D-Link xStack DES-3526 Cli Manual

Layer 2 managed stackable fast ethernet switch
Hide thumbs Also See for xStack DES-3526:

Advertisement

Quick Links

CLI Manual
TM
xStack
DES-3526/DES-3526DC
Product Model :
Layer 2 Managed Stackable Fast Ethernet Switch
Release 3.60
©Copyright 2005. All Rights Reserved

Advertisement

Table of Contents
loading

Summary of Contents for D-Link xStack DES-3526

  • Page 1 CLI Manual xStack DES-3526/DES-3526DC Product Model : Layer 2 Managed Stackable Fast Ethernet Switch Release 3.60 ©Copyright 2005. All Rights Reserved...
  • Page 2: Table Of Contents

    Table of Contents INTRODUCTION ......................... 1 USING THE CONSOLE CLI ......................4 COMMAND SYNTAX ........................8 BASIC SWITCH COMMANDS ....................10 SWITCH PORT COMMANDS ....................20 PORT SECURITY COMMANDS ....................23 NETWORK MANAGEMENT (SNMP) COMMANDS ..............26 SWITCH UTILITY COMMANDS....................45 NETWORK MONITORING COMMANDS..................
  • Page 3 ARP COMMANDS ........................162 ROUTING TABLE COMMANDS ..................... 166 MAC NOTIFICATION COMMANDS ..................168 ACCESS AUTHENTICATION CONTROL COMMANDS ............172 SSH COMMANDS ........................193 SSL COMMANDS ........................200 D-LINK SINGLE IP MANAGEMENT COMMANDS..............206 COMMAND HISTORY LIST ....................215 TECHNICAL SPECIFICATIONS ..................... 218...
  • Page 4: Introduction

    Web-based management agent is discussed in the Manual. DES-3526/DES-3526DC Managed Layer 2 Fast Ethernet switches are members of the D-Link xStack family. Ranging from 10/100Mbps edge switches to core gigabit switches, the xStack switch family has been future-proof designed to provide a stacking architecture with fault tolerance, flexibility, port density, robust security and maximum throughput with a user-friendly management interface for the networking professional.
  • Page 5 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Setting the Switch’s IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme.
  • Page 6 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 1-3. Assigning an IP Address In the above example, the Switch was assigned an IP address of 10.41.44.254 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet, SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
  • Page 7: Using The Console Cli

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Using the Console CLI The DES-3526 supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 8 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-1. Initial Console Screen after logging in Commands are entered at the command prompt, DES-3526:4#. There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands.
  • Page 9 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-3. Example Command Parameter Help In this case, the command config account was entered with the parameter <username>. The CLI will then prompt you to enter the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex commands have several layers of parameter prompting.
  • Page 10 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-5. The Next Available Commands Prompt The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter. For example, if you enter the show command with no additional parameters, the CLI will then display all of the possible next parameters.
  • Page 11: Command Syntax

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Command Syntax The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. Note: All commands are case-sensitive.
  • Page 12 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual {braces} the effect of the system reset is dependent on which, if any, value is specified. Therefore, with this example there are three possible outcomes of performing a system reset. See the following chapter, Basic Commands for more details about the reset command.
  • Page 13: Basic Switch Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Basic Switch Commands The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create account [admin | user] <username 15> config account <username 15>...
  • Page 14 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#create account admin dlink Command: create account admin dlink Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success. DES-3526:4# config account Purpose Used to configure user accounts Syntax config account <username>...
  • Page 15 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show account Command: show account Current Accounts: Username Access Level --------------- ------------ dlink Admin Total Entries: 1 DES-3526:4# delete account Purpose Used to delete an existing user account. Syntax delete account <username>...
  • Page 16 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show switch Purpose Used to display general information about the Switch. Syntax show switch Description This command displays information about the Switch. Parameters None. Restrictions Only Administrator-level users can issue this command. Example usage: To display the Switch’s information: DES-3526:4#show switch...
  • Page 17 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show serial_port Command: show serial_port Baud Rate : 9600 Data Bits Parity Bits : None Stop Bits Auto-Logout : 10 mins DES-3526:4# config serial_port Purpose Used to configure the serial port. Syntax config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes |...
  • Page 18 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual enable clipaging Purpose Used to pause the scrolling of the console screen when the show command displays more than one page. Syntax enable clipaging Description This command is used when issuing the show command which causes the console screen to rapidly scroll through several pages.
  • Page 19 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual enable telnet Parameters <tcp_port_number 1-65535> − The TCP port number. TCP ports are numbered between 1 and 65535. The “well-known” TCP port for the Telnet protocol is 23. Restrictions Only administrator-level users can issue this command.
  • Page 20 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#enable web 80 Command: enable web 80 Success. DES-3526:4# disable web Purpose Used to disable the HTTP-based management software on the Switch. Syntax disable web Description This command disables the Web-based management software on the Switch.
  • Page 21 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual reboot Purpose Used to restart the Switch. Syntax reboot Description This command is used to restart the Switch. Parameters None. Restrictions None. Example usage: To restart the Switch: DES-3526:4#reboot Command: reboot Are you sure want to proceed with the system reboot? (y|n) Please wait, the switch is rebooting...
  • Page 22 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual login Purpose Used to log in a user to the Switch’s console. Syntax login Description This command is used to initiate the login procedure. The user will be prompted for a Username and Password. None.
  • Page 23: Switch Port Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Switch Port Commands The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [<portlist | all>] {speed [auto | 10_half | 10_full |100_half | 100_full | 1000_full]} | flow_control [enable | disable] | learning [enable | disable] state [enable | disable]} description <desc 32>} show ports...
  • Page 24 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show ports Purpose Used to display the current configuration of a range of ports. Syntax show ports [<portlist>] {description} Description This command is used to display the current configuration of a range of ports.
  • Page 25 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the configuration of all ports on a standalone switch, with description: DES-3526:4#show ports description Command: show ports description Port Port Settings Connection Address State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning ------ -------- ---------------------...
  • Page 26: Port Security Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Port Security Commands The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<portlist>...
  • Page 27 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete port_security_entry Purpose Used to delete a port security entry by MAC address, port number and VLAN ID. Syntax delete port_security_entry vlan name <vlan_name 32> mac_address <macaddr> port <port> Description This command is used to delete a single, previously learned port security entry by port, VLAN name, and MAC address.
  • Page 28 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <portlist>} Description This command is used to display port security information of the Switch’s ports. The information displayed includes port security, admin state, maximum number of learning address and lock mode.
  • Page 29: Network Management (Snmp) Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Network Management (SNMP) Commands The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. The DES-3526 supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. You can specify which version of the SNMP you want to use to monitor and control the Switch.
  • Page 30 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters create snmp user <username 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8-16 > | sha <auth_password 8-20 >] priv [none | des <priv_password 8-16> ] | by_key auth [md5 <auth_key 32-32>...
  • Page 31 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command. Syntax create snmp user <username 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8-16>...
  • Page 32 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To create an SNMP user on the Switch: DES-3526:4#create snmp user dlink default encrypted by_password auth md5 canadian priv none Command: create snmp user dlink default encrypted by_password auth md5 canadian priv none Success.
  • Page 33 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access. Syntax create snmp view <view_name 32> <oid> view_type [included | excluded] Description The create snmp view command assigns views to community...
  • Page 34 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#delete snmp view dlinkview all Command: delete snmp view dlinkview all Success. DES-3526:4# show snmp view Purpose Used to display an SNMP view previously created on the Switch. Syntax show snmp view {<view_name 32>} Description The show snmp view command displays an SNMP view...
  • Page 35 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp community Description The create snmp community command is used to create an SNMP community string and to assign access-limiting characteristics to this community string. <community_string 32> − An alphanumeric string of up to 32 characters that Parameters is used to identify members of an SNMP community.
  • Page 36 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show snmp community Purpose Used to display SNMP community strings configured on the Switch. Syntax show snmp community {<community_string 32>} Description The show snmp community command is used to display SNMP community strings that are configured on the Switch.
  • Page 37 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show snmp engineID Purpose Used to display the identification of the SNMP engine on the Switch. Syntax show snmp engineID Description The show snmp engineID command displays the identification of the SNMP engine on the Switch.
  • Page 38 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp group remote SNMP manager. auth_priv − Specifies that authorization will be required, and that packets sent between the Switch and a remote SNMP manger will be encrypted. read_view –...
  • Page 39 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show snmp groups Purpose Used to display the group-names of SNMP groups currently configured on the Switch. The security model, level, and status of each group are also displayed. Syntax show snmp groups Description...
  • Page 40 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp host <ipaddr> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>] Description The create snmp host command creates a recipient of SNMP traps...
  • Page 41 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax delete snmp host <ipaddr> Description The delete snmp host command deletes a recipient of SNMP traps generated by the Switch’s SNMP agent.
  • Page 42 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create trusted_host Purpose Used to create the trusted host. Syntax create trusted_host <ipaddr> Description The create trusted_host command creates the trusted host. The Switch allows you to specify up to four IP addresses that are allowed to manage the Switch via in-band SNMP or TELNET based management software.
  • Page 43 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host command above. Syntax delete trusted _host <ipaddr> Description This command is used to delete a trusted host entry made using the create trusted_host command above.
  • Page 44 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#enable snmp authenticate_traps Command: enable snmp authenticate_traps Success. DES-3526:4# show snmp traps Purpose Used to show SNMP trap support on the Switch . Syntax show snmp traps Description This command is used to view the SNMP trap support status currently configured on the Switch.
  • Page 45 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual disable snmp authenticate_traps Purpose Used to disable SNMP authentication trap support. Syntax disable snmp authenticate_traps Description This command is used to disable SNMP authentication support on the Switch. Parameters None.
  • Page 46 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the Switch location for “ ”: H Q 5 F DES-3526:4#config snmp system_location HQ 5F Command: config snmp system_location HQ 5F Success. DES-3526:4# config snmp system_name Purpose Used to configure the name for the Switch.
  • Page 47 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
  • Page 48: Switch Utility Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Switch Utility Commands The download/upload commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware <ipaddr> <path_filename 64> {image_id <int 1-2>} | configuration <ipaddr>...
  • Page 49 DES-3526:4# DES-3526:4##------------------------------------------------------------------- DES-3526:4## DES-3526 Configuration DES-3526:4## DES-3526:4## Firmware: Build 3.06-B02 DES-3526:4## Copyright(C) 2000-2004 D-Link Corporation. All rights reserved. DES-3526:4##------------------------------------------------------------------- DES-3526:4# DES-3526:4# DES-3526:4## BASIC DES-3526:4# DES-3526:4#config serial_port baud_rate 9600 auto_logout 10_minutes Command: config serial_port baud_rate 9600 auto_logout 10_minutes The download configuration command will initiate the loading of the various settings in the order listed in the configuration file.
  • Page 50 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To configure firmware section 1 as a boot up section: DES-3526:4# config firmware section_id 1 boot_up Command: config firmware section_id 1 boot_up Success. DES-3526:4# show firmware information Purpose Used to display the firmware section information. Syntax show firmware information Description...
  • Page 51 To view the current configuration settings: DES-3526:4#show config current_config Command: show config current_config #------------------------------------------------------------------- DES-3526 Configuration Firmware: Build 3.01-B121 Copyright(C) 2000-2004 D-Link Corporation. All rights reserved. #------------------------------------------------------------------- # BASIC config serial_port baud_rate 9600 auto_logout 10_minutes enable telnet 23 enable web 80...
  • Page 52 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual upload Purpose Used to upload the current switch settings or the switch history log to a TFTP. Syntax upload [configuration | log ] <ipaddr> <path_filename 64> Description This command is used to upload either the Switch’s current settings or the Switch’s history log to a TFTP server.
  • Page 53 Upon booting up the autoconfig process is initiated, the console screen will appear similar to the example below. The configuration settings will be loaded in normal order. DES-3526 Fast Ethernet Switch Command Line Interface Firmware: Build 3.01-B21 Copyright(C) 2000-2004 D-Link Corporation. All rights reserved. DES-3526:4# DES-3526:4# DES-3526:4#download configuration 10.41.44.44 c:\cfg\setting.txt Command: download configuration 10.41.44.44 c:\cfg\setting.txt...
  • Page 54 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual NOTE: With autoconfig enabled, the Switch ipif settings now define the Switch as a DHCP client. Use the show switch command to display the new IP settings status. disable autoconfig Purpose Use this to deactivate autoconfiguration from DHCP.
  • Page 55 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual ping Purpose Used to test the connectivity between network devices. Syntax ping <ipaddr> {times <value 1-255>} {timeout <sec 1-99>} Description The ping command sends Internet Control Message Protocol (ICMP) echo messages to a remote IP address.
  • Page 56: Network Monitoring Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Network Monitoring Commands The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
  • Page 57 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show packet port 2 Command: show packet port 2 Port number : 2 Frame Size Frame Counts Frame/sec Frame Type Total Total/sec ------------ ------------ ---------- ---------- ------- --------- 3275 RX Bytes 408973 1657 65-127...
  • Page 58 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show utilization Purpose Used to display real-time port and cpu utilization statistics. Syntax show utilization [cpu | ports {<portlist>}] Description This command will display the real-time port and cpu utilization statistics for the Switch.
  • Page 59 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports <portlist>} Description This command will clear the counters used by the Switch to compile statistics. <portlist>...
  • Page 60 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show log index 5 Command: show log index 5 Index Time Log Text ----- ------------------- ---------------------------------------------------- 00000 days 00:01:09 Successful login through Console (Username: Anonymous) 00000 days 00:00:14 System started up 00000 days 00:00:06 Port 1 link up, 100Mbps FULL duplex 00000 days 00:00:01...
  • Page 61 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show syslog Purpose Used to display the syslog protocol status as enabled or disabled. Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled.
  • Page 62 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1-4> ipaddress <ipaddr> {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
  • Page 63 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem...
  • Page 64 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#create syslog host 1 severity all facility local0 Command: create syslog host 1 severity all facility local0 Success. DES-3526:4# config syslog host Purpose Used to configure the syslog protocol to send system log data to a remote host. Syntax config syslog host [all | <index 1-4>] {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port...
  • Page 65 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem...
  • Page 66 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3526:4# Example usage: To configure a syslog host for all hosts: DES-3526:4#config syslog host all severity all facility local0 Command: config syslog host all severity all facility local0 Success.
  • Page 67 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show syslog host Command: show syslog host Syslog Global State: Disabled Host Id Host IP Address Severity Facility UDP port Status ------- --------------- -------------- -------- -------- -------- 10.1.1.2 Local0 Disabled 10.40.2.3 Local0...
  • Page 68 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config system_severity trap critical Command: config system_severity trap critical Success. DES-3526:4#...
  • Page 69: Multiple Spanning Tree Protocol (Mstp) Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Multiple Spanning Tree Protocol (MSTP) Commands This Switch supports three versions of the Spanning Tree Protocol; 802.1d STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 70 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters show stp ports {<portlist>} show stp instance {<value 0-4>} show stp mst_config id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description...
  • Page 71 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config stp version Purpose Used to globally set the version of STP on the Switch. Syntax config stp version [mstp | rstp | stp] This command allows the user to choose the version of the Description spanning tree to be implemented on the Switch.
  • Page 72 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config stp between 1 and 10 seconds may be chosen, with a default setting of 2 seconds. In MSTP, the spanning tree is configured NOTE: by port and therefore, the hellotime must be set using the configure stp ports command for switches utilizing the Multiple Spanning Tree Protocol.
  • Page 73 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports <portlist> {externalCost [auto | <value 1-200000000>] | hellotime <value 1-10> | migrate [yes | no] edge [true | false] | p2p [true | false | auto] | state [enable | disable] | lbd [enable | disable] | fbpdu [enable | disable]} Description...
  • Page 74 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure STP with path cost 19, hellotime set to 5 seconds, migration enable, and state enable for ports 1-5 of module 1. DES-3526:4#config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Command: config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Success.
  • Page 75 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config stp instance_id remove_vlan - Along with the vid_range <vidlist> parameter, this command will remove VIDs to the previously configured STP instance_id. <vidlist> - Specify the VID range from configured VLANs set on the Switch.
  • Page 76 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config stp priority Purpose Used to update the STP instance configuration Syntax config stp priority <value 0-61440> instance_id <value 0-4> Description This command is used to update the STP instance configuration settings on the Switch.
  • Page 77 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config stp mst_config_id revision_level 10 name Trinity Command : config stp mst_config_id revision_level 10 name Trinity Success. DES-3526:4# config stp mst_ports Purpose Used to update the port configuration for a MSTP instance. Syntax config stp mst_ports <portlist>...
  • Page 78 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show stp Purpose Used to display the Switch’s current STP configuration. Syntax show stp Description This command displays the Switch’s current STP configuration. Parameters None Restrictions None. Example usage: To display the status of STP on the Switch: Status 1: STP enabled with STP compatible version DES-3526:4#show stp...
  • Page 79 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show stp ports Purpose Used to display the Switch’s current STP ports configuration. Syntax show stp ports <portlist> Description This command displays the STP ports settings for a specified port or group of ports (one port at a time).
  • Page 80 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show stp instance 0 Command: show stp instance 0 STP Instance Settings --------------------------- Instance Type : CIST Instance Status : Enabled Instance Priority : 32768(bridge priority : 32768, sys ID ext : 0 ) STP Instance Operational Status -------------------------------- Designated Root Bridge : 32766/00-90-27-39-78-E2...
  • Page 81: Forwarding Database Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Forwarding Database Commands The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32>...
  • Page 82 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table (database) Syntax create multicast_fdb <vlan_name 32> <macaddr> Description This command will make an entry into the Switch’s multicast MAC address forwarding database.
  • Page 83 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10-1000000> Description The aging time affects the learning process of the Switch. Dynamic forwarding table entries, which are made up of the source MAC addresses and their associated port numbers, are deleted from the table if they are not accessed within the aging time.
  • Page 84 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To delete a multicast fdb entry: DES-3526:4#delete fdb default 01-00-00-00-01-02 Command: delete fdb default 01-00-00-00-01-02 Success. DES-3526:4# clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses.
  • Page 85 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show multicast_fdb vlan default Command: show multicast_fdb vlan default VLAN Name : default MAC Address : 01-00-5E-00-00-00 Egress Ports : 1-5 Mode : Static Total Entries DES-3526:4# show fdb Purpose Used to display the current unicast MAC address forwarding database.
  • Page 86 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config multicast port_filtering_mode Purpose Used to configure the multicast packet filtering mode on a port per port basis. Syntax config multicast port_filtering_mode [<portlist> | all] [forward_all_groups | forward_unregistered_groups | filter_unregistered_groups] Description This command will configure the multicast packet filtering mode for...
  • Page 87 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show multicast port_filtering_mode Command: show multicast port_filtering_mode Port Multicast Filter Mode ------ --------------------------- forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups forward_unregistered_groups...
  • Page 88: Broadcast Storm Control Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Broadcast Storm Control Commands The broadcast storm control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config traffic control [<storm_grouplist>...
  • Page 89 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control {group_list <storm_grouplist>} Description This command displays the current storm traffic control configuration on the Switch. group_list <storm_grouplist>...
  • Page 90: Qos Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual QoS Commands The DES-3526 switch supports 802.1p priority queuing. The Switch has 4 priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows: •...
  • Page 91 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config bandwidth_control tx_rate − Specifies that one of the parameters below (no_limit or <value 1-1000>) will be applied to the rate at which the above specified ports will be allowed to transmit packets. no_limit −...
  • Page 92 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config scheduling Purpose Used to configure the traffic scheduling mechanism for each COS queue. Syntax config scheduling <class_id 0-3> [max_packet <value 0-255> | max_latency <value 0-255>] Description The Switch contains 4 hardware priority queues. Incoming packets must be mapped to one of these four queues.
  • Page 93 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the traffic scheduling mechanism for each queue: DES-3526:4# config scheduling 0 max_packet 100 max_latency 150 Command: config scheduling 0 max_packet 100 max_latency 150 Success. DES-3526:4# show scheduling Purpose Used to display the currently configured traffic scheduling on the...
  • Page 94 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1p user_priority Highest Highest. This mapping scheme is based upon recommendations contained in IEEE 802.1D. You can change this mapping by specifying the 802.1p user priority you want to go to the <class_id 0-3> (the number of the hardware queue).
  • Page 95 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the Switch. If an untagged packet is received by the Switch, the priority configured with this command will be written to the packet’s priority field. Syntax config 802.1p default_priority [<portlist>...
  • Page 96 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#...
  • Page 97: Port Mirroring Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Port Mirroring Commands The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port>...
  • Page 98 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4# config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-3526:4# Example usage: To delete the mirroring ports: DES-3526:4#config mirror port 1 delete source port 2-4 Command: config mirror 1 delete source 2-4 Success.
  • Page 99 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#disable mirror Command: disable mirror Success. DES-3526:4# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
  • Page 100: Vlan Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual VLAN Commands The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32> {tag <vlanid 1-4094> | advertisement} delete vlan <vlan_name 32>...
  • Page 101 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete vlan Purpose Used to delete a previously configured VLAN on the Switch. Syntax delete vlan <vlan_name 32> Description This command will delete a previously configured VLAN on the Switch.
  • Page 102 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config vlan v1 delete 6-8 Command: config vlan v1 delete 6-8 Success. DES-3526:4# config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1-4094>} Description...
  • Page 103 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To enable the generic VLAN Registration Protocol (GVRP): DES-3526:4#enable gvrp Command: enable gvrp Success. DES-3526:4# disable gvrp Purpose Used to disable GVRP on the Switch. Syntax disable gvrp Description This command, along with enable gvrp, is used to enable and disable GVRP on the Switch, without changing the GVRP configuration on...
  • Page 104 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show vlan Command: show vlan VLAN Name : default VLAN TYPE : static Advertisement : Enabled Member ports : 1,5-26 Static ports : 1,5-26 Current Untagged ports : 1,5-26 Static Untagged ports : 1,5-26 Forbidden ports :...
  • Page 105: Asymmetric Vlan Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Asymmetric VLAN Commands The asymmetric VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable asymmetric_vlan disable asymmetric_vlan show asymmetric_vlan Each command is listed, in detail, in the following sections.
  • Page 106 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show asymmetric_vlan Purpose Used to view the asymmetric VLAN state on the Switch. Syntax show asymmetric_vlan Description This command displays the asymmetric VLAN state on the Switch Parameters None. Restrictions Only administrator-level users can issue this command.
  • Page 107: Link Aggregation Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Link Aggregation Commands The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-6> {type [lacp | static]} delete link_aggregation group_id <value 1-6>...
  • Page 108 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value 1-6> Description This command is used to delete a previously configured link aggregation group.
  • Page 109 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source | mac_destination | mac_source_dest | ip_source | ip_destination | ip_source_dest] Description This command configures the part of the packet examined by the Switch when selecting the egress port for transmitting load-sharing data.
  • Page 110 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source-dest Group ID Master Port Member Port : 5-10 Active Port Status : Disabled Flooding Port DES-3526:4# config lacp_ports Purpose Used to configure settings for LACP compliant ports.
  • Page 111 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show lacp_port Purpose Used to display current LACP port mode settings. Syntax show lacp_port {<portlist>} Description This command will display the LACP mode settings as they are currently configured. Parameters <portlist>...
  • Page 112: Ip-Mac Binding

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual IP-MAC Binding The IP-MAC Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create address_binding <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} ip_mac ipaddress config address_binding <ipaddr>...
  • Page 113 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config address_binding ip_mac ipaddress Purpose Used to Configure a IP-MAC Binding entry. Syntax <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} Description This command will configure an IP-MAC Binding entry. Parameters <ipaddr>...
  • Page 114 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show address_binding Purpose Used to display IP-MAC Binding entries. Syntax [ip_mac {[all | ipaddress <ipaddr> mac_address <macaddr>] } | blocked {[all | vlan_name <vlan_name> mac_address <macaddr>]} | ports] Description This command will display IP-MAC Binding entries.
  • Page 115 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete address-binding Purpose Used to delete IP-MAC Binding entries. Syntax [ip-mac [ipaddress <ipaddr> mac_address <macaddr> | all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]] Description This command will delete IP-MAC Binding entries. Two different kinds of information can be deleted.
  • Page 116: Limited Ip Multicast Address

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Limited IP Multicast Address The Limited IP Multicast Range window allows the user to specify which multicast address(es) reports are to be received on specified ports on the switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the switch.
  • Page 117 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete limited multicast address Purpose Used to delete Limited IP multicast address range. Syntax delete limited multicast address [all | <portlist>] Description The delete limited multicast address command allows the user to delete all multicast address ranges or a selected range based on what port or ports the range has been assigned to.
  • Page 118: Basic Ip Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Basic IP Commands The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif <ipif_name 12> [{ipaddress <network_address> | vlan <vlan_name 32>...
  • Page 119 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif <ipif_name 12> Description This command will display the configuration of an IP interface on the Switch.
  • Page 120 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#enable autoconfig Command: enable autoconfig Success. DES-3526:4# NOTE: More detailed information for this command and related commands can be found in the section titled Switch Utility Commands.
  • Page 121: Igmp Snooping Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual IGMP Snooping Commands The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [<vlan_name 32> | all] {host_timeout <sec 1-16711450> | router_timeout <...
  • Page 122 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config igmp_snooping leave_timer <sec 1-16711450> − Specifies the amount of time a Multicast address will stay in the database before it is deleted, after it has sent out a leave group message. An entry of zero (0) specifies an immediate deletion of the Multicast address.
  • Page 123 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config igmp_snooping querier time it takes a router to detect the loss of the last member of a group. state [enable | disable] − Allows the Switch to be specified as an IGMP Querier or Non-querier.
  • Page 124 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To enable IGMP snooping on the Switch: DES-3526:4#enable igmp_snooping Command: enable igmp_snooping Success. DES-3526:4# disable igmp_snooping Purpose Used to enable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only} Description This command disables IGMP snooping on the Switch.
  • Page 125 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To show IGMP snooping: DES-3526:4#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast router Only : Disabled VLAN Name : default Query Interval : 125 Max Response Time : 10 Robustness Value...
  • Page 126 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast group: 224.0.0.2 MAC address : 01-00-5E-00-00-02 Reports Port Member : 2,5 VLAN Name : default Multicast group: 224.0.0.9 MAC address : 01-00-5E-00-00-09 Reports...
  • Page 127 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-2,10 Dynamic router port : Total Entries: 1 DES-3526:4# show igmp_snooping forwarding Purpose Used to display the IGMP snooping forwarding table entries on the Switch.
  • Page 128 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast group : 224.0.0.2 MAC address : 01-00-5E-00-00-02 Reports Port Member : 2,4 VLAN Name : default Multicast group : 224.0.0.9 MAC address : 01-00-5E-00-00-09...
  • Page 129 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create igmp_snooping multicast_vlan Purpose Used to create a multicast VLAN on the switch. Syntax create igmp_snooping multicast_vlan <vlan_name 32> <vlanid 2-4094> Description This command will create a multicast VLAN on the switch. <vlan_name 32>...
  • Page 130 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4# config igmp_snooping multicast_vlan trinity member_port 1,3 source_port 2 state enable Command: config igmp_snooping multicast_vlan trinity member_port 1,3 source_port 2 state enable Success. DES-3526:4# delete igmp_snooping multicast_vlan Purpose Used to delete a multicast VLAN previously created on the switch. Syntax delete igmp_snooping multicast_vlan <vlan_name 32>...
  • Page 131: Dhcp Relay

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DHCP Relay The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1-16> | time <sec 0-65535>} config dhcp_relay add ipif <ipif_name 12>...
  • Page 132 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To add an IP destination to the DHCP relay table: DES-3526:4#config dhcp_relay add ipif System 10.58.44.6 Command: config dhcp_relay add ipif System 10.58.44.6 Success. DES-3526:4# config dhcp_relay delete ipif Purpose Used to delete one or all IP destination addresses from the Switch's DHCP/BOOTP relay table.
  • Page 133 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the switch. Syntax config dhcp_relay option_82 state [enable | disable] Description This command is used to configure the state of DHCP relay agent information option 82 of the switch.
  • Page 134 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config dhcp_relay option_82 check enable Command: config dhcp_relay option_82 check enable Success. DES-3526:4# config dhcp_relay option_82 policy Purpose Used to configure the reforwarding policy of relay agent information option 82 of the switch.
  • Page 135 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show dhcp_relay Command: show dhcp_relay DHCP/BOOTP Relay Status : Enabled DHCP/BOOTP Hops Count Limit DHCP/BOOTP Relay Time Threshold : 23 DHCP Relay Agent Information Option 82 State : Enabled DHCP Relay Agent Information Option 82 Check : Enabled DHCP Relay Agent Information Option 82 Policy : Replace Interface...
  • Page 136 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To disable DHCP relay: DES-3526:4#disable dhcp_relay Command: disable dhcp_relay Success. DES-3526:4#...
  • Page 137: 802.1X Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual 802.1X Commands The DES-3526 implements the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 138 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#enable 802.1x Command: enable 802.1x Success. DES-3526:4# disable 802.1x Purpose Used to disable the 802.1x server on the Switch. Syntax disable 802.1x Description The disable 802.1x command is used to disable the 802.1x Network Access control server application on the Switch.
  • Page 139 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1x auth_configuration and transmitting directions, or just the receiving direction. Port Control: ForceAuth / ForceUnauth / Auto − Shows the administrative control over the port’s authorization status. ForceAuth forces the Authenticator of the port to become Authorized.
  • Page 140 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1x auth_state Purpose Used to display the current authentication state of the 802.1x server on the Switch. Syntax show 802.1x auth_state {ports <portlist>} Description The show 802.1x auth_state command is used to display the current authentication state of the 802.1x Port-based or MAC-based Network Access Control server application on the Switch.
  • Page 141 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show 802.1x auth_state Command: show 802.1x auth_state Port number : 1:1 Index MAC Address Auth PAE State Backend State Port Status ------ ------------------- ----------------------- --------------------- ----------------- 00-08-02-4E-DA-FA Authenticated Idle Authorized CTRL+C ESC q Quit...
  • Page 142 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x capability ports all − Specifies all of the ports on the Switch. authenticator − A user must pass the authentication process to gain access to the network. none −...
  • Page 143 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x auth_parameter Request/Identity packets. server_timeout <sec 1-65535> - Configure the length of time to wait for a response from a RADIUS server. max_req <value 1-10> − Configures the number of times to retry sending packets to a supplicant (user).
  • Page 144 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x init then be specified. mac_based − This instructs the Switch to initialize 802.1x functions based only on the MAC address. MAC addresses approved for initialization can then be specified. ports <portlist>...
  • Page 145 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1-3> <server_ip> key <passwd 32> [default | {auth_port <udp_port_number 1-65535>...
  • Page 146 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config radius Purpose Used to configure the Switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddress <server_ip> | key <passwd 32> | auth_port <udp_port_number 1-65535> | acct_port <udp_port_number 1-65535>} Description The config radius command is used to configure the Switch’s Radius settings.
  • Page 147 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show radius Command: show radius Index IP Address Auth-Port Acct-Port Status Number Number ----- ------------------ --------- --------- ----------- ------------ 10.1.1.1 1812 1813 Active switch 20.1.1.1 1800 1813 Active des3226 30.1.1.1 1812 1813...
  • Page 148: Access Control List (Acl) Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Access Control List (ACL) Commands The DES-3526 implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings or MAC address. Note: The ACL command set has been changed for the Release III firmware.
  • Page 149 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual The profile_id establishes a priority within the list of profiles. A lower profile_id gives the rule a higher priority. In case of a conflict in the rules entered for different profiles, the rule with the highest priority (lowest profile_id) will take precedence. See below for information regarding limitations on access profiles and access rules.
  • Page 150 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile Purpose Used to create an access profile on the Switch and to define which parts of each incoming frame’s header the Switch will examine. Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields.
  • Page 151 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile Parameters ip − Specifies that the Switch will examine the IP address in each frame’s header. vlan − Specifies a VLAN mask. • source_ip_mask <netmask> − Specifies an IP address mask for the source IP address. •...
  • Page 152 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code permit profile_id 101 Command: create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask 10.0.0.0 dscp icmp type code permit profile_id 101 Success.
  • Page 153 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile Purpose Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operation, with the values the Switch finds in the specified frame header fields.
  • Page 154 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile ip − Specifies that the Switch will look into the IP fields in each packet. Parameters vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN. •...
  • Page 155 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile Parameters packet_content_mask – Specifies that the Switch will mask the packet header beginning with the offset value specified as follows: offset_0-15 - Enter a value in hex form to mask the packet from the beginning of the packet •...
  • Page 156 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display all of the currently configured access profiles on the Switch: DES-3526:4#show access_profile Command: show access_profile Access Profile Table Access Profile ID : 4 Type : IP Frame Filter Ports : All Masks : VLAN...
  • Page 157: Traffic Segmentation Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Traffic Segmentation Commands Traffic segmentation allows you to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied. Command Parameters config traffic_segmentation...
  • Page 158 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the current traffic segmentation configuration on the Switch. DES-3526:4#show traffic_segmentation Command: show traffic_segmentation Traffic Segmentation Table Port Forward Portlist ---- ---------------------------- 1-26 1-26 1-26 1-26 1-26 1-26 1-26...
  • Page 159: Time And Sntp Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Time and SNTP Commands The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NPT)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters {primary <ipaddr>...
  • Page 160 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To configure SNTP settings: DES-3526:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3526:4# show sntp Purpose Used to display the SNTP information. Syntax show sntp Description...
  • Page 161 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp). Parameters None. Restrictions Only administrator-level users can issue this command.
  • Page 162 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config time_zone Purpose Used to determine the time zone used in order to adjust the system clock. Syntax config time_zone {operator [+ | -] | hour <gmt_hour 0-13> | min <minute 0-59>} Description This will adjust system clock settings according to the time zone.
  • Page 163 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config dst Parameters disable - Disable the DST seasonal time adjustment for the Switch. repeating - Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula.
  • Page 164 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
  • Page 165: Arp Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual ARP Commands The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr> config arpentry <ipaddr>...
  • Page 166 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example Usage: To configure a static arp entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: DES-3526:4#config arpentry 10.48.74.12 00-50-BA-00-07-36 Command: config arpentry 10.48.74.12 00-50-BA-00-07-36 Success. DES-3526:4# delete arpentry Purpose Used to delete a static entry into the ARP table.
  • Page 167 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config arp_aging time 30 Command: config arp_aging time 30 Success. DES-3526:4# show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif <ipif_name 12> | ipaddress <ipaddr> | [static | local]} Description This command is used to display the current contents of the Switch’s...
  • Page 168 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual clear arptable Purpose Used to remove all dynamic ARP table entries. Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch’s ARP table. Static ARP table entries are not affected. Parameters None.
  • Page 169: Routing Table Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Routing Table Commands The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr> {<metric 1-65535>} delete iproute [default] show iproute...
  • Page 170 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#delete iproute default 10.53.13.254 Command: delete iproute default 10.53.13.254 Success. DES-3526:4# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute Description This command will display the Switch’s current IP routing table. Parameters None.
  • Page 171: Mac Notification Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual MAC Notification Commands The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interval <int 1-2147483647>...
  • Page 172 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#disable mac_notification Command: disable mac_notification Success. DES-3526:4# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500> Description MAC address notification is used to monitor MAC addresses learned and entered into the FDB.
  • Page 173 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings Syntax show mac_notification Description This command is used to display the Switch’s MAC address table notification global settings.
  • Page 174 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ----------------------------------------------------- Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 175: Access Authentication Control Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Access Authentication Control Commands The TACACS / XTACACS / TACACS+ / RADIUS commands let you secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 176 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15> method_list_name config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local | none} delete authen_login <string 15>...
  • Page 177 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 178 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the system access authentication policy: DES-3526:4#show authen_policy Command: show authen_policy Authentication Policy: Enabled DES-3526:4# create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for users logging on to the Switch.
  • Page 179 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_login privilege only. If the user wishes to upgrade his or her status to the administrator level, the user must implement the enable admin command, followed by a previously configured password. (See the enable admin part of this section for more detailed information, concerning the enable admin command.) Parameters...
  • Page 180 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the user defined method list “Trinity” with authentication methods tacacs, xtacacs and local, in that order. DES-3526:4#config authen_login method_list_name Trinity method tacacs xtacacs local Command: config authen_login method_list_name Trinity method tacacs xtacacs local Success.
  • Page 181 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_login 15 characters to define the given method list the user wishes to view. all – Entering this parameter will display all the authentication login methods currently configured on the Switch. The window will display the following parameters: Method List Name –...
  • Page 182 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#create authen_enable method_list_name Permit Command: show authen_login method_list_name Permit Success. DES-3526:4# config authen_enable Purpose Used to configure a user-defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch.
  • Page 183 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_enable none – Adding this parameter will require no authentication to access the Switch. method_list_name – Enter a previously implemented method list name defined by the user (create authen_enable). The user may add one, or a combination of up to four (4) of the following authentication methods to this method list: tacacs –...
  • Page 184 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete authen_enable method_list_name Purpose Used to delete a user-defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch. Syntax delete authen_enable method_list_name <string 15> Description This command is used to delete a user-defined method list of authentication methods for promoting user level privileges to...
  • Page 185 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display all method lists for promoting user level privileges to administrator level privileges. DES-3526:4#show authen_enable all Command: show authen_enable all Method List Name Priority Method Name Comment ---------------- -------- ---------------...
  • Page 186 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config authen application http login default Command: config authen application http login default Success. DES-3526:4# show authen application Purpose Used to display authentication methods for the various applications on the Switch. Syntax show authen application Description...
  • Page 187 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create authen server_host xtacacs - Enter this parameter if the server host utilizes the XTACACS protocol. tacacs+ - Enter this parameter if the server host utilizes the TACACS+ protocol. radius - Enter this parameter if the server host utilizes the RADIUS protocol.
  • Page 188 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config authen server_host protocol – The protocol used by the server host. The user may choose one of the following: tacacs – Enter this parameter if the server host utilizes the TACACS protocol.
  • Page 189 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual delete authen server_host XTACACS protocol. tacacs+ - Enter this parameter if the server host utilizes the TACACS+ protocol. radius - Enter this parameter if the server host utilizes the RADIUS protocol.
  • Page 190 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual create authen server_group Purpose Used to create a user-defined authentication server group. Syntax create authen server_group <string 15> Description This command will create an authentication server group. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user defined categories for authentication using method lists.
  • Page 191 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config authen server_group add/delete – Enter the correct parameter to add or delete a server host from a server group. server_host <ipaddr> - Enter the IP address of the previously configured server host to add or delete.
  • Page 192 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show authen server_group Purpose Used to view authentication server groups on the Switch. Syntax show authen server_group <string 15> Description This command will display authentication server groups currently configured on the Switch. This command will display the following fields: Group Name: The name of the server group currently configured on the Switch, including built in groups and user defined groups.
  • Page 193 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4# config authen parameter response_timeout 60 Command: config authen parameter response_timeout 60 Success. DES-3526:4# config authen parameter attempt Purpose Used to configure the maximum number of times the Switch will accept authentication attempts.
  • Page 194 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show authen parameter Command: show authen parameter Response timeout : 60 seconds User attempts DES-3526:4# enable admin Purpose Used to promote user level privileges to administrator level privileges Syntax enable admin Description This command is for users who have logged on to the Switch on the...
  • Page 195 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config admin local_enable Command: config admin local_enable Enter the old password: Enter the case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3526:4#...
  • Page 196: Ssh Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual SSH Commands The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 197 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#enable ssh Command: enable ssh Success. DES-3526:4# disable ssh Purpose Used to disable SSH. Syntax disable ssh Description This command allows you to disable SSH on the Switch. Parameters None.
  • Page 198 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#config ssh authmode password enable Command: config ssh authmode password enable Success. DES-3526:4# show ssh authmode Purpose Used to display the SSH authentication mode setting. Syntax show ssh authmode Description This command will allow you to display the current SSH authentication set on the Switch.
  • Page 199 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4# config ssh server maxsession 2 contimeout 300 authfail 2 Command: config ssh server maxsession 2 contimeout 300 authfail 2 Success. DES-3526:4# show ssh server Purpose Used to display the SSH server setting. Syntax show ssh server Description...
  • Page 200 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh user administrator defined password for authentication. Upon entry of this command, the Switch will prompt the user for a password, and then to retype the password for confirmation. publickey –...
  • Page 201 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1 | RSA | DSA] [enable | disable] Description This command allows you to configure the desired type of SSH algorithm...
  • Page 202 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Usage Example: To display SSH algorithms currently set on the Switch: DES-3526:4#show ssh algorithm Command: show ssh algorithm Encryption Algorithm 3DES :Enabled AES128 :Enabled AES192 :Enabled AES256 :Enabled ARC4 :Enabled Blowfish :Enabled...
  • Page 203: Ssl Commands

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual SSL Commands Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: 1.
  • Page 204 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
  • Page 205 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
  • Page 206 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config ssl cachetimeout timeout Parameters timeout <value 60-86400> - Enter a timeout value between 60 and 86400 seconds to specify the total time an SSL key exchange ID stays valid before the SSL module will require a new, full SSL negotiation for connection.
  • Page 207 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#show ssl Command: show ssl SSL status Disabled RSA_WITH_RC4_128_MD5 0x0004 Enabled RSA_WITH_3DES_EDE_CBC_SHA 0x000A Enabled DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_MD5 0x0003 Enabled DES-3526:4# show ssl certificate Purpose Used to view the SSL certificate file status on the Switch. Syntax show ssl certificate Description...
  • Page 208 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4# DES-3526:4#download certificate_fromTFTP 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Command: download certificate_fromTFTP 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Certificate Loaded Successfully! DES-3526:4#...
  • Page 209: D-Link Single Ip Management Commands

    D-Link Single IP Management Commands Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using D-Link Single IP Management (labeled here as SIM) must conform to the following rules: SIM is an optional feature on the Switch and can easily be enabled or disabled.
  • Page 210 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual When a CS becomes a MS, it automatically becomes a member of the first SNMP community (include read/write and read only) to which the CS belongs. However if a MS has its own IP address, it can belong to SNMP communities to which other switches in the group, including the CS, do not belong.
  • Page 211 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#disable sim Command: disable sim Success. DES-3526:4# show sim Purpose Used to view the current information regarding the SIM group on the Switch. Syntax show sim {[candidates {<candidate_id 1-32>} | members {<member_id 1-32>...
  • Page 212 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To show the SIM information in detail: DES-3526:4#show sim Command: show sim SIM Version : VER-1 Firmware Version : Build 2.00-B02 Device Name MAC Address : 00-35-26-11-11-00 Capabilities : L3 Platform : DES-3526 L2 Switch SIM State...
  • Page 213 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To show other groups information in summary, if group is specified: DES-3526:4#show sim group Command: show sim group SIM Group Name : default ID MAC Address Platform / Hold Firmware Device Name Capability...
  • Page 214 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3526:4#reconfig member_id 2 Command: reconfig member_id 2 DES-3526:4# Login: config sim_group Purpose Used to add candidates and delete members from the SIM group. Syntax config sim [add <candidate_id 1-32> {<password>} | delete <member_id 1-32>] Description This command is used to add candidates and delete members from...
  • Page 215 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual config sim Parameters commander – Use this parameter to configure the commander switch(CS) for the following parameters: group_name <groupname 64> - Used to update the name of the group. Enter an alphanumeric string of up to 64 characters to rename the SIM group.
  • Page 216 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual To transfer the Switch to be a CS: DES-3526:4# config sim commander Command: config sim commander Success. DES-3526:4# To update the name of a group: DES-3526:4# config sim commander group_name Trinity Command: config sim commander group_name Trinity Success.
  • Page 217 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual MAC Address Result ----------------- ---------------- 00-01-02-03-04-00 Success 00-07-06-05-04-03 Success 3 00-07-06-05-04-03 Success DES-3526:4# To download configuration files: DES-3526:4# download sim configuration 10.53.13.94 c:/des3526.txt members all Command: download sim firmware 10.53.13.94 c:/des3526.txt members all This device is updating configuration.
  • Page 218: Command History List

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Command History List The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config <value 1-40> command_history show command_history...
  • Page 219 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Purpose Used to display all commands in the Command Line Interface (CLI). Syntax Description This command will display all of the commands available through the Command Line Interface (CLI). Parameters None.
  • Page 220 DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual show command_history Purpose Used to display the command history. Syntax show command_history Description This command will display the command history. Parameters None. Restrictions None. Example usage To display the command history: DES-3526:4#show command_history Command: show command_history ? show...
  • Page 221: Technical Specifications

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Technical Specifications General IEEE 802.3 10BASE-T Ethernet Standards IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D Spanning Tree IEEE 802.1W Rapid Spanning Tree IEEE 802.1S Multiple Spanning Tree IEEE 802.1 P/Q VLAN IEEE 802.1p Priority Queues...
  • Page 222: Physical And Environmental

    DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual Physical and Environmental Internal power supply DES-3526 AC Input: 100 – 120; 200 – 240 VAC, 50/60 Hz DES-3526 DC 60W DC Power Input: 48 V Output: 12V Power Consumption 23 watts maximum one 40 mm fan DC fans:...

This manual is also suitable for:

Xstack des-3526dc

Table of Contents