Korenix 7850G-2XG User Manual
  1. Manuals
  2. Brands
  3. Korenix Manuals
  4. Network Router
  5. JetNet 7850G-2XG
  6. User manual

Korenix 7850G-2XG User Manual

Industrial gigabit layer 3 managed ethernet switch
Hide thumbs Also See for 7850G-2XG:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
Table of Contents

Advertisement

Quick Links

Download this manual
Korenix JetNet 7850G-2XG 6852G Series
48G+2 x 10G SFP+/48G+4G SFP Ports
Industrial Gigabit Layer 3 Managed Ethernet Switch

User Manual

Version 1.0, Oct. 2014
www.korenix.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 7850G-2XG and is the answer not in the manual?

Questions and answers

Related Manuals for Korenix 7850G-2XG

Summary of Contents for Korenix 7850G-2XG

  • Page 1: User Manual

    Korenix JetNet 7850G-2XG 6852G Series 48G+2 x 10G SFP+/48G+4G SFP Ports Industrial Gigabit Layer 3 Managed Ethernet Switch User Manual Version 1.0, Oct. 2014 www.korenix.com...

  • Page 2: Document History

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Document History Revision Date Remark V1.0 Otc. 14, 2014 The 1 release version _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 2/1246...

  • Page 3: Table Of Contents

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. CONTENTS Introduction ..........................10 Switch Description ....................10 Features ........................10 Dimension ........................ 12 Front-Panel Components ..................13 Rear Panel Description ..................... 14 Management Options ....................15 Web-based Management Interface ................. 15 Command Line Console Interface Through the Serial Port or Telnet ......
  • Page 4 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.7 show system ....................44 6.1.8 show tech-support ................... 45 6.1.9 show hardware ....................46 6.1.10 show version ....................48 6.1.11 show loginsession .................... 49 6.1.12 show command filter ..................50 Device Configuration Commands ................
  • Page 5 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2 Configuration Commands ................283 Script Management Commands ................289 6.6.1 script apply ....................289 6.6.2 script delete ....................289 6.6.3 script show ..................... 290 6.6.4 script validate ....................291 User Account Management Commands ..............
  • Page 6 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.6 boot-system ....................491 6.16.7 ping ........................ 492 6.16.8 traceroute ...................... 495 6.16.9 logging cli-command..................497 6.16.10 calendar set ................... 498 6.16.11 reload ..................... 498 6.16.12 configure ....................499 6.16.13 disconnect ....................
  • Page 7 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.1 Show command ..................... 617 6.27.2 Configuration Commands ................618 Routing Commands ....................... 621 Address Resolution Protocol (ARP) Commands ............. 621 7.1.1 Show Commands ................... 621 7.1.2 Configuration Commands ................624 IP Routing Commands ....................
  • Page 8 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2 Configuration Commands ................780 Web-Based Management Interface ..................782 Overview ........................ 782 Management Menu ....................784 9.2.1 Viewing Information ..................784 9.2.2 Configuring Management Session and Network Parameters ......789 9.2.3...
  • Page 9 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.23 Managing Port-Channel ................. 992 9.3.24 Managing Spanning Tree ................995 9.3.25 Managing Link State ..................1007 9.3.26 Managing Port-Backup ................1009 9.3.27 Rapid Super Ring Menu ................1011 Security Menu ...................... 1013 9.4.1...

  • Page 10: Introduction

    48 Gigabit Ethernet ports to function as a central distribution hub for other switches, and switch groups. The one built-in 1000/100/10Mbps Ethernet port for out of band management. The SFP+ port of JetNet 7850G-2XG also provides 1G speed by manually setting. Features ...
  • Page 11 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  IP Routing support  VLAN routing support  OSPF v1/v2 support  RIP v1/v2 support  Virtual Router Redundancy Protocol (VRRP) support  IP Helper  IP Multicast support ...

  • Page 12: Dimension

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Dimension The JetNet 7850G-2XG and JetNet 6852G Industrial Gigabit Layer 3 Managed Switch dim ension ( H x W x D) is 44mm x 440mm x 292.1mm. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 13: Front-Panel Components

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Front-Panel Components The front panel of the Switch consists of 48 10/100/1000BASE-T interfaces, 2 SFP+ 10-Gigabit interfaces, or 4 SFP 1Gigabit interfaces, 1 built-in 1000/100/10 RJ-45 Ethernet service ports, an RS-232 communication port.

  • Page 14: Rear Panel Description

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Rear Panel Description The rear panel of the Switch contains AC/DC power connector and three fans. Rear panel with DC power connector Rear panel with AC power connector The DC power range support -48V(-36 ~ -72V) DC input.

  • Page 15: Management Options

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Management Options The system may be managed by using one Service Ports through a Web Browser,Telent, SNMP function and using the console port on the front panel through CLI command.

  • Page 16: Snmp-Based Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. SNMP-Based Management You can manage the Switch with an SNMP-compatible console program. The Switch supports SNMP version 1.0, version 2.0, and version 3.0. The SNMP agent decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database.
  • Page 17 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  RFC 2466 - IPV6-ICMP-MIB  TACACS-MIB  IGMP/MLD Snooping  IGMP/MLD Layer2 Multicast  QoS – IPv6 ACL  Voice VLAN  Guest VLAN  LLDP-MIB  LLDP MED ...

  • Page 18: Installation And Quick Startup

    Console Cable  Rackmount kit  Power Cord (Depend on Country, JetNet 7850G-2XG-DC48 and JetNet 6852G-DC48 no Power Cord)  Switch Installation Installing the Switch Without the Rack 1. Install the Switch on a level surface that can safely support the weight of the Switch and its attached cables.

  • Page 19: Installing The Switch In A Rack

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Installing the Switch in a Rack You can install the Switch in most standard 19-inch (48.3-cm) racks. Refer to the illustrations below. 1. Use the supplied screws to attach a mounting bracket to each side of the Switch.

  • Page 20: Quick Starting The Switch

    Quick Starting the Switch 1. Read the device Installation Guide for the connectivity procedure. In-band connectivity allows access to the JetNet 7850G-2XG/6852G Switch locally. From a remote workstation, the device must be configured with IP information (IP address, subnet mask, and default gateway).

  • Page 21: System Information Setup

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. System Information Setup 2.5.1 Quick Start up Software Version Information Table 2-1. Quick Start up Software Version Information Command Details show hardware Allows the user to see the HW & SW version the device...

  • Page 22: Quick Start Up User Account Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.3 Quick Start up User Account Management Table 2-3. Quick Start up User Account Management Command Details show users Displays all users that are allowed to access the switch User Access Mode - Shows whether the user is able to change parameters on the switch (Read/Write) or is only able to view (Read Only).

  • Page 23: Quick Start Up Ip Address

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.4 Quick Start up IP Address To view the network parameters the operator can access the device by the following three methods.  Simple Network Management Protocol - SNMP ...

  • Page 24: Quick Start Up Uploading From Switch To Out-Of-Band Pc

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.5 Quick Start up Uploading from Switch to Out-of-Band PC Table 2-5. Quick Start up Uploading from Switch to Out-of-Band PC (XMODEM) Command Details copy startup-config xmodem This starts the upload and displays the mode of uploading and <filename>...

  • Page 25: Quick Start Up Factory Defaults

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.8 Quick Start up Factory Defaults Table 2-8 Quick Start up Factory Defaults Command Details clear config Enter yes when the prompt pops up to clear all the configurations made to the switch.

  • Page 26: Console And Telnet Administration Interface

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Console and Telnet Administration Interface This chapter discusses many of the features used to manage the Switch, and explains many concepts and important points regarding these features. Configuring the Switch to implement these concepts is discussed in detail in chapter 6.

  • Page 27: Set Up Your Switch Using Telnet Access

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2. Power down the devices, attach the cable (or cable/adapter combination) to the correct ports, and restore power. 3. Set the console to use the following communication parameters for your terminal: ...

  • Page 28: Web-Based Management

    Web-Based Management Overview The Korenix JetNet 7850G-2XG/6852G provides a built-in browser interface that lets you configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer 5.0 or later or Netscape Navigator 6.0 or later. This interface also allows for system monitoring and management of the switch.

  • Page 29: How To Log In

    Korenix Technology Co., Ltd. How to log in The Korenix JetNet 7850G-2XG/6852G can be configured remotely from Microsoft Internet Explorer (version 5.0 or above), or Mozilla FireFox (version 3.6 or above). 1. Determine the IP address of your managed switch.

  • Page 30: Web-Based Management Menu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Web-Based Management Menu This above page displays system information, such as:  System Description  System Name  System Location  System Contact  IP Address  Service Port IP Address ...
  • Page 31 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Switching  Security   Routing  IPv4 Multicast Secondary Menus The Secondary Menus under the Main Menu contain a host of options that you can use to configure your switch.
  • Page 32 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  SNTP — see “SNTP Commands”  CDP — see “CDP Commands”  LLDP — see “LLDP Commands”  UDLD — see “UDLD Commands”  sFlow — see “sFlow Commands”...
  • Page 33 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Security  Port Access Control — see “Dot1x Configuration Commands”  Port Security — see “Port Security Configuration Commands”  Captive Portal — see “Captive Portal Commands”  RADIUS — see “Radius Configuration Commands”...

  • Page 34: Command Line Interface Structure And Mode-Based Cli

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Line Interface Structure and Mode-based CLI The Command Line Interface (CLI) syntax, conventions, and terminology are described in this section. Each CLI command is illustrated using the structure outlined below.

  • Page 35: Cli Mode-Based Topology

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. CLI Mode-based Topology Parameters Parameters are order dependent. The text in bold italics should be replaced with a name or number. To use spaces as part of a name parameter, enclose it in double quotes like this: "System Name with Spaces".
  • Page 36 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Conventions Network addresses are used to define a link to a remote host, workstation, or network. Network addresses are shown using the following syntax: Table 5-1. Network Address Syntax Address Type...

  • Page 37: Switching Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Switching Commands System Information and Statistics commands 6.1.1 show arp This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch.

  • Page 38: Show Calendar

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.2 show calendar This command displays the system time. Syntax show calendar Default Setting None Command Mode Privileged Exec Display Message Current Time: displays system time _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 39: Show Process Cpu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.3 show process cpu This command provides the percentage utilization of the CPU by different tasks. Syntax show process cpu It is not necessarily the traffic to the CPU, but different tasks that keep the CPU busy...
  • Page 40 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 1043 bcmRX 0.19% 0.19% 0.16% 1044 cpuUtilMonitorTask 0.19% 0.14% 0.11% 1046 tL7Timer0 0.00% 0.02% 0.01% 1054 simPts_task 0.00% 0.02% 0.01% 1058 Detecting SFP+ Modu 0.00% 0.02% 0.01% 1080 emWeb 0.00% 0.08%...

  • Page 41: Show Eventlog

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.4 show eventlog This command displays the event log, which contains error messages from the system, in the Primary Management System or in the specified unit. The event log is not cleared on a system reset.

  • Page 42: Show Running-Config

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.5 show running-config This command is used to display/capture the current setting of different protocol packages supported on switch. This command displays/captures only commands with settings/configurations with values that differ from the default value. The output is displayed in script format, which can be used to configure another switch with the same configuration.

  • Page 43: Show Sysinfo

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.6 show sysinfo This command displays switch brief information and MIBs supported. Syntax show sysinfo Default Setting None Command Mode Privileged Exec Display Message System Description: The text used to identify this switch.

  • Page 44: Show System

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.7 show system This command displays switch system information. Syntax show system Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify this switch. System Object ID: The manufacturing ID System Information System Up Time: The time in days, hours and minutes since the last switch reboot.

  • Page 45: Show Tech-Support

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.8 show tech-support This command displays system and configuration information when you contact technical support. The output of the show tech-support command combines the output of the following commands: show version, show sysinfo, show interface status, show logging, show event log, show logging buffered, show trap log, show running config, …...

  • Page 46: Show Hardware

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.9 show hardware This command displays inventory information for the switch. Syntax show hardware Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify the product name of this switch.
  • Page 47 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Vendor Revision Number: Revision level for part number provided by vendor. Vendor Manufacturing Date: The vendor’s manufacturing date. Additional Packages: This displays the additional packages that are incorporated into this system.

  • Page 48: Show Version

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.10 show version This command displays inventory information for the switch. Syntax show version Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify the product name of this switch.

  • Page 49: Show Loginsession

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.11 show loginsession This command displays current telnet and serial port connections to the switch. Syntax show loginsession Default Setting None Command Mode Privileged Exec Display Message ID: Login Session ID User Name: The name the user will use to login using the serial port or Telnet.

  • Page 50: Show Command Filter

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.12 show command filter This command displays the information that begin/include/exclude the regular expression. Syntax show command [| begin/include/exclude <LINE>] Default Setting None Command Mode Privileged Exec Display Message command: Any show command of the CLI...

  • Page 51: Device Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Device Configuration Commands 6.2.1 Interface 6.2.1.1 show interface status This command displays the Port monitoring information for the system. Syntax show interface status [<slot/port>] <slot/port> - is the desired interface number.
  • Page 52 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Enable: This port is enabled flow control. Capabilities Status: Displays interface capabilities. 6.2.1.2 show interface counters This command displays a summary of statistics for a specific interface or all interfaces.
  • Page 53 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Received Without Error: The total number of packets (including broadcast packets and multicast packets) received. Packets Received With Error: The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
  • Page 54 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Received 128-255 Octets: The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 55 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Unicast Packets Received: The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received: The total number of good packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.
  • Page 56 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Transmitted 1519-1522 Octets: The total number of packets (including bad packets) received that were between 1519 and 1522 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 57 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MSTP BPDUs Transmitted: Multiple Spanning Tree Protocol Bridge Protocol Data Units sent. MSTP BPDUs Received: Multiple Spanning Tree Protocol Bridge Protocol Data Units received. EAPOL Frames Received: The number of valid EAPOL frames of any type that have been received by this authenticator.
  • Page 58 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Maximum VLAN Entries: The maximum number of Virtual LANs (VLANs) allowed on this switch. Most VLAN Entries Ever Used: The largest number of VLANs that have been active on this switch since the last reboot.
  • Page 59 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.4 interface This command is used to enter Interface configuration mode. Syntax interface <slot/port> <slot/port> - is the desired interface number. Default Setting None Command Mode Global Config 6.2.1.5 speed-duplex This command is used to set the speed and duplex mode for the interface.
  • Page 60 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to set the speed and duplex mode for all interfaces. Syntax speed-duplex all <10|100|1000> no speed-duplex all 1000 1000 – 1000 Mbps, only valid for 10G ports.
  • Page 61 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables automatic negotiation on all interfaces. The default value is enabled. Syntax negotiate all no negotiate all all - This command represents all interfaces. no - This command disables automatic negotiation on all interfaces.
  • Page 62 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.7 capabilities This command is used to set the capabilities on specific interface. The 10G SFP+ and 1G SFP interfaces do not provide the following command. Syntax capabilities {{10 | 100 } {full-duplex | half-duplex}} | {1000 full-duplex }...
  • Page 63 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command removes the advertised capability with using parameter Default Setting 10G full-duplex for 10G SFP+ ports 1G full-duplex for 1G SFP ports Command Mode Global Config _____________________________________________________________________________...
  • Page 64 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.8 storm-control flowcontrol This command enables 802.3x flow control for the switch. 802.3x flow control only applies to full-duplex mode ports. If PFC feature is enabled on the same interface, 802.3x flow control will be disabled internally.
  • Page 65 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.9 shutdown This command is used to disable a port. Syntax shutdown no shutdown no - This command enables a port. Default Setting Enabled Command Mode Interface Config This command is used to disable all ports.
  • Page 66 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.10 description This command is used to create an alpha-numeric description of the port. Syntax description <description> no description no - This command removes the description of the port. Default Setting...

  • Page 67: L2 Mac Address And Multicast Forwarding Database Tables

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2 L2 MAC Address and Multicast Forwarding Database Tables 6.2.2.1 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. The administrator can enter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address.
  • Page 68 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Other: The value of the corresponding instance does not fall into one of the other categories. 6.2.2.2 show mac-addr-table count This command displays the total forwarding database entries, the number of static and learnning mac address, and the max address available on the switch.
  • Page 69 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.3 show mac-addr-table interface This command displays the forwarding database entries. The user can search FDB table by using interface number <slot/port>. Syntax show mac-addr-table interface <slot/port> <slot/port> - Interface number.
  • Page 70 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.4 show mac-addr-table vlan This command displays the forwarding database entries. The user can search FDB table by using VLAN Syntax show mac-addr-table vlan <vlanid> <vlanid> - VLAN ID (Range: 1 – 4093)
  • Page 71 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.5 show mac-address-table gmrp This command displays the GARP Multicast Registration Protocol (GMRP) entries in the Multicast Forwarding Database (MFDB) table. Syntax show mac-address-table gmrp Default Setting None Command Mode...
  • Page 72 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.6 show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table. Syntax show mac-address-table igmpsnooping Default Setting None Command Mode Privileged Exec Display Message Mac Address: A unicast MAC address for which the switch has forwarding and/or filtering information.
  • Page 73 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.7 show mac-address-table multicast This command displays the MFDB information. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the all parameter. The user can display the table entry for one MAC Address by specifying the MAC address as an optional parameter.
  • Page 74 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.8 show mac-address-table stats This command displays the MFDB statistics. Syntax show mac-address-table stats Default Setting None Command Mode Privileged Exec Display Message Max MFDB Table Entries: This displays the total number of entries that can possibly be in the MFDB.
  • Page 75 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.9 show mac-addr-table agetime This command displays the forwarding database address aging timeout. Syntax show mac-addr-table agetime Default Setting None Command Mode Privileged Exec Display Message Address Aging Timout: This displays the total number of seconds for Forwarding Database table.

  • Page 76: Vlan Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3 VLAN Management 6.2.3.1 show vlan This command displays brief information on a list of all configured VLANs. Syntax show vlan Default Setting None Command Mode Privileged Exec Display Message VLAN ID: There is a VLAN Identifier (vlanid) associated with each VLAN.
  • Page 77 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.2 show vlan id This command displays detailed information, including interface information, for a specific VLAN. Syntax show vlan {id <vlanid> | name <vlanname>} <vlanid> - VLAN ID (Range: 1 – 4093) <vlanname>...
  • Page 78 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Autodetect: Specifies to allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard.
  • Page 79 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.3 show vlan association mac This command displays the VLAN associated with a specific configured MAC address. If no MAC address is specified, the VLAN associations of all the configured MAC addresses are displayed.
  • Page 80 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.4 show vlan association subnet This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP Address and net mask are specified, the VLAN associations of all the configured IP-subnets are displayed.
  • Page 81 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.5 show vlan internal usage This command displays the VLAN assigned to port-based routing interfaces. Syntax show vlan internal usage Default Setting None Command Mode Privileged Exec Display Message Base VLAN ID: This is the Base VLAN ID for Internal allocation of VLANs to the routing interface.
  • Page 82 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.6 show protocol group This command displays the Protocol-based VLAN information for either the entire system, or for the indicated group. Syntax show protocol group [<group-name>] <group-name> - The group name of an entry in the Protocol-based VLAN table.
  • Page 83 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.7 show interface switchport This command displays VLAN port information. Syntax show interface switchport [<slot/port>] <slot/port> - Interface number. no parameter – Display the entire table. Default Setting None Command Mode...
  • Page 84 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.8 vlan database This command is used to enter VLAN Interface configuration mode. Syntax vlan database Default Setting None Command Mode Global Config 6.2.3.9 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN).
  • Page 85 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.10 vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1- 4093.
  • Page 86 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.12 vlan association subnet This command removes the association of a MAC address to a VLAN. Syntax vlan association subnet <ipaddr> <netmask> <vlanid> [<priority>] no vlan association subnet <ipaddr> <netmask>...
  • Page 87 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.14 protocol group This command attaches a <vlanid> to the protocol-based VLAN identified by <group-name>. A group may only be associated with one VLAN at a time, however the VLAN association can be changed.
  • Page 88 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.15 switchport acceptable-frame-type This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
  • Page 89 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting Admit all Command Mode Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 89/1246...
  • Page 90 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.16 switchport ingress-filtering This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
  • Page 91 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.17 switchport native vlan This command changes the VLAN ID which will be assigned to untagged or priority tagged frames per interface. Syntax switchport native vlan <vlanid> no switchport native vlan <vlanid>...
  • Page 92 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.18 switchport allowed vlan This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number.
  • Page 93 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Mode Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 93/1246...
  • Page 94 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.19 switchport tagging This command configures the tagging behavior for a specific interface in a VLAN to enable. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames.
  • Page 95 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.20 switchport forbidden vlan This command used to configure forbidden VLANs. Syntax switchport forbidden vlan {add | remove} <vlan-list> no switchport forbidden <vlan-list> - VLAN ID (Range: 1 – 4093) – separate non-consecutive IDs with ',' and no spaces and no zeros in between the range;...
  • Page 96 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. Any subsequent per port configuration will override this configuration setting. Syntax switchport priority all <0-7>...
  • Page 97 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command adds a protocol-based VLAN group to the system. The <group-name> is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands.
  • Page 98 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command will fail, and the protocol will not be added to the group.

  • Page 99: Double Vlan Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.4 Double VLAN commands 6.2.4.1 show dvlan-tunnel/ dot1q-tunnel This command is used without the optional parameters to display all interfaces enabled for Double VLAN Tunneling. Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces.
  • Page 100 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.4.2 switchport dvlan-tunnel/ dot1q-tunnel This command is used to enable Double VLAN Tunneling on the specified interface. Syntax switchport {dvlan-tunnel|dot1q-tunnel} no switchport {dvlan-tunnel|dot1q-tunnel} Default Setting Disable Command Mode Interface Config 6.2.4.3...

  • Page 101: Gvrp And Bridge Extension

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5 GVRP and Bridge Extension 6.2.5.1 show bridge-ext This command displays Generic Attributes Registration Protocol (GARP) information. Syntax show bridge-ext Default Setting None Command Mode Privileged Exec User Exec Display Message GMRP Admin Mode: This displays the administrative mode of GARP Multicast Registration Protocol (GMRP) for the system.
  • Page 102 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.2 show gvrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces. Syntax show gvrp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 103 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.3 show gmrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or All interfaces. Syntax show gmrp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 104 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.4 show garp configuration This command displays GMRP and GVRP configuration information for one or all interfaces. Syntax show garp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 105 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.5 bridge-ext gvrp This command enables GVRP. Syntax bridge-ext gvrp no bridge-ext gvrp no - This command disables GVRP. Default Setting Disabled Command Mode Global Config 6.2.5.6 bridge-ext gmrp This command enables GARP Multicast Registration Protocol (GMRP) on the system. The default value is disabled.
  • Page 106 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.7 switchport gvrp This command enables GVRP (GARP VLAN Registration Protocol) for a specific port. Syntax switchport gvrp no switchport gvrp no - This command disables GVRP (GARP VLAN Registration Protocol) for a specific port. If GVRP is disabled, Join Time, Leave Time, and Leave All Time have no effect.
  • Page 107 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.8 switchport gmrp This command enables GMRP Multicast Registration Protocol on a selected interface. If an interface which has GMRP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GMRP functionality will be disabled on that interface.
  • Page 108 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.9 garp timer This command sets the GVRP join time per port and per GARP. Join time is the interval between the transmission of GARP Protocol Data Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group.
  • Page 109 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Mode Global Config This command sets the GVRP leave time per port. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry. This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service.
  • Page 110 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command sets the GVRP leave time for all ports to the default 60 centiseconds (0.6 seconds). Default Setting 60 centiseconds (0.6 seconds) Command Mode Global Config This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations will be unregistered.
  • Page 111 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Syntax garp timer leaveall all < 200-6000 > no garp timer leaveall all <200-6000> - leave time (Range: 200 – 6000) in centiseconds. all - All interfaces. no - This command sets how frequently Leave All PDUs are generated for all ports to 1000 centiseconds (10 seconds).

  • Page 112: Igmp Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6 IGMP Snooping 6.2.6.1 ip igmp snooping The user can go to the CLI Global Configuration Mode to set IGMP Snooping on the system, use the ip igmp snooping global configuration command. Use the no ip igmp snooping to disable IGMP Snooping on the system.
  • Page 113 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.3 ip igmp snooping fast-leave The user can go to the CLI Global/Interface Configuration Mode to set IGMP Snooping fast-leave admin mode on a selected interface or all interfaces, use the ip igmpsnooping fast-leave global/interface configuration command.
  • Page 114 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.5 ip igmp snooping mcrtrexpiretime The user can go to the CLI Interface Global/Interface Configuration Mode to set the Multicast Router Present Expiration time for the system or on a particular interface, use the ip igmp snooping mcrtrexpiretime <0-3600>...
  • Page 115 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.7 set igmp The user can go to the CLI VLAN database Mode to set IGMP Snooping on a particular VLAN, use the set ipgm <vlanid> vlan configuration command. Use the no set igmp <vlanid> to disable IGMP Snooping on a particular VLAN.
  • Page 116 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.9 set igmp groupmembership-interval The user can go to the CLI VLAN Configuration Mode to set the IGMP Group Membership Interval time on a particular VLAN, use the set igmpgroupmembership-interval <vlanid> <2-3600> vlan configuration command.
  • Page 117 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.11 set igmp mcrtrexpiretime The user can go to the CLI Interface VLAN Configuration Mode to set the Multicast Router Present Expiration time on a particular VLAN, use the set igmp mcrtrexpiretime <vlanid> <0-3600> vlan configuration command.
  • Page 118 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.13 show ip igmp snooping The user can go to the CLI Privilege Exec to get all of igmp snooping information, use the show ip igmp snooping Privilege command. Syntax show ip igmp snooping [<slot/port>|<vlanid>]...
  • Page 119 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Group Membership Interval: Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the interface from the entry.
  • Page 120 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.15 show ip igmp snooping mrouter vlan The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ip igmp snooping mrouter vlan Privilege command.
  • Page 121 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.17 show mac-address-table igmpsnooping The user can go to the CLI Privilege Exec to display the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table, use the show mac-address-table igmpsnooping Privilege command.

  • Page 122: Igmp Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7 IGMP Snooping Querier 6.2.7.1 ip igmp snooping querier The user can go to the CLI Global Configuration Mode to set IGMP snooping querier admin mode, use the ip igmp snooping querier global configuration command. Use the no ip igmp snooping querier to disable.
  • Page 123 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.3 ip igmp snooping querier query-interval The user can go to the CLI Global Configuration Mode to set IGMP snooping querier query interval, use the ip igmp snooping querier query-interval <1-1800> global configuration command. Use the no ip igmp snooping querier query-interval return to default value.
  • Page 124 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.5 ip igmp snooping querier version The user can go to the CLI Global Configuration Mode to set IGMP snooping querier version, use the ip igmp snooping querier version <1-2> global configuration command. Use the no ip igmp snooping querier version return to default value.
  • Page 125 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.7 ip igmp snooping querier vlan address The user can go to the CLI Global Configuration Mode to set IGMP snooping querier vlan address, use the ip igmp snooping querier vlan <vlanid> address <ip-address> global configuration command.
  • Page 126 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.9 show ip igmp snooping querier This command display IGMP snooping querier global information on the system. Syntax show ip igmp snooping querier Command Mode Privilege Exec Display Information IGMP Snooping Querier Mode: Administrative mode for IGMP Snooping. The default is disable.
  • Page 127 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.10 show ip igmp snooping querier vlan This command display IGMP snooping querier vlan information on the system. Syntax show ip igmp snooping querier vlan <vlanid> <vlanid> - VLAN ID (Range: 1 - 4093).
  • Page 128 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.11 show ip igmp snooping querier detail This command display all of IGMP snooping querier information on the system. Syntax show ip igmp snooping querier detail Command Mode Privilege Exec Display Information IGMP Snooping Querier Mode: Administrative mode for IGMP Snooping.

  • Page 129: Mld Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8 MLD Snooping 6.2.8.1 show ipv6 mld snooping The user can go to the CLI Privilege Exec to get all of mld snooping information, use the show ip mld snooping Privilege command.
  • Page 130 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MLD Snooping Admin Mode: Indicates whether MLD Snooping is active on the VLAN. Fast Leave Mode: Indicates whether MLD Snooping Fast Leave is active on the VLAN. Group Membership Interval: Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the interface from the entry.
  • Page 131 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.3 show ipv6 mld snooping mrouter vlan The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ipv6 mld snooping mrouter vlan Privilege command.
  • Page 132 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.4 show ipv6 mld snooping static The user can go to the Privilege Exec to display MLD snooping static information, use the show ipv6 mld snooping static Privilege command. Syntax...
  • Page 133 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.5 show mac-address-table mldsnooping The user can go to the CLI Privilege Exec to display the MLD Snooping entries in the Multicast Forwarding Database (MFDB) table, use the show mac-address-table mldsnooping Privilege command.
  • Page 134 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.7 clear mld snooping The user can go to the CLI Global/Interface Configuration Mode to clear MLD Snooping on the system, use the clear mld snooping priviledge configuration command. Syntax...
  • Page 135 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.9 ipv6 mld snooping fast-leave The user can go to the CLI Global/Interface Configuration Mode to set MLD Snooping fast-leave admin mode on a selected interface or all interfaces, use the ipv6 mld snooping fast-leave global/interface configuration command.
  • Page 136 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.11 ipv6 mld snooping mcrtrexpiretime The user can go to the CLI Interface Global/Interface Configuration Mode to set the Multicast Router Present Expiration time for the system or on a particular interface, use the ipv6 mld snooping mcrtrexpiretime <0-3600>...
  • Page 137 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.13 ipv6 mld snooping static The user can go to the Global Mode and add a port to ipv6 multicast group, use the ipv6 mld snooping static Global command. Syntax ipv6 mld snooping static <macaddr>...
  • Page 138 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.15 set mld fast-leave The user can go to the CLI VLAN Configuration Mode to set MLD Snooping fast-leave admin mode on a particular VLAN, use the set mld fast-leave <vlanid> vlan configuration command. Use the no set mld fast-leave <vlanid>...
  • Page 139 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.17 set mld maxresponse The user can go to the CLI Interface VLAN database Mode to set the MLD Maximum Response time on a particular VLAN, use the set mld max-response-time <vlanid> <1-65> vlan configuration command.

  • Page 140: Mld Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9 MLD Snooping Querier 6.2.9.1 show ipv6 mld snooping querier This command display MLD snooping querier global information on the system. Syntax show ipv6 mld snooping querier Default Setting None...
  • Page 141 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.2 show ipv6 mld snooping querier vlan This command display MLD snooping querier vlan information on the system. Syntax show ipv6 mld snooping querier vlan <vlanid> <vlanid> - VLAN ID (Range: 1 – 4093).
  • Page 142 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.3 show ipv6 mld snooping querier detail This command display all of MLD snooping querier information on the system. Syntax show ipv6 mld snooping querier detail Default Setting None Command Mode...
  • Page 143 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.4 ipv6 mld snooping querier The user can go to the CLI Global Configuration Mode to set MLD snooping querier admin mode, use the ipv6 mld snooping querier global configuration command. Use the no ipv6 mld snooping querier to disable.
  • Page 144 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.6 ipv6 mld snooping querier querier-interval The user can go to the CLI Global Configuration Mode to set MLD snooping querier querier interval, use the ipv6 mld snooping querier querier-interval <1-1800> global configuration command. Use the no ipv6 mld snooping querier query-interval return to default value.
  • Page 145 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.8 ipv6 mld snooping querier vlan The user can go to the CLI Global Configuration Mode to set MLD snooping querier vlan admin mode, use the ipv6 mld snooping querier vlan <vlanid> global configuration command. Use the no ipv6 mld snooping querier vlan <vlanid>...
  • Page 146 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.10 ipv6 mld snooping querier vlan election participate The user can go to the CLI Global Configuration Mode to set MLD snooping querier vlan election participate mode, use the ipv6 mld snooping querier vlan election-participate <vlanid> global configuration command.

  • Page 147: Port Channel

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10 Port Channel 6.2.10.1 show port-channel This command displays the static capability of all port-channels (LAGs) on the device as well as a summary of individual port-channels. Syntax show port-channel brief...
  • Page 148 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. None Command Mode Privileged Exec Display Message Log. Intf: The logical slot and the logical port. Channel Name: The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric characters.
  • Page 149 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Type: This field displays the status designating whether a particular port-channel (LAG) is statically or dynamically maintained. The possible values of this field are Static, indicating that the port-channel is statically maintained; and Dynamic, indicating that the port-channel is dynamically maintained.
  • Page 150 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.3 port-channel adminmode all This command sets every configured port-channel with the same administrative mode setting. Syntax port-channel adminmode all no port-channel adminmode all no - This command disables a port-channel (LAG). The option all sets every configured port-channel with the same administrative mode setting.
  • Page 151 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.5 port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel. The option all sets every configured port-channel with the same administrative mode setting.
  • Page 152 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.6 port-channel load-balance This command for CLI will configured the mode of load balance on the all Port Channels. The parameter “ ” represent the mode used to be set for src-mac | dst-mac | dst-src-mac | src-ip | dst-ip| dst-src-ip port-channel load balance.
  • Page 153 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting dst-src-ip Command Mode Interface Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 153/1246...
  • Page 154 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.7 port-channel name This command defines a name for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel, and name is an alphanumeric string up to 15 characters. This command is used to modify the name that was associated with the port-channel when it was created.
  • Page 155 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.9 adminmode This command enables a port-channel (LAG) members. The interface is a logical slot and port for a configured port-channel. Syntax adminmode no adminmode no - This command disables a configured port-channel (LAG).
  • Page 156 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.10 lacp This command enables Link Aggregation Control Protocol (LACP) on a port. Syntax lacp no lacp no - This command disables Link Aggregation Control Protocol (LACP) on a port.
  • Page 157 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.11 lacp actor or lacp partner This command set <actor | partner> admin key value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp <actor|partner> admin key <key-value>...
  • Page 158 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command set <actor | partner> port priority value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp <actor|partner> port priority <priority-value> no lacp <actor|partner> port priority <priority-value> – range 0-65535.
  • Page 159 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command set collector max-delay time of Link Aggregation Control Protocol (LACP) on a port-channel. Syntax lacp collector max-delay <delay-value> no lacp collector max-delay <delay-value>: 0-65535 no - This command restores collector max-delay time of Link Aggregation Control Protocol (LACP)
  • Page 160 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.13 delete-channel-group This command deletes the port from the port-channel (LAG). The interface is a logical slot and port number of a configured port-channel. Syntax delete-channel-group <logical slot/port> <logical slot/port> - Port-Channel Interface number.

  • Page 161: Storm Control

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11 Storm Control 6.2.11.1 show storm-control This command is used to display broadcast storm control information. Syntax show storm-control broadcast Default Setting None Command Mode Privileged Exec Display Message Intf: Displays interface number.
  • Page 162 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to display unicast storm control information Syntax show storm-control unicast Default Setting None Command Mode Privileged Exec Display Message Intf: Displays interface number. Mode: Displays status of storm control unicast.
  • Page 163 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.2 storm-control broadcast This command enables broadcast storm recovery mode on the selected interface. If the mode is enabled, broadcast storm recovery with high threshold is implemented. The threshold implementation follows a percentage pattern.
  • Page 164 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.3 storm-control multicast This command enables multicast storm recovery mode on the selected interface. Syntax storm-control multicast no storm-control multicast no - This command disables multicast storm recovery mode on the selected interface.
  • Page 165 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.4 storm-control unicast This command enables unicast storm recovery mode on the selected interface. Syntax storm-control unicast no storm-control unicast no - This command disables unicast storm recovery mode on the selected interface.
  • Page 166 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.5 switchport broadcast rate This command will protect your network from broadcast storms by setting a threshold level for broadcast traffic on each port. Syntax switchport broadcast rate <1-14880000> <1-14880000> - Specify the threshold for broadcast traffic.
  • Page 167 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.6 switchport multicast rate This command will protect your network from multicast storms by setting a threshold level for multicast traffic on each port. Syntax switchport multicast rate <1-14880000> <1-14880000> - Specify the threshold for multicast traffic...
  • Page 168 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.7 switchport unicast rate This command will protect your network from unicast storms by setting a threshold level for unicast traffic on each port. Syntax switchport unicast rate <1-14880000> <1-14880000> - Specify the threshold for unicast traffic...

  • Page 169: L2 Priority

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.12 L2 Priority 6.2.12.1 show queue cos-map This command displays the class of service priority map on specific interface. Syntax show queue cos-map [<slot/port>] <slot/port> - Interface number. Default Setting...
  • Page 170 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.12.2 queue cos-map This command is used to assign class of service (CoS) value to the CoS priority queue. Syntax queue cos-map <priority> <queue-id> no queue cos-map <queue-id> - The queue id of the CoS priority queue (Range: 0 - 7 ).

  • Page 171: Port Mirror

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13 Port Mirror 6.2.13.1 show port-monitor session This command displays the Port monitoring information for the specified session. Syntax show port-monitor session <Session Number> <Session Number> - session number. Default Setting...
  • Page 172 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13.2 port-monitor session This command configures a probe port and a monitored port for monitor session (port monitoring). Use the source interface <slot/port> parameter to specify the interface to monitor. Use rx to monitor only ingress packets, or use tx to monitor only egress packets.
  • Page 173 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13.3 port-monitor session mode This command configures the mode parameter to enabled the administrative mode of the session. If enabled, the probe port monitors all the traffic received and transmitted on the physical monitored port.

  • Page 174: Link State

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14 Link State 6.2.14.1 show link state Show link state information. Syntax show link state Command Mode Global Config Display Message Admin Mode: the link state admin mode. Group ID: The group ID for each displayed row.
  • Page 175 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14.2 link state Enable/Disable the link state admin mode. Use ‘link state’ to enable the admin mode of redundant function, and use no command to disable the function. Create/Destroy the link state group. Use ‘link state group’ to create a group. Use no command to destroy the group.
  • Page 176 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14.3 link state group Set upstream port or downstream port for a link state group. Use ‘link state group <group id> upstream’ to set the port to be monitored. Syntax link state group <1-6>...

  • Page 177: Port Backup

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.15 Port Backup 6.2.15.1 show port-backup Show port-backup information. Syntax show port-backup Command Mode Privileged EXEC Display Message Admin Mode: Indicates whether or not port-backup is active on the switch.
  • Page 178 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.15.2 port-backup Enable/Disable the port backup admin mode. Use ‘port-backup’ to enable the admin mode of function, and use no command to disable the function. Create/Destroy the port backup group. Use ‘port-backup group’ to create a group. Use no command to destroy the group.

  • Page 179: Rapid Super Ring Member Mode Commands

    Korenix JetNet 7850G-2XG/6852G supports part of the Multiple Super Ring (MSR) technology. Rapid Super Ring is one of the MSR technology, apply to single Ring topology. The JetNet 7850G-2XG/6852G can act as the member of the RSR, this is Rapid Super Ring Member mode. To enable this mode, you should enable the global settings, assign the member ports, port 1 and port 2 to the Ring.
  • Page 180 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.16.2 Global Configuration This command configures the global setting of the Rapid Super Ring Member mode. This is the first and Must command before enable the Rapid Super Ring Member mode.

  • Page 181: Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Management Commands 6.3.1 Network Commands 6.3.1.1 show ip interface This command displays configuration settings associated with the switch's network interface. The network interface is the logical interface used for in-band connectivity with the switch via any of the switch's front panel ports.
  • Page 182 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.2 show ip filter This command displays management IP filter status and all designated management stations. Syntax show ip filter Default Setting None Command Mode Privileged Exec Display Message Manegement IP Filter Address Table: The admin mode status for IP filter.
  • Page 183 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.4 interface vlan This command is used to enter Interface-vlan configuration mode. Syntax interface vlan <vlanid> <vlanid> - VLAN ID (Range: 1 - 4093). Default Setting None Command Mode Global Config 6.3.1.5...
  • Page 184 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.6 ip default-gateway This command sets the IP Address of the default gateway. Syntax ip default-gateway <gateway> no ip default-gateway < gateway > - IP address of the default gateway...
  • Page 185 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.8 ip filter This command is used to enable the IP filter function. Syntax ip filter no ip filter no – Disable ip filter. Default Setting Disabled Command Mode Global Config This command is used to set an IP address to be a filter.

  • Page 186: Serial Interface Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2 Serial Interface Commands 6.3.2.1 show line console This command displays serial communication settings for the switch. Syntax show line console Default Setting None Command Mode Privileged Exec Display Message Serial Port Login Timeout (minutes): Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection.
  • Page 187 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.2 line console This command is used to enter Line configuration mode Syntax line console Default Setting None Command Mode Global Config 6.3.2.3 baudrate This command specifies the communication rate of the terminal interface. The supported rates are 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200.
  • Page 188 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.4 exec-timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely. The time range is 0 to 160.
  • Page 189 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.6 silent-time This command uses to set the amount of time the management console is inaccessible after the number of unsuccessful logon tries exceeds the threshold value. Syntax silent-time <0-65535>...

  • Page 190: Telnet Session Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3 Telnet Session Commands 6.3.3.1 telnet This command establishes a new outbound telnet connection to a remote host. Syntax telnet <ip-address|hostname> [port] [debug] [line] [localecho] <ip-address|hostname> - A hostname or a valid IP address.
  • Page 191 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Maximum Number of Remote Connection Sessions: This object indicates the number of simultaneous remote connection sessions allowed. The factory default is 5. Allow New Telnet Sessions: Indicates that new telnet sessions will not be allowed when set to no.
  • Page 192 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.4 exec-timeout This command sets the remote connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set. A value of 0 indicates that a session remains active indefinitely.
  • Page 193 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.6 terminal length This command uses to configure the columns per page for the vty session. Syntax terminal-length <10-100> <10-100> - Columns per page (Range: 10 - 100). no - This command sets the value to the default.
  • Page 194 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.8 server enable This command enables/disables telnet server. If telnet server is enabled, all telnet sessions can be established until there are no more sessions available. If telnet server is disabled, all telnet sessions are closed.
  • Page 195 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.10 telnet sessions This command regulates new outbound telnet connections. If enabled, new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed.
  • Page 196 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.12 telnet exec-timeout This command sets the outbound telnet session timeout value in minute. Changing the timeout value for active sessions does not become effective until the session is reaccessed. Any keystroke will also activate the new timeout duration.
  • Page 197 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.13 show telnet This command displays the current outbound telnet settings. Syntax show telnet Default Setting None Command Mode Privileged Exec User Exec Display Message Outbound Telnet Login Timeout (in minutes) Indicates the number of minutes an outbound telnet session is allowed to remain inactive before being logged off.

  • Page 198: Ssh Client Session Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4 SSH Client Session Commands 6.3.4.1 This command establishes a new outbound ssh connection to a remote host. Syntax ssh <ip-address|hostname> <username> { [port <1-65535>] [protocol <protocollevel>] | [protocol <protocollevel>] [port <1-65535>]} <ip-address|hostname>...
  • Page 199 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.2 sshc sessions This command regulates new outbound ssh connections. If enabled, new outbound ssh sessions can be established until it reaches the maximum number of simultaneous outbound ssh sessions allowed. If disabled, no new outbound ssh session can be established.
  • Page 200 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.4 sshc exec-timeout This command sets the outbound ssh session timeout value in minute. Changing the timeout value for active sessions does not become effective until the session is reaccessed. Any keystroke will also activate the new timeout duration.
  • Page 201 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.6 Perform SSH client connection Use this command to make a outbound SSH connection. Syntax ssh <ip-address|hostname> <username> [port <1-65535> | protocol <protocollevel>] <ip-address|hostname> The destination host ip address or host name. This field is required.

  • Page 202: Snmp Server Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5 SNMP Server Commands 6.3.5.1 show snmp This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect.
  • Page 203 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.2 show trapflags This command displays trap conditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the trap to all enabled trap receivers.
  • Page 204 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.3 snmp-server sysname This command sets the name of the switch. The range for name is from 1 to 31 alphanumeric characters. Syntax snmp-server sysname <name> <name> - Range is from 1 to 31 alphanumeric characters.
  • Page 205 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.5 snmp-server contact This command sets the organization responsible for the network. The range for contact is from 1 to 31 alphanumeric characters. Syntax snmp-server contact <con> <con> - Range is from 1 to 31 alphanumeric characters.
  • Page 206 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.6 snmp-server community This command adds (and names) a new SNMP community. A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privilege level. The length of the name can be up to 16 case-sensitive characters.
  • Page 207 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. The default public and private communities are enabled by default. The four undefined communities are disabled by default. Command Mode Global Config This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 208 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. None Command Mode Global Config 6.3.5.7 snmp-server community ipaddr This command sets a client IP address for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 209 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.8 snmp-server enable traps This command enables the acl trap. Syntax snmp-server enable traps acl-trapflags no snmp-server enable traps acl-trapflags no - This command disables the acl trap. Default Setting...
  • Page 210 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting Enabled Command Mode Global Config This command enables Link Up/Down traps for the entire switch. W hen enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command).
  • Page 211 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables Captive Portal traps.. Syntax snmp-server enable traps captive-portal no snmp-server enable traps captive-portal no - This command disables Captive Portal trap. Default Setting Disabled Command Mode Global Config This command enables OSPF traps.
  • Page 212 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables OSPFv3 traps. Syntax snmp-server enable traps ospfv3 {all | errors {all | authentication-failure | bad-packet | config-error | virtauthentication-failure | virt-bad-packet | virt-config-error} | if-rx {all | if-rx-packet} | lsa {all |...
  • Page 213 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables the sending of new root traps and topology change notification traps. Syntax snmp-server enable traps stpmode no snmp-server enable traps stpmode no - This command disables the sending of new root traps and topology change notification traps.

  • Page 214: Snmp Trap Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6 SNMP Trap Commands 6.3.6.1 show snmptrap This command displays SNMP trap receivers. Trap messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network.
  • Page 215 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.2 snmptrap snmpversion This command configures the version for snmp trap. Syntax snmptrap snmpversion <name> <ipAddr|ipv6Addr|hostname> <snmpversion> <name> - SNMP trap name (Range: up to 16 case-sensitive alphanumeric characters). < ipAddr|ipv6Addr|hostname> - an IPv4 or IPv6 address or hostname of the trap receiver.
  • Page 216 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.3 snmp trap link-status This command enables link status traps by interface. This command is valid only when the Link Up/Down Flag is enabled. See ‘snmpserver enable traps linkmode’ command.
  • Page 217 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.4 snmptrap <name> <ipAddr|ipv6Addr|hostname> This command adds an SNMP trap name. The maximum length of the name is 16 case-sensitive alphanumeric characters. Syntax snmptrap <name> <ipAddr|ipv6Addr|hostname> { port <port> | snmpversion <snmpversion> } no snmptrap <name>...
  • Page 218 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.5 snmptrap ipaddr <name> <ipAddr|ipv6Addr|hostname> <new ipAddr|ipv6Addr|hostname> This command changes the IP address of the trap receiver for the specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters.
  • Page 219 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.6 snmptrap mode This command activates or deactivates an SNMP trap. Enabled trap receivers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps).
  • Page 220 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.8 snmp-server enable informs This command enables snmp inform. Syntax snmp-server enable informs no snmp-server enable informs no - This command disables snmp inform. Default Setting Enabled Command Mode Global Config...
  • Page 221 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.9 snmp-server inform This command configures snmp inform retries. Syntax snmp-server inform retries <retries> no snmp-server informs retries <retries> - Number of times to retry an Inform request. The range is between 0 and 100.
  • Page 222 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.10 snmp-server engineID This command configures snmp engineID. Syntax snmp-server engineID remote <ipAddr|ipv6Addr> <engineid-string> no snmp-server engineID remote <ipAddr|ipv6Addr> <engineid-string> <ipAddr|ipv6Addr> - Enter IP or IPv6 address of the remote device.

  • Page 223: Snmp Inform Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7 SNMP Inform Commands 6.3.7.1 show snmpinform This command displays SNMP inform receivers. SNMP Inform messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network.
  • Page 224 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.2 snmpinform version This command configures the version for snmp inform. Syntax snmpinform version <name> <ipAddr|ipv6Addr|hostname> <version> <name> - SNMP trap name (Range: up to 16 case-sensitive alphanumeric characters). <ipAddr|ipv6Addr|hostname> - an IPv4 or IPv6 address or hostname of the inform receiver.
  • Page 225 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.4 snmpinform ipaddr <name> <ipAddr|ipv6Addr|hostname> <new ipAddr|ipv6Addr|hostname> This command changes the IP address of the inform receiver for the specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters.
  • Page 226 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.5 snmpinform mode This command activates or deactivates an SNMP inform. Enabled inform receivers are active (able to receive informs). Disabled inform receivers are inactive (not able to receive informs).

  • Page 227: Http Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8 HTTP commands 6.3.8.1 show ip http This command displays the http settings for the switch. Syntax show ip http Default Setting None Command Mode Privileged Exec Display Message HTTP Mode (Unsecure): This field indicates whether the HTTP mode is enabled or disabled.
  • Page 228 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.2 ip javamode This command specifies whether the switch should allow access to the Java applet in the header frame of the W eb interface. When access is enabled, the Java applet can be viewed from the Web interface.
  • Page 229 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.4 ip http server This command enables access to the switch through the W eb interface. When access is enabled, the user can login to the switch from the Web interface. When access is disabled, the user cannot login to the switch's Web server.
  • Page 230 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.6 ip http secure-server This command is used to enable the secure socket layer for secure HTTP. Syntax ip http secure-server no ip http secure-server no - This command is used to disable the secure socket layer for secure HTTP.

  • Page 231: Secure Shell (Ssh) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9 Secure Shell (SSH) Commands 6.3.9.1 show ip ssh This command displays the SSH settings. Syntax show ip ssh Default Setting None Command Mode Privileged Exec Display Message Administrative Mode: This field indicates whether the administrative mode of SSH is enabled or disabled.
  • Page 232 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9.2 ip ssh This command is used to enable SSH. Syntax ip ssh no ip ssh no - This command is used to disable SSH. Default Setting Disabled Command Mode Global Config 6.3.9.3...
  • Page 233 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9.4 ip ssh maxsessions This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5.

  • Page 234: Management Security Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.10 Management Security Commands 6.3.10.1 crypto certificate generate This commands is used to generation self-signed certificate for HTTPS. Syntax crypto certificate generate no crypto certificate generate no- This command is used to delete the HTTPS certificate file from the device, regardless of whether they are self-signed or download from an outside source.

  • Page 235: Dhcp Client Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.11 DHCP Client Commands 6.3.11.1 ip dhcp restart This command is used to initiate a BOOTP or DCHP client request. Syntax ip dhcp restart Default Setting None Command Mode Global Config 6.3.11.2...

  • Page 236: Dhcpv6 Client Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.12 DHCPv6 Client Commands 6.3.12.1 ipv6 address protocol This command specifies the network of IPv6 configuration protocol to be used . If you modify this value, the change is effective immediately.
  • Page 237 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.12.3 serviceport protocol This command specifies the service port configuration protocol to be used. If you modify this value, the change is effective immediately. Syntax serviceport protocol {bootp | dhcp | dhcp6 | none [dhcp6]} <bootp>...

  • Page 238: Dhcp Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.13 DHCP Relay Commands 6.3.13.1 show bootpdhcprelay This command is used to display the DHCP relay agent configuration information on the system. Syntax show bootpdhcprelay Default Setting None Command Mode...
  • Page 239 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.13.2 bootpdhcprelay maxhopcount This command is used to set the maximum relay agent hops for BootP/DHCP Relay on the system. Syntax bootpdhcprelay maxhopcount <1-16> no bootpdhcprelay maxhopcount <1-16> - maximum number of hops. (Range: 1-16).

  • Page 240: Sflow Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14 sFlow Commands 6.3.14.1 show sflow agent The user can go to the CLI Privilege Exec to get the sFlow agent information, use the show sflow agent Privilege command. Syntax...
  • Page 241 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.3 show sflow receivers The user can go to the CLI Privilege Exec to get the configuration information related to the sFlow receivers, use the show sflow receivers Privilege command.
  • Page 242 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.4 show sflow samplers The user can go to the CLI Privilege Exec to get the sFlow sampling instances created on the switch, use the show sflow samplers Privilege command.
  • Page 243 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.5 show sflow rate Use this command to display the sFlow traffic rate summary on the switch. Syntax show sflow rate interface [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 244 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.6 set sflow rate The user can go to the CLI Interface Configuration Mode to set sampling rate, use the sflow rate <0-3600> interface configuration command. Use the no sflow rate return to default value zero.
  • Page 245 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.8 set sflow maximum datagram size The user can go to the CLI Global Configuration Mode to set maximum datagram size, use the sflow receiver <index> maxdatagram <200-9116> global configuration command. Use the no sflow receiver <index>...
  • Page 246 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.10 set sflow receiver port The user can go to the CLI Global Configuration Mode to set collector UDP port, use the sflow receiver <index> port <1-65535> global configuration command. Use the no sflow collector-port return to default UDP port 6343.
  • Page 247 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.12 set sflow sampler index The user can go to the CLI Interface Configuration Mode to configure a new sFlow sampler instance, use the sflow sampler <index> interface configuration command. Use the no sflow sampler return to default setting.

  • Page 248: Service Port Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15 Service Port Commands 6.3.15.1 show serviceport This command displays service port configuration information. Syntax show serviceport Default Setting None Command Mode Privileged Exec Display Message Interface Status: Indicates whether the interface is up or down.
  • Page 249 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.2 show serviceport ndp This command displays IPv6 Neighbor entries. Syntax show serviceport ndp Default Setting None Command Mode Privileged Exec Display Message IPv6 Address: Specifies the IPv6 address of neighbor or interface.
  • Page 250 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.3 serviceport ip This command sets the IP address, the netmask and the gateway of the network management port. Syntax serviceport ip <ipaddr> <netmask> <ipaddr> - The user manually configures IP address for this switch.
  • Page 251 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.5 serviceport ipv6 enable Use this command to enable IPv6 operation on the service port. Syntax serviceport ipv6 enable no serviceport ipv6 enable no - This command is disable IPv6 operation on the service port.
  • Page 252 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.7 serviceport ipv6 gateway Use this command to configure IPv6 gateway (i.e. Default routers) information for the service port. Syntax serviceport ipv6 gateway <gateway-address> no serviceport ipv6 gateway <gateway-address>: Gateway address in IPv6 global or link-local address format.

  • Page 253: Time Range Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16 Time Range Commands Time-based ACLs allow one or more rules within an ACL to be based on time. Each ACL rule within an ACL except for the implicit deny all rule can be configured to be active and operational only during a specific time period.
  • Page 254 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2 Configuration Commands 6.3.16.2.1 time-range Use this command to create a time range identified by name, consisting of one absolute time entry and/or one or more periodic time entries. The name parameter is a case-sensitive, alphanumeric string from 1 to 31 characters that uniquely identifies the time range.
  • Page 255 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2.2 absolute Use this command to add an absolute time entry to a time range. Only one absolute time entry is allowed per time-range. The time parameter is based on the currently configured time zone.
  • Page 256 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2.3 periodic Use this command to add a periodic time entry to a time range. The time parameter is based off of the currently configured time zone. The first occurrence of the days-of-the-week argument is the starting day(s) from which the configuration that referenced the time range starts going into effect.

  • Page 257: Spanning Tree Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Spanning Tree Commands This section provides detailed explanation of the spanning tree commands. The commands are divided into two functional groups:  Show commands display spanning tree settings, statistics, and other information.
  • Page 258 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Bridge Forwarding Delay: A timeout value to be used by all Bridges in the Bridged LAN. The value of Forward Delay is set by the Root. Hello Time: The time interval between the generations of Configuration BPDUs.
  • Page 259 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. STP BPDUs Transmitted: Spanning Tree Protocol Bridge Protocol Data Units sent. STP BPDUs Received: Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Transmitted: Rapid Spanning Tree Protocol Bridge Protocol Data Units sent.
  • Page 260 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.4 show spanning-tree mst This command displays settings and parameters for the specified multiple spanning tree instance. The instance <0-4094> is a number that corresponds to the desired existing multiple spanning tree instance ID.
  • Page 261 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays summary information about all multiple spanning tree instances in the switch. On execution, the following details are displayed. Syntax show spanning-tree mst summary Default Setting None Command Mode...
  • Page 262 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port Role: Indicate the port role is root or designate. Auto-calculate Port Path Cost: Indicate the port auto-calculate port path cost. Port Path Cost: Configured value of the Internal Port Path Cost parameter.
  • Page 263 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter <0-4094> indicates a particular MST instance. The parameter {<slot/port>} indicates the desired switch port.
  • Page 264 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.5 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Syntax show spanning-tree summary Default Setting...
  • Page 265 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.6 show spanning-tree brief This command displays spanning tree settings for the bridge. In this case, the following details are displayed. Syntax show spanning-tree brief Default Setting None Command Mode...

  • Page 266: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2 Configuration Commands 6.4.2.1 spanning-tree This command sets the spanning-tree operational mode to be enabled. Syntax spanning-tree no spanning-tree no - This command sets the spanning-tree operational mode to be disabled. W hile disabled, the spanning-tree configuration is retained and can be changed, but is not activated.
  • Page 267 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.3 spanning-tree configuration This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The <name> is a string of at most 32 alphanumeric characters.
  • Page 268 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.4 spanning-tree mode This command sets the Force Protocol Version parameter to a new value. The Force Protocol Version can be one of the following: 1. stp - ST BPDUs are transmitted rather than MST BPDUs (IEEE 802.1d functionality supported) 2.
  • Page 269 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.6 spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to "2 times (Bridge Forward Delay - 1)"...
  • Page 270 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.8 spanning-tree hold-count This command sets the Bridge Tx Hold Count parameter to a new value for the common and internal spanning tree. The Tx Hold Count value is in a range of 1 to 110.
  • Page 271 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the bridge priority for a specific multiple spanning tree instance. The instance <mstid> is a number that corresponds to the desired existing multiple spanning tree instance. The priority value is a number within a range of 0 to 61440 in increments of 4096.
  • Page 272 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command removes an association between a multiple spanning tree instance and a VLAN. The VLAN will again be associated with the common and internal spanning tree. The instance <0-4094>...
  • Page 273 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree. If the <1-4094> parameter corresponds to an existing multiple spanning tree instance, then the configurations are done for that multiple spanning tree instance.
  • Page 274 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.10 spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Syntax spanning-tree port mode no spanning-tree port mode no - This command sets the Administrative Switch Port State for this port to disabled.
  • Page 275 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.11 spanning-tree auto-edge This command sets the auto-edge for this port to enabled. Syntax spanning-tree auto-edge no spanning-tree auto-edge no - This command sets the auto-edge for this port to disabled.
  • Page 276 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command specifies that this port is an Edge Port within the common and internal spanning tree. This will allow this port to transition to Forwarding State without delay. Syntax...
  • Page 277 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Edgeport BPDU Guard enable/disable parameter for accepting BPDUs on this switch. This command only works on dot1d mode. Syntax spanning-tree edgeport bpduguard no spanning-tree edgeport bpduguard no - This command sets the Edgeport BPDU Guard to the default value, that is, Disabled.
  • Page 278 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Edgeport BPDU Guard enable/disable parameter for accepting BPDUs on this interface. This command only works on dot1d mode. Syntax spanning-tree bpduguard no spanning-tree bpduguard no - This command sets the Edgeport BPDU Guard to the default value, that is, Disabled.
  • Page 279 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.14 spanning-tree guard {loop|none|root} This command sets the Guard Mode parameter to a new value on this interface. Syntax spanning-tree guard {loop|none|root} no spanning-tree guard loop –This command sets the Guard Mode to loop guard on this interface.

  • Page 280: System Log Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. System Log Management Commands 6.5.1 Show Commands 6.5.1.1 show logging This command displays logging. Syntax show logging Default Setting None Command Mode Privileged Exec Display Message Logging Client Local Port The port on the collector/relay to which syslog messages are sent CLI Command Logging The mode for CLI command logging.
  • Page 281 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.1.2 show logging buffered This command displays the message log maintained by the switch. The message log contains system trace information. Syntax show logging buffered Default Setting None Command Mode...
  • Page 282 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Trap: The relevant information of this trap. Trap log information is not retained across a switch reset. 6.5.1.4 show logging hosts This command displays all configured logging hosts. Syntax show logging hosts...

  • Page 283: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2 Configuration Commands 6.5.2.1 logging buffered This command enables logging to in-memory log where up to 128 logs are kept. Syntax logging buffered no logging buffered no - This command disables logging to in-memory log.
  • Page 284 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.2 logging console This command enables logging to the console. Syntax logging console [<severitylevel> | <0-7>] no logging console [<severitylevel> | <0-7>] - The value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
  • Page 285 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.4 terminal monitor This command enables logging for the terminal session. Syntax terminal monitor no terminal monitor no - This command disables logging for the terminal session. Default Setting None...
  • Page 286 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command disables logging to hosts. Syntax logging host remove <hostindex> <hostindex> - Index of the log server. Default Setting None Command Mode Globla Config This command reconfigures the IP address of the log server.
  • Page 287 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.6 logging syslog This command enables syslog logging. Syntax logging syslog no logging syslog no - Disables syslog logging. Default Setting None Command Mode Globla Config This command sets the local port number of the LOG client for logging messages.
  • Page 288 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.7 clear logging buffered This command clears all in-memory log. Syntax clear logging buffered Default Setting None Command Mode Privileged Exec _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 288/1246...

  • Page 289: Script Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Script Management Commands 6.6.1 script apply This command applies the commands in the configuration script to the switch. The apply command backs up the running configuration and then starts applying the commands in the script file. Application of the commands stops at the first failure of a command.

  • Page 290: Script Show

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.2.1 script list This command lists all scripts present on the switch as well as the total number of files present. Syntax script list Default Setting None Command Mode Privileged Exec Display Message Configuration Script Name: The filename of the script file.

  • Page 291: Script Validate

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.4 script validate This command displays the content of a script file. Syntax script validate <scriptname> <scriptname> - Name of the script file. Default Setting None Command Mode Privileged Exec...

  • Page 292: User Account Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. User Account Management Commands 6.7.1 Show Commands 6.7.1.1 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system.
  • Page 293 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.1.2 show users account information The user can go to the CLI Privilege Exec to get all of user information, use the show users accounts Privilege command. Syntax show users accounts...
  • Page 294 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Minimum Password Uppercase Letters: Minimum number of uppercase characters required when changing passwords. Minimum Password Lowercase Letters: Minimum number of lowercase characters required when changing passwords. Minimum Password Numeric Characters: Minimum number of numeric characters required when changing passwords.

  • Page 295: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2 Configuration Commands 6.7.2.1 username This command adds a new user (account) if space permits. The account <username> can be up to eight characters in length. The name may be comprised of alphanumeric characters as well as the dash (‘-’) and underscore (‘_’).
  • Page 296 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.2 Unlock a locked user account The user can go to the CLI Global Configuration Mode to unlock a locked user account, use the username <name> unlock global configuration command.
  • Page 297 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.4 username snmpv3 encryption This command specifies the encryption protocol and key to be used for the specified login user. The valid encryption protocols are none or des. The des protocol requires a key, which can be specified on the command line.
  • Page 298 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.5 Set the password aging The user can go to the CLI Global Configuration Mode to set the password aging, use the passwords aging <1-365> Global configuration command. Use the no passwords aging return to default value 0.
  • Page 299 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.7 Set the password lock-out count The user can go to the CLI Global Configuration Mode to set the password lock-out count, use the passwords lock-out <1-5> Global configuration command. Use the no passwords lock-out to return to default value 0.
  • Page 300 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.9 Set the password strength policy enforcement. The user can go to the CLI Global Configuration Mode to set the password strength policy enforcement, use the passwords strength-check Global configuration command. Use the no passwords strength-check return to default disable.
  • Page 301 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.11 Set the password strength minimum. The user can go to the CLI Global Configuration Mode to set the password strength, use the passwords strength minimum {character-classes | lowercase-letters | numeric-characters | special-characters | uppercase-letters} [<0-15>] Global configuration command.

  • Page 302: Security Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Security Commands 6.8.1 Show Commands 6.8.1.1 show users authentication This command displays all users and all authentication login information. It also displays the authentication login list assigned to the default user.
  • Page 303 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.2 show authentication methods This command displays the ordered authentication methods for all authentication login lists. Syntax show authentication methods Default Setting None Command Mode Privileged Exec Display Message Login Authentication Method Lists: This displays the authentication login listname.
  • Page 304 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.4 show dot1x This command is used to show the status of the dot1x Administrative mode. Syntax show dot1x Default Setting None Command Mode Privileged Exec Display Message Administrative mode: Indicates whether authentication control on the switch is enabled or disabled.
  • Page 305 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.5 show dot1x authentication-history This command is used to display the Dot1x Authentication History Log for the specified port or all ports. Syntax show dot1x authentication-history <all | <slot/port>> Default Setting...
  • Page 306 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.6 show dot1x client This command is used to display client information. Syntax show dot1x clients [<slot/port>] <slot/port> - is the desired interface number. no parameter - All interfaces. Default Setting...
  • Page 307 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.7 show dot1x detail This command is used to show a summary of the global dot1x configuration and the detailed dot1x configuration for a specified port. Syntax show dot1x detail <slot/port>...
  • Page 308 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Vlan ID: The VLAN assigned to the port by the radius server. VLAN Assigned Reason: The reason the VLAN identified in the VLAN-assigned field has been assigned to the port. Possible values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not Assigned.
  • Page 309 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.8 show dot1x statistics This command is used to show a summary of the global dot1x configuration and the dot1x statistics for a specified port. Syntax show dot1x statistics <slot/port>...
  • Page 310 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. EAP Length Error Frames Received: The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized. 6.8.1.9 show dot1x summary This command is used to show a summary of the global dot1x configuration and summary information of the dot1x configuration for a specified port or all ports.
  • Page 311 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.10 show dot1x users This command displays 802.1x port security user information for locally configured users. Syntax show dot1x users <slot/port> <slot/port> - is the desired interface number. Default Setting...
  • Page 312 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.11 show captive-portal This command reports status of the captive portal feature. Syntax show captive-portal Default Setting None Command Mode Privileged Exec Display Message Administrative Mode: Shows whether the CP is enabled.
  • Page 313 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.13 show captive-portal client [macaddr] status This command reports status of the captive portal feature. Syntax show captive-portal client [macaddr] status Default Setting None Command Mode Privileged Exec Display Message Client MAC Address: Identifies the MAC address of the client (if applicable).
  • Page 314 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.14 show captive-portal configuration <cp-id> This command displays the operational status of each captive portal configuration. The <cp-id> variable is the captive portal ID, which ranges from 1-10. Syntax show captive-portal configuration <1-10>...
  • Page 315 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.15 show captive-portal configuration [cp-id] client status This command reports status of the captive portal feature. Syntax show captive-portal configuration [cp-id] client status Default Setting None Command Mode Privileged Exec Display Message CP ID: Shows the captive portal ID the connected client is using.
  • Page 316 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.16 show captive-portal configuration <cp-id> interface [interface] This command displays information for all interfaces assigned to a captive portal configuration or a specific interface assigned to a captive portal configuration.
  • Page 317 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.17 show captive-portal configuration <cp-id> locales This command displays locales associated with a specific captive portal configuration. Syntax show captive-portal configuration <1-10> locales Default Setting None Command Mode Privileged Exec Display Message Locale Code: Two-letter abbreviation for languages.
  • Page 318 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. URL Redirect Mode: Indicates whether the Redirect URL Mode is enabled or disabled. Max Bandwidth Up(bytes/sec): The maximum rate in bytes per second (bps) at which a client can send data into the network.
  • Page 319 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.20 show captive-portal interface capability [slot/port] This command displays all the captive portal eligible interfaces or the interface capabilities for a specific captive portal interface. Syntax show captive-portal interface capability [slot/port]...
  • Page 320 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.21 show captive-portal interface configuration [cp-id] status This command displays the interface to configuration assignments for all captive portal configurations or a specific configuration. Syntax show captive-portal interface configuration [1-10] status...
  • Page 321 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.22 show captive-portal status This command reports status of all captive portal instances in the system. Syntax show captive-portal status Default Setting None Command Mode Privileged Exec Display Message Additional HTTP Port: Displays the port number of the additional HTTP port configured for traffic. A value of 0 indicates that only port 80 is configured for HTTP traffic.
  • Page 322 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.23 show captive-portal trapflags This command shows which captive portal SNMP traps are enabled. Syntax show captive-portal trapflags Default Setting None Command Mode Privileged Exec Display Message Client Authentication Failure Traps: Shows whether the SNMP agent sends a trap when a client attempts to authenticate with a captive portal but is unsuccessful.
  • Page 323 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.24 show captive-portal user [user-id] [group [<group-id>]] This command displays all configured users or a specific user in the captive portal local user database. Enter the optional user ID to view information about the specified user. The [user-id] variable is a valid user configured in the local database.
  • Page 324 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.25 show radius This command is used to display the various RADIUS configuration items for the switch. Syntax show radius Default Setting None Command Mode Privileged Exec Display Message Number of Configured Authentication Servers: The number of RADIUS Authentication servers that have been configured.
  • Page 325 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.26 show radius accounting This command is used to display the configured RADIUS accounting mode, accounting server, and the statistics for the configured accounting server. Syntax show radius accounting [ipaddr| ipv6addr| hostname] | [statistics {<ipaddr| ipv6addr| hostname> | name <servername>}]...
  • Page 326 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Requests: The number of RADIUS Accounting-Request packets sent to this accounting server. This number does not include retransmissions. Retransmission: The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server.
  • Page 327 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.27 show radius servers This command is used to display items of the configured RADIUS servers. Syntax show radius servers [<ipaddr| ipv6addr|hostname>] | [name <servername>] Default Setting None Command Mode...
  • Page 328 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.28 show radius statistics This command is used to display the statistics for RADIUS or configured server. To show the configured RADIUS server statistic, the IP Address specified must match that of a previously configured RADIUS server.
  • Page 329 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Pending Requests - The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. Timeouts - The number of authentication timeouts to this server.
  • Page 330 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.30 show ldap Use this command to display LDAP configuration. Syntax show ldap Default Setting None Command Mode Privileged Exec User Exec Display Message Server Ip: The IP address of LDAP server.
  • Page 331 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.31 show port-security This command shows the port-security settings for the entire system. Syntax show port-security Default Setting None Command Mode Privileged Exec Display Message Port Security Administration Mode: Port lock mode for the entire system.
  • Page 332 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command shows the dynamically locked MAC addresses for port. Syntax show port-security dynamic <slot/port> Default Setting None Command Mode Privileged Exec Display Message MAC address Dynamically locked MAC address.
  • Page 333 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the source MAC address of the last packet that was discarded on a locked port. Syntax show port-security violation <slot/port> Default Setting None Command Mode Privileged Exec Display Message MAC address MAC address of discarded packet on locked ports.

  • Page 334: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2 Configuration Commands 6.8.2.1 aaa authentication login <method> This command creates an authentication login list. The <listname> is up to 12 alphanumeric characters and is not case sensitive. Up to 5 authentication login lists can be configured on the switch.
  • Page 335 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.2 username defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is configured locally.
  • Page 336 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.3 username login This command assigns the specified authentication login list to the specified user for system login. The <username> must be a configured <username> and the <listname> must be a configured login list.

  • Page 337: Dot1X Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3 Dot1x Configuration Commands 6.8.3.1 dynamic-vlan This command enable dot1x dynamic vlan creation configuration. Syntax dot1x dynamic-vlan enable no dot1x dynamic-vlan enable Default Setting None Command Mode Global Config 6.8.3.2 dot1x port-control This command sets the authentication mode to be used on all ports.
  • Page 338 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the authentication mode to be used on the specified port. The control mode may be one of the following. force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized.
  • Page 339 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.3 dot1x system-auth-control This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.
  • Page 340 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.5 dot1x guest vlan This command configures the Guest VLAN capability on the interface. The command specifies an active VLAN as an IEEE 802.1x guest VLAN. Syntax dot1x guest- vlan <vlan-id>...
  • Page 341 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.7 dot1x max-user This command configures the maximum users to a specified port, The system’s default maximum users of an interface has no limitation. If ‘no dot1x max-users’ command is executed, the system will reset the maximum users to infinity.
  • Page 342 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.9 dot1x re-authentication This command enables re-authentication of the supplicant for the specified port. Syntax dot1x re-authentication no dot1x re-authentication no - This command disables re-authentication of the supplicant for the specified port.
  • Page 343 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.11 dot1x supplicant port-control This command set the authentication mode on the specified port. Syntax dot1x supplicant port-control < auto| force-authorized|force-unauthorized> no dot1x supplicant port-control Default Setting auto Command Mode Interface Config 6.8.3.12...
  • Page 344 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.13 dot1x supplicant timeout held-period This command configure the held period value. Syntax dot1x supplicant timeout held-period <seconds> no dot1x supplicant timeout held -period <seconds> - Range: 1-65535. Default Setting...
  • Page 345 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.3.15 dot1x supplicant user This command configure Supplicant user. Syntax dot1x supplicant user <user> no dot1x supplicant user <user> Default Setting None Command Mode Interface Config 6.8.3.16 dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port.
  • Page 346 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Syntax dot1x timeout {guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} <seconds> no dot1x timeout { guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} <seconds>...

  • Page 347: Captive Portal Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4 Captive Portal Commands 6.8.4.1 captive-portal mode Use this command to enter the Captive Portal Configuration Mode. Syntax captive-portal Default Setting Command Mode Global Config 6.8.4.2 captive-portal authentication timeout This command configures the authentication timeout. If the captive portal user does not enter valid credentials within this time limit, the authentication page needs to be served again in order for the client to gain access to the network.
  • Page 348 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.3 captive-portal configuration mode Use this command to enter the Captive Portal Instance Mode. The captive portal configuration, identified by CP ID 1, is the default CP configuration. You can create up to nine additional captive portal configurations.
  • Page 349 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.5 Captive-portal http port This command configures an additional HTTP port. Valid port numbers are in the range of 0-65535, excluding port numbers 80 and 443 which are reserved. The HTTP port default is 0 which denotes no additional port and the default port (80) is used.
  • Page 350 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.7 Captive-portal trapflags This command enables captive portal SNMP traps. If no parameters are specified, then all traps are enabled. SNMP traps can also be enabled individually by supplying the optional parameters.
  • Page 351 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.9 Captive Portal user idle timeout This command sets the session idle timeout value for the associated captive portal user. The <user-id> variable is the ID of a user configured in the local database, and is a number in the range of 1 to 128.
  • Page 352 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.11 Captive Portal max up/transmit bandwidth This command is used to configure the bandwidth in bytes per second (bps) at which the client can send data into the network. 0 denotes using the default value configured for the captive portal.
  • Page 353 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.13 Captive Portal max bytes allowed to output/transmit This command is used to limit the number of octets in bytes that the user is allowed to receive. After this limit has been reached, the user will be disconnected. 0 octets denote unlimited transmission.
  • Page 354 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.15 Captive Portal user name This command assigns a name to the User ID. This name is used at the client station for authentication. The <user-id> variable is the local user ID created with the user command and can be from 1 to 128 characters.
  • Page 355 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.17 Captive Portal user session timeout This command configures the session timeout for a captive portal configuration. The <timeout> variable is a number that represents the session timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 356 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.19 Captive Portal Move users between existing user groups This command moves existing users from one user group to another. Note that the destination group must already exist before a move is successful. The <group-id> and <destination-group-id> variables are each a number in the range of 1-10.
  • Page 357 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.21 Captive Portal configuration background color Use this command to customize the background color of the Captive Portal authentication page using a wellknown color name or RGB value. For example, red or RGB hex-code, i.e. #FF0000.The range of <colorcode>...
  • Page 358 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.23 Captive Portal clear configuration This command sets the configuration for this instance to the default values. Syntax clear Default Setting None Command Mode Captive Portal Instance 6.8.4.24 Captive Portal Enable/Disable configuration This command enables a captive portal configuration.
  • Page 359 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.25 Captive Portal configuration foreground color Use this command to customize the foreground color of the Captive Portal authentication page using a wellknown color name or RGB value. For example, red or RGB hex-code, i.e. #FF0000.The range of <colorcode>...
  • Page 360 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.27 Captive Portal configuration idle timeout This command configures the idle timeout for a captive portal configuration. The <timeout> variable is a number that represents the idle timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 361 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.29 Captive Portal configuration enter locale mode This command is not intended to be a user command. The administrator must use the WEB user interface to create and customize captive portal web content. The command is primarily used by the FASTPATH show running config command and process as it provides the ability to save and restore configurations using a textbased format.
  • Page 362 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.31 Captive Portal configuration max up/transmit bandwidth This command configures the maximum rate at which a client can send data into the network. Syntax max-bandwidth-up <0-536870911> no max-bandwidth-up Default Setting...
  • Page 363 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.33 Captive Portal configuration max bytes allowed to output/receive This command configures the maximum number of octets the user is allowed to receive. After this limit has been reached the user will be disconnected. If the value is set to 0 then the limit is not enforced.
  • Page 364 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.35 Captive Portal configuration name This command configures the name for a captive portal configuration. The name can contain up to 32 alphanumeric characters. Syntax name <cp-name> no name Default Setting...
  • Page 365 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.37 Captive Portal configuration RADIUS authentication server Use this command to configure a captive portal configuration RADIUS authentication server. Syntax radius-auth-server <server-name> no radius-auth-server Default Setting Disable Command Mode Captive Portal Instance 6.8.4.38...
  • Page 366 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.39 Captive Portal configuration redirect mode redirect URL Use this command to specify the URL to which the newly authenticated client is redirected if the URL Redirect Mode is enabled. This command is only available if the redirect mode is enabled.
  • Page 367 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.41 Captive Portal configuration session timeout This command configures the session timeout for a captive portal configuration. The <timeout> variable is a number that represents the session timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 368 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.43 Captive Portal configuration verification mode This command configures the verification mode for a captive portal configuration. The type of user verification to perform can be one of the following: ‧...
  • Page 369 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.45 Captive Portal configuration user acceptance text This command is to Captive Portal configuration user acceptance text. Syntax accept-text <UTF-16> no accept-text Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.46...
  • Page 370 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.47 Captive Portal configuration label name for accounting identification This command is to Captive Portal configuration label name for accounting identification. Syntax account-label <UTF-16> no account-label Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.48...
  • Page 371 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.49 Captive Portal image name for background appearence This command is to Captive Portal configuration image name for background appearence. Syntax background-image <image-name> no background-image Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.50...
  • Page 372 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.51 Captive Portal text intended for browser title This command is to Captive Portal configuration text intended for browser title. Syntax browser-title <UTF-16> no browser-title Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.52...
  • Page 373 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.53 Captive Portal locale code This command is to Captive Portal configuration locale code. Syntax code <locale-code> no code Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.54 Captive Portal denied error message This command is to Captive Portal configuration denied error message.
  • Page 374 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.55 Captive Portal preferred fonts for this locale This command is to Captive Portal configuration preferred fonts for this locale. Syntax font-list <font,font> no font-list Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.56...
  • Page 375 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.57 Captive Portal locale link text for user identification This command is to Captive Portal configuration locale link text for user identification. Syntax link <UTF-16> no link Default Setting None...
  • Page 376 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.59 Captive Portal text for logout button This command is to Captive Portal configuration text for logout button. Syntax logout-button-label <UTF-16> no logout-button-label Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.60...
  • Page 377 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.61 Captive Portal image name for background appearence This command is to Captive Portal configuration image name for background appearence. Syntax logout-success-background-image <image-name> no logout-success-background-image Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.62...
  • Page 378 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.63 Captive Portal text for logout success content This command is to Captive Portal configuration text for logout success content. Syntax logout-success-text <UTF-16> no logout-success-text Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.64...
  • Page 379 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.65 Captive Portal text for logout instructions This command is to Captive Portal configuration text for logout instructions. Syntax logout-text <UTF-16> no logout-text Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.66...
  • Page 380 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.67 Captive Portal text to remind user to allow popups from our web site This command is to Captive Portal configuration text to remind user to allow popups from our web site.
  • Page 381 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.69 Captive Portal error message indicating authentication timeout This command is to Captive Portal configuration error message indicating authentication timeout. Syntax timeout-msg <UTF-16> no timeout-msg Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.70...
  • Page 382 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.71 Captive Portal user input label This command is to Captive Portal configuration user input label. Syntax user-label <UTF-16> no user-label Default Setting None Command Mode Captive Portal Locale Mode 6.8.4.72...
  • Page 383 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.73 Captive Portal main title used to greet user This command is to Captive Portal configuration main title used to greet user. Syntax welcome-title <UTF-16> no welcome-title Default Setting None...
  • Page 384 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.75 Radius Configuration Commands 6.8.4.76 radius accounting mode This command is used to enable the RADIUS accounting function. Syntax radius accounting mode no radius accounting mode no - This command is used to set the RADIUS accounting function to the default value - that is, the RADIUS accounting function is disabled.
  • Page 385 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.78 radius server attribute 4 This command to set the NAS-IP address for the radius server. Syntax radius server attribute 4 <ipaddr>no radius server attribute 4 no – use this command to reset the NAS-IP address for the radius server.
  • Page 386 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.80 radius server dead-time This command cnfiguresradius server dead time. Syntax radius server dead-time <minutes> no radius server dead-time minutes - Set radius server dead time (sec). Range 0 - 2000.
  • Page 387 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. <servername> - Server name <port> - Port number (Range: 1 – 65535) no - This command is used to remove the configured RADIUS authentication server or the RADIUS accounting server. If the 'auth' token is used, the previously configured RADIUS authentication server is removed from the configuration.
  • Page 388 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.83 radius server retransmit This command sets the maximum number of times a request packet is re-transmitted when no response is received from the RADIUS server. The retries value is an integer in the range of 1 to 15.
  • Page 389 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.4.85 radius server msgauth This command enables the message authenticator attribute for a specified server. Syntax radius server msgauth <ipaddr| ipv6addr| hostname > <ipaddr| ipv6addr| hostname > - is a IPv4/v6 address or hostname.

  • Page 390: Tacacs+ Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.5 TACACS+ Configuration Commands 6.8.5.1 tacacs-server host This command is used to enable /disable TACACS+ function and to configure the TACACS+ server IP address. The system has not any TACACS+ server configured for its initialization and support 5 TACACS+ servers.
  • Page 391 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ authentication and encryption key. Syntax key [<key-string> | encrypted <key-string>] Note that the length of the secret key is up to 128 characters.
  • Page 392 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ authentication host priority. Syntax priority [<priority>] <priority> - The valid priority number. Range (0 – 65535)> Default Setting Command Mode TACACS Host Config 6.8.5.3...
  • Page 393 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ connection timeout value. Syntax timeout [<timeout>] <timeout> - The connection timeout value. Max timeout (Range: 1 to 30). Default Setting Command Mode...

  • Page 394: Ldap Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.6 LDAP Configuration Commands 6.8.6.1 ldap baseDN Use this command to indicate the base DN. Syntax ldap baseDN <baseDN> no ldap baseDN <baseDN> - The top level of the LDAP directory tree.
  • Page 395 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.6.3 ldap port Use this command to indicate the port number that server are listening. Syntax ldap baseDN <port> no ldap port <port> - Range from 1 to 65535. no - Use no command to default value.
  • Page 396 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.6.5 ldap racName Use this command to indicate which attribute that store the user name. Syntax ldap racName < racName> no ldap racName <racName> - The attribute that store the user name.

  • Page 397: Port Security Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.7 Port Security Configuration Commands 6.8.7.1 port-security This command enables port locking at the system level (Global Config) or port level (Interface Config). Syntax port-security no port-security Default Setting None...
  • Page 398 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.7.3 port-security max-static This command sets the maximum number of statically locked MAC addresses allowed on a specific port. Syntax port-security max-static [<0-20>] no port-security max-static no - This command resets the maximum number of statically locked MAC addresses allowed on a specific port to its default value.
  • Page 399 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.7.5 port-security mac-address move This command converts dynamically locked MAC addresses to statically locked addresses. Syntax port-security mac-address move Default Setting None Command Mode Interface Config 6.8.7.6 port-security violation shutdown This command configures the port violation shutdown mode.

  • Page 400: Denial Of Service Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8 Denial Of Service Commands 6.8.8.1 Show Commands 6.8.8.1.1 show dos-control This command displays the Denial of Service configurations for the entire system. Syntax show dos-control Default Setting None Command Mode...
  • Page 401 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2 Configuration Commands 6.8.8.2.1 dos-control sipdip This command enables Source IP Address = Destination IP Address (SIP=DIP) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
  • Page 402 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.3 dos-control firstfrag This command enables IP First Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having More Fragments(MF) equal to 1 and coorperate with other DoS options, the packets will be dropped if the mode is enabled.
  • Page 403 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.5 dos-control l4port This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having Source TCP/UDP Port Number equal to Destination TCP/UDP Port Number, the packets will be dropped if the mode is enabled.
  • Page 404 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.7 dos-control udpport This command enables the UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack.
  • Page 405 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.9 dos-control icmpv6 This command enables Maximum ICMPv6 Payload Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMP Echo Request (PING) packets ingress having a payload size greater than the configured value, the packets will be dropped if the mode is enabled.
  • Page 406 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.11 dos-control icmpv6 This command enables Maximum ICMPV6 Payload Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMPV6 Echo Request (PING) packets ingress having a payload size greater than the configured value, the packets will be dropped if the mode is enabled.
  • Page 407 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.13 dos-control smacdmac This command enables the Source MAC address = Destination MAC address (SMAC=DMAC) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SMAC=DMAC, the packets will be dropped if the mode is enabled.
  • Page 408 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.15 dos-control tcpflagseq This command enables the TCP Control Flags=0 and SEQ=0 checking Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Control Flags set to 0 and TCP Sequence Number set to 0, the packets will be dropped if the mode is enabled.
  • Page 409 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.17 dos-control tcpsynfin This command enables the TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flags SYN and FIN set, the packets will be dropped if the mode is enabled.
  • Page 410 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.8.2.19 dos-control all This command enables the Denial of Service protection checks globally. Syntax dos-control all no dos-control all no - This command disables the Denial of Service protection checks globally.

  • Page 411: Cdp (Cisco Discovery Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. CDP (Cisco Discovery Protocol) Commands 6.9.1 Show Commands 6.9.1.1 show cdp This command displays the CDP configuration information. Syntax show cdp Default Setting None Command Mode Privileged Exec Display Message...
  • Page 412 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.2 show cdp neighbors This command displays the CDP neighbor information. Syntax show cdp neighbors Default Setting None Command Mode Privileged Exec Display Message Device Id: Identifies the device name in the form of a character string.
  • Page 413 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.3 show cdp neighbors detail This command displays the CDP neighbor detail information. Syntax show cdp neighbors detail Default Setting None Command Mode Privileged Exec Display Message Device Id: Identifies the device name in the form of a character string.
  • Page 414 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.4 show cdp traffic This command displays the CDP traffic counters information. Syntax show cdp traffic Default Setting None Command Mode Privileged Exec Display Message Incoming packet number: Received legal CDP packets number from neighbors.

  • Page 415: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.2 Configuration Commands 6.9.2.1 This command is used to enable CDP Admin Mode. Syntax no cdp no - This command is used to disable CDP Admin Mode. Default Setting Enabled...
  • Page 416 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to enable CDP for all interfaces. Syntax cdp run all no cdp run all all - All interfaces. no - This command is used to disable CDP for all interfaces.
  • Page 417 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.2.4 cdp holdtime This command is used to configure the hold time (seconds) of CDP. Syntax cdp holdtime <10-255> <10-255> - interval time (Range: 10 – 255). no - This command is used to hold time to the default value.

  • Page 418: Sntp (Simple Network Time Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10 SNTP (Simple Network Time Protocol) Commands 6.10.1 Show Commands 6.10.1.1 show sntp This command displays the current time and configuration settings for the SNTP client, and indicates whether the local time has been properly updated.
  • Page 419 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Privileged Exec Display Message Client Supported Modes Supported SNTP Modes (Broadcast, Unicast, or Multicast). SNTP Version The highest SNTP version the client supports. Port SNTP Client Port Client Mode: Configured SNTP Client Mode.
  • Page 420 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port Server Port Number Last Attempt Time Last server attempt time for the specified server Last Update Status Last server attempt status for the Server Total Unicast Requests Number of requests to the server...

  • Page 421: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2 Configuration Commands 6.10.2.1 sntp broadcast client poll-interval This command will set the poll interval for SNTP broadcast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 10.
  • Page 422 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.2 sntp client mode This command will enable Simple Network Time Protocol (SNTP) client mode and optionally setting the mode to either broadcast, multicast, or unicast. Syntax sntp client mode [broadcast | unicast | multicast] no sntp client mode no - This command will disable Simple Network Time Protocol (SNTP) client mode.
  • Page 423 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.4 sntp unicast client poll-interval This command will set the poll interval for SNTP unicast clients in seconds. Syntax sntp unicast client poll-interval <6-10> no sntp unicast client poll-interval <6-10> - Polling interval. It's 2^(value) seconds where value is 6 to 10.
  • Page 424 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.6 sntp unicast client poll-retry This command will set the poll retry for SNTP unicast clients in seconds. Syntax sntp unicast client poll-retry <poll-retry> no sntp unicast client poll-retry < poll-retry> - Polling retry in seconds. The range is 0 to 10.
  • Page 425 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.7 sntp server This command configures an SNTP server (with a maximum of three) where the server address can be an ip address or a domain name and the address type either IPv4, IPv6, dnsv6 or dns. The optional priority can be a value of 1-3, the version is a value of 1-4, and the port id is a value of 1-65535.
  • Page 426 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.8 sntp clock timezone This command sets the time zone for the switch’s internal clock. Syntax sntp clock timezone <name> <0-12> <0-59> {before-utc | after-utc} <name> - Name of the time zone, usually an acronym. (Range: 1-15 characters) <0-12>...

  • Page 427: Mac-Based Voice Vlan Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11 MAC-Based Voice VLAN Commands 6.11.1 Show Commands 6.11.1.1 show voice-vlan This command uses to display the configuration status of the Voice VLAN on the switch. Syntax show voice-vlan Default Setting...
  • Page 428 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.1.2 show voice vlan Use this command to display the configuration status of the Voice VLAN on the switch, When the interface parameter is not specified, only the global mode of the Voice VLAN is displayed.

  • Page 429: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2 Configuration Commands 6.11.2.1 voice-vlan This command is used to enable/disable Voice VLAN Admin Mode. Syntax voice-vlan no voice-vlan no - This command is used to disable Voice VLAN Admin Mode.
  • Page 430 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.3 voice-vlan mac This command is used to add a voice device to a Voice VLAN. Syntax voice-vlan mac <mac-address> mask <mac-mask> priority <priority-id> [name <voice-name>] no voice-vlan {mac <mac-address>mask <mac-mask>|name <voice-name>| all} <mac-address>...
  • Page 431 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command configures the Voice VLAN capability on the interface. Syntax voice vlan { <vlanid-id> | dot1p <priority> | none | untagged } no voice vlan <vlan-id> - Configure the IP phone to forward all voice traffic through the specified VLAN.

  • Page 432: Lldp (Link Layer Discovery Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12 LLDP (Link Layer Discovery Protocol) Commands 6.12.1 Show Commands 6.12.1.1 show lldp This command uses to display a summary of the current LLDP configuration. Syntax show lldp Default Setting...
  • Page 433 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.2 show lldp interface This command uses to display a summary of the current LLDP configuration for a specific interface or for all interfaces. Syntax show lldp interface [<slot/port>] <slot/port> - Configs a specific interface.
  • Page 434 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.3 show lldp statistics This command uses to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces. Syntax show lldp statistics [<slot/port>] <slot/port>...
  • Page 435 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. TLV 802.3: Total number of LLDP TLVs received on the port where the type value is 127 and OUI type is 00-12-0F. TLV EVB: Total number of LLDP TLVs received on the port where the type value is 127 and OUI type is 00-1B-3F.
  • Page 436 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.5 show lldp remote-device detail This command uses to display detailed information about remote devices that transmit current LLDP data to an interface on the system. Syntax show lldp remote-device detail <slot/port>...
  • Page 437 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Operational MAU Type: Displays the MAU type. The MAU performs physical layer functions, including digital data conversion from the Ethernet interfaces’ collision detection and bit injection into the network. Power Via MDI MDI Power Support: The MDI power capabilities and status.
  • Page 438 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.6 show lldp local-device This command uses to display summary information about the advertised LLDP local data. This command can display summary information or detail for each interface. Syntax show lldp local-device [<slot/port>] <slot/port>...
  • Page 439 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port ID: Shows the port number that transmitted the LLDPDU. System Name: Shows the system name of the local device. System Description: Describes the local system by identifying the system name and versions of hardware, operating system, and networking software supported in the device.
  • Page 440 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.8 show lldp med The user can go to the CLI Privilege Exec to display a summary of the current LLDP-MED configuration, use the show lldp med Privilege command. Syntax...
  • Page 441 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.9 show lldp med interface The user can go to the CLI Privilege Exec to d display a summary of the current LLDP-MED configuration for a specific interface, use the show lldp med interface [</slot/port>] Privilege command.
  • Page 442 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.10 show lldp med local-device detail The user can go to the CLI Privilege Exec to display detailed information about the LLDP-MED data, use the show lldp med local-device detail <slot/port> Privilege command.
  • Page 443 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Info: Specifies the location information as a string for given type of location id. Extended POE Specifies if local device is a PoE device. Device Type: Specifies power device type.
  • Page 444 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.11 show lldp med remote-device The user can go to the CLI Privilege Exec to d display the summary information about remote devices that transmit current LLDP-MED data to the system. use the show lldp med remote-device [<slot/port>] Privilege command.
  • Page 445 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.12 show lldp med remote-device detail The user can go to the CLI Privilege Exec to d display detailed information about remote devices that transmit current LLDP-MED data to an interface on the system, use the show lldp med remote-device detail <slot/port>...
  • Page 446 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Mfg Name: Specifies manufacturers name of the remote device. Model Name: Specifies model name of the remote device. Asset ID: Specifies asset id of the remote device. Location Specifies if location TLV is received in LLDP frames on this port.

  • Page 447: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2 Configuration Commands 6.12.2.1 lldp notification This command uses to enable remote data change notifications. Syntax lldp notification no lldp notification no - This command is used to disable notifications.
  • Page 448 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.3 lldp receive This command uses to enable the LLDP receive capability. Syntax lldp receive no lldp receive no - This command is used to return the reception of LLDPDUs to the default value.
  • Page 449 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.5 lldp transmit-mgmt This command uses to include transmission of the local system management address information in the LLDPDUs. Syntax lldp transmit-mgmt no lldp transmit-mgmt no - This command is used to cancel inclusion of the management information in LLDPDUs.
  • Page 450 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.7 lldp timers This command is used to set the timing parameters for local data transmission on ports enabled for LLDP. The <interval-seconds> determines the number of seconds to wait between transmitting local data LLDPDUs.
  • Page 451 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.8 lldp tx-delay This command is used to set the timing parameters for data transmission delay on ports enabled for LLDP. The <delay-seconds> determines the number of seconds to wait between transmitting local data LLDPDUs.
  • Page 452 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.10 lldp med confignotification The user can go to the CLI Interface Configuration Mode to set all the ports to send the topology change notification, use the lldp med confignotification Interface configuration command. Use the no lldp med confignotification to disable notifications.
  • Page 453 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.11 lldp med transmit-tlv The user can go to the CLI Interface Configuration Mode to set Type Length Values (TLVs) in the LLDP MED, use the lldp med transmit-tlv [capabilities] [ex-pd] [ex-pse] [inventory] [location][network-policy] Interface configuration command.
  • Page 454 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.12 lldp med all The user can go to the CLI Global Configuration Mode to set LLDP-MED on all the ports, use the lldp med all Global configuration command. Use the no lldp med all to disable LLDP-MED on all the ports.
  • Page 455 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.14 lldp med faststartrepeatcount The user can go to the CLI Global Configuration Mode to set the fast start repeat count, use the lldp med faststartrepeatcount Global configuration command. Use the no lldp med faststartrepeatcount to return the default value 3.
  • Page 456 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.15 lldp med transmit-tlv all The user can go to the CLI Global Configuration Mode to set Type Length Values (TLVs) in the LLDP-MED, use the lldp med transmit-tlv all [capabilities] [ex-pd] [ex-pse] [inventory][location] [network-policy]Global configuration command.

  • Page 457: Vtp (Vlan Trunking Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13 VTP (VLAN Trunking Protocol) Commands 6.13.1 Show Commands 6.13.1.1 show vtp counters This command displays the VTP packet statistics. Syntax show vtp counters Default Setting None Command Mode Privileged Exec...
  • Page 458 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.2 show vtp password This command displays the VTP domain password. Syntax show vtp password Default Setting None Command Mode Privileged Exec Display Message VTP Password: Displays the VTP domain password.
  • Page 459 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. operate in version 1 mode. MD5 digest: Displays the checksum values for the VTP domain status. Configuration last modified: Displays the time stamp of the last configuration modification and the IP address of the switch that caused the configuration change to the database.

  • Page 460: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2 Configuration Commands 6.13.2.1 This command uses to configure global VTP administrative mode. Syntax no vtp no - This command disables global VTP administrative mode. Default Setting Disabled Command Mode...
  • Page 461 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.2 vtp domain This command uses to set VTP administrative domain name. Syntax vtp domain <string> no vtp domain <string> - Configures the string for domain name. (maximum length 32 bytes) no - This command resets the domain name to NULL.
  • Page 462 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.3 vtp mode This command uses to set VTP device mode. There are theree modes you can configure, Client, Server, and Transparent. Syntax vtp mode { client | server | transparent } no vtp mode <client>...
  • Page 463 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.5 vtp password This command uses to configure the VTP administrative domain password. Syntax vtp password <password> no vtp password <password> - Configures VTP administrative domain password.(Max. length 64 bytes) no - This command resets the VTP domain password to default value.
  • Page 464 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.7 vtp trunkport This command uses to configure the adminstrative domain trunk port for all of interfaces. Syntax vtp trunkport all no vtp trunkport all no - This command resets the adminstrative domain trunk port to default value.

  • Page 465: Protected Ports Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14 Protected Ports Commands 6.14.1 Show Commands 6.14.1.1 show switchport protected This command displays the status of all the interfaces, including protected and unprotected interfaces. Syntax show switchport protected [<0-2>]...
  • Page 466 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.1.2 show interface switchport protected This command displays the status of the interface (protected/unprotected) under the groupid. Syntax show interface switchport protected <slot/port> <groupid> Default Setting None Command Mode Privileged Exec Display Message Name: An name of the protected port group.

  • Page 467: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2 Configuration Commands 6.14.2.1 switchport protected This command used to modify a protected port group name. The <groupid> parameter identifies the set of protected ports. Use the name <name> pair to assign a name to the protected port group. The name can be up to 32 alphanumeric characters long, including blanks.

  • Page 468: Static Mac Filtering Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15 Static MAC Filtering Commands 6.15.1 Show Commands 6.15.1.1 show mac-addr-table static This command displays the Static MAC Filtering information for all Static MAC Filters. If you select <all>, all the Static MAC Filters in the system are displayed. If you supply a value for <macaddr>, you must also enter a value for <vlanid>, and the system displays Static MAC Filter information only for that MAC...

  • Page 469: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15.2 Configuration Commands 6.15.2.1 macfilter This command adds a static MAC filter entry for the MAC address <macaddr> on the VLAN <vlanid>. The value of the <macaddr> parameter is a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 470 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15.2.2 macfilter addsrc This command adds the interface to the source filter set for the MAC filter with the MAC address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 471 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15.2.3 macfilter addsrc all This command adds all interfaces to the source filter set for the MAC filter with the MAC address of <macaddr> and <vlanid>. You must specify the <macaddr> parameter as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

  • Page 472: System Utilities

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16 System Utilities 6.16.1 clear 6.16.1.1 clear arp This command causes all ARP entries of type dynamic to be removed from the ARP cache. Syntax clear arp Default Setting None...
  • Page 473 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.3 clear eventlog This command is used to clear the event log, which contains error messages from the system. Syntax clear eventlog Default Setting None Command Mode Privileged Exec 6.16.1.4 clear logging buffered This command is used to clear the message log maintained by the switch.
  • Page 474 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.5 clear config This command resets the configuration to the factory defaults without powering off the switch. The switch is automatically reset when this command is processed. You are prompted to confirm that the reset should proceed.
  • Page 475 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.7 clear counters This command clears the stats for a specified <slot/port> or for all the ports or for the entire switch based upon the argument. Syntax clear counters [<slot/port> | all] <slot/port>...
  • Page 476 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.9 clear cdp This command is used to clear the CDP neighbors information and the CDP packet counters. Syntax clear cdp [traffic] traffic - this command is used to clear the CDP packet counters.
  • Page 477 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.11 clear igmp snooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Database. Syntax clear igmp snooping...
  • Page 478 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.13 clear ip filter This command is used to clear all ip filter entries. Syntax clear ip filter Default Setting None Command Mode Privileged Exec 6.16.1.14 clear dot1x authentication-history This command resets the 802.1x authenticaiton-history.
  • Page 479 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.15 clear dot1x statistics This command resets the 802.1x statistics for the specified port or for all ports. Syntax clear dot1x statistics {all | <slot/port>} <slot/port> - is the desired interface number.
  • Page 480 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.17 clear domain-list This command is used to clear all entries domain names for incomplete host names. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 6.16.1.18 clear hosts This command is used to clear all static host name-to-address mapping.
  • Page 481 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.19 clear port-security dynamic address This command is used to clear the Dynamic MAC address by using the specified port (interface <slot/port>) or mac address (address <mac-addr>). Syntax clear port-security dynamic {address <mac-addr> | interface <slot/port> } <mac-addr>...
  • Page 482 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.21 clear lldp statistics This command will use to reset all LLDP statistics. Syntax clear lldp statistics Default Setting None Command Mode Privileged Exec 6.16.1.22 clear lldp remote-data This command will use to delete all information from the LLDP remote data table.
  • Page 483 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.23 enable passwd This command changes Privileged EXEC password. Syntax enable passwd 0 <password> 0 – Plain text password Default Setting None Command Mode Global Config. 6.16.1.24 enable passwd encrypted This command allows the administrator to transfer the enable password between devices without having to know the password.
  • Page 484 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.25 clear ipv6 neighbors This command will use to clear all entries IPv6 neighbor table or an entry on a specific interface. Use the <slot/port> parameter to specify the interface.
  • Page 485 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.1.27 clear ipv6 dhcp This command will use to clear DHCPv6 statistics for all interfaces or for a specific interface. Use the <slot/port> parameter to specify the interface. Syntax clear ipv6 dhcp {statistics | interface <slot/port> statistics} <slot/port>...

  • Page 486: Copy

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2 copy This command uploads and downloads to/from the switch. Local URLs can be specified using tftp or xmodem. The following can be specified as the source file for uploading from the switch: startup config (startup-config), event log (eventlog), message log (msglog) and trap log (traplog).
  • Page 487 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2.2 Download file to switch Syntax copy <url> startup-config <destfilename> copy <url> image <destfilename> copy <url> {sshkey-rsa1 | sshkey-rsa2 | sshkey-dsa} copy <url> {sslpem-root | sslpem-server | sslpem-dhweak | sslpem-dhstrong} copy <url>...
  • Page 488 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2.3 Write running configuration file into flash Syntax copy running-config startup-config [filename] <filename> - name of the configuration file. Default Setting None Command Mode Privileged Exec 6.16.2.4 This command upload or download the pre-login banner file Syntax copy clibanner <url>...

  • Page 489: Delete

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.3 delete This command is used to delete a configuration or image file. Syntax delete <filename> <filename> - name of the configuration or image file. Default Setting None Command Mode...

  • Page 490: Dir

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.4 This command is used to display a list of files in Flash memory. Syntax dir [config | opcode [<filename>] ] <filename> - name of the configuration or image file.

  • Page 491: Whichboot

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.5 whichboot This command is used to display which files were booted when the system powered up. Syntax whichboot Default Setting None Command Mode Privileged Exec 6.16.6 boot-system This command is used to specify the file or image used to start up the system.

  • Page 492: Ping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.7 ping 6.16.7.1 ping <ipaddress|host> This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 493 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.7.2 ping ipv6 <ipv6-address|hostname> This command use to determine whether another computer is on the network. To use the command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 494 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.7.3 ping ipv6 interface This command use to determine whether another computer is on the network. To use the command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.

  • Page 495: Traceroute

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.8 traceroute 6.16.8.1 traceroute Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. Traceroute continues to provide a synchronous response when initiated from the CLI.
  • Page 496 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.8.2 traceroute ipv6 This command is used to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. The <ipv6-address|hostname> parameter must be a valid IPv6 address|hostname.

  • Page 497: Logging Cli-Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.9 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch to log all Command Line Interface (CLI) commands issued on the system.

  • Page 498: Calendar Set

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.10 calendar set This command is used to set the system clock. Syntax calendar set <mm/dd/yyy> <hh:mm:ss> <mm/dd/yyyy> - Date Time <mm/dd/yyyy> format. (Month <1-12>. Day <1-31>. Year <2000-2037> <hh:mm:ss> - hh in 24-hour format (Range: 0 - 23), mm (Range: 0 - 59), ss (Range: 0 - 59)

  • Page 499: Configure

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.12 configure This command is used to activate global configuration mode. Syntax configure Default Setting None Command Mode Privileged Exec 6.16.13 disconnect This command is used to close a telnet session.

  • Page 500: Hostname

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.14 hostname This command is used to set the prompt string. Syntax hostname <prompt_string> <prompt_string> - Prompt string. Default Setting Korenix Command Mode Global Config 6.16.15 quit This command is used to exit a CLI session.

  • Page 501: Cablestatus

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.16 cablestatus This command returns the status of the specified port. Syntax cablestatus <slot/port> <slot/port> - Interface Number. Default Setting None Command Mode Privileged Exec Display Message Cable Status: One of the following statuses is returned: Normal: The cable is working correctly.

  • Page 502: Dhcp Snooping Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17 DHCP Snooping Commands DHCP snooping is a security feature that monitors DHCP messages between a DHCP client and DHCP servers to filter harmful DHCP messages and to build a bindings database of {MAC address, IP address, VLAN ID, port} tuples that are considered authorized.

  • Page 503: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1 Show Commands 6.17.1.1 show ip dhcp snooping This command displays the DHCP Snooping global configurations and per port configurations. Syntax show ip dhcp snooping Default Setting None Command Mode...
  • Page 504 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.2 show ip dhcp snooping binding This command displays the DHCP Snooping binding entries. To restrict the output, use the following options:  Dynamic: Restrict the output based on DCHP snooping.
  • Page 505 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.3 show ip dhcp snooping database This command displays the DHCP Snooping configuration related to the database persistency. Syntax show ip dhcp snooping database Default Setting None Command Mode Privileged Exec Display Message Agent URL: Bindings database agent URL.
  • Page 506 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.4 show ip dhcp snooping statistics This command lists statistics for DHCP Snooping security violations on untrusted ports. Syntax show ip dhcp snooping statistics Default Setting None Command Mode Privileged Exec Display Message Interface: The IP address of the interface in slot/port format.
  • Page 507 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.6 show ip dhcp snooping information stats interface This command display statistics specific to DHCP Option-82 configuration interface. Syntax show ip dhcp snooping information stats interface [<interface num] Default Setting...
  • Page 508 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.8 show ip dhcp snooping information vlan This command display the DHCP Option-82 configuration specific to VLAN. Syntax show ip dhcp snooping information vlan <vlan-range> Default Setting None Command Mode Privileged Exec 6.17.1.9...
  • Page 509 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.10 show ip dhcp snooping information remote-id vlan This command display the DHCP Option-82 remote-id configuration specific to VLAN. Syntax show ip dhcp snooping information remote-id vlan <vlan-range> Default Setting...

  • Page 510: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2 Configuration Commands 6.17.2.1 ip dhcp snooping This command enables the DHCP Snooping globally. Syntax ip dhcp snooping no ip dhcp snooping no - This command disables the DHCP Snooping globally.
  • Page 511 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.3 ip dhcp snooping verify mac-address This command enables the verification of the source MAC address with the client hardware address in the received DCHP message. Syntax ip dhcp snooping verify mac-address...
  • Page 512 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.5 ip dhcp snooping database write-delay This command configures the interval in seconds at which the DHCP Snooping database will be persisted. The interval value ranges from 15 to 86400 seconds.
  • Page 513 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.7 ip dhcp snooping binding This command configures the static DHCP Snooping binding.. Syntax ip dhcp snooping binding <mac-address> vlan <vlan id> <ip address> interface <interface id> no ip dhcp snooping binding <mac-address>...
  • Page 514 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.9 ip dhcp snooping log-invalid This command controls the logging DHCP messages filtration by the DHCP Snooping application. Syntax ip dhcp snooping log-invalid no ip dhcp snooping log-invalid no - This command disables the logging DHCP messages filtration by the DHCP Snooping application.
  • Page 515 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.11 clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific interface. Syntax clear ip dhcp snooping binding [interface <slot/port>]...
  • Page 516 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.14 ip dhcp snooping information option This command ip dhcp snooping information option enables the DHCP L2 option mode on the interface. Syntax ip dhcp snooping information option no ip dhcp snooping information option no - This command disables the DHCP L2 option mode.
  • Page 517 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.16 ip dhcp snooping information option remote-id Use this command to enable the DHCP Snooping information option remote-id on a range of VLANs. When remote-id string is set using this command, all Client DHCP requests that fall under this service subscription are added with Option-82 Remote-id as the configured remote-id string.
  • Page 518 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.18 ip dhcp snooping information option trust Use this command to configure an interface as trusted for Option-82 reception. Syntax ip dhcp snooping information option trust no ip dhcp snooping information option trust no - This command with no argument to configure an interface to default untrusted for Option-82 reception..

  • Page 519: Ip Source Guard (Ipsg) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18 IP Source Guard (IPSG) Commands IP Source Guard (IPSG) is a security feature that filters IP packets based on source ID. The source ID may be either the source IP address or a {source IP address, source MAC address} pair. The DHCP snooping binding database and static IPSG entries identify authorized source IDs.

  • Page 520: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1 Show Commands 6.18.1.1 show ip verify This command displays the IPSG interface configurations on all ports. Syntax show ip verify [interface <slot/port>] Default Setting None Command Mode Privileged Exec Display Message Interface: Interface address in slot/port format.
  • Page 521 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. empty. If port security is disabled on the interface, then the MAC Address field displays "permit-all". VLAN: The VLAN for the binding rule. 6.18.1.3 show ip source binding This command displays the IPSG bindings.

  • Page 522: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2 Configuration Commands 6.18.2.1 ip verify source This command configures the IPSG source ID attribute to filter the data traffic in the hardware. Source ID is the combination of IP address and MAC address. Normal command allows data traffic filtration based on the IP address.

  • Page 523: Dynamic Arp Inspection (Dai) Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19 Dynamic ARP Inspection (DAI) Command Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting neighbors.
  • Page 524 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Forwarded: The total number of valid ARP packets forwarded in this VLAN. Dropped: The total number of not valid ARP packets dropped in this VLAN. DHCP Drops: The number of packets dropped due to DHCP snooping binding database match failure.
  • Page 525 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.1.3 show ip arp inspection interfaces This command displays the Dynamic ARP Inspection configuration on all the DAI-enabled interfaces. An interface is said to be enabled for DAI if at least one VLAN, that the interface is a member of, is enabled for DAI.

  • Page 526: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2 Configuration Commands 6.19.2.1 ip arp inspection validate This command enables additional validation checks like source-mac validation, destination-mac validation, and ip address validation on the received ARP packets. Syntax ip arp inspection validate {[src-mac] [dst-mac] [ip]} no ip arp inspection validate {[src-mac] [dst-mac] [ip]} no - This command disables the additional validation checks on the received ARP packets.
  • Page 527 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2.3 ip arp inspection vlan logging This command enables logging of invalid ARP packets on a list of comma-separated VLAN ranges. Syntax ip arp inspection vlan <vlan-list> logging no ip arp inspection vlan <vlan-list> logging no - This command disables logging of invalid ARP packets on a list of comma-separated VLAN ranges.
  • Page 528 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2.5 ip arp inspection trust This command configures an interface as trusted for Dynamic ARP Inspection. Syntax ip arp inspection trust no ip arp inspection trust no - This command configures an interface as untrusted for Dynamic ARP Inspection.
  • Page 529 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2.7 arp access-list This command creates an ARP ACL. Syntax arp access-list <acl-name> no arp access-list <acl-name> no - This command deletes a configured ARP ACL. Default Setting None Command Mode Global Config 6.19.2.8...
  • Page 530 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2.9 clear ip arp inspection statistics This command resets the statistics for Dynamic ARP Inspection on all VLANs. Syntax clear ip arp inspection statistics Default Setting None Command Mode Privileged Exec...

  • Page 531: Differentiated Service Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20 Differentiated Service Command This Switching Command function can only be used on the QoS software version. This chapter contains the CLI commands used for the QOS Differentiated Services (DiffServ) package.

  • Page 532: General Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.1 General Commands The following characteristics are configurable for the platform as a whole. 6.20.1.1 diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated.

  • Page 533: Class Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2 Class Commands The 'class' command set is used in DiffServ to define: Traffic Classification specifies Behavior Aggregate (BA) based on DSCP, and Multi- Field (MF) classes of traffic (name, match criteria) Service Levels specifies the BA forwarding classes / service levels.
  • Page 534 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.2 no class-map This command eliminates an existing DiffServ class. Syntax no class-map <class-map-name> <class-map-name> is the name of an existing DiffServ class. The class name 'default' is reserved and is not allowed here. This command may be issued at any time;...
  • Page 535 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.4 match any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class. Syntax match any Default Setting None...
  • Page 536 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. The combined match criteria of <classname> and <refclassname> must be an allowed combination based on the class type. Any subsequent changes to the <refclassname> class match criteria must maintain this validity, or the change attempt shall fail. The total number of class rules formed by the complete reference class chain (includes both predecessor and successor classes) must not exceed a platform-specific maximum.
  • Page 537 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.7 match cos This command adds to the specified class definition a match condition for the Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). The value may be from 0 to 7.
  • Page 538 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.8 match destination-address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet. The <address> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff).
  • Page 539 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.9 match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet. Syntax match dstip <ipaddr> <ipmask> <ipaddr> specifies an IP address.
  • Page 540 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.10 match dstl4port This command adds to the specified class definition a match condition based on the destination layer 4 port of a packet using a single keyword or numeric notation or a numeric range notation.
  • Page 541 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.11 match ethertype This command adds to the specified class definition a match condition based on the value of the ethertype. The <ethertype> value is specified as one of the following keywords: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp or as a custom ethertype value in the range of 0x0600-0xFFFF.
  • Page 542 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.12 match ip dscp This command adds to the specified class definition a match condition based on the value of the IP DiffServ Code Point (DSCP) field in a packet, which is defined as the high-order six bits of the Service Type octet in the IP header (the low-order two bits are not checked).
  • Page 543 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.13 match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet, which is defined as the high-order three bits of the Service Type octet in the IP header (the low-order five bits are not checked).
  • Page 544 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.14 match ip tos This command adds to the specified class definition a match condition based on the value of the IP TOS field in a packet, which is defined as all eight bits of the Service Type octet in the IP header.
  • Page 545 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.15 match protocol This command adds to the specified class definition a match condition based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation.
  • Page 546 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.16 match source-address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet. The <address> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff).
  • Page 547 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.17 match srcip This command adds to the specified class definition a match condition based on the source IP address of a packet. Syntax > match srcip <ipaddr> <ipmask <ipaddr> - specifies an IP address.
  • Page 548 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.18 match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation or a numeric range notation.
  • Page 549 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.19 match vlan This command adds to the specified class definition a match condition based on the value of the layer 2 VLAN Identifier field (the only tag in a single tagged packet or the first or outer tag of a double VLAN tagged packet).
  • Page 550 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.21 match srcip6 This command adds to the specified class definition a match condition based on the source IP address of a packet. Syntax match srcip6 <source-ipv6-prefix/prefix-length> Default Setting None...

  • Page 551: Policy Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3 Policy Commands The 'policy' command set is used in DiffServ to define: Traffic Conditioning Specify traffic conditioning actions (policing, marking, shaping) to apply to traffic classes Service Provisioning Specify bandwidth and queue depth management requirements of service levels (EF, AF, etc.)
  • Page 552 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.1 assign-queue This command modifies the queue id to which the associated traffic stream is assigned. The queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the device.
  • Page 553 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.3 mirror This command specifies that all incoming packets for the associated traffic stream are copied to a specific egress interface (physical port or LAG). This command is not available on the Broadcom 5630x platform.
  • Page 554 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.5 conform-color This command is used to enable color-aware traffic policing and define the conform-color class maps used. Used in conjunction with the police command where the fields for the conform level (for simple, single-rate, and two-rate policing) are specified.
  • Page 555 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.7 class This command creates an instance of a class definition within the specified policy for the purpose of defining treatment of the traffic class through subsequent policy attribute statements.
  • Page 556 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.9 mark ip-dscp This command marks all packets for the associated traffic stream with the specified IP DSCP value. Syntax mark ip-dscp <value> <value> - is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 557 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.11 police-simple This command is used to establish the traffic policing style for the specified class. The simple form of the police command uses a single data rate and burst size, resulting in two outcomes: conform and violate.
  • Page 558 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.12 police-two-rate This command is the two-rate form of the police command and is used to establish the traffic policing style for the specified class. For each outcome, the only possible actions are drop, set-cos-as-sec-cos, set-cos-transmit, set-sec-cos-transmit, set-dscp-transmit, set-prec-transmit, or transmit.
  • Page 559 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.3.13 policy-map This command establishes a new DiffServ policy. The <policyname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the in parameter.

  • Page 560: Service Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.4 Service Commands The 'service' command set is used in DiffServ to define: Traffic Conditioning Assign a DiffServ traffic conditioning policy (as specified by the policy commands) to an interface in the incoming direction.
  • Page 561 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.4.1 service-policy This command attaches a policy to an interface in a particular direction. Syntax service-policy {in | out} <policy-map-name> The command can be used in the Interface Config mode to attach a policy to a specific interface.
  • Page 562 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.4.2 no service-policy This command detaches a policy from an interface in a particular direction. Syntax no service-policy {in | out} <policy-map-name> The command can be used in the Interface Config mode to detach a policy from a specific interface.

  • Page 563: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5 Show Commands The 'show' command set is used in DiffServ to display configuration and status information for:  Classes  Policies  Services This information can be displayed in either summary or detailed formats. The status information is only shown when the DiffServ administrative mode is enabled;...
  • Page 564 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Keyword, Reference Class, Source IP Address, Source Layer 4 Port, Source MAC Address, and VLAN. Values: This field displays the values of the Match Criteria. Class Name: The name of this class. (Note that the order in which classes are displayed is not necessarily the same order in which they were created.)
  • Page 565 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5.3 show diffserv service This command displays policy service information for the specified interface and direction. Syntax show diffserv service <slot/port> in <slot/port> - specifies a valid slot number and port number for the system. The direction parameter indicates the interface direction of interest.
  • Page 566 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5.4 show diffserv service brief This command displays all interfaces in the system to which a DiffServ policy has been attached. The direction parameter is optional; if specified, only services in the indicated direction are shown.
  • Page 567 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5.5 show policy-map This command displays all configuration information for the specified policy. Syntax show policy-map [<policy-map-name>] <policy-map-name> - is the name of an existing DiffServ policy. Default Setting None...
  • Page 568 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Non-Conform Action: The current setting for the action taken on a packet considered to not conform to the policing parameters. This is not displayed if policing not in use for the class under this policy.
  • Page 569 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5.6 show policy-map interface This command displays policy-oriented statistics information for the specified interface and direction. Syntax show policy-map interface <slot/port> in <slot/port> - specifies a valid slot number and port number for the system. The direction parameter indicates the interface direction of interest.
  • Page 570 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.5.7 show service-policy This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction. The direction parameter indicates the interface direction of interest. This command enables or disables the route reflector client.

  • Page 571: Acl Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21 ACL Command 6.21.1 Show Commands 6.21.1.1 show mac access-lists name This command displays a MAC access list and all of the rules that are defined for the ACL. The <name>...
  • Page 572 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.1.2 show mac access-lists This command displays a summary of all defined MAC access lists in the system. Syntax show mac access-lists Default Setting None Command Mode Privileged Exec Display Message Current number of all ACLs: The number of user-configured rules defined for this ACL.
  • Page 573 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.1.3 show ip access-lists This command displays an Access Control List (ACL) and all of the rules that are defined for the ACL. Syntax show ip access-lists [<1-199> | <name>] <1-199>...
  • Page 574 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Redirect Interface: This field displays the slot/port to which packets matching this rule are forwarded. Time Range Name: Displays the name of the time-range if the IP ACL rule has referenced a time range.
  • Page 575 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.1.4 show access-lists interface This command displays Access List information for a particular interface and the 'in' direction. Syntax show access-lists { interface <slot/port> | vlan <vlan id> } {in | out} <slot/port>...

  • Page 576: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2 Configuration Commands 6.21.2.1 mac access-list extended This command creates a MAC Access Control List (ACL) identified by <name>, consisting of classification fields defined for the Layer 2 header of an Ethernet frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list.
  • Page 577 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.2 mac access-list extended rename This command changes the name of a MAC Access Control List (ACL). The <name> parameter is the name of an existing MAC ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list.
  • Page 578 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.3 mac access-group This command attaches a specific MAC Access Control List (ACL) identified by <name> to an interface, or associates it with a VLAN ID, in a given direction. The <name> parameter must be the name of an exsiting MAC ACL.
  • Page 579 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.4 mac access-list This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. Note that an implicit 'deny all' MAC rule always terminates the access list.
  • Page 580 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.5 access-list This command creates an Access Control List (ACL) that is identified by the parameter. Syntax access-list {(<1-99> {deny | permit} {every | <srcip> <srcm ask>}) | ( {<100-199> {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>} any | <srcip>...
  • Page 581 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.6 no access-list This command deletes an ACL that is identified by the parameter <accesslistnumber> from the system or remove an ACL rule that is identified by the parameter <1-28> from the an IP ACL <accesslistnumber>.
  • Page 582 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.7 ip access-group This command attaches a specified access-control list to an interface or associates with a VLAN ID in a given direction. The parameter <name> is the name of the Access Control List.
  • Page 583 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.8 ip access-list Use this command to create an extended IP Access Control List (ACL) identified by <name>, consisting of classification fields defined for the IP header of an IPv4 frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list.

  • Page 584: Ipv6 Acl Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22 IPv6 ACL Command 6.22.1 Show Commands 6.22.1.1 show ipv6 access-lists This command displays an IPv6 access list and all of the rules that are defined for the IPv6 ACL. Use the [name] parameter to identify a specific IPv6 ACL to display.
  • Page 585 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. the interface (egress) _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 585/1246...

  • Page 586: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2 Configuration Commands 6.22.2.1 ipv6 access-list This command creates an IPv6 Access Control List (ACL) identified by <name>, consisting of classification fields defined for the IP header of an IPv6 frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list.
  • Page 587 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.2 ipv6 access-list rename This command changes the name of an IPv6 ACL. The <name> parameter is the name of an existing IPv6 ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list.
  • Page 588 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.3 {deny | permit} This command creates a new rule for the current IPv6 access list. Each rule is appended to the list of configured rules for the list. The ‘no’ form of this command is not supported, since the rules within an IPv6 ACL cannot be deleted individually.
  • Page 589 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.4 ipv6 traffic-filter This command either attaches a specific IPv6 ACL identified by <name> to an interface or associates with a VLAN ID in a given direction. The <name> parameter must be the name of an existing IPv6 ACL.

  • Page 590: Cos (Class Of Service) Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23 CoS (Class of Service) Command 6.23.1 Show Commands 6.23.1.1 show queue cos-map This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings.
  • Page 591 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.1.2 show queue ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The <ipdscp> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 592 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.1.3 show queue trust This command displays the current trust mode setting for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings. If specified, the port trust mode of the interface is displayed.
  • Page 593 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.1.4 show queue cos-queue This command displays the class-of-service queue configuration for the specified interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings.

  • Page 594: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2 Configuration Commands 6.23.2.1 queue cos-map This command maps an 802.1p priority to an internal traffic class on a "per-port" basis. Syntax queue cos-map <0-7> <0-7> no queue cos-map < 0-7 > - The range of queue priority is 0 to 7.
  • Page 595 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.2 queue trust This command sets the class of service trust mode of an interface. You can set the mode to trust one of the Dot1p (802.1p) or IP DSCP packet markings. You can also set the interface mode to untrusted. If you configure an interface to use Dot1p, the mode does not appear in the output of the show running config command because Dot1p is the default.
  • Page 596 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.3 queue cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue. Syntax queue cos-queue min-bandwidth <bw-0> <bw-1> … <bw-6> no queue cos-queue min-bandwidth <bw-0> <bw-1> … <bw-6>- Each Valid range is (0 to 100) in increments of 5 and the total sum is less than or equal to 100.
  • Page 597 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.4 queue cos-queue strict This command activates the strict priority scheduler mode for each specified queue on a "per-port" basis. Syntax queue cos-queue strict <queue-id-0> [<queue-id-1> … <queue-id-6>] no queue cos-queue strict <queue-id-0> [<queue-id-1> … <queue-id-6>] no - This command restores the default weighted scheduler mode for each specified queue on a "per-port"...
  • Page 598 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.5 queue cos-queue traffic-shape This command specifies the maximum transmission bandwidth limit for the interface as a whole. Also known as rate shaping, this has the effect of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded.

  • Page 599: Auto-Voice Over Ip Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24 Auto-Voice over IP Commands This section describes the commands you use to configure Auto-Voice over IP (VoIP) commands. The Auto-VoIP feature explicitly matches VoIP streams in Ethernet switches and provides them with a better class-of-service than ordinary traffic.

  • Page 600: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2 Configuration Commands 6.24.2.1 auto-voip all Use this command to enable VoIP Profile on the interfaces of the switch. Syntax auto-voip all no auto-voip all no - Use this command to disable VoIP Profile on the interfaces of the switch.

  • Page 601: Iscsi Optimization Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25 iSCSI Optimization Commands This section describes commands you use to monitor iSCSI sessions and prioritize iSCSI packets. iSCSI Optimzation provides a means of giving traffic between iSCSI initiator and target systems special Quality of Service (QoS) treatment.
  • Page 602 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.1.2 show iscsi sessions This command displays the iSCSI sessions. Syntax show iscsi sessions [detailed] Default Setting None Command Mode Privileged EXEC Display Message Example #1: show iscsi sessions Session 0: ----------------------------------------------------------------------------- Target: iqn.2006-03.com.kernsafe:q97041406.ImageDisk0...

  • Page 603: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.2 Configuration Commands 6.25.2.1 iscsi enable This command globally enables iSCSI awareness. Syntax iscsi enable no iscsi enable no - This command disables iSCSI awareness. When you use the no iscsi enable command, iSCSI resources will be released.
  • Page 604 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.2.2 iscsi cos This command sets the quality of service profile that will be applied to iSCSI flows. iSCSI flows are assigned by default to the highest VPT/DSCP mapped to the highest queue not used for stack management.
  • Page 605 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.2.3 iscsi aging time This command sets the aging time for iSCSI sessions. Behavior when changing aging time:  When aging time is increased, current sessions will be timed out according to the new value.
  • Page 606 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.2.4 iscsi target port This command configures an iSCSI target port and, optionally, a target system’s IP address and IQN name. When working with private iSCSI ports (not IANA-assigned ports 3260/860), it is recommended to specify the target IP address as well, so that the switch will only snoop frames with which the TCP destination port is one of the configured TCP ports, and the destination IP is the target’s IP address.

  • Page 607: Domain Name Server Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26 Domain Name Server Relay Commands 6.26.1 Show Commands 6.26.1.1 show hosts This command displays the static host name-to-address mapping table. Syntax show hosts Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name.
  • Page 608 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.1.2 show dns This command displays the configuration of the DNS server. Syntax show dns Default Setting None Command Mode Privileged Exec Display Message Domain Lookup Status: Enable or disable the IP Domain Naming System (DNS)-based host name-to-address translation function.
  • Page 609 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.1.3 show dns cache This command displays all entries in the DNS cache table. Syntax show dns cache Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name IP Address: IP address of the corresponding domain name, including IPv4 and IPv6.

  • Page 610: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2 Configuration Commands 6.26.2.1 ip hosts This command creates a static entry in the DNS table that maps a host name to an IP address. There are maximum 8 entries for IPv4 and 8 entries for IPv6.
  • Page 611 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.3 ip domain-name This command defines the default domain name to be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation).
  • Page 612 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.4 ip domain-list This command defines the domain name that can be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation). The domain name table can contain maximum 6 entries.
  • Page 613 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.5 ip name-server This command specifies the address of one or more domain name servers to use for name-to-address resolution. There are maximum 6 entries for IPv4 and 6 entries for IPv6 in the Domain Name Server Table.
  • Page 614 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.6 ip domain-lookup This command enables the IP Domain Naming System (DNS)-based host name-to-address translation. Syntax ip domain-lookup no ip domain-lookup <no> - This command disables the IP Domain Naming System (DNS)-based host name-to-address translation.
  • Page 615 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.8 clear domain-list This command clears all entries in the domain name list table. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 6.26.2.9 clear dns This command sets the DNS configuration to default value.
  • Page 616 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.10 clear dns cache This command clears all entries in the DNS cache table. Syntax clear dns cache Default Setting None Command Mode Privileged Exec 6.26.2.11 clear dns counter This command clears the statistics of all entries in the DNS cache table.

  • Page 617: Udld Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27 UDLD Commands 6.27.1 Show command 6.27.1.1 show udld Show UDLD information in all interfaces or specific interface Syntax show udld {unit/slot/port} Default Setting None Command Mode Privileged Exec Display Message Port enable operational state: Specifies the Port Enable Operational State of the selected port.

  • Page 618: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2 Configuration Commands 6.27.2.1 udld aggressive Enable/Disable UDLD protocol in aggressive mode on fiber ports except where locally configured Syntax udld aggressive no udld aggressive Default Setting Disabled Command Mode Global Config.
  • Page 619 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.3 udld message time Set UDLD message time period in <7-90> range. The message time is to use between sending of messages in steady. Default value of UDLD message time is 15.
  • Page 620 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.5 udld port aggressive Enable/Disable UDLD protocol in aggressive mode on the interface Syntax udld port aggressive no udld port aggressive Default Setting Disable Command Mode Interface Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 621: Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Routing Commands Address Resolution Protocol (ARP) Commands 7.1.1 Show Commands 7.1.1.1 show ip arp This command displays the Address Resolution Protocol (ARP) cache. Syntax show ip arp Default Setting None...
  • Page 622 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Age: This field displays the current age of the ARP entry since last refresh (in hh:mm:ss format). 7.1.1.2 show ip arp brief This command displays the brief Address Resolution Protocol (ARP) table information.
  • Page 623 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.1.3 show ip arp static This command displays the static Address Resolution Protocol (ARP) table information. Syntax show ip arp static Default Setting None Command Mode Privileged Exec Display Message IP address: Is the IP address of a device on a subnet attached to an existing routing interface.

  • Page 624: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2 Configuration Commands 7.1.2.1 This command creates an ARP entry. The value for <ipaddress> is the IP address of a device on a subnet attached to an existing routing interface. The value for <macaddress> is a unicast MAC address for that device.
  • Page 625 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Interface Config 7.1.2.3 ip local-proxy-arp This command enables or disables Local Proxy ARP on an interface. Syntax ip local-proxy-arp no ip local-proxy-arp no - This command disables Local Proxy ARP on a router interface.
  • Page 626 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.5 arp dynamicrenew This command enables ARP component to automatically renew ARP entries of type dynamic when they age out. Syntax arp dynamicrenew no arp dynamicrenew no - This command disables ARP component from automatically renewing ARP entries of type dynamic when they age out.
  • Page 627 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.7 arp resptime This command configures the ARP request response timeout. Syntax arp resptime <1-10> no arp resptime <1-10> - The range of default response time is 1 to 10 seconds.
  • Page 628 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.9 arp timeout This command configures the ARP entry ageout time. Syntax arp timeout <15-21600> no arp timeout <15-21600> - Represents the IP ARP entry ageout time in seconds. The range is 15 to 21600 seconds.

  • Page 629: Ip Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Routing Commands 7.2.1 Show Commands 7.2.1.1 show ip brief This command displays all the summary information of the IP. Syntax show ip brief Default Setting None Command Mode Privileged Exec...
  • Page 630 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.2 show ip interface port This command displays all pertinent information about the IP interfaces. Syntax show ip interface port <slot/port> Default Setting None Command Mode Privileged Exec User Exec Display Message Routing Interface Status: Determine the operational status of IPv4 routing Interface.
  • Page 631 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. (enabled or disabled). ICMP Redirects: Displays whether ICMP Redirects may be sent (enabled or disabled). 7.2.1.3 show ip interface brief This command displays summary information about IP configuration settings for all ports in the router.
  • Page 632 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.4 show ip route This command displays the routing table. The <ip-address> specifies the network for which the route is to be displayed and displays the best matching best-route for the address. The <mask> specifies the subnet mask for the given <ip-address>.
  • Page 633 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.5 show ip route bestroutes This command displays router route table information for the best routes. Syntax show ip route bestroutes Default Setting None Command Mode Privileged Exec Display Message Total Number of Routes: The total number of routes.
  • Page 634 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.6 show ip route entry This command displays the router route entry information. Syntax show ip route entry <networkaddress> <networkaddress> - Is a valid network address identifying the network on the specified interface.
  • Page 635 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.7 show ip route connected This command displays directly connected routes. Syntax show ip route connected Default Setting None Command Mode Privileged Exec Display Message Route Codes: Displays the key for the routing protocol codes that might appear in the routing table output.
  • Page 636 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.8 show ip route ospf This command displays Open Shortest Path First (OSPF) routes. The option all command displays all (best and non-best) routes. Syntax show ip route ospf [all]...
  • Page 637 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.9 show ip route rip This command displays Routing Information Protocol (RIP) routes. The option all command displays all (best and non-best) routes. Syntax show ip route rip [all] Default Setting...
  • Page 638 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.10 show ip route static This command displays Static Routes. The option all command displays all (best and non-best) routes. Syntax show ip route static [all] Default Setting None Command Mode...
  • Page 639 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.11 show ip route summary This command displays the routing table summary. Use the optional all parameter to show the number of all routes, including best and non-best routes. To include only the number of best routes, do not use the optional parameter.
  • Page 640 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.12 show ip route preferences This command displays detailed information about the route preferences. Route preferences are used in determining the best route. Lower router preference values are preferred over higher router preference values.
  • Page 641 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.13 show ip stats This command displays IP statistical information. Refer to RFC 1213 for more information about the fields that are displayed. Syntax show ip stats Default Setting None...

  • Page 642: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2 Configuration Commands 7.2.2.1 routing This command enables routing for an interface. Syntax routing no routing no - Disable routing for an interface. Default Setting Disabled Command Mode Interface Config 7.2.2.2...
  • Page 643 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.3 ip address This command configures an IP address on an interface. The IP address may be a secondary IP address. Syntax ip address <ipaddr> <subnet-mask> [secondary] no ip address <ipaddr> <subnet-mask> [secondary] <ipaddr>...
  • Page 644 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.5 ip route This command configures a static route. Syntax ip route <networkaddr> <subnetmask> [ {<nexthopip>|Null0} [<1-255 >] ] no ip route <networkaddr> <subnetmask> [ { <nexthopip> | <1-255 > | Null0 } ] <ipaddr>...
  • Page 645 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.7 ip route distance This command sets the default distance (preference) for static routes. Lower route distance values are preferred when determining the best route. The ip route and ip route default commands allow you to optionally set the distance (preference) of an individual static route.
  • Page 646 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.8 ip mtu This command sets the IP Maximum Transmission Unit (MTU) on a routing interface or range of interfaces. The IP MTU is the size of the largest IP packet that can be transmitted on the interface without fragmentation.
  • Page 647 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.9 encapsulation This command configures the link layer encapsulation type for the packet. Syntax encapsulation {ethernet | snap} ethernet - The link layer encapsulation type is ethernet. snap - The link layer encapsulation type is SNAP.

  • Page 648: Open Shortest Path First (Ospf) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Open Shortest Path First (OSPF) Commands 7.3.1 Show Commands 7.3.1.1 show ip ospf This command displays information relevant to the OSPF router. Syntax show ip ospf Default Setting None Command Mode...
  • Page 649 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Network Area: Shows area for the Network Area setting. Default Route Advertise: Indicates whether the default routes received from other source protocols are advertised or not. Always: Shows whether default routes are always advertised.
  • Page 650 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.2 show ip ospf abr This command displays the internal OSPF routing table entries to Area Border Routers (ABR). This command takes no options Syntax show ip ospf abr Default Setting...
  • Page 651 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.3 show ip ospf area This command displays information about the area. The <areaid> identifies the OSPF area that is being displayed. Syntax show ip ospf area <areaid> Default Setting...
  • Page 652 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.4 show ip ospf asbr This command displays the internal OSPF routing table entries to Autonomous System Boundary Routers (ASBR). This command takes no options. Syntax show ip ospf asbr...
  • Page 653 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.5 show ip ospf database This command displays information about the link state database when OSPF is enabled. If you do not enter any parameters the command displays the LSA headers for all areas. Use the optional <areaid>...
  • Page 654 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Options: This is an integer. It indicates that the LSA receives special handling during routing calculations. Rtr Opt: Router Options are valid for router links only. 7.3.1.6 show ip ospf database database-summary Use this command to display the number of each type of LSA in the database for each area and for the router.
  • Page 655 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.7 show ip ospf interface This command displays the information for the IFO object or virtual interface tables. Syntax show ip ospf interface {<slot/port> | loopback <loopback-id> | vlan <vlan-id>}...
  • Page 656 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. router, and backup designated router. Designated Router: The router ID representing the designated router. Backup Designated Router: The router ID representing the backup designated router. Number of Link Events: The number of link events.
  • Page 657 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.9 show ip ospf interface stats This command displays the statistics for a specific interface. The information below will only be displayed if OSPF is enabled. Syntax show ip ospf interface stats {<slot/port> | loopback <loopback-id> | vlan <vlan-id>}...
  • Page 658 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Area Mismatch: The number of OSPF packets discarded because the area ID in the OSPF header is not the area ID configured on the ingress interface. Invalid Destination Address: The number of OSPF packets discarded because the packet’s destination IP address is not the address of the ingress interface and is not the AllDrRouters or AllSpfRouters multicast addresses.
  • Page 659 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.10 show ip ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table. If you specify an interface or tunnel, only the information for that interface or tunnel displays.The <ip-address>...
  • Page 660 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. and network-LSAs. Dead Time: The amount of time, in seconds, to wait before the router assumes the neighbor is unreachable. If you specify an IP address for the neighbor router, the following fields display: Interface: Valid slot and port number separated by a forward slash.
  • Page 661 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.11 show ip ospf range This command displays information about the area ranges for the specified <areaid>. The <areaid> identifies the OSPF area whose ranges are being displayed.. Syntax show ip ospf range <areaid>...
  • Page 662 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.12 show ip ospf statistics This command displays information about recent Shortest Path First (SPF) calculations. The SPF is the OSPF routing table calculation. The output lists the number of times the SPF has run for each OSPF area.
  • Page 663 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.13 show ip ospf stub table This command displays the OSPF stub table. The information below will only be displayed if OSPF is initialized on the switch.. Syntax show ip ospf stub table...
  • Page 664 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.14 show ip ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor. The <areaid> parameter identifies the area and the <neighbor> parameter identifies the neighbor's Router Syntax show ip ospf virtual-link <areaid>...
  • Page 665 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.15 show ip ospf virtual-link brief This command displays the OSPF Virtual Interface information for all areas in the system. Syntax show ip ospf virtual-link brief Default Setting None Command Mode...

  • Page 666: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2 Configuration Commands 7.3.2.1 router ospf Use this command to enter Router OSPF mode Syntax router ospf Default Setting None Command Mode Global Config 7.3.2.2 enable Use enable command resets the default administrative mode of OSPF in the router (active). no enable...
  • Page 667 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.3 network area Use network area command to enable OSPFv2 on an interface and set its area ID if the IP address of an interface is covered by this network command. Use no network area command to disable the...
  • Page 668 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.5 1583compatibility 1583 compatibility mode is enabled by default. If all OSPF routers in the routing domain are capable of operating according to RFC 2328, OSPF 1583 compatibility mode should be disabled.
  • Page 669 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.7 area nssa area nssa command configures the specified areaid to function as an NSSA. no area nssa command disables nssa from the specified area id. Syntax area <areaid> nssa no area <areaid>...
  • Page 670 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.9 area nssa no-redistribute area nssa no-redistribute command configures the NSSA Area Border router (ABR) so that learned external routes will not be redistributed to the NSSA. no area nssa no-redistribute command...
  • Page 671 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.11 area nssa translator-role area nssa translator-role command configures the translator role of the NSSA. A value of always causes the router to assume the role of the translator the instant it becomes a border router and a value of candidate causes the router to participate in the translator election process when it attains border router status.
  • Page 672 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.13 area range area range command creates a specified area range for a specified NSSA. The <ipaddr> is a valid IP address. The <subnetmask> is a valid subnet mask. The LSDB type must be specified by either summarylink or nssaexternallink, and the advertising of the area range can be allowed or suppressed.
  • Page 673 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.15 area stub no-summary area stub no-summary command configures the Summary LSA mode for the stub area identified by <areaid>. Use this command to prevent LSA Summaries from being sent.
  • Page 674 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.17 area virtual-link authentication area virtual-link authentication command configures the authentication type and key for the OSPF virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 675 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.19 area virtual-link hello-interval area virtual-link hello-interval command configures the hello interval for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 676 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.21 area virtual-link transmit-delay area virtual-link transmit-delay command configures the transmit delay for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 677 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Router OSPF Config Mode _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 677/1246...
  • Page 678 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.23 bandwidth By default, OSPF computes the link cost of an interface as the ratio of the reference bandwidth to the interface bandwidth. Reference bandwidth is specified with the auto-cost command. For the purpose of the OSPF link cost calculation, use the bandwidth command to specify the interface bandwidth.
  • Page 679 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.25 clear ip ospf Use this command to disable and re-enable OSPF. Syntax clear ip ospf Default Setting None Command Mode Privileged Exec 7.3.2.26 clear ip ospf configuration Use this command to reset the OSPF configuration to factory defaults.
  • Page 680 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.27 clear ip ospf counters Use this command to reset global and interface statistics Syntax clear ip ospf counters Default Setting None Command Mode Privileged Exec 7.3.2.28 clear ip ospf neighbor Use this command to drop the adjacency with all OSPF neighbors.
  • Page 681 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.29 clear ip ospf neighbor interface To drop adjacency with all neighbors on a specific interface, use the optional parameter [slot/port]. To drop adjacency with a specific router ID on a specific interface, use the optional parameter [ipaddr].
  • Page 682 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.31 default-information originate default-information originate command is used to control the advertisement of default routes. no default-information originate command is used to control the advertisement of default routes. Syntax default-information originate [always] [metric <0-16777214>] [metric-type {1 | 2}]...
  • Page 683 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.33 distance ospf distance ospf command sets the route preference value of OSPF in the router. Lower route preference values are preferred when determining the best route. The type of OSPF route can be intra, inter, or external.
  • Page 684 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.35 exit-overflow-interval exit-overflow-interval command configures the exit overflow interval for OSPF. It describes the number of seconds after entering overflow state that a router will wait before attempting to leave the overflow state.
  • Page 685 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.37 ip ospf authentication ip ospf authentication command sets the OSPF Authentication Type and Key for the specified interface. The value of <type> is either none, simple or encrypt. The <key> is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard.
  • Page 686 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.39 ip ospf dead-interval ip ospf dead-interval command sets the OSPF dead interval for the specified interface. The value for <seconds> is a valid positive integer, which represents the length of time in seconds that a router's Hello packets have not been seen before its neighbor routers declare that the router is down.
  • Page 687 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.41 ip ospf network ip ospf network command to configure OSPF to treat an interface as a point-to-point rather than broadcast interface. The broadcast option sets the OSPF network type to broadcast. The point-to-point option sets the OSPF network type to point-to-point.
  • Page 688 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.43 ip ospf retransmit-interval ip ospf retransmit command sets the OSPF retransmit Interval for the specified interface. The retransmit interval is specified in seconds. The value for <seconds> is the number of seconds between link-state advertisement retransmissions for adjacencies belonging to this router interface.
  • Page 689 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.45 ip ospf mtu-ignore ip ospf mtu-ignore command disables OSPF maximum transmission unit (MTU) mismatch detection. OSPF Database Description packets specify the size of the largest IP packet that can be sent without fragmentation on the interface.
  • Page 690 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.47 redistribute redistribute command configures OSPF protocol to allow redistribution of routes from the specified source protocol/routers. no redistribute command configures OSPF protocol to prohibit redistribution of routes from the specified source protocol/routers.
  • Page 691 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.49 passive-interface default passive-interface default command to enable global passive mode by default for all interfaces. It overrides any interface level passive mode. OSPF will not form adjacencies over a passive interface.
  • Page 692 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.51 timers spf Use this command to configure the SPF delay time and hold time. The valid range for both parameters is 0-65535 seconds.. Syntax timers spf <delay-time> <hold-time> Default Setting delay- time—5...
  • Page 693 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 693/1246...

  • Page 694: Bootp/Dhcp Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. BOOTP/DHCP Relay Commands 7.4.1 Show Commands 7.4.1.1 show bootpdhcprelay This command displays the BootP/DHCP Relay information. Syntax show bootpdhcprelay Default Setting None Command Mode Privileged Exec User Exec Display Message Maximum Hop Count: Is the maximum allowable relay agent hops.

  • Page 695: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2 Configuration Commands 7.4.2.1 bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP/DHCP Relay on the system. Syntax bootpdhcprelay cidoptmode no bootpdhcprelay cidoptmode no - This command is used to disable the circuit ID option mode for BootP/DHCP Relay on the system.
  • Page 696 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2.3 bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. Syntax bootpdhcprelay maxhopcount <hops> no bootpdhcprelay maxhopcount <hops> - The range of maximum hop count is 1 to 16.
  • Page 697 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2.5 bootpdhcprelay serverip This command configures the server IP Address for BootP/DHCP Relay on the system. Syntax bootpdhcprelay serverip <ipaddr> no bootpdhcprelay serverip <ipaddr> - The IP address of the BootP/DHCP server.

  • Page 698: Ip Helper Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Helper Commands 7.5.1 Show Commands 7.5.1.1 show ip helper-address Use this command to display the IP helper address configuration. Syntax show ip helper-address Default Setting None Command Mode Privileged Exec...
  • Page 699 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.1.2 show ip helper statistics Use this command to display the number of UDP packets processed and relayed. Syntax show ip helper statistics Default Setting None Command Mode Privileged Exec...

  • Page 700: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2 Configuration Commands 7.4.2.1 ip helper-address Use this command to configure the relay of certain UDP broadcast packets received on a specific interface or range of interfaces. This command can be invoked multiple times on a routing interface, either to specify multiple server addresses for a given port number or to specify multiple port numbers handled by a specific server.
  • Page 701 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2.3 ip helper-address Use this command to configure the relay of certain UDP broadcast packets received on any interface. If the interface that receives a UDP packet has been configured with an address, this global address value will be ignored.
  • Page 702 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2.5 clear ip helper statistics This command is used this command to clear the information of UDP packets processed and relayed by IP helper. Syntax clear ip helper statistics Default Setting...

  • Page 703: Routing Information Protocol (Rip) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Routing Information Protocol (RIP) Commands 7.6.1 Show Commands 7.6.1.1 show ip rip This command displays information relevant to the RIP router. Syntax show ip rip Default Setting None Command Mode...
  • Page 704 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.1.2 show ip rip interface This command displays information related to a particular RIP interface. Syntax show ip rip interface <slot/port> < slot/port > - Interface number Default Setting None...
  • Page 705 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.1.3 show ip rip interface brief This command displays general information for each RIP interface. For this command to display successful results routing must be enabled per interface (i.e. ip rip).

  • Page 706: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2 Configuration Commands 7.6.2.1 enable rip This command resets the default administrative mode of RIP in the router (active). Syntax enable no enable no - This command sets the administrative mode of RIP in the router to inactive.
  • Page 707 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.3 auto-summary This command enables the RIP auto-summarization mode. Syntax auto-summary no auto-summary no - This command disables the RIP auto-summarization mode. Default Setting Disabled Command Mode Router RIP Config 7.6.2.4...
  • Page 708 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.5 default-metric This command is used to set a default for the metric of distributed routes. Syntax default-metric <1-15> no default-metric <1 - 15> - a value for default-metric. no - This command is used to reset the default metric of distributed routes to its default value.
  • Page 709 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.7 hostrouteaccept This command enables the RIP hostroutesaccept mode. Syntax hostrouteaccept no hostrouteaccept no - This command disables the RIP hostroutesaccept mode. Default Setting Enabled Command Mode Router RIP Config 7.5.2.8...
  • Page 710 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.9 distribute-list This command is used to specify the access list to filter routes received from the source protocol. Source protocols have OSPF, Static, and Connected. Syntax distribute-list <1-199> out {ospf | static | connected} no distribute-list <1-199>...
  • Page 711 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.10 redistribute This command configures RIP protocol to redistribute routes from the specified source protocol/routers. There are five possible match options. W hen you submit the command redistribute ospf match <matchtype>...
  • Page 712 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.11 ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified interface. The value of <type> is either none, simple, or encrypt. The value for authentication key [key] must be 16 bytes or less. The [key] is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard.
  • Page 713 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.12 ip rip receive version This command configures the interface to allow RIP control packets of the specified version(s) to be received. The value for <mode> is one of: rip1 to receive only RIP version 1 formatted packets, rip2 for RIP...
  • Page 714 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.13 ip rip send version This command configures the interface to allow RIP control packets of the specified version to be sent. The value for <mode> is one of: rip1 to broadcast RIP version 1 formatted packets, rip1c (RIP version 1 compatibility mode) which sends RIP version 2 formatted packets via broadcast, rip2 for sending RIP version 2 using multicast, or none to not allow any RIP control packets to be sent.

  • Page 715: Router Discovery Protocol Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Router Discovery Protocol Commands 7.7.1 Show Commands 7.7.1.1 show ip irdp This commands displays the router discovery information for all interfaces, or a specified interface. Syntax show ip irdp [{<slot/port> | vlan <vlan-id>}] <slot/port>...

  • Page 716: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2 Configuration Commands 7.7.2.1 ip irdp This command enables Router Discovery on an interface. Syntax ip irdp no ip irdp <no> - Disable Router Discovery on an interface. Default Setting...
  • Page 717 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2.3 ip irdp holdtime This commands configures the value, in seconds, of the holdtime field of the router advertisement sent from this interface. Syntax ip irdp holdtime < maxadvertinterval-9000 >...
  • Page 718 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2.5 ip irdp minadvertinterval This command configures the minimum time, in seconds, allowed between sending router advertisements from the interface. Syntax ip irdp minadvertinterval < 3-maxadvertinterval> no ip irdp minadvertinterval <...

  • Page 719: Vlan Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. VLAN Routing Commands 7.8.1 Show Commands 7.8.1.1 show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled in the system. Syntax show ip vlan...

  • Page 720: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.8.2 Configuration Commands 7.8.2.1 vlan routing This command creates routing on a VLAN. Syntax vlan routing <vlanid> [<vlan-index>] no vlan routing <vlanid> <vlanid> - The range is 1 to 4093.

  • Page 721: Virtual Router Redundancy Protocol (Vrrp) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Virtual Router Redundancy Protocol (VRRP) Commands 7.9.1 Show Commands 7.9.1.1 show ip vrrp This command displays whether VRRP functionality is enabled or disabled. It also displays some global parameters which are required for monitoring.
  • Page 722 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.2 show ip vrrp brief This command displays information about each virtual router configured on the switch. Syntax show ip vrrp brief Default Setting None Command Mode Privileged Exec User...
  • Page 723 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.3 show ip vrrp interface This command displays all configuration information of a virtual router configured on a specific interface. Note that the information will be displayed only when the IP address of the specific interface is configured.
  • Page 724 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.4 show ip vrrp interface stats This command displays the statistical information about each virtual router configured on the switch. Syntax show ip vrrp interface stats {<slot/port> | vlan <vlan-id>} [<vrid>] <slot/port>...
  • Page 725 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Invalid Authentication Type: Represents the total number of VRRP packets received with unknown authentication type. Authentication Type Mismatch: Represents the total number of VRRP advertisements received for which 'auth type' not equal to locally configured one for this virtual router.

  • Page 726: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2 Configuration Commands 7.9.2.1 ip vrrp This command enables the administrative mode of VRRP in the router. Syntax ip vrrp no ip vrrp Default Setting Disable Command Mode Global Config This command sets the virtual router ID on an interface for Virtual Router configuration in the router.
  • Page 727 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.2 ip vrrp ip This commands also designates the configured virtual router IP address as a secondary IP address on an interface. Syntax ip vrrp <1-255> ip <addr> [secondary] no ip vrrp <1-255> ip <addr> [secondary] <1-255>...
  • Page 728 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.4 ip vrrp accept-mode Use this command to allow the VRRP Master to accept ping packets sent to one of the virtual router's IP addresses. Syntax ip vrrp <1-255> accept-mode no ip vrrp <1-255>...
  • Page 729 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.6 ip vrrp preempt This command sets the preemption mode value for the virtual router configured on a specified interface. Syntax ip vrrp <1-255> preempt [delay <0-3600>] no ip vrrp <1-255> preempt [delay] <1-255>...
  • Page 730 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.7 ip vrrp priority This command sets the priority value for the virtual router configured on a specified interface. The router with the highest priority is elected master. If a router is configured with the address used as the address of the virtual router, the router is called the "address owner".
  • Page 731 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.8 ip vrrp timers advertise This command sets the advertisement value for a virtual router in seconds. Syntax ip vrrp <1-255> timers advertise <1-255> ip vrrp <1-255> timers advertise <1-255> - The range of virtual router ID is 1 to 255.
  • Page 732 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.9 ip vrrp track interface This command alters the priority of the VRRP router based on the availability of its interfaces. This command is useful for tracking interfaces that are not configured for VRRP. Only IP interfaces are tracked.
  • Page 733 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.10 ip vrrp track ip route This command tracks the route reachability. When the tracked route is deleted, the priority of the VRRP router will be decremented by the value specified in the decrement argument. W hen the tracked route is added, the priority will be incremented by the same.

  • Page 734: Ip Multicast Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Multicast Commands Distance Vector Multicast Routing Protocol (DVMRP) Commands This section provides a detailed explanation of the DVMRP commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information. Configuration commands are used to configure features and options of the switch.
  • Page 735 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.2 show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface. Syntax show ip dvmrp interface {<slot/port> | vlan <vlan-id>} <slot/port> - Valid slot and port number separated by forward slashes.
  • Page 736 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.3 show ip dvmrp neighbor This command displays the neighbor information for DVMRP. Syntax show ip dvmrp neighbor Default Setting Command Mode Privileged Exec User EXEC Display Message IfIndex: This field displays the value of the interface used to reach the neighbor.
  • Page 737 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.4 show ip dvmrp nexthop This command displays the next hop information on outgoing interfaces for routing multicast datagrams. Syntax show ip dvmrp nexthop Default Setting None Command Mode Privileged...
  • Page 738 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.5 show ip dvmrp prune This command displays the table listing the router’s upstream prune information Syntax show ip dvmrp prune Default Setting None Command Mode Privileged Exec User Exec Display Message Group IP: This field identifies the multicast Address that is pruned.
  • Page 739 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.6 show ip dvmrp route This command displays the multicast routing information for DVMRP. Syntax show ip dvmrp route Default Setting None Command Mode Privileged Exec User Exec Display Message Source Address: This field displays the multicast address of the source group.

  • Page 740: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.2 Configuration Commands 8.1.2.1 ip dvmrp This command sets administrative mode of DVMRP in the router to active. IGMP must be enabled before DVMRP can be enabled. Syntax ip dvmrp no ip dvmrp no - This command sets administrative mode of DVMRP in the router to inactive.
  • Page 741 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.2.2 ip dvmrp metric This command configures the metric for an interface. This value is used in the DVMRP messages as the cost to reach this network. Syntax ip dvmrp metric <value>...

  • Page 742: Internet Group Management Protocol (Igmp) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Internet Group Management Protocol (IGMP) Commands This section provides a detailed explanation of the IGMP commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information.
  • Page 743 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.2 show ip igmp groups This command displays the registered multicast groups on the interface. If “detail” is specified this command displays the registered multicast groups on the interface in detail.
  • Page 744 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.3 show ip igmp interface This command displays the IGMP information for the interface. Syntax show ip igmp interface {<slot/port> | vlan <vlan-id>} <slot/port> - Valid slot and port number separated by forward slashes.
  • Page 745 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.4 show ip igmp interface membership This command displays the list of interfaces that have registered in the multicast group. Syntax show ip igmp interface membership <multiipaddr> [detail] < multiipaddr > - A multicast IP address..
  • Page 746 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.5 show ip igmp interface stats This command displays the IGMP statistical information for the given interface. The statistics are only displayed when the interface is enabled for IGMP. Syntax show ip igmp interface stats {<slot/port>...

  • Page 747: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2 Configuration Commands 8.2.2.1 ip igmp This command sets the administrative mode of IGMP in the router to active. Syntax ip igmp no ip igmp no - This command sets the administrative mode of IGMP in the router to inactive.
  • Page 748 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.2 ip igmp version This command configures the version of IGMP for an interface. Syntax ip igmp version {1 | 2 | 3} no ip igmp version <1- 3> - The igmp version number.
  • Page 749 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.4 ip igmp last-member-query-interval This command configures the Maximum Response Time being inserted into Group-Specific Queries sent in response to Leave Group messages on the interface. Syntax ip igmp last-member-query-interval <0-255>...
  • Page 750 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.6 ip igmp query-max-response-time This command configures the maximum response time interval for the specified interface, which is the maximum query response time advertised in IGMPv2 queries on this interface.The time interval is specified in tenths of a second.
  • Page 751 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.8 ip igmp startup-query-count This command sets the number of Queries sent out on startup, separated by the Startup Query Interval on the interface. Syntax ip igmp startup-query-count <1-20> no ip igmp startup-query-count <1-20>...

  • Page 752: Multicast Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Multicast Commands 8.3.1 Show Commands 8.3.1.1 show ip mcast This command displays the system-wide multicast information Syntax show ip mcast Default Setting None Command Mode Privileged Exec User Exec Display Message Admin Mode: This field displays the administrative status of multicast.
  • Page 753 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.1.2 show ip mcast boundary This command displays all the configured administrative scoped multicast boundaries. Syntax show ip mcast boundary [{<slot/port> | vlan <vlan-id>}] <slot/port > - Interface number. <vlan-id> - VLAN ID. The range of VLAN ID is 1 to 4093.
  • Page 754 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.1.3 show ip mcast interface This command displays the multicast information for the specified interface. Syntax show ip mcast interface {<slot/port> | vlan <vlan-id>} <slot/port > - Interface number. <vlan-id> - VLAN ID. The range of VLAN ID is 1 to 4093.
  • Page 755 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.1.4 show ip mcast mroute This command displays a summary or all the details of the multicast table. Syntax show ip mcast mroute {detail | summary} detail - displays the multicast routing table details.
  • Page 756 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given <groupipaddr>.
  • Page 757 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given <sourceipaddr> or <sourceipaddr> [<groupipaddr>] pair.

  • Page 758: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2 Configuration Commands 8.3.2.1 ip multicast This command sets the administrative mode of the IP multicast forwarder in the router to active. For multicast routing to become operational, IGMP must be currently enabled. An error message will be displayed on the CLI if multicast routing is enabled while IGMP is disabled.
  • Page 759 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2.2 ip mcast boundary This command adds an administrative scope multicast boundary specified by <groupipaddr> and <mask> for which this multicast administrative boundary is applicable. <groupipaddr> is a group IP address and <mask>...
  • Page 760 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2.3 ip multicast ttl-threshold This command applies the given <ttlthreshold> to a routing interface. The <ttlthreshold> is the TTL threshold which is to be applied to the multicast Data packets which are to be forwarded from the interface.

  • Page 761: Ipv4 Protocol Independent Multicast (Pim) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv4 Protocol Independent Multicast (PIM) Commands 8.4.1 Show Commands 8.4.1.1 show ip pim This command displays the system-wide information for PIM-DM or PIM-SM. Syntax show ip pim Default Setting None...
  • Page 762 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.2 show ip pim bsr-router This command displays the bootstrap router (BSR) information. Syntax show ip pim bsr-router {candidate | elected} Default Setting None Command Mode Privileged Exec, User Exec...
  • Page 763 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.3 show ip pim interface This command displays the interface information for PIM on the specified interface. If no interface is specified, the command displays the status parameters for all PIM-enabled interfaces.
  • Page 764 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.4 show ip pim neighbor This command displays PIM neighbors discovered by PIMv2 Hello messages. If the interface number is not specified, this command displays the neighbors discovered on all the PIM enabled interfaces.
  • Page 765 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.5 show ip pim rp mapping Use this command to display all active group-to-RP mappings of which the router is a aware (either configured or learned from the bootstrap router (BSR)). Use the optional parameters to limit the display to a specific RP address or to view group-to-candidate RP or group to Static RP mapping information.
  • Page 766 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.6 show ip pim rp-hash group-address This command displays which rendezvous point (RP) is being used for a specified group. Syntax show ip pim rp-hash group-address Default Setting None Command Mode...

  • Page 767: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2 Configuration Commands 8.4.2.1 ip pim bsr-candidate This command is used to configure the router to announce its candidacy as a bootstrap router (BSR). Syntax ip pim bsr-candidate interface {<slot/port> | vlan <vlan-id>} <hash-mask-length> [<priority>] no ip pim bsr-candidate interface {<slot/port>...
  • Page 768 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.2 ip pim dense This command enables the administrative mode of PIM-DM in the router. Syntax ip pim dense no ip pim dense no - This command disables the administrative mode of PIM-DM in the router.
  • Page 769 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.4 ip pim rp-candidate This command is used to configure the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR). Syntax ip pim rp-candidate interface {<slot/port> | vlan <vlan-id>} <group-address> <group-mask>...
  • Page 770 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 770/1246...
  • Page 771 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.6 ip pim spt-threshold Use this command to configure the Data Threshold rate for the last-hop router to switch to the shortest path. The possible values are 0 or Infinity.
  • Page 772 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.8 ip pim This command administratively enables PIM on an interface or range of interfaces. Syntax ip pim no ip pim no - This command sets the administrative mode of PIM on an interface to disabled.
  • Page 773 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.10 ip pim dr-priority Use this command to set the priority value for which a router is elected as the designated router (DR). This command can be configured on a single interface or a range of interfaces.
  • Page 774 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.12 ip pim join-prune-interval This command is used to configure the join/prune interval for the PIM-SM router on an interface or range of interfaces. The join/prune interval is specified in seconds. This parameter can be configured to a value from 0 to 18000.

  • Page 775: Igmp Proxy Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IGMP Proxy Commands The IGMP Proxy is used by IGMP Router (IPv4 system) to enable the system to issue IGMP host messages on behalf of hosts that the system discovered through standard IGMP router interfaces.
  • Page 776 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Older Version 2 Querier Timeout: The interval used to timeout the older version 2 queriers. Proxy Start Frequency: The number of times the IGMP Proxy has been stopped and started.
  • Page 777 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.2 show ip igmp-proxy groups This command displays information about the subscribed multicast groups that IGMP Pro xy reported. It displays a table of entries with the following as the fields of each column.
  • Page 778 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.3 show ip igmp-proxy groups detail This command displays complete information about multicast groups that IGMP Proxy reported. It displays a table of entries with the following as the fields of each column.
  • Page 779 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.4 show ip igmp-proxy interface This command displays a detailed list of the host interface status parameters. It displays the following parameters only when you enable IGMP Proxy. Syntax show ip igmp-proxy interface...

  • Page 780: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2 Configuration Commands 8.5.2.1 ip igmp-proxy This command enables the IGMP Proxy on the router. To enable the IGMP Proxy on the router, you must enable multicast forwarding. Also, make sure that there are no multicast routing protocols enabled on the router.
  • Page 781 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.3 ip igmp-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface. The value of <interval> can be 1-260 seconds.

  • Page 782: Web-Based Management Interface

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Web-Based Management Interface Overview The Layer 3 Network Switch provides a built-in browser software interface that lets you configure and manage it remotely using a standard W eb browser such as Microsoft Internet Explorer or Netscape Navigator.
  • Page 783 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 3. Security Menu: This section provides users to configure switch securities including Port Access Control, Port Security, Captive-portal, RADIUS, TACACS+, LDAP, Access Control Lists, IP Filter, Secure HTTP, Secure Shell and Denial of Service.

  • Page 784: Management Menu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Management Menu 9.2.1 Viewing Information 9.2.1.1 Viewing ARP Cache The Address Resolution Protocol (ARP) dynamically maps physical (MAC) addresses to Internet (IP) addresses. This panel displays the current contents of the ARP cache.
  • Page 785 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.1.2 Viewing Inventory Information Use this panel to display the switch's Vital Product Data, stored in non-volatile memory at the factory. Non-Configurable Data System Description - The product name of this switch.
  • Page 786 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Operating System - The operating system currently running on the switch. Network Processing Device - Identifies the network processor hardware. ADT7470 Sensor - The temperature of sensor of ADT7470 ADT7470_1: Fan 1 Status: Status of Fan1. It could be active or inactive.
  • Page 787 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.1.3 System Resources Use this panel to configure and display the Free Memory and Task CPU Utilization parameters Configurable Data Rising Threshold - The CPU Rising utilization threshold in percentage. A zero percent threshold indicates CPU Utilization Notification feature is disabled.
  • Page 788 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save.

  • Page 789: Configuring Management Session And Network Parameters

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2 Configuring Management Session and Network Parameters 9.2.2.1 Viewing System Description Page Configurable Data System Name - Enter the name you want to use to identify this switch. You may use up to 255 alpha-numeric characters.
  • Page 790 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.2 IP Address Conflict Detection Non- Configurable Data Conflict Detection Status - Whether or not an address conflict has been detected since status was last reset. Last Conflicting IP Address - The IP address of the interface that was last found to be conflicting.
  • Page 791 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.3 Configuring Service Port Page You use this panel to specify the parameters needed to communicate with the switch over a network using the service port. Configurable Data Protocol - Choose IPv4 or IPv6 protocol.
  • Page 792 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Gateway - The default gateway for the IP interface. The factory default value is 0.0.0.0 IPv6 Configurable Data New IPv6 Address - To configure the field, select Add from the "Add/Delete IPv6 Addresses" drop down menu EUI Flag -To set the EUI flag while configuring "New IPv6 Address"...
  • Page 793 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.4 Configuring Service port NDP Summary This screen displays IPv6 Service Port Neighbor entries. Non-configurable Data IPv6 Address - The Ipv6 Address of a neighbor switch visible to the Service Port.
  • Page 794 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.5 Service Port DHCPv6 Client Statistics Non-Configurable Data DHCPv6 Advertisement Packets Received - Number of DHCPv6 Advertisement packets received on the service port. DHCPv6 Reply Packets Received - Number of DHCPv6 Reply packets received on the service port.
  • Page 795 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.6 Configuring Network Connectivity Page The network interface is the logical interface used for in-band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
  • Page 796 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Web Mode - Specify whether the switch may be accessed from a Web browser. If you choose to enable web mode you will be able to manage the switch from a Web browser. The factory default is enabled.
  • Page 797 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv6 Non-Configurable Data IPv6 Addresses - List of configured IPv6 Addresses. Default Routers - The IPv6 default routers. IPv6 Link-local scope ID - IPv6 Network Interface's Link-Local address scope ID.
  • Page 798 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.8 Viewing Network Port DHCPv6 Client Statistics Non-Configurable Data DHCPv6 Advertisement Packets Received - Number of DHCPv6 Advertisement packets received on the network interface. DHCPv6 Reply Packets Received - Number of DHCPv6 Reply packets received on the network interface.
  • Page 799 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.9 Configuring DHCP Client Options Configuration Selection Criteria DHCP Vendor Class ID Mode - Enable / Disable the vendor class identifier mode. Configurable Data DHCP Vendor Class ID String - The string that would be added to DHCP requests as Option-60. i.e.
  • Page 800 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.10 HTTP Configuration Configurable Data HTTP Session Soft Timeout - This field is used to set the inactivity timeout for HTTP sessions. The value must be in the range of (0 to 60) minutes. A value of zero corresponds to an infinite timeout.
  • Page 801 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.11 Configuring Telnet Session Page Selection Criteria Maximum Number of Telnet Sessions - Use the pull down menu to select how many simultaneous telnet sessions will be allowed. The maximum is 5, which is also the factory default.
  • Page 802 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.12 Configuring Outbound Telnet Client Configuration Page Selection Criteria Admin Mode - Specifies if the Outbound Telnet service is Enable or Disable. Default value is Enable. Maximum Sessions - Specifies the maximum number of Outbound Telnet Sessions allowed.
  • Page 803 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.13 Configuring Outbound SSH Client Configuration Page Selection Criteria Admin Mode - Specifies if the Outbound Telnet service is Enable or Disable. Default value is Enable. Maximum Sessions - Specifies the maximum number of Outbound Telnet Sessions allowed.
  • Page 804 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2.14 Configuring Serial Port Page Selection Criteria Baud Rate (bps) - Select the default baud rate for the serial port connection from the pull-down menu. You may choose from 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 baud. The factory default is 115200 baud.

  • Page 805: Managing System Utilities

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.3 Managing System Utilities 9.2.3.1 Saving All Configuration Changed Page Command Buttons Save - Click this button to have configuration changes you have made saved across a system reboot. All changes submitted since the previous save or system reboot will be retained by the switch.
  • Page 806 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.3.3 Restoring All Configuration to Default Values Page Command Buttons Reset - Clicking the Reset button will reset all of the system login passwords to their default values. If you want the switch to retain the new values across a power cycle, you must perform a save.
  • Page 807 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.3.6 Defining Ping Function Page Use this screen to tell the switch to send a Ping request to a specified IP address. You can use this to check whether the switch can communicate with a particular IP station. Once you click the Submit button, the switch will send three pings and the results will be displayed below the configurable data.
  • Page 808 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Link Local Address - Enter the link local address of the station you want the switch to ping. The initial value is blank. The Link Local Address you enter is not retained across a power cycle.
  • Page 809 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.3.7 TraceRoute Function Use this screen to tell the switch to send a TraceRoute request to a specified IP address.You can use this to discover the paths packets take to a remote destination. Once you click the Submit button, the switch will send traceroute and the results will be displayed below the configurable data.
  • Page 810 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Traceroute - Display the result of traceroute. Command Buttons Submit - This will initiate the traceroute. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 810/1246...

  • Page 811: File Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.4 File Management 9.2.4.1 Downloading File to Switch Page Use this menu to download a file to the switch. Configurable Data File Type - Specify what type of file you want to download: Config Script - specify configuration script when you want to update the switch's script file.
  • Page 812 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. User Name - Specify the user account of the FTP site. User Password - Specify the user password of the FTP site. Server Address - Enter the IP address of the TFTP server. The factory default is 0.0.0.0.
  • Page 813 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.4.2 Uploading File from Switch Page Use this menu to upload a code, configuration, or log file from the switch. Configurable Data File Type - Specify the type of file you want to upload. The available options are Script, Code, CLI Banner, Configuration, Error Log, Buffered Log, and Trap Log.
  • Page 814 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.4.3 Defining Configuration and Runtime Startup File Page Specify the file used to start up the system. Selection Criteria Configuration File - Configuration files. Runtime File - Run-time operation codes.
  • Page 815 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.4.5 Copying Running Configuration to Flash Page Use this menu to copy a start-up configuration file from the running configuration file on switch. Configurable Data File Name - Enter the name you want to give the file being copied. You may enter up to 32 characters.

  • Page 816: User Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5 User Management 9.2.5.1 Defining User Accounts Page By default, two user accounts exist:  admin, with 'Read/Write' privileges  guest, with 'Read Only' privileges By default, both of these accounts have blank passwords. The names are not case sensitive.
  • Page 817 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Configurable Data User Name - Enter the name you want to give to the new account. (You can only enter data in this field when you are creating a new account.) User names are up to eight characters in length and are not case sensitive.
  • Page 818 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.5.2 Defining Authentication List Configuration Page You use this screen to configure login lists. A login list specifies the authentication method(s) you want used to validate switch or port access for the users associated with the list. The pre-configured users, admin and guest, are assigned to a pre-configured list named defaultList, which you may not delete.
  • Page 819 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Method 3 –Use the dropdown menu to select the method, if any, that should appear second in the selected authentication list. This is the method that will be used if the first method times out. If you select a method that does not time out as the second method, the third method will not be tried.
  • Page 820 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.3 Viewing Login Session Page Non-Configurable Data ID - Identifies the ID of this row. User Name - Shows the user name of user who made the session. Connection From - Shows the IP from which machine the user is connected.
  • Page 821 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.4 Viewing Authentication List Summary Page Non-Configurable Data Login Authentication List - Shows the Login authentication profiles. Enable Authentication List - Shows the Enable authentication profiles. Login/Enable Method List - User authentication methods. Possible options are: (1) Enable - uses the enable password for authentication.
  • Page 822 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.5 Configuring Authentication List Configurable Data Console - Authentication profiles used to authenticate console users. Login or Enable - Specify the login list and enable list which will be used to validate switch or port access for the users associated with the list Telnet - Authentication profiles used to authenticate Telnet users.
  • Page 823 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. of locally TACACS+ - the user's ID and password will be authenticated using the TACACS+ server LDAP - the user's ID and password will be authenticated using the LDAP server Method 2 - Use the dropdown menu to select the method, if any, that should appear second in the selected authentication list.
  • Page 824 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.6 Configuring Line Password Configuration Data Line Mode - Select the line mode from the drop-down list. Line Password (8-64 characters) - The line password for accessing the device via a console, Telnet, or Secure Telnet session.
  • Page 825 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.8 Defining User Login Page Each configured user is assigned to a login list that specifies how the user should be authenticated when attempting to access the switch or a port on the switch. After creating a new user account on the User Account screen, you should assign that user to a login list for the switch using this screen and, if necessary, to a login list for the ports using the Port Access Control User Login Configuration screen.
  • Page 826 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.9 Defining Password Management Configurable Data Minimum Length - Valid range for user passwords is (8 to 64) characters in length. Default value is Aging (days) - The maximum time that user passwords are valid, in days, from the time the password is set.
  • Page 827 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Maximum Number of Repeated Characters - Valid range for user passwords is (0 to 15) number of characters. Default value is 0. Maximum Number of Consecutive Characters - Valid range for user passwords is (0 to 15) number of characters.
  • Page 828 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.5.10 Last Password Set Result Non-Configurable Data Last Password Set Result - Displays the last (User/Line/Enable) Password configuration result. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch.
  • Page 829 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save.

  • Page 830: Viewing Logs

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6 Viewing Logs 9.2.6.1 Viewing Buffered Log Configuration Page This log stores messages in memory based upon the settings for message component and severity. On stackable systems, this log exists only on the top of stack platform. Other platforms in the stack forward their messages to the top of stack log.
  • Page 831 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.2 Viewing Buffered Log Page This help message applies to the format of all logged messages which are displayed for the buffered log, persistent log, or console log. Format of the messages <15>Aug 24 05:34:05 STK0 MSTP[2110]: mspt_api.c(318) 237 %% Interface 12 transitioned to root...
  • Page 832 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.3 Configuring Command Logger Page Configurable Criteria Admin Mode - Enable/Disable the operation of the CLI Command logging by selecting the corresponding pull-down field and clicking Submit. Command Buttons Submit - Update the switch with the values you entered.
  • Page 833 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.4 Configuring Console Log Page This allows logging to any serial device attached to the host. Configurable Criteria Admin Status -A log that is "Disabled" shall not log messages. A log that is "Enabled" shall log messages.
  • Page 834 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.5 Viewing Event Log Page Use this panel to display the event log, which is used to hold error messages for catastrophic events. After the event is logged and the updated log is saved in FLASH memory, the switch will be reset. The log can hold at least 2,000 entries (the actual number depends on the platform and OS), and is erased when an attempt is made to add an entry after it is full.
  • Page 835 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.6 Configuring Hosts configuration Page Configurable Criteria Host - This is a list of the hosts that have been configured for syslog. Select a host for changing the configuration or choose to add a new hosts from the drop down list.
  • Page 836 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.7 Configuring Terminal Log Configuration Page This allows logging to any terminal client connected to the switch via telnet or SSH. To receive the log messages, terminals have to enable "terminal monitor" via CLI command.
  • Page 837 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.6.8 Configuring syslog configuration Page Configurable Criteria Admin Status - For Enabling and Disabling logging to configured syslog hosts. Setting this to disable stops logging to all syslog hosts. Disable means no messages will be sent to any collector/relay.

  • Page 838: Viewing Statistics

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.7 Viewing Statistics 9.2.7.1 Viewing the whole Switch Detailed Statistics Page Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with the Processor of this switch.
  • Page 839 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Multicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent. Broadcast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent.
  • Page 840 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.7.2 Viewing the whole Switch Summary Statistics Page Non-Configurable Data Interface - This object indicates the interface index of the interface table entry associated with the Processor of this switch Packets Received Without Errors - The total number of packets (including broadcast packets and multicast packets) received by the processor.
  • Page 841 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.7.3 Viewing Each Port Detailed Statistics Page Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with this port on an adapter.
  • Page 842 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets RX and TX > 1518 Octets - The total number of packets (including bad packets) received or transmitted that were longer than 1518 octets in length (excluding framing bits but including FCS octets).
  • Page 843 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Alignment Errors - The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.
  • Page 844 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. requested be transmitted to the Broadcast address, including those that were discarded or not sent. Total Transmit Errors - The sum of Single, Multiple, and Excessive Collisions. Tx FCS Errors - The total number of packets transmitted that had a length (excluding framing bits,...
  • Page 845 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Time Since Counters Last Cleared - The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were last cleared. Command Buttons Clear Counters - Clear all the counters, resetting all statistics for this port to default values.
  • Page 846 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.7.4 Viewing Each Port Summary Statistics Page Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with this port on an adapter.

  • Page 847: Managing Snmp And Trap

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8 Managing SNMP and Trap 9.2.8.1 Configuring SNMP Community Configuration Page By default, two SNMP Communities exist:  private, with 'Read/W rite' privileges and status set to enable  public, with 'Read Only' privileges and status set to enable These are well-known communities;...
  • Page 848 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. (inclusive) will be allowed access. To allow access from only one station, use a Client IP Mask value of 255.255.255.255, and use that machine's IP address for Client IP Address.
  • Page 849 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.2 Configuring SNMP User This menu will display an entry for every SNMP user. Selection Criteria User - You can use this screen to reconfigure an existing SNMP user, or to create a new one. Use this pull-down menu to select one of the existing SNMP user, or select 'Create' to add a new one.
  • Page 850 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.3 Configuring SNMP EngineID This menu will display an entry for configuring remote EngineID. Selection Criteria IP Address - You can use this screen to reconfigure an existing host, or to create a new one. Use this pull-down menu to select one of the existing host, or select 'Create' to add a new one.
  • Page 851 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.4 Configuring SNMP Trap Receiver Configuration Page This menu will display an entry for every active Trap Receiver. Configurable Data SNMP Trap Name - Enter the community string for the SNMP trap packet to be sent to the trap manager.
  • Page 852 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.5 Inform Receiver Configuration This menu will display an entry for every active SNMP Inform Receiver. Selection Criteria Community/User - You can use this screen to reconfigure an existing community or SNMP user, or to create a new one.
  • Page 853 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.6 Configuring Trap Flags Page Use this menu to specify which traps you want to enable. When the condition identified by an active trap is encountered by the switch a trap message will be sent to any enabled SNMP Trap Receivers, and a message will be written to the trap log.
  • Page 854 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.7 OSPFv2 Trap Flags Use the OSPFv2 Trap Flags page to specify which OSPFv2 traps you want to enable. W hen the condition identified by an active trap is encountered by the switch a trap message will be sent to any enabled SNMP Trap Receivers, and a message will be written to the trap log.
  • Page 855 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. should not be invoked for simple refreshes of LSAs(which happens every 30 minutes), but instead will only be invoked when an LSA is (re)originated due to a topology change. Additionally, this trap does not include LSAs that are being flushed because they have reached MaxAge.
  • Page 856 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.8 Captive Portal Trap Flags Page Non-Configurable Data Client Authentication Failure Traps - If you enable this field, the SNMP agent sends a trap when a client attempts to authenticate with a captive portal but is unsuccessful.
  • Page 857 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.9 Viewing Trap Log Page This screen lists the entries in the trap log. The information can be retrieved as a file by using System Utilities, Upload File from Switch.
  • Page 858 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.8.10 Viewing SNMP supported MIBs Page This is a list of all the MIBs supported by the switch. Non-configurable Data Name - The RFC number if applicable and the name of the MIB.

  • Page 859: Managing Sntp

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.9 Managing SNTP 9.2.9.1 Configuring SNTP Global Configuration Page Configurable Data Client Mode - Specifies the mode of operation of SNTP Client. An SNTP client may operate in one of the following modes.
  • Page 860 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. first time-out before attempting to use the next configured server when configured in unicast mode. Allowed range is (0 to 10). Default value is 1. Command Buttons Submit - Sends the updated configuration to the switch. Configuration changes take effect immediately.
  • Page 861 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Server Kiss Of Death - The SNTP server indicated that no further queries were to be sent to this server. This is indicated by a stratum field equal to 0 in a message received from a server.
  • Page 862 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.9.3 Configuring SNTP Server Page Configurable Data Server - Specifies all the existing Server Addresses along with an additional option "Create". When the user selects "Create" another text box "Address" appears where the user may enter Address for Server to be configured.
  • Page 863 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.9.4 Viewing SNTP Server Status Page Non-Configurable Data Address - Specifies all the existing Server Addresses. If no Server configuration exists, a message saying "No SNTP server exists" flashes on the screen.
  • Page 864 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.9.5 Configuring Current Time Settings Page Configurable Data Year - Year (4-digit). (Range: 2000 - 2037). Month - Month (Range: 1 - 12). Day - Day of month. (Range: 1 - 31).
  • Page 865 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.9.6 Configuring Time Zone Settings Page Simple Network Time Protocol (SNTP) allows the switch to set its internal clock based on periodic updates from a time server. Maintaining an accurate time on the switch enables the system log to record meaningful dates and times for event entries.

  • Page 866: Managing Cdp Function

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.10 Managing CDP Function 9.2.10.1 Defining CDP Configuration Page Use this menu to configure the parameters for CDP, which is used to discover a CISCO device on the LAN. Selection Criteria Admin Mode - CDP administration mode which are Enable and Disable.
  • Page 867 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.10.2 Viewing Neighbors Information Page Non-Configurable Data Device ID - Identifies the device name in the form of a character string. Intf - The CDP neighbor information receiving port. Time - The length of time a receiving device should hold CDP information before discarding it.
  • Page 868 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.10.3 Viewing Traffic Statistics Page Use this menu to display CDP traffic statistics. Non-Configurable Data Incoming Packet Number - Received legal CDP packets number from neighbors. Outgoing Packet Number - Transmitted CDP packets number from this device.

  • Page 869: Managing Udld

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.11 Managing UDLD 9.2.11.1 Configuring UDLD Selection Criteria Global Port Mode - Specifies the UDLD Global Port mode. It has three options: Disable, Normal and Aggressive. Interface - Specifies the list of all the physical ports on which UDLD can be configured.
  • Page 870 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.11.2 Viewing UDLD Device Information Selection Criteria Interface - Specifies the list of all the physical ports on which UDLD can be configured. Non-Configurable Data Port Enable Operational State - Specifies the Port Enable Operational State of the selected port.

  • Page 871: Managing Lldp

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12 Managing LLDP 9.2.12.1 Configuring LLDP Global Configuration Page Configurable Data Transmit Interval - Specifies the interval in seconds to transmit LLDP frames. The range is from (1 to 32768). Default value is 30 seconds.
  • Page 872 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.2 Configuring LLDP Interface Configuration Page Selection Criteria Interface - Specifies the list of ports on which LLDP - 802.1AB can be configured. Transmit - Specifies the LLDP - 802.1AB transmit mode for the selected interface.
  • Page 873 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.3 Viewing LLDP Interface Summary Page Non-Configurable Data Interface - Specifies all the ports on which LLDP - 802.1AB can be configured. Link Status - Specifies the Link Status of the ports whether it is Up/Down.
  • Page 874 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.4 Viewing LLDP Statistics Page Non-Configurable Data Last Update - Specifies the time when an entry was created, modified or deleted in the tables associated with the remote system. Total Inserts - Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point (MSAP) has been inserted into tables associated with the remote systems.
  • Page 875 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. recognized by the LLDP agent on the corresponding port. TLV MED - Specifies the total number of LLDP-MED TLVs received on the local ports. TLV 802.1 - Specifies the total number of LLDP TLVs received on the local ports which are of type 802.1.
  • Page 876 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.5 Viewing LLDP Local Device Information Page Selection Criteria Interface - Specifies the list of all the ports on which LLDP - 802.1AB frames can be transmitted. Non-Configurable Data Chassis ID Subtype - Specifies the string that describes the source of the chassis identifier.
  • Page 877 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. auto-negotiation is enabled.  PMD Auto-Negotiation Advertised Capabilities - Specifies the auto-negotiation and speed capabilities of the PMD.  Operational MAU Type - Specifies the current duplex and speed settings of the sending system.
  • Page 878 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.7 Viewing LLDP Remote Device Information Page Selection Criteria Local Interface - Specifies all the local ports which can receive LLDP frames. Non-Configurable Data Remote ID - Specifies the remote client identifier assigned to the remote system.
  • Page 879 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port ID Subtype - Specifies the source of port identifier. Port ID - Specifies the port component associated with the remote system. System Name - Specifies the system name of the remote system.
  • Page 880 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.12.8 Viewing LLDP Remote Device Summary Page Non-Configurable Data Local Interface - Specifies the local port which can receive LLDP frames advertised by a remote system. Chassis ID - Specifies the chassis component associated with the remote system.

  • Page 881: Managing Lldp-Med

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.13 Managing LLDP-MED 9.2.13.1 Configuring LLDP-MED Global Configuration Page Configurable Data Fast Start Repeat Count - Specifies the number of LLDP PDUs that will be transmitted when the protocol is enabled. The range is from (1 to 10). Default value of fast repeat count is 3.
  • Page 882 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.13.2 Configuring LLDP-MED Interface Configuration Page Selection Criteria Interface - Specifies the list of ports on which LLDP-MED - 802.1AB can be configured. 'All' option is provided to configure all interfaces on the DUT and to be consistent with CLI. To view the summary of all interfaces refer to 'Interface Summary' webpage.
  • Page 883 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.13.3 Configuring LLDP-MED Interface Summary Page Non-Configurable Data Interface - Specifies all the ports on which LLDP-MED can be configured. Link Status - Specifies the link status of the ports whether it is Up/Down.
  • Page 884 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.13.4 Configuring LLDP-MED Local Device Information Page Selection Criteria Interface - Specifies the list of all the ports on which LLDP-MED frames can be transmitted. Non-Configurable Data Network Policy Information - Specifies if network policy TLV is present in the LLDP frames.
  • Page 885 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Extended PoE PSE - Specifies if extended PSE TLV is present in LLDP frame. Available - Specifies available power sourcing equipment's power value in tenths of watts on the port of local device.
  • Page 886 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.13.5 Configuring LLDP-MED Remote Device Information Page Selection Criteria Local Interface - Specifies the list of all the ports on which LLDP-MED is enabled. Non-Configurable Data Capability Information - Specifies the supported and enabled capabilities that were received in MED TLV on this port.
  • Page 887 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Manufacturer Name - Specifies manufacturer’s name of the remote device. Model Name - Specifies model name of the remote device. Asset ID - Specifies asset id of the remote device.

  • Page 888: Managing Sflow

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.14 Managing sFlow 9.2.14.1 Configuring sFlow Agent Summary Configuration Page Configurable Data Version - Uniquely identifies the version and implementation of this MIB. The version string must have the following structure: MIB Version;Organization;Software Revision where: ...
  • Page 889 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.14.2 Configuring sFlow Receiver Configuration Page Selection Criteria Receiver Index - Selects the receiver for which data is to be displayed or configured. Allowed range is (1 to 8) Configurable Data Receiver Owner String- The entity making use of this sFlow Receiver Table entry.
  • Page 890 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. sFlow Receiver Address - The IP address of the sFlow collector. sFlow Receiver Port - The destination port for sFlow datagrams. sFlow Receiver Datagram Version - The version of sFlow datagrams that should be sent.
  • Page 891 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.14.4 Configuring sFlow Sampler Configuration Page sFlow agent collects statistical packet-based sampling of switched flows and sends them to the configured receivers. A data source configured to collect flow samples is called a sampler.
  • Page 892 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.14.5 Viewing sFlow Port Summary Page Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Non-Configurable Data Interface - The interface for which data is being displayed.
  • Page 893 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Unicast Packets Transmitted Rate - The total number of packets rates that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent. Multicast Packets Transmitted Rate - The total number of packets rates that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent.

  • Page 894: Managing Dhcp Client

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.15 Managing DHCP Client 9.2.15.1 Configuring DHCP Restart Page This command issues a BOOTP or DHCP client request for any IP interface that has been set to BOOTP or DHCP mode via the IP address command. DHCP requires the server to reassign the client's last address if available.
  • Page 895 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.15.3 Configuring DHCP Client-identifier Page Specify the DCHP client identifier for the switch. The DCHP client identifier is used to include a client identifier in all communications with the DHCP server. The identifier type depends on the requirements of your DHCP server.

  • Page 896: Managing Time Ranges

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.16 Managing Time Ranges 9.2.16.1 Time Zone Settings A Time Range consists of one absolute time entry and/or one or more periodic time entries. Depending on the type, a time range entry consists of start time or end time or both. Absolute and periodic time entries for the Time Range are specified/created using the Time Range Entry Configuration menu.
  • Page 897 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.16.2 Time Range Summary Non-Configurable Data Time Range Name - Time Range identifier. Time Range Status - Status of the Time Range - Active/Inactive. Periodic Entry Count - The number of periodic time entries currently configured for the Time Range.
  • Page 898 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.16.3 Time Range Entry Configuration Selection Criteria Time Range Name - Select the time range for which to create or delete a time entry. Time Range Entry - Select an existing time range entry or select 'Create New Time Range Entry' to add a new time range entry.
  • Page 899 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Option 'Days of week' enables selection of applicable periodic entry start day and end day from 'Start Day' and 'End Day' fields of the page. Start Day - Select the day(s) of the week of the periodic entry's start day. Multiple days can be selected.

  • Page 900: Managing Dns Relay Function

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.17 Managing DNS Relay Function 9.2.17.1 Configuring DNS Relay Configuration Page The DNS protocol controls the Domain Name System (DNS), a distributed database with which you can map host names to IP addresses. W hen you configure DNS on your switch, you can substitute the host name for the IP address with all IP commands, such as ping, telnet, traceroute, and related Telnet support operations.
  • Page 901 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.17.2 Configuring Domain Name Configuration Page You can use this screen to change the configuration parameters for the domain names that can be appended to incomplete host names (i.e., host names passed from a client that are not formatted with dotted notation).
  • Page 902 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.17.3 Configuring Name Server Configuration Page You can use this screen to change the configuration parameters for the domain name servers. You can also use this screen to display the contents of the table.
  • Page 903 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.17.4 Configuring DNS Cache Summary Page The Domain Name System (DNS) dynamically maps domain name to Internet (IP) addresses. This panel displays the current contents of the DNS cache. Non-Configurable Data Domain Name List - The domain name associated with this record.
  • Page 904 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.17.5 Configuring Hosts Configuration Page You can use this screen to change the configuration parameters for the static entry in the DNS table. You can also use this screen to display the contents of the table.

  • Page 905: Managing Ddns Function

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.18 Managing DDNS Function 9.2.18.1 Configuring DDNS Configuration Page The DDNS protocol provides user to update IP address of the specified host name to the DDNS provider. Selection Criteria DDNS Host - Selects the DDNS Host for which data is to be displayed or configured. If the add item is selected, a new DDNS Host can be configured.

  • Page 906: Switching Menu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Switching Menu 9.3.1 Defining Forwarding Database 9.3.1.1 Configuring MAC Table aging interval time Page Use this panel to set the Address Ageing Timeout for the forwarding database. Configurable Data Aging Interval (secs) - The forwarding database contains static entries, which are never aged out, and dynamically learned entries, which are removed if they are not updated within a given time.
  • Page 907 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.2 Viewing Forwarding Database Page Use this panel to display information about entries in the forwarding database. These entries are used by the transparent bridging function to determine how to forward a received frame.

  • Page 908: Managing Switch Interface

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2 Managing Switch Interface 9.3.2.1 Configuring Switch Interface Page Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Configurable Data Admin Mode - Use the pull-down menu to select the Port control administration state. You must select enable if you want the port to participate in the network.
  • Page 909 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Flow Control - Used to enable or disable flow control feature on the selected interface. LACP Mode - Selects the Link Aggregation Control Protocol administration state. The mode must be enabled in order for the port to participate in Link Aggregation.
  • Page 910 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.2 Viewing Switch Interface Configuration Page This screen displays the status for all ports in the box. Selection Criteria MST ID - Select the Multiple Spanning Tree instance ID from the list of all currently configured MST ID's to determine the values displayed for the Spanning Tree parameters.
  • Page 911 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Disabled Blocking Listening Learning Forwarding Broken Port Role - Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will be one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port, or Disabled Port.
  • Page 912 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.3 Configuring Port Description Function Page This screen configures and displays the description for all ports in the box. Selection Criteria Interface - Selects the interface for which data is to be displayed or configured.
  • Page 913 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.4 Configuring Cable Test Function Page Below 10-Giga Interface doesn’t have this feature 9.3.2.5 Configuring Multiple Port Mirroring Function Page Selection Criteria Session Select a port mirroring session from the list. The number of sessions allowed is platform specific.
  • Page 914 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.6 Configuring Error Disable Recovery Selection Criteria storm-control - Enables or disables the specify Error Disable Recovery Cause by storm-control. The factory default is disabled. udld - Enables or disables the specify Error Disable Recovery Cause by UDLD. The factory default is disabled.

  • Page 915: Managing Dhcp Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.3 Managing DHCP Snooping 9.3.3.1 Configuring DHCP Snooping Configuration Page Configurable Data DHCP Snooping Mode - Enables or disables the DHCP Snooping feature. The factory default is disabled. MAC Address Validation - Enables or disables the validation of sender MAC Address for DHCP Snooping.
  • Page 916 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.3.2 Configuring DHCP Snooping VLAN Configuration Page Selection Criteria VLAN ID - Select the VLAN for which information to be displayed or configured for DHCP Snooping Application. Configurable Data DHCP Snooping Mode - Enables or disables the DHCP Snooping feature on selected VLAN. The factory default is disabled.
  • Page 917 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.3.3 Configuring DHCP Snooping Interface Configuration Page Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Configurable Data Trust State - If it is Enabled DHCP snooping application considers as port trusted. The factory default is disabled.
  • Page 918 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.3.4 Configuring DHCP Snooping Static Binding Configuration Page Configurable Data Interface - Selects the interface to add a binding into the DHCP snooping database. MAC Address - Specify the MAC address for the binding to be added. This is the Key to the binding database.
  • Page 919 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Page - Lists the Number of Pages the dynamic binding entries occupied. Select the Page Number from this list to display the particular Page entries. Command Buttons Add - Adds DHCP snooping binding entry into the database.
  • Page 920 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.3.6 DHCP Snooping Interface Statistics Page Selection Criteria Interface - Select the untrusted and snooping enabled interface for which statistics to be displayed. Non-Configurable Data MAC Verify Failures - Number of packets that were dropped by DHCP Snooping as there is no matching DHCP Snooping binding entry found.

  • Page 921: Dhcp Snooping Information Option 82

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.4 DHCP Snooping Information Option 82 9.3.4.1 Configuring DHCP Snooping Information Option 82 Global Configurable Data DHCP Snooping Information Option 82 Mode - Enables or Disables the DHCP Snooping Information Option 82 feature. The factory default is Disable.
  • Page 922 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.4.2 Configuring DHCP Snooping Information Option 82 Interface Selection Criteria Interface - Selects the interface for which data is to be displayed or configured. Configurable Data DHCP Snooping Information Option 82 Mode – Enables or Disables DHCP Snooping Information Option 82 Mode on selected interface.
  • Page 923 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.4.3 Configuring DHCP Snooping Information Option 82 VLAN Selection Criteria VLAN ID - Selects the VLAN for which data is to be displayed or configured. Configurable Data DHCP Snooping Information Option 82 Mode - Enables or Disables the DHCP Snooping Information Option 82 feature on selected VLAN.
  • Page 924 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.4.4 DHCP Snooping Information Option 82 Interface Statistics Selection Criteria Interface - Select the DHCP L2 Relay enabled interface for which statistics to be displayed. Non-Configurable Data Untrusted Server Messages with Option-82 - Number of DHCP Reply packets received with...

  • Page 925: Managing Ip Source Guard (Ipsg)

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.5 Managing IP Source Guard (IPSG) 9.3.5.1 Configuring IPSG Configuration Page Selection Criteria Interface - Select the physical interface for which you want to configure data. Configurable Data IPSG - Enables or disables validation of Sender IP Address on this interface. If IPSG is Enabled Packets will not be forwarded if Sender IP Address is not in DHCP Snooping Binding database.
  • Page 926 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.5.2 Configuring IPSG Static Binding Configuration Page Configurable Data Interface - Selects the interface to add a binding into the IPSG database. MAC Address - Specify the MAC address for the binding.
  • Page 927 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Page Number from this list to display the particular Page entries. Command Buttons Add - Adds DHCP snooping binding entry into the database. Submit - Deletes selected static entries from the database.

  • Page 928: Managing Port-Based Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.6 Managing Port-Based VLAN 9.3.6.1 VLAN Configuration Selection Criteria VLAN ID and Name - You can use this screen to reconfigure an existing VLAN, or to create a new one. Use this pull-down menu to select one of the existing VLANs, or select 'Create' to add a new one.
  • Page 929 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.  Exclude - This port is never a member of this VLAN. This is equivalent to registration forbidden in the IEEE 802.1Q standard.
  • Page 930 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.6.2 VLAN Status This page displays the status of all currently configured VLANs. Non-Configurable Data VLAN ID - The VLAN Identifier (VID) of the VLAN. The range of the VLAN ID is (1 to 4093).
  • Page 931 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.6.3 VLAN Port Configuration Selection Criteria Interface - Select the physical interface for which you want to display or configure data. Select 'All' to set the parameters for all ports to same values.
  • Page 932 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.6.4 VLAN Port Summary Non-Configurable Data Interface - The interface. Port VLAN ID Configured - The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port.
  • Page 933 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.6.5 Reset VLAN Configuration Command Buttons Reset - If you select this button and confirm your selection on the next screen, all VLAN configuration parameters will be reset to their factory default values. Also, all VLANs, except for the default VLAN, will be deleted.

  • Page 934: Managing Dvlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.7 Managing DVLAN 9.3.7.1 DVLAN Interface Configuration Selection Criteria Interface - Select the physical interface for which you want to display or configure data. Select 'All' to set the parameters for all ports to same values.
  • Page 935 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.7.2 DVLAN Interface Summary Non-Configurable Data Interface - The physical interface for which data is being displayed. Interface Mode - This specifies the administrative mode via which Double VLAN Tagging can be enabled or disabled.

  • Page 936: Managing Protected Ports

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.8 Managing Protected Ports 9.3.8.1 Protected Ports Configuration Page Use this menu to configure the ports as protected or unprotected. You need read-write access privileges to modify the configuration. Selection Criteria Group ID - The protected ports can be combined into a logical group.
  • Page 937 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.8.2 Protected Ports Summary Page Non-Configurable Data Group ID - The protected ports can be combined into a logical group. Traffic can flow between protected ports belonging to different groups, but not within the same group. The valid range of the Group ID is (0 to 2).

  • Page 938: Managing Protocol-Based Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.9 Managing Protocol-based VLAN 9.3.9.1 Protocol-based VLAN Configuration Page You can use a protocol-based VLAN to define filtering criteria for untagged packets. By default, if you do not configure any port- (IEEE 802.1Q) or protocol-based VLANs, untagged packets will be assigned to VLAN 1.
  • Page 939 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPX - The Internetwork Packet Exchange (IPX) is a connectionless datagram Network-layer protocol that forwards data over a network. VLAN - VLAN can be any number in the range of (1 to 4093) . All the ports in the group will assign this VLAN ID to untagged packets received for the protocols you included in this group.
  • Page 940 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.9.2 Viewing Protocol-based VLAN Information Page Non-Configurable Data Group Name - The name associated with the group. Group names can be up to 16 characters. The maximum number of groups allowed is 128.

  • Page 941: Managing Ip Subnet-Based Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.10 Managing IP Subnet-based VLAN 9.3.10.1 IP Subnet-based VLAN Configuration Page IP Subnet to VLAN mapping is defined by configuring an entry in the IP Subnet to VLAN table. An entry is specified via a source IP address, network mask, and the desired VLAN ID.
  • Page 942 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.10.2 Viewing IP Subnet-based VLAN Information Page Non-Configurable Data IP Address - The IP Address of the subnet that is being bound to a VLAN ID. Subnet Mask - Subnet mask of the IP Address bound to VLAN ID.

  • Page 943: Managing Mac-Based Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.11 Managing MAC-based VLAN 9.3.11.1 MAC-based VLAN Configuration Page MAC-based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classify traffic based on the source MAC address of the packet.
  • Page 944 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.11.2 Viewing MAC-based VLAN Information Page Non-Configurable Data MAC Address - MAC Address bound to a VLAN ID. VLAN ID - The VLAN ID to which a MAC Address is bound.

  • Page 945: Managing Mac-Based Voice Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.12 Managing MAC-based Voice VLAN 9.3.12.1 MAC-based Voice VLAN Administration Page Configurable Data VLAN ID - Sets the VLAN as a Voice VLAN. Admin Mode - Enables or disables the Voice VLAN function.
  • Page 946 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Configurable Data MAC Address - Specify the MAC Address for the new Voice VLAN. (You can only enter data in this field when you are creating a new Voice VLAN.).

  • Page 947: Managing Voice Vlan

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.13 Managing Voice VLAN 9.3.13.1 Voice VLAN Configuration Page Use this menu to configure the parameters for Voice VLAN Configuration. Note that only a user with Read/Write access privileges may change the data on this screen.

  • Page 948: Managing Mac Filters

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.14 Managing MAC Filters 9.3.14.1 Configuring MAC filter Configuration Page Selection Criteria MAC Filter - This is the list of MAC address and VLAN ID pairings for all configured filters. To change the port mask(s) for an existing filter, select the entry you want to change.
  • Page 949 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.14.2 MAC filter Summary Page Non-Configurable Data MAC Address - The MAC address of the filter in the format 00:01:1A:B2:53:4D. VLAN ID - The VLAN ID associated with the filter.

  • Page 950: Managing Garp

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.15 Managing GARP 9.3.15.1 Configuring the whole Switch GARP Configuration Page It can take up to 10 seconds for GARP configuration changes to take effect. Configurable Data GVRP Mode - Choose the GARP VLAN Registration Protocol administrative mode for the switch by selecting enable or disable from the pull down menu.
  • Page 951 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.15.2 Configuring each Port GARP Configuration Page It can take up to 10 seconds for GARP configuration changes to take effect. Selection Criteria Interface - Select the physical interface for which data is to be displayed or configured. It is possible to set the parameters for all ports by selecting 'All'.
  • Page 952 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Submit - Update the switch with the values you entered. If you want the switch to retain the new values across a power cycle you must perform a save. 9.3.15.3 Viewing GARP Information Page This screen shows the GARP Status for the switch and for the individual ports.
  • Page 953 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Leave Time (centiseconds) - Specifies the time to wait after receiving an unregister request for a VLAN or multicast group before deleting the associated entry, in centiseconds. This allows time for another station to assert registration for the same attribute in order to maintain uninterrupted service.

  • Page 954: Managing Vtp

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.16 Managing VTP 9.3.16.1 Configuring VTP Configuration Page Configurable Data Admin Mode - Enable or disable the VTP feature. Device Mode - Use the pull-down menu to select the VTP device mode(client, server and transparent).
  • Page 955 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.16.2 Viewing VTP Status Page Non-configurable data VTP Status - Displays the VTP Status. VTP Version - Displays the VTP version operating on the switch. Configuration Revision - Displays the current configuration revision number on this switch.

  • Page 956: Managing Dynamic Arp Inspection (Dai)

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17 Managing Dynamic ARP Inspection (DAI) 9.3.17.1 Configuring DAI Global Configuration Page Configurable Data Validate Source MAC - Choose the DAI Source MAC Validation Mode for the switch by selecting Enable or Disable from the pull down menu.
  • Page 957 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17.2 Configuring DAI VLAN Configuration Page Selection Criteria VLAN ID - Select the DAI Capable VLANs for which information has to be displayed or configured. Configurable Data Dynamic ARP Inspection - Indicates whether the Dynamic ARP Inspection is enabled on this VLAN.
  • Page 958 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17.3 Configuring DAI Interface Configuration Page Selection Criteria Interface - Select the physical interface for which data is to be displayed or configured. Configurable Data Trusted State - Indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'Enable', the interface is trusted.
  • Page 959 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17.4 Configuring DAI ARP ACL Configuration Page Configurable Data ARP ACL Name - This is used to create New ARP ACL for DAI. Remove - This is used to select the particular ACLs which you want to delete.
  • Page 960 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17.5 Configuring DAI ARP ACL Rule Configuration Page Selection Criteria ARP ACL Name - Select the ARP ACL for which information want to be displayed or configured. Configurable Data Sender IP Address - This is used to create new Rule for the Selected ARP ACL. This indicates Sender IP address match value for the ARP ACL.
  • Page 961 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.17.6 Configuring DAI Statistics Page Selection Criteria VLAN ID - Select the DAI enabled VLAN ID for which statistics to be displayed. Non-Configurable Data DHCP Drops - Number of ARP packets that were dropped by DAI as there is no matching DHCP Snooping binding entry found.

  • Page 962: Managing Igmp Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18 Managing IGMP Snooping 9.3.18.1 Configuring IGMP Snooping Global Configuration Page Use this menu to configure the parameters for IGMP Snooping, which is used to build forwarding lists for multicast traffic. Note that only a user with Read/Write access privileges may change the data on this screen.
  • Page 963 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.2 Defining IGMP Snooping Interface Configuration Page Selection Criteria Interface - The single select box lists all physical,VLAN and LAG interfaces. Select the interface you want to configure. Admin Mode - Select the interface mode for the selected interface for IGMP Snooping for the switch from the pull-down menu.
  • Page 964 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.3 Configuring IGMP Snooping VLAN Page Selection Criteria VLAN ID - Specifies list of VLAN IDs for which IGMP Snooping is enabled. Configurable Data VLAN ID - Appears when "New Entry" is selected in VLAN ID combo box. Specifies VLAN ID for which pre-configurable Snooping parameters are to be set.
  • Page 965 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.4 Viewing IGMP Snooping VLAN Status Page Non-Configurable Data VLAN ID - All VLAN Ids for which the IGMP Snooping mode is Enable. Admin Mode - IGMP Snooping Mode for VLAN ID.
  • Page 966 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.5 Configuring Multicast Router Page Selection Criteria Interface - The select box lists all interfaces. Select the interface for which you want Multicast Router to be enabled. Multicast Router - Enable or disable Multicast Router on the selected Slot/Port.
  • Page 967 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.6 Viewing Multicast Router Statistics Page Selection Criteria Interface - The single select box lists all physical and LAG interfaces. Select the interface for which you want to display the statistics.
  • Page 968 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.7 Configuring Multicast Router VLAN Page Selection Criteria Interface - The select box lists all interfaces. Select the interface for which you want Multicast Router to be enabled. Multicast Router - For the VLAN ID, multicast router may be enabled or disabled using this.
  • Page 969 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.9 Configuring L2 Static Multicast Group Configuration Page Selection Criteria MAC Filter - This is the list of MAC address and VLAN ID pairings for all configured L2Mcast Groups. To change the port mask(s) for an existing L2Mcast Group, select the entry you want to change.
  • Page 970 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.18.10 Viewing L2 Multicast Group Status Page Use this panel to display information about entries in the L2Mcast Static/Dynamic Groups. These entries are used by the transparent bridging function to determine how to forward a received frame.

  • Page 971: Managing Igmp Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.19 Managing IGMP Snooping Querier 9.3.19.1 Configuring IGMP Snooping Querier Configuration Page Use this menu to configure the parameters for IGMP Snooping Querier, Note that only a user with Read/Write access privileges may change the data on this screen.
  • Page 972 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.19.2 Configuring IGMP Snooping Querier VLAN Configuration Page Selection Criteria VLAN ID - Selects the VLAN ID on which IGMP Snooping Querier is enabled. Configurable Data VLAN ID - Appears when "New Entry" is selected in VLAN ID selection list. Specifies VLAN ID for which IGMP Snooping Querier is to be enabled.
  • Page 973 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.19.3 IGMP Snooping Querier VLAN Configuration Summary Page Non-Configurable Data VLAN ID Search- Enter VLAN ID, then click on the search button. If the record exists, that entry will be displayed. An exact match is required.
  • Page 974 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.19.4 IGMP Snooping Querier VLAN Status Page Non-Configurable Data VLAN ID - Specifies the VLAN ID on which IGMP Snooping Querier is administratively enabled and VLAN exists in the VLAN database.

  • Page 975: Managing Mld Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20 Managing MLD Snooping 9.3.20.1 Configuring MLD Snooping Global Configuration and Status Page Use this menu to configure the parameters for MLD Snooping, which is used to build forwarding lists for multicast traffic.
  • Page 976 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.2 Configuring MLD Snooping Interface Configuration Page Selection Criteria Interface - The single select box lists all physical, VLAN and LAG interfaces. Select the interface you want to configure. Admin Mode - Select the interface mode for the selected interface for MLD Snooping for the switch from the pull-down menu.
  • Page 977 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.3 Configuring MLD Snooping VLAN Configuration Page Selection Criteria VLAN ID - Specifies list of VLAN IDs for which MLD Snooping is enabled. Configurable Data VLAN ID - Appears when "New Entry" is selected in VLAN ID combo box. Specifies VLAN ID for which pre-configurable Snooping parameters are to be set.
  • Page 978 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.4 Configuring MLD Snooping VLAN Status Page Non-Configurable Data VLAN ID - All VLAN Ids for which the MLD Snooping mode is Enabled. Admin Mode - MLD Snooping Mode for VLAN ID.
  • Page 979 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.5 Configuring MLD Snooping Multicast Router Configuration Page Selection Criteria Interface - The select box lists all Slot/Ports. Select the interface for which you want Multicast Router to be enabled.
  • Page 980 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.7 Configuring MLD Snooping Multicast VLAN Configuration Page Selection Criteria Interface - The select box lists all interfaces. Select the interface for which you want Multicast Router to be enabled Configurable Data VLAN ID - VLAN ID for which the Multicast Router Mode is to be Enabled or Disabled.
  • Page 981 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.9 Configuring L2 Static Multicast Group Configuration Page Selection Criteria MAC Filter - This is the list of MAC address and VLAN ID pairings for all configured L2 Mcast Groups. To change the port mask(s) for an existing L2Mcast Group, select the entry you want to change.
  • Page 982 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.20.10 Viewing L2 Multicast Group Status Page Use this panel to display information about entries in the L2Mcast Static/Dynamic Groups. These entries are used by the transparent bridging function to determine how to forward a received frame.

  • Page 983: Managing Mld Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.21 Managing MLD Snooping Querier 9.3.21.1 Configuring MLD Snooping Querier Configuration Page Use this menu to configure the parameters for MLD Snooping Querier, Note that only a user with Read/Write access privileges may change the data on this screen.
  • Page 984 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.21.2 Configuring MLD Snooping Querier VLAN Configuration Page Selection Criteria VLAN ID - Selects the VLAN ID on which MLD Snooping Querier is enabled. Configurable Data VLAN ID - Appears when "New Entry" is selected in VLAN ID selection list. Specifies VLAN ID for which MLD Snooping Querier is to be enabled.
  • Page 985 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.21.3 Configuring MLD Snooping VLAN Configuration Summary Page Configurable Data VLAN ID Search - Enter VLAN ID, and then click on the search button. If the record exists, that entry will be displayed.
  • Page 986 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.21.4 Configuring MLD Snooping Querier VLAN Status Page Non-Configurable Data VLAN ID - Specifies the VLAN ID on which MLD Snooping Querier is administratively enabled and VLAN exists in the VLAN database.

  • Page 987: Viewing Multicast Forwarding Database

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.22 Viewing Multicast Forwarding Database 9.3.22.1 Viewing All of Multicast Forwarding Database Tables Page The Multicast Forwarding Database holds the port membership information for all active multicast address entries. The key for an entry consists of a VLAN ID and MAC address pair. Entries may contain data for more than one protocol.
  • Page 988 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.22.2 Viewing GMRP MFDB Table Page This screen will display all of the entries in the Multicast Forwarding Database that were created for the GARP Multicast Registration Protocol. Non-Configurable Data MAC Address - A VLAN ID - multicast MAC address pair for which the switch has forwarding and/or filtering information.
  • Page 989 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.22.3 Viewing IGMP Snooping MFDB Table Page Non-Configurable Data MAC Address - A VLAN ID - multicast MAC address pair for which the switch has forwarding and/or filtering information. The format is 8 two-digit hexadecimal numbers that are separated by colons, for example 00:01:23:45:67:89:AB:CD.
  • Page 990 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.22.4 Viewing MLD Snooping MFDB Table Page Non-Configurable Data MAC Address - A VLAN ID - multicast MAC address pair for which the switch has forwarding and or filtering information. The format is 8 two-digit hexadecimal numbers that are separated by colons, for example 00:01:23:45:67:89:AB:CD.
  • Page 991 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.22.5 Viewing Multicast Forwarding Database Statistics Page Non-Configurable Data Max MFDB Entries - The maximum number of entries that the Multicast Forwarding Database table can hold. Most MFDB Entries Since Last Reset - The largest number of entries that have been present in the Multicast Forwarding Database table since last reset.

  • Page 992: Managing Port-Channel

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.23 Managing Port-Channel 9.3.23.1 Configuring Port-Channel Configuration Page Selection Criteria Port Channel Interface – You can use this screen to reconfigure an existing Port Channel, or to create a new one. Use this pull down menu to select one of the existing Port Channels, or select 'Create' to add a new one.
  • Page 993 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Static Mode - Select enable or disable from the pull down menu. W hen the Port Channel is enabled it does not transmit or process received LAGPDUs i.e. the member ports do not transmit LAGPDUs and all the LAGPDUs it may receive are dropped.
  • Page 994 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.23.2 Viewing Port-Channel Information Page Non-Configurable Data Port Channel - The Slot/Port identification of the Port Channel. Port Channel Name - The name of the Port Channel. Port Channel Type - The type of this Port Channel.

  • Page 995: Managing Spanning Tree

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.24 Managing Spanning Tree 9.3.24.1 Configuring Switch Spanning Tree Configuration Page Selection Criteria Spanning Tree Admin Mode - Specifies whether spanning tree operation is enabled on the switch. Value is enabled or disabled Spanning Tree Forward BPDU - Specifies whether spanning tree for BPDU is enabled on the switch.
  • Page 996 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. VID Table - Table consisting of the VLAN IDs and the corresponding FID associated with each of them. FID Table - Table consisting of the FIDs and the corresponding VLAN IDs associated with each of them.
  • Page 997 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.24.2 Configuring Spanning Tree CST Configuration Page Configurable Data Bridge Priority - Specifies the bridge priority for the Common and Internal Spanning tree (CST). The value lies between 0 and 61440. It is set in multiples of 4096. For example, if you set the priority to any value between 0 and 4095, it will be set to 0.
  • Page 998 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. the base MAC address of the bridge. Root Path Cost - Path Cost to the Designated Root for the CST. Root Port - Port to access the Designated Root for the CST.
  • Page 999 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.24.3 Configuring Spanning Tree MST Configuration Page Selection Criteria MST ID - Create a new MST which you wish to configure or configure already existing MSTs. Configurable Data MST ID - This is only visible when the select option of the MST ID select box is selected. The ID of the MST being created.
  • Page 1000 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. not be retained across a power cycle unless a save configuration is performed. Delete - Deletes the selected MST instance. AII VLANs associated with the instance are associated with the CST.

This manual is also suitable for:

6852g series

Table of Contents