Korenix JetNet 7852G-4XG Series User Manual
  1. Manuals
  2. Brands
  3. Korenix Manuals
  4. Network Router
  5. JetNet 7852G-4XG Series
  6. User manual

Korenix JetNet 7852G-4XG Series User Manual

Hide thumbs
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
Table of Contents

Advertisement

Quick Links

Download this manual
Korenix JetNet 7852G-4XG Series
48G+4 x 10G SFP+ Ports
Industrial Gigabit Layer 3 Managed Ethernet Switch

User Manual

Version 1.0, Sep. 2015
www.korenix.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the JetNet 7852G-4XG Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Korenix JetNet 7852G-4XG Series

Summary of Contents for Korenix JetNet 7852G-4XG Series

  • Page 1: User Manual

    Korenix JetNet 7852G-4XG Series 48G+4 x 10G SFP+ Ports Industrial Gigabit Layer 3 Managed Ethernet Switch User Manual Version 1.0, Sep. 2015 www.korenix.com...

  • Page 2: Document History

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Document History Revision Date Remark V1.0 Sep. 30, 2015 The 1 release version _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 2/1568...

  • Page 3: Table Of Contents

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. CONTENTS Introduction ..........................12 Switch Description ....................12 Features ........................12 Dimension ........................ 15 Front-Panel Components ..................16 Rear Panel Description ..................... 17 Management Options ....................18 Web-based Management Interface ................. 18 Command Line Console Interface Through the Serial Port or Telnet ......
  • Page 4 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.7 show system ....................50 6.1.8 show tech-support ................... 51 6.1.9 show hardware ....................52 6.1.10 show version ....................54 6.1.11 show loginsession .................... 55 6.1.12 show command filter ..................56 Device Configuration Commands ................
  • Page 5 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.1 Show Commands ................... 289 6.5.2 Configuration Commands ................292 Email Alerting and Mail Server Commands ............298 6.6.1 Show Commands ................... 298 6.6.2 Configuration Commands ................301 Script Management Commands ................308 6.7.1...
  • Page 6 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2 copy ....................... 505 6.17.3 delete ......................508 6.17.4 dir ........................509 6.17.5 whichboot ...................... 510 6.17.6 boot-system ....................510 6.17.7 ping ........................ 511 6.17.8 traceroute ...................... 514 6.17.9 logging cli-command..................516 6.17.10...
  • Page 7 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.1 Show Commands ................... 629 6.26.2 Configuration Commands ................631 6.27 Domain Name Server Relay Commands ..............635 6.27.1 Show Commands ................... 635 6.27.2 Configuration Commands ................638 6.28 UDLD Commands ....................645 6.28.1...
  • Page 8 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2 Configuration Commands ................840 IP Multicast Commands ......................855 Distance Vector Multicast Routing Protocol (DVMRP) Commands ....... 855 8.1.1 Show Commands ................... 855 8.1.2 Configuration Commands ................861 Internet Group Management Protocol (IGMP) Commands ........863 8.2.1...
  • Page 9 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 10.1.2 show openflow controller ................1018 10.1.3 show openflow installed flows ..............1019 10.1.4 show openflow installed meters..............1020 10.1.5 show openflow table status ................. 1021 10.2 Configuration Commands ..................1022 10.2.1...
  • Page 10 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 11.3.11 Managing MAC-based VLAN ..............1187 11.3.12 Managing MAC-based Voice VLAN ............1189 11.3.13 Managing Voice VLAN................1191 11.3.14 Managing MAC Filters ................. 1192 11.3.15 Managing GARP ................... 1194 11.3.16 Managing VTP ..................
  • Page 11 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 11.6.10 Managing VRRP ................... 1440 11.6.11 Managing Tunnels ................1453 11.6.12 Managing Loopbacks ................1456 11.7 IPv6 Menu ......................1459 11.7.1 Managing IPv6 Global Configuration Page ..........1459 11.7.2 Managing IPv6 Interface Configuration Page ..........1460 11.7.3...

  • Page 12: Introduction

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Introduction Switch Description JetNet 7852G-4XG is a 48-port 10/100/1000BASE-T with 4 10GbE SFP+ uplinks Layer-3 Ethernet switch. JetNet 7852G-4XG provide a management platform and uplinks to backbone. Alternatively, the switch can utilize up to 48 Gigabit Ethernet ports to function as a central distribution hub for other switches, and switch groups.
  • Page 13 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  RIP v1/v2 and RIPng support  BGP4 support  IS-IS support  Router Discovery Protocol support  Virtual Router Redundancy Protocol (VRRP) support  32-way ECMP support  /31 subnets support ...
  • Page 14 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  SSH Secure Shell version 1 and 2 support  SSL Secure HTTP TLS Version 1 and SSL version 3 support  Auto Install support  OpenFlow support _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 15: Dimension

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Dimension The JetNet 7852G-4XG Industrial Gigabit Layer 3 Managed Switch dimension ( H x W x D) is 42.4mm x 435mm x 393.7mm. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 16: Front-Panel Components

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Front-Panel Components The front panel of the Switch consists of 48 10/100/1000BASE-T interfaces, 4 SFP+ 10-Gigabit interfaces, 1 built-in 1000/100/10 RJ-45 Ethernet service ports, an RS-232 communication port. JetNet 7852G -4XG 48 10/100/1000BASE-T with 4 SFP+ 10G interfaces An RS-232 DCE console port is for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program.

  • Page 17: Rear Panel Description

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Rear Panel Description The rear panel of the Switch contains two hot-swappable power supplies, AC power connectors and four fan modules. The switch has two Power Supply Units (PSU) and four fan modules.

  • Page 18: Management Options

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Management Options The system may be managed by using one Service Ports through a Web Browser,Telent, SNMP function and using the console port on the front panel through CLI command.

  • Page 19: Snmp-Based Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. SNMP-Based Management You can manage the Switch with an SNMP-compatible console program. The Switch supports SNMP version 1.0, version 2.0, and version 3.0. The SNMP agent decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database.
  • Page 20 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  QoS-ISCSI-MIB  RFC 1907 - SNMPv2-MIB  RFC 2465 - IPV6-MIB  RFC 2466 - IPV6-ICMP-MIB  TACACS-MIB  IGMP/MLD Snooping  IGMP/MLD Layer2 Multicast  QoS – IPv6 ACL ...

  • Page 21: Installation And Quick Startup

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Installation and Quick Startup Package Contents Before you begin installing the Switch, confirm that your package contains the following items:  The Rack Mount Managed Ethernet Switch  Console Cable ...

  • Page 22: Installing The Switch In A Rack

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Installing the Switch in a Rack You can install the Switch in most standard 19-inch (48.3-cm) racks. Refer to the illustrations below. 1. Use the supplied screws to attach a mounting bracket to each side of the Switch.

  • Page 23: Quick Starting The Switch

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Quick Starting the Switch 1. Read the device Installation Guide for the connectivity procedure. In-band connectivity allows access to the JetNet 7852G-4XG Switch locally. From a remote workstation, the device must be configured with IP information (IP address, subnet mask, and default gateway).

  • Page 24: System Information Setup

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. System Information Setup 2.5.1 Quick Start up Software Version Information Table 2-1. Quick Start up Software Version Information Command Details show hardware Allows the user to see the HW & SW version the device...

  • Page 25: Quick Start Up User Account Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.3 Quick Start up User Account Management Table 2-3. Quick Start up User Account Management Command Details show users Displays all users that are allowed to access the switch User Access Mode - Shows whether the user is able to change parameters on the switch (Read/Write) or is only able to view (Read Only).

  • Page 26: Quick Start Up Ip Address

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.4 Quick Start up IP Address To view the network parameters the operator can access the device by the following three methods.  Simple Network Management Protocol - SNMP ...

  • Page 27: Quick Start Up Uploading From Switch To Out-Of-Band Pc

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.5 Quick Start up Uploading from Switch to Out-of-Band PC Table 2-5. Quick Start up Uploading from Switch to Out-of-Band PC (XMODEM) Command Details copy startup-config xmodem This starts the upload and displays the mode of uploading and <filename>...

  • Page 28: Quick Start Up Factory Defaults

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 2.5.8 Quick Start up Factory Defaults Table 2-8 Quick Start up Factory Defaults Command Details clear config Enter yes when the prompt pops up to clear all the configurations made to the switch.

  • Page 29: Console And Telnet Administration Interface

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Console and Telnet Administration Interface This chapter discusses many of the features used to manage the Switch, and explains many concepts and important points regarding these features. Configuring the Switch to implement these concepts is discussed in detail in chapter 6.

  • Page 30: Set Up Your Switch Using Telnet Access

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. ordinary RS-232 cable and a null-modem adapter. One end of the cable (or cable/adapter combination) must have a 9-pin D-shell connector suitable for the Diagnostics port; the other end must have a connector suitable for the console’s serial communications port.
  • Page 31 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 3.3.2 Using the Service Port or Netowrk Interface for Remote Management The service port is a dedicated Ethernet port for out-of-band management. W e recommend that you use the service port to manage the switch. Traffic on this port is segregated from operational network traffic on the switch ports and cannot be switched or routed to the operational network.
  • Page 32 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. To use a DHCP server to obtain the IP address, subnet mask, and default gateway information, use: interface vlan 1 ip address dhcp ipv6 address dhcp To manually configure the IPv4 address, subnet mask, use:...

  • Page 33: Web-Based Management

    Web-Based Management Overview The Korenix JetNet 7852G-4XG provides a built-in browser interface that lets you configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer 5.0 or later or Netscape Navigator 6.0 or later. This interface also allows for system monitoring and management of the switch.

  • Page 34: How To Log In

    Korenix Technology Co., Ltd. How to log in The Korenix JetNet 7852G-4XG can be configured remotely from Microsoft Internet Explorer (version 5.0 or above), or Mozilla FireFox (version 3.6 or above). 1. Determine the IP address of your managed switch.

  • Page 35: Web-Based Management Menu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Web-Based Management Menu This above page displays system information, such as:  System Description  System Name  System Location  System Contact  IP Address  Service Port IP Address ...
  • Page 36 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Management  Switching  Security   Routing  IPv6  IPv4 Multicast  IPv6 Multicast Secondary Menus The Secondary Menus under the Main Menu contain a host of options that you can use to configure your switch.
  • Page 37 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  User Management — see “User Account and AAA Commands”  Statistics — see “show interface counters”  Logs — see “System Information and Statistics Commands”  SNMP — see “SNMP Server Commands and SNMP Trap Commands”...
  • Page 38 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Spanning Tree — see “Spanning Tree Commands”  MLAG — see “Multi-Chassis Link Aggregation Commands”  Link State — see “Link state Commands”  Port Backup — see “Port backup Commands”...
  • Page 39 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  VRRP — see “Virtual Router Redundancy Protocol (VRRP) Commands”  Tunnels — see “Tunnels Commands”  Loopbacks — see “Loopbacks Commands” IPv6  OSPFv3 — see “OSPFv3 Configuration Commands”...

  • Page 40: Command Line Interface Structure And Mode-Based Cli

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Line Interface Structure and Mode-based CLI The Command Line Interface (CLI) syntax, conventions, and terminology are described in this section. Each CLI command is illustrated using the structure outlined below.

  • Page 41: Cli Mode-Based Topology

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. CLI Mode-based Topology Parameters Parameters are order dependent. The text in bold italics should be replaced with a name or number. To use spaces as part of a name parameter, enclose it in double quotes like this: "System Name with Spaces".
  • Page 42 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Conventions Network addresses are used to define a link to a remote host, workstation, or network. Network addresses are shown using the following syntax: Table 5-1. Network Address Syntax Address Type...

  • Page 43: Switching Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Switching Commands System Information and Statistics commands 6.1.1 show arp This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch.

  • Page 44: Show Calendar

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.2 show calendar This command displays the system time. Syntax show calendar Default Setting None Command Mode Privileged Exec Display Message Current Time: displays system time _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 45: Show Process Cpu

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.3 show process cpu This command provides the percentage utilization of the CPU by different tasks. Syntax show process cpu It is not necessarily the traffic to the CPU, but different tasks that keep the CPU busy...
  • Page 46 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 1043 bcmRX 0.19% 0.19% 0.16% 1044 cpuUtilMonitorTask 0.19% 0.14% 0.11% 1046 tL7Timer0 0.00% 0.02% 0.01% 1054 simPts_task 0.00% 0.02% 0.01% 1058 Detecting SFP+ Modu 0.00% 0.02% 0.01% 1080 emWeb 0.00% 0.08%...

  • Page 47: Show Eventlog

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.4 show eventlog This command displays the event log, which contains error messages from the system, in the Primary Management System or in the specified unit. The event log is not cleared on a system reset.

  • Page 48: Show Running-Config

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.5 show running-config This command is used to display/capture the current setting of different protocol packages supported on switch. This command displays/captures only commands with settings/configurations with values that differ from the default value. The output is displayed in script format, which can be used to configure another switch with the same configuration.

  • Page 49: Show Sysinfo

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.6 show sysinfo This command displays switch brief information and MIBs supported. Syntax show sysinfo Default Setting None Command Mode Privileged Exec Display Message System Description: The text used to identify this switch.

  • Page 50: Show System

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.7 show system This command displays switch system information. Syntax show system Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify this switch. System Object ID: The manufacturing ID System Information System Up Time: The time in days, hours and minutes since the last switch reboot.

  • Page 51: Show Tech-Support

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.8 show tech-support This command displays system and configuration information when you contact technical support. The output of the show tech-support command combines the output of the following commands: show version, show sysinfo, show interface status, show logging, show event log, show logging buffered, show trap log, show running config, …...

  • Page 52: Show Hardware

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.9 show hardware This command displays inventory information for the switch. Syntax show hardware Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify the product name of this switch.
  • Page 53 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Vendor Revision Number: Revision level for part number provided by vendor. Vendor Manufacturing Date: The vendor’s manufacturing date. Additional Packages: This displays the additional packages that are incorporated into this system.

  • Page 54: Show Version

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.10 show version This command displays inventory information for the switch. Syntax show version Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify the product name of this switch.

  • Page 55: Show Loginsession

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.11 show loginsession This command displays current telnet and serial port connections to the switch. Syntax show loginsession Default Setting None Command Mode Privileged Exec Display Message ID: Login Session ID User Name: The name the user will use to login using the serial port or Telnet.

  • Page 56: Show Command Filter

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.1.12 show command filter This command displays the information that begin/include/exclude the regular expression. Syntax show command [| begin/include/exclude <LINE>] Default Setting None Command Mode Privileged Exec Display Message command: Any show command of the CLI...

  • Page 57: Device Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Device Configuration Commands 6.2.1 Interface 6.2.1.1 show interface status This command displays the Port monitoring information for the system. Syntax show interface status [<slot/port>] <slot/port> - is the desired interface number.
  • Page 58 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Enable: This port is enabled flow control. Capabilities Status: Displays interface capabilities. 6.2.1.2 show interface counters This command displays a summary of statistics for a specific interface or all interfaces.
  • Page 59 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Received Without Error: The total number of packets (including broadcast packets and multicast packets) received. Packets Received With Error: The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
  • Page 60 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Received 128-255 Octets: The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 61 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Unicast Packets Received: The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received: The total number of good packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.
  • Page 62 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Packets Transmitted 1519-1522 Octets: The total number of packets (including bad packets) received that were between 1519 and 1522 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 63 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MSTP BPDUs Transmitted: Multiple Spanning Tree Protocol Bridge Protocol Data Units sent. MSTP BPDUs Received: Multiple Spanning Tree Protocol Bridge Protocol Data Units received. EAPOL Frames Received: The number of valid EAPOL frames of any type that have been received by this authenticator.
  • Page 64 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Maximum VLAN Entries: The maximum number of Virtual LANs (VLANs) allowed on this switch. Most VLAN Entries Ever Used: The largest number of VLANs that have been active on this switch since the last reboot.
  • Page 65 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.4 interface This command is used to enter Interface configuration mode. Syntax interface <slot/port> <slot/port> - is the desired interface number. Default Setting None Command Mode Global Config 6.2.1.5 speed-duplex This command is used to set the speed and duplex mode for the interface.
  • Page 66 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to set the speed and duplex mode for all interfaces. Syntax speed-duplex all <10|100|1000> no speed-duplex all 1000 1000 – 1000 Mbps, only valid for 10G ports.
  • Page 67 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables automatic negotiation on all interfaces. The default value is enabled. Syntax negotiate all no negotiate all all - This command represents all interfaces. no - This command disables automatic negotiation on all interfaces.
  • Page 68 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.7 capabilities This command is used to set the capabilities on specific interface. The 10G SFP+ and 1G SFP interfaces do not provide the following command. Syntax capabilities {{10 | 100 } {full-duplex | half-duplex}} | {1000 full-duplex }...
  • Page 69 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command removes the advertised capability with using parameter Default Setting 10G full-duplex for 10G SFP+ ports 1G full-duplex for 1G SFP ports Command Mode Global Config _____________________________________________________________________________...
  • Page 70 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.8 storm-control flowcontrol This command enables 802.3x flow control for the switch. 802.3x flow control only applies to full-duplex mode ports. If PFC feature is enabled on the same interface, 802.3x flow control will be disabled internally.
  • Page 71 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.9 shutdown This command is used to disable a port. Syntax shutdown no shutdown no - This command enables a port. Default Setting Enabled Command Mode Interface Config This command is used to disable all ports.
  • Page 72 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.1.10 description This command is used to create an alpha-numeric description of the port. Syntax description <description> no description no - This command removes the description of the port. Default Setting...

  • Page 73: L2 Mac Address And Multicast Forwarding Database Tables

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2 L2 MAC Address and Multicast Forwarding Database Tables 6.2.2.1 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. The administrator can enter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address.
  • Page 74 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Other: The value of the corresponding instance does not fall into one of the other categories. 6.2.2.2 show mac-addr-table count This command displays the total forwarding database entries, the number of static and learnning mac address, and the max address available on the switch.
  • Page 75 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.3 show mac-addr-table interface This command displays the forwarding database entries. The user can search FDB table by using interface number <slot/port>. Syntax show mac-addr-table interface <slot/port> <slot/port> - Interface number.
  • Page 76 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.4 show mac-addr-table vlan This command displays the forwarding database entries. The user can search FDB table by using VLAN Syntax show mac-addr-table vlan <vlanid> <vlanid> - VLAN ID (Range: 1 – 4093)
  • Page 77 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.5 show mac-address-table gmrp This command displays the GARP Multicast Registration Protocol (GMRP) entries in the Multicast Forwarding Database (MFDB) table. Syntax show mac-address-table gmrp Default Setting None Command Mode...
  • Page 78 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.6 show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table. Syntax show mac-address-table igmpsnooping Default Setting None Command Mode Privileged Exec Display Message Mac Address: A unicast MAC address for which the switch has forwarding and/or filtering information.
  • Page 79 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.7 show mac-address-table multicast This command displays the MFDB information. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the all parameter. The user can display the table entry for one MAC Address by specifying the MAC address as an optional parameter.
  • Page 80 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.8 show mac-address-table stats This command displays the MFDB statistics. Syntax show mac-address-table stats Default Setting None Command Mode Privileged Exec Display Message Max MFDB Table Entries: This displays the total number of entries that can possibly be in the MFDB.
  • Page 81 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.2.9 show mac-addr-table agetime This command displays the forwarding database address aging timeout. Syntax show mac-addr-table agetime Default Setting None Command Mode Privileged Exec Display Message Address Aging Timout: This displays the total number of seconds for Forwarding Database table.

  • Page 82: Vlan Management

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3 VLAN Management 6.2.3.1 show vlan This command displays brief information on a list of all configured VLANs. Syntax show vlan Default Setting None Command Mode Privileged Exec Display Message VLAN ID: There is a VLAN Identifier (vlanid) associated with each VLAN.
  • Page 83 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.2 show vlan id This command displays detailed information, including interface information, for a specific VLAN. Syntax show vlan {id <vlanid> | name <vlanname>} <vlanid> - VLAN ID (Range: 1 – 4093) <vlanname>...
  • Page 84 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Autodetect: Specifies to allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard.
  • Page 85 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.3 show vlan association mac This command displays the VLAN associated with a specific configured MAC address. If no MAC address is specified, the VLAN associations of all the configured MAC addresses are displayed.
  • Page 86 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.4 show vlan association subnet This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP Address and net mask are specified, the VLAN associations of all the configured IP-subnets are displayed.
  • Page 87 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.5 show vlan internal usage This command displays the VLAN assigned to port-based routing interfaces. Syntax show vlan internal usage Default Setting None Command Mode Privileged Exec Display Message Base VLAN ID: This is the Base VLAN ID for Internal allocation of VLANs to the routing interface.
  • Page 88 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.6 show protocol group This command displays the Protocol-based VLAN information for either the entire system, or for the indicated group. Syntax show protocol group [<group-name>] <group-name> - The group name of an entry in the Protocol-based VLAN table.
  • Page 89 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.7 show interface switchport This command displays VLAN port information. Syntax show interface switchport [<slot/port>] <slot/port> - Interface number. no parameter – Display the entire table. Default Setting None Command Mode...
  • Page 90 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.8 vlan database This command is used to enter VLAN Interface configuration mode. Syntax vlan database Default Setting None Command Mode Global Config 6.2.3.9 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN).
  • Page 91 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.10 vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1- 4093.
  • Page 92 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.12 vlan association subnet This command removes the association of a MAC address to a VLAN. Syntax vlan association subnet <ipaddr> <netmask> <vlanid> [<priority>] no vlan association subnet <ipaddr> <netmask>...
  • Page 93 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.14 protocol group This command attaches a <vlanid> to the protocol-based VLAN identified by <group-name>. A group may only be associated with one VLAN at a time, however the VLAN association can be changed.
  • Page 94 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.15 switchport acceptable-frame-type This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
  • Page 95 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting Admit all Command Mode Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 95/1568...
  • Page 96 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.16 switchport ingress-filtering This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
  • Page 97 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.17 switchport native vlan This command changes the VLAN ID which will be assigned to untagged or priority tagged frames per interface. Syntax switchport native vlan <vlanid> no switchport native vlan <vlanid>...
  • Page 98 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.18 switchport allowed vlan This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number.
  • Page 99 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Mode Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 99/1568...
  • Page 100 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.19 switchport tagging This command configures the tagging behavior for a specific interface in a VLAN to enable. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames.
  • Page 101 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.3.20 switchport forbidden vlan This command used to configure forbidden VLANs. Syntax switchport forbidden vlan {add | remove} <vlan-list> no switchport forbidden <vlan-list> - VLAN ID (Range: 1 – 4093) – separate non-consecutive IDs with ',' and no spaces and no zeros in between the range;...
  • Page 102 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. Any subsequent per port configuration will override this configuration setting. Syntax switchport priority all <0-7>...
  • Page 103 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command adds a protocol-based VLAN group to the system. The <group-name> is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands.
  • Page 104 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command will fail, and the protocol will not be added to the group.

  • Page 105: Double Vlan Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.4 Double VLAN commands 6.2.4.1 show dvlan-tunnel/ dot1q-tunnel This command is used without the optional parameters to display all interfaces enabled for Double VLAN Tunneling. Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces.
  • Page 106 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.4.2 switchport dvlan-tunnel/ dot1q-tunnel This command is used to enable Double VLAN Tunneling on the specified interface. Syntax switchport {dvlan-tunnel|dot1q-tunnel} no switchport {dvlan-tunnel|dot1q-tunnel} Default Setting Disable Command Mode Interface Config 6.2.4.3...

  • Page 107: Gvrp And Bridge Extension

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5 GVRP and Bridge Extension 6.2.5.1 show bridge-ext This command displays Generic Attributes Registration Protocol (GARP) information. Syntax show bridge-ext Default Setting None Command Mode Privileged Exec User Exec Display Message GMRP Admin Mode: This displays the administrative mode of GARP Multicast Registration Protocol (GMRP) for the system.
  • Page 108 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.2 show gvrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or all interfaces. Syntax show gvrp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 109 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.3 show gmrp configuration This command displays Generic Attributes Registration Protocol (GARP) information for one or All interfaces. Syntax show gmrp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 110 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.4 show garp configuration This command displays GMRP and GVRP configuration information for one or all interfaces. Syntax show garp configuration [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 111 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.5 bridge-ext gvrp This command enables GVRP. Syntax bridge-ext gvrp no bridge-ext gvrp no - This command disables GVRP. Default Setting Disabled Command Mode Global Config 6.2.5.6 bridge-ext gmrp This command enables GARP Multicast Registration Protocol (GMRP) on the system. The default value is disabled.
  • Page 112 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.7 switchport gvrp This command enables GVRP (GARP VLAN Registration Protocol) for a specific port. Syntax switchport gvrp no switchport gvrp no - This command disables GVRP (GARP VLAN Registration Protocol) for a specific port. If GVRP is disabled, Join Time, Leave Time, and Leave All Time have no effect.
  • Page 113 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.8 switchport gmrp This command enables GMRP Multicast Registration Protocol on a selected interface. If an interface which has GMRP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GMRP functionality will be disabled on that interface.
  • Page 114 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.5.9 garp timer This command sets the GVRP join time per port and per GARP. Join time is the interval between the transmission of GARP Protocol Data Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group.
  • Page 115 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Command Mode Global Config This command sets the GVRP leave time per port. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry. This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service.
  • Page 116 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command sets the GVRP leave time for all ports to the default 60 centiseconds (0.6 seconds). Default Setting 60 centiseconds (0.6 seconds) Command Mode Global Config This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations will be unregistered.
  • Page 117 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Syntax garp timer leaveall all < 200-6000 > no garp timer leaveall all <200-6000> - leave time (Range: 200 – 6000) in centiseconds. all - All interfaces. no - This command sets how frequently Leave All PDUs are generated for all ports to 1000 centiseconds (10 seconds).

  • Page 118: Igmp Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6 IGMP Snooping 6.2.6.1 ip igmp snooping The user can go to the CLI Global Configuration Mode to set IGMP Snooping on the system, use the ip igmp snooping global configuration command. Use the no ip igmp snooping to disable IGMP Snooping on the system.
  • Page 119 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.3 ip igmp snooping fast-leave The user can go to the CLI Global/Interface Configuration Mode to set IGMP Snooping fast-leave admin mode on a selected interface or all interfaces, use the ip igmpsnooping fast-leave global/interface configuration command.
  • Page 120 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.5 ip igmp snooping mcrtrexpiretime The user can go to the CLI Interface Global/Interface Configuration Mode to set the Multicast Router Present Expiration time for the system or on a particular interface, use the ip igmp snooping mcrtrexpiretime <0-3600>...
  • Page 121 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.7 set igmp The user can go to the CLI VLAN database Mode to set IGMP Snooping on a particular VLAN, use the set ipgm <vlanid> vlan configuration command. Use the no set igmp <vlanid> to disable IGMP Snooping on a particular VLAN.
  • Page 122 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.9 set igmp groupmembership-interval The user can go to the CLI VLAN Configuration Mode to set the IGMP Group Membership Interval time on a particular VLAN, use the set igmpgroupmembership-interval <vlanid> <2-3600> vlan configuration command.
  • Page 123 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.11 set igmp mcrtrexpiretime The user can go to the CLI Interface VLAN Configuration Mode to set the Multicast Router Present Expiration time on a particular VLAN, use the set igmp mcrtrexpiretime <vlanid> <0-3600> vlan configuration command.
  • Page 124 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.13 show ip igmp snooping The user can go to the CLI Privilege Exec to get all of igmp snooping information, use the show ip igmp snooping Privilege command. Syntax show ip igmp snooping [<slot/port>|<vlanid>]...
  • Page 125 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Group Membership Interval: Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the interface from the entry.
  • Page 126 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.15 show ip igmp snooping mrouter vlan The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ip igmp snooping mrouter vlan Privilege command.
  • Page 127 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.6.17 show mac-address-table igmpsnooping The user can go to the CLI Privilege Exec to display the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table, use the show mac-address-table igmpsnooping Privilege command.

  • Page 128: Igmp Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7 IGMP Snooping Querier 6.2.7.1 ip igmp snooping querier The user can go to the CLI Global Configuration Mode to set IGMP snooping querier admin mode, use the ip igmp snooping querier global configuration command. Use the no ip igmp snooping querier to disable.
  • Page 129 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.3 ip igmp snooping querier query-interval The user can go to the CLI Global Configuration Mode to set IGMP snooping querier query interval, use the ip igmp snooping querier query-interval <1-1800> global configuration command. Use the no ip igmp snooping querier query-interval return to default value.
  • Page 130 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.5 ip igmp snooping querier version The user can go to the CLI Global Configuration Mode to set IGMP snooping querier version, use the ip igmp snooping querier version <1-2> global configuration command. Use the no ip igmp snooping querier version return to default value.
  • Page 131 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.7 ip igmp snooping querier vlan address The user can go to the CLI Global Configuration Mode to set IGMP snooping querier vlan address, use the ip igmp snooping querier vlan <vlanid> address <ip-address> global configuration command.
  • Page 132 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.9 show ip igmp snooping querier This command display IGMP snooping querier global information on the system. Syntax show ip igmp snooping querier Command Mode Privilege Exec Display Information IGMP Snooping Querier Mode: Administrative mode for IGMP Snooping. The default is disable.
  • Page 133 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.10 show ip igmp snooping querier vlan This command display IGMP snooping querier vlan information on the system. Syntax show ip igmp snooping querier vlan <vlanid> <vlanid> - VLAN ID (Range: 1 - 4093).
  • Page 134 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.7.11 show ip igmp snooping querier detail This command display all of IGMP snooping querier information on the system. Syntax show ip igmp snooping querier detail Command Mode Privilege Exec Display Information IGMP Snooping Querier Mode: Administrative mode for IGMP Snooping.

  • Page 135: Mld Snooping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8 MLD Snooping 6.2.8.1 show ipv6 mld snooping The user can go to the CLI Privilege Exec to get all of mld snooping information, use the show ip mld snooping Privilege command.
  • Page 136 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MLD Snooping Admin Mode: Indicates whether MLD Snooping is active on the VLAN. Fast Leave Mode: Indicates whether MLD Snooping Fast Leave is active on the VLAN. Group Membership Interval: Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the interface from the entry.
  • Page 137 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.3 show ipv6 mld snooping mrouter vlan The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ipv6 mld snooping mrouter vlan Privilege command.
  • Page 138 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.4 show ipv6 mld snooping static The user can go to the Privilege Exec to display MLD snooping static information, use the show ipv6 mld snooping static Privilege command. Syntax...
  • Page 139 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.5 show mac-address-table mldsnooping The user can go to the CLI Privilege Exec to display the MLD Snooping entries in the Multicast Forwarding Database (MFDB) table, use the show mac-address-table mldsnooping Privilege command.
  • Page 140 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.7 clear mld snooping The user can go to the CLI Global/Interface Configuration Mode to clear MLD Snooping on the system, use the clear mld snooping priviledge configuration command. Syntax...
  • Page 141 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.9 ipv6 mld snooping fast-leave The user can go to the CLI Global/Interface Configuration Mode to set MLD Snooping fast-leave admin mode on a selected interface or all interfaces, use the ipv6 mld snooping fast-leave global/interface configuration command.
  • Page 142 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.11 ipv6 mld snooping mcrtrexpiretime The user can go to the CLI Interface Global/Interface Configuration Mode to set the Multicast Router Present Expiration time for the system or on a particular interface, use the ipv6 mld snooping mcrtrexpiretime <0-3600>...
  • Page 143 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.13 ipv6 mld snooping static The user can go to the Global Mode and add a port to ipv6 multicast group, use the ipv6 mld snooping static Global command. Syntax ipv6 mld snooping static <macaddr>...
  • Page 144 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.15 set mld fast-leave The user can go to the CLI VLAN Configuration Mode to set MLD Snooping fast-leave admin mode on a particular VLAN, use the set mld fast-leave <vlanid> vlan configuration command. Use the no set mld fast-leave <vlanid>...
  • Page 145 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.8.17 set mld maxresponse The user can go to the CLI Interface VLAN database Mode to set the MLD Maximum Response time on a particular VLAN, use the set mld max-response-time <vlanid> <1-65> vlan configuration command.

  • Page 146: Mld Snooping Querier

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9 MLD Snooping Querier 6.2.9.1 show ipv6 mld snooping querier This command display MLD snooping querier global information on the system. Syntax show ipv6 mld snooping querier Default Setting None...
  • Page 147 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.2 show ipv6 mld snooping querier vlan This command display MLD snooping querier vlan information on the system. Syntax show ipv6 mld snooping querier vlan <vlanid> <vlanid> - VLAN ID (Range: 1 – 4093).
  • Page 148 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.3 show ipv6 mld snooping querier detail This command display all of MLD snooping querier information on the system. Syntax show ipv6 mld snooping querier detail Default Setting None Command Mode...
  • Page 149 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.4 ipv6 mld snooping querier The user can go to the CLI Global Configuration Mode to set MLD snooping querier admin mode, use the ipv6 mld snooping querier global configuration command. Use the no ipv6 mld snooping querier to disable.
  • Page 150 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.6 ipv6 mld snooping querier querier-interval The user can go to the CLI Global Configuration Mode to set MLD snooping querier querier interval, use the ipv6 mld snooping querier querier-interval <1-1800> global configuration command. Use the no ipv6 mld snooping querier query-interval return to default value.
  • Page 151 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.8 ipv6 mld snooping querier vlan The user can go to the CLI Global Configuration Mode to set MLD snooping querier vlan admin mode, use the ipv6 mld snooping querier vlan <vlanid> global configuration command. Use the no ipv6 mld snooping querier vlan <vlanid>...
  • Page 152 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.9.10 ipv6 mld snooping querier vlan election participate The user can go to the CLI Global Configuration Mode to set MLD snooping querier vlan election participate mode, use the ipv6 mld snooping querier vlan election-participate <vlanid> global configuration command.

  • Page 153: Port Channel

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10 Port Channel 6.2.10.1 show port-channel This command displays the static capability of all port-channels (LAGs) on the device as well as a summary of individual port-channels. Syntax show port-channel brief...
  • Page 154 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. None Command Mode Privileged Exec Display Message Log. Intf: The logical slot and the logical port. Channel Name: The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric characters.
  • Page 155 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Type: This field displays the status designating whether a particular port-channel (LAG) is statically or dynamically maintained. The possible values of this field are Static, indicating that the port-channel is statically maintained; and Dynamic, indicating that the port-channel is dynamically maintained.
  • Page 156 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.3 port-channel adminmode all This command sets every configured port-channel with the same administrative mode setting. Syntax port-channel adminmode all no port-channel adminmode all no - This command disables a port-channel (LAG). The option all sets every configured port-channel with the same administrative mode setting.
  • Page 157 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.5 port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel. The option all sets every configured port-channel with the same administrative mode setting.
  • Page 158 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.6 port-channel load-balance This command for CLI will configured the mode of load balance on the all Port Channels. The parameter “ ” represent the mode used to be set for src-mac | dst-mac | dst-src-mac | src-ip | dst-ip| dst-src-ip port-channel load balance.
  • Page 159 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting dst-src-ip Command Mode Interface Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 159/1568...
  • Page 160 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.7 port-channel name This command defines a name for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel, and name is an alphanumeric string up to 15 characters. This command is used to modify the name that was associated with the port-channel when it was created.
  • Page 161 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.9 adminmode This command enables a port-channel (LAG) members. The interface is a logical slot and port for a configured port-channel. Syntax adminmode no adminmode no - This command disables a configured port-channel (LAG).
  • Page 162 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.10 lacp This command enables Link Aggregation Control Protocol (LACP) on a port. Syntax lacp no lacp no - This command disables Link Aggregation Control Protocol (LACP) on a port.
  • Page 163 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.11 lacp actor or lacp partner This command set <actor | partner> admin key value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp <actor|partner> admin key <key-value>...
  • Page 164 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command set <actor | partner> port priority value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp <actor|partner> port priority <priority-value> no lacp <actor|partner> port priority <priority-value> – range 0-65535.
  • Page 165 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command set collector max-delay time of Link Aggregation Control Protocol (LACP) on a port-channel. Syntax lacp collector max-delay <delay-value> no lacp collector max-delay <delay-value>: 0-65535 no - This command restores collector max-delay time of Link Aggregation Control Protocol (LACP)
  • Page 166 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.10.13 delete-channel-group This command deletes the port from the port-channel (LAG). The interface is a logical slot and port number of a configured port-channel. Syntax delete-channel-group <logical slot/port> <logical slot/port> - Port-Channel Interface number.

  • Page 167: Storm Control

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11 Storm Control 6.2.11.1 show storm-control This command is used to display broadcast storm control information. Syntax show storm-control broadcast Default Setting None Command Mode Privileged Exec Display Message Intf: Displays interface number.
  • Page 168 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to display unicast storm control information Syntax show storm-control unicast Default Setting None Command Mode Privileged Exec Display Message Intf: Displays interface number. Mode: Displays status of storm control unicast.
  • Page 169 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.2 storm-control broadcast This command enables broadcast storm recovery mode on the selected interface. If the mode is enabled, broadcast storm recovery with high threshold is implemented. The threshold implementation follows a percentage pattern.
  • Page 170 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.3 storm-control multicast This command enables multicast storm recovery mode on the selected interface. Syntax storm-control multicast no storm-control multicast no - This command disables multicast storm recovery mode on the selected interface.
  • Page 171 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.4 storm-control unicast This command enables unicast storm recovery mode on the selected interface. Syntax storm-control unicast no storm-control unicast no - This command disables unicast storm recovery mode on the selected interface.
  • Page 172 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.5 switchport broadcast rate This command will protect your network from broadcast storms by setting a threshold level for broadcast traffic on each port. Syntax switchport broadcast rate <1-14880000> <1-14880000> - Specify the threshold for broadcast traffic.
  • Page 173 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.6 switchport multicast rate This command will protect your network from multicast storms by setting a threshold level for multicast traffic on each port. Syntax switchport multicast rate <1-14880000> <1-14880000> - Specify the threshold for multicast traffic...
  • Page 174 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.11.7 switchport unicast rate This command will protect your network from unicast storms by setting a threshold level for unicast traffic on each port. Syntax switchport unicast rate <1-14880000> <1-14880000> - Specify the threshold for unicast traffic...

  • Page 175: L2 Priority

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.12 L2 Priority 6.2.12.1 show queue cos-map This command displays the class of service priority map on specific interface. Syntax show queue cos-map [<slot/port>] <slot/port> - Interface number. Default Setting...
  • Page 176 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.12.2 queue cos-map This command is used to assign class of service (CoS) value to the CoS priority queue. Syntax queue cos-map <priority> <queue-id> no queue cos-map <queue-id> - The queue id of the CoS priority queue (Range: 0 - 7 ).

  • Page 177: Port Mirror

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13 Port Mirror 6.2.13.1 show port-monitor session This command displays the Port monitoring information for the specified session. Syntax show port-monitor session <Session Number> <Session Number> - session number. Default Setting...
  • Page 178 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13.2 port-monitor session This command configures a probe port and a monitored port for monitor session (port monitoring). Use the source interface <slot/port> parameter to specify the interface to monitor. Use rx to monitor only ingress packets, or use tx to monitor only egress packets.
  • Page 179 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.13.3 port-monitor session mode This command configures the mode parameter to enabled the administrative mode of the session. If enabled, the probe port monitors all the traffic received and transmitted on the physical monitored port.

  • Page 180: Link State

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14 Link State 6.2.14.1 show link state Show link state information. Syntax show link state Command Mode Global Config Display Message Admin Mode: the link state admin mode. Group ID: The group ID for each displayed row.
  • Page 181 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14.2 link state Enable/Disable the link state admin mode. Use ‘link state’ to enable the admin mode of redundant function, and use no command to disable the function. Create/Destroy the link state group. Use ‘link state group’ to create a group. Use no command to destroy the group.
  • Page 182 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.14.3 link state group Set upstream port or downstream port for a link state group. Use ‘link state group <group id> upstream’ to set the port to be monitored. Syntax link state group <1-6>...

  • Page 183: Port Backup

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.15 Port Backup 6.2.15.1 show port-backup Show port-backup information. Syntax show port-backup Command Mode Privileged EXEC Display Message Admin Mode: Indicates whether or not port-backup is active on the switch.
  • Page 184 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.15.2 port-backup Enable/Disable the port backup admin mode. Use ‘port-backup’ to enable the admin mode of function, and use no command to disable the function. Create/Destroy the port backup group. Use ‘port-backup group’ to create a group. Use no command to destroy the group.

  • Page 185: Rapid Super Ring Member Mode Commands

    6.2.16 Rapid Super Ring Member Mode Commands Korenix JetNet 7852G-4XG supports part of the Multiple Super Ring (MSR) technology. Rapid Super Ring is one of the MSR technology, apply to single Ring topology. The JetNet 7852G-4XG can act as the member of the RSR, this is Rapid Super Ring Member mode.
  • Page 186 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.2.16.2 Global Configuration This command configures the global setting of the Rapid Super Ring Member mode. This is the first and Must command before enable the Rapid Super Ring Member mode.

  • Page 187: Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Management Commands 6.3.1 Network Commands 6.3.1.1 show ip interface This command displays configuration settings associated with the switch's network interface. The network interface is the logical interface used for in-band connectivity with the switch via any of the switch's front panel ports.
  • Page 188 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.2 show ip filter This command displays management IP filter status and all designated management stations. Syntax show ip filter Default Setting None Command Mode Privileged Exec Display Message Manegement IP Filter Address Table: The admin mode status for IP filter.
  • Page 189 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.4 interface vlan This command is used to enter Interface-vlan configuration mode. Syntax interface vlan <vlanid> <vlanid> - VLAN ID (Range: 1 - 4093). Default Setting None Command Mode Global Config 6.3.1.5...
  • Page 190 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.6 ip default-gateway This command sets the IP Address of the default gateway. Syntax ip default-gateway <gateway> no ip default-gateway < gateway > - IP address of the default gateway...
  • Page 191 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.1.8 ip filter This command is used to enable the IP filter function. Syntax ip filter no ip filter no – Disable ip filter. Default Setting Disabled Command Mode Global Config This command is used to set an IP address to be a filter.

  • Page 192: Serial Interface Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2 Serial Interface Commands 6.3.2.1 show line console This command displays serial communication settings for the switch. Syntax show line console Default Setting None Command Mode Privileged Exec Display Message Serial Port Login Timeout (minutes): Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection.
  • Page 193 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.2 line console This command is used to enter Line configuration mode Syntax line console Default Setting None Command Mode Global Config 6.3.2.3 baudrate This command specifies the communication rate of the terminal interface. The supported rates are 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200.
  • Page 194 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.4 exec-timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely. The time range is 0 to 160.
  • Page 195 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.2.6 silent-time This command uses to set the amount of time the management console is inaccessible after the number of unsuccessful logon tries exceeds the threshold value. Syntax silent-time <0-65535>...

  • Page 196: Telnet Session Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3 Telnet Session Commands 6.3.3.1 telnet This command establishes a new outbound telnet connection to a remote host. Syntax telnet <ip-address|hostname> [port] [debug] [line] [localecho] <ip-address|hostname> - A hostname or a valid IP address.
  • Page 197 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Maximum Number of Remote Connection Sessions: This object indicates the number of simultaneous remote connection sessions allowed. The factory default is 5. Allow New Telnet Sessions: Indicates that new telnet sessions will not be allowed when set to no.
  • Page 198 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.4 exec-timeout This command sets the remote connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set. A value of 0 indicates that a session remains active indefinitely.
  • Page 199 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.6 terminal length This command uses to configure the columns per page for the vty session. Syntax terminal-length <10-100> <10-100> - Columns per page (Range: 10 - 100). no - This command sets the value to the default.
  • Page 200 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.8 server enable This command enables/disables telnet server. If telnet server is enabled, all telnet sessions can be established until there are no more sessions available. If telnet server is disabled, all telnet sessions are closed.
  • Page 201 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.10 telnet sessions This command regulates new outbound telnet connections. If enabled, new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed.
  • Page 202 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.12 telnet exec-timeout This command sets the outbound telnet session timeout value in minute. Changing the timeout value for active sessions does not become effective until the session is reaccessed. Any keystroke will also activate the new timeout duration.
  • Page 203 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.3.13 show telnet This command displays the current outbound telnet settings. Syntax show telnet Default Setting None Command Mode Privileged Exec User Exec Display Message Outbound Telnet Login Timeout (in minutes) Indicates the number of minutes an outbound telnet session is allowed to remain inactive before being logged off.

  • Page 204: Ssh Client Session Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4 SSH Client Session Commands 6.3.4.1 This command establishes a new outbound ssh connection to a remote host. Syntax ssh <ip-address|hostname> <username> { [port <1-65535>] [protocol <protocollevel>] | [protocol <protocollevel>] [port <1-65535>]} <ip-address|hostname>...
  • Page 205 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.2 sshc sessions This command regulates new outbound ssh connections. If enabled, new outbound ssh sessions can be established until it reaches the maximum number of simultaneous outbound ssh sessions allowed. If disabled, no new outbound ssh session can be established.
  • Page 206 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.4 sshc exec-timeout This command sets the outbound ssh session timeout value in minute. Changing the timeout value for active sessions does not become effective until the session is reaccessed. Any keystroke will also activate the new timeout duration.
  • Page 207 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.4.6 Perform SSH client connection Use this command to make a outbound SSH connection. Syntax ssh <ip-address|hostname> <username> [port <1-65535> | protocol <protocollevel>] <ip-address|hostname> The destination host ip address or host name. This field is required.

  • Page 208: Snmp Server Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5 SNMP Server Commands 6.3.5.1 show snmp This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect.
  • Page 209 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.2 show trapflags This command displays trap conditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the trap to all enabled trap receivers.
  • Page 210 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.3 snmp-server sysname This command sets the name of the switch. The range for name is from 1 to 31 alphanumeric characters. Syntax snmp-server sysname <name> <name> - Range is from 1 to 31 alphanumeric characters.
  • Page 211 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.5 snmp-server contact This command sets the organization responsible for the network. The range for contact is from 1 to 31 alphanumeric characters. Syntax snmp-server contact <con> <con> - Range is from 1 to 31 alphanumeric characters.
  • Page 212 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.6 snmp-server community This command adds (and names) a new SNMP community. A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privilege level. The length of the name can be up to 16 case-sensitive characters.
  • Page 213 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. The default public and private communities are enabled by default. The four undefined communities are disabled by default. Command Mode Global Config This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 214 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. None Command Mode Global Config 6.3.5.7 snmp-server community ipaddr This command sets a client IP address for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 215 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.5.8 snmp-server enable traps This command enables the acl trap. Syntax snmp-server enable traps acl-trapflags no snmp-server enable traps acl-trapflags no - This command disables the acl trap. Default Setting...
  • Page 216 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting Enabled Command Mode Global Config This command enables Link Up/Down traps for the entire switch. W hen enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command).
  • Page 217 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables Captive Portal traps.. Syntax snmp-server enable traps captive-portal no snmp-server enable traps captive-portal no - This command disables Captive Portal trap. Default Setting Disabled Command Mode Global Config This command enables OSPF traps.
  • Page 218 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables OSPFv3 traps. Syntax snmp-server enable traps ospfv3 {all | errors {all | authentication-failure | bad-packet | config-error | virtauthentication-failure | virt-bad-packet | virt-config-error} | if-rx {all | if-rx-packet} | lsa {all |...
  • Page 219 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command enables the sending of new root traps and topology change notification traps. Syntax snmp-server enable traps stpmode no snmp-server enable traps stpmode no - This command disables the sending of new root traps and topology change notification traps.

  • Page 220: Snmp Trap Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6 SNMP Trap Commands 6.3.6.1 show snmptrap This command displays SNMP trap receivers. Trap messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network.
  • Page 221 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.2 snmptrap snmpversion This command configures the version for snmp trap. Syntax snmptrap snmpversion <name> <ipAddr|ipv6Addr|hostname> <snmpversion> <name> - SNMP trap name (Range: up to 16 case-sensitive alphanumeric characters). < ipAddr|ipv6Addr|hostname> - an IPv4 or IPv6 address or hostname of the trap receiver.
  • Page 222 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.3 snmp trap link-status This command enables link status traps by interface. This command is valid only when the Link Up/Down Flag is enabled. See ‘snmpserver enable traps linkmode’ command.
  • Page 223 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.4 snmptrap <name> <ipAddr|ipv6Addr|hostname> This command adds an SNMP trap name. The maximum length of the name is 16 case-sensitive alphanumeric characters. Syntax snmptrap <name> <ipAddr|ipv6Addr|hostname> { port <port> | snmpversion <snmpversion> } no snmptrap <name>...
  • Page 224 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.5 snmptrap ipaddr <name> <ipAddr|ipv6Addr|hostname> <new ipAddr|ipv6Addr|hostname> This command changes the IP address of the trap receiver for the specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters.
  • Page 225 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.6 snmptrap mode This command activates or deactivates an SNMP trap. Enabled trap receivers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps).
  • Page 226 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.8 snmp-server enable informs This command enables snmp inform. Syntax snmp-server enable informs no snmp-server enable informs no - This command disables snmp inform. Default Setting Enabled Command Mode Global Config...
  • Page 227 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.9 snmp-server inform This command configures snmp inform retries. Syntax snmp-server inform retries <retries> no snmp-server informs retries <retries> - Number of times to retry an Inform request. The range is between 0 and 100.
  • Page 228 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.6.10 snmp-server engineID This command configures snmp engineID. Syntax snmp-server engineID remote <ipAddr|ipv6Addr> <engineid-string> no snmp-server engineID remote <ipAddr|ipv6Addr> <engineid-string> <ipAddr|ipv6Addr> - Enter IP or IPv6 address of the remote device.

  • Page 229: Snmp Inform Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7 SNMP Inform Commands 6.3.7.1 show snmpinform This command displays SNMP inform receivers. SNMP Inform messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network.
  • Page 230 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.2 snmpinform version This command configures the version for snmp inform. Syntax snmpinform version <name> <ipAddr|ipv6Addr|hostname> <version> <name> - SNMP trap name (Range: up to 16 case-sensitive alphanumeric characters). <ipAddr|ipv6Addr|hostname> - an IPv4 or IPv6 address or hostname of the inform receiver.
  • Page 231 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.4 snmpinform ipaddr <name> <ipAddr|ipv6Addr|hostname> <new ipAddr|ipv6Addr|hostname> This command changes the IP address of the inform receiver for the specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters.
  • Page 232 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.7.5 snmpinform mode This command activates or deactivates an SNMP inform. Enabled inform receivers are active (able to receive informs). Disabled inform receivers are inactive (not able to receive informs).

  • Page 233: Http Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8 HTTP commands 6.3.8.1 show ip http This command displays the http settings for the switch. Syntax show ip http Default Setting None Command Mode Privileged Exec Display Message HTTP Mode (Unsecure): This field indicates whether the HTTP mode is enabled or disabled.
  • Page 234 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.2 ip javamode This command specifies whether the switch should allow access to the Java applet in the header frame of the W eb interface. When access is enabled, the Java applet can be viewed from the Web interface.
  • Page 235 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.4 ip http server This command enables access to the switch through the W eb interface. When access is enabled, the user can login to the switch from the Web interface. When access is disabled, the user cannot login to the switch's Web server.
  • Page 236 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.8.6 ip http secure-server This command is used to enable the secure socket layer for secure HTTP. Syntax ip http secure-server no ip http secure-server no - This command is used to disable the secure socket layer for secure HTTP.

  • Page 237: Secure Shell (Ssh) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9 Secure Shell (SSH) Commands 6.3.9.1 show ip ssh This command displays the SSH settings. Syntax show ip ssh Default Setting None Command Mode Privileged Exec Display Message Administrative Mode: This field indicates whether the administrative mode of SSH is enabled or disabled.
  • Page 238 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9.2 ip ssh This command is used to enable SSH. Syntax ip ssh no ip ssh no - This command is used to disable SSH. Default Setting Disabled Command Mode Global Config 6.3.9.3...
  • Page 239 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.9.4 ip ssh maxsessions This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5.

  • Page 240: Management Security Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.10 Management Security Commands 6.3.10.1 crypto certificate generate This commands is used to generation self-signed certificate for HTTPS. Syntax crypto certificate generate no crypto certificate generate no- This command is used to delete the HTTPS certificate file from the device, regardless of whether they are self-signed or download from an outside source.

  • Page 241: Dhcp Client Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.11 DHCP Client Commands 6.3.11.1 ip dhcp restart This command is used to initiate a BOOTP or DCHP client request. Syntax ip dhcp restart Default Setting None Command Mode Global Config 6.3.11.2...

  • Page 242: Dhcpv6 Client Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.12 DHCPv6 Client Commands 6.3.12.1 ipv6 address protocol This command specifies the network of IPv6 configuration protocol to be used . If you modify this value, the change is effective immediately.
  • Page 243 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.12.3 serviceport protocol This command specifies the service port configuration protocol to be used. If you modify this value, the change is effective immediately. Syntax serviceport protocol {bootp | dhcp | dhcp6 | none [dhcp6]} <bootp>...

  • Page 244: Dhcp Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.13 DHCP Relay Commands 6.3.13.1 show bootpdhcprelay This command is used to display the DHCP relay agent configuration information on the system. Syntax show bootpdhcprelay Default Setting None Command Mode...
  • Page 245 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.13.2 bootpdhcprelay maxhopcount This command is used to set the maximum relay agent hops for BootP/DHCP Relay on the system. Syntax bootpdhcprelay maxhopcount <1-16> no bootpdhcprelay maxhopcount <1-16> - maximum number of hops. (Range: 1-16).

  • Page 246: Sflow Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14 sFlow Commands 6.3.14.1 show sflow agent The user can go to the CLI Privilege Exec to get the sFlow agent information, use the show sflow agent Privilege command. Syntax...
  • Page 247 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.3 show sflow receivers The user can go to the CLI Privilege Exec to get the configuration information related to the sFlow receivers, use the show sflow receivers Privilege command.
  • Page 248 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.4 show sflow samplers The user can go to the CLI Privilege Exec to get the sFlow sampling instances created on the switch, use the show sflow samplers Privilege command.
  • Page 249 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.5 show sflow rate Use this command to display the sFlow traffic rate summary on the switch. Syntax show sflow rate interface [<slot/port>] <slot/port> - An interface number. no parameter - All interfaces.
  • Page 250 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.6 set sflow rate The user can go to the CLI Interface Configuration Mode to set sampling rate, use the sflow rate <0-3600> interface configuration command. Use the no sflow rate return to default value zero.
  • Page 251 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.8 set sflow maximum datagram size The user can go to the CLI Global Configuration Mode to set maximum datagram size, use the sflow receiver <index> maxdatagram <200-9116> global configuration command. Use the no sflow receiver <index>...
  • Page 252 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.10 set sflow receiver port The user can go to the CLI Global Configuration Mode to set collector UDP port, use the sflow receiver <index> port <1-65535> global configuration command. Use the no sflow collector-port return to default UDP port 6343.
  • Page 253 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.14.12 set sflow sampler index The user can go to the CLI Interface Configuration Mode to configure a new sFlow sampler instance, use the sflow sampler <index> interface configuration command. Use the no sflow sampler return to default setting.

  • Page 254: Service Port Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15 Service Port Commands 6.3.15.1 show serviceport This command displays service port configuration information. Syntax show serviceport Default Setting None Command Mode Privileged Exec Display Message Interface Status: Indicates whether the interface is up or down.
  • Page 255 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.2 show serviceport ndp This command displays IPv6 Neighbor entries. Syntax show serviceport ndp Default Setting None Command Mode Privileged Exec Display Message IPv6 Address: Specifies the IPv6 address of neighbor or interface.
  • Page 256 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.3 serviceport ip This command sets the IP address, the netmask and the gateway of the network management port. Syntax serviceport ip <ipaddr> <netmask> <ipaddr> - The user manually configures IP address for this switch.
  • Page 257 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.5 serviceport ipv6 enable Use this command to enable IPv6 operation on the service port. Syntax serviceport ipv6 enable no serviceport ipv6 enable no - This command is disable IPv6 operation on the service port.
  • Page 258 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.15.7 serviceport ipv6 gateway Use this command to configure IPv6 gateway (i.e. Default routers) information for the service port. Syntax serviceport ipv6 gateway <gateway-address> no serviceport ipv6 gateway <gateway-address>: Gateway address in IPv6 global or link-local address format.

  • Page 259: Time Range Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16 Time Range Commands Time-based ACLs allow one or more rules within an ACL to be based on time. Each ACL rule within an ACL except for the implicit deny all rule can be configured to be active and operational only during a specific time period.
  • Page 260 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2 Configuration Commands 6.3.16.2.1 time-range Use this command to create a time range identified by name, consisting of one absolute time entry and/or one or more periodic time entries. The name parameter is a case-sensitive, alphanumeric string from 1 to 31 characters that uniquely identifies the time range.
  • Page 261 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2.2 absolute Use this command to add an absolute time entry to a time range. Only one absolute time entry is allowed per time-range. The time parameter is based on the currently configured time zone.
  • Page 262 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.16.2.3 periodic Use this command to add a periodic time entry to a time range. The time parameter is based off of the currently configured time zone. The first occurrence of the days-of-the-week argument is the starting day(s) from which the configuration that referenced the time range starts going into effect.

  • Page 263: Command Scheduler Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.17 Command Scheduler Commands The Command Scheduler feature provides the ability to schedule some EXEC command-line interface (CLI) commands to run at specific calendar dates and times or at specified intervals. Command Scheduler has two basic processes.
  • Page 264 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.17.1.2 Command Scheduler Policy-list Policy lists consist of one or more lines of fully-quanlified EXEC CLI commands. All commands in a policy list are executed when the policy list is run by Command Scheduler using the kron occurrence command.
  • Page 265 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.3.17.1.3 Occurrences and Policy-list To associate the policy-list with a occurrence. When the occurrence is fired, the policy-list will be executed. Maximum 16 policy-lists could be added into an occurrence.

  • Page 266: Spanning Tree Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Spanning Tree Commands This section provides detailed explanation of the spanning tree commands. The commands are divided into two functional groups:  Show commands display spanning tree settings, statistics, and other information.
  • Page 267 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Bridge Forwarding Delay: A timeout value to be used by all Bridges in the Bridged LAN. The value of Forward Delay is set by the Root. Hello Time: The time interval between the generations of Configuration BPDUs.
  • Page 268 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. STP BPDUs Transmitted: Spanning Tree Protocol Bridge Protocol Data Units sent. STP BPDUs Received: Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Transmitted: Rapid Spanning Tree Protocol Bridge Protocol Data Units sent.
  • Page 269 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.4 show spanning-tree mst This command displays settings and parameters for the specified multiple spanning tree instance. The instance <0-4094> is a number that corresponds to the desired existing multiple spanning tree instance ID.
  • Page 270 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays summary information about all multiple spanning tree instances in the switch. On execution, the following details are displayed. Syntax show spanning-tree mst summary Default Setting None Command Mode...
  • Page 271 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port Role: Indicate the port role is root or designate. Auto-calculate Port Path Cost: Indicate the port auto-calculate port path cost. Port Path Cost: Configured value of the Internal Port Path Cost parameter.
  • Page 272 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter <0-4094> indicates a particular MST instance. The parameter {<slot/port>} indicates the desired switch port.
  • Page 273 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.5 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Syntax show spanning-tree summary Default Setting...
  • Page 274 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.1.6 show spanning-tree brief This command displays spanning tree settings for the bridge. In this case, the following details are displayed. Syntax show spanning-tree brief Default Setting None Command Mode...

  • Page 275: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2 Configuration Commands 6.4.2.1 spanning-tree This command sets the spanning-tree operational mode to be enabled. Syntax spanning-tree no spanning-tree no - This command sets the spanning-tree operational mode to be disabled. W hile disabled, the spanning-tree configuration is retained and can be changed, but is not activated.
  • Page 276 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.3 spanning-tree configuration This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The <name> is a string of at most 32 alphanumeric characters.
  • Page 277 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.4 spanning-tree mode This command sets the Force Protocol Version parameter to a new value. The Force Protocol Version can be one of the following: 1. stp - ST BPDUs are transmitted rather than MST BPDUs (IEEE 802.1d functionality supported) 2.
  • Page 278 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.6 spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to "2 times (Bridge Forward Delay - 1)"...
  • Page 279 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.8 spanning-tree hold-count This command sets the Bridge Tx Hold Count parameter to a new value for the common and internal spanning tree. The Tx Hold Count value is in a range of 1 to 110.
  • Page 280 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the bridge priority for a specific multiple spanning tree instance. The instance <mstid> is a number that corresponds to the desired existing multiple spanning tree instance. The priority value is a number within a range of 0 to 61440 in increments of 4096.
  • Page 281 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. no - This command removes an association between a multiple spanning tree instance and a VLAN. The VLAN will again be associated with the common and internal spanning tree. The instance <0-4094>...
  • Page 282 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree. If the <1-4094> parameter corresponds to an existing multiple spanning tree instance, then the configurations are done for that multiple spanning tree instance.
  • Page 283 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.10 spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Syntax spanning-tree port mode no spanning-tree port mode no - This command sets the Administrative Switch Port State for this port to disabled.
  • Page 284 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.11 spanning-tree auto-edge This command sets the auto-edge for this port to enabled. Syntax spanning-tree auto-edge no spanning-tree auto-edge no - This command sets the auto-edge for this port to disabled.
  • Page 285 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command specifies that this port is an Edge Port within the common and internal spanning tree. This will allow this port to transition to Forwarding State without delay. Syntax...
  • Page 286 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Edgeport BPDU Guard enable/disable parameter for accepting BPDUs on this switch. This command only works on dot1d mode. Syntax spanning-tree edgeport bpduguard no spanning-tree edgeport bpduguard no - This command sets the Edgeport BPDU Guard to the default value, that is, Disabled.
  • Page 287 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the Edgeport BPDU Guard enable/disable parameter for accepting BPDUs on this interface. This command only works on dot1d mode. Syntax spanning-tree bpduguard no spanning-tree bpduguard no - This command sets the Edgeport BPDU Guard to the default value, that is, Disabled.
  • Page 288 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.4.2.14 spanning-tree guard {loop|none|root} This command sets the Guard Mode parameter to a new value on this interface. Syntax spanning-tree guard {loop|none|root} no spanning-tree guard loop –This command sets the Guard Mode to loop guard on this interface.

  • Page 289: System Log Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. System Log Management Commands 6.5.1 Show Commands 6.5.1.1 show logging This command displays logging. Syntax show logging Default Setting None Command Mode Privileged Exec Display Message Logging Client Local Port The port on the collector/relay to which syslog messages are sent CLI Command Logging The mode for CLI command logging.
  • Page 290 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.1.2 show logging buffered This command displays the message log maintained by the switch. The message log contains system trace information. Syntax show logging buffered Default Setting None Command Mode...
  • Page 291 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Trap: The relevant information of this trap. Trap log information is not retained across a switch reset. 6.5.1.4 show logging hosts This command displays all configured logging hosts. Syntax show logging hosts...

  • Page 292: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2 Configuration Commands 6.5.2.1 logging buffered This command enables logging to in-memory log where up to 128 logs are kept. Syntax logging buffered no logging buffered no - This command disables logging to in-memory log.
  • Page 293 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.2 logging console This command enables logging to the console. Syntax logging console [<severitylevel> | <0-7>] no logging console [<severitylevel> | <0-7>] - The value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
  • Page 294 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.4 terminal monitor This command enables logging for the terminal session. Syntax terminal monitor no terminal monitor no - This command disables logging for the terminal session. Default Setting None...
  • Page 295 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command disables logging to hosts. Syntax logging host remove <hostindex> <hostindex> - Index of the log server. Default Setting None Command Mode Globla Config This command reconfigures the IP address of the log server.
  • Page 296 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.6 logging syslog This command enables syslog logging. Syntax logging syslog no logging syslog no - Disables syslog logging. Default Setting None Command Mode Globla Config This command sets the local port number of the LOG client for logging messages.
  • Page 297 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.5.2.7 clear logging buffered This command clears all in-memory log. Syntax clear logging buffered Default Setting None Command Mode Privileged Exec _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 297/1568...

  • Page 298: Email Alerting And Mail Server Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Email Alerting and Mail Server Commands Email Alert is an extension of the logging system. This feature can immediately send urgent log messages to a specified mail address by email. It also can send non-urgent log messages created in a specified interval to a specified address.
  • Page 299 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.1.2 Show logging email statistics This command displays email alerting statistics. Syntax show logging email statistics Default Setting None Command Mode Privileged Exec Display Message Email Alert Operation Status The operational status of the email alerting feature.
  • Page 300 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.1.3 Show mail server config This command displays information about email server configuration. Syntax show mail-server config Default Setting None Command Mode Privileged Exec Display Message No of mail servers configured The number of SMTP servers configured on the switch.

  • Page 301: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.2 Configuration Commands 6.6.2.1 Logging email This command enables email alerting and sets the lowest serverity level for which log messages are emailed. If you specify a severity level, log messages at or above this severity level, but below the urgent severity level, are emailed in a non-urgent manner by collecting them together until the log time expires.
  • Page 302 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure how frequently non-urgent email messages are sent. Non-urgent messages are collected and sent in a batch email at the specified interval. The valid range is every 3- to 1440 minutes.
  • Page 303 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the email source address (the address of the sender, i.e., switch) to which messages are sent. Syntax logging email from-addr <from-address> no logging email from-addr <from-address>...
  • Page 304 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to reset the email alerting statistics. Syntax clear logging email statistics Default Setting None Command Mode Privileged EXEC _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...
  • Page 305 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.6.2.2 Mail Server configuration To configure the parameters for SMTP server to which the switch sends email alert messages and changes the mode to Mail Server Configuration mode. Syntax mail-server { <ipaddress> | <ipv6address> | <hostname> } no mail-server no - This command removes the specified SMTP server from the configuration.
  • Page 306 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. To configure the TCP port to use for communication with the SMTP server. The recommended port for TLSv1 is 465, STARTTLS is 587 and for no security (i.e. none) it is 25. However, any nonstandard port in the range 1 to 65535 is also allowed.
  • Page 307 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the password the switch uses to authenticate with the SMTP server. Syntax password {0 | 7} <password> <0> - Passowrd should be 1 to 32 characters in plain text format.

  • Page 308: Script Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Script Management Commands 6.7.1 script apply This command applies the commands in the configuration script to the switch. The apply command backs up the running configuration and then starts applying the commands in the script file. Application of the commands stops at the first failure of a command.

  • Page 309: Script Show

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.2.1 script list This command lists all scripts present on the switch as well as the total number of files present. Syntax script list Default Setting None Command Mode Privileged Exec Display Message Configuration Script Name: The filename of the script file.

  • Page 310: Script Validate

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.7.4 script validate This command displays the content of a script file. Syntax script validate <scriptname> <scriptname> - Name of the script file. Default Setting None Command Mode Privileged Exec...

  • Page 311: User Account Management Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. User Account Management Commands 6.8.1 Show Commands 6.8.1.1 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system.
  • Page 312 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.1.2 show users account information The user can go to the CLI Privilege Exec to get all of user information, use the show users accounts Privilege command. Syntax show users accounts...
  • Page 313 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Minimum Password Uppercase Letters: Minimum number of uppercase characters required when changing passwords. Minimum Password Lowercase Letters: Minimum number of lowercase characters required when changing passwords. Minimum Password Numeric Characters: Minimum number of numeric characters required when changing passwords.

  • Page 314: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2 Configuration Commands 6.8.2.1 username This command adds a new user (account) if space permits. The account <username> can be up to eight characters in length. The name may be comprised of alphanumeric characters as well as the dash (‘-’) and underscore (‘_’).
  • Page 315 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.2 Unlock a locked user account The user can go to the CLI Global Configuration Mode to unlock a locked user account, use the username <name> unlock global configuration command.
  • Page 316 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.4 username snmpv3 encryption This command specifies the encryption protocol and key to be used for the specified login user. The valid encryption protocols are none or des. The des protocol requires a key, which can be specified on the command line.
  • Page 317 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.5 Set the password aging The user can go to the CLI Global Configuration Mode to set the password aging, use the passwords aging <1-365> Global configuration command. Use the no passwords aging return to default value 0.
  • Page 318 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.7 Set the password lock-out count The user can go to the CLI Global Configuration Mode to set the password lock-out count, use the passwords lock-out <1-5> Global configuration command. Use the no passwords lock-out to return to default value 0.
  • Page 319 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.9 Set the password strength policy enforcement. The user can go to the CLI Global Configuration Mode to set the password strength policy enforcement, use the passwords strength-check Global configuration command. Use the no passwords strength-check return to default disable.
  • Page 320 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.8.2.11 Set the password strength minimum. The user can go to the CLI Global Configuration Mode to set the password strength, use the passwords strength minimum {character-classes | lowercase-letters | numeric-characters | special-characters | uppercase-letters} [<0-15>] Global configuration command.

  • Page 321: Security Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Security Commands 6.9.1 Show Commands 6.9.1.1 show users authentication This command displays all users and all authentication login information. It also displays the authentication login list assigned to the default user.
  • Page 322 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.2 show authentication methods This command displays the ordered authentication methods for all authentication login lists. Syntax show authentication methods Default Setting None Command Mode Privileged Exec Display Message Login Authentication Method Lists: This displays the authentication login listname.
  • Page 323 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.4 show dot1x This command is used to show the status of the dot1x Administrative mode. Syntax show dot1x Default Setting None Command Mode Privileged Exec Display Message Administrative mode: Indicates whether authentication control on the switch is enabled or disabled.
  • Page 324 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.5 show dot1x authentication-history This command is used to display the Dot1x Authentication History Log for the specified port or all ports. Syntax show dot1x authentication-history <all | <slot/port>> Default Setting...
  • Page 325 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.6 show dot1x client This command is used to display client information. Syntax show dot1x clients [<slot/port>] <slot/port> - is the desired interface number. no parameter - All interfaces. Default Setting...
  • Page 326 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.7 show dot1x detail This command is used to show a summary of the global dot1x configuration and the detailed dot1x configuration for a specified port. Syntax show dot1x detail <slot/port>...
  • Page 327 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Vlan ID: The VLAN assigned to the port by the radius server. VLAN Assigned Reason: The reason the VLAN identified in the VLAN-assigned field has been assigned to the port. Possible values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not Assigned.
  • Page 328 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.8 show dot1x statistics This command is used to show a summary of the global dot1x configuration and the dot1x statistics for a specified port. Syntax show dot1x statistics <slot/port>...
  • Page 329 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. EAP Length Error Frames Received: The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized. 6.9.1.9 show dot1x summary This command is used to show a summary of the global dot1x configuration and summary information of the dot1x configuration for a specified port or all ports.
  • Page 330 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.10 show dot1x users This command displays 802.1x port security user information for locally configured users. Syntax show dot1x users <slot/port> <slot/port> - is the desired interface number. Default Setting...
  • Page 331 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.11 show captive-portal This command reports status of the captive portal feature. Syntax show captive-portal Default Setting None Command Mode Privileged Exec Display Message Administrative Mode: Shows whether the CP is enabled.
  • Page 332 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.13 show captive-portal client [macaddr] status This command reports status of the captive portal feature. Syntax show captive-portal client [macaddr] status Default Setting None Command Mode Privileged Exec Display Message Client MAC Address: Identifies the MAC address of the client (if applicable).
  • Page 333 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.14 show captive-portal configuration <cp-id> This command displays the operational status of each captive portal configuration. The <cp-id> variable is the captive portal ID, which ranges from 1-10. Syntax show captive-portal configuration <1-10>...
  • Page 334 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.15 show captive-portal configuration [cp-id] client status This command reports status of the captive portal feature. Syntax show captive-portal configuration [cp-id] client status Default Setting None Command Mode Privileged Exec Display Message CP ID: Shows the captive portal ID the connected client is using.
  • Page 335 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.16 show captive-portal configuration <cp-id> interface [interface] This command displays information for all interfaces assigned to a captive portal configuration or a specific interface assigned to a captive portal configuration.
  • Page 336 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.17 show captive-portal configuration <cp-id> locales This command displays locales associated with a specific captive portal configuration. Syntax show captive-portal configuration <1-10> locales Default Setting None Command Mode Privileged Exec Display Message Locale Code: Two-letter abbreviation for languages.
  • Page 337 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. URL Redirect Mode: Indicates whether the Redirect URL Mode is enabled or disabled. Max Bandwidth Up(bytes/sec): The maximum rate in bytes per second (bps) at which a client can send data into the network.
  • Page 338 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.20 show captive-portal interface capability [slot/port] This command displays all the captive portal eligible interfaces or the interface capabilities for a specific captive portal interface. Syntax show captive-portal interface capability [slot/port]...
  • Page 339 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.21 show captive-portal interface configuration [cp-id] status This command displays the interface to configuration assignments for all captive portal configurations or a specific configuration. Syntax show captive-portal interface configuration [1-10] status...
  • Page 340 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.22 show captive-portal status This command reports status of all captive portal instances in the system. Syntax show captive-portal status Default Setting None Command Mode Privileged Exec Display Message Additional HTTP Port: Displays the port number of the additional HTTP port configured for traffic. A value of 0 indicates that only port 80 is configured for HTTP traffic.
  • Page 341 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.23 show captive-portal trapflags This command shows which captive portal SNMP traps are enabled. Syntax show captive-portal trapflags Default Setting None Command Mode Privileged Exec Display Message Client Authentication Failure Traps: Shows whether the SNMP agent sends a trap when a client attempts to authenticate with a captive portal but is unsuccessful.
  • Page 342 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.24 show captive-portal user [user-id] [group [<group-id>]] This command displays all configured users or a specific user in the captive portal local user database. Enter the optional user ID to view information about the specified user. The [user-id] variable is a valid user configured in the local database.
  • Page 343 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.25 show radius This command is used to display the various RADIUS configuration items for the switch. Syntax show radius Default Setting None Command Mode Privileged Exec Display Message Number of Configured Authentication Servers: The number of RADIUS Authentication servers that have been configured.
  • Page 344 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.26 show radius accounting This command is used to display the configured RADIUS accounting mode, accounting server, and the statistics for the configured accounting server. Syntax show radius accounting [ipaddr| ipv6addr| hostname] | [statistics {<ipaddr| ipv6addr| hostname> | name <servername>}]...
  • Page 345 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Requests: The number of RADIUS Accounting-Request packets sent to this accounting server. This number does not include retransmissions. Retransmission: The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server.
  • Page 346 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.27 show radius servers This command is used to display items of the configured RADIUS servers. Syntax show radius servers [<ipaddr| ipv6addr|hostname>] | [name <servername>] Default Setting None Command Mode...
  • Page 347 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.28 show radius statistics This command is used to display the statistics for RADIUS or configured server. To show the configured RADIUS server statistic, the IP Address specified must match that of a previously configured RADIUS server.
  • Page 348 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Pending Requests - The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. Timeouts - The number of authentication timeouts to this server.
  • Page 349 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.30 show ldap Use this command to display LDAP configuration. Syntax show ldap Default Setting None Command Mode Privileged Exec User Exec Display Message Server Ip: The IP address of LDAP server.
  • Page 350 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.1.31 show port-security This command shows the port-security settings for the entire system. Syntax show port-security Default Setting None Command Mode Privileged Exec Display Message Port Security Administration Mode: Port lock mode for the entire system.
  • Page 351 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command shows the dynamically locked MAC addresses for port. Syntax show port-security dynamic <slot/port> Default Setting None Command Mode Privileged Exec Display Message MAC address Dynamically locked MAC address.
  • Page 352 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the source MAC address of the last packet that was discarded on a locked port. Syntax show port-security violation <slot/port> Default Setting None Command Mode Privileged Exec Display Message MAC address MAC address of discarded packet on locked ports.

  • Page 353: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.2 Configuration Commands 6.9.2.1 aaa authentication login <method> This command creates an authentication login list. The <listname> is up to 12 alphanumeric characters and is not case sensitive. Up to 5 authentication login lists can be configured on the switch.
  • Page 354 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.2.2 username defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is configured locally.
  • Page 355 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.2.3 username login This command assigns the specified authentication login list to the specified user for system login. The <username> must be a configured <username> and the <listname> must be a configured login list.

  • Page 356: Dot1X Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3 Dot1x Configuration Commands 6.9.3.1 dynamic-vlan This command enable dot1x dynamic vlan creation configuration. Syntax dot1x dynamic-vlan enable no dot1x dynamic-vlan enable Default Setting None Command Mode Global Config 6.9.3.2 dot1x port-control This command sets the authentication mode to be used on all ports.
  • Page 357 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command sets the authentication mode to be used on the specified port. The control mode may be one of the following. force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized.
  • Page 358 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.3 dot1x system-auth-control This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.
  • Page 359 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.5 dot1x guest vlan This command configures the Guest VLAN capability on the interface. The command specifies an active VLAN as an IEEE 802.1x guest VLAN. Syntax dot1x guest- vlan <vlan-id>...
  • Page 360 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.7 dot1x max-user This command configures the maximum users to a specified port, The system’s default maximum users of an interface has no limitation. If ‘no dot1x max-users’ command is executed, the system will reset the maximum users to infinity.
  • Page 361 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.9 dot1x re-authentication This command enables re-authentication of the supplicant for the specified port. Syntax dot1x re-authentication no dot1x re-authentication no - This command disables re-authentication of the supplicant for the specified port.
  • Page 362 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.11 dot1x supplicant port-control This command set the authentication mode on the specified port. Syntax dot1x supplicant port-control < auto| force-authorized|force-unauthorized> no dot1x supplicant port-control Default Setting auto Command Mode Interface Config 6.9.3.12...
  • Page 363 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.13 dot1x supplicant timeout held-period This command configure the held period value. Syntax dot1x supplicant timeout held-period <seconds> no dot1x supplicant timeout held -period <seconds> - Range: 1-65535. Default Setting...
  • Page 364 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.3.15 dot1x supplicant user This command configure Supplicant user. Syntax dot1x supplicant user <user> no dot1x supplicant user <user> Default Setting None Command Mode Interface Config 6.9.3.16 dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port.
  • Page 365 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Syntax dot1x timeout {guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} <seconds> no dot1x timeout { guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} <seconds>...

  • Page 366: Captive Portal Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4 Captive Portal Commands 6.9.4.1 captive-portal mode Use this command to enter the Captive Portal Configuration Mode. Syntax captive-portal Default Setting Command Mode Global Config 6.9.4.2 captive-portal authentication timeout This command configures the authentication timeout. If the captive portal user does not enter valid credentials within this time limit, the authentication page needs to be served again in order for the client to gain access to the network.
  • Page 367 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.3 captive-portal configuration mode Use this command to enter the Captive Portal Instance Mode. The captive portal configuration, identified by CP ID 1, is the default CP configuration. You can create up to nine additional captive portal configurations.
  • Page 368 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.5 Captive-portal http port This command configures an additional HTTP port. Valid port numbers are in the range of 0-65535, excluding port numbers 80 and 443 which are reserved. The HTTP port default is 0 which denotes no additional port and the default port (80) is used.
  • Page 369 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.7 Captive-portal trapflags This command enables captive portal SNMP traps. If no parameters are specified, then all traps are enabled. SNMP traps can also be enabled individually by supplying the optional parameters.
  • Page 370 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.9 Captive Portal user idle timeout This command sets the session idle timeout value for the associated captive portal user. The <user-id> variable is the ID of a user configured in the local database, and is a number in the range of 1 to 128.
  • Page 371 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.11 Captive Portal max up/transmit bandwidth This command is used to configure the bandwidth in bytes per second (bps) at which the client can send data into the network. 0 denotes using the default value configured for the captive portal.
  • Page 372 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.13 Captive Portal max bytes allowed to output/transmit This command is used to limit the number of octets in bytes that the user is allowed to receive. After this limit has been reached, the user will be disconnected. 0 octets denote unlimited transmission.
  • Page 373 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.15 Captive Portal user name This command assigns a name to the User ID. This name is used at the client station for authentication. The <user-id> variable is the local user ID created with the user command and can be from 1 to 128 characters.
  • Page 374 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.17 Captive Portal user session timeout This command configures the session timeout for a captive portal configuration. The <timeout> variable is a number that represents the session timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 375 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.19 Captive Portal Move users between existing user groups This command moves existing users from one user group to another. Note that the destination group must already exist before a move is successful. The <group-id> and <destination-group-id> variables are each a number in the range of 1-10.
  • Page 376 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.21 Captive Portal configuration background color Use this command to customize the background color of the Captive Portal authentication page using a wellknown color name or RGB value. For example, red or RGB hex-code, i.e. #FF0000.The range of <colorcode>...
  • Page 377 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.23 Captive Portal clear configuration This command sets the configuration for this instance to the default values. Syntax clear Default Setting None Command Mode Captive Portal Instance 6.9.4.24 Captive Portal Enable/Disable configuration This command enables a captive portal configuration.
  • Page 378 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.25 Captive Portal configuration foreground color Use this command to customize the foreground color of the Captive Portal authentication page using a wellknown color name or RGB value. For example, red or RGB hex-code, i.e. #FF0000.The range of <colorcode>...
  • Page 379 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.27 Captive Portal configuration idle timeout This command configures the idle timeout for a captive portal configuration. The <timeout> variable is a number that represents the idle timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 380 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.29 Captive Portal configuration enter locale mode This command is not intended to be a user command. The administrator must use the WEB user interface to create and customize captive portal web content. The command is primarily used by the FASTPATH show running config command and process as it provides the ability to save and restore configurations using a textbased format.
  • Page 381 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.31 Captive Portal configuration max up/transmit bandwidth This command configures the maximum rate at which a client can send data into the network. Syntax max-bandwidth-up <0-536870911> no max-bandwidth-up Default Setting...
  • Page 382 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.33 Captive Portal configuration max bytes allowed to output/receive This command configures the maximum number of octets the user is allowed to receive. After this limit has been reached the user will be disconnected. If the value is set to 0 then the limit is not enforced.
  • Page 383 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.35 Captive Portal configuration name This command configures the name for a captive portal configuration. The name can contain up to 32 alphanumeric characters. Syntax name <cp-name> no name Default Setting...
  • Page 384 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.37 Captive Portal configuration RADIUS authentication server Use this command to configure a captive portal configuration RADIUS authentication server. Syntax radius-auth-server <server-name> no radius-auth-server Default Setting Disable Command Mode Captive Portal Instance 6.9.4.38...
  • Page 385 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.39 Captive Portal configuration redirect mode redirect URL Use this command to specify the URL to which the newly authenticated client is redirected if the URL Redirect Mode is enabled. This command is only available if the redirect mode is enabled.
  • Page 386 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.41 Captive Portal configuration session timeout This command configures the session timeout for a captive portal configuration. The <timeout> variable is a number that represents the session timeout in seconds. Use 0 to indicate that the timeout is not enforced.
  • Page 387 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.43 Captive Portal configuration verification mode This command configures the verification mode for a captive portal configuration. The type of user verification to perform can be one of the following: ‧...
  • Page 388 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.45 Captive Portal configuration user acceptance text This command is to Captive Portal configuration user acceptance text. Syntax accept-text <UTF-16> no accept-text Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.46...
  • Page 389 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.47 Captive Portal configuration label name for accounting identification This command is to Captive Portal configuration label name for accounting identification. Syntax account-label <UTF-16> no account-label Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.48...
  • Page 390 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.49 Captive Portal image name for background appearence This command is to Captive Portal configuration image name for background appearence. Syntax background-image <image-name> no background-image Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.50...
  • Page 391 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.51 Captive Portal text intended for browser title This command is to Captive Portal configuration text intended for browser title. Syntax browser-title <UTF-16> no browser-title Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.52...
  • Page 392 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.53 Captive Portal locale code This command is to Captive Portal configuration locale code. Syntax code <locale-code> no code Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.54 Captive Portal denied error message This command is to Captive Portal configuration denied error message.
  • Page 393 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.55 Captive Portal preferred fonts for this locale This command is to Captive Portal configuration preferred fonts for this locale. Syntax font-list <font,font> no font-list Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.56...
  • Page 394 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.57 Captive Portal locale link text for user identification This command is to Captive Portal configuration locale link text for user identification. Syntax link <UTF-16> no link Default Setting None...
  • Page 395 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.59 Captive Portal text for logout button This command is to Captive Portal configuration text for logout button. Syntax logout-button-label <UTF-16> no logout-button-label Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.60...
  • Page 396 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.61 Captive Portal image name for background appearence This command is to Captive Portal configuration image name for background appearence. Syntax logout-success-background-image <image-name> no logout-success-background-image Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.62...
  • Page 397 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.63 Captive Portal text for logout success content This command is to Captive Portal configuration text for logout success content. Syntax logout-success-text <UTF-16> no logout-success-text Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.64...
  • Page 398 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.65 Captive Portal text for logout instructions This command is to Captive Portal configuration text for logout instructions. Syntax logout-text <UTF-16> no logout-text Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.66...
  • Page 399 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.67 Captive Portal text to remind user to allow popups from our web site This command is to Captive Portal configuration text to remind user to allow popups from our web site.
  • Page 400 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.69 Captive Portal error message indicating authentication timeout This command is to Captive Portal configuration error message indicating authentication timeout. Syntax timeout-msg <UTF-16> no timeout-msg Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.70...
  • Page 401 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.71 Captive Portal user input label This command is to Captive Portal configuration user input label. Syntax user-label <UTF-16> no user-label Default Setting None Command Mode Captive Portal Locale Mode 6.9.4.72...
  • Page 402 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.73 Captive Portal main title used to greet user This command is to Captive Portal configuration main title used to greet user. Syntax welcome-title <UTF-16> no welcome-title Default Setting None...
  • Page 403 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.75 Radius Configuration Commands 6.9.4.76 radius accounting mode This command is used to enable the RADIUS accounting function. Syntax radius accounting mode no radius accounting mode no - This command is used to set the RADIUS accounting function to the default value - that is, the RADIUS accounting function is disabled.
  • Page 404 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.78 radius server attribute 4 This command to set the NAS-IP address for the radius server. Syntax radius server attribute 4 <ipaddr>no radius server attribute 4 no – use this command to reset the NAS-IP address for the radius server.
  • Page 405 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.80 radius server dead-time This command cnfiguresradius server dead time. Syntax radius server dead-time <minutes> no radius server dead-time minutes - Set radius server dead time (sec). Range 0 - 2000.
  • Page 406 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. <servername> - Server name <port> - Port number (Range: 1 – 65535) no - This command is used to remove the configured RADIUS authentication server or the RADIUS accounting server. If the 'auth' token is used, the previously configured RADIUS authentication server is removed from the configuration.
  • Page 407 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.83 radius server retransmit This command sets the maximum number of times a request packet is re-transmitted when no response is received from the RADIUS server. The retries value is an integer in the range of 1 to 15.
  • Page 408 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.4.85 radius server msgauth This command enables the message authenticator attribute for a specified server. Syntax radius server msgauth <ipaddr| ipv6addr| hostname > <ipaddr| ipv6addr| hostname > - is a IPv4/v6 address or hostname.

  • Page 409: Tacacs+ Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.5 TACACS+ Configuration Commands 6.9.5.1 tacacs-server host This command is used to enable /disable TACACS+ function and to configure the TACACS+ server IP address. The system has not any TACACS+ server configured for its initialization and support 5 TACACS+ servers.
  • Page 410 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ authentication and encryption key. Syntax key [<key-string> | encrypted <key-string>] Note that the length of the secret key is up to 128 characters.
  • Page 411 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ authentication host priority. Syntax priority [<priority>] <priority> - The valid priority number. Range (0 – 65535)> Default Setting Command Mode TACACS Host Config 6.9.5.3...
  • Page 412 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to configure the TACACS+ connection timeout value. Syntax timeout [<timeout>] <timeout> - The connection timeout value. Max timeout (Range: 1 to 30). Default Setting Command Mode...

  • Page 413: Ldap Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.6 LDAP Configuration Commands 6.9.6.1 ldap baseDN Use this command to indicate the base DN. Syntax ldap baseDN <baseDN> no ldap baseDN <baseDN> - The top level of the LDAP directory tree.
  • Page 414 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.6.3 ldap port Use this command to indicate the port number that server are listening. Syntax ldap baseDN <port> no ldap port <port> - Range from 1 to 65535. no - Use no command to default value.
  • Page 415 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.6.5 ldap racName Use this command to indicate which attribute that store the user name. Syntax ldap racName < racName> no ldap racName <racName> - The attribute that store the user name.

  • Page 416: Port Security Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.7 Port Security Configuration Commands 6.9.7.1 port-security This command enables port locking at the system level (Global Config) or port level (Interface Config). Syntax port-security no port-security Default Setting None...
  • Page 417 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.7.3 port-security max-static This command sets the maximum number of statically locked MAC addresses allowed on a specific port. Syntax port-security max-static [<0-20>] no port-security max-static no - This command resets the maximum number of statically locked MAC addresses allowed on a specific port to its default value.
  • Page 418 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.7.5 port-security mac-address move This command converts dynamically locked MAC addresses to statically locked addresses. Syntax port-security mac-address move Default Setting None Command Mode Interface Config 6.9.7.6 port-security violation shutdown This command configures the port violation shutdown mode.

  • Page 419: Denial Of Service Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8 Denial Of Service Commands 6.9.8.1 Show Commands 6.9.8.1.1 show dos-control This command displays the Denial of Service configurations for the entire system. Syntax show dos-control Default Setting None Command Mode...
  • Page 420 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2 Configuration Commands 6.9.8.2.1 dos-control sipdip This command enables Source IP Address = Destination IP Address (SIP=DIP) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
  • Page 421 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.3 dos-control firstfrag This command enables IP First Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having More Fragments(MF) equal to 1 and coorperate with other DoS options, the packets will be dropped if the mode is enabled.
  • Page 422 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.5 dos-control l4port This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having Source TCP/UDP Port Number equal to Destination TCP/UDP Port Number, the packets will be dropped if the mode is enabled.
  • Page 423 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.7 dos-control udpport This command enables the UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack.
  • Page 424 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.9 dos-control icmpv6 This command enables Maximum ICMPv6 Payload Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMP Echo Request (PING) packets ingress having a payload size greater than the configured value, the packets will be dropped if the mode is enabled.
  • Page 425 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.11 dos-control icmpv6 This command enables Maximum ICMPV6 Payload Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMPV6 Echo Request (PING) packets ingress having a payload size greater than the configured value, the packets will be dropped if the mode is enabled.
  • Page 426 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.13 dos-control smacdmac This command enables the Source MAC address = Destination MAC address (SMAC=DMAC) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SMAC=DMAC, the packets will be dropped if the mode is enabled.
  • Page 427 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.15 dos-control tcpflagseq This command enables the TCP Control Flags=0 and SEQ=0 checking Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Control Flags set to 0 and TCP Sequence Number set to 0, the packets will be dropped if the mode is enabled.
  • Page 428 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.17 dos-control tcpsynfin This command enables the TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flags SYN and FIN set, the packets will be dropped if the mode is enabled.
  • Page 429 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.9.8.2.19 dos-control all This command enables the Denial of Service protection checks globally. Syntax dos-control all no dos-control all no - This command disables the Denial of Service protection checks globally.

  • Page 430: Cdp (Cisco Discovery Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10 CDP (Cisco Discovery Protocol) Commands 6.10.1 Show Commands 6.10.1.1 show cdp This command displays the CDP configuration information. Syntax show cdp Default Setting None Command Mode Privileged Exec Display Message...
  • Page 431 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.1.2 show cdp neighbors This command displays the CDP neighbor information. Syntax show cdp neighbors Default Setting None Command Mode Privileged Exec Display Message Device Id: Identifies the device name in the form of a character string.
  • Page 432 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.1.3 show cdp neighbors detail This command displays the CDP neighbor detail information. Syntax show cdp neighbors detail Default Setting None Command Mode Privileged Exec Display Message Device Id: Identifies the device name in the form of a character string.
  • Page 433 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.1.4 show cdp traffic This command displays the CDP traffic counters information. Syntax show cdp traffic Default Setting None Command Mode Privileged Exec Display Message Incoming packet number: Received legal CDP packets number from neighbors.

  • Page 434: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2 Configuration Commands 6.10.2.1 This command is used to enable CDP Admin Mode. Syntax no cdp no - This command is used to disable CDP Admin Mode. Default Setting Enabled...
  • Page 435 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command is used to enable CDP for all interfaces. Syntax cdp run all no cdp run all all - All interfaces. no - This command is used to disable CDP for all interfaces.
  • Page 436 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.10.2.4 cdp holdtime This command is used to configure the hold time (seconds) of CDP. Syntax cdp holdtime <10-255> <10-255> - interval time (Range: 10 – 255). no - This command is used to hold time to the default value.

  • Page 437: Sntp (Simple Network Time Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11 SNTP (Simple Network Time Protocol) Commands 6.11.1 Show Commands 6.11.1.1 show sntp This command displays the current time and configuration settings for the SNTP client, and indicates whether the local time has been properly updated.
  • Page 438 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Privileged Exec Display Message Client Supported Modes Supported SNTP Modes (Broadcast, Unicast, or Multicast). SNTP Version The highest SNTP version the client supports. Port SNTP Client Port Client Mode: Configured SNTP Client Mode.
  • Page 439 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port Server Port Number Last Attempt Time Last server attempt time for the specified server Last Update Status Last server attempt status for the Server Total Unicast Requests Number of requests to the server...

  • Page 440: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2 Configuration Commands 6.11.2.1 sntp broadcast client poll-interval This command will set the poll interval for SNTP broadcast clients in seconds as a power of two where <poll-interval> can be a value from 6 to 10.
  • Page 441 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.2 sntp client mode This command will enable Simple Network Time Protocol (SNTP) client mode and optionally setting the mode to either broadcast, multicast, or unicast. Syntax sntp client mode [broadcast | unicast | multicast] no sntp client mode no - This command will disable Simple Network Time Protocol (SNTP) client mode.
  • Page 442 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.4 sntp unicast client poll-interval This command will set the poll interval for SNTP unicast clients in seconds. Syntax sntp unicast client poll-interval <6-10> no sntp unicast client poll-interval <6-10> - Polling interval. It's 2^(value) seconds where value is 6 to 10.
  • Page 443 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.6 sntp unicast client poll-retry This command will set the poll retry for SNTP unicast clients in seconds. Syntax sntp unicast client poll-retry <poll-retry> no sntp unicast client poll-retry < poll-retry> - Polling retry in seconds. The range is 0 to 10.
  • Page 444 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.7 sntp server This command configures an SNTP server (with a maximum of three) where the server address can be an ip address or a domain name and the address type either IPv4, IPv6, dnsv6 or dns. The optional priority can be a value of 1-3, the version is a value of 1-4, and the port id is a value of 1-65535.
  • Page 445 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.11.2.8 sntp clock timezone This command sets the time zone for the switch’s internal clock. Syntax sntp clock timezone <name> <0-12> <0-59> {before-utc | after-utc} <name> - Name of the time zone, usually an acronym. (Range: 1-15 characters) <0-12>...

  • Page 446: Mac-Based Voice Vlan Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12 MAC-Based Voice VLAN Commands 6.12.1 Show Commands 6.12.1.1 show voice-vlan This command uses to display the configuration status of the Voice VLAN on the switch. Syntax show voice-vlan Default Setting...
  • Page 447 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.1.2 show voice vlan Use this command to display the configuration status of the Voice VLAN on the switch, When the interface parameter is not specified, only the global mode of the Voice VLAN is displayed.

  • Page 448: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2 Configuration Commands 6.12.2.1 voice-vlan This command is used to enable/disable Voice VLAN Admin Mode. Syntax voice-vlan no voice-vlan no - This command is used to disable Voice VLAN Admin Mode.
  • Page 449 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.12.2.3 voice-vlan mac This command is used to add a voice device to a Voice VLAN. Syntax voice-vlan mac <mac-address> mask <mac-mask> priority <priority-id> [name <voice-name>] no voice-vlan {mac <mac-address>mask <mac-mask>|name <voice-name>| all} <mac-address>...
  • Page 450 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command configures the Voice VLAN capability on the interface. Syntax voice vlan { <vlanid-id> | dot1p <priority> | none | untagged } no voice vlan <vlan-id> - Configure the IP phone to forward all voice traffic through the specified VLAN.

  • Page 451: Lldp (Link Layer Discovery Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13 LLDP (Link Layer Discovery Protocol) Commands 6.13.1 Show Commands 6.13.1.1 show lldp This command uses to display a summary of the current LLDP configuration. Syntax show lldp Default Setting...
  • Page 452 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.2 show lldp interface This command uses to display a summary of the current LLDP configuration for a specific interface or for all interfaces. Syntax show lldp interface [<slot/port>] <slot/port> - Configs a specific interface.
  • Page 453 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.3 show lldp statistics This command uses to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces. Syntax show lldp statistics [<slot/port>] <slot/port>...
  • Page 454 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. TLV 802.3: Total number of LLDP TLVs received on the port where the type value is 127 and OUI type is 00-12-0F. TLV EVB: Total number of LLDP TLVs received on the port where the type value is 127 and OUI type is 00-1B-3F.
  • Page 455 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.5 show lldp remote-device detail This command uses to display detailed information about remote devices that transmit current LLDP data to an interface on the system. Syntax show lldp remote-device detail <slot/port>...
  • Page 456 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Operational MAU Type: Displays the MAU type. The MAU performs physical layer functions, including digital data conversion from the Ethernet interfaces’ collision detection and bit injection into the network. Power Via MDI MDI Power Support: The MDI power capabilities and status.
  • Page 457 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.6 show lldp local-device This command uses to display summary information about the advertised LLDP local data. This command can display summary information or detail for each interface. Syntax show lldp local-device [<slot/port>] <slot/port>...
  • Page 458 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Port ID: Shows the port number that transmitted the LLDPDU. System Name: Shows the system name of the local device. System Description: Describes the local system by identifying the system name and versions of hardware, operating system, and networking software supported in the device.
  • Page 459 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.8 show lldp med The user can go to the CLI Privilege Exec to display a summary of the current LLDP-MED configuration, use the show lldp med Privilege command. Syntax...
  • Page 460 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.9 show lldp med interface The user can go to the CLI Privilege Exec to d display a summary of the current LLDP-MED configuration for a specific interface, use the show lldp med interface [</slot/port>] Privilege command.
  • Page 461 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.10 show lldp med local-device detail The user can go to the CLI Privilege Exec to display detailed information about the LLDP-MED data, use the show lldp med local-device detail <slot/port> Privilege command.
  • Page 462 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Info: Specifies the location information as a string for given type of location id. Extended POE Specifies if local device is a PoE device. Device Type: Specifies power device type.
  • Page 463 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.11 show lldp med remote-device The user can go to the CLI Privilege Exec to d display the summary information about remote devices that transmit current LLDP-MED data to the system. use the show lldp med remote-device [<slot/port>] Privilege command.
  • Page 464 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.1.12 show lldp med remote-device detail The user can go to the CLI Privilege Exec to d display detailed information about remote devices that transmit current LLDP-MED data to an interface on the system, use the show lldp med remote-device detail <slot/port>...
  • Page 465 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Mfg Name: Specifies manufacturers name of the remote device. Model Name: Specifies model name of the remote device. Asset ID: Specifies asset id of the remote device. Location Specifies if location TLV is received in LLDP frames on this port.

  • Page 466: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2 Configuration Commands 6.13.2.1 lldp notification This command uses to enable remote data change notifications. Syntax lldp notification no lldp notification no - This command is used to disable notifications.
  • Page 467 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.3 lldp receive This command uses to enable the LLDP receive capability. Syntax lldp receive no lldp receive no - This command is used to return the reception of LLDPDUs to the default value.
  • Page 468 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.5 lldp transmit-mgmt This command uses to include transmission of the local system management address information in the LLDPDUs. Syntax lldp transmit-mgmt no lldp transmit-mgmt no - This command is used to cancel inclusion of the management information in LLDPDUs.
  • Page 469 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.7 lldp timers This command is used to set the timing parameters for local data transmission on ports enabled for LLDP. The <interval-seconds> determines the number of seconds to wait between transmitting local data LLDPDUs.
  • Page 470 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.8 lldp tx-delay This command is used to set the timing parameters for data transmission delay on ports enabled for LLDP. The <delay-seconds> determines the number of seconds to wait between transmitting local data LLDPDUs.
  • Page 471 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.10 lldp med confignotification The user can go to the CLI Interface Configuration Mode to set all the ports to send the topology change notification, use the lldp med confignotification Interface configuration command. Use the no lldp med confignotification to disable notifications.
  • Page 472 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.11 lldp med transmit-tlv The user can go to the CLI Interface Configuration Mode to set Type Length Values (TLVs) in the LLDP MED, use the lldp med transmit-tlv [capabilities] [ex-pd] [ex-pse] [inventory] [location][network-policy] Interface configuration command.
  • Page 473 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.12 lldp med all The user can go to the CLI Global Configuration Mode to set LLDP-MED on all the ports, use the lldp med all Global configuration command. Use the no lldp med all to disable LLDP-MED on all the ports.
  • Page 474 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.14 lldp med faststartrepeatcount The user can go to the CLI Global Configuration Mode to set the fast start repeat count, use the lldp med faststartrepeatcount Global configuration command. Use the no lldp med faststartrepeatcount to return the default value 3.
  • Page 475 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.13.2.15 lldp med transmit-tlv all The user can go to the CLI Global Configuration Mode to set Type Length Values (TLVs) in the LLDP-MED, use the lldp med transmit-tlv all [capabilities] [ex-pd] [ex-pse] [inventory][location] [network-policy]Global configuration command.

  • Page 476: Vtp (Vlan Trunking Protocol) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14 VTP (VLAN Trunking Protocol) Commands 6.14.1 Show Commands 6.14.1.1 show vtp counters This command displays the VTP packet statistics. Syntax show vtp counters Default Setting None Command Mode Privileged Exec...
  • Page 477 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.1.2 show vtp password This command displays the VTP domain password. Syntax show vtp password Default Setting None Command Mode Privileged Exec Display Message VTP Password: Displays the VTP domain password.
  • Page 478 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. operate in version 1 mode. MD5 digest: Displays the checksum values for the VTP domain status. Configuration last modified: Displays the time stamp of the last configuration modification and the IP address of the switch that caused the configuration change to the database.

  • Page 479: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2 Configuration Commands 6.14.2.1 This command uses to configure global VTP administrative mode. Syntax no vtp no - This command disables global VTP administrative mode. Default Setting Disabled Command Mode...
  • Page 480 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2.2 vtp domain This command uses to set VTP administrative domain name. Syntax vtp domain <string> no vtp domain <string> - Configures the string for domain name. (maximum length 32 bytes) no - This command resets the domain name to NULL.
  • Page 481 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2.3 vtp mode This command uses to set VTP device mode. There are theree modes you can configure, Client, Server, and Transparent. Syntax vtp mode { client | server | transparent } no vtp mode <client>...
  • Page 482 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2.5 vtp password This command uses to configure the VTP administrative domain password. Syntax vtp password <password> no vtp password <password> - Configures VTP administrative domain password.(Max. length 64 bytes) no - This command resets the VTP domain password to default value.
  • Page 483 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.14.2.7 vtp trunkport This command uses to configure the adminstrative domain trunk port for all of interfaces. Syntax vtp trunkport all no vtp trunkport all no - This command resets the adminstrative domain trunk port to default value.

  • Page 484: Protected Ports Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15 Protected Ports Commands 6.15.1 Show Commands 6.15.1.1 show switchport protected This command displays the status of all the interfaces, including protected and unprotected interfaces. Syntax show switchport protected [<0-2>]...
  • Page 485 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15.1.2 show interface switchport protected This command displays the status of the interface (protected/unprotected) under the groupid. Syntax show interface switchport protected <slot/port> <groupid> Default Setting None Command Mode Privileged Exec Display Message Name: An name of the protected port group.

  • Page 486: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.15.2 Configuration Commands 6.15.2.1 switchport protected This command used to modify a protected port group name. The <groupid> parameter identifies the set of protected ports. Use the name <name> pair to assign a name to the protected port group. The name can be up to 32 alphanumeric characters long, including blanks.

  • Page 487: Static Mac Filtering Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16 Static MAC Filtering Commands 6.16.1 Show Commands 6.16.1.1 show mac-addr-table static This command displays the Static MAC Filtering information for all Static MAC Filters. If you select <all>, all the Static MAC Filters in the system are displayed. If you supply a value for <macaddr>, you must also enter a value for <vlanid>, and the system displays Static MAC Filter information only for that MAC...

  • Page 488: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2 Configuration Commands 6.16.2.1 macfilter This command adds a static MAC filter entry for the MAC address <macaddr> on the VLAN <vlanid>. The value of the <macaddr> parameter is a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 489 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2.2 macfilter addsrc This command adds the interface to the source filter set for the MAC filter with the MAC address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
  • Page 490 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.16.2.3 macfilter addsrc all This command adds all interfaces to the source filter set for the MAC filter with the MAC address of <macaddr> and <vlanid>. You must specify the <macaddr> parameter as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

  • Page 491: System Utilities

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17 System Utilities 6.17.1 clear 6.17.1.1 clear arp This command causes all ARP entries of type dynamic to be removed from the ARP cache. Syntax clear arp Default Setting None...
  • Page 492 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.3 clear eventlog This command is used to clear the event log, which contains error messages from the system. Syntax clear eventlog Default Setting None Command Mode Privileged Exec 6.17.1.4 clear logging buffered This command is used to clear the message log maintained by the switch.
  • Page 493 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.5 clear config This command resets the configuration to the factory defaults without powering off the switch. The switch is automatically reset when this command is processed. You are prompted to confirm that the reset should proceed.
  • Page 494 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.7 clear counters This command clears the stats for a specified <slot/port> or for all the ports or for the entire switch based upon the argument. Syntax clear counters [<slot/port> | all] <slot/port>...
  • Page 495 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.9 clear cdp This command is used to clear the CDP neighbors information and the CDP packet counters. Syntax clear cdp [traffic] traffic - this command is used to clear the CDP packet counters.
  • Page 496 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.11 clear igmp snooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Database. Syntax clear igmp snooping...
  • Page 497 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.13 clear ip filter This command is used to clear all ip filter entries. Syntax clear ip filter Default Setting None Command Mode Privileged Exec 6.17.1.14 clear dot1x authentication-history This command resets the 802.1x authenticaiton-history.
  • Page 498 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.15 clear dot1x statistics This command resets the 802.1x statistics for the specified port or for all ports. Syntax clear dot1x statistics {all | <slot/port>} <slot/port> - is the desired interface number.
  • Page 499 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.17 clear domain-list This command is used to clear all entries domain names for incomplete host names. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 6.17.1.18 clear hosts This command is used to clear all static host name-to-address mapping.
  • Page 500 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.19 clear port-security dynamic address This command is used to clear the Dynamic MAC address by using the specified port (interface <slot/port>) or mac address (address <mac-addr>). Syntax clear port-security dynamic {address <mac-addr> | interface <slot/port> } <mac-addr>...
  • Page 501 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.21 clear lldp statistics This command will use to reset all LLDP statistics. Syntax clear lldp statistics Default Setting None Command Mode Privileged Exec 6.17.1.22 clear lldp remote-data This command will use to delete all information from the LLDP remote data table.
  • Page 502 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.23 enable passwd This command changes Privileged EXEC password. Syntax enable passwd 0 <password> 0 – Plain text password Default Setting None Command Mode Global Config. 6.17.1.24 enable passwd encrypted This command allows the administrator to transfer the enable password between devices without having to know the password.
  • Page 503 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.25 clear ipv6 neighbors This command will use to clear all entries IPv6 neighbor table or an entry on a specific interface. Use the <slot/port> parameter to specify the interface.
  • Page 504 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.1.27 clear ipv6 dhcp This command will use to clear DHCPv6 statistics for all interfaces or for a specific interface. Use the <slot/port> parameter to specify the interface. Syntax clear ipv6 dhcp {statistics | interface <slot/port> statistics} <slot/port>...

  • Page 505: Copy

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2 copy This command uploads and downloads to/from the switch. Local URLs can be specified using tftp or xmodem. The following can be specified as the source file for uploading from the switch: startup config (startup-config), event log (eventlog), message log (msglog) and trap log (traplog).
  • Page 506 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.2 Download file to switch Syntax copy <url> startup-config <destfilename> copy <url> image <destfilename> copy <url> {sshkey-rsa1 | sshkey-rsa2 | sshkey-dsa} copy <url> {sslpem-root | sslpem-server | sslpem-dhweak | sslpem-dhstrong} copy <url>...
  • Page 507 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.2.3 Write running configuration file into flash Syntax copy running-config startup-config [filename] <filename> - name of the configuration file. Default Setting None Command Mode Privileged Exec 6.17.2.4 This command upload or download the pre-login banner file Syntax copy clibanner <url>...

  • Page 508: Delete

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.3 delete This command is used to delete a configuration or image file. Syntax delete <filename> <filename> - name of the configuration or image file. Default Setting None Command Mode...

  • Page 509: Dir

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.4 This command is used to display a list of files in Flash memory. Syntax dir [config | opcode [<filename>] ] <filename> - name of the configuration or image file.

  • Page 510: Whichboot

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.5 whichboot This command is used to display which files were booted when the system powered up. Syntax whichboot Default Setting None Command Mode Privileged Exec 6.17.6 boot-system This command is used to specify the file or image used to start up the system.

  • Page 511: Ping

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.7 ping 6.17.7.1 ping <ipaddress|host> This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 512 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.7.2 ping ipv6 <ipv6-address|hostname> This command use to determine whether another computer is on the network. To use the command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 513 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.7.3 ping ipv6 interface This command use to determine whether another computer is on the network. To use the command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.

  • Page 514: Traceroute

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.8 traceroute 6.17.8.1 traceroute Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. Traceroute continues to provide a synchronous response when initiated from the CLI.
  • Page 515 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.8.2 traceroute ipv6 This command is used to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. The <ipv6-address|hostname> parameter must be a valid IPv6 address|hostname.

  • Page 516: Logging Cli-Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.9 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch to log all Command Line Interface (CLI) commands issued on the system.

  • Page 517: Calendar Set

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.10 calendar set This command is used to set the system clock. Syntax calendar set <mm/dd/yyy> <hh:mm:ss> <mm/dd/yyyy> - Date Time <mm/dd/yyyy> format. (Month <1-12>. Day <1-31>. Year <2000-2037> <hh:mm:ss> - hh in 24-hour format (Range: 0 - 23), mm (Range: 0 - 59), ss (Range: 0 - 59)

  • Page 518: Configure

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.12 configure This command is used to activate global configuration mode. Syntax configure Default Setting None Command Mode Privileged Exec 6.17.13 disconnect This command is used to close a telnet session.

  • Page 519: Hostname

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.14 hostname This command is used to set the prompt string. Syntax hostname <prompt_string> <prompt_string> - Prompt string. Default Setting Korenix Command Mode Global Config 6.17.15 quit This command is used to exit a CLI session.

  • Page 520: Cablestatus

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.16 cablestatus This command returns the status of the specified port. Syntax cablestatus <slot/port> <slot/port> - Interface Number. Default Setting None Command Mode Privileged Exec Display Message Cable Status: One of the following statuses is returned: Normal: The cable is working correctly.

  • Page 521: Autoinstall Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.17 AutoInstall Commands The AutoInstall feature enables the automatic update of the image and configuration of the switch. This feature enables touchless or low-touch provisioning to simplify switch configuration and imaging.
  • Page 522 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.17.2 AutoInstall State: The status of the current or most recently completed AutoInstall session.Configuration Commands 6.17.17.2.1 boot-system autoinstall Use this command to operationally start or stop the AutoInstall process on the switch. The command is non-persistent and is not saved in the startup or running configuration file.
  • Page 523 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.17.2.3 boot-system host autosave Use this command to automatically save the downloaded configuration file to the startup-config file on the switch. When autosave is disabled, you must explicitly save the downloaded configuration to non-volatile memory.
  • Page 524 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.17.2.5 boot-system host upgrade Use this command to allow the switch only to upgrade the newer image version. Syntax boot-system host upgrade no boot-system host upgrade no - Use this command to disable this function.

  • Page 525: Capture Cpu Packet Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.18 Capture CPU packet Commands 6.17.18.1 Show commands 6.17.18.1.1 show capture Use this command to display packets captured and save to RAM, It is possible to capture and save into RAM, packets that are received or transmitted throuph the CPU.
  • Page 526 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.18.2 Configuration Command 6.17.18.2.1 capture start Use this command to manually start capturing CPU packets for packets for trace. The packet capture operates in three modes: capture file, remote capture and capture line.
  • Page 527 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.18.2.3 Capture packet to file, remote or line Use this command to configure packet capture options. This command is persistent across a reboot cycle. Syntax capture {file | remote | line} file –...
  • Page 528 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.18.2.4 capture remote port Use this command to configure file capture options. This command is persistent across a reboot cycle. Syntax capture remote [port <port-id>] <port-id> - Configure the listening port for remote Wireshark tool. The range of port ID is 1024 to 49151.
  • Page 529 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.17.18.2.6 capture line warp This command enables wrapping of captured packets in line mode when the captured packets reaches full capacity. This command is persistent across a reboot cycle. Syntax...

  • Page 530: Dhcp Snooping Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18 DHCP Snooping Commands DHCP snooping is a security feature that monitors DHCP messages between a DHCP client and DHCP servers to filter harmful DHCP messages and to build a bindings database of {MAC address, IP address, VLAN ID, port} tuples that are considered authorized.

  • Page 531: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1 Show Commands 6.18.1.1 show ip dhcp snooping This command displays the DHCP Snooping global configurations and per port configurations. Syntax show ip dhcp snooping Default Setting None Command Mode...
  • Page 532 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.2 show ip dhcp snooping binding This command displays the DHCP Snooping binding entries. To restrict the output, use the following options:  Dynamic: Restrict the output based on DCHP snooping.
  • Page 533 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.3 show ip dhcp snooping database This command displays the DHCP Snooping configuration related to the database persistency. Syntax show ip dhcp snooping database Default Setting None Command Mode Privileged Exec Display Message Agent URL: Bindings database agent URL.
  • Page 534 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.4 show ip dhcp snooping statistics This command lists statistics for DHCP Snooping security violations on untrusted ports. Syntax show ip dhcp snooping statistics Default Setting None Command Mode Privileged Exec Display Message Interface: The IP address of the interface in slot/port format.
  • Page 535 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.6 show ip dhcp snooping information stats interface This command display statistics specific to DHCP Option-82 configuration interface. Syntax show ip dhcp snooping information stats interface [<interface num] Default Setting...
  • Page 536 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.8 show ip dhcp snooping information vlan This command display the DHCP Option-82 configuration specific to VLAN. Syntax show ip dhcp snooping information vlan <vlan-range> Default Setting None Command Mode Privileged Exec 6.18.1.9...
  • Page 537 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.1.10 show ip dhcp snooping information remote-id vlan This command display the DHCP Option-82 remote-id configuration specific to VLAN. Syntax show ip dhcp snooping information remote-id vlan <vlan-range> Default Setting...

  • Page 538: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2 Configuration Commands 6.18.2.1 ip dhcp snooping This command enables the DHCP Snooping globally. Syntax ip dhcp snooping no ip dhcp snooping no - This command disables the DHCP Snooping globally.
  • Page 539 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.3 ip dhcp snooping verify mac-address This command enables the verification of the source MAC address with the client hardware address in the received DCHP message. Syntax ip dhcp snooping verify mac-address...
  • Page 540 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.5 ip dhcp snooping database write-delay This command configures the interval in seconds at which the DHCP Snooping database will be persisted. The interval value ranges from 15 to 86400 seconds.
  • Page 541 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.7 ip dhcp snooping binding This command configures the static DHCP Snooping binding.. Syntax ip dhcp snooping binding <mac-address> vlan <vlan id> <ip address> interface <interface id> no ip dhcp snooping binding <mac-address>...
  • Page 542 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.9 ip dhcp snooping log-invalid This command controls the logging DHCP messages filtration by the DHCP Snooping application. Syntax ip dhcp snooping log-invalid no ip dhcp snooping log-invalid no - This command disables the logging DHCP messages filtration by the DHCP Snooping application.
  • Page 543 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.11 clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific interface. Syntax clear ip dhcp snooping binding [interface <slot/port>]...
  • Page 544 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.14 ip dhcp snooping information option This command ip dhcp snooping information option enables the DHCP L2 option mode on the interface. Syntax ip dhcp snooping information option no ip dhcp snooping information option no - This command disables the DHCP L2 option mode.
  • Page 545 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.16 ip dhcp snooping information option remote-id Use this command to enable the DHCP Snooping information option remote-id on a range of VLANs. When remote-id string is set using this command, all Client DHCP requests that fall under this service subscription are added with Option-82 Remote-id as the configured remote-id string.
  • Page 546 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.18.2.18 ip dhcp snooping information option trust Use this command to configure an interface as trusted for Option-82 reception. Syntax ip dhcp snooping information option trust no ip dhcp snooping information option trust no - This command with no argument to configure an interface to default untrusted for Option-82 reception..

  • Page 547: Ip Source Guard (Ipsg) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19 IP Source Guard (IPSG) Commands IP Source Guard (IPSG) is a security feature that filters IP packets based on source ID. The source ID may be either the source IP address or a {source IP address, source MAC address} pair. The DHCP snooping binding database and static IPSG entries identify authorized source IDs.

  • Page 548: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.1 Show Commands 6.19.1.1 show ip verify This command displays the IPSG interface configurations on all ports. Syntax show ip verify [interface <slot/port>] Default Setting None Command Mode Privileged Exec Display Message Interface: Interface address in slot/port format.
  • Page 549 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. empty. If port security is disabled on the interface, then the MAC Address field displays "permit-all". VLAN: The VLAN for the binding rule. 6.19.1.3 show ip source binding This command displays the IPSG bindings.

  • Page 550: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.19.2 Configuration Commands 6.19.2.1 ip verify source This command configures the IPSG source ID attribute to filter the data traffic in the hardware. Source ID is the combination of IP address and MAC address. Normal command allows data traffic filtration based on the IP address.

  • Page 551: Dynamic Arp Inspection (Dai) Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20 Dynamic ARP Inspection (DAI) Command Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting neighbors.
  • Page 552 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Forwarded: The total number of valid ARP packets forwarded in this VLAN. Dropped: The total number of not valid ARP packets dropped in this VLAN. DHCP Drops: The number of packets dropped due to DHCP snooping binding database match failure.
  • Page 553 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.1.3 show ip arp inspection interfaces This command displays the Dynamic ARP Inspection configuration on all the DAI-enabled interfaces. An interface is said to be enabled for DAI if at least one VLAN, that the interface is a member of, is enabled for DAI.

  • Page 554: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2 Configuration Commands 6.20.2.1 ip arp inspection validate This command enables additional validation checks like source-mac validation, destination-mac validation, and ip address validation on the received ARP packets. Syntax ip arp inspection validate {[src-mac] [dst-mac] [ip]} no ip arp inspection validate {[src-mac] [dst-mac] [ip]} no - This command disables the additional validation checks on the received ARP packets.
  • Page 555 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.3 ip arp inspection vlan logging This command enables logging of invalid ARP packets on a list of comma-separated VLAN ranges. Syntax ip arp inspection vlan <vlan-list> logging no ip arp inspection vlan <vlan-list> logging no - This command disables logging of invalid ARP packets on a list of comma-separated VLAN ranges.
  • Page 556 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.5 ip arp inspection trust This command configures an interface as trusted for Dynamic ARP Inspection. Syntax ip arp inspection trust no ip arp inspection trust no - This command configures an interface as untrusted for Dynamic ARP Inspection.
  • Page 557 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.7 arp access-list This command creates an ARP ACL. Syntax arp access-list <acl-name> no arp access-list <acl-name> no - This command deletes a configured ARP ACL. Default Setting None Command Mode Global Config 6.20.2.8...
  • Page 558 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.20.2.9 clear ip arp inspection statistics This command resets the statistics for Dynamic ARP Inspection on all VLANs. Syntax clear ip arp inspection statistics Default Setting None Command Mode Privileged Exec...

  • Page 559: Differentiated Service Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21 Differentiated Service Command This Switching Command function can only be used on the QoS software version. This chapter contains the CLI commands used for the QOS Differentiated Services (DiffServ) package.

  • Page 560: General Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.1 General Commands The following characteristics are configurable for the platform as a whole. 6.21.1.1 diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated.

  • Page 561: Class Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2 Class Commands The 'class' command set is used in DiffServ to define: Traffic Classification specifies Behavior Aggregate (BA) based on DSCP, and Multi- Field (MF) classes of traffic (name, match criteria) Service Levels specifies the BA forwarding classes / service levels.
  • Page 562 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.2 no class-map This command eliminates an existing DiffServ class. Syntax no class-map <class-map-name> <class-map-name> is the name of an existing DiffServ class. The class name 'default' is reserved and is not allowed here. This command may be issued at any time;...
  • Page 563 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.4 match any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class. Syntax match any Default Setting None...
  • Page 564 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. The combined match criteria of <classname> and <refclassname> must be an allowed combination based on the class type. Any subsequent changes to the <refclassname> class match criteria must maintain this validity, or the change attempt shall fail. The total number of class rules formed by the complete reference class chain (includes both predecessor and successor classes) must not exceed a platform-specific maximum.
  • Page 565 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.7 match cos This command adds to the specified class definition a match condition for the Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). The value may be from 0 to 7.
  • Page 566 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.8 match destination-address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet. The <address> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff).
  • Page 567 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.9 match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet. Syntax match dstip <ipaddr> <ipmask> <ipaddr> specifies an IP address.
  • Page 568 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.10 match dstl4port This command adds to the specified class definition a match condition based on the destination layer 4 port of a packet using a single keyword or numeric notation or a numeric range notation.
  • Page 569 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.11 match ethertype This command adds to the specified class definition a match condition based on the value of the ethertype. The <ethertype> value is specified as one of the following keywords: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp or as a custom ethertype value in the range of 0x0600-0xFFFF.
  • Page 570 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.12 match ip dscp This command adds to the specified class definition a match condition based on the value of the IP DiffServ Code Point (DSCP) field in a packet, which is defined as the high-order six bits of the Service Type octet in the IP header (the low-order two bits are not checked).
  • Page 571 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.13 match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet, which is defined as the high-order three bits of the Service Type octet in the IP header (the low-order five bits are not checked).
  • Page 572 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.14 match ip tos This command adds to the specified class definition a match condition based on the value of the IP TOS field in a packet, which is defined as all eight bits of the Service Type octet in the IP header.
  • Page 573 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.15 match protocol This command adds to the specified class definition a match condition based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation.
  • Page 574 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.16 match source-address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet. The <address> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff).
  • Page 575 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.17 match srcip This command adds to the specified class definition a match condition based on the source IP address of a packet. Syntax > match srcip <ipaddr> <ipmask <ipaddr> - specifies an IP address.
  • Page 576 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.18 match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation or a numeric range notation.
  • Page 577 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.19 match vlan This command adds to the specified class definition a match condition based on the value of the layer 2 VLAN Identifier field (the only tag in a single tagged packet or the first or outer tag of a double VLAN tagged packet).
  • Page 578 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.2.21 match srcip6 This command adds to the specified class definition a match condition based on the source IP address of a packet. Syntax match srcip6 <source-ipv6-prefix/prefix-length> Default Setting None...

  • Page 579: Policy Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3 Policy Commands The 'policy' command set is used in DiffServ to define: Traffic Conditioning Specify traffic conditioning actions (policing, marking, shaping) to apply to traffic classes Service Provisioning Specify bandwidth and queue depth management requirements of service levels (EF, AF, etc.)
  • Page 580 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.1 assign-queue This command modifies the queue id to which the associated traffic stream is assigned. The queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the device.
  • Page 581 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.3 mirror This command specifies that all incoming packets for the associated traffic stream are copied to a specific egress interface (physical port or LAG). This command is not available on the Broadcom 5630x platform.
  • Page 582 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.5 conform-color This command is used to enable color-aware traffic policing and define the conform-color class maps used. Used in conjunction with the police command where the fields for the conform level (for simple, single-rate, and two-rate policing) are specified.
  • Page 583 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.7 class This command creates an instance of a class definition within the specified policy for the purpose of defining treatment of the traffic class through subsequent policy attribute statements.
  • Page 584 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.9 mark ip-dscp This command marks all packets for the associated traffic stream with the specified IP DSCP value. Syntax mark ip-dscp <value> <value> - is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 585 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.11 police-simple This command is used to establish the traffic policing style for the specified class. The simple form of the police command uses a single data rate and burst size, resulting in two outcomes: conform and violate.
  • Page 586 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.12 police-two-rate This command is the two-rate form of the police command and is used to establish the traffic policing style for the specified class. For each outcome, the only possible actions are drop, set-cos-as-sec-cos, set-cos-transmit, set-sec-cos-transmit, set-dscp-transmit, set-prec-transmit, or transmit.
  • Page 587 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.3.13 policy-map This command establishes a new DiffServ policy. The <policyname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the in parameter.

  • Page 588: Service Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.4 Service Commands The 'service' command set is used in DiffServ to define: Traffic Conditioning Assign a DiffServ traffic conditioning policy (as specified by the policy commands) to an interface in the incoming direction.
  • Page 589 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.4.1 service-policy This command attaches a policy to an interface in a particular direction. Syntax service-policy {in | out} <policy-map-name> The command can be used in the Interface Config mode to attach a policy to a specific interface.
  • Page 590 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.4.2 no service-policy This command detaches a policy from an interface in a particular direction. Syntax no service-policy {in | out} <policy-map-name> The command can be used in the Interface Config mode to detach a policy from a specific interface.

  • Page 591: Show Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5 Show Commands The 'show' command set is used in DiffServ to display configuration and status information for:  Classes  Policies  Services This information can be displayed in either summary or detailed formats. The status information is only shown when the DiffServ administrative mode is enabled;...
  • Page 592 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Keyword, Reference Class, Source IP Address, Source Layer 4 Port, Source MAC Address, and VLAN. Values: This field displays the values of the Match Criteria. Class Name: The name of this class. (Note that the order in which classes are displayed is not necessarily the same order in which they were created.)
  • Page 593 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5.3 show diffserv service This command displays policy service information for the specified interface and direction. Syntax show diffserv service <slot/port> in <slot/port> - specifies a valid slot number and port number for the system. The direction parameter indicates the interface direction of interest.
  • Page 594 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5.4 show diffserv service brief This command displays all interfaces in the system to which a DiffServ policy has been attached. The direction parameter is optional; if specified, only services in the indicated direction are shown.
  • Page 595 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5.5 show policy-map This command displays all configuration information for the specified policy. Syntax show policy-map [<policy-map-name>] <policy-map-name> - is the name of an existing DiffServ policy. Default Setting None...
  • Page 596 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Non-Conform Action: The current setting for the action taken on a packet considered to not conform to the policing parameters. This is not displayed if policing not in use for the class under this policy.
  • Page 597 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5.6 show policy-map interface This command displays policy-oriented statistics information for the specified interface and direction. Syntax show policy-map interface <slot/port> in <slot/port> - specifies a valid slot number and port number for the system. The direction parameter indicates the interface direction of interest.
  • Page 598 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.21.5.7 show service-policy This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction. The direction parameter indicates the interface direction of interest. This command enables or disables the route reflector client.

  • Page 599: Acl Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22 ACL Command 6.22.1 Show Commands 6.22.1.1 show mac access-lists name This command displays a MAC access list and all of the rules that are defined for the ACL. The <name>...
  • Page 600 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.1.2 show mac access-lists This command displays a summary of all defined MAC access lists in the system. Syntax show mac access-lists Default Setting None Command Mode Privileged Exec Display Message Current number of all ACLs: The number of user-configured rules defined for this ACL.
  • Page 601 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.1.3 show ip access-lists This command displays an Access Control List (ACL) and all of the rules that are defined for the ACL. Syntax show ip access-lists [<1-199> | <name>] <1-199>...
  • Page 602 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Redirect Interface: This field displays the slot/port to which packets matching this rule are forwarded. Time Range Name: Displays the name of the time-range if the IP ACL rule has referenced a time range.
  • Page 603 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.1.4 show access-lists interface This command displays Access List information for a particular interface and the 'in' direction. Syntax show access-lists { interface <slot/port> | vlan <vlan id> } {in | out} <slot/port>...

  • Page 604: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2 Configuration Commands 6.22.2.1 mac access-list extended This command creates a MAC Access Control List (ACL) identified by <name>, consisting of classification fields defined for the Layer 2 header of an Ethernet frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list.
  • Page 605 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.2 mac access-list extended rename This command changes the name of a MAC Access Control List (ACL). The <name> parameter is the name of an existing MAC ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list.
  • Page 606 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.3 mac access-group This command attaches a specific MAC Access Control List (ACL) identified by <name> to an interface, or associates it with a VLAN ID, in a given direction. The <name> parameter must be the name of an exsiting MAC ACL.
  • Page 607 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.4 mac access-list This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. Note that an implicit 'deny all' MAC rule always terminates the access list.
  • Page 608 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.5 access-list This command creates an Access Control List (ACL) that is identified by the parameter. Syntax access-list {(<1-99> {deny | permit} {every | <srcip> <srcm ask>}) | ( {<100-199> {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>} any | <srcip>...
  • Page 609 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.6 no access-list This command deletes an ACL that is identified by the parameter <accesslistnumber> from the system or remove an ACL rule that is identified by the parameter <1-28> from the an IP ACL <accesslistnumber>.
  • Page 610 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.7 ip access-group This command attaches a specified access-control list to an interface or associates with a VLAN ID in a given direction. The parameter <name> is the name of the Access Control List.
  • Page 611 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.22.2.8 ip access-list Use this command to create an extended IP Access Control List (ACL) identified by <name>, consisting of classification fields defined for the IP header of an IPv4 frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list.

  • Page 612: Ipv6 Acl Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23 IPv6 ACL Command 6.23.1 Show Commands 6.23.1.1 show ipv6 access-lists This command displays an IPv6 access list and all of the rules that are defined for the IPv6 ACL. Use the [name] parameter to identify a specific IPv6 ACL to display.
  • Page 613 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. the interface (egress) _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 613/1568...

  • Page 614: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2 Configuration Commands 6.23.2.1 ipv6 access-list This command creates an IPv6 Access Control List (ACL) identified by <name>, consisting of classification fields defined for the IP header of an IPv6 frame. The <name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list.
  • Page 615 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.2 ipv6 access-list rename This command changes the name of an IPv6 ACL. The <name> parameter is the name of an existing IPv6 ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list.
  • Page 616 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.3 {deny | permit} This command creates a new rule for the current IPv6 access list. Each rule is appended to the list of configured rules for the list. The ‘no’ form of this command is not supported, since the rules within an IPv6 ACL cannot be deleted individually.
  • Page 617 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.23.2.4 ipv6 traffic-filter This command either attaches a specific IPv6 ACL identified by <name> to an interface or associates with a VLAN ID in a given direction. The <name> parameter must be the name of an existing IPv6 ACL.

  • Page 618: Cos (Class Of Service) Command

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24 CoS (Class of Service) Command 6.24.1 Show Commands 6.24.1.1 show queue cos-map This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings.
  • Page 619 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.1.2 show queue ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The <ipdscp> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 620 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.1.3 show queue trust This command displays the current trust mode setting for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings. If specified, the port trust mode of the interface is displayed.
  • Page 621 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.1.4 show queue cos-queue This command displays the class-of-service queue configuration for the specified interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings.

  • Page 622: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2 Configuration Commands 6.24.2.1 queue cos-map This command maps an 802.1p priority to an internal traffic class on a "per-port" basis. Syntax queue cos-map <0-7> <0-7> no queue cos-map < 0-7 > - The range of queue priority is 0 to 7.
  • Page 623 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2.2 queue trust This command sets the class of service trust mode of an interface. You can set the mode to trust one of the Dot1p (802.1p) or IP DSCP packet markings. You can also set the interface mode to untrusted. If you configure an interface to use Dot1p, the mode does not appear in the output of the show running config command because Dot1p is the default.
  • Page 624 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2.3 queue cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue. Syntax queue cos-queue min-bandwidth <bw-0> <bw-1> … <bw-6> no queue cos-queue min-bandwidth <bw-0> <bw-1> … <bw-6>- Each Valid range is (0 to 100) in increments of 5 and the total sum is less than or equal to 100.
  • Page 625 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2.4 queue cos-queue strict This command activates the strict priority scheduler mode for each specified queue on a "per-port" basis. Syntax queue cos-queue strict <queue-id-0> [<queue-id-1> … <queue-id-6>] no queue cos-queue strict <queue-id-0> [<queue-id-1> … <queue-id-6>] no - This command restores the default weighted scheduler mode for each specified queue on a "per-port"...
  • Page 626 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.24.2.5 queue cos-queue traffic-shape This command specifies the maximum transmission bandwidth limit for the interface as a whole. Also known as rate shaping, this has the effect of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded.

  • Page 627: Auto-Voice Over Ip Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25 Auto-Voice over IP Commands This section describes the commands you use to configure Auto-Voice over IP (VoIP) commands. The Auto-VoIP feature explicitly matches VoIP streams in Ethernet switches and provides them with a better class-of-service than ordinary traffic.

  • Page 628: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.25.2 Configuration Commands 6.25.2.1 auto-voip all Use this command to enable VoIP Profile on the interfaces of the switch. Syntax auto-voip all no auto-voip all no - Use this command to disable VoIP Profile on the interfaces of the switch.

  • Page 629: Iscsi Optimization Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26 iSCSI Optimization Commands This section describes commands you use to monitor iSCSI sessions and prioritize iSCSI packets. iSCSI Optimzation provides a means of giving traffic between iSCSI initiator and target systems special Quality of Service (QoS) treatment.
  • Page 630 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.1.2 show iscsi sessions This command displays the iSCSI sessions. Syntax show iscsi sessions [detailed] Default Setting None Command Mode Privileged EXEC Display Message Example #1: show iscsi sessions Session 0: ----------------------------------------------------------------------------- Target: iqn.2006-03.com.kernsafe:q97041406.ImageDisk0...

  • Page 631: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2 Configuration Commands 6.26.2.1 iscsi enable This command globally enables iSCSI awareness. Syntax iscsi enable no iscsi enable no - This command disables iSCSI awareness. When you use the no iscsi enable command, iSCSI resources will be released.
  • Page 632 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.2 iscsi cos This command sets the quality of service profile that will be applied to iSCSI flows. iSCSI flows are assigned by default to the highest VPT/DSCP mapped to the highest queue not used for stack management.
  • Page 633 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.3 iscsi aging time This command sets the aging time for iSCSI sessions. Behavior when changing aging time:  When aging time is increased, current sessions will be timed out according to the new value.
  • Page 634 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.26.2.4 iscsi target port This command configures an iSCSI target port and, optionally, a target system’s IP address and IQN name. When working with private iSCSI ports (not IANA-assigned ports 3260/860), it is recommended to specify the target IP address as well, so that the switch will only snoop frames with which the TCP destination port is one of the configured TCP ports, and the destination IP is the target’s IP address.

  • Page 635: Domain Name Server Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27 Domain Name Server Relay Commands 6.27.1 Show Commands 6.27.1.1 show hosts This command displays the static host name-to-address mapping table. Syntax show hosts Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name.
  • Page 636 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.1.2 show dns This command displays the configuration of the DNS server. Syntax show dns Default Setting None Command Mode Privileged Exec Display Message Domain Lookup Status: Enable or disable the IP Domain Naming System (DNS)-based host name-to-address translation function.
  • Page 637 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.1.3 show dns cache This command displays all entries in the DNS cache table. Syntax show dns cache Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name IP Address: IP address of the corresponding domain name, including IPv4 and IPv6.

  • Page 638: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2 Configuration Commands 6.27.2.1 ip hosts This command creates a static entry in the DNS table that maps a host name to an IP address. There are maximum 8 entries for IPv4 and 8 entries for IPv6.
  • Page 639 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.3 ip domain-name This command defines the default domain name to be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation).
  • Page 640 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.4 ip domain-list This command defines the domain name that can be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation). The domain name table can contain maximum 6 entries.
  • Page 641 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.5 ip name-server This command specifies the address of one or more domain name servers to use for name-to-address resolution. There are maximum 6 entries for IPv4 and 6 entries for IPv6 in the Domain Name Server Table.
  • Page 642 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.6 ip domain-lookup This command enables the IP Domain Naming System (DNS)-based host name-to-address translation. Syntax ip domain-lookup no ip domain-lookup <no> - This command disables the IP Domain Naming System (DNS)-based host name-to-address translation.
  • Page 643 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.8 clear domain-list This command clears all entries in the domain name list table. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 6.27.2.9 clear dns This command sets the DNS configuration to default value.
  • Page 644 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.27.2.10 clear dns cache This command clears all entries in the DNS cache table. Syntax clear dns cache Default Setting None Command Mode Privileged Exec 6.27.2.11 clear dns counter This command clears the statistics of all entries in the DNS cache table.

  • Page 645: Udld Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.28 UDLD Commands 6.28.1 Show command 6.28.1.1 show udld Show UDLD information in all interfaces or specific interface Syntax show udld {unit/slot/port} Default Setting None Command Mode Privileged Exec Display Message Port enable operational state: Specifies the Port Enable Operational State of the selected port.

  • Page 646: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.28.2 Configuration Commands 6.28.2.1 udld aggressive Enable/Disable UDLD protocol in aggressive mode on fiber ports except where locally configured Syntax udld aggressive no udld aggressive Default Setting Disabled Command Mode Global Config.
  • Page 647 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.28.2.3 udld message time Set UDLD message time period in <7-90> range. The message time is to use between sending of messages in steady. Default value of UDLD message time is 15.
  • Page 648 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.28.2.5 udld port aggressive Enable/Disable UDLD protocol in aggressive mode on the interface Syntax udld port aggressive no udld port aggressive Default Setting Disable Command Mode Interface Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...

  • Page 649: Multi Chassis Link Aggregation Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29 Multi Chassis Link Aggregation Commands 6.29.1 Show Commands 6.29.1.1 show mlag This command displays detailed information about the Multi-chassis Link Aggregation (MLAG) configured on the switch. Syntax show mlag <mlag-number>...
  • Page 650 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29.1.2 show mlag consistency-parameters This command displays the consistency of parameters that must be compatible across the Multi-chassis Link Aggregation (MLAG). Syntax show mlag consistency-parameters <mlag-number> Default Setting None Command Mode...
  • Page 651 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. VTP Domain Name: Displays the name that identifies the administrative domain of MLAG peer devices. VTP Password: Displays the VTP domain password of MLAG peer devices. IGMP Snooping Admin Mode: Indicates whether or not IGMP Snooping is active on the switch of MLAG peer devices.
  • Page 652 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29.2 Configuration Commands 6.29.2.1 mlag This command enables a Multi-chassis Link Aggregation (MLAG), which allows links that are physically connected to two different devices to appear as a single port channel to a third device.
  • Page 653 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29.2.3 mlag system-mac This command manually configures the Multi-chassis Link Aggregation (MLAG) domain MAC address. To restore the default system MAC address, use the no form of this command. Syntax mlag system-mac <mac-address>...
  • Page 654 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29.2.5 mlag <mlag-number> This command moves other port channels into a Multi-chassis Link Aggregation (MLAG) to connect to the downstream device. The range is from 1 and 4096. To remove the port channels from the mlag, use the no form of this command.
  • Page 655 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 6.29.2.7 mlag keepaliv-timeout This command is used to specify the timeout (in seconds) between re-transmissions to the MLAG peer device. Syntax mlag keepalive-timeout <3-20> no mlag keepalive-timeout <3-20> - Specify the timeout value between re-transmissions.

  • Page 656: Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Routing Commands Address Resolution Protocol (ARP) Commands 7.1.1 Show Commands 7.1.1.1 show ip arp This command displays the Address Resolution Protocol (ARP) cache. Syntax show ip arp Default Setting None...
  • Page 657 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Age: This field displays the current age of the ARP entry since last refresh (in hh:mm:ss format). 7.1.1.2 show ip arp brief This command displays the brief Address Resolution Protocol (ARP) table information.
  • Page 658 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.1.3 show ip arp static This command displays the static Address Resolution Protocol (ARP) table information. Syntax show ip arp static Default Setting None Command Mode Privileged Exec Display Message IP address: Is the IP address of a device on a subnet attached to an existing routing interface.

  • Page 659: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2 Configuration Commands 7.1.2.1 This command creates an ARP entry. The value for <ipaddress> is the IP address of a device on a subnet attached to an existing routing interface. The value for <macaddress> is a unicast MAC address for that device.
  • Page 660 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Interface Config 7.1.2.3 ip local-proxy-arp This command enables or disables Local Proxy ARP on an interface. Syntax ip local-proxy-arp no ip local-proxy-arp no - This command disables Local Proxy ARP on a router interface.
  • Page 661 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.5 arp dynamicrenew This command enables ARP component to automatically renew ARP entries of type dynamic when they age out. Syntax arp dynamicrenew no arp dynamicrenew no - This command disables ARP component from automatically renewing ARP entries of type dynamic when they age out.
  • Page 662 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.7 arp resptime This command configures the ARP request response timeout. Syntax arp resptime <1-10> no arp resptime <1-10> - The range of default response time is 1 to 10 seconds.
  • Page 663 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.1.2.9 arp timeout This command configures the ARP entry ageout time. Syntax arp timeout <15-21600> no arp timeout <15-21600> - Represents the IP ARP entry ageout time in seconds. The range is 15 to 21600 seconds.

  • Page 664: Ip Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Routing Commands 7.2.1 Show Commands 7.2.1.1 show ip brief This command displays all the summary information of the IP. Syntax show ip brief Default Setting None Command Mode Privileged Exec...
  • Page 665 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.2 show ip interface port This command displays all pertinent information about the IP interfaces. Syntax show ip interface port <slot/port> Default Setting None Command Mode Privileged Exec User Exec Display Message Routing Interface Status: Determine the operational status of IPv4 routing Interface.
  • Page 666 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. (enabled or disabled). ICMP Redirects: Displays whether ICMP Redirects may be sent (enabled or disabled). 7.2.1.3 show ip interface brief This command displays summary information about IP configuration settings for all ports in the router.
  • Page 667 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.4 show ip route This command displays the routing table. The <ip-address> specifies the network for which the route is to be displayed and displays the best matching best-route for the address. The <mask> specifies the subnet mask for the given <ip-address>.
  • Page 668 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.5 show ip route bestroutes This command displays router route table information for the best routes. Syntax show ip route bestroutes Default Setting None Command Mode Privileged Exec Display Message Total Number of Routes: The total number of routes.
  • Page 669 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.6 show ip route entry This command displays the router route entry information. Syntax show ip route entry <networkaddress> <networkaddress> - Is a valid network address identifying the network on the specified interface.
  • Page 670 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.7 show ip route connected This command displays directly connected routes. Syntax show ip route connected Default Setting None Command Mode Privileged Exec Display Message Route Codes: Displays the key for the routing protocol codes that might appear in the routing table output.
  • Page 671 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.8 show ip route ospf This command displays Open Shortest Path First (OSPF) routes. The option all command displays all (best and non-best) routes. Syntax show ip route ospf [all]...
  • Page 672 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.9 show ip route rip This command displays Routing Information Protocol (RIP) routes. The option all command displays all (best and non-best) routes. Syntax show ip route rip [all] Default Setting...
  • Page 673 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.10 show ip route static This command displays Static Routes. The option all command displays all (best and non-best) routes. Syntax show ip route static [all] Default Setting None Command Mode...
  • Page 674 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.11 show ip route summary This command displays the routing table summary. Use the optional all parameter to show the number of all routes, including best and non-best routes. To include only the number of best routes, do not use the optional parameter.
  • Page 675 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.12 show ip route preferences This command displays detailed information about the route preferences. Route preferences are used in determining the best route. Lower router preference values are preferred over higher router preference values.
  • Page 676 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.1.13 show ip stats This command displays IP statistical information. Refer to RFC 1213 for more information about the fields that are displayed. Syntax show ip stats Default Setting None...

  • Page 677: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2 Configuration Commands 7.2.2.1 routing This command enables routing for an interface. Syntax routing no routing no - Disable routing for an interface. Default Setting Disabled Command Mode Interface Config 7.2.2.2...
  • Page 678 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.3 ip address This command configures an IP address on an interface. The IP address may be a secondary IP address. Syntax ip address <ipaddr> <subnet-mask> [secondary] no ip address <ipaddr> <subnet-mask> [secondary] <ipaddr>...
  • Page 679 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.5 ip route This command configures a static route. Syntax ip route <networkaddr> <subnetmask> [ {<nexthopip>|Null0} [<1-255 >] ] no ip route <networkaddr> <subnetmask> [ { <nexthopip> | <1-255 > | Null0 } ] <ipaddr>...
  • Page 680 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.7 ip route distance This command sets the default distance (preference) for static routes. Lower route distance values are preferred when determining the best route. The ip route and ip route default commands allow you to optionally set the distance (preference) of an individual static route.
  • Page 681 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.8 ip mtu This command sets the IP Maximum Transmission Unit (MTU) on a routing interface or range of interfaces. The IP MTU is the size of the largest IP packet that can be transmitted on the interface without fragmentation.
  • Page 682 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.2.2.9 encapsulation This command configures the link layer encapsulation type for the packet. Syntax encapsulation {ethernet | snap} ethernet - The link layer encapsulation type is ethernet. snap - The link layer encapsulation type is SNAP.

  • Page 683: Open Shortest Path First (Ospf) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Open Shortest Path First (OSPF) Commands 7.3.1 Show Commands 7.3.1.1 show ip ospf This command displays information relevant to the OSPF router. Syntax show ip ospf Default Setting None Command Mode...
  • Page 684 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Network Area: Shows area for the Network Area setting. Default Route Advertise: Indicates whether the default routes received from other source protocols are advertised or not. Always: Shows whether default routes are always advertised.
  • Page 685 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.2 show ip ospf abr This command displays the internal OSPF routing table entries to Area Border Routers (ABR). This command takes no options Syntax show ip ospf abr Default Setting...
  • Page 686 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.3 show ip ospf area This command displays information about the area. The <areaid> identifies the OSPF area that is being displayed. Syntax show ip ospf area <areaid> Default Setting...
  • Page 687 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.4 show ip ospf asbr This command displays the internal OSPF routing table entries to Autonomous System Boundary Routers (ASBR). This command takes no options. Syntax show ip ospf asbr...
  • Page 688 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.5 show ip ospf database This command displays information about the link state database when OSPF is enabled. If you do not enter any parameters the command displays the LSA headers for all areas. Use the optional <areaid>...
  • Page 689 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Options: This is an integer. It indicates that the LSA receives special handling during routing calculations. Rtr Opt: Router Options are valid for router links only. 7.3.1.6 show ip ospf database database-summary Use this command to display the number of each type of LSA in the database for each area and for the router.
  • Page 690 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.7 show ip ospf interface This command displays the information for the IFO object or virtual interface tables. Syntax show ip ospf interface {<slot/port> | loopback <loopback-id> | vlan <vlan-id>}...
  • Page 691 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. router, and backup designated router. Designated Router: The router ID representing the designated router. Backup Designated Router: The router ID representing the backup designated router. Number of Link Events: The number of link events.
  • Page 692 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.9 show ip ospf interface stats This command displays the statistics for a specific interface. The information below will only be displayed if OSPF is enabled. Syntax show ip ospf interface stats {<slot/port> | loopback <loopback-id> | vlan <vlan-id>}...
  • Page 693 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Area Mismatch: The number of OSPF packets discarded because the area ID in the OSPF header is not the area ID configured on the ingress interface. Invalid Destination Address: The number of OSPF packets discarded because the packet’s destination IP address is not the address of the ingress interface and is not the AllDrRouters or AllSpfRouters multicast addresses.
  • Page 694 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.10 show ip ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table. If you specify an interface or tunnel, only the information for that interface or tunnel displays.The <ip-address>...
  • Page 695 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. and network-LSAs. Dead Time: The amount of time, in seconds, to wait before the router assumes the neighbor is unreachable. If you specify an IP address for the neighbor router, the following fields display: Interface: Valid slot and port number separated by a forward slash.
  • Page 696 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.11 show ip ospf range This command displays information about the area ranges for the specified <areaid>. The <areaid> identifies the OSPF area whose ranges are being displayed.. Syntax show ip ospf range <areaid>...
  • Page 697 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.12 show ip ospf statistics This command displays information about recent Shortest Path First (SPF) calculations. The SPF is the OSPF routing table calculation. The output lists the number of times the SPF has run for each OSPF area.
  • Page 698 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.13 show ip ospf stub table This command displays the OSPF stub table. The information below will only be displayed if OSPF is initialized on the switch.. Syntax show ip ospf stub table...
  • Page 699 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.14 show ip ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor. The <areaid> parameter identifies the area and the <neighbor> parameter identifies the neighbor's Router Syntax show ip ospf virtual-link <areaid>...
  • Page 700 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.1.15 show ip ospf virtual-link brief This command displays the OSPF Virtual Interface information for all areas in the system. Syntax show ip ospf virtual-link brief Default Setting None Command Mode...

  • Page 701: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2 Configuration Commands 7.3.2.1 router ospf Use this command to enter Router OSPF mode Syntax router ospf Default Setting None Command Mode Global Config 7.3.2.2 enable Use enable command resets the default administrative mode of OSPF in the router (active). no enable...
  • Page 702 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.3 network area Use network area command to enable OSPFv2 on an interface and set its area ID if the IP address of an interface is covered by this network command. Use no network area command to disable the...
  • Page 703 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.5 1583compatibility 1583 compatibility mode is enabled by default. If all OSPF routers in the routing domain are capable of operating according to RFC 2328, OSPF 1583 compatibility mode should be disabled.
  • Page 704 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.7 area nssa area nssa command configures the specified areaid to function as an NSSA. no area nssa command disables nssa from the specified area id. Syntax area <areaid> nssa no area <areaid>...
  • Page 705 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.9 area nssa no-redistribute area nssa no-redistribute command configures the NSSA Area Border router (ABR) so that learned external routes will not be redistributed to the NSSA. no area nssa no-redistribute command...
  • Page 706 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.11 area nssa translator-role area nssa translator-role command configures the translator role of the NSSA. A value of always causes the router to assume the role of the translator the instant it becomes a border router and a value of candidate causes the router to participate in the translator election process when it attains border router status.
  • Page 707 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.13 area range area range command creates a specified area range for a specified NSSA. The <ipaddr> is a valid IP address. The <subnetmask> is a valid subnet mask. The LSDB type must be specified by either summarylink or nssaexternallink, and the advertising of the area range can be allowed or suppressed.
  • Page 708 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.15 area stub no-summary area stub no-summary command configures the Summary LSA mode for the stub area identified by <areaid>. Use this command to prevent LSA Summaries from being sent.
  • Page 709 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.17 area virtual-link authentication area virtual-link authentication command configures the authentication type and key for the OSPF virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 710 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.19 area virtual-link hello-interval area virtual-link hello-interval command configures the hello interval for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 711 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.21 area virtual-link transmit-delay area virtual-link transmit-delay command configures the transmit delay for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighbor>. The <neighbor> parameter is the Router ID of the neighbor.
  • Page 712 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Router OSPF Config Mode _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 712/1568...
  • Page 713 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.23 bandwidth By default, OSPF computes the link cost of an interface as the ratio of the reference bandwidth to the interface bandwidth. Reference bandwidth is specified with the auto-cost command. For the purpose of the OSPF link cost calculation, use the bandwidth command to specify the interface bandwidth.
  • Page 714 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.25 clear ip ospf Use this command to disable and re-enable OSPF. Syntax clear ip ospf Default Setting None Command Mode Privileged Exec 7.3.2.26 clear ip ospf configuration Use this command to reset the OSPF configuration to factory defaults.
  • Page 715 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.27 clear ip ospf counters Use this command to reset global and interface statistics Syntax clear ip ospf counters Default Setting None Command Mode Privileged Exec 7.3.2.28 clear ip ospf neighbor Use this command to drop the adjacency with all OSPF neighbors.
  • Page 716 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.29 clear ip ospf neighbor interface To drop adjacency with all neighbors on a specific interface, use the optional parameter [slot/port]. To drop adjacency with a specific router ID on a specific interface, use the optional parameter [ipaddr].
  • Page 717 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.31 default-information originate default-information originate command is used to control the advertisement of default routes. no default-information originate command is used to control the advertisement of default routes. Syntax default-information originate [always] [metric <0-16777214>] [metric-type {1 | 2}]...
  • Page 718 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.33 distance ospf distance ospf command sets the route preference value of OSPF in the router. Lower route preference values are preferred when determining the best route. The type of OSPF route can be intra, inter, or external.
  • Page 719 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.35 exit-overflow-interval exit-overflow-interval command configures the exit overflow interval for OSPF. It describes the number of seconds after entering overflow state that a router will wait before attempting to leave the overflow state.
  • Page 720 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.37 ip ospf authentication ip ospf authentication command sets the OSPF Authentication Type and Key for the specified interface. The value of <type> is either none, simple or encrypt. The <key> is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard.
  • Page 721 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.39 ip ospf dead-interval ip ospf dead-interval command sets the OSPF dead interval for the specified interface. The value for <seconds> is a valid positive integer, which represents the length of time in seconds that a router's Hello packets have not been seen before its neighbor routers declare that the router is down.
  • Page 722 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.41 ip ospf network ip ospf network command to configure OSPF to treat an interface as a point-to-point rather than broadcast interface. The broadcast option sets the OSPF network type to broadcast. The point-to-point option sets the OSPF network type to point-to-point.
  • Page 723 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.43 ip ospf retransmit-interval ip ospf retransmit command sets the OSPF retransmit Interval for the specified interface. The retransmit interval is specified in seconds. The value for <seconds> is the number of seconds between link-state advertisement retransmissions for adjacencies belonging to this router interface.
  • Page 724 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.45 ip ospf mtu-ignore ip ospf mtu-ignore command disables OSPF maximum transmission unit (MTU) mismatch detection. OSPF Database Description packets specify the size of the largest IP packet that can be sent without fragmentation on the interface.
  • Page 725 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.47 redistribute redistribute command configures OSPF protocol to allow redistribution of routes from the specified source protocol/routers. no redistribute command configures OSPF protocol to prohibit redistribution of routes from the specified source protocol/routers.
  • Page 726 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.49 passive-interface default passive-interface default command to enable global passive mode by default for all interfaces. It overrides any interface level passive mode. OSPF will not form adjacencies over a passive interface.
  • Page 727 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.3.2.51 timers spf Use this command to configure the SPF delay time and hold time. The valid range for both parameters is 0-65535 seconds.. Syntax timers spf <delay-time> <hold-time> Default Setting delay- time—5...
  • Page 728 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 728/1568...

  • Page 729: Bootp/Dhcp Relay Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. BOOTP/DHCP Relay Commands 7.4.1 Show Commands 7.4.1.1 show bootpdhcprelay This command displays the BootP/DHCP Relay information. Syntax show bootpdhcprelay Default Setting None Command Mode Privileged Exec User Exec Display Message Maximum Hop Count: Is the maximum allowable relay agent hops.

  • Page 730: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2 Configuration Commands 7.4.2.1 bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP/DHCP Relay on the system. Syntax bootpdhcprelay cidoptmode no bootpdhcprelay cidoptmode no - This command is used to disable the circuit ID option mode for BootP/DHCP Relay on the system.
  • Page 731 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2.3 bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. Syntax bootpdhcprelay maxhopcount <hops> no bootpdhcprelay maxhopcount <hops> - The range of maximum hop count is 1 to 16.
  • Page 732 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.4.2.5 bootpdhcprelay serverip This command configures the server IP Address for BootP/DHCP Relay on the system. Syntax bootpdhcprelay serverip <ipaddr> no bootpdhcprelay serverip <ipaddr> - The IP address of the BootP/DHCP server.

  • Page 733: Ip Helper Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Helper Commands 7.5.1 Show Commands 7.5.1.1 show ip helper-address Use this command to display the IP helper address configuration. Syntax show ip helper-address Default Setting None Command Mode Privileged Exec...
  • Page 734 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.1.2 show ip helper statistics Use this command to display the number of UDP packets processed and relayed. Syntax show ip helper statistics Default Setting None Command Mode Privileged Exec...

  • Page 735: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2 Configuration Commands 7.4.2.1 ip helper-address Use this command to configure the relay of certain UDP broadcast packets received on a specific interface or range of interfaces. This command can be invoked multiple times on a routing interface, either to specify multiple server addresses for a given port number or to specify multiple port numbers handled by a specific server.
  • Page 736 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2.3 ip helper-address Use this command to configure the relay of certain UDP broadcast packets received on any interface. If the interface that receives a UDP packet has been configured with an address, this global address value will be ignored.
  • Page 737 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.5.2.5 clear ip helper statistics This command is used this command to clear the information of UDP packets processed and relayed by IP helper. Syntax clear ip helper statistics Default Setting...

  • Page 738: Routing Information Protocol (Rip) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Routing Information Protocol (RIP) Commands 7.6.1 Show Commands 7.6.1.1 show ip rip This command displays information relevant to the RIP router. Syntax show ip rip Default Setting None Command Mode...
  • Page 739 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.1.2 show ip rip interface This command displays information related to a particular RIP interface. Syntax show ip rip interface <slot/port> < slot/port > - Interface number Default Setting None...
  • Page 740 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.1.3 show ip rip interface brief This command displays general information for each RIP interface. For this command to display successful results routing must be enabled per interface (i.e. ip rip).

  • Page 741: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2 Configuration Commands 7.6.2.1 enable rip This command resets the default administrative mode of RIP in the router (active). Syntax enable no enable no - This command sets the administrative mode of RIP in the router to inactive.
  • Page 742 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.3 auto-summary This command enables the RIP auto-summarization mode. Syntax auto-summary no auto-summary no - This command disables the RIP auto-summarization mode. Default Setting Disabled Command Mode Router RIP Config 7.6.2.4...
  • Page 743 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.5 default-metric This command is used to set a default for the metric of distributed routes. Syntax default-metric <1-15> no default-metric <1 - 15> - a value for default-metric. no - This command is used to reset the default metric of distributed routes to its default value.
  • Page 744 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.7 hostrouteaccept This command enables the RIP hostroutesaccept mode. Syntax hostrouteaccept no hostrouteaccept no - This command disables the RIP hostroutesaccept mode. Default Setting Enabled Command Mode Router RIP Config 7.5.2.8...
  • Page 745 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.9 distribute-list This command is used to specify the access list to filter routes received from the source protocol. Source protocols have OSPF, Static, and Connected. Syntax distribute-list <1-199> out {ospf | static | connected} no distribute-list <1-199>...
  • Page 746 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.10 redistribute This command configures RIP protocol to redistribute routes from the specified source protocol/routers. There are five possible match options. W hen you submit the command redistribute ospf match <matchtype>...
  • Page 747 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.11 ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified interface. The value of <type> is either none, simple, or encrypt. The value for authentication key [key] must be 16 bytes or less. The [key] is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard.
  • Page 748 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.12 ip rip receive version This command configures the interface to allow RIP control packets of the specified version(s) to be received. The value for <mode> is one of: rip1 to receive only RIP version 1 formatted packets, rip2 for RIP...
  • Page 749 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.6.2.13 ip rip send version This command configures the interface to allow RIP control packets of the specified version to be sent. The value for <mode> is one of: rip1 to broadcast RIP version 1 formatted packets, rip1c (RIP version 1 compatibility mode) which sends RIP version 2 formatted packets via broadcast, rip2 for sending RIP version 2 using multicast, or none to not allow any RIP control packets to be sent.

  • Page 750: Router Discovery Protocol Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Router Discovery Protocol Commands 7.7.1 Show Commands 7.7.1.1 show ip irdp This commands displays the router discovery information for all interfaces, or a specified interface. Syntax show ip irdp [{<slot/port> | vlan <vlan-id>}] <slot/port>...

  • Page 751: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2 Configuration Commands 7.7.2.1 ip irdp This command enables Router Discovery on an interface. Syntax ip irdp no ip irdp <no> - Disable Router Discovery on an interface. Default Setting...
  • Page 752 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2.3 ip irdp holdtime This commands configures the value, in seconds, of the holdtime field of the router advertisement sent from this interface. Syntax ip irdp holdtime < maxadvertinterval-9000 >...
  • Page 753 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.7.2.5 ip irdp minadvertinterval This command configures the minimum time, in seconds, allowed between sending router advertisements from the interface. Syntax ip irdp minadvertinterval < 3-maxadvertinterval> no ip irdp minadvertinterval <...

  • Page 754: Vlan Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. VLAN Routing Commands 7.8.1 Show Commands 7.8.1.1 show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled in the system. Syntax show ip vlan...

  • Page 755: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.8.2 Configuration Commands 7.8.2.1 vlan routing This command creates routing on a VLAN. Syntax vlan routing <vlanid> [<vlan-index>] no vlan routing <vlanid> <vlanid> - The range is 1 to 4093.

  • Page 756: Virtual Router Redundancy Protocol (Vrrp) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Virtual Router Redundancy Protocol (VRRP) Commands 7.9.1 Show Commands 7.9.1.1 show ip vrrp This command displays whether VRRP functionality is enabled or disabled. It also displays some global parameters which are required for monitoring.
  • Page 757 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.2 show ip vrrp brief This command displays information about each virtual router configured on the switch. Syntax show ip vrrp brief Default Setting None Command Mode Privileged Exec User...
  • Page 758 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.3 show ip vrrp interface This command displays all configuration information of a virtual router configured on a specific interface. Note that the information will be displayed only when the IP address of the specific interface is configured.
  • Page 759 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.1.4 show ip vrrp interface stats This command displays the statistical information about each virtual router configured on the switch. Syntax show ip vrrp interface stats {<slot/port> | vlan <vlan-id>} [<vrid>] <slot/port>...
  • Page 760 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Invalid Authentication Type: Represents the total number of VRRP packets received with unknown authentication type. Authentication Type Mismatch: Represents the total number of VRRP advertisements received for which 'auth type' not equal to locally configured one for this virtual router.

  • Page 761: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2 Configuration Commands 7.9.2.1 ip vrrp This command enables the administrative mode of VRRP in the router. Syntax ip vrrp no ip vrrp Default Setting Disable Command Mode Global Config This command sets the virtual router ID on an interface for Virtual Router configuration in the router.
  • Page 762 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.2 ip vrrp ip This commands also designates the configured virtual router IP address as a secondary IP address on an interface. Syntax ip vrrp <1-255> ip <addr> [secondary] no ip vrrp <1-255> ip <addr> [secondary] <1-255>...
  • Page 763 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.4 ip vrrp accept-mode Use this command to allow the VRRP Master to accept ping packets sent to one of the virtual router's IP addresses. Syntax ip vrrp <1-255> accept-mode no ip vrrp <1-255>...
  • Page 764 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.6 ip vrrp preempt This command sets the preemption mode value for the virtual router configured on a specified interface. Syntax ip vrrp <1-255> preempt [delay <0-3600>] no ip vrrp <1-255> preempt [delay] <1-255>...
  • Page 765 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.7 ip vrrp priority This command sets the priority value for the virtual router configured on a specified interface. The router with the highest priority is elected master. If a router is configured with the address used as the address of the virtual router, the router is called the "address owner".
  • Page 766 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.8 ip vrrp timers advertise This command sets the advertisement value for a virtual router in seconds. Syntax ip vrrp <1-255> timers advertise <1-255> ip vrrp <1-255> timers advertise <1-255> - The range of virtual router ID is 1 to 255.
  • Page 767 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.9 ip vrrp track interface This command alters the priority of the VRRP router based on the availability of its interfaces. This command is useful for tracking interfaces that are not configured for VRRP. Only IP interfaces are tracked.
  • Page 768 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.9.2.10 ip vrrp track ip route This command tracks the route reachability. W hen the tracked route is deleted, the priority of the VRRP router will be decremented by the value specified in the decrement argument. W hen the tracked route is added, the priority will be incremented by the same.

  • Page 769: Policy Based Routing (Pbr) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10 Policy Based Routing (PBR) Commands 7.10.1 Show Commands 7.10.1.1 show ip policy This command lists the route map associated with each interface. Syntax show ip policy Default Setting None...
  • Page 770 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. sequence-number: (Optional) The sequence number of the prefix list entry. longer: (Optional) Displays all entries of a prefix list that are more specific than the given network/length. first-match: (Optional) Displays the entry of a prefix list that matches the given network/length.

  • Page 771: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2 Configuration Commands 7.10.2.1 ip policy route-map Use this command to identify a route map to use for policy-based routing on an interface specified by <route-map-name>. Policy-based routing is configured on the interface that receives the packets, not on the interface from which the packets are sent.
  • Page 772 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.2 ip prefix-list To create a prefix list or add a prefix list entry, use the ip prefix-list command in Global Configuration mode. Prefix lists allow matching of route prefixes with those specified in the prefix list. Each prefix list includes of a sequence of prefix list entries ordered by their sequence numbers.
  • Page 773 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. than or equal to 32. renumber: (Optional) Provides the option to renumber the sequence numbers of the IP prefix list statements with a given interval starting from a particular sequence number. The valid range for renumber-interval is 1 - 100, and the valid range for first-statement-number is 1 - 1000.
  • Page 774 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.3 ip prefix-list description To apply a text description to a prefix list, use the ip prefix-list description command in Global Configuration mode. To remove the text description, use the no form of this command.
  • Page 775 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.4 route-map To create a route map and enter Route Map Configuration mode, use the route-map command in Global Configuration mode. One use of a route map is to limit the redistribution of routes to a specified range of route prefixes.
  • Page 776 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.5 match as-path This route map match term matches BGP autonomous system paths against an AS path access list. If you enter a new match as-path term in a route map statement that already has a match as-path term, the AS path list numbers in the new term are added to the existing match term, up to the maximum number of lists in a term.
  • Page 777 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.6 match community To configure a route map to match based on a BGP community list, use the match community command in Route Map Configuration mode. If the community list returns a permit action, the route is considered a match.
  • Page 778 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.7 match ip address To configure a route map to match based on a destination prefix, use the match ip address command in Route Map Configuration mode. If you specify multiple prefix lists in one statement, then a match occurs if a prefix matches any one of the prefix lists.
  • Page 779 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.8 match ip address <access-list-number | access-list-name> Use this command to configure a route map in order to match based on the match criteria configured in an IP access-list. Note that an IP ACL must be configured before it is linked to a route-map. Actions present in an IP ACL configuration are applied with other actions involved in route-map.
  • Page 780 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.9 set as-path To prepend one or more AS numbers to the AS path in a BGP route, use the set as-path command in Route Map Configuration mode. This command is normally used to insert one or more instances of the local AS number at the beginning of the AS_PATH attribute of a BGP route.
  • Page 781 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.10 set comm-list delete To remove BGP communities from an inbound or outbound UPDATE message, use the set comm-list delete command in Route Map Configuration mode. A route map with this set command can be used to remove selected communities from inbound and outbound routes.
  • Page 782 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.11 set community To modify the communities attribute of matching routes, use the set community command in Route Map Configuration mode. The set community command can be used to assign communities to routes originated through BGP's network and redistribute commands, and to set communities on routes received from a specific neighbor or advertised to a specific neighbor.
  • Page 783 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.12 set interface If network administrator does not want to revert to normal forwarding but instead want to drop a packet that does not match the specified criteria, a set statement needs to be configured to route the packets to interface null 0 as the last entry in the route-map.
  • Page 784 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.13 set default interface A packet is dropped by this command only if there is no explicit route for the packet's destination address in the routing table. A default route in the routing table is not considered an explicit route for an unknown destination address.
  • Page 785 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.14 set ip next-hop Use this command to specify the adjacent next-hop router in the path toward the destination to which the packets should be forwarded. If more than one IP address is specified, the ECMP rule is used to route the packets.
  • Page 786 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.15 set ip default next-hop Use this command to set a list of default next-hop IP addresses. If more than one IP address is specified, the ECMP rule is used.
  • Page 787 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.16 set ip precedence Use this command to set the three IP precedence bits in the IP packet header. W ith three bits, you have eight possible values for the IP precedence; values 0 through 7 are defined. This command is used when implementing QoS and can be used by other QoS services, such as weighted fair queuing (WFQ) and weighted random early detection (WRED).
  • Page 788 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.17 set local-preference To set the local preference of specific BGP routes, use the set local-preference command in Route Map Configuration mode. The local preference is the first attribute used to compare BGP routes. Setting the local preference can influence which route BGP selects as the best route.
  • Page 789 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.18 set metric To set the metric of a route, use the set metric command in Route Map Configuration mode. This command sets the Multi Exit Discriminator (MED) when used in a BGP context. When there are multiple peering points between two autonomous systems (AS), setting the MED on routes advertised by one router can influence the other AS to send traffic through a specific peer.
  • Page 790 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.10.2.19 clear ip prefix-list To reset IP prefix-list counters, use the clear ip prefix-list command in Privileged EXEC mode. This command is used to clear prefix-list hit counters. The hit count is a value indicating the number of matches to a specific prefix list entry.

  • Page 791: Border Gateway Protocol (Bgp) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11 Border Gateway Protocol (BGP) Commands 7.11.1 Show Commands 7.11.1.1 show ip bgp This command displays information relevant to the BGP router. Syntax show ip bgp Default Setting None Command Mode...
  • Page 792 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. LocPref: Local preference value as set with the set local-preference route-map configuration command. The default value is 100. Path: Autonomous system paths to the destination network. There can be one entry in this field for...
  • Page 793 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.2 show ip bgp <prefix/length> This command displays the BGP routing table entries which are filtered the display output with a prefix/length. Syntax show ip bgp <prefix/length> Default Setting None...
  • Page 794 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.3 show ip bgp aggregate-address This command displays information about the aggregate-address. Syntax show ip bgp aggregate-address Default Setting None Command Mode Privileged Exec User Exec Display Messages Aggregation of routes with different MED values is allowed: The aggregate-different-meds is enabled.
  • Page 795 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.4 show ip bgp community This command display routes that belong to specified BGP communities. Syntax show ip bgp community <community-number> [exact-match | local-as | no-advertise | no-export] < community-number > - Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number).
  • Page 796 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Network: IP address of a network entity. Next Hop: IP address of the next system that is used when forwarding a packet to the destination network. An entry of 0.0.0.0 indicates that the router has some non-BGP routes to this network.
  • Page 797 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.5 show ip bgp community-list This command display routes that are permitted by the Border Gateway Protocol (BGP) community list. Syntax show ip bgp community-list community-list-name [exact-match] community-list-name - Community list name. The community list name can be standard or expanded.
  • Page 798 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. LocPref: Local preference value as set with the set local-preference route-map configuration command. The default value is 100 Path: Autonomous system paths to the destination network. There can be one entry in this field for...
  • Page 799 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.6 show ip bgp filter-list Use this command to display routes that conform to a specified filter list. Syntax show ip bgp filter-list access-list-number access-list-number - Number of an autonomous system path access list. It can be a number from 1 to 500.
  • Page 800 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. command. The default value is 100. 叩 Path: Autonomous system paths to the destination network. There can be one ent in this field for each autonomous system in the path...
  • Page 801 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.7 show ip bgp neighbors This command displays information about Border Gateway Protocol (BGP) and TCP connections to neighbors. Syntax show ip bgp neighbors [<ip-address> [advertised-routes | policy | received-routes | rejected-routes | routes] | policy] ip-address - Displays information about the IPv4 neighbor.
  • Page 802 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Update Source: Allowed interface for TCP connections to the neighbor. Local Interface Address: The IPv4 Address of the local BGP interface. Local IPv6 Interface Address: The IPv6 Address of the local BGP interface.
  • Page 803 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Prefixes Current: Number of prefixes current kept. Prefixes Accepted: Number of prefixes accepted. Prefixes Rejected: Number of prefixes rejected. Max NLRI per Update: Maximum number of network layer reachability attributes in UPDATEs.
  • Page 804 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.8 show ip bgp prefix-list This command displays information about a prefix list or prefix list entries. Syntax show ip prefix-list <prefix-list-name> prefix-list-name - Displays the entries in a specific prefix list.
  • Page 805 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Path: Autonomous system paths to the destination network. There can be one entry in this field for each autonomous system in the path. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual...
  • Page 806 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.9 show ip bgp statistics This command displays the recent decision process history. Syntax show ip bgp statistics Default Setting None Command Mode Privileged Exec User Exec Display Messages Delta T: The time values since decision process ran.
  • Page 807 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.10 show ip bgp summary This command displays the status of all Border Gateway Protocol (BGP) connections. Syntax show ip ospf neighbor [interface {<slot/port> | vlan <vlan-id>}] [<ip-address>] Default Setting...
  • Page 808 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.11 show ip bgp template This command displays peer policy template configurations. Syntax show ip bgp template [<template-name>] template-name - Displays the configurations in a specific template. Default Setting None...
  • Page 809 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.12 show ip bgp traffic This command displays global BGP message counters. Syntax show ip bgp traffic Default Setting None Command Mode Privileged Exec User Exec Display Messages Time Since Counters Cleared: How long ago the SPF ran. The time is in the format hh:mm:ss, giving the hours, minutes, and seconds since the SPF run.
  • Page 810 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Limit: Maximum size of queue. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 810/1568...
  • Page 811 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.1.13 show ip bgp update-group This command displays information about the Border Gateway Protocol (BGP) update groups. Syntax show ip bgp update-group [index-group | peeripadd] index-group - Update group type with its corresponding index number. The range of update-group index numbers is from 1 to 4294967295.
  • Page 812 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Delta T: When update send occured. Duration: How long the update send process took. UPD Built: Number of UPDATE messages constructed during this update send. UPD Sent: Number of UPDATE messages transmitted during this update send. Generally each UPDATE built is sent once to each member of the update group.

  • Page 813: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2 Configuration Commands 7.11.2.1 router bgp Use this command to the Border Gateway Protocol (BGP) routing mode Syntax router bgp <autonomous-system-number> autonomous-system-number - Number of an autonomous system that identifies the router to other BGP routers and tags the routing information that is passed along.
  • Page 814 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.3 aggregate-address Use aggregate-address command to create an aggregate entry in a Border Gateway Protocol (BGP) database. Use no aggregate-address command to disable an aggregate entry in a Border Gateway Protocol (BGP) database.
  • Page 815 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.5 bgp always-compare-med Use bgp always-compare-med command to compare MED values always from peers in different ASes. Use no bgp always-compare-med command to disable this function. Syntax bgp always-compare-med no bgp always-compare-med...
  • Page 816 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.7 bgp fast-external-failover This command configures Border Gateway Protocol (BGP) routing process to immediately reset external BGP peering sessions if the link used to reach these peers goes down. no bgp fast-external-failover command disables this function.
  • Page 817 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.9 bgp log-neighbor-changes This command enable logging of BGP neighbor resets . To disable the logging of changes in BGP neighbor adjacencies, use the no form of this command. Syntax...
  • Page 818 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.11 exit This command is used to exit bgp configuration mode. Syntax exit Default Setting None Command Mode Router BGP Config Mode 7.11.2.12 timers bgp This command is used to set the keepalive and holdtime timers. To return the router to default operation, use the no form of this command.
  • Page 819 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.13 neighbor default-originate route-map This command is used to allow a BGP speaker (the local router) to send the default route 0.0.0.0 to a neighbor for use as a default route, use the neighbor default-originate command in address family or router configuration mode.
  • Page 820 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.15 neighbor update-source This command is used to allow BGP sessions to use any operational interface for TCP connections, use the neighbor update-source command in Router BGP Config Mode. To restore the interface assignment to the closest interface, which is called the best local address, use the no form of this command.
  • Page 821 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.17 neighbor password This command is used to enable Message Digest 5 (MD5) authentication on a TCP connection between two BGP peers, use the neighbor password command in Router BGP Config Mode. To disable this function, use the no form of this command.
  • Page 822 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.19 neighbor maximum-prefix This command is used to control how many prefixes can be received from a neighbor, use the neighbor maximum-prefix command in Router BGP Config Mode. Syntax neighbor <peeripaddr> maximum-prefix {<maximum> | unlimited} [<threshold> | warning-only] peeripaddr: IP address of the neighboring router.
  • Page 823 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.20 neighbor nexthopself This command is used to configure the router as the next hop for a BGP-speaking neighbor, use the neighbor nexthopself command in Router BGP Config Mode. To disable this feature, use the no form of this command.
  • Page 824 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.22 neighbor prefix-list This command is used to prevent distribution of Border Gateway Protocol (BGP) neighbor information as specified in a prefix list, use the neighbor prefix-list command Router BGP Config Mode. To remove a filter list, use the no form of this command.
  • Page 825 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.24 neighbor route-map This command is used to apply a route map to incoming or outgoing routes, use the neighbor route-map command in Router BGP Config Mode. To remove a route map, use the no form of this command.
  • Page 826 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.26 neighbor timers This command is used to set the timers for a specific BGP peer, use the neighbor timers command in Router BGP Config Mode. To clear the timers for a specific BGP peer, use the no form of this command.
  • Page 827 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.28 neighbor send-community This command is used to specify that communities attribute should be sent to a BGP neighbor, use the neighbor send-community command in router configuration mode. To remove the entry, use the no form of this command.
  • Page 828 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.30 distance bgp This command is used to allow the use of external, internal, and local administrative distances that could be a better route than other external, internal, or local routes to a node, use the distance bgp command in address family or router configuration mode.
  • Page 829 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.31 default-information originate This command is used to control the redistribution of a protocol or network into the BGP, use the default-information originate command in address family or router configuration mode. To disable this function, use the no form of this command.
  • Page 830 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.33 default-metric This command is used to set a default metric for routes redistributed into Border Gateway Protocol (BGP), use the default-metric command in Router BGP Config Mode. To remove the configured value and return BGP to default operation, use the no form of this command.
  • Page 831 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.35 distribute-list in This command is used to filter routes or networks received in incoming Border Gateway Protocol (BGP) updates, use the distribute-list in command in router configuration mode. To delete the distribute list and remove it from the running configuration file, use the no form of this command.
  • Page 832 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.11.2.37 network This command is used to specify the networks to be advertised by the Border Gateway Protocol (BGP) routing processes, use the network command in address family or router configuration mode. To remove an entry from the routing table, use the no form of this command.

  • Page 833: Intermediate System To Intermediate System (Isis) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12 Intermediate System to Intermediate System (ISIS) Commands 7.12.1 Show Commands 7.12.1.1 show isis area This command display ISIS area configuration Syntax show isis area Default Setting None Command Mode...
  • Page 834 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. SNP Authentication Type: SNP packet authentication mode. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 834/1568...
  • Page 835 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.1.2 show isis database To display the Intermediate System-to-Intermediate System (IS-IS) link-state database Syntax show isis database [detail] Default Setting None Command Mode Privileged Exec User Exec Display Message LSPID: The LSP identifier. The first six octets form the system ID of the router that originated the LSP.
  • Page 836 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.1.3 show isis hostname To display the router-name-to-system-ID mapping table entries for an Intermediate System-to-Intermediate System (IS-IS) router. Syntax show isis hostname Default Setting None Command Mode Privileged Exec User Exec Display Message Levle: Indicate the router capability on ISIS.
  • Page 837 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Link State: Interface link state. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 837/1568...
  • Page 838 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.1.5 show isis interface To display all ISIS interface configuration information. Syntax show isis interface {slot/port | vlan <1-4093> | loopback <0-7>} Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: Route interface name.
  • Page 839 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.1.6 show isis neighbor To display information about Intermediate System-to-Intermediate System (IS-IS) neighbors. Syntax show isis neighbor [detail] Default Setting None Command Mode Privileged Exec User Exec Display Message System Id: Six-byte value that identifies a system in an area.

  • Page 840: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2 Configuration Commands 7.12.2.1 router isis To enter the router isis mode and create ISIS area. Syntax router isis [<area>] no router isis [<area>] <area> - ISIS area name. The name string length is restricted to 20 characters.
  • Page 841 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.3 domain-password To configure the domain password and authentication type. Syntax domain-password <word> [authentication snp {send-only | validate} no domain-password <word> - ISIS domain passowrd. The passowrd string length is restricted to 254 characters.
  • Page 842 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.5 is-type To set ISIS router capability. Syntax is-type {level-1 | level-1-2 | level-2-only} no is-type level-1: Router performs only Level 1 (intra-area) routing. This router learns only about destinations inside its area.
  • Page 843 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.7 lsp-lifetime To set LSP maxmum lifetime in second. Syntax lsp-lifetime <1-65535> no lsp-lifetime no - This command set LSP maximum lifetime to default value. Default Setting 1200 Command Mode Router ISIS mode.
  • Page 844 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.9 metric-style To configure a router running ISIS so that it generates and accepts narrow, new-style type, length, value objects (TLVs) or both. Syntax metric-style {narrow | wide | transition}...
  • Page 845 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.11 spf-interval To set minimum SPF execution interval time in second. Syntax spf-interval {<1-120> | level-1 <1-120> | level-2 <1-120>} no spf-interval <1-120> - SPF execution interval in second. no - This command set the minimum spf execution interval to default value.
  • Page 846 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.13 default-information originate This command is used to set the advertisement of default routes. Syntax default-information originate no default-information originate no - This command is used to cancel the advertisement of default routes.
  • Page 847 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.15 distribute-list This command is used to specify the access list to filter routes received from the source protocol. Source protocols have OSPF, RIP, Static, and Connected. Syntax distribute-list <1-199> out {ospf | static | rip| connected} no distribute-list <1-199>...
  • Page 848 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.16 redistribute This command configures ISIS protocol to redistribute routes from the specified source protocol/routers. There are five possible match options. W hen you submit the command redistribute ospf match <matchtype>...
  • Page 849 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.17 ip isis To set ISIS interface mode. Syntax ip isis no ip isis no - This command disable ISIS interface mode. Default Setting Disable Command Mode Interface Config _____________________________________________________________________________...
  • Page 850 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.18 ip isis csnp-interval To set csnp transition interval time in second. Syntax ip isis csnp-interval {<1-65535> | level-1 <1-65535> | level-2 <1-65535>} no ip isis csnp-interval [level-1 | level-2] no - This command set CSNP transition interval to default value.
  • Page 851 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.20 ip isis circuit-type To configure the type of adjacency. Syntax ip isis circuit-type {level-1 | level-1-2 | level-2-only} no ip isis circuit-type level-1 - Configures a router for Level 1 adjacency only.
  • Page 852 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.22 ip isis hello-multiplier To specify the number of ISIS hello packets a neighbor must miss before the router should declare the adjacency as down. Syntax ip isis hello-multiplier {<3-1000> | level-1 <3-1000> | level-2 <3-1000>} no ip isis hello- multiplier [level-1 | level-2] <3-1000>...
  • Page 853 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.24 ip isis metric To configure the value of an ISIS metric. Syntax ip isis metric {<0-16777214> | level-1 <0-16777214> | level-2 <0-16777214>} no ip isis metric [level-1 | level-2] <0-16777214>...
  • Page 854 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 7.12.2.25 ip isis priority To configure the priority of designated routers, use the isis priority command in interface configuration mode. Syntax ip isis priority {<0-127> | level-1 <0-127> | level-2 <0-127>} no ip isis priority [level-1 | level-2] <0-127>...

  • Page 855: Ip Multicast Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IP Multicast Commands Distance Vector Multicast Routing Protocol (DVMRP) Commands This section provides a detailed explanation of the DVMRP commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information. Configuration commands are used to configure features and options of the switch.
  • Page 856 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.2 show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface. Syntax show ip dvmrp interface {<slot/port> | vlan <vlan-id>} <slot/port> - Valid slot and port number separated by forward slashes.
  • Page 857 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.3 show ip dvmrp neighbor This command displays the neighbor information for DVMRP. Syntax show ip dvmrp neighbor Default Setting Command Mode Privileged Exec User EXEC Display Message IfIndex: This field displays the value of the interface used to reach the neighbor.
  • Page 858 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.4 show ip dvmrp nexthop This command displays the next hop information on outgoing interfaces for routing multicast datagrams. Syntax show ip dvmrp nexthop Default Setting None Command Mode Privileged...
  • Page 859 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.5 show ip dvmrp prune This command displays the table listing the router’s upstream prune information Syntax show ip dvmrp prune Default Setting None Command Mode Privileged Exec User Exec Display Message Group IP: This field identifies the multicast Address that is pruned.
  • Page 860 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.1.6 show ip dvmrp route This command displays the multicast routing information for DVMRP. Syntax show ip dvmrp route Default Setting None Command Mode Privileged Exec User Exec Display Message Source Address: This field displays the multicast address of the source group.

  • Page 861: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.2 Configuration Commands 8.1.2.1 ip dvmrp This command sets administrative mode of DVMRP in the router to active. IGMP must be enabled before DVMRP can be enabled. Syntax ip dvmrp no ip dvmrp no - This command sets administrative mode of DVMRP in the router to inactive.
  • Page 862 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.1.2.2 ip dvmrp metric This command configures the metric for an interface. This value is used in the DVMRP messages as the cost to reach this network. Syntax ip dvmrp metric <value>...

  • Page 863: Internet Group Management Protocol (Igmp) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Internet Group Management Protocol (IGMP) Commands This section provides a detailed explanation of the IGMP commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information.
  • Page 864 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.2 show ip igmp groups This command displays the registered multicast groups on the interface. If “detail” is specified this command displays the registered multicast groups on the interface in detail.
  • Page 865 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.3 show ip igmp interface This command displays the IGMP information for the interface. Syntax show ip igmp interface {<slot/port> | vlan <vlan-id>} <slot/port> - Valid slot and port number separated by forward slashes.
  • Page 866 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.4 show ip igmp interface membership This command displays the list of interfaces that have registered in the multicast group. Syntax show ip igmp interface membership <multiipaddr> [detail] < multiipaddr > - A multicast IP address..
  • Page 867 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.1.5 show ip igmp interface stats This command displays the IGMP statistical information for the given interface. The statistics are only displayed when the interface is enabled for IGMP. Syntax show ip igmp interface stats {<slot/port>...

  • Page 868: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2 Configuration Commands 8.2.2.1 ip igmp This command sets the administrative mode of IGMP in the router to active. Syntax ip igmp no ip igmp no - This command sets the administrative mode of IGMP in the router to inactive.
  • Page 869 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.2 ip igmp version This command configures the version of IGMP for an interface. Syntax ip igmp version {1 | 2 | 3} no ip igmp version <1- 3> - The igmp version number.
  • Page 870 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.4 ip igmp last-member-query-interval This command configures the Maximum Response Time being inserted into Group-Specific Queries sent in response to Leave Group messages on the interface. Syntax ip igmp last-member-query-interval <0-255>...
  • Page 871 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.6 ip igmp query-max-response-time This command configures the maximum response time interval for the specified interface, which is the maximum query response time advertised in IGMPv2 queries on this interface.The time interval is specified in tenths of a second.
  • Page 872 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.2.2.8 ip igmp startup-query-count This command sets the number of Queries sent out on startup, separated by the Startup Query Interval on the interface. Syntax ip igmp startup-query-count <1-20> no ip igmp startup-query-count <1-20>...

  • Page 873: Mld Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MLD Commands This section provides a detailed explanation of the MLD commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information.
  • Page 874 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Last Reporter: The IP Address of the source of the last membership report received for this multicast group address on that interface. Filter Mode: The filter mode of the multicast group on this interface. The values it can take are include and exclude.
  • Page 875 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.1.2 show ipv6 mld interface Use this command to display MLD-related information for the interface. Syntax show ipv6 mld interface [{<slot/port> | vlan <vlan-id>}] <slot/port> - Valid slot and port number separated by forward slashes.
  • Page 876 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Querier Up Time: Time elapsed in seconds since the querier state has been updated. Querier Expiry Time: Time left in seconds before the Querier loses its title as querier. Wrong Version Queries: Indicates the number of queries received whose MLD version does not match the MLD version of the interface.
  • Page 877 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.1.3 show ipv6 mld traffic Use this command to display MLD statistical information for the router. Syntax show ipv6 mld traffic Default Setting None Command Mode Privileged Exec Display Message Valid MLD Packets Received: The number of valid MLD packets received by the router.

  • Page 878: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2 Configuration Commands 8.3.2.1 ipv6 mld query-interval Use this command to set the MLD router’s query interval for the interface. The query-interval is the amount of time between the general queries sent when the router is the querier on that interface.
  • Page 879 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2.3 ipv6 mld last-member-query-interval Use this command to set the last member query interval for the MLD interface, which is the value of the maximum response time parameter in the group specific queries sent out of this interface. The range for <last-member-query-interval>...
  • Page 880 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2.5 ipv6 mld router Use this command, in the administrative mode of the router, to enable MLD in the router. Syntax ipv6 mld router no ipv6 mld router Default Setting...
  • Page 881 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.3.2.7 clear ipv6 mld traffic The user can go to the CLI Privilege Configuration Mode to clear MLD traffec on the system, use the clear ipv6 mld traffic priviledge configuration command.

  • Page 882: Multicast Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Multicast Commands 8.4.1 Show Commands 8.4.1.1 show ip mcast This command displays the system-wide multicast information Syntax show ip mcast Default Setting None Command Mode Privileged Exec User Exec Display Message Admin Mode: This field displays the administrative status of multicast.
  • Page 883 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.2 show ip mcast boundary This command displays all the configured administrative scoped multicast boundaries. Syntax show ip mcast boundary [{<slot/port> | vlan <vlan-id>}] <slot/port > - Interface number. <vlan-id> - VLAN ID. The range of VLAN ID is 1 to 4093.
  • Page 884 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.3 show ip mcast interface This command displays the multicast information for the specified interface. Syntax show ip mcast interface {<slot/port> | vlan <vlan-id>} <slot/port > - Interface number. <vlan-id> - VLAN ID. The range of VLAN ID is 1 to 4093.
  • Page 885 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.1.4 show ip mcast mroute This command displays a summary or all the details of the multicast table. Syntax show ip mcast mroute {detail | summary} detail - displays the multicast routing table details.
  • Page 886 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given <groupipaddr>.
  • Page 887 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given <sourceipaddr> or <sourceipaddr> [<groupipaddr>] pair.

  • Page 888: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2 Configuration Commands 8.4.2.1 ip multicast This command sets the administrative mode of the IP multicast forwarder in the router to active. For multicast routing to become operational, IGMP must be currently enabled. An error message will be displayed on the CLI if multicast routing is enabled while IGMP is disabled.
  • Page 889 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.2 ip mcast boundary This command adds an administrative scope multicast boundary specified by <groupipaddr> and <mask> for which this multicast administrative boundary is applicable. <groupipaddr> is a group IP address and <mask>...
  • Page 890 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.4.2.3 ip multicast ttl-threshold This command applies the given <ttlthreshold> to a routing interface. The <ttlthreshold> is the TTL threshold which is to be applied to the multicast Data packets which are to be forwarded from the interface.

  • Page 891: Ipv4 Protocol Independent Multicast (Pim) Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv4 Protocol Independent Multicast (PIM) Commands 8.5.1 Show Commands 8.5.1.1 show ip pim This command displays the system-wide information for PIM-DM or PIM-SM. Syntax show ip pim Default Setting None...
  • Page 892 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.2 show ip pim bsr-router This command displays the bootstrap router (BSR) information. Syntax show ip pim bsr-router {candidate | elected} Default Setting None Command Mode Privileged Exec, User Exec...
  • Page 893 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.3 show ip pim interface This command displays the interface information for PIM on the specified interface. If no interface is specified, the command displays the status parameters for all PIM-enabled interfaces.
  • Page 894 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.4 show ip pim neighbor This command displays PIM neighbors discovered by PIMv2 Hello messages. If the interface number is not specified, this command displays the neighbors discovered on all the PIM enabled interfaces.
  • Page 895 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.5 show ip pim rp mapping Use this command to display all active group-to-RP mappings of which the router is a aware (either configured or learned from the bootstrap router (BSR)). Use the optional parameters to limit the display to a specific RP address or to view group-to-candidate RP or group to Static RP mapping information.
  • Page 896 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.1.6 show ip pim rp-hash group-address This command displays which rendezvous point (RP) is being used for a specified group. Syntax show ip pim rp-hash group-address Default Setting None Command Mode...

  • Page 897: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2 Configuration Commands 8.5.2.1 ip pim bsr-candidate This command is used to configure the router to announce its candidacy as a bootstrap router (BSR). Syntax ip pim bsr-candidate interface {<slot/port> | vlan <vlan-id>} <hash-mask-length> [<priority>] no ip pim bsr-candidate interface {<slot/port>...
  • Page 898 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.2 ip pim dense This command enables the administrative mode of PIM-DM in the router. Syntax ip pim dense no ip pim dense no - This command disables the administrative mode of PIM-DM in the router.
  • Page 899 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.4 ip pim rp-candidate This command is used to configure the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR). Syntax ip pim rp-candidate interface {<slot/port> | vlan <vlan-id>} <group-address> <group-mask>...
  • Page 900 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 900/1568...
  • Page 901 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.6 ip pim spt-threshold Use this command to configure the Data Threshold rate for the last-hop router to switch to the shortest path. The possible values are 0 or Infinity.
  • Page 902 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.8 ip pim This command administratively enables PIM on an interface or range of interfaces. Syntax ip pim no ip pim no - This command sets the administrative mode of PIM on an interface to disabled.
  • Page 903 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.10 ip pim dr-priority Use this command to set the priority value for which a router is elected as the designated router (DR). This command can be configured on a single interface or a range of interfaces.
  • Page 904 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.5.2.12 ip pim join-prune-interval This command is used to configure the join/prune interval for the PIM-SM router on an interface or range of interfaces. The join/prune interval is specified in seconds. This parameter can be configured to a value from 0 to 18000.

  • Page 905: Ipv6 Protocol Independent Multicast Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv6 Protocol Independent Multicast Commands 8.6.1 Show Commands 8.6.1.1 show ipv6 pim display the system-wide information for PIM-DM or PIM-SM. Use this command to Syntax show ipv6 pim Default Setting...
  • Page 906 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6 IPv6 Protocol Independent Multicast Commands 8.6.1 Show Commands 8.6.1.1 show ipv6 pim display the system-wide information for PIM-DM or PIM-SM. Use this command to Syntax show ipv6 pim Default Setting...
  • Page 907 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.1.3 show ipv6 pim interface Use this command to displays the interface information for PIM on the specified interface. If no interface is specified, the command displays the status parameters for all PIM-enabled interfaces.
  • Page 908 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.1.4 show ipv6 pim neighbor Use this command to display PIM neighbors discovered by PIMv2 Hello messages. If the interface number is not specified, this command displays the neighbors discovered on all the PIM-enabled interfaces.
  • Page 909 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.1.5 show ipv6 pim bsr-router This command displays the bootstrap router (BSR) information. Syntax show ipv6 pim bsr-router {candidate | elected} Default Setting None Command Mode Privileged Exec User Exec Display Message BSR Address: IPv6 address of the BSR.
  • Page 910 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.1.6 show ipv6 pim rp-hash This command displays which rendezvous point (RP) is being used for a specified group. Syntax show ipv6 pim rp-hash <group-address> <group-address> - The IPv6 address of the RP for the group specified.
  • Page 911 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.1.7 show ipv6 pim rp mapping Use this command to display all active group-to-RP mappings of which the router is a aware (either configured or learned from the bootstrap router (BSR)). Use the optional parameters to limit the display to a specific RPaddress or to view group-to-candidate RP or group to Static RP mapping information.

  • Page 912: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2 Configuration Commands 8.6.2.1 ipv6 pim dense This command enables the administrative mode of PIM-DM in the router. Syntax ipv6 pim dense no ipv6 pim dense no - This command disables the administrative mode of PIM-DM in the router.
  • Page 913 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.3 ipv6 pim This command administratively enables PIM on an interface or range of interfaces. Syntax ipv6 pim no ipv6 pim no - This command sets the administrative mode of PIM on an interface to disabled.
  • Page 914 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.5 ipv6 pim bsr-border Use this command to prevent bootstrap router (BSR) messages from being sent or received through an interface or range of interfaces. Note that this command takes effect only when PIM-SM is enabled in the Global mode.
  • Page 915 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Default Setting None Command Mode Global Config _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 915/1568...
  • Page 916 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.7 ipv6 pim dr-priority Use this command to set the priority value for which a router is elected as the designated router (DR). This command can be configured on a single interface or a range of interfaces.
  • Page 917 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.9 ipv6 pim register-rate-limit This command sets a limit on the maximum number of PIM-SM register messages sent, in kilobits per second,for each (S,G) entry. The valid values are from (0 to 2000 kilobits/sec).
  • Page 918 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.11 ipv6 pim rp-candidate This command is used to configure the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR) for a specific multicast group range.
  • Page 919 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.6.2.13 ipv6 pim ssm Use this command to define the Source Specific Multicast (SSM) range of IPv6 multicast addresses on the router. Note that this command takes effect only when PIM-SM is configured as the PIM mode.

  • Page 920: Igmp Proxy Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IGMP Proxy Commands The IGMP Proxy is used by IGMP Router (IPv4 system) to enable the system to issue IGMP host messages on behalf of hosts that the system discovered through standard IGMP router interfaces.
  • Page 921 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Older Version 2 Querier Timeout: The interval used to timeout the older version 2 queriers. Proxy Start Frequency: The number of times the IGMP Proxy has been stopped and started.
  • Page 922 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.7.1.2 show ip igmp-proxy groups This command displays information about the subscribed multicast groups that IGMP Pro xy reported. It displays a table of entries with the following as the fields of each column.
  • Page 923 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.7.1.3 show ip igmp-proxy groups detail This command displays complete information about multicast groups that IGMP Proxy reported. It displays a table of entries with the following as the fields of each column.
  • Page 924 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.7.1.4 show ip igmp-proxy interface This command displays a detailed list of the host interface status parameters. It displays the following parameters only when you enable IGMP Proxy. Syntax show ip igmp-proxy interface...

  • Page 925: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.7.2 Configuration Commands 8.7.2.1 ip igmp-proxy This command enables the IGMP Proxy on the router. To enable the IGMP Proxy on the router, you must enable multicast forwarding. Also, make sure that there are no multicast routing protocols enabled on the router.
  • Page 926 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.7.2.3 ip igmp-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface. The value of <interval> can be 1-260 seconds.

  • Page 927: Mld Proxy Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MLD Proxy Commands MLD-Proxy is the IPv6 equivalent of IGMP-Proxy. MLD-Proxy commands allow you to configure the network device as well as to view device settings and statistics using either serial interface or telnet session.
  • Page 928 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.8.1.2 show ipv mld-proxy groups This command displays information about multicast groups that the MLD-Proxy reported. Syntax show ipv6 mld-proxy groups Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: The interface number of the MLD-Proxy.
  • Page 929 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.8.1.3 show ipv6 mld-proxy groups detail This command displays information about multicast groups that MLD-Proxy reported. Syntax show ipv6 mld-proxy groups detail Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: The interface number of the MLD-Proxy.
  • Page 930 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.8.1.4 show ipv6 mld-proxy interface This command displays a detailed list of the host interface status parameters. It displays the following parameters only when you enable MLD-Proxy. Syntax show ipv6 mld-proxy interface...

  • Page 931: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.8.2 Configuration Commands 8.8.2.1 ipv6 mld-proxy This command enables MLD-Proxy on the router. To enable MLD-Proxy on the router, you must enable multicast forwarding. Also, make sure that there are no other multicast routing protocols enabled n the router.
  • Page 932 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 8.8.2.3 ipv6 mld-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the MLD-Proxy router. This command is only valid when you enable MLD-Proxy on the interface. The value of <interval> is 1-260 seconds.

  • Page 933: Ipv6 Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv6 Commands Tunnel Interface Commands The commands in this section describe how to create, delete, and manage tunnel interfaces.Several different types of tunnels provide functionality to facilitate the transition of IPv4 networks to IPv6 networks.
  • Page 934 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MTU Size: Shows the maximum transmission unit for packets on the interface. IPv6 Address/Length: If you enable IPv6 on the interface and assign an address，the IPv6 address and prefix display.

  • Page 935: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.1.2 Configuration Commands 9.1.2.1 interface tunnel This command uses to enter the Interface Config mode for a tunnel interface. The <tunnel-id> range is 0 to 7. Syntax interface tunnel <0-7>...
  • Page 936 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.1.2.3 tunnel destination This command specifies the destination transport address of the tunnel. Syntax tunnel destination {<ipv4-address>} <ipv4-address> - A valid IP Address. Default Setting None Command Mode Interfacel Tunnel Mode 9.1.2.4...

  • Page 937: Loopback Interface Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Loopback Interface Commands The commands in this section describe how to create, delete, and manage loopback interfaces. A loopback interface is always expected to be up. This interface can provide the source address for sent packets and can receive both local and remote packets.
  • Page 938 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. MTU size: Shows the maximum transmission size for packets on this interface, in bytes. _____________________________________________________________________________ Industrial Layer 3 Managed Ethernet SwitchUser Manual Page: 938/1568...

  • Page 939: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.2.2 Configuration Commands 9.2.2.1 interface loopback This command uses to enter the Interface Config mode for a loopback interface. The range of the loopback ID is 0 to 7. Syntax interface loopback <0-7>...

  • Page 940: Ipv6 Routing Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. IPv6 Routing Commands This section describes the IPv6 commands you use to configure IPv6 on the system and on the interfaces. This section also describes IPv6 management commands and show commands.
  • Page 941 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.2 show ipv6 interface port This command displays the usability status of IPv6 interfaces and whether ICMPv6 Destination Unreachable messages may be sent. Syntax show ipv6 interface [{ brief | {port <slot/port> | vlan <vlan-id>} [prefix] }] <slot/port>...
  • Page 942 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. set (enabled) for router advertisements on this interface. R Router Advertisement Other Config Flag: Shows whether the other configuration flag is set (enabled) for router advertisements on this interface. Router Advertisement Suppress Flag: Shows whether router advertisements are suppressed (enabled) or sent (disabled).
  • Page 943 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.3 show ipv6 interface neighbors This command displays information about the IPv6 neighbors. Syntax show ipv6 interface neighbors Default Setting None Command Mode Privileged Exec Display Message Count of Learned Neighbors the number of neighbor mac address be learned.
  • Page 944 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.4 show ipv6 ndp This command displays NDP cache information for the management port. Syntax show ipv6 ndp Default Setting None Command Mode Privilege Exec Display Message IPv6 Address: The IPv6 address of the interface.
  • Page 945 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.5 show ipv6 route This command displays the IPv6 routing table The <ipv6-address> specifies a specific IPv6 address for which the best-matching route would be displayed. The <ipv6-prefix/ipv6-prefix-length> specifies a specific IPv6 network for which the matching route would be displayed.
  • Page 946 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd.  Hours:Minutes:Seconds if days < 1 Interface: The outgoing router interface to use when forwarding traffic to the next destnation. To administratively control the traffic destined to a particular network and prevent it from being forwarded through the router, you can configure a static reject route on the router.
  • Page 947 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.6 show ipv6 route preferences This command displays the preference value associated with the type of route. Lower numbers have a greater preference. A route with a preference of 255 cannot be used to forward traffic.
  • Page 948 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.7 show ipv6 route summary This command displays the summary of the routing table. Use all to display the count summary for all routes, including best and non-best routes. Use the command without parameters to display the count summary for only the best routes.
  • Page 949 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.1.8 show ipv6 traffic This command displays traffic and statistics for IPv6 and ICMPv6. Specify a logical, loopback, or tunnel interface to view information about traffic on a specific interface. If you do not specify an interface, the command displays information about traffic on all interfaces.
  • Page 950 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Received Datagrams Reassembly Required: Number of IPv6 fragments received which needed to be reassembled at this interface. Note that this counter increments at the interface to which these fragments were addressed, which might not be necessarily the input interface for some of the fragments.
  • Page 951 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. ICMPv6 Time Exceeded Messages Received: Number of ICMP Time Exceeded messages received by the interface. ICMPv6 Parameter Problem Messages Received: Number of ICMP Parameter Problem messages received by the interface.
  • Page 952 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. by the interface.ICMP echo messages sent. ICMPv6 Echo Reply Messages Transmitted: Number of ICMP Echo Reply messages sent by the interface. ICMPv6 Router Solicit Messages Transmitted: Number of ICMP Router Solicitation messages sent by the interface.

  • Page 953: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2 Configuration Commands 9.3.2.1 ipv6 hop-limit This command defines the unicast hop count used in ipv6 packets originated by the node. The value is also included in router advertisements. Valid values for <hops> are 1-64 inclusive. The default “not configured”...
  • Page 954 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.3 ipv6 enable Use this command to enable IPv6 routing on an interface, including a tunnel and loopback interface that has not been configured with an explicit IPv6 address. When you use this command, the interface is automatically configured with a link-local address.
  • Page 955 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.4 ipv6 address Use this command to configure an IPv6 address on an interface, including tunnel and loopback interfaces, and to enable IPv6 processing on this interface. You can assign multiple globally reachable addresses to an interface by using this command.
  • Page 956 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.5 ipv6 gateway Use this command to configure IPv6 gateway (i.e. default routers) information for the network port. Syntax ipv6 gateway <gateway-address> no ipv6 gateway <gateway-address> - Gateway address in IPv6 global or link-local address format.
  • Page 957 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.6 ipv6 route Use this command to configure an IPv6 static route. The <ipv6-prefix> is the IPv6 network that is the destination of the static route. The <prefix_length> is the length of the IPv6 prefix — a decimal value (usually 0-64) that shows how many of the high-order contiguous bits of the address comprise the prefix (the network portion of the address).
  • Page 958 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.7 ipv6 route distance This command sets the default distance (preference) for IPv6 static routes. Lower route distance values are preferred when determining the best route. The ipv6 route command allows you to optionally set the distance (preference) of an individual static route.
  • Page 959 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.8 ipv6 mtu This command sets the maximum transmission unit (MTU) size, in bytes, of IPv6 packets on an interface. This command replaces the default or link MTU with a new MTU value.
  • Page 960 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.10 ipv6 nd managed-config-flag This command sets the “managed address configuration” flag in router advertisements. When the value is true, end nodes use DHCPv6. When the value is false, end nodes automatically configure addresses.
  • Page 961 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.12 ipv6 nd other-config-flag This command sets the “other stateful configuration” flag in router advertisements sent from the interface. Syntax ipv6 nd other-config-flag no ipv6 nd other-config-flag no – This command resets the “other stateful configuration” flag back to its default value in router advertisements sent from the interface.
  • Page 962 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.14 ipv6 nd ra-lifetime This command sets the value, in seconds, that is placed in the Router Lifetime field of the router advertisements sent from the interface. The <lifetime> value must be zero, or it must be an integer between the value of the router advertisement transmission interval and 9000.
  • Page 963 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.16 ipv6 nd router-preference This command sets the router preference for Default Router. Syntax ipv6 nd router-preference <high | low | medium> no ipv6 nd router-preference no – This command resets router preference to default.
  • Page 964 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.18 ipv6 nd prefix This command sets the IPv6 prefixes to include in the router advertisement. The first optional parameter is the valid lifetime of the router, in seconds. You can specify a value or indicate that the lifetime value is infinite.
  • Page 965 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.3.2.19 ipv6 unreachables Use this command to enable the generation of ICMPv6 Destination Unreachable messages. By default, the generation of ICMPv6 Destination Unreachable messages is enabled. Syntax ipv6 unreachables no ipv6 unreachables no –...

  • Page 966: Ospfv3 Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. OSPFv3 Commands This section describes the commands you use to configure OSPFv3, which is a link-state routing protocol that you use to route traffic within a network. 9.4.1 Show Commands 9.4.1.1...
  • Page 967 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Number of Active Areas: The number of active OSPF areas. An “active” OSPF area is an area with at least one interface up. ABR Status: Shows whether the router is an OSPF Area Border Router.
  • Page 968 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.2 show ip ospf abr This command displays the internal OSPFv3 routes to reach Area Border Routers (ABR).This command takes no options. Syntax show ipv6 ospf abr Default Setting None...
  • Page 969 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.3 show ipv6 ospf area This command displays information about the area. The <areaid> identifies the OSPF area that is being displayed. Syntax show ipv6 ospf area <areaid> Default Setting...
  • Page 970 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.4 show ipv6 ospf asbr This command displays the internal OSPFv3 routes to reach Autonomous System Boundary Routers (ASBR). This command takes no options. Syntax show ipv6 ospf asbr Default Setting...
  • Page 971 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.5 show ipv6 ospf database This command displays information about the link state database when OSPFv3 is enabled. If you do not enter any parameters, the command displays the LSA headers for all areas. Use the optional <areaid>...
  • Page 972 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.6 show ipv6 ospf database database-summary This command displays the number of each type of LSA in the database and the total number of LSAs in the database. Syntax show ipv6 ospf database database-summary...
  • Page 973 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.7 show ipv6 ospf interface This command displays the information for the IFO object or virtual interface tables. Syntax show ipv6 ospf interface {<slot/port> | loopback <0-7> | tunnel <0-7> | vlan <vlan-id>} <slot/port>...
  • Page 974 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. The following information only displays if OSPF is initialized on the interface: OSPF Interface Type: Broadcast LANs, such as Ethernet and IEEE 802.5, take the value broadcast. The OSPF Interface Type will be 'broadcast'.
  • Page 975 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.8 show ipv6 ospf interface brief This command displays brief information for the IFO object or virtual interface tables. Syntax show ipv6 ospf interface brief Default Setting None Command Mode...
  • Page 976 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.9 show ipv6 ospf interface stats This command displays the statistics for a specific interface. The command only displays information if OSPF is enabled Syntax show ipv6 ospf interface stats {<slot/port> | loopback <loopback-id> | tunnel <tunnel-id> | vlan <vlan-id>}...
  • Page 977 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Area Mismatch: The number of OSPF packets discarded because the area ID in the OSPF header is not the area ID configured on the ingress interface. Invalid Destination Address: The number of OSPF packets discarded because the packet’s destination IP address is not the address of the ingress interface and is not the AllDrRouters or AllSpfRouters multicast addresses.
  • Page 978 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.10 show ipv6 ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table. If you specify an interface or tunnel, only the information for that interface or tunnel displays.
  • Page 979 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. Description packets to the neighbor.  Loading - Link State Request packets are sent to the neighbor asking for the more recent LSAs that have been discovered (but not yet received) in the Exchange state.
  • Page 980 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.11 show ipv6 ospf range This command displays information about the area ranges for the specified <areaid>. The <areaid> identifies the OSPF area whose ranges are being displayed. Syntax show ipv6 ospf range <areaid>...
  • Page 981 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.12 show ipv6 ospf stub table This command displays the OSPF stub table. The information bello will only be displayed if OSPF is initialized on the switch. Syntax show ipv6 ospf stub table...
  • Page 982 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.13 show ipv6 ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor. Syntax show ip ospfv6 virtual-link <areaid> <neighbor> <areaid> - Area ID.
  • Page 983 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.1.14 show ipv6 ospf virtual-link brief This command displays the OSPFv4 Virtual Interface information for all areas in the system. Syntax show ipv6 ospf virtual-link brief Default Setting None Command Mode...

  • Page 984: Configuration Commands

    Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2 Configuration Commands 9.4.2.1 ipv6 ospf This command enables OSPF on a router interface or loopback interface. Syntax ipv6 ospf no ipv6 ospf <no> - This command disables OSPF on a router interface or loopback interface.
  • Page 985 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.3 ipv6 ospf cost This command configures the cost on an OSPF interface. The <cost> parameter has a range of 1 to 65535. Syntax ipv6 ospf cost <1-65535> no ipv6 ospf cost <no>...
  • Page 986 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.5 ipv6 ospf hello-interval This command sets the OSPF hello interval for the specified interface. The value for <seconds> is a valid positive integer, which represents the length of time in seconds. The value for the length of time must be the same for all routers attached to a network.
  • Page 987 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.7 ipv6 ospf network This command changes the default OSPF network type for the interface. Normally, the network type is determined from the physical IP network type. By default all Ethernet networks are OSPF type broadcast.
  • Page 988 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.9 ipv6 ospf retransmit-interval This command sets the OSPF retransmit Interval for the specified interface. The retransmit interval is specified in seconds. The value for <seconds> is the number of seconds between link-state advertisement retransmissions for adjacencies belonging to this router interface.
  • Page 989 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.11 ipv6 router ospf Use this command to enter Router OSPFv3 Config mode. Syntax ipv6 router ospf Default Setting None Command Mode Global Config 9.4.2.12 area default-cost This command configures the monetary default cost for the stub area. The operator must specify the area id and an integer value between 1-16777215.
  • Page 990 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.13 area nssa This command configures the specified areaid to function as an NSSA. Syntax area <areaid> nssa no area <areaid> nssa <areaid> - Area ID. no - This command disables nssa from the specified area id.
  • Page 991 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.15 area nssa no-redistribute This command configures the NSSA ABR so that learned external routes will not be redistributed to the NSSA. Syntax area <areaid> nssa no-redistribute no area <areaid> nssa no-redistribute <areaid>...
  • Page 992 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.17 area nssa translator-role This command configures the translator role of the NSSA. A value of always causes the router to assume the role of the translator the instant it becomes a border router and a value of candidate causes the router to participate in the translator election process when it attains border router status.
  • Page 993 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.18 area nssa translator-stab-intv This command configures the translator stability interval of the NSSA. The <stabilityinterval> is the period of time that an elected translator continues to perform its duties after it determines that its translator status has been deposed by another router.
  • Page 994 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.19 area range This command creates a specified area range for a specified NSSA. The <ipv6-prefix> is a valid IPv6 address. The <prefix-length> is a valid subnet mask. The LSDB type must be specified by either summarylink or nssaexternallink, and the advertising of the area range can be allowed or suppressed.
  • Page 995 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.20 area stub This command creates a stub area for the specified area ID. A stub area is characterized by the fact that AS External LSAs are not propagated into the area. Removing AS External LSAs and Summary LSAs can significantly reduce the link state database of routers within the stub area.
  • Page 996 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.22 area virtual-link This command creates the OSPF virtual interface for the specified <areaid> and <neighbor>. The <neighborid> parameter is the Router ID of the neighbor. Syntax area <areaid> virtual-link <neighborid>...
  • Page 997 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.23 area virtual-link dead-interval This command configures the dead interval for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighborid>. Syntax area <areaid> virtual-link <neighborid> dead-interval <1-65535>...
  • Page 998 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.24 area virtual-link hello-interval This command configures the hello interval for the OSPF virtual interface on the interface identified by <areaid> and <neighborid>. Syntax area <areaid> virtual-link <neighborid> hello-interval <1-65535>...
  • Page 999 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.25 area virtual-link retransmit-interval This command configures the retransmit interval for the OSPF virtual interface on the interface identified by <areaid> and <neighborid>. Syntax area <areaid> virtual-link <neighborid> retransmit-interval <0-3600>...
  • Page 1000 Industrial Layer 3 Managed Ethernet Switch Korenix Technology Co., Ltd. 9.4.2.26 area virtual-link transmit-delay This command configures the transmit delay for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighborid>. Syntax area <areaid> virtual-link <neighborid> transmit-delay <0-3600>...

Table of Contents