success. DES-3528:admin# config jwac switch_http_port Purpose...
  • Page 343 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config jwac ports state. “infinite” indicates never to age out the authenticated host on the port idle_time − If there is no traffic during idle_time, the host will be moved back to unauthenticated state “infinite”...
  • Page 344 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create jwac user <vlanid 1-4094> − Target VLAN ID for authenticated host which uses this user account to pass authentication. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To create a JWAC user: DES-3528:admin# create jwac user twatanabe...
  • Page 345 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show jwac user Purpose Used to show JWAC users in the local DB. Syntax show jwac user Description This command displays JWAC users in the local DB. Parameters None Restrictions...
  • Page 346 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show jwac Restrictions None Example usage: To display JWAC configuration: DES-3528:admin# show jwac Command: show jwac State : Disabled Enabled Ports Virtual IP : 0.0.0.0 Switch HTTP Port : 80 (HTTP) UDP Filtering : Enabled...
  • Page 347 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show jwac auth_state ports Restrictions None. Example usage: To display a JWAC host. DES-3528:admin# show jwac auth_state ports 5 Command: show jwac auth_state ports 5 Port MAC Address State VLAN ID Assigned Aging Time/ Idle Time Priority Block Time...
  • Page 348 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config jwac authentication_page element user_name_title – Specifies the user name title of the authentication page. password_title – Specifies the password title of the authentication page. logout_window_title – The logout window title mapping of the authentication page. notification_line –...
  • Page 349 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To choose Japanese authenticate page. DES-3528:admin# config jwac authenticate_page japanese Command: config jwac authenticate_page japanese Success. DES-3528:admin# show jwac authenticate _page Purpose Used to show the element mapping of the customize authenticate page. Syntax show jwac authenticate _page Description...
  • Page 350: Link Layer Discovery Protocol (Lldp) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (LLDP) C AYER ISCOVERY ROTOCOL OMMANDS The Link Layer Discovery Protocol (LLDP) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable lldp...
  • Page 351 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable lldp advertised from the neighbor in the neighbor table. The default state for LLDP is disabled. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To enable LLDP: DES-3528:admin# enable lldp...
  • Page 352 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp Description This command is a multiplier on the msgTxInterval that is used to compute the TTL value of txTTL in an LLDPDU. TheTTL will be carried in the LLDPDU packet. The lifetime will be the minimum of 65535 and (message_tx_interval * message_tx_hold_multiplier).
  • Page 353 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: config lldp reinit_delay 5 Success. DES-3528:admin# config lldp notification _interval Purpose Used to configure the timer of the notification interval for sending notification to configured SNMP trap receiver(s). Syntax config lldp notification_interval <sec 5 –...
  • Page 354 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp ports participating ports allow LLDP traffic in only one direction or in both directions. <portlist> − Use this parameter to define ports to be configured. Parameters all –...
  • Page 355 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp ports Description An active LLDP port on the Switch always includes the mandatory data in its outbound advertisements. And there are four optional data that can be configured for an individual port or group of ports to exclude one or more of these data types from outbound LLDP advertisements.
  • Page 356 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp port Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 Organizationally port and protocol VLAN ID TLV data types from outbound LLDP advertisements.
  • Page 357 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp port Syntax config lldp ports [<portlist> | all] dot1_tlv_ protocol_identity [all | {eapol | lacp | gvrp | stp }(1)] [enable | disable] Description This TLV optional data type indicates whether the corresponding Local System's Protocol Identity instance will be transmitted on the port.
  • Page 358 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config lldp ports link aggregation, whether the port is aggregated in a aggregated link, and the aggregated port ID. The default state is disabled. power_via_mdi − This TLV optional data type indicates that the LLDP agent should transmit 'Power via MDI TLV'.
  • Page 359 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Chassis ID : 00-80-C2-11-22-00 System Name System Description : Fast Ethernet Switch System Capabilities : Repeater, Bridge LLDP Configurations LLDP Status : Disabled LLDP Forward Status : Disabled Message Tx Interval : 30 Message Tx Hold Multiplier: 4...
  • Page 360 Port ID : 1 ----------------------------------------------------------------------------- Port ID Subtype : Local Port ID : 1/1 Port Description : D-Link DES-3528 R2.60.017 Port 1 on Unit 1 Port PVID Management Address Count PPVID Entries Count VLAN Name Entries Count Protocol Identity Entries Count...
  • Page 361 Chassis ID : 00-A0-C5-33-33-33 Port ID Subtype : Local Port ID : 1/1 Port Description : D-Link DES-3528 R2.60.017 Port 1 on Unit 1 Port ID : 2 ------------------------------------------------------------------------------- Remote Entities Count : 1 Entity 1 Chassis ID Subtype : MAC Address...
  • Page 362 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show lldp statistics ports Purpose Used to display the ports LLDP statistics information. Syntax show lldp statistics ports{<portlist>} Description This command displays per-port LLDP statistics. Parameters <portlist> – Use this parameter to define ports to be configured. When portlist is not specified, information for all ports will be displayed.
  • Page 363: Q-In-Q Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide -Q C OMMANDS The Q-in-Q commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable qinq disable qinq show qinq show qinq inner_tpid config qinq ports...
  • Page 364 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable qinq Description This command disables the Q-in-Q mode. All dynamically learned L2 address will be cleared. All dynamically registered VLAN entries will be cleared. GVRP will be disabled. If you need to run GVRP on the Switch, you shall enable GVRP manually.
  • Page 365 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide configure qinq ports Purpose Used to configure Q-in-Q port. Syntax config qinq ports [<portlist> | all] {role [uni | nni] | missdrop [enable | disable] | outer_tpid <hex 0x1-0xffff>| use_inner_priority [enable | disable] | add_inner_tag [<hex 0x1-0xffff>...
  • Page 366 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Port ID: --------------------------------------------------------- Role: Miss Drop: Disabled Outer Tpid: 0x8100 Use Inner Priority: Disabled Add Inner Tag: Disabled Port ID: --------------------------------------------------------- Role: Miss Drop: Disabled Outer Tpid: 0x8100 Use Inner Priority: Disabled Add Inner Tag:...
  • Page 367 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create vlan_translation ports replace − The action indicates to replace the C-VLAN tag with the SP VLAN cvid − C-VLAN ID to match. svid − SP-VLAN ID. priority − The priority of the s-tag. Restrictions Only Administrator and Operator-level users can issue this command.
  • Page 368 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Total Entries: 5 DES-3528:admin#...
  • Page 369: Rspan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide RSPAN C OMMANDS The Remote Switched Port Analyzer (RSPAN) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable rspan disable rspan...
  • Page 370 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# disable rspan Command: disable rspan Success. DES-3528:admin# create rspan vlan Purpose Used to create an RSPAN VLAN. Syntax create rspan vlan [vlan_name <vlan_name> | vlan_id <value 1-4094>] Description This command is used to create the RSPAN VLAN.
  • Page 371 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config rspan vlan membership is specified, the RSPAN VLAN tag will be removed. The redirect function will only work when RSPAN is enabled. Multiple RSPAN VLANs can be configured with redirect settings at the same time.
  • Page 372 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide : 2-5 : 2-5 Total RSPAN VLAN:1 DES-3528:admin#...
  • Page 373: Static Mac-Based Vlan Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide MAC-B VLAN C TATIC ASED OMMANDS The Static MAC-Based VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create mac_based_vlan mac_address...
  • Page 374 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# delete mac_based_vlan mac_address 00-00-00-00-00-01 vlan default Command: delete mac_based_vlan mac mac_address 00-00-00-00-00-01 vlan default Success. DES-3528:admin# show mac_based_vlan Purpose Used to show the static or dynamic MAC-based VLAN entry. Syntax show mac_based_vlan {mac_address <macaddr>...
  • Page 375: Simple Red Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide RED C IMPLE OMMANDS The Simple RED commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable sred disable sred config sred [<portlist>...
  • Page 376 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# disable sred Command: disable sred Success. DES-3528:admin# config sred Purpose Used to config the simple RED paremeter. Syntax config sred [<portlist> | all] [<class_id 0-7> | all] { threshold {low <value 0-100> | high<value 0-100>}(1) | drop_rate {low<value 1-8>...
  • Page 377 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show sred Purpose Used to display the simple RED configure parameter. Syntax show sred { <portlist>{ <class_id 0-7>}} Description This command displays the current threshold(per port and per queue) parameters in use on the Switch portlist −...
  • Page 378 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config dscp trust Purpose Used to enable/disable DSCP trust state on selected portlist. Syntax config dscp trust [<portlist> | all] state [enable | disable] Description This command is used to configure port DSCP trust state. When DSCP is not trusted, 1p is trusted.
  • Page 379 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dscp map Purpose Used to configure DSCP, the mapping of DSCP to priority, and the packet’s initial color,and DSCP to DSCP. Syntax config dscp map {[<portlist> | all]} [dscp_priority <dscp_list> to <priority 0-7> | dscp_dscp <dscp_list>...
  • Page 380 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DSCP to Color mapping Port 1 DSCP 0 – 7 is mapped to Green DSCP 8 – 15, 17 is mapped to Yellow DSCP 16, 18 – 63 is mapped to Red DES-3528:admin# config 802.1p map...
  • Page 381 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green Green...
  • Page 382: Mac-Based Access Control Commands List

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide MAC- BASED CCESS ONTROL OMMANDS The MAC-based Access Control Commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable mac_based_access_control disable mac_based_access_control...
  • Page 383 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To enable MAC-based AC function: DES-3528:admin# enable mac_based_access_control Command: enable mac_based_access_control Success. DES-3528:admin# disable mac_based_access_control Purpose Used to disable MAC-based AC. Syntax disable mac_based_access_control Description This command will disable the MAC-based AC function. Parameters None.
  • Page 384 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config mac_based_access_control method local Command: config mac_based_access_control method local Success. DES-3528:admin# config mac_based_access_control guest_vlan ports Purpose Use to configure the MAC-based AC guest VLAN membership. Syntax Config mac_based_access_control guest_vlan ports <portlist> Description This command is used to put the specified port in guest VLAN mode.
  • Page 385 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config mac_based_access_control ports Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure port state: DES-3528:admin# config mac_based_access_control ports 1–8 state enable Command: config mac_based_access_control ports 1–8 state enable Success.
  • Page 386 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create mac_based_access_control Syntax create mac_based_access_control [guest_vlan <vlan_name 32> | guest_vlanid <vlanid 1–4094>] Description This command is used to create the guest VLAN. Parameters guest_vlan – If the MAC address has failed the authentication, the port will be assigned to this vlan.
  • Page 387 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# clear mac_based_access_control auth_state ports all Command: clear mac_based_access_control auth_state ports all Success. DES-3528:admin# create mac_based_access_control_local mac Purpose Used to create the local database entry. Syntax create mac_based_access_control_local mac <macaddr> [vlan <vlan_name 32> | vlanid <vlanid 1–4094>] Description This command is used to create a database entry.
  • Page 388 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete mac_based_access_control_local Description This command is used to delete a database entry. Parameters mac – Deletes the database entry by this MAC address. vlan – Deletes the database entry by this VLAN name. vlanid –...
  • Page 389 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show mac_based_access_control_local vlanid <vlanid 1–4094>]]} Description This command is used to display mac_based_access_control local database. Parameters mac – Displays the MAC-based Access Control local database by this MAC address vlan –...
  • Page 390 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To display mac based access control auth state: DES-3528:admin#show mac_based_access_control auth_state ports Command: show mac_based_access_control auth_state ports 1-7 P: Port-based Pri: Priority Port MAC Address Original State VID Pri Aging Time/ RX VID...
  • Page 391 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To configure the MAC-based AC maximum number of users: DES-3528:admin# config mac_based_access_control max_users 126 Command: config mac_based_access_control max_users 126 Success. DES-3528:admin#...
  • Page 392: Web-Based Access Control Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide BASED CCESS ONTROL OMMANDS The Web-based Access Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable wac disable wac config wac authorization...
  • Page 393 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable wac Purpose Used to disable the WAC function. Syntax disable wac Description This command will disable the WAC function. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To disable the WAC function: DES-3528:admin# disable wac...
  • Page 394 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# config wac default_redirpath Purpose Used to config wac default redirect path. Syntax config wac default_redirpath <string 128> Description If the default redirect path is configured, the user will be redirected to the default redirect path after successful authentication.
  • Page 395 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config wac ports idle_time – A time period after which an authenticated host will be moved to an un- authenticated state if there is no traffic during that period. “infinite” indicates the host will not be removed from the authenticated state due to the idle of traffic.
  • Page 396 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config wac user 123 vlan default Command: config wac user 123 vlan default Success. DES-3528:admin# config wac virtual_ip Purpose Used to configure the WAC virtual ipaddress used to accept authentication requests from an unauthenticated host.
  • Page 397 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show wac auth_state end indicats the port-based mode authentication. NOTE : In port-based mode, the VLAN ID field is displayed in the same way as host- based mode Parameters ports –...
  • Page 398 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To delete a WAC account: DES-3528:admin# delete wac user 123 Command: delete wac user 123 Success. DES-3528:admin# show wac Purpose Used to display WAC authentication settings. Syntax show wac Description This command allows you to display the Web authentication settings.
  • Page 399 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Enabled 1440 Infinite Enabled 1440 Infinite Enabled 1440 Infinite DES-3528:admin# show wac user Purpose Used to display the user account for Web authentication. Syntax show wac user Description This command allows you to show Web authentication account.
  • Page 400: Power Over Ethernet (Poe) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide E) C OWER OVER THERNET OMMANDS The Power over Ethernet (PoE) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config poe system...
  • Page 401 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528P:admin# config poe system power_limit 250 power_disconnect_method deny_low_priority_port Command: config poe system power_limit 250 power_disconnect_method deny_low_priority_port Success. DES-3528P:admin# config poe ports Purpose Used to configure the PoE port settings. Syntax config poe ports [all | <portlist>] { state [enable | disable] [time_range <range_name 32>...
  • Page 402 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To configure PoE ports: DES-3528P:admin# config poe ports 1-4 state enable priority critical power_limit class_1 Command: config poe ports 1-4 state enable priority critical power_limit class_1 Power limit has been set to 4200 (Class 1 PD upper power limit 3.84W + power loss on cable)
  • Page 403 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Class Power(mW) Voltage(decivolt) Current(mA) Status =============================================================================== Enabled Critical 4200 (Class 1) : Interim state during line detection Enabled Critical 4200 (Class 1) : Interim state during line detection Enabled Critical 4200 (Class 1)
  • Page 404: Pppoe Circuit Id Insertion Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ID I IRCUIT NSERTION OMMANDS The PPPoE Circuit ID Insertion commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config pppoe circuit_id_insertion state...
  • Page 405: Dns Relay Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DNS R ELAY OMMANDS The DNS Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dnsr [[primary | secondary] nameserver <ipaddr>...
  • Page 406 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# disable dnsr Purpose Used to disable DNS relay function. Syntax disable dnsr {[cache | static]} Description This command is used to disable DNS relay function. Parameters cache - The buffer cache which records the name of the server and IP address of the corresponding.
  • Page 407: Policy Route Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OLICY OUTE OMMANDS The Policy Route commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create policy_route name <policyroute_name 32>...
  • Page 408 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To config a policy route: DES-3528:admin# config policy_route name engineer acl profile_id 1 access_id 1 nexthop 20.1.1.100 state enable Command: config policy_route name engineer acl profile_id 1 access_id 1 nexthop 20.1.1.100 state enable Success.
  • Page 409: Bpdu Attack Protection Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide BPDU A TTACK ROTECTION OMMANDS The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. NOTE: The BPDU Attack Protection commands and STP Function commands are mutually exclusivly.
  • Page 410 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config bpdu_protection recovery_timer Purpose Used to configure the BPDU Attack Protection recovery timer. Syntax config bpdu_protection recovery_timer [<sec 60-1000000> | infinite] Description When a port enters under_attack state, it can be disabled or blocked based on the configuration.
  • Page 411 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable bpdu_protection Purpose Used to enable BPDU Attack Protection globally. Syntax enable bpdu_protection Description This command allows the BPDU Attack Protection to be globally enabled on the Switch. Parameters None.
  • Page 412 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To display the BPDU Attack Protection status for ports 1-4 of the Switch: DES-3528:admin# show bpdu_protection ports 1-4 Command: show bpdu_protection ports 1-4 Port State Mode Status ------ ----------- ---------- ---------- Enabled Drop...
  • Page 413: Ethernet Oam Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OAM C THERNET OMMANDS The Ethernet OAM commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ethernet_oam ports [<portlist>...
  • Page 414 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config ethernet_oam ports state then disconnect the established OAM link. Parameters portlist – Specifies a range of ports to be configured. Use all to specify all ports. state – Specifies to enable or disable the OAM function. The default state is disable. Restrictions Only Administrator and Operator-level users can issue this command.
  • Page 415 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config ethernet_oam ports link_monitor error_frame number of coding symbol errors. When the number of frame errors is equal to or greater than the specified threshold in a period and the event notification state is enabled, it generates an error frame event to notify the remote OAM peer.
  • Page 416 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config ethernet_oam ports link_monitor error_frame_period Purpose Used to configure the Ethernet OAM link monitoring error frame period. Syntax config ethernet_oam ports [<portlist> | all ] link_monitor error_frame_period{ threshold <range 0 - 4294967295> | window <number 148810-100000000> | notify_state [enable | disable]}(1) Description This command is used to configure ports Ethernet OAM link monitoring error frame period.
  • Page 417 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config ethernet_oam ports remote_loopback Purpose Used to start or stop Ethernet OAM remote loop-back . Syntax config ethernet_oam ports [<portlist> | all ] remote_loopback [start | stop] Description This command is used to start or stop the remote peer to enter the Ethernet OAM remote loop-back mode.
  • Page 418 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show ethernet_oam ports status Description This command is used to show primary controls and status information for Ethernet OAM on specified ports. The information includes: (1) OAM administration status: enabled or disabled (2) OAM operation status.
  • Page 419 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Variable Request : Not Supported PDU Revision Operation Status : Disable Loopback Status : No Loopback There is no peer entry information exist. Port 2 Local Client ----------------------------------------------------------- : Disabled Mode : Active...
  • Page 420 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show ethernet_oam ports statistics Parameters portlist – Specifies a range of ports to display. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To show port 1 OAM statistics: DES-3528:admin# show ethernet_oam ports 1 statistics Command: show ethernet_oam ports 1 statistics Port 1...
  • Page 421 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Errored Frame Seconds Event Dying Gasp Critical Event Remote Event Statistics Error Symbol Event Error Frame Event Error Frame Period Event Errored Frame Seconds Event Dying Gasp Critical Event CTRL+C ESC q Quit SPACE n...
  • Page 422: Dhcp Server Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DHCP S ERVER OMMANDS The DHCP Server commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create dhcp excluded_address begin_address <ipaddr>...
  • Page 423 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide create dhcp excluded_address server should not assign to clients. This command can be used multiple times in order to define multiple groups of excluded addresses. Parameters <ipaddr> – Specifies the beginning and end of the IP address range. Restrictions Only Administrator and Operator and Power-User-level users can issue this command.
  • Page 424 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide 10.10.10.1 10.10.10.10 Total Entries: 1 DES-3528:admin# create dhcp pool Purpose Used to create a DHCP pool. Syntax create dhcp pool <pool name 12> Description A DHCP pool is created by specifying a name. After you create a DHCP pool, use other DHCP pool configuration commands to configure parameters for the pool.
  • Page 425 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp pool network_addr If the request packet is not through relay, then the server will match the IP address of the IPIF that receives the request packet against the network of each DHCP pool. Parameters <pool name 12>...
  • Page 426 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config dhcp pool netbios_name_server Purpose Used to specify the NetBIOS WINS server that is available to a Microsoft DHCP client. Up to three IP addresses can be specified in one command line. Syntax config dhcp pool netbios_name_server <pool_name 12>...
  • Page 427 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp pool default_router Description After a DHCP client has booted, the client begins sending packets to its default router. The IP address of the default router should be on the same subnet as the client. If the default_router is not specified, the default router information will not be provided to the client.
  • Page 428 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp pool boot_file Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To configure the boot file: DES-3528:admin# config dhcp pool boot_file accounting boot.had Command: config dhcp pool boot_file accounting boot.had Success.
  • Page 429 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcp pool ping_timeout Purpose Used to specify the amount of time the DHCP server must wait before timing out a ping packet. Syntax config dhcp ping_timeout <millisecond 10-2000> Description By default, the DHCP server waits 100 milliseconds before timing out a ping packet.
  • Page 430 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete dhcp pool manual_binding Purpose Used to specify the distinct identification of the client in dotted-hexadecimal notation or hardware address to delete. Syntax delete dhcp pool manual_binding <pool_name 12> [<ipaddr> | all] Description An address binding is a mapping between the IP address and MAC address of a client.
  • Page 431 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# show dhcp binding accounting Command: show dhcp binding accounting Pool Name IP Address Hardware Address Type Status Lifetime ----------- -------------- ---------------- ------- -------- ----------- accounting 192.168.0.1 00-08-C8-08-13-88 Ethernet Manual 86400 Total Entries: 1 DES-3528:admin#...
  • Page 432 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# enable dhcp_server Purpose Used to enable the DHCP server function. Syntax enable dhcp_server Description If the DHCP relay is enabled, the DHCP server cannot be enabled. The opposite is also true. Parameters None.
  • Page 433 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear dhcp conflict_ip Purpose Used to clear an entry or all entries from the conflict IP database. Syntax clear dhcp conflict_ip [<ipaddr> | all] Description This command clears an entry or all entries from the conflict IP database. Parameters <ipaddr>...
  • Page 434: Cable Diagnostics Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ABLE IAGNOSTICS OMMANDS The Cable Diagnostics commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports [<portlist>...
  • Page 435: Connectivity Fault Management Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ONNECTIVITY AULT ANAGEMENT OMMANDS The Connectivity Fault Management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create cfm md <string 22>...
  • Page 436 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command Parameters config cfm mp_ltr_all [enable | disable] show cfm mp_ltr_all Each command is listed, in detail, in the following sections. create cfm md Purpose Used to create a maintenance domain. Syntax create cfm md <string 22>...
  • Page 437 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# create cfm ma Purpose Used to create a maintenance association. Syntax create cfm ma <string 22> md <string 22> Description Different MAs in a MD must have different MA Names. Different MAs in different MDs may have the same MA Name.
  • Page 438 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config cfm ma 1min – One minute. 10min – Ten minutes. mepid_list – Specify the MEPIDs contained in the maintenance association. The range of MEPID is 1-8191. add – Add MEPID(s). delete –...
  • Page 439 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config cfm mep alarm_time <centiseconds 250 -1000> | alarm_reset_time <centiseconds 250-1000>}(1) Description An MEP may generate 5 types of Fault Alarms, as shown below by their priorities from high to low: Cross-connect CCM Received: priority 5 Error CCM Received: priority 4...
  • Page 440 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete cfm mep 22>] Description This command is used to delete a created MEP. Parameters mepname – Specifies the MEP name. It’s unique among all MEPs configured on the device. mepid –...
  • Page 441 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable cfm Purpose Used to enable CFM globally. Syntax enable cfm Description This command is used to enable CFM globally. Parameters None. Restrictions Only Administrator and Operator and Power-User-level users can issue this command. Example usage: To enable cfm: DES-3528:admin# enable cfm...
  • Page 442 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# show cfm ports Purpose Used to show cfm state of specified ports. Syntax show cfm ports <portlist> Description CFM state of speicified ports will be shown. Parameters ports –...
  • Page 443 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide SenderID TLV: None MA Name ---- ---------- DES-3528:admin# Example usage: To display cfm mepname: DES-3528:admin# show cfm mepname mep1 Command: show cfm mepname mep1 Name : mep1 MEPID Port Direction : inward...
  • Page 444 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: DES-3528:admin# show cfm remote_mep mepname mep1 remote_mepid 2 Command: show cfm remote_mep mepname mep1 remote_mepid 2 Remote MEPID MAC Address : 00-22-B0-7A-24-B9 Status : OK : No Port Status Defect : Up Interface Status Defect...
  • Page 445 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: show cfm port 1 MAC Address: 10:10:90:08:80:12 MD Name MA Name MEPID Level Direction VID ----------- ----------- ----- ----- --------- ---- op_domain inward cust_domain cust1 inward serv_domain serv2 DES-3528:admin# show cfm mipccm Purpose...
  • Page 446 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Success. DES-3528:admin# show cfm linktrace Purpose Used to show linktrace responses. Syntax show cfm linktrace [mepname <string 32> | mepid <int 1-8191> md <string 22> ma <string 22>] {trans_id <uint>} Description The maximum linktrace responses a device can hold is 64.
  • Page 447 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: To delete a cfm linktrace: DES-3528:admin# delete cfm linktrace mepname mep1 Command: delete cfm linktrace mepname mep1 Success. DES-3528:admin# config cfm ccm_fwd Purpose Used to configure CCM PDUs forwarding mode. Syntax config cfm ccm_fwd [software | hardware] Description...
  • Page 448 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide cfm loopback Restrictions None. Example usage: To configure cfm loop-back: DES-3528:admin# cfm loopback 00-01-02-03-04-05 mepname mep1 Command: cfm loopback 00-01-02-03-04-05 mepname mep1 Request timed out. Request timed out. Reply from MPID 52: bytes=xxx time=xxxms Request timed out.
  • Page 449 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide clear cfm pkt_cnt Purpose Used to clear the CFM packet RX/TX counters. Syntax clear cfm pkt_cnt {[ports <portlist> {[rx | tx]} | [rx | tx] | ccm]} Description This command clears CFM packet counters.
  • Page 450 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To show the CFM mp linktrace on the Switch: DES-3528:admin# show cfm mp_ltr_all Command: show cfm mp_ltr_all All MPs reply LTRs: Enabled DES-3528:admin#...
  • Page 451: Command History List

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMMAND ISTORY The Switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config command_history <value 1-40> show command_history Each command is listed, in detail, in the following sections.
  • Page 452 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config stp instance_id config stp mst_config_id config stp mst_ports config stp ports config stp priority config stp version DES-3528:admin# config command_history Purpose Used to configure the command history. Syntax config command_history <value 1-40>...
  • Page 453: Arp Spoofing Prevention Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ARP S POOFING REVENTION OMMANDS The ARP Spoofing Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config arp_spoofing_prevention [add gateway_ip <ipaddr>...
  • Page 454 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide To display the ARP spoofing prevention entries: DES-3528:admin#show arp_spoofing_prevention Command: show arp_spoofing_prevention ARP Spoofing Prevention Table Gateway IP Address Gateway MAC Address Port ------------------ ------------------- -------------------- 192.168.69.1 00-11-11-11-11-11 1-28 Total Entries: 1 DES-3528:admin#...
  • Page 455: Auto-Configuration Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ONFIGURATION OMMANDS The Auto-Configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable autoconfig disable autoconfig show autoconfig Each command is listed, in detail, in the following sections.
  • Page 456 DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528 Fast Ethernet Switch Command Line Interface Firmware: Build 2.60.017 Copyright(C) 2010 D-Link Corporation. All rights reserved. DES-3528:admin# DES-3528:admin# DES-3528:admin# download configuration 10.41.44.44 c:\cfg\setting.txt Command: download configuration 10.41.44.44 c:\cfg\setting.txt Connecting to server....
  • Page 457 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show autoconfig Description This command is used to display if the auto-configuration is enabled or disabled. Parameters None. Restrictions None. Example usage: To show autoconfig status: DES-3528:admin# show autoconfig Command: show autoconfig Autoconfig State : Disabled DES-3528:admin#...
  • Page 458: Compound Authentication Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMPOUND UTHENTICATION OMMANDS The Compound Authentication commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create authentication guest_vlan [vlan <vlan_name 32>...
  • Page 459 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete authentication guest_vlan Description All ports which enable guest VLAN will move to original VLAN after deleting guest VLAN. Parameters vlan - Specifies the guest VLAN by VLAN name. <vlan_name 32>...
  • Page 460 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config authentication ports auth_mode - (Optional) Specifies the authentication mode used. port_based - If one of the attached hosts passes the authentication, all hosts on the same port will be granted to access network. If the user fails to authorize, this port will keep trying the next authentication host_based - Every user can be authenticated individually.
  • Page 461 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Guest VLAN VID Guest VLAN Member Ports Guest VLAN VID Guest VLAN Member Ports : 1,8 Total Entries: DES-3528:admin# show authentication ports Purpose This command is used to display authentication setting on port(s). Syntax show authentication ports {<portlist>} Description...
  • Page 462 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide disable authorization Purpose This command is used to disable authorization. Syntax disable authorization attributes Description This command is used to disable authorization. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: This example sets authorization global state disabled: DES-3528:admin#...
  • Page 463 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show authentication Purpose This command is used to display authentication global configuration. Syntax show authentication Description This command is used to display authentication global configuration. Parameters None. Restrictions None.
  • Page 464: Debug Software Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide EBUG OFTWARE OMMANDS The Debug Software commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters debug error_log [dump | clear | upload_toTFTP [<ipaddr>...
  • Page 465 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ->8018C814 ->8028FF44 ->8028352C ->801D703C ->8013B8A4 ->802AE754 ->802A5E0C To clear the error log: DES-3528:admin# debug error_log clear Command: debug error_log clear Success. DES-3528:admin# To upload the error log to TFTP server: DES-3528:admin# debug error_log upload_toTFTP 10.0.0.90 debug-log.txt Command: debug error_log upload_toTFTP 10.0.0.90 debug-log.txt...
  • Page 466 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# debug buffer clear Command: debug buffer clear Success. DES-3528:admin# To upload the messages stored in debug buffer to TFTP server: DES-3528:admin# debug buffer upload_toTFTP 10.0.0.90 debugcontent.txt Command: debug buffer upload_toTFTP 10.0.0.90 debugcontent.txt Connecting to server....
  • Page 467 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Command: debug config all disable Success. DES-3528:admin# debug config error_reboot Purpose This command is used to set if the Switch needs to be rebooted when a fatal error occurs. Syntax debug config error_reboot [enable | disable] Description...
  • Page 468 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide MSTP : Enable : Disable : Enable SNMP : Disable IGMP : Enable DES-3528:admin# debug config state Purpose Use the command to set the state of the debug. Syntax debug config state [enable | disable] Description...
  • Page 469: Dhcpv6 Client Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DHCP LIENT OMMANDS The DHCPv6 Client commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif <ipif_name 12>...
  • Page 470 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# debug dhcpv6_client state enable Command: debug dhcpv6_client state enable Success. DES-3528:admin# debug dhcpv6_client output Purpose Used to set debug message to output to buffer or console. Syntax debug dhcpv6_client output [buffer | console] Description Used to set debug message to output to buffer or console.
  • Page 471: Dhcpv6 Relay Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DHCP ELAY OMMANDS The DHCPv6 Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcpv6_relay hop_count <value 1-32>...
  • Page 472 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcpv6_relay long. <ipv6addr> - The DHCPv6 server IP address. Restrictions Only Administrator, Operator and Power User-level users can issue this command. Example usage: To add a DHCPv6 server to the relay table: DES-3528:admin# config dhcpv6_relay add ipif System 2001:DB8:1234:0:218:FEFF:FEFB:CC0E...
  • Page 473 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config dhcpv6_relay ipif Description The command is used to configure the DHCPv6 relay state of one specific interface or all interfaces. Parameters ipif - Specifies the name of the IP interface. <ipif_name 12>...
  • Page 474 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DHCPv6 Hops Count Limit --------------------------------------------------------------- IP Interface : System DHCPv6 Relay Status : Enabled Server Address DES-3528:admin# debug dhcpv6_relay state Purpose Use this command to enable or disable DHCPv6 relay Debug function. Syntax debug dhcpv6_relay state [enable | disable] Description...
  • Page 475 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide debug dhcpv6_relay packet receiving - (Optional) Set packet receiving debug flag. sending - (Optional) Set packet sending debug flag. state - Specifies if the designated flags function will be enabled or disabled. enable - Enable the designated flags.
  • Page 476: D-Link Unidirectional Link Detection (Duld) Commands

    DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (DULD) NIDIRECTIONAL ETECTION OMMANDS The D-Link Unidirectional Link Detection (DULD) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config duld ports [<portlist>...
  • Page 477 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show duld Restrictions None. Example usage: To show ports 1-4 unidirectional link detection information: DES-3528:admin# config duld ports 1,2,4 state enable Commands: config duld ports 1,2,4 state enable Success DES-3528:admin# show duld ports 1-4 Commands: show duld ports 1-4...
  • Page 478: Ethernet Ring Protection Switching (Erps) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (ERPS) C THERNET ROTECTION WITCHING OMMANDS The Ethernet Ring Protection Switching (ERPS) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable erps...
  • Page 479 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# enable erps Command: enable erps Success. DES-3528:admin# disable erps Purpose This command is used to disable the global ERPS function on a Switch. Syntax disable erps Description This command is used to disable the global ERPS function on a Switch.
  • Page 480 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# delete erps raps_vlan 4094 Command: delete erps raps_vlan 4094 Success. DES-3528:admin# config erps raps_vlan ring mel Purpose This command is used to configure the ring MEL for an R-APS VLAN. Syntax config erps raps_vlan <vlanid>...
  • Page 481 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config erps raps_vlan 4094 ring_port west 5 Command: config erps raps_vlan 4094 ring_port west 5 Success. DES-3528:admin# config erps raps_vlan rpl_port Purpose This command is used to configure the RPL port. Syntax config erps raps_vlan <vlanid>...
  • Page 482 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config erps raps_vlan 4094 rpl_owner enable Command: config erps raps_vlan 4094 rpl_owner enable Success. DES-3528:admin# config erps raps_vlan protected_vlan Purpose This command is used to configure the VLANs that are protected by the ERPS function. Syntax config erps raps_vlan <vlanid>...
  • Page 483 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config erps raps_vlan timer the original unblocked RPL port and start to send R-APS PDU with an RB flag after the link recovery is confirmed within this period of time. Parameters raps_vlan - Specifies the R-APS VLAN used.
  • Page 484 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show erps The RPL owner administrative state could be configured to "Enabled" or "Disabled". But the RPL owner operational state may be different from the RPL owner administrative state, for example, the RPL owner conflict occurs.
  • Page 485 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config erps trap Syntax config erps trap [enable | disable] Description This command is used to configure trap state of ERPS events. Parameters trap - Specifies to enable or disable the ERPS trap state. enable - Enter enable to enable the trap state.
  • Page 486 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide config erps raps_vlan sub_ring Parameters raps_vlan - Specifies the R-APS VLAN. <vlanid> - Enter the VLAN ID used here. add - Connect the sub-ring to another ring. delete - Disconnect the sub-ring from the connected ring. sub_ring - Specifies that the sub-ring is being configured.
  • Page 487: Ipv6 Neighbor Discover Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide EIGHBOR ISCOVER OMMANDS The IPv6 Neighbor Discover commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create ipv6 neighbor_cache ipif <ipif_name 12>...
  • Page 488 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Example usage: Delete a neighbor cache.entry on IP interface “System”: DES-3528:admin# delete ipv6 neighbor_cache ipif System 3ffc::1 Command: delete ipv6 neighbor_cache ipif System 3FFC::1 Success. DES-3528:admin# show ipv6 neighbor_cache Purpose Display the neighbor cache entry for the specified interface.
  • Page 489 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show ipv6 neighbor_cache ipif System all hardware Command: show ipv6 neighbor_cache ipif System all hardware Neighbor Link Layer Address Interface State -------------------------------------- ------------------ ------------ ----- 2001::3001 00-50-BA-1A-FF-55 System FE80::250:BAFF:FE1A:FF55 00-50-BA-1A-FF-55 System...
  • Page 490 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin#show ipv6 nd ipif System Command: show ipv6 nd ipif System Interface Name : System NS Retransmit Time : 0 (ms) DES-3528:admin#...
  • Page 491: Ipv6 Route Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OUTE OMMANDS The IPv6 Route commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create ipv6route [default | <ipv6networkaddr>] [<ipif_name 12> <ipv6addr> | <ipv6addr>] {<metric 1-65535>} {primary | backup} delete ipv6route [[default | <ipv6networkaddr>] [<ipif_name 12>...
  • Page 492 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete ipv6route <ipv6networkaddr> - Specifies the IPv6 networkaddress. <ipif_name 12> - Enter the IP interface name used here. <ipv6addr> - Specify the next hop address for the default route. <ipv6addr>...
  • Page 493: Layer 2 Protocol Tunneling (L2Pt) Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide (L2PT) C AYER ROTOCOL UNNELING OMMANDS The Layer 2 Protocol Tunneling (L2PT) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config l2protocol_tunnel...
  • Page 494 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide DES-3528:admin# config l2protocol_tunnel ports 1-4 type uni tunneled_protocol stp Command: config l2protocol_tunnel ports 1-4 type uni tunneled_protocol stp Success. DES-3528:admin# show l2protocol_tunnel Purpose This command is used to show Layer 2 protocol tunneling information. Syntax show l2protocol_tunnel {[uni | nni]} Description...
  • Page 495 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide enable l2protocol_tunnel Purpose Used to enable the Layer 2 protocol tunneling function. Syntax enable l2protocol_tunnel Description Used to enable the Layer 2 protocol tunneling function. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command.
  • Page 496: Local Route Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OCAL OUTE OMMANDS The Local Route commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable local_route [ipv4 | ipv6] disable local_route [ipv4 | ipv6]...
  • Page 497 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show local_route Purpose This command is used to display the local route configuration. Syntax show local_route Description The show local route command displays the local route configuration. Parameters None.
  • Page 498: Mstp Debug Enhancement Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide MSTP DEBUG ENHANCEMENT OMMANDS The MSTP debug enhancement commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters debug stp config ports [<portlist>...
  • Page 499 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide debug stp show information Description This command used to display STP detailed information, such as the hardware tables, the STP state machine, etc. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To show STP debug information: DES-3528:admin#...
  • Page 500 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 501 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide debug stp clear counter Purpose This command used to clear the STP counters. Syntax debug stp clear counter {ports [<portlist> | all]} Description This command used to clear the STP counters. Parameters ports - Specifies the port range.
  • Page 502: Ping Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide OMMANDS The Ping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters ping <ipaddr> {times <value 1-255> | timeout <sec 1-99>} ping6 <ipv6addr>...
  • Page 503 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ping6 <value 1-255> - Enter the number of individual ICMP echo messages to be sent here. This value must be between 1 and 255. size - (Optional) Size of the test packet. <value 1-6000>...
  • Page 504: Show Technical Support Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide ECHNICAL UPPORT OMMANDS The Show Technical Support commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show tech_support upload tech_support_toTFTP <ipaddr>...
  • Page 505 DES-3528:admin# show tech_support Command: show tech_support #------------------------------------------------------------------------------- DES-3528 Fast Ethernet Switch Technical Support Information Firmware: Build 2.60.017 Copyright(C) 2010 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------- ******************** Basic System Information ******************** [SYS 2000-1-4 22:36:24] Boot Time : 4 Jan 2000 16:50:46...
  • Page 506 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide upload tech_support_toTFTP Purpose The upload tech_support_toTFTP command is used to upload the information of technique’s support to TFTP server. Syntax upload tech_support_toTFTP <ipaddr> <path_filename 64> Description The information is project dependent and includes the following information. •...
  • Page 507: Trace Route Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide RACE OUTE OMMANDS The Trace Route commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters traceroute <ipaddr> {ttl <value 1-60> | port <value 30000-64900> | timeout <sec 1- 65535>...
  • Page 508 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide traceroute6 ttl - (Optional) The time to live value of the trace route request. This is the maximum number of routers that a trace route packet can pass. The traceroute command will cross while seeking the network path between two devices.
  • Page 509: Vlan Counter Commands

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide VLAN C OUNTER OMMANDS The VLAN Counter commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan_counter [vlan <vlan_name>...
  • Page 510 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide delete vlan_counter Parameters all – Specifies to delete all VLAN statistic control entries. vlan_name – Specifies the VLAN name. vidlist – Specifies a list of VLANs by VLAN ID. ports <portlist>...
  • Page 511 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide show vlan_counter Restrictions None. Example usage: To display the statistic control entries: DES-3528:admin# show vlan_counter vlanid 1-2 Command: show vlan_counter vlanid 1-2 VLAN ID Ports Packet Type Counter Type ------- -------------- -----------...
  • Page 512: Appendixa - Password Recovery Procedure

    This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
  • Page 513: Appendixb - Technical Specifications

    xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide B - T PPENDIX ECHNICAL PECIFICATIONS General Standards IEEE 802.3 NWay auto-negotiation IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1D Spanning Tree IEEE 802.1w Rapid Spanning Tree IEEE 802.1s Multiple Spanning Tree IEEE 802.1Q VLAN...
  • Page 514 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Physical and Environmental Internal Power Supply DES-3528 Input: 100~240V, AC/0.5A(Max), 50~60Hz Output: 12V, 1.2A (Max) Internal universal power supply DES-3552 Input: 100~240V, AC/0.8A(Max), 50~60Hz Output: 12V, 2.1A (Max) Internal universal power supply DES-3528P Input: 100~240V, AC/6.3A(Max), 50~60Hz...
  • Page 515 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Dimensions DES-3528/DES-3528DC - 441(W) x 210(D) x 44(H) mm DES-3552/DES-3528P - 441(W) x 310(D) x 44(H) mm DES-3552P - 441(W) x 370(D) x 44(H) mm Weight DES-3528 – 2.51kg (5.53lbs) DES-3528DC –...
  • Page 516: Appendix C - Mitigating Arp Spoofing Attacks Via Packet Content Acl

    ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce ARP protocol, ARP spoofing attacks, and the counter measure brought by D-Link's Switches to counter the ARP spoofing attack. How Address Resolution Protocol works In the process of ARP, PC A will, firstly, issue an ARP request to query PC B’s MAC address.
  • Page 517 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide When the Switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the Switch will learn PC A’s MAC and the associated port into its Forwarding Table. Forwarding Table Port1 00-20-5C-01-11-11 In addition, when the Switch receives the broadcast ARP request, it will flood the frame to all ports except the source...
  • Page 518 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Protocol Protocol Operation Sender Sender Target Target type type address address protocol protocol H/W address H/W address length length address address ARP reply 00-20-5C-01-11-11 10.10.10.1 00-20-5C-01-22-22 10.10.10.2 Table – 3 (ARP Payload) When PC B replies the query, the “Destination Address”...
  • Page 519 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Figure – 4 In the Gratuitous ARP packet, the “Sender protocol address” and “Target protocol address” are filled with the same source IP address. The “Sender H/W Address” and “Target H/W address” are filled with the same source MAC address.
  • Page 520 Figure – 5 Prevent ARP spoofing via packet content ACL Concerning the common DoS attack today caused by the ARP spoofing, D-Link managed Switch can effectively mitigate it via its unique Packet Content ACL. For that reason the basic ACL can only filter ARP packets based on packet type, VLAN ID, Source and Destination MAC information, there is a need for further inspections of ARP packets.
  • Page 521 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide Configuration: The configuration logic is listed below: 1. Only when the ARP matches the Source MAC address in Ethernet, the Sender MAC address and Sender IP address in the ARP protocol can pass through the Switch. (In this example, it is the gateway’s ARP.) 2.
  • Page 522 xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide...

Table of Contents