D-Link DES-1228/ME Reference Manual

D-Link DES-1228/ME Reference Manual

Layer 2 managed ethernet switch
Hide thumbs Also See for DES-1228/ME:

Advertisement

DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DES-1228/ME

  • Page 1 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide...
  • Page 2 © 2012 D-Link Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
  • Page 3: Table Of Contents

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ABLE OF ONTENTS INTRODUCTION ................................1 USING THE CONSOLE CLI .............................. 3 COMMAND SYNTAX ................................. 7 BASIC SWITCH COMMANDS ............................10 MODIFY BANNER AND PROMPT COMMANDS ......................34 SWITCH PORT COMMANDS ............................37 PORT SECURITY COMMANDS .............................
  • Page 4 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ASYMMETRIC VLAN COMMANDS ..........................305 IGMP SNOOPING MULTICAST VLAN COMMANDS ....................307 LLDP COMMANDS ................................ 313 DOS PREVENTION COMMANDS ..........................334 IP-MAC-PORT BINDING COMMANDS ........................340 LOOPBACK DETECTION COMMANDS ........................347 FLOW METER COMMANDS ............................354 ARP SPOOFING PREVENTION COMMANDS ......................
  • Page 5: Introduction

    PassWord: Figure 1 - 1. Initial CLI screen There is no initial username or password. Just press the Enter key twice to display the CLI input cursor − DES-1228/ME:5#. This is the command line where all commands are input. Setting the Switch’s IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP).
  • Page 6 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Starting at the command line prompt, enter the command config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named System and the y’s represent the corresponding subnet mask.
  • Page 7: Using The Console Cli

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide SING THE ONSOLE The Switch supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 8 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide cable_diag ports clear clear arptable clear counters clear dos_prevention counters clear fdb clear flood_fdb clear igmp_snooping data_driven_group clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol...
  • Page 9 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#config account Command: config account Next possible completions: <username> DES-1228/ME:5#config account Command: config account Next possible completions: <username> DES-1228/ME:5# Figure 2 - 4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned the Next possible completions: <username>...
  • Page 10 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#show Command: show Next possible completions: 802.1p 802.1x access_profile account acct_client address_binding arp_spoofing_prevention arpentry asymmetric_vlan auth_client auth_diagnostics auth_session_statistics auth_statistics authen authen_enable authen_login authen_policy auto_fdb autoconfig bandwidth_control bpdu_protection bpdu_tunnel command command_history config cpu_access_profile...
  • Page 11: Command Syntax

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted function that changes text case.
  • Page 12 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide {braces} Purpose Encloses an optional value or set of optional arguments. Syntax reset {[config | system]} {force_agree} Description In the first part of the above syntax example, users have the option to specify config or system.
  • Page 13 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Multiple Page Display Control Keys Space Displays the next page. CTRL+c Stops the display of remaining pages when multiple pages are to be displayed. Stops the display of remaining pages when multiple pages are to be displayed.
  • Page 14: Basic Switch Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ASIC WITCH OMMANDS The Basic Switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable password encryption disable password encryption create account [admin|operator|Power User|user] <username 15>...
  • Page 15 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters show jumbo_frame clear config configuration config_id config configuration trap { save [ enable | disable ] | upload [ enable | disable ] | download [ enable | disable ] }(1)
  • Page 16 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#disable password encryption Command: disable password encryption Success. DES-1228/ME:5#...
  • Page 17 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create account Purpose Used to create user accounts. Syntax create [admin|operator|Power User|user] <username 15> Description This command is used to create user accounts that consist of a username of 1 to 15 characters and a password of 0 to 15 characters.
  • Page 18 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config account Purpose Used to configure user accounts. Syntax config account <username> {encrypt [plain_text|sha_1] <password>} Description This command is used to configure a user account that has been created using the create account command. When the password information is not specified in the command, the system will prompt the user to input the password interactively.
  • Page 19 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show account Purpose Used to display user accounts. Syntax show account Description This command is used to display all user accounts created on the Switch. Up to eight user accounts can exist at one time.
  • Page 20 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show session Purpose Used to display a list of currently logged-in users. Syntax show session Description This command is used to display a list of all the users that are logged-in at the time the command is issued.
  • Page 21 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show switch Purpose Used to display general information about the Switch. Syntax show switch Description This command is used to display information about the Switch. Parameters None. Restrictions None. Example usage: To display the Switch’s information:...
  • Page 22 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show serial_port Purpose Used to display the current serial port settings. Syntax show serial_port Description This command is used to display the current serial port settings. Parameters None. Restrictions None Example usage:...
  • Page 23 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config serial_port Purpose Used to configure the serial port. Syntax config serial_port { baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes | 15_minutes] } (1) Description This command is used to configure the serial port’s baud rate and auto logout...
  • Page 24 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable clipaging Purpose Used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging Description This command is used when issuing a command which causes the console screen to rapidly scroll through several pages.
  • Page 25 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable telnet Purpose Used to enable communication with and management of the Switch using the Telnet protocol. Syntax enable telnet {<tcp_port_number 1-65535>} Description This command is used to enable the Telnet protocol on the Switch.
  • Page 26 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide telnet Purpose Used to Telnet another device on the network. Syntax telnet <ipaddr> {tcp_port <value 0-65535>} Description This command is used to connect to another device’s management through Telnet. <ipaddr> − Enter the IP address of the device to connect through, Parameters using Telnet.
  • Page 27 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To send ICMP echo message to “10.51.17.1” for 4 times: DES-1228/ME:5#ping 10.51.17.1 times 4 Command: ping 10.51.17.1 times 4 Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Ping Statistics for 10.51.17.1...
  • Page 28 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable HTTP: DES-1228/ME:5#disable web Command: disable web Success. DES-1228/ME:5# save Purpose Used to save changes in the Switch’s configuration to non-volatile RAM. Syntax save {[config {config_id <value 1-2>} | log | all]}...
  • Page 29 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To save the Switch’s the current configuration and log to non-volatile RAM: DES-1228/ME:5#save all Command: save all Saving all configurations and log information to NV-RAM..Done. Success. DES-1228/ME:5# reboot Purpose Used to restart the Switch.
  • Page 30 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide reset Purpose Used to reset the Switch to the factory default settings. Syntax reset {[config | system]} {force_agree} Description This command is used to restore the Switch’s configuration to the default settings assigned from the factory.
  • Page 31 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To restore all of the Switch’s parameters to their default values and have the Switch save and reboot: DES-1228/ME:5#reset system Command: reset system Are you sure you want to proceed with system reset, save and reboot?(y/n) y Load Factory Default Configuration...
  • Page 32 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show config Purpose Display the content of the current configuration, or the configuration file in flash. Syntax show config [ current_config | config_in_nvram <config_id 1-2> ] {[include | exclude | begin] <filter_string 80> {<filter_string 80>...
  • Page 33 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the current spanning tree configurations: D E S- 1 2 2 8 /M E : 5 # sh o w c o n fi g c u rr e n t _ co n f i g i nc l u d e " s t p "...
  • Page 34 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show terminal_line Purpose Used to show the number of rows which can be displayed on the screen. Syntax show terminal_line Description This command is used to show the number of rows which can be displayed on the screen.
  • Page 35 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable jumbo frame: DES-1228/ME:5#disable jumbo_frame Command: disable jumbo_frame Success. DES-1228/ME:5# show jumbo_frame Purpose Used to display the current configuration of jumbo frame. Syntax show jumbo_frame Description This command is used to display the current configuration of the jumbo frame setting.
  • Page 36 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config configuration config_id Purpose This command is used to select a configuration file as the next boot up configuration or to apply a specific configuration to the system. This command is required when multiple configuration files are supported.
  • Page 37 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config configuration trap Purpose Used to configure the trap status of configuration saving completed, configuration uploading completed and configuration downloading completed. Syntax config configuration trap { save [ enable | disable ] | upload [ enable |...
  • Page 38: Modify Banner And Prompt Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ODIFY ANNER AND ROMPT OMMANDS The Modify Banner and Prompt commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config command_ prompt [<string 32>...
  • Page 39 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config greeting _message Purpose Used to configure the login banner (greeting message). Syntax config greeting _message {default} Description Users can use this command to modify the login banner (greeting message). Parameters default – If the user enters default to the modify banner command, then the banner will be reset to the original factory banner.
  • Page 40 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch. Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch.
  • Page 41: Switch Port Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide WITCH OMMANDS The Switch Port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config ports [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | state [enable | disable] | learning [enable | disable] | [description <desc 32>...
  • Page 42 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config ports Purpose Used to configure the Switch’s Ethernet port settings. Syntax [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | state [enable | disable] | learning [enable | disable] | [description <desc 32>...
  • Page 43 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show ports Purpose Used to display the current configuration of a range of ports. Syntax show ports {<portlist>} {[description | err_disabled]} Description This command is used to display the current configurations of a range of ports. No parameters will show all ports.
  • Page 44 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the configuration of all ports on a standalone switch, with description: DES-1228/ME:5#show ports description Command: show ports description Port State/ Settings Connection Address Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning ----- --------...
  • Page 45: Port Security Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ECURITY OMMANDS The Port Security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config port_security ports [<auth_portlist> | all] {admin_state [enable | disable] | max_learning_addr <max_lock_no 0-64>...
  • Page 46 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config port_security ports Purpose Used to configure port security settings. Syntax config port_security ports [<auth_portlist> | all ] {admin_state [enable | disable] | max_learning_addr <max_lock_no 0-64> | lock_address_mode [ DeleteOnTimeout | DeleteOnReset | Permanent]} (1) Description This command is used to configure the port security feature.
  • Page 47 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete port_security_entry Purpose Used to delete a port security entry by MAC address, port number and VLAN ID. Syntax delete port_security_entry vlan_name <vlan_name 32> mac_address <macaddr> port <auth_port> Description This command is used to delete a single, previously learned port security entry by port, VLAN name, and MAC address.
  • Page 48 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide clear port_security_entry Purpose Used to clear MAC address entries learned from a specified port for the port security function. Syntax clear port_security_entry ports <auth_portlist> Description This command is used to clear MAC address entries which were learned by the Switch by a specified port.
  • Page 49 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <auth_portlist>} Description This command is used to display port security information of the Switch’s ports. The information displayed includes port security, admin state, maximum number of learning address and lock mode.
  • Page 50 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable port_security trap_log Purpose Used to enable the trap log for port security. Syntax enable port_security trap_log Description This command, along with the disable port_security trap_log, will enable the sending of log messages to the Switch’s log and SNMP agent when the port security of the Switch has been triggered.
  • Page 51: Network Management (Snmp) Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide (SNMP) C ETWORK ANAGEMENT OMMANDS The Switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. Users can specify which version of the SNMP users want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
  • Page 52 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters create snmp user <SNMP_name 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8-16 > | sha <auth_password 8-20>] priv [none | des <priv_password 8-16>] | by_key auth [md5 <auth_key 32-32> | sha <auth_key 40-40>] priv [none | des <priv_key 32-32>]]}...
  • Page 53 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters disable rmon config snmp coldstart_traps [enable | disable] config snmp warmstart_traps [enable | disable] Each command is listed, in detail, in the following sections: create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command.
  • Page 54 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create snmp user form, that will be used to encrypt the contents of messages the host sends to the agent. none – Adding this parameter will add no encryption. Restrictions Only Administrator level, Operator level or Power User level users can issue this command.
  • Page 55 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table. Syntax show snmp user Description This command is used to display information about each SNMP username in the SNMP group username table.
  • Page 56 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access. Syntax create snmp view <view_name 32> <oid> view_type [included | excluded]...
  • Page 57 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete snmp view Purpose Used to remove an SNMP view entry previously created on the Switch. Syntax delete snmp view <view_name 32> [all | <oid>] Description This command is used to remove an SNMP view previously created on the Switch.
  • Page 58 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display SNMP view configuration: DES-1228/ME:5#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree View Type -------------------- ------------------------- ---------- dlinkview 1.3.6 Included restricted 1.3.6.1.2.1.1 Included restricted 1.3.6.1.2.1.11...
  • Page 59 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create the SNMP community string “dlinkcomm”: DES-1228/ME:5#create snmp community dlinkcomm view dlinkview read_write Command: create snmp community dlinkcomm view dlinkview read_write Success. DES-1228/ME:5# delete snmp community Purpose Used to remove a specific SNMP community string from the Switch.
  • Page 60 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the currently entered SNMP community strings: DES-1228/ME:5#show snmp community Command: show snmp community SNMP Community Table Community Name View Name Access Right --------------------- --------------------- ------------ dlinkcomm dlinkview read_write...
  • Page 61 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show snmp engineID Purpose Used to display the identification of the SNMP engine on the Switch. Syntax show snmp engineID Description This command is used to display the identification of the SNMP engine on the Switch.
  • Page 62 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views. Syntax create snmp group <groupname 32> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] {read_view <view_name 32>...
  • Page 63 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create an SNMP group named “sg1:” DES-1228/ME:5#create snmp group dlink v3 noauth_nopriv read_view dlinkview write_view dlinkview notify_view dlinkview Command: create snmp group dlink noauth_nopriv read_view dlinkview write_view dlinkview notify_view dlinkview Success.
  • Page 64 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the currently configured SNMP groups on the Switch: DES-1228/ME:5#show snmp groups Command: show snmp groups Vacm Access Table Settings Group Name : dlink ReadView Name : dlinkview WriteView Name...
  • Page 65 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp [host <ipaddr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>...
  • Page 66 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax delete snmp [host <ipaddr>] Description This command is used to delete a recipient of SNMP traps generated by the Switch’s SNMP agent.
  • Page 67 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create trusted_host Purpose Used to create a trusted host. Syntax create trusted_host [<ipaddr> | network <network_address>] Description This command is used to create a trusted host. The Switch allows users to specify up to ten IP addresses that are allowed to manage the Switch via in-band SNMP or Telnet-based management software.
  • Page 68 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To delete a trusted host with an IP address 10.48.74.121: DES-1228/ME:5#delete trusted_host ipaddr 10.81.17.1 Command: delete trusted_host ipaddr 10.81.17.1 Success. DES-1228/ME:5# To delete a trusted host network with a network address 10.62.0.0/16: DES-1228/ME:5#delete trusted_host network 10.81.0.0/16...
  • Page 69 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example Usage: To display the list of trust hosts: DES-1228/ME:5#show trusted_host Command: show trusted_host Management Stations IP Address/Netmask ----------------------- 10.53.13.94/32 Total Entries: 1 DES-1228/ME:5# enable snmp traps Purpose Used to enable SNMP trap support.
  • Page 70 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable snmp linkchange_traps Purpose Used to configure the sending of linkchange traps. . Syntax enable snmp linkchange_traps Description This command is used to enable/disable snmp link change traps. Parameters None. Restrictions Only Administrator level or Operator level users can issue this command.
  • Page 71 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable snmp traps Purpose Used to disable SNMP trap support on the switch. Syntax disable snmp traps Description This command is used to disable SNMP trap support on the Switch. Parameters None.
  • Page 72 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To disable SNMP linkchange trap support on the Switch:: DES-1228/ME:5# disable snmp linkchange_traps Command: disable snmp linkchange_traps Success. DES-1228/ME:5# config snmp linkchange_traps ports Purpose Used to configure the sending of linkchange traps and per port control for sending of change traps.
  • Page 73 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#show snmp traps Command: show snmp traps SNMP Traps : Enabled Authenticate Traps : Enabled Linkchange Traps : Enabled DES-1228/ME:5#...
  • Page 74 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch. Syntax config snmp system_contact {<sw_contact>} Description This command is used to enter the name and/or other information to identify a contact person who is responsible for the Switch.
  • Page 75 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config snmp system_name Purpose Used to configure the name for the Switch. Syntax config snmp system_name {<sw_name>} Description This command is used to configure the name of the Switch. <sw_name> − A maximum of 128 characters is allowed. A NULL Parameters string is accepted if no name is desired.
  • Page 76 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example Usage: To disable RMON: DES-1228/ME:5#disable rmon Command: disable rmon Success. DES-1228/ME:5# config snmp coldstart_traps Purpose Used to configure the trap for coldstart event. Syntax config snmp coldstart_traps [enable | disable] Description...
  • Page 77: Switch Utility Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide WITCH TILITY OMMANDS The Switch Utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters download [ firmware_fromTFTP [<ipaddr> | <ipv6addr>] <path_filename 64>...
  • Page 78 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide download Purpose Used to download and install new firmware or a Switch configuration file from a TFTP server. Syntax [firmware_fromTFTP [<ipaddr> | <ipv6addr>] <path_filename 64> image_id <value 1-2> | cfg_fromTFTP [<ipaddr> | <ipv6addr>] <path_filename 64>...
  • Page 79 The download configuration command will initiate the loading of the various settings in the order listed in the configuration file. When the file has been successfully loaded the message “End of configuration file for DES-1228/ME” appears followed by the command prompt.
  • Page 80 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5# config firmware image_id 1 boot_up Command: config firmware image_id 1 boot_up Success. DES-1228/ME:5#...
  • Page 81 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show firmware information Purpose Used to display the firmware section information. Syntax show firmware information Description This command is used to display the firmware section information. Parameters None. Restrictions None Example usage:...
  • Page 82 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide upload Purpose Used to upload the current switch settings or the switch history log to a TFTP. Syntax upload [cfg_toTFTP [<ipaddr> | <ipv6addr>] <path_filename 64> {config_id <value 1-2>} {[include | exclude | begin] <filter_string 80>...
  • Page 83 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide D E S- 1 2 2 8 /M E : 5 # up l o a d c fg _ t o T FT P 1 0 .9 0 . 9 0 . 1 c o n f i g_ s t p . tx t i n c l ud e " s tp "...
  • Page 84 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable autoconfig Purpose Used to activate the auto configuration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 85 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME Metro Ethernet Switch Command Line Interface Firmware: Build 2.01.001 Copyright(C) 2012 D-Link Corporation. All rights reserved. UserName: PassWord: DES-1228/ME:5#download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Connecting to server....Done.
  • Page 86 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable autoconfig Purpose Use this to deactivate auto configuration from DHCP. Syntax disable autoconfig Description This command is used to instruct the Switch not to accept auto configuration instruction from the DHCP server. This does not change the IP settings of the Switch.
  • Page 87 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show autoconfig Purpose Used to display the current autoconfig status of the Switch. Syntax show autoconfig Description This command is used to list the current status of the auto configuration function. Parameters None.
  • Page 88 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ping Purpose Used to test the connectivity between network devices. Syntax ping <ipaddr> {times <value 0-255>} {size <value 1-60000>} {timeout <sec 1-99>} Description The command is used to send Internet Control Message Protocol (ICMP) echo messages to a remote IP address.
  • Page 89 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ping6 Restrictions None. Example usage: To ping the IPv6 address “FE80::254:85FF:FE32:1804” six times: DES-1228/ME:5#ping6 FE80::254:85FF:FE32:1804%System times 6 Command: ping6 FE80::254:85FF:FE32:1804%System times 6 Reply from FE80::254:85FF:FE32:1804, bytes=100 time=10 ms Reply from FE80::254:85FF:FE32:1804, bytes=100 time<10 ms Reply from FE80::254:85FF:FE32:1804, bytes=100 time<10 ms...
  • Page 90 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide traceroute Purpose Used to trace the routed path between the Switch and a destination endstation. Syntax traceroute <ipaddr> {ttl <value 1-60>} {port <value 30000-64900>} {timeout <sec 1-65535>} {probe <value 1-9>} Description This command is used to trace the routed path between the Switch and a destination endstation.
  • Page 91 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config terminal line Purpose Used to configure the number of rows which can be displayed at a screen. Syntax config terminal_line [default | <value 20-80>] Description This command is used to configure the number of rows which can be displayed on a screen.
  • Page 92: Network Monitoring Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ETWORK ONITORING OMMANDS The Network Monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters show packet ports <portlist> show error ports <portlist>...
  • Page 93 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Each command is listed, in detail, in the following sections: show packet ports Purpose Used to display stats about packets sent and received by the Switch. Syntax show packet ports <portlist> Description This command is used to display statistics about packets sent and received by ports specified in the <portlist>.
  • Page 94 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show error ports Purpose Used to display the error statistics for a range of ports. Syntax show error ports <portlist> Description This command is used to display all of the packet error statistics collected and logged by the Switch for a given port list.
  • Page 95 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show utilization Purpose Used to display real-time utilization statistics. Syntax show utilization [ cpu | dram | flash | ports {<portlist>}] Description This command is used to display the real-time utilization statistics for the Switch.
  • Page 96 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To display the current Flash memory utilization: DES-1228/ME:5#show utilization flash Command: show utilization flash FLASH Memory Utilization : Total FLASH : 16,384 Used FLASH : 7,371 Utilization : 44% CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh...
  • Page 97 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports <portlist>} Description This command is used to clear the counters used by the Switch to compile statistics. <portlist> − Specifies a port or range of ports to be displayed.
  • Page 98 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show log Purpose Used to display the switch history log. Syntax show log {index <value_list X-Y>} Description This command is used to display the contents of the Switch’s history log. index <value_list X-Y> − This command will display the history log,...
  • Page 99 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable syslog Purpose Used to disable the system log to be sent to a remote host. Syntax disable syslog Description This command is used to disable the system log to be sent to a remote host.
  • Page 100 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1-4> {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number> | ipaddress [<ipaddr>] | state [enable | disable] }...
  • Page 101 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create syslog host kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon...
  • Page 102 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create a syslog host: DES-1228/ME:5#create syslog host 1 ipaddress 10.68.88.1 severity all facility local0 Command: create syslog host ipaddress 10.68.88.1 severity facility local0 Success. DES-1228/ME:5# config syslog Purpose Used to configure the syslog protocol to send system log data to a remote host.
  • Page 103 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon...
  • Page 104 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure a syslog host: DES-1228/ME:5#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-1228/ME:5# To configure a syslog host for all hosts:...
  • Page 105 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show syslog host Purpose Used to display the syslog hosts currently configured on the Switch. Syntax show syslog host {<index 1-4>} Description This command is used to display the syslog hosts that are currently configured on the Switch.
  • Page 106 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config log_save_timing Purpose Used to configure the method of saving logs to the Switch’s Flash memory. Syntax config log_save_timing [time_interval <min 1-65535> | on_demand | log_trigger] Description This command is used to configure the method used in saving logs to the Switch’s Flash memory.
  • Page 107 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable command logging Purpose Used to enable command logging. Syntax enable command logging Description This command is used to enable the command logging function. Note: When the switch is under booting procedure, all configuration commands should not be logged.
  • Page 108 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show the command logging configuration status: DES-1228/ME:5# show command logging Command: show command logging Command Logging State : Disabled DES-1228/ME:5#...
  • Page 109: Multiple Spanning Tree Protocol (Mstp) Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1D STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 110 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide The Multiple Spanning Tree Protocol commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: enable stp disable stp config stp version [mstp | rstp | stp] config stp {maxage <value 6-40>...
  • Page 111 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description This command is used to globally enable the Spanning Tree Protocol on the Switch. Parameters None. Restrictions Only Administrator level, Operator level or Power User level users can issue this command.
  • Page 112 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config stp version Purpose Used to globally set the version of STP on the Switch. Syntax config stp version [mstp | rstp | stp] Description This command is used to choose the version of the spanning tree to be implemented on the Switch.
  • Page 113 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config stp Purpose Used to set up STP, RSTP, and MSTP on the Switch. Syntax config stp {maxage <value 6-40> | maxhops <value 6-40> | hellotime <value 1-2> | forwarddelay <value 4-30> | txholdcount <value 1-10> | fbpdu [enable | disable] } (1) Description This command is used to set up the Spanning Tree Protocol (STP) for the entire Switch.
  • Page 114 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config stp ports Purpose Used to set up STP on the port level. Syntax config stp ports <portlist> {externalCost [ auto | <value 1-200000000> ] | hellotime <value 1-2> |migrate [ yes | no ] |edge [ true | false | auto ] | restricted_role [ true | false ] |restricted_tcn [ true |...
  • Page 115 To configure STP with path cost auto, hellotime 2 seconds, migration enable, and state enable for ports 1 to 2: DES-1228/ME:5#config stp ports 1-2 externalCost auto hellotime 2 migrate yes state enable Command: config stp ports 1-2 externalCost auto hellotime 2 migrate yes state enable...
  • Page 116 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config stp instance_id Purpose Used to add or delete an STP instance ID. Syntax config stp instance_id <value 1-8> [add_vlan | remove_vlan] <vidlist> Description This command is used to map VIDs (VLAN IDs) to previously configured STP instances on the Switch by creating an instance_id.
  • Page 117 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete stp instance_id Purpose Used to delete a STP instance ID from the Switch. Syntax delete stp instance_id <value 1-8> Description This command is used to delete a previously configured STP instance ID from the Switch.
  • Page 118 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config stp mst_config_id Purpose Used to update the MSTP configuration identification. Syntax config stp mst_config_id {revision_level <int 0-65535> | name <string>} Description This command is used to uniquely identify the MSTP configuration currently configured on the Switch.
  • Page 119 To designate ports 1 through 5, with instance id 2, to have an auto internalCost and a priority of 16: DES-1228/ME:5#config stp mst_ports 1-5 instance_id 2 internalCost auto priority 16 Command : config stp mst_ports 1-5 instance_id 2 internalCost auto priority 16 Success.
  • Page 120 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show stp Purpose Used to display the Switch’s current STP configuration. Syntax show stp Description This command is used to display the Switch’s current STP configuration. Parameters None Restrictions None. Example usage:...
  • Page 121 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Status 2 : STP enabled for RSTP DES-1228/ME:5#show stp Command: show stp STP Bridge Global Settings -------------------------- STP Status : Enabled STP Version : RSTP Max Age : 20 Hello Time Forward Delay...
  • Page 122 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show stp ports Purpose Used to display the Switch’s current STP ports configuration. Syntax show stp ports {<portlist>} {instance <value 0-8>} Description This command is used to display the STP port settings for a specified port or group of ports.
  • Page 123 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show stp instance Purpose Used to display the Switch’s STP instance configuration Syntax show stp instance {<value 0-8>} Description This command is used to display the Switch’s current STP Instance Settings and the STP Instance Operational Status.
  • Page 124 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show stp mst_config_id Purpose Used to display the MSTP configuration identification. Syntax show stp mst_config_id Description This command is used to display the Switch’s current MSTP configuration identification. Parameters None. Restrictions None.
  • Page 125: Forwarding Database Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ORWARDING ATABASE OMMANDS The Layer 2 Forwarding Database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create fdb <vlan_name 32> <macaddr> port <port>...
  • Page 126 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create fdb Purpose Used to create a static entry in the unicast MAC address forwarding table (database). Syntax create fdb <vlan_name 32> <macaddr> port <port> Description This command is used to make an entry in the Switch’s unicast MAC address forwarding database.
  • Page 127 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config multicast_fdb Purpose Used to configure the Switch’s multicast MAC address forwarding database. Syntax config multicast_fdb <vlan_name 32> <macaddr> [add | delete] <portlist> Description This command is used to configure the multicast MAC address forwarding table.
  • Page 128 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To set the fdb aging time: DES-1228/ME:5#config fdb aging_time 300 Command: config fdb aging_time 300 Success. DES-1228/ME:5# delete fdb Purpose Used to delete an entry to the Switch’s forwarding database.
  • Page 129 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan <vlan_name 32> | port <port> | all] Description This command is used to clear dynamically learned entries to the Switch’s forwarding database.
  • Page 130 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the multicast MAC address table: DES-1228/ME:5#show multicast_fdb vlan default Command: show multicast_fdb vlan default VLAN Name : default MAC Address : 01-00-5E-00-00-00 Egress Ports : 1-5 Mode : Static...
  • Page 131 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display unicast MAC address table: DES-1228/ME:5#show fdb Command: show fdb Unicast MAC Address Ageing Time = 300 VLAN Name MAC Address Port Type ---- ------------------------ ----------------- ---- -------- default...
  • Page 132 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show multicast port_filtering_mode Purpose Used to show the multicast packet filtering mode for ports. Syntax show multicast port_filtering_mode Description This command is used to display the current multicast packet filtering mode for ports on the Switch.
  • Page 133: Packet Storm Control Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ACKET TORM ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 134 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config traffic control Used to configure broadcast/multicast/unicast packet storm control. The software mechanism is Purpose provided to monitor the traffic rate in addition to the hardware storm control mechanism previously provided. [<portlist> | all] {broadcast [enable | disable] | multicast [enable | disable] | unicast [enable | Syntax disable] | action [drop | shutdown] | threshold <value 64-1000000>...
  • Page 135 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure traffic control and enable broadcast storm control for ports 1 to 12: DES-1228/ME:5#config traffic control 1-12 broadcast enable action shutdown threshold 64 countdown 10 time_interval 10 Command: config...
  • Page 136 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config traffic control_trap Purpose Used to configure traffic control trap. Syntax config traffic control_trap [none | storm_occurred | storm_cleared | both] Description This command is used to configure whether storm control notification will be generated or not when traffic storm events are detected by the SW traffic storm control mechanism.
  • Page 137: Qos Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide OMMANDS The Switch supports 802.1p priority queuing. The Switch has four priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
  • Page 138 1024000>] | tx_rate [no_limit <value 64-1024000>]} (1) Description This command is used to configure bandwidth on a port by-port basis. Note: DES-1228/ME Ver. B1, the granularity is 62.5 kbps on all ranges. <portlist> − Specifies a port or range of ports to be configured.
  • Page 139 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show bandwidth_control Purpose Used to display the bandwidth control table. Syntax show bandwidth_control {<portlist>} Description This command is used to display the current bandwidth control configuration on the Switch, on a port-by-port basis.
  • Page 140 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config scheduling Purpose Used to configure the traffic scheduling mechanism for each COS queue. Syntax config scheduling <class_id 0-3> [strict | weight <value 1-55>] Description The Switch contains four hardware priority queues. Incoming packets must be mapped to one of these four queues.
  • Page 141 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show scheduling Purpose Used to display the currently configured traffic scheduling on the Switch. Syntax show scheduling Description This command is used to display the current traffic scheduling mechanisms in use on the Switch.
  • Page 142 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure the traffic scheduling mechanism for each QoS queue: DES-1228/ME:5#config scheduling_mechanism strict Command: config scheduling_mechanism strict Success. DES-1228/ME:5# show scheduling_mechanism Purpose Used to display the current traffic scheduling mechanisms in use on the Switch.
  • Page 143 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the Switch. Syntax config 802.1p user_priority <priority 0-7> <class_id 0-3>...
  • Page 144 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show 802.1p user_priority Purpose Used to display the current mapping between an incoming packet’s 802.1p priority value and one of the Switch’s four hardware priority queues. Syntax show 802.1p user_priority Description This command is used to display the current mapping of an incoming packet’s 802.1p priority value to one of the Switch’s four hardware priority queues.
  • Page 145 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the Switch. If an untagged packet is received by the Switch, the priority configured with this command will be written to the packet’s priority field.
  • Page 146 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show 802.1p default_priority Purpose Used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p default_priority {<portlist>} Description This command is used to display the currently configured 802.1p...
  • Page 147 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config cos mapping Purpose Used to configure the CoS to port mapping method to be used on the switch. Syntax config cos mapping ports [<portlist> | all] [none | { ethernet [802.1p]...
  • Page 148 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show cos mapping Purpose Used to show CoS mapping. Syntax show cos mapping {port <portlist> } Description This command is used to display information regarding CoS mapping enabled ports and their mapping method.
  • Page 149 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config cos tos value Purpose Used to map the ToS value in the IP header of incoming packets to one of the four hardware queues available on the Switch. Syntax config cos tos value <value 0-7> [class <class_id 0-3>] Description This command is used to configure ToS to traffic class mapping.
  • Page 150 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dscp_mapping Purpose Used to map the DSCP value in the IP header of incoming packet to one of the four hardware queues available on the Switch. Syntax config dscp_mapping dscp_value <value 0-63> [class <class_id 0- 3>]...
  • Page 151 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show dscp_mapping Purpose Used to show DSCP value map to traffic class. Syntax show dscp_mapping {dscp_value <value 0-63>} Description This command displays the information for DSCP mapping to traffic class. <value 0-63> − The DSCP value of the incoming packet. If no...
  • Page 152: Port Mirroring Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide IRRORING OMMANDS The Port Mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config mirror port <port> { [add | delete] source ports <portlist> [rx | tx | both] }...
  • Page 153 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To add the mirroring ports: DES-1228/ME:5#config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-1228/ME:5# Example usage: To delete the mirroring ports:...
  • Page 154 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable mirroring configurations: DES-1228/ME:5#disable mirror Command: disable mirror Success. DES-1228/ME:5# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
  • Page 155: Vlan Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create vlan <vlan_name 32> tag <vlanid 1-4094> {advertisement} delete vlan <vlan_name 32>...
  • Page 156 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create a VLAN v1, tag 2: DES-1228/ME:5#create vlan v1 tag 2 Command: create vlan v1 tag 2 Success. DES-1228/ME:5# delete vlan Purpose Used to delete a previously configured VLAN on the Switch.
  • Page 157 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To add 4 through 8 as tagged ports to the VLAN v1: DES-1228/ME:5#config vlan v1 add tagged 4-8 Command: config vlan v1 add tagged 4-8 Success. DES-1228/ME:5# To delete ports from a VLAN:...
  • Page 158 Example usage: To add an additional port to a previously configured VLAN on the Switch: DES-1228/ME:5#config vlan vlanid 5 add tagged 7 advertisement enable name Command: config vlan vlanid 5 add tagged 7 advertisement enable name RG Success.
  • Page 159 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable pvid auto_assign Purpose Used to enable auto-assignment of PVID. Syntax enable pvid auto_assign Description This command is used to enable auto-assignment of PVID. Parameters None. Restrictions Only Administrator level, Operator level or Power User level users can issue this command.
  • Page 160 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the PVID auto-assignment state: DES-1228/ME:5#show pvid auto_assign Command: show pvid auto_assign PVID Auto-assignment: Enabled DES-1228/ME:5# config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1-4094>} (1)
  • Page 161 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable gvrp Purpose Used to enable GVRP on the Switch. Syntax enable gvrp Description This command, along with disable gvrp below, is used to enable and disable GVRP on the Switch, without changing the GVRP configuration on the Switch.
  • Page 162 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show vlan Purpose Used to display the current VLAN configuration on the Switch Syntax show vlan [<vlan_name 32> | vlanid <vidlist> | ports <portlist> ] Description This command is used to display summary information about each...
  • Page 163 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show gvrp Purpose Used to display the GVRP status for a port list on the Switch. Syntax show gvrp {<portlist>} Description This command is used to display the GVRP status for a port list on the Switch.
  • Page 164: Link Aggregation Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide GGREGATION OMMANDS The Link Aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create link_aggregation group_id <value> {type [lacp | static]} delete link_aggregation group_id <value>...
  • Page 165 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value> Description This command is used to delete a previously configured link aggregation group. <value> − Specifies the group ID. The Switch allows up to 6 link Parameters aggregation groups to be configured.
  • Page 166 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source | mac_destination | mac_source_dest | ip_source | ip_destination | ip_source_dest] Description This command is used to configure the part of the packet examined by the Switch when selecting the egress port for transmitting load-sharing data.
  • Page 167 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display Link Aggregation configuration: DES-1228/ME:5#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source Group ID Type: : TRUNK Master Port Member Port Active Port Status : Disabled Flooding Port : 0...
  • Page 168 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show lacp_ports Purpose Used to display current LACP port mode settings. Syntax show lacp_ports {<portlist>} Description This command is used to display the LACP mode settings as they are currently configured. <portlist> − Specifies a port or range of ports to be configured.
  • Page 169: Basic Ip Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide IP C ASIC OMMANDS The Basic IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config ipif [System] [{ ipaddress <network_address> | vlan <vlan_name 32>...
  • Page 170 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config ipif Purpose Used to configure the System IP interface. Syntax [System] [ { ipaddress <network_address> | vlan <vlan_name 32> | state [enable | disable] }(1) | bootp | dhcp | dhcp_option12 [ hostname <hostname 63> | clear_hostname | state [ enable | disable ] ] | ipv6 ipv6address <ipv6networkaddr>...
  • Page 171 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure an interface’sIPv4 network address: DES-1228/ME:5# config ipif System ipaddress 10.48.74.122/8 Command: config ipif System ipaddress 10.48.74.122/8 Success. DES-1228/ME:5# To configure an interface’s DHCP option12 host name: DES-1228/ME:5# config ipif System dhcp_option12 hostname switch1234 Command: config ipif System dhcp_option12 hostname switch1234 Success.
  • Page 172 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display IP interface settings: DES-1228/ME:5# show ipif Command: show ipif IP Interface Settings Interface Name : System IP Address : 192.168.1.66 (MANUAL) Subnet Mask : 255.0.0.0 VLAN Name : default Admin.
  • Page 173 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable autoconfig Purpose Used to activate the auto configuration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 174 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable auto configuration on the Switch: DES-1228/ME:5#disable autoconfig Command: disable autoconfig Success. DES-1228/ME:5# delete ipif Purpose Used to delete an interface. Syntax delete ipif [System] [ipv6address <ipv6networkaddr>] Description This command is used to delete an interface. The System interface cannot be deleted.
  • Page 175 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#enable ipif_ipv6_link_local_auto System Command: enable ipif_ipv6_link_local_auto System Success. DES-1228/ME:5# disable ipif_ipv6_link_local_auto Purpose Used to disable the auto configuration of a link local address when no IPv6 address is configured. Syntax disable ipif_ipv6_link_local_auto [System]...
  • Page 176: Igmp Snooping Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config igmp_snooping [vlan_name <vlan_name 32> | vlanid <vidlist> | all] {state [enable | disable] |...
  • Page 177 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config igmp_snooping Purpose Used to configure IGMP snooping on the Switch. Syntax config igmp_snooping [vlan_name <vlan_name 32> | vlanid <vidlist> | all] {state [enable | disable] | fast_leave [enable | disable]} (1) Description This command is used to configure IGMP snooping on the Switch.
  • Page 178 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config igmp_snooping querier Purpose Used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members and the permitted packet loss that guarantees IGMP snooping.
  • Page 179 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure IGMP snooping querier: DES-1228/ME:5#config igmp_snooping querier vlan_name default query_interval 125 state enable Command: config igmp_snooping querier vlan_name default query_interval 125 state enable Success. DES-1228/ME:5# config router_ports Purpose Used to configure ports as router ports.
  • Page 180 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config router_ports_forbidden Purpose Used to configure ports as forbidden router ports. Syntax config router_ports_forbidden [<vlan_name 32> | vlanid <vidlist>] [add | delete] <portlist> This command is used to allow designation of a range of ports as Description being not connected to multicast-enabled routers.
  • Page 181 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only} Description This command is used to disable IGMP snooping on the Switch. If forward_mcrouter_only is specified, the Switch will learn the router port based on identification of the unicast routing protocol packet, the multicast routing protocol packet, and the IGMP control packet.
  • Page 182 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show IGMP snooping: DES-1228/ME:5#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast Router Only : Disabled Data Driven Learning Max Entries : 56 VLAN Name : default...
  • Page 183 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the router ports. DES-1228/ME:5#show router_ports Command: show router_ports VLAN Name : default Static Router Port : Dynamic Router Port: Forbidden Router Port: Total Entries: 1 DES-1228/ME:5# show igmp_snooping group...
  • Page 184 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config igmp_snooping data_driven_learning Purpose Used to configure the data driven learning of an IGMP snooping group. Syntax config igmp_snooping data_driven_learning [ vlan_name <vlan_name> | vlanid <vidlist> | all] { aged_out [enable | disable]} (1)
  • Page 185 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure IGMP snooping data driven learning’s maximum learned entry value: DES-1228/ME:5# config igmp_snooping data_driven_learning max_learned_entry Command: config igmp_snooping data_driven_learning max_learned_entry 1 Success. DES-1228/ME:5# clear igmp_snooping data_driven_group Purpose Used to delete the IGMP snooping group learned by data driven.
  • Page 186 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show igmp_snooping host Restrictions None. Example usage: To display IGMP snooping fast leave hosts: DES-1228/ME:5# show igmp_snooping host Command: show igmp_snooping host VLAN ID Group Port No IGMP Host -------- ----------------- --------- ------------ 225.0.1.0...
  • Page 187 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable IGMP Access Control for all ports: DES-1228/ME:5# config igmp access_authentication ports all state enable Command: config igmp access_authentication ports all state enable Success. DES-1228/ME:5# show igmp access_authentication ports Purpose Used to display the current IGMP Access Control configuration.
  • Page 188 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show all IGMP snooping forwarding entries located on the switch:: DES-1228/ME:5# show igmp_snooping forwarding Command: show igmp_snooping forwarding VLAN Name : default Source IP : 10.90.90.114 Multicast Group: 225.0.0.0...
  • Page 189: Dhcp Relay Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DHCP R ELAY OMMANDS The DHCP Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config dhcp_relay {hops <value 1-16> | time <sec 0-65535>} (1) config dhcp_relay add ipif [System] <ipaddr>...
  • Page 190 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dhcp_relay add ipif Purpose Used to add an IP destination address to the switch's DHCP/BOOTP relay table. Syntax config dhcp_relay add ipif [System] <ipaddr> Description This command is used to add an IP address as a destination to forward (relay) DHCP/BOOTP relay packets to.
  • Page 191 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the Switch. Syntax config dhcp_relay option_82 state [enable | disable] Description This command is used to configure the state of DHCP relay agent information option 82 of the Switch.
  • Page 192 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure DHCP relay option 82 check: DES-1228/ME:5#config dhcp_relay option_82 check enable Command: config dhcp_relay option_82 check enable Success. DES-1228/ME:5# config dhcp_relay option_82 policy Purpose Used to configure the re-forwarding policy of the relay agent information option 82 of the Switch.
  • Page 193 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dhcp_relay option_82 remote id Purpose Used to configure the processing of the DHCP 82 remote ID option for the DHCP relay function. Syntax config dhcp_relay option_82 remote_id [default | user_define <string 32>]...
  • Page 194 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show the DHCP relay configuration: DES-1228/ME:5#show dhcp_relay Command: show dhcp_relay DHCP/BOOTP Relay Status : Disabled DHCP/BOOTP Hops Count Limit DHCP/BOOTP Relay Time Threshold : 0 DHCP Relay Agent Information Option 82 State...
  • Page 195 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay Description This command is used to disable the DHCP/BOOTP relay function on the Switch. Parameters None.
  • Page 196: Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 802.1X C OMMANDS The Switch implements IEEE 802.1X Port-based and Host-based Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 197 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Each command is listed, in detail, in the following sections: enable 802.1x Purpose Used to enable the 802.1X server on the Switch. Syntax enable 802.1x Description This command is used to enable the 802.1X Network Access control application on the Switch.
  • Page 198 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show 802.1x Purpose Used to display the current authentication state and authentication configuration of the 802.1X server on the Switch. Syntax show 802.1x [auth_state | auth_configuration] {ports <portlist>} Description This command is used to display the current configuration or authentication state of the 802.1X server on the Switch.
  • Page 199 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the 802.1X authentication states: DES-1228/ME:5#show 802.1x auth_configuration ports 1 Command: show 802.1x auth_configuration ports 1 802.1X : Enabled Authentication Mode : Port_based Authentication Protocol : Radius_EAP Port Number...
  • Page 200 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the 802.1X authentication state for host-based 802.1X: DES-1228/ME:5#show 802.1x auth_state Command: show 802.1x auth_state Port Number : 1 Index MAC Address Auth PAE State Backend State Port Status...
  • Page 201 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config 802.1x capability ports Purpose Used to configure the 802.1X capability of a range of ports on the Switch. Syntax config 802.1x capability ports [<portlist> | all] [authenticator | none] Description This command has two capabilities that can be set for each port, authenticator and none.
  • Page 202 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config 802.1x auth_parameter ports Purpose Used to configure the 802.1X Authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1X settings.
  • Page 203 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure 802.1X authentication parameters for ports 1 to 20: DES-1228/ME:5#config 802.1x auth_parameter ports 1–20 direction both Command: config 802.1x auth_parameter ports 1–20 direction both Success. DES-1228/ME:5# config 802.1x auth_protocol Purpose Used to configure the 802.1X authentication protocol on the Switch.
  • Page 204 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To initialize the authentication state machine of all ports: DES-1228/ME:5# config 802.1x init port_based ports all Command: config 802.1x init port_based ports all Success. DES-1228/ME:5# config 802.1x reauth Purpose Used to configure the 802.1X re-authentication feature of the Switch.
  • Page 205 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1-3> [<server_ip>] key <passwd 32> [default | {auth_port <udp_port_number 1-65535> | acct_port <udp_port_number 1-65535> }...
  • Page 206 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#config radius delete 1 Command: config radius delete 1 Success. DES-1228/ME:5# config radius Purpose Used to configure the Switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddress <server_ip> | key <passwd 32> [auth_port <udp_port_number 1-65535> acct_port <udp_port_number 1-65535>] } (1)
  • Page 207 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure the RADIUS settings: DES-1228/ME:5#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-1228/ME:5# config radius parameter Purpose Used to configure parameters for RADIUS servers.
  • Page 208 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display RADIUS settings on the Switch: DES-1228/ME:5#show radius Command: show radius Timeout : 5 seconds Retransmit Index IP Address Auth-Port Acct-Port Status Number Number ----- ------------------ --------- --------- -------------- --------------- 10.1.1.1...
  • Page 209 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1X guest VLAN. Syntax config 802.1x guest_vlan ports [<portlist> | all] state [enable | disable] Description This command is used to configure ports to be enabled or disabled for the 802.1X guest VLAN.
  • Page 210 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure the configurations for a previously created 802.1X Guest VLAN: DES-1228/ME:5#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Settings ----------------------------------------------------------- Guest VLAN : Tiberius Enable Guest VLAN Ports: 1-5 DES-1228/ME:5# delete 802.1x guest_vlan...
  • Page 211 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show acct_client Purpose Used to display the current RADIUS accounting client. Syntax show acct_client Description This command is used to display the current RADIUS accounting client currently configured on the Switch. Parameters None.
  • Page 212 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show auth_client Purpose Used to display the current RADIUS authentication client. Syntax show auth_client Description This command is used to display the current RADIUS authentication client currently configured on the Switch. Parameters None.
  • Page 213 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show auth_diagnostics Purpose Used to display the current authentication diagnostics. Syntax show auth_diagnostics {ports [<portlist>} Description This command is used to display the current authentication diagnostics of the Switch on a per port basis.
  • Page 214 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show auth_session_statistics Purpose Used to display the current authentication session statistics. Syntax show auth_session_statistics {ports <portlist | all>} Description This command is used to display the current authentication session statistics of the Switch on a per port basis.
  • Page 215 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the current authentication statistics for port 1: DES-1228/ME:5#show auth_statistics ports 1 Command: show auth_statistics ports 1 Port number : 1 MAC address: 00-00-07-5D-60-02 EapolFramesRx EapolFramesTx EapolStartFramesRx EapolReqIdFramesTx EapolLogoffFramesRx...
  • Page 216 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show 802.1x user Purpose Used to display the 802.1X user accounts on the Switch. Syntax show 802.1x user Description This command is used to display the 802.1X Port-based or Host-based Network Access control local users currently configured on the Switch.
  • Page 217: Access Control List (Acl) Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide (ACL) C CCESS ONTROL OMMANDS The Switch implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address.
  • Page 218 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters dst_port <value 0-65535>} | protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff>}]} (1) | ipv6 {[{ class <value 0-255> | flowlabel <hex 0x0-0xfffff>} | source_ipv6 <ipv6addr>| destination_ipv6 <ipv6addr>]}]port [<portlist> | all ][ permit | deny] | delete access_id <value 1-5>]...
  • Page 219 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create access_profile for the rules are entered using the config access_profile command, below. ethernet − Specifies that the Switch will examine the layer 2 part of each packet header. Parameters vlan − Specifies a VLAN mask. Only the last 12 bits of the mask will be considered.
  • Page 220 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create access_profile ID number between 1 to 256. Restrictions Only Administrator level, Operator level or Power User level users can issue this command. Example usage: To create an access list rule: DES-1228/ME:5#create...
  • Page 221 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config access_profile syn | fin } (1) ] } | udp {src_port <value 0-65535> | dst_port <value 0-65535> } | protocol_id <value 0-255> } (1) ] } | ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6 <ipv6addr>...
  • Page 222 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config access_profile tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field within each packet. src_port <value 0-65535> − Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header.
  • Page 223 To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range between 10.42.73.0 to 10.42.73.255: DES-1228/ME:5# config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7...
  • Page 224 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#show access_profile Command: show access_profile Access Profile Table ================================================================================ Profile ID: 101 Type: IPv4 Frame Filter - ICMP ================================================================================ Masks Option VLAN Source IP Dest. IP DSCP Prot ---------------- --------------- --------------- ---- ---- 0xFFF 20.0.0.0...
  • Page 225 Only Administrator level, Operator level or Power User level users can issue this command. Example usage: To create a CPU access profile: DES-1228/ME:5# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code Command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code...
  • Page 226 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete cpu access_profile Syntax delete cpu access_profile profile_id <value 1-3> Description This command is used to delete a previously created CPU access profile. profile_id <value 1-3> − Enter an integer between 1 and 3 that is used to identify Parameters the CPU access profile to be deleted with this command.
  • Page 227 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config cpu access_profile destination_mac <macaddr> − Specifies that the access profile will apply to this destination MAC address. ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
  • Page 228 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config cpu access_profile sequences of packets such as non-default quality of service or real-time service packets. source_ipv6 <ipv6addr> − Specifies an IP address for the source IPv6 address. destination_ipv6 <ipv6addr> − Specifies an IP address for the destination IPv6 address.
  • Page 229 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete cpu access_profile Purpose Used to delete a previously created CPU access profile. Syntax delete cpu access_profile profile_id <value 1-3> Description This command is used to delete a previously created CPU access profile.
  • Page 230 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show the CPU filtering state on the Switch: DES-1228/ME:5#show cpu_access_profile Command: show cpu_access_profile CPU Interface Filtering state: Enabled Access Profile Table ================================================================================ Profile ID: 1 Type: IPv4 Frame Filter - ICMP...
  • Page 231 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example Usage: To enable CPU interface filtering: DES-1228/ME:5#enable cpu_interface_filtering Command: enable cpu_interface_filtering Success. DES-1228/ME:5# disable cpu_interface_filtering Purpose Used to disable CPU interface filtering on the Switch. Syntax disable cpu_interface_filtering Description This command is used, in conjunction with the enable cpu_interface_filtering command above, to enable and disable CPU interface filtering on the Switch.
  • Page 232: Cpu Filtering Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide CPU F ILTERING OMMANDS The CPU Filtering commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table config cpu_filter l3_control_pkt Purpose This command is used to discard the l3 control packets sent to...
  • Page 233 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example Usage: To display the l3 control packet filtering status for port 1 and 2: D E S- 1 2 2 8 /M E : 5 # sh o w c p u _f i l t e r l 3 _ c on t r o l _ p kt 1 - 2...
  • Page 234: Safeguard Engine Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 235 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config safeguard_engine Purpose Used to configure ARP storm control for system. Syntax {state [enable | disable] | utilization {rising <value 20-100> | falling <value 20- 100>} (1)| trap_log [enable | disable] | mode [strict | fuzzy]} (1)
  • Page 236 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the safeguard engine status: DES-1228/ME:5#show safeguard_engine Command: show safeguard_engine Safeguard Engine State Disabled Safeguard Engine Current Status Normal mode ======================================================= CPU Utilization Information: Rising Threshold : 30% Falling Threshold : 20%...
  • Page 237: Traffic Segmentation Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied.
  • Page 238 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show traffic_segmentation Purpose Used to display the current traffic segmentation configuration on the Switch. Syntax show traffic_segmentation {<portlist>} Description This command is used to display the current traffic segmentation configuration on the Switch.
  • Page 239: Time And Sntp Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 240 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure SNTP settings: DES-1228/ME:5#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-1228/ME:5# show sntp Purpose Used to display the SNTP information.
  • Page 241 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable the SNTP function: DES-1228/ME:5#enable sntp Command: enable sntp Success. DES-1228/ME:5# disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This command is used to disable SNTP support. SNTP service must be separately configured (see config sntp).
  • Page 242 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To manually set system time and date settings: DES-1228/ME:5#config time 30jun2003 16:30:30 Command: config time 30jun2003 16:30:30 Success. DES-1228/ME:5# config time_zone Purpose Used to determine the time zone used in order to adjust the system clock.
  • Page 243 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dst disable − Disable the DST seasonal time adjustment for the Switch. repeating − Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula.
  • Page 244 Example usage: To configure daylight savings time on the Switch: DES-1228/ME:5#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
  • Page 245: Arp Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr> config arpentry <ipaddr> <macaddr>...
  • Page 246 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config arpentry can issue this command. Example Usage: To configure a static ARP entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: DES-1228/ME:5#config arpentry 10.48.74.12 00-50-BA-00-07-36 Command: config arpentry 10.48.74.12 00-50-BA-00-07-36 Success.
  • Page 247 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example Usage: To configure ARP aging time: DES-1228/ME:5#config arp_aging time 30 Command: config arp_aging time 30 Success. DES-1228/ME:5# show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif [System] | ipaddress <ipaddr> | static} Description This command is used to display the current contents of the Switch’s ARP...
  • Page 248 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide clear arptable Purpose Used to remove all dynamic ARP table entries. Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch’s ARP table. Static ARP table entries are not affected.
  • Page 249: Routing Table Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide OUTING ABLE OMMANDS The Routing Table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr> {<metric 1-65535>}...
  • Page 250 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete iproute Purpose Used to delete a default IP route entry from the Switch’s IP routing table. Syntax delete iproute [default] Description This command is used to delete an existing default entry from the Switch’s IP routing table.
  • Page 251 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create ipv6route Purpose Used to create an IPv6 static route. Syntax create ipv6route [default] [<ipif_name 12> <ipv6addr>] {<metric 1- 65535>} Description This command is used to an IPv6 static route. If the next hop is a global address, it is not needed to indicate the interface name.
  • Page 252 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show ipv6route Purpose Used to display IPv6 routes. Syntax show ipv6route Description This command is used to display IPv6 routes. Parameters None. Restrictions None. Example usage: To display all the IPv6 routes:...
  • Page 253: Mac Notification Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide MAC N OTIFICATION OMMANDS The MAC Notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interval <int 1-2147483647>...
  • Page 254 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable MAC notification without changing basic configuration: DES-1228/ME:5#disable mac_notification Command: disable mac_notification Success. DES-1228/ME:5# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500>} (1)
  • Page 255 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable port 7 for MAC address table notification: DES-1228/ME:5#config mac_notification ports 7 enable Command: config mac_notification ports 7 enable Success. DES-1228/ME:5# show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings.
  • Page 256 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display all port’s MAC address table notification status settings: DES-1228/ME:5#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ------------------------------------ Disabled Disabled Disabled Disabled...
  • Page 257: Access Authentication Control Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 258 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15> method_list_name config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local | none} (1) delete authen_login <string 15>...
  • Page 259 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command is used to enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 260 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show authen_policy Purpose Used to display the system access authentication policy status on the Switch. Syntax show authen_policy Description This command will show the current status of the access authentication policy on the Switch.
  • Page 261 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen_login Purpose Used to configure a user-defined or default method list of authentication methods for user login. Syntax config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local |...
  • Page 262 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen_login server. radius − Adding this parameter will require the user to be authenticated using the RADIUS protocol from a remote RADIUS server. server_group <string 15> − Adding this parameter will require the user to be authenticated using a user-defined server group previously configured on the Switch.
  • Page 263 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To delete the method list name “Zira”: DES-1228/ME:5#delete authen_login method_list_name Zira Command: delete authen_login method_list_name Zira Success. DES-1228/ME:5# show authen_login Purpose Used to display a previously configured user defined method list of authentication methods for users logging on to the Switch.
  • Page 264 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To view the authentication login method list named Zira: DES-1228/ME:5#show authen_login method_list_name Zira Command: show authen_login method_list_name Zira Method List Name Priority Method Name Comment ---------------- --------- --------------- --------- Zira...
  • Page 265 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen_enable Administrator. A maximum of eight enable method lists can be implemented simultaneously on the Switch. The sequence of methods implemented in this command will affect the authentication result. For example, if a user enters a sequence of methods like tacacs –...
  • Page 266 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen_enable authenticated using the local user account database on the Switch. The local enable password of the device can be configured using the “config admin local_password” command. none – Adding this parameter will require no authentication to access the administration level privileges on the Switch.
  • Page 267 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show authen_enable Purpose Used to display the method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch. Syntax show authen_enable [default | method_list_name <string 15> | all]...
  • Page 268 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen application Purpose Used to configure various applications on the Switch for authentication using a previously configured method list. Syntax config authen application [console | telnet | ssh | http | all] [login | enable] [default | method_list_name <string 15>]...
  • Page 269 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the login and enable method list for all applications on the Switch: DES-1228/ME:5#show authen application Command: show authen application Application Login Method List Enable Method List ------------- ------------------...
  • Page 270 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create authen server_host Purpose Used to create an authentication server host. Syntax create authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255>...
  • Page 271 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds and a retransmit count of DES-1228/ME:5#create authen server_host 10.1.1.121 protocol tacacs+ port 1234 timeout 10 retransmit 5 Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234...
  • Page 272 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen server_host Purpose Used to configure a user-defined authentication server host. Syntax config authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255>...
  • Page 273 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure a TACACS+ authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit count of 4. DES-1228/ME:5#config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout 12 retransmit 4 Command: config authen server_host 10.1.1.121 protocol tacacs+ port 4321...
  • Page 274 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show authen server_host Purpose Used to view a user-defined authentication server host. Syntax show authen server_host Description This command is used to view user-defined authentication server hosts previously created on the Switch.
  • Page 275 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create the server group “group_1”: DES-1228/ME:5#create authen server_group group_1 Command: create authen server_group group_1 Success. DES-1228/ME:5# config authen server_group Purpose Used to configure a user-defined authentication server group. Syntax config authen server_group [tacacs | xtacacs | tacacs+ | radius | <string...
  • Page 276 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To add an authentication host to server group “group_1”: DES-1228/ME:5# config authen server_group group_1 server_host 10.1.1.121 protocol tacacs+ Command: config authen server_group group_1 add server_host 10.1.1.121 protocol tacacs+ Success. DES-1228/ME:5#...
  • Page 277 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To view authentication server groups currently set on the Switch. DES-1228/ME:5#show authen server_group Command: show authen server_group Group Name IP Address Protocol ----------- ----------------------------- ------------ radius --------------------------------------------- tacacs --------------------------------------------- tacacs+...
  • Page 278 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config authen parameter attempt Purpose Used to configure the maximum number of times the Switch will accept authentication attempts. Syntax config authen parameter attempt <int 1-255> Description This command is used to configure the maximum number of times the Switch will accept authentication attempts.
  • Page 279 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable admin Purpose Used to promote user level privileges to administrator level privileges. Syntax enable admin Description This command is for users who have logged on to the Switch on the normal user level to become promoted to the administrator level. After logging on to the Switch users will have only user level privileges.
  • Page 280 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure the password for the “local_enable” authentication method in plain text: DES-1228/ME:5#config admin local_enable Command: config admin local_enable Enter the old password: Enter the case-sensitive new password:****** Enter the new password again for confirmation:****** Success.
  • Page 281: Ssh Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 282 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Usage example: To enable SSH: DES-1228/ME:5#enable ssh Command: enable ssh Success. DES-1228/ME:5# disable ssh Purpose Used to disable SSH. Syntax disable ssh Description This command is used to disable SSH on the Switch.
  • Page 283 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable the SSH authentication mode by password: DES-1228/ME:5#config ssh authmode password enable Command: config ssh authmode password enable Success. DES-1228/ME:5# show ssh authmode Purpose Used to display the SSH authentication mode setting.
  • Page 284 Only Administrator level, Operator level or Power User level users can issue this command. Usage example: To configure the SSH server: DES-1228/ME:5# config ssh server maxsession 2 contimeout 300 authfail 2 Command: config ssh server maxsession 2 contimeout 300 authfail 2 Success. DES-1228/ME:5#...
  • Page 285 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Usage example: To display the SSH server: DES-1228/ME:5# show ssh server Command: show ssh server SSH Server Status : Disabled SSH Max Session Connection Timeout : 120 (sec) Authenticate Failed Attempts Rekey Timeout...
  • Page 286 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show ssh user authmode Purpose Used to display the SSH user setting. Syntax show ssh user authmode Description This command is used to display the current SSH user setting. Parameters None. Restrictions Only Administrator level users can issue this command.
  • Page 287 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1...
  • Page 288 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show ssh algorithm Purpose Used to display the SSH algorithm setting. Syntax show ssh algorithm Description This command will display the current SSH algorithm setting status. Parameters None. Restrictions None. Usage Example:...
  • Page 289: Smtp Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
  • Page 290 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Command Parameters enable smtp disable smtp config smtp {server <ipaddr> | server_port <tcp_port_number 1-65535> | self_mail_addr <mail_addr 64> | [add mail_receiver <mail_addr 64> | delete mail_receiver <index 1-8>]} (1) show smtp smtp send_testmsg...
  • Page 291 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable SMTP on the Switch: DES-1228/ME:5#disable smtp Command: disable smtp Success. DES-1228/ME:5# config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client.
  • Page 292 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show smtp Purpose Used to view configured parameters for the SMTP function on the Switch. Syntax show smtp Description This command is used to display parameters configured for SMTP on the Switch, including server information, mail recipients and the current running status of SMTP on the Switch.
  • Page 293 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To send a test mail message to all configured mail recipients: DES-1228/ME:5# smtp send_testmsg Command: smtp send_testmsg Subject: This is a SMTP test. Content: Hello everybody!! Sending mail, please wait…...
  • Page 294: Cable Diagnostics Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ABLE IAGNOSTICS OMMANDS The Cable Diagnostics commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports [<portlist> | all] Each command is listed, in detail, in the following sections.
  • Page 295 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To test the cable on ports 25 to 28: DES-1228/ME:5#cable_diag ports 20-23 Command: cable_diag ports 20-23 Perform Cable Diagnostics ... Port Type Link Status Test Result Cable Length (M) ----...
  • Page 296: Dhcp Local Relay Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DHCP L OCAL ELAY OMMANDS The DHCP Local Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_local _relay vlan[<vlan_name 32>...
  • Page 297 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dhcp_local_relay option_82 ports Purpose Used to configure the processing of DHCP option 82 for the DHCP Local Relay function. Syntax config dhcp_local_relay option_82 ports <portlist> policy [replace | drop | keep]...
  • Page 298 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable dhcp_local_relay Purpose Used to enable the DHCP local relay function on the Switch. Syntax enable dhcp_local_relay Description This command is used to globally enable the DHCP local relay function on the Switch.
  • Page 299 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display the DHCP local relay function: D E S- 1 2 2 8 /M E : 5 # sh o w d h c p_ l o c a l_ r e l a y...
  • Page 300: Gratuitous Arp Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ARP C RATUITOUS OMMANDS The Gratuitous ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config gratuitous_arp send [enable | disable]...
  • Page 301 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config gratuitous_arp send dup_ip_detected Purpose Used to enable or disable the sending of gratuitous ARP requests while duplicate IP addresses are detected Syntax config gratuitous_arp send dup_ip_detected [enable | disable] Description The command is used to enable or disable the sending of gratuitous ARP request packets while duplicate IPs are detected.
  • Page 302 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable learning of ARP entries based on the received gratuitous ARP packets: DES-1228/ME:5# config gratuitous_arp learning enable Command: config gratuitous_arp learning enable Success. DES-1228/ME:5# config gratuitous_arp_send periodically Purpose Used to configure the interval for periodical sending of gratuitous ARP request packets.
  • Page 303 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To enable the System’s interface gratuitous ARP log and trap: DES-1228/ME:5#enable gratuitous_arp ipif System trap log Command: enable gratuitous_arp ipif System trap log Success. DES-1228/ME:5# disable gratuitous_arp Purpose Used to disable the gratuitous ARP trap and log.
  • Page 304 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display gratuitous ARP log and trap states: DES-1228/ME:5# show gratuitous_arp Command: show gratuitous_arp Send on IPIF status up : Enabled Send on Duplicate_IP_Detected : Disabled Gratuitous ARP Learning : Enabled...
  • Page 305: Vlan Trunking Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide VLAN T RUNKING OMMANDS The VLAN Trunking commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable vlan_trunk disable vlan_trunk config vlan_trunk ports [<portlist>|all] state [enable|disable]...
  • Page 306 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#disable vlan_trunk Command: disable vlan_trunk Success. DES-1228/ME:5# config vlan_trunk Purpose Used to configure a port as a VLAN trunk port. Syntax config vlan_trunk ports [<portlist>|all] | state [enable|disable] Description This command is used to configure a port as a VLAN trunk port. By default, none of the ports on the Switch are VLAN trunk ports.
  • Page 307 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5# config vlan_trunk ports 6-7 state enable Command: config vlan_trunk ports 6-7 state enable Can not operate the member ports of any trunk. DES-1228/ME:5# config vlan_trunk ports 7 state disable Command: config vlan_trunk ports 7 state disable Success.
  • Page 308 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show vlan_trunk Purpose Used to display VLAN trunk configuration. Syntax show vlan_trunk Description This command is used to display VLAN trunk information. Parameters None. Restrictions None. Example usage: To display VLAN Trunk information:...
  • Page 309: Asymmetric Vlan Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide VLAN C SYMMETRIC OMMANDS The Asymmetric VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable asymmetric_vlan disable asymmetric_vlan show asymmetric_vlan...
  • Page 310 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To disable asymmetric VLANs: DES-1228/ME:5#disable asymmetric_vlan Command: disable asymmetric_vlan Success. DES-1228/ME:5# show asymmetric_vlan Purpose Used to view the asymmetric VLAN state on the Switch. Syntax show asymmetric_vlan Description This command is used to display the asymmetric VLAN state on the...
  • Page 311: Igmp Snooping Multicast Vlan Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide IGMP S VLAN C NOOPING ULTICAST OMMANDS The IGMP Snooping Multicast VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create igmp_snooping <vlan_name 32>...
  • Page 312 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To create an IGMP snooping multicast VLAN with the VLAN name “mv1” and a VLAN ID of 2: DES-1228/ME:5# create igmp_snooping multicast_vlan mv1 2 Command: create igmp_snooping multicast_vlan mv1 2 Success.
  • Page 313 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config igmp_snooping multicast_vlan Restrictions Only Administrator level, Operator level or Power User level users can issue this command. Example usage: To configure an IGMP snoop multicast VLAN: DES-1228/ME:5# config igmp_snooping multicast_vlan v1 add member_port 1,3...
  • Page 314 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show igmp_snooping multicast_vlan_group Purpose Used to display the multicast groups configured for the specified multicast VLAN. Syntax show igmp_snooping multicast_vlan_group {<vlan_name 32>} Description This command is used to display the multicast groups configured for the specified multicast VLAN.
  • Page 315 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable igmp_snooping multicast_vlan Purpose Used to enable the multicast VLAN function. Syntax enable igmp_snooping multicast_vlan Description This command is used to control the multicast VLAN function. The ISM VLAN will take effect when IGMP snooping multicast VLAN is enabled.
  • Page 316 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display IGMP snooping multicast VLAN information: DES-1228/ME:5# show igmp_snooping multicast_vlan Command: show igmp_snooping multicast_vlan Multicast VLAN Global State : Enabled : 4001 VLAN Name: 4001 Member Ports : 7-10...
  • Page 317: Lldp Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide LLDP C OMMANDS The LLDP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable lldp disable lldp config lldp <sec 5 - 32768 >...
  • Page 318 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable lldp Purpose Used to enable LLDP operations on the Switch. Syntax enable lldp Description This command is used for global control of the LLDP function. When this function is enabled, the Switch can start to transmit LLDP packets and receive and process the LLDP packets.
  • Page 319 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp message_tx_interval Purpose Used to change the packet transmission interval. Syntax config lldp message_tx_interval <sec 5-32768> Description This command is used to control how often active ports retransmit advertisements to their neighbors.
  • Page 320 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp tx_delay Purpose Used to change the minimum time (delay-interval) of any LLDP port. It will delay advertising successive LLDP advertisements due to a change in LLDP MIB content. The Tx delay defines the minimum interval between the sending of LLDP messages due to constant changes of MIB content.
  • Page 321 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp notification_interval Purpose Used to configure the timer of the notification interval used to send notifications to configured SNMP trap receiver(s). Syntax config lldp notification_interval <sec 5 - 3600> Description Globally change the interval between successive LLDP change notifications generated by the switch.
  • Page 322 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp ports admin_status Purpose Used to configure per-port transmit and receive modes. Syntax config lldp ports [<portlist>|all] admin_status [tx_only | rx_only | tx_and_rx | disable] Description These options enable the Switch to control which ports participate in LLDP traffic and whether the participating ports allow LLDP traffic in only one direction or in both directions.
  • Page 323 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To enable port 1 to port 2 to manage address entries: DES-1228/ME:5# config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable Command: config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable Success...
  • Page 324 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To configure the Switch to exclude the system name TLV from outbound LLDP advertisements on all ports: DES-1228/ME:5# config lldp ports all basic_tlvs system_name enable Command: config lldp ports all basic_tlvs system_name enable Success.
  • Page 325 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp ports dot1_tlv_protocol_vid Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 organization protocol identity TLV data types from outbound LLDP advertisements.
  • Page 326 Example usage To configure the VLAN name TLV from the outbound LLDP advertisements for all ports: DES-1228/ME:5# config lldp ports all dot1_tlv_vlan_name vlanid 1-3 enable Command: config lldp ports all dot1_tlv_vlan_name vlanid 1-3 enable Success. DES-1228/ME:5#...
  • Page 327 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp ports dot3_tlvs Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.3 organization specific TLV data types from outbound LLDP advertisements.
  • Page 328 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config lldp forward_message Purpose Used to configure forwarding of LLDP DU packets when LLDP is disabled. Syntax config lldp forward_message [enable | disable] Description When LLDP is disabled and LLDP forward message is enabled, the received LLDP DU packets will be forwarded.
  • Page 329 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display the LLDP system level configuration status: DES-1228/ME:5#show lldp Command: show lldp LLDP System Information Chassis Id Subtype : MAC Address Chassis Id : 00-12-28-8E-77-00 System Name System Description...
  • Page 330 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display the LLDP per port TLV option configuration: DES-1228/ME:5# show lldp ports 1 Command: show lldp ports 1 Port ID --------------------------------------------------------------------- Admin Status : TX_and_RX Notification Status : Disable...
  • Page 331 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display outbound LLDP advertisements for individual ports in detail: DES-1228/ME:5# show lldp local_ports 1 mode detailed Command: show lldp local_ports 1 mode detailed Port ID : 1 -------------------------------------------------------------------- Port ID Subtype...
  • Page 332 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To display outbound LLDP advertisements for specific ports in brief mode: DES-1228/ME:5# show lldp local_ports 1 mode brief Command: show lldp local_ports 1 mode brief Port ID : 1 --------------------------------------------------------- Port ID Subtype...
  • Page 333 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display remote table entries in brief mode: DES-1228/ME:5# show lldp remote_ports 1-2 brief Command: show lldp remote_ports 1-2 brief Port ID: 1 ----------------------------------------------------------- Remote Entities Count : 3 Entity 1...
  • Page 334 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To display remote table entries in normal mode: DES-1228/ME:5# show lldp remote_ports ports 1 normal Command: show lldp remote_ports ports 1 normal Port ID : 1 ----------------------------------------------------------- Remote Entities Count : 2...
  • Page 335 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5# show lldp remote_ports 1 mode detailed Command: show lldp remote_ports 1 mode detailed Port ID : 1 ---------------------------------------------------------------------- Remote Entities count : 1 Entity 1 Chassis Id Subtype : MAC Address...
  • Page 336 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide (None.) DES-1228/ME:5# show lldp statistics Purpose Used to display the system LLDP statistics information. Syntax show lldp statistics Description This command is used to display an overview of neighbor detection activity on the Switch.
  • Page 337 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display statistics information of port 1: DES-1228/ME:5# show lldp statistics ports 1 Command: show lldp statistics ports 1 Port ID: 1 ----------------------------------------------------------- lldpStatsTxPortFramesTotal : 27 lldpStatsRxPortFramesDiscardedTotal lldpStatsRxPortFramesErrors lldpStatsRxPortFramesTotal : 27...
  • Page 338: Dos Prevention Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide REVENTION OMMANDS The DoS Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config dos_prevention [ {land_attack | blat_attack | smurf_attack | tcp_null_scan |...
  • Page 339 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config dos_prevention dos_type Purpose This command is used to discard the L3 control packets sent to CPU from specific ports. Syntax config dos_prevention dos_type [ {land_attack | blat_attack | smurf_attack | tcp_null_scan | tcp_xmascan | tcp_synfin | tcp_syn_srcport_less_1024} (1) | all] {action [ drop | mirror <port>...
  • Page 340 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable dos_prevention trap_log Purpose Used to enable a DoS prevention trap/log. Syntax enable dos_prevention trap_log Description This command is used to send traps and logs when a DoS attack event occurs. The event will be logged only when the action is specified as drop.
  • Page 341 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show dos_prevention Purpose Used to display DoS prevention information. Syntax show dos_prevention { land_attack | blat_attack | smurf_attack | tcp_null_scan | tcp_xmascan | tcp_synfin | tcp_syn_srcport_less_1024 } Description This command is used to display DoS prevention information, including the type of DoS attack, the prevention state, the corresponding action if the prevention is enabled, and the counter information of the DoS packet.
  • Page 342 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To display DoS prevention information for Land Attack: DES-1228/ME:5# show dos_prevention land_attack Command: show dos_prevention land_attack DoS Type: Land Attack State: Enabled Action: Mirror Port: 7 Priority: 5 Rx Rate(Kbit/sec): 1024 Frame Counts: 10000...
  • Page 343 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To clear all counters of the prevention of each DoS attack: DES-1228/ME:5# clear dos_prevention counters Command: clear dos_prevention counters Success. DES-1228/ME:5#...
  • Page 344: Ip-Mac-Port Binding Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide IP-MAC-P INDING OMMANDS The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC-port binding is to restrict the access to a switch to a number of authorized users.
  • Page 345 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide create address_binding ip_mac ipaddress Purpose Used to create an IP-MAC-port binding entry. Syntax create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} Description This command is used to create an IP-MAC-port binding entry.
  • Page 346 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To configure address binding on the Switch: DES-1228/ME:5#config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00- 00-00-00-00-05 Command: config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00- 00-00-00-05 Success. DES-1228/ME:5# config address_binding ip_mac ports Purpose Used to configure an IP-MAC-port binding state to enable or disable for specified ports.
  • Page 347 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show address_binding Purpose Used to display IP-MAC-port binding entries. Syntax show address_binding {[ip_mac [all | ipaddress <ipaddr> mac_address <macaddr>] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>] | ports]} Description This command is used to display IP-MAC-port binding entries. Three different kinds of information can be viewed.
  • Page 348 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To display address binding entries on the Switch: DES-1228/ME:5#show address_binding ip_mac all Command: show address_binding ip_mac all IP Address MAC Address Ports --------------- ----------------- --------------- 10.1.1.1 00-00-00-00-00-11 1,3,5,7,8 10.1.1.2 00-00-00-00-00-12 10.1.1.10 00-00-00-00-00-aa...
  • Page 349 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete address_binding Purpose Used to delete IP-MAC-port binding entries. Syntax delete address_binding [ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} | all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]] Description This command is used to delete IP-MAC-port binding entries. Two different kinds of information can be deleted.
  • Page 350 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable address_binding trap_log Purpose Used to enable the trap log for the IP-MAC-port binding function. Syntax enable address_binding trap_log Description This command, along with the disable address_binding trap_log will enable and disable the sending of trap log messages for IP-MAC- port binding.
  • Page 351: Loopback Detection Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide OOPBACK ETECTION OMMANDS The Loopback Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config loopdetect { recover_timer [ 0 | <value 60-1000000> ] | interval < value 1-32767> } (1) config loopdetect [ <portlist>...
  • Page 352 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config loopdetect Purpose Used to configure the loopback detection function on the Switch. Syntax config loopdetect { recover_timer [ 0 | <value 60-1000000> ] | interval < value 1-32767> }(1) Description This command is used to set up the loopback detection function (LBD) for the entire Switch.
  • Page 353 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config loopdetect ports Purpose Used to configure the loopback detection function for the port on the Switch. Syntax config loopdetect ports [ <portlist> | all ] state [ enable | disable ]...
  • Page 354 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable loopdetect Purpose Used to globally enable the loop-detect function on the Switch. Syntax enable loopdetect Description This command is used to allow the loop detection function to be globally enabled on the Switch.
  • Page 355 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show loopdetect Purpose Used to display the Switch’s current loopback detection configuration. Syntax show loopdetect Description This command is used to display the Switch’s current loopback detection configuration. Parameters None. Restrictions None.
  • Page 356 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show loopdetect ports Purpose Used to display the loopback detection configuration per port on the Switch. Syntax show loopdetect ports [ <portlist> | all ] Description This command will display the Switch’s current per-port loop-detect configuration and status.
  • Page 357 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config loopdetect trap Purpose Used to configure loopback detection traps. Syntax config loopdetect trap [ none | loop_detected | loop_cleared | both ] Description This command is used to specify the trap modes for loop detection.
  • Page 358: Flow Meter Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ETER OMMANDS The Flow Meter commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config flow_meter <value 1-256> access_id < access_id >[[ rate <value 64- profile_id 1024000>...
  • Page 359 Example usage: To configure the rate and burst of incoming packets matching an ACL rule: DES-1228/ME:5# config flow_meter profile_id 1 access_id 1 rate 64 burst_size 64 rate_exceed drop_packet Command: config flow_meter profile_id 1 access_id 1 rate 64 burst_size 64 rate_exceed drop_packet Success.
  • Page 360 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show flow_meter Purpose Used to display the flow-based metering configuration. Syntax show flow_meter {profile_id <value 1-256> {access_id <access_id>}} Description This command displays the flow meter configuration. Parameters profile_id – Specifies the profile ID.
  • Page 361: Arp Spoofing Prevention Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ARP S POOFING REVENTION OMMANDS The ARP Spoofing Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config [add gateway_ip <ipaddr> gateway_mac <macaddr> ports arp_spoofing_prevention [<portlist>|all] | delete gateway_ip <ipaddr>]...
  • Page 362 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config arp_spoofing_prevention Purpose Used to configure the prevention of ARP spoofing attacks. Syntax config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports [<portlist>|all] | delete gateway_ip <ipaddr>] Description This command is used to configure the prevention of ARP spoofing attacks.
  • Page 363 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show arp_spoofing_prevention Purpose Used to display ARP spoofing prevention entries. Syntax show arp_spoofing_prevention Description This command is used to display ARP spoofing prevention entries. Parameters None. Restrictions None. Example usage: To display the current ARP spoofing prevention entry/entries:...
  • Page 364: Technical Support Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ECHNICAL UPPORT OMMANDS The Technical Support commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters show tech_support upload <ipaddr> <path_filename 64>...
  • Page 365 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#show tech_support Command: show tech_support ============================================================================= DES-1228/ME Metro Ethernet Switch Technique Information Report ============================================================================= [CPU Utilization 1988520ms] CPU Utilization : ------------------------------------------------------------------------------- Five Seconds - One Minute - Five Minutes - [Device Information 1988720ms]...
  • Page 366 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide upload tech_support_toTFTP Purpose Used to upload information for assistance from technical support. Syntax upload tech_support_toTFTP <ipaddr> <path_filename 64> Description This command is used to upload information for assistance from technical support to a TFTP server.
  • Page 367: Command History Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide OMMAND ISTORY OMMANDS The Command History commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config command_history <value 1-40> show command_history...
  • Page 368 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage To display all of the commands in the CLI: DES-1228/ME:5#? cable_diag ports clear clear arptable clear counters clear dos_prevention counters clear fdb clear igmp_snooping data_driven_group clear log Clear mac_based_access_control auth_mac clear port_security_entry port config 802.1p default_priority...
  • Page 369 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Purpose Used to display all commands in the Command Line Interface (CLI). Syntax Description This command is used to display all of the commands available through the Command Line Interface (CLI). Parameters None.
  • Page 370 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config command_history Purpose Used to configure the command history. Syntax config command_history <value 1-40> Description This command is used to configure the command history. <value 1-40> − The number of previously executed commands Parameters maintained in the buffer.
  • Page 371: Bpdu Attack Protection Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide BPDU A TTACK ROTECTION OMMANDS The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config bpdu_protection ports [<portlist>...
  • Page 372 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config bpdu_protection ports Purpose Used to configure the BPDU Attack Protection state and mode of a port. Syntax config bpdu_protection ports[<portlist> | all ] {state [enable | disable] | mode [ drop | block |...
  • Page 373 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To set the BPDU attack protection port state to enable and drop mode: DES-1228/ME:5# config bpdu_protection ports 1 state enable mode drop Commands: config bpdu_protection ports 1 state enable mode drop Success.
  • Page 374 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config bpdu_protection Purpose Used to configure trap and log settings for BPDU attack protection events. Syntax config bpdu_protection [ trap | log ] [ none | attack_detected | attack_cleared | both ]...
  • Page 375 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide enable bpdu_protection Purpose Used to globally enable BPDU attack protection on the Switch. Syntax enable bpdu_protection Description Use this to enable BPDU attack protection. NOTE: The BPDU Attack Protection function and Spanning Tree Protocol for ports are mutually exclusive.
  • Page 376 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide disable bpdu_protection Purpose Used to disable BPDU attack protection on the Switch. Syntax disable bpdu_protection Description Use this to disable BPDU attack protection on the entire Switch. Note that if BPDU attack protection is disabled globally, it will also be disabled for ports regardless of the config bpdu_protection ports settings.
  • Page 377 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To display BPDU protection settings for ports: DES-1228/ME:5# show bpdu_protection ports 1-12 Commands: show bpdu_protection ports 1-12 Port State Mode Status ------ ------------ ----------- ---------- Enabled shutdown Normal Enabled shutdown...
  • Page 378: Pppoe Circuit Id Insertion Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide ID I IRCUIT NSERTION OMMANDS PPPoE Circuit ID Insertion is used to produce the unique subscriber mapping capability that is possible on ATM networks between ATM-DSL local loop and the PPPoE server. The PPPoE server will use the inserted Circuit Identifier sub-tag of the received packet to provide AAA services (Authentication, Authorization and Accounting).
  • Page 379 Example usage To enable port 5 PPPoE circuit ID insertion function and use Host MAC::Switch IP::Host Port as circuit ID value: DES-1228/ME:5# config pppoe circuit_id_insertion ports 5 state enable circuit_id ip Command: config pppoe circuit_id_insertion ports 5 state enable circuit_id ip Success.
  • Page 380 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To view the global PPPoE ID insertion state: DES-1228/ME:5# show pppoe circuit_id_insertion Command: show pppoe circuit_id_insertion Status: Disabled DES-1228/ME:5# show pppoe circuit_id_insertion ports Purpose Used to display the PPPoE ID insertion configuration on a per port basis.
  • Page 381: Dhcp Server Screening Settings

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DHCP S ERVER CREENING ETTINGS Due to this function allow you not only to restrict all DHCP Server packets but also to receive any specified DHCP server packet by any specified DHCP client, it is useful when one or more than one DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients.
  • Page 382 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To add an entry from the DHCP server/client filter list in the switch’s database: DES-1228/ME:5#config filter dhcp_server add permit_server_ip 10.1.1.1 client_mac 00-00-00-00-00- 01 port all Command: config filter dhcp_server add permit_server_ip 10.1.1.1 client_mac 00-00-00-00-00-01...
  • Page 383 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide config filter dhcp_server trap / log Purpose Used to enable or disable the trap and log functions for DHCP server screening. Syntax config filter dhcp_server [ trap | log ] [ enable | disable ] Description This command will enable or disable traps and logs for DHCP server screening.
  • Page 384: Ipv6 Neighbour Discovery Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide EIGHBOUR ISCOVERY OMMANDS The IPv6 Neighbor Discovery commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. create ipv6 <ipif_name 12> <ipv6addr> <macaddr> neighbor_cache ipif delete ipv6 [<ipif_name 12>...
  • Page 385 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide delete ipv6 neighbor_cache ipif all – All entries, including static and dynamic entries, will be deleted. static − Delete the static entries. dynamic − Delete the dynamic entries. Restrictions Only Administrator level, Operator level or Power User level users can issue this command.
  • Page 386 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide show ipv6 nd Purpose Used to display the interface’s information. Syntax show ipv6 nd {ipif <ipif_name 12>} Description This command is used to display the IPv6 ND related configuration. <ipif_name> − The name of the interface.
  • Page 387 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide...
  • Page 388: Debug Software Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide EBUG OFTWARE OMMANDS The Debug Software commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. debug error_log [dump | clear | upload_toTFTP [<ipaddr> ] <path_filename 64>]...
  • Page 389 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228/ME:5#debug error_log dump Command: debug error_log dump ********************************************************************** # debug log: 1 # level: CPU exception # clock: 2074870 ms # time : 0000-00-00 00:34:34 ==================== SOFTWARE EXCEPTION ERROR ==================== Exception : 0x80a3a310.
  • Page 390 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 834F83B0 CPUTILU 834FC680 834F8684 0K/ 16K 1021 20/ 20 Sleep 8470BA90 LLDPTim 83B02B80 83B01784 2044 45/ 45 Sleep 87FFF8A0 bcmDPC 87FFF890 87FFB894 0K/ 16K 50/ 50 S:sal_dpc 87B6A3C0 bcmTX 87B6A3B0 87B663B4 0K/ 16K...
  • Page 391 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide E:Tracert 81BAB48C tn_5 81C1BFC0 81C0BFC4 3K/ 64K 75/ 75 E:tn_5 82A6E27C SSH_1 82A9F8E0 82A8F8E4 0K/ 64K 75/ 75 E:SSH_1 81BAAEF4 tn_3 81BFBFC0 81BEBFC4 3K/ 64K 75/ 75 E:tn_3 81BAAC28 tn_2 81BEBFC0 81BDBFC4...
  • Page 392 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide E:BPR_EVE 80FEBBB4 RadiusC 80FD8050 80FD4054 0K/ 16K 75/ 75 Q:ETS 81C4FEC0 TNC_MON 81CA0190 81C98194 0K/ 32K 75/ 75 E:TNCMONE 835C0180 LinkNot 835C8450 835C0454 0K/ 32K 75/ 75 Q:LinkNot 8377ED38 BPDUTUN 83783008 8377F00C...
  • Page 393 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide S:counter 835B36D8 SysLogT 835B79A8 835B39AC 0K/ 16K 180/180 E:SysLogE 83631A30 PktStor 83635D00 83631D04 0K/ 16K E0FD 190/190 Q:ST_Stor 837C30C0 PPPoE_T 837C5390 837C3394 190/190 Q:PPPoE_Q 87FA2A40 bcmARL. 87FA2A30 87F9EA34 0K/ 16K 195/195 E:arlSynR...
  • Page 394 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 82a6df38 SSH_6 82a6def4 SSH_5 82a6deb0 SSH_4 82a6de6c SSH_3 82a6de28 SSH_2 82a6dde4 SSH_1 82a6dda0 SSH_0 82b0fbb0 83c0c470 dhcpcfg 81ba13c8 DHCPPEV 81b9d050 BOOTPEV 837d84c8 81baa65c tn_7 81baa618 tn_6 81baa5d4 tn_5 81baa590 tn_4 81baa54c tn_3...
  • Page 395 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 809b5110 arlSynR 80956498 5482WAE 80950860 SYS_TIM 80935a70 SysRun Total event-group: 45 ---------------------------------------------------------------------- MEMORY NAME BASE SIZE MAX_REQ ALLOC BLKS FREE FRE_MAX_BLK 81CA0200 TNC 81CA0220 263680 263648 1 263648 8396A2B0 CRYPT 8396A2D0 204800...
  • Page 396 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide BLOCK NAME BASE BLK_SZ BLK_NUM MAX_REQ N_ALLOC FreeBlks 835B79C0 SysLogP 835B7D94 60 15808 Total memory block: 1 --------------------TASK INFO-------------------- TASK NAME StackTop CurStkSP StackSize SchCnt PRIO(I) STATUS 80A3A310 80A4A5E0 80A3A5E44144421K/ 64K BBC6...
  • Page 397 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 80A4A368 : 00000008 80255BE0 0000001A 00000008 80A4A378 : 802CFB4C 876ECD40 80247308 802472D8 80A4A388 : 802133FC 00000001 00000000 80A4A408 80A4A398 : 00000000 00000000 00000000 87482BB0 80A4A3A8 : 00000000 00000001 00000001 00000008 80A4A3B8 : 80A4A3E0 00000001 00000000 80247594...
  • Page 398 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide debug config error_reboot Description Set if the switch needs to be rebooted when a fatal error occurs. enable − Need to reboot the switch when fatal error happens (if the Parameters project does not define the default setting, enable for default).
  • Page 399: Bpdu Tunnel Commands

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide BPDU T UNNEL OMMANDS The BPDU Tunnel commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config bpdu_tunnel ports [ <portlist> | all ] type[tunnel {stp|gvrp} (1) | uplink|none]...
  • Page 400 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Example usage: To show BPDU tunneling state of all ports: DES-1228:5#show bpdu_tunnel Command: show bpdu_tunnel BPDU Tunnel : Enabled STP Tunnel Multicast Address : 01-05-5d-00-00-00 STP Tunnel Ports : 1,2 GVRP Tunnel Multicast Adrress : 01-05-5d-00-00-21...
  • Page 401 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide DES-1228:5# disable bpdu_tunnel Command: disable bpdu_tunnel Success. DES-1228:5#...
  • Page 402: Appendix A - Password Recovery Procedure

    This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords. Complete these steps to reset the password: For security reasons, the Password Recovery feature requires the user to physically access the device.
  • Page 403: Appendix B - System Log Entries

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide B – S PPENDIX YSTEM NTRIES The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information...
  • Page 404 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Configuration upload by Configuration upload by console was unsuccessful! (Username: Warning console was unsuccessful <username>) Log message successfully Log message successfully uploaded (Username: <username>, Informational uploaded IP: <ipaddr>) Log message successfully Log message successfully by console uploaded (Username:...
  • Page 405 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Root restriction disabled Port <portNum> STP root restriction is disabled Informational Successful login through SSH (Username: <username>, IP: Successful login through SSH Informational <ipaddr>) Login failed through SSH Login failed through SSH (Username: <username>, IP: <ipaddr>) Warning Logout through SSH Logout through SSH (Username: <username>, IP: <ipaddr>)
  • Page 406 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Successful login through Successful login through Console authenticated by AAA server Console authenticated by AAA Informational <serverIP> (Username: <username>) server Login failed through Console Login failed through Console authenticated by AAA server...
  • Page 407 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Successful Enable Admin Successful Enable Admin through Console authenticated by AAA through Console authenticated Informational none method (Username: <username>) by AAA none method Successful Enable Admin Successful Enable Admin through Web from <userIP>...
  • Page 408 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide addresses Unauthentiucated IP address IP-Mac-port Unathenticated IP-MAC address and discarded by ip mac port discarded by IP mac port Warning Binding binding (IP: <ipaddr>, MAC <macaddr>, Port <portNum>) binding IP and Management IP address was changed into <ipAddr> by...
  • Page 409 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide Service BPDU Port <portNum> enter BPDU under protection state (mode: drop / BPDU attack happened. Informational Protecction block / shutdown) BPDU attack automatically Port <portNum> recover from BPDU under protection state Informational...
  • Page 410: Appendix C - Trap Entries

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide C – T PPENDIX NTRIES DES-1228/ME B1 Trap List Trap Name/OID Variable Bind Format MIB Name coldStart None RFC1907 1.3.6.1.6.3.1.1.5.1 (SNMPv2-MIB) warmStart None RFC1907 1.3.6.1.6.3.1.1.5.2 (SNMPv2-MIB) authenticationFailure None RFC1907 1.3.6.1.6.3.1.1.5.5 (SNMPv2-MIB) linkDown...
  • Page 411 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide 1.3.6.1.4.1.171.12.1.7.2.0.5 agentGratuitousARPMacAddr agentGratuitousARPPortNumber agentGratuitousARPInterfaceName swSafeGuardChgToExhausted SafeGuard Engine- swSafeGuardCurrentStatus 1.3.6.1.4.1.171.12.19.4.1.0.1 swSafeGuardChgToNormal SafeGuard Engine- swSafeGuardCurrentStatus 1.3.6.1.4.1.171.12.19.4.1.0.2 swDoSAttackDetected swDoSCtrlType DoSPrev-MIB 1.3.6.1.4.1.171.12.59.4.0.1 swDoSNotifyVarlpAddr swDoSNotifyVarPortNumber swBpduProtectionUnderAttackingTrap swBpduProtectionPortIndex BPDU- PROTECTION-MIB 1.3.6.1.4.1.171.12.76.4.0.1 swBpduProtectionPortMode swBpduProtectionRecoveryTrap swBpduProtectionPortIndex BPDU- PROTECTION-MIB 1.3.6.1.4.1.171.12.76.4.0.2 swBpduProtectionRecoveryMethod...
  • Page 412: Appendix D - Radius Attributes Assignment

    DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide D - RADIUS A PPENDIX TTRIBUTES SSIGNMENT The RADIUS Attributes Assignment on the DES-1228/ME is used in the 802.1X (Port-based and Host-based) module. The description that follows explains the following RADIUS Attributes Assignment types:  Ingress/Egress Bandwidth ...
  • Page 413 DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide To assign VLAN by RADIUS Server, the proper parameters should be configured on the RADIUS Server. To use VLAN assignment, RFC3580 defines the following tunnel attributes in RADIUS packets. The table below shows the parameters for a VLAN:...

Table of Contents