Hirschmann RS20 Reference Manual

Hirschmann RS20 Reference Manual

Industrial, gigabit
Hide thumbs Also See for RS20:
Table of Contents

Advertisement

Reference Manual

Command Line Interface

Industrial ETHERNET Gigabit Switch
RS20
CLI L2B
Technical Support
Release 4.0 11/07
HAC-Support@hirschmann.de

Advertisement

Table of Contents
loading

Summary of Contents for Hirschmann RS20

  • Page 1: Reference Manual

    Reference Manual Command Line Interface Industrial ETHERNET Gigabit Switch RS20 CLI L2B Technical Support Release 4.0 11/07 HAC-Support@hirschmann.de...
  • Page 2 This publication has been created by Hirschmann Automation and Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change the contents of this manual without prior notice. Hirschmann can give no guarantee in respect of the correctness or accuracy of the details in this publication.
  • Page 3: Table Of Contents

    Content Content Content Command Structure Format 1.1.1 Command 1.1.2 Parameters 1.1.3 Values 1.1.4 Conventions 1.1.5 Annotations 1.1.6 Special keys 1.1.7 Special characters in scripts 1.1.8 Secrets in scripts Quick Start up Quick Starting the Switch System Info and System Setup Mode-based CLI Mode-based Topology Mode-based Command Hierarchy...
  • Page 4 Content 4.1.7 show interface 4.1.8 show interface ethernet 4.1.9 show interface switchport 4.1.10 show logging 4.1.11 show mac-addr-table 4.1.12 show signal-contact 4.1.13 show running-config 4.1.14 show sysinfo 4.1.15 show temperature 4.1.16 snmp-server Class of Service (CoS) Commands 4.2.1 classofservice dot1p-mapping 4.2.2 classofservice ip-dscp-mapping 4.2.3 classofservice trust 4.2.4 show classofservice dot1p-mapping...
  • Page 5 Content 4.3.23 snmp-server contact 4.3.24 snmp-server location 4.3.25 snmp-server sysname 4.3.26 snmp-server enable traps 4.3.27 snmp-server enable traps chassis 4.3.28 snmp-server enable traps l2redundancy 4.3.29 snmp-server enable traps linkmode 4.3.30 snmp-server enable traps multiusers 4.3.31 snmp-server enable traps stpmode 4.3.32 snmptrap 4.3.33 snmptrap ipaddr 4.3.34 snmptrap mode Syslog Commands...
  • Page 6 Content 4.5.20 show port 4.5.21 shutdown 4.5.22 shutdown all 4.5.23 snmp trap link-status 4.5.24 snmp trap link-status all 4.5.25 speed User Account Management Commands 4.6.1 disconnect 4.6.2 show loginsession 4.6.3 show users 4.6.4 users defaultlogin 4.6.5 users login 4.6.6 users name 4.6.7 users passwd 4.6.8 users snmpv3 accessmode 4.6.9 users snmpv3 authentication...
  • Page 7 Content 4.8.1 show lldp 4.8.2 show lldp config 4.8.3 show lldp config chassis 4.8.4 show lldp config chassis admin-state 4.8.5 show lldp config chassis notification-interval 4.8.6 show lldp config chassis re-init-delay 4.8.7 show lldp config chassis tx-delay 4.8.8 show lldp config chassis tx-hold-mult 4.8.9 show lldp chassis tx-interval 4.8.10 show lldp config port 4.8.11 show lldp config port tlv...
  • Page 8 Content 4.9.6 show sntp time 4.9.7 no sntp 4.9.8 sntp anycast address 4.9.9 sntp anycast transmit-interval 4.9.10 sntp client accept-broadcast 4.9.11 sntp client offset 4.9.12 sntp client request-interval 4.9.13 no sntp client server 4.9.14 sntp client server primary 4.9.15 sntp client server secondary 4.9.16 sntp operation 4.9.17 sntp time system 4.10 PoE - Power over Ethernet...
  • Page 9 CLI Commands: Security Security Commands 6.1.1 users defaultlogin 6.1.2 users login HTTP Commands 6.2.1 ip http secure-port 6.2.2 ip http secure-protocol 6.2.3 ip http secure-server 6.2.4 ip http server 6.2.5 show ip http Glossary Index Hirschmann Competence CLI L2B Release 4.0 11/07...
  • Page 10 Content CLI L2B Release 4.0 11/07...
  • Page 11: Command Structure

    Command Structure 1 Command Structure The Command Line Interface (CLI) syntax, conventions and terminology are described in this section. Each CLI command is illustrated using the structure outlined below. CLI L2B Release 4.0 11/07...
  • Page 12: Format

    Command Structure 1.1 Format 1.1 Format Commands are followed by values, parameters, or both. Example 1 network parms <ipaddr> <netmask> [gateway] network parms is the command name. <ipaddr> <netmask> are the required values for the command. [gateway] is the optional value for the command. Example 2 snmp-server location <loc>...
  • Page 13: Command

    Command Structure 1.1 Format 1.1.1 Command The text in courier font must be typed exactly as shown. 1.1.2 Parameters Parameters are order dependent. Parameters may be mandatory values, optional values, choices, or a combi- nation. <parameter>. The <> angle brackets indicate that a mandatory param- eter must be entered in place of the brackets and text inside them.
  • Page 14: Values

    Command Structure 1.1 Format 1.1.3 Values ipaddr This parameter is a valid IP address, made up of four decimal bytes ranging from 0 to 255. The default for all IP parameters con- sists of zeros (that is, 0.0.0.1). The inter- face IP address of 0.0.0.0 is invalid.
  • Page 15: Conventions

    Command Structure 1.1 Format 1.1.4 Conventions Network addresses are used to define a link to a remote host, workstation or network. Network addresses are shown using the following syntax: Address Type Format Range ipaddr 192.168.11.110 0.0.0.0 to 255.255.255.255 (decimal) macaddr A7:C9:89:DD:A9:B3 hexidecimal digit pairs Table 1: Network Address Syntax...
  • Page 16: Annotations

    Command Structure 1.1 Format 1.1.5 Annotations The CLI allows the user to type single-line annotations at the command prompt for use when writing test or configuration scripts and for better read- ability. The exclamation point (‘!’) character flags the beginning of a com- ment.
  • Page 17: Special Keys

    Command Structure 1.1 Format 1.1.6 Special keys The following list of special keys may be helpful to enter command lines. delete previous character Ctrl-A go to beginning of line Ctrl-E go to end of line Ctrl-F go forward one character Ctrl-B go backward one character Ctrl-D...
  • Page 18: Special Characters In Scripts

    Command Structure 1.1 Format 1.1.7 Special characters in scripts Some of the configuration parameters are strings that can contain special characters. When the switch creates a script from the running configuration (by use of the command #show running-config <scriptname.cli>), these spe- cial characters are written to the script with a so-called escape character pre- ceding them.
  • Page 19 Command Structure 1.1 Format The commands with strings that may contain these special characters are listed below. Note: Not every string is allowed to contain special characters. The string that is output with the escape characters (if necessary) is shown as "...". Command Note !System Description "..."...
  • Page 20: Secrets In Scripts

    Command Structure 1.1 Format 1.1.8 Secrets in scripts A configuration may include secrets (e. g., passwords). When creating a script, these secrets are written to it in a scrambled form, not in clear text. These secrets may be up to 31 characters long. The format for a scrambled secret is: ":v1:<scrambled secret>:"...
  • Page 21: Quick Start Up

    Quick Start up 2 Quick Start up The CLI Quick Start up details procedures to quickly become acquainted with the Hirschmann software. CLI L2B Release 4.0 11/07...
  • Page 22: Quick Starting The Switch

    2.1 Quick Starting the Switch V Read the device Installation Guide for the connectivity procedure. In-band connectivity allows access to the Hirschmann software locally or from a remote workstation. The device must be configured with IP information (IP address, subnet mask, and default gateway).
  • Page 23: System Info And System Setup

    Quick Start up 2.2 System Info and System Setup 2.2 System Info and System Setup Quick Start up Physical Port Data Command Details show port all Displays the Ports (in Privileged EXEC) slot/port Type - Indicates if the port is a special type of port Admin Mode - Selects the Port Control Administration State Physical Mode - Selects the desired port speed and duplex mode Physical Status - Indicates the port speed and duplex mode...
  • Page 24 Quick Start up 2.2 System Info and System Setup Command Details users passwd <user Allows the user to set passwords or change passwords name> needed to login (in Global Config) A prompt will appear after the command is entered requesting the users old password. In the absence of an old password leave the area blank.
  • Page 25 Quick Start up 2.2 System Info and System Setup Note: Helpful Hint: The user should do a ‘copy system:running-config nvram:startup-config’ after configuring the network parameters so that the configurations are not lost. Command Details show network Displays the Network Configurations (in User EXEC) IP Address - IP Address of the switch Default IP is 0.0.0.0...
  • Page 26: Clear Config

    Quick Start up 2.2 System Info and System Setup Quick Start up Downloading from TFTP Server Before starting a TFTP server download, the operator must complete the Quick Start up for the IP Address. Command Details Sets the destination (download) datatype to be an copy <url>...
  • Page 27: Mode-Based Cli

    The CLI groups all the commands in appropriate modes according to the na- ture of the command. A sample of the CLI command modes are described below. Each of the command modes support specific Hirschmann software commands. User Exec Mode...
  • Page 28 Mode-based CLI Command Mode Access Method Prompt Exit or Access Next Mode Stack Global Con- From the Global Switch (Config- To exit to Global Config- stack )# fig Mode Configuration uration mode enter exit. mode, enter the To return to user EXEC command mode, enter ctrl-Z stack...
  • Page 29: Mode-Based Topology

    Mode-based CLI 3.1 Mode-based Topology 3.1 Mode-based Topology The CLI tree is built on a mode concept where the commands are available according to the interface. Some of the modes are depicted in the mode- based CLI Figure 1. ROOT The User Exec commands User Exec are also accessible in the...
  • Page 30: Mode-Based Command Hierarchy

    When the operator logs into the CLI, the User Exec mode is the initial mode. The User Exec mode contains a limited set of commands. The command prompt shown at this level is: Command Prompt: (Hirschmann PowerMICE)> Privileged Exec Mode To have access to the full suite of commands, the operator must enter the Privileged Exec mode.
  • Page 31 In this mode, a physical port is set up for a specific logical connection operation. The Interface Config mode provides access to the router interface configuration commands. The command prompt at this level Command Prompt: (Hirschmann PowerMICE)(Interface <slot/port>)# The resulting prompt for the interface configuration command entered...
  • Page 32: Flow Of Operation

    If the operator has given an invalid input parameter in the command, then the message conveys to the operator an invalid input was detected. The layout of the output is depicted below: (Hirschmann PowerMICE)(exec) #show sspanning-tree %Invalid input detected at '^' marker. Fig. 2:...
  • Page 33 Mode-based CLI 3.3 Flow of Operation For mandatory parameters, the command tree extends till the mandatory parameters make the leaf of the branch. The callback function is only in- voked when all the mandatory parameters are provided. For optional pa- rameters, the command tree extends till the mandatory parameters and the optional parameters make the leaf of the branch.
  • Page 34: No" Form Of A Command

    Mode-based CLI 3.4 “No” Form of a Command 3.4 “No” Form of a Command “No” is a specific form of an existing command and does not represent a new or distinct command. Only the configuration commands are available in the “no”...
  • Page 35: Cli Commands: Base

    CLI Commands: Base 4 CLI Commands: Base This chapter provides detailed explanation of the Switching commands. The commands are divided into five functional groups: Show commands display switch settings, statistics, and other information. Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting.
  • Page 36: System Information And Statistics Commands

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1 System Information and Statistics Commands 4.1.1 show arp switch This command displays the Address Resolution Protocol cache of the switch. Format show arp switch Mode Privileged EXEC and User EXEC 4.1.2 show bridge aging-time This command displays the timeout for address aging.
  • Page 37: Show Device-Status

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.3 show device-status The signal device status is for displaying the monitoring functions of the switch, the device status trap setting. Format show device-status [monitor|state|trap] Mode Privileged EXEC and User EXEC Device status monitor Displays the possible monitored events and which of them are monitored:...
  • Page 38: Show Authentication

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.4 show authentication This command displays users assigned to authentication login lists. Format show authentication [users <listname>] Mode Privileged EXEC and User EXEC 4.1.5 show classofservice This command displays class of service settings. Format show classofservice dot1p-mapping [slot/port] Mode...
  • Page 39: Show Eventlog

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.6 show eventlog This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format show eventlog Mode Privileged EXEC and User EXEC File The file in which the event originated.
  • Page 40: Show Interface

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.7 show interface This command displays a summary of statistics for a specific port or a count of all CPU traffic based upon the argument. Format slot/port show interface { < >...
  • Page 41 CLI Commands: Base 4.1 System Information and Statistics Com- Broadcast Packets Received The total number of packets received that were directed to the broad- cast address. Note that this does not include multicast packets. Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
  • Page 42: Show Interface Ethernet

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.8 show interface ethernet This command displays detailed statistics for a specific port or for all CPU traffic based upon the argument. Format show interface ethernet {<slot/port> | switchport Mode Privileged EXEC and User EXEC The display parameters, when the argument is '<slot/port>', are as follows : Packets Received Octets Received - The total number of octets of data (including those...
  • Page 43 CLI Commands: Base 4.1 System Information and Statistics Com- octets in length inclusive (excluding framing bits but including FCS octets). Packets Received 1024-1518 Octets - The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 44 CLI Commands: Base 4.1 System Information and Statistics Com- Alignment Errors - The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.
  • Page 45 CLI Commands: Base 4.1 System Information and Statistics Com- StatsPkts and etherStatsOctets objects should be sampled before and after a common interval. ----- Packets Transmitted 64 Octets - The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
  • Page 46 CLI Commands: Base 4.1 System Information and Statistics Com- Broadcast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent. Transmit Errors Total Errors - The sum of Single, Multiple, and Excessive Collisions. Tx FCS Errors - The total number of packets transmitted that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence...
  • Page 47 CLI Commands: Base 4.1 System Information and Statistics Com- STP BPDUs Transmitted - Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received - Spanning Tree Protocol Bridge Protocol Data Units received RST BPDUs Transmitted - Rapid Spanning Tree Protocol Bridge Protocol Data Units sent RSTP BPDUs Received - Rapid Spanning Tree Protocol Bridge Pro- tocol Data Units received...
  • Page 48 CLI Commands: Base 4.1 System Information and Statistics Com- Packets Transmitted without Errors - The total number of packets transmitted out of the interface. Unicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a subnetwork-uni- cast address, including those that were discarded or not sent.
  • Page 49: Show Interface Switchport

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.9 show interface switchport This command displays data concerning the internal port to the management agent. Format show interface switchport Mode Privileged EXEC and User EXEC 4.1.10 show logging This command displays the trap log maintained by the switch. The trap log contains a maximum of 256 entries that wrap.
  • Page 50: Show Mac-Addr-Table

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.11 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the optional parameter.
  • Page 51: Show Signal-Contact

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.12 show signal-contact The signal contact is for displaying the manual setting and the current state of the signal contact, the monitoring functions of the switch, the signal-contacts trap setting. Format show signal-contact [1|2|all [mode|monitor|state|trap]] Mode...
  • Page 52: Show Running-Config

    CLI Commands: Base 4.1 System Information and Statistics Com- Signal contact trap enabled A trap is sent if the signal contact state changes. disabled No trap is sent if the signal contact state changes. Note: To show the signal contact´s port related settings, use the command show port {<slot/port>...
  • Page 53: Show Sysinfo

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.14 show sysinfo This command displays switch information. Format show sysinfo Mode Privileged EXEC and User EXEC Alarm Displays the latest present Alarm for a signal contact. System Description Text used to identify this switch. System Name Name used to identify the switch.
  • Page 54 CLI Commands: Base 4.1 System Information and Statistics Com- Backplane Hardware Revision The hardware´s revision number. Backplane Hardware description The hardware´s device description. Serial Number (Backplane) The hardware´s serial number. Base MAC Address (Backplane) The hardware´s base MAC address. Number of MAC Addresses (Backplane) The number of hardware MAC addresses.
  • Page 55: Show Temperature

    CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.15 show temperature This command displays the lower and upper temperature limit for sending a trap. Format show temperature Mode Privileged EXEC and User EXEC 4.1.16 snmp-server This command sets the name and the physical location of the switch, and the organization responsible for the network.The range for name, location and contact is from 1 to 31 alphanumeric characters.
  • Page 56: Class Of Service (Cos) Commands

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2 Class of Service (CoS) Commands This chapter provides a detailed explanation of the QoS CoS commands. The following commands are available. The commands are divided into these different groups: Configuration Commands are used to configure features and options of the switch.
  • Page 57: Classofservice Dot1P-Mapping

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.1 classofservice dot1p-mapping This command maps an 802.1p priority to an internal traffic class for a device when in ‘Global Config’ mode. The number of available traffic classes may vary with the platform. Userpriority and trafficclass can both be the range from 0-7.
  • Page 58: Classofservice Ip-Dscp-Mapping

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.2 classofservice ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The <ipdscp> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
  • Page 59: Classofservice Trust

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.3 classofservice trust This command sets the class of service trust mode of an interface. The mode can be set to trust one of the Dot1p (802.1p) or IP DSCP packet markings. Note: In trust ip-dscp mode the switch modifies the vlan priority for out- going frames according to –...
  • Page 60: Show Classofservice Dot1P-Mapping

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.4 show classofservice dot1p-mapping This command displays the current 802.1p priority mapping to internal traffic classes for a specific interface. The slot/port parameter is required on platforms that support priority to traffic class mapping on a ‘per-port’ basis. Platforms that support priority to traffic class mapping on a per-port basis: Format show classofservice dot1p-mapping [<slot/port>]...
  • Page 61: Show Classofservice Ip-Dscp-Mapping

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.5 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic class- es for the global configuration settings. Format show classofservice ip-dscp-mapping Mode Privileged EXEC The following information is repeated for each user priority. IP DSCP The IP DSCP value.
  • Page 62: Show Classofservice Trust

    CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.6 show classofservice trust This command displays the current trust mode for the specified interface. The slot/port parameter is optional. If specified, the trust mode of the inter- face is displayed. If omitted, the most recent global configuration settings are displayed.
  • Page 63: Management Commands

    CLI Commands: Base 4.3 Management Commands 4.3 Management Commands These commands manage the switch and show current management settings. 4.3.1 transport input telnet This command regulates new telnet sessions. If sessions are enabled, new telnet sessions can be established until there are no more sessions available.
  • Page 64: Bridge Aging-Time

    CLI Commands: Base 4.3 Management Commands 4.3.2 bridge aging-time This command configures the forwarding database address aging timeout in seconds. Default Format bridge aging-time < 10-630> Mode Global Config Seconds The <seconds> parameter must be within the range of 10 to 630 sec- onds.
  • Page 65: Network Parms

    CLI Commands: Base 4.3 Management Commands Mode Privileged EXEC no network javascriptmode When the user accesses the switch’s web interface, the switch’s web server will deliver a HTML page that contains no JavaScript. Format no network javamode Mode Privileged EXEC 4.3.4 network parms This command sets the IP Address, subnet mask and gateway of the router.
  • Page 66 CLI Commands: Base 4.3 Management Commands (BootP) server or a DHCP server until a response is received. none indicates that the switch should be manually configured with IP information. Independently of the BootP and DHCP settings, HiDiscovery can be configured as an additional protocol. Default None Format...
  • Page 67: Network Priority

    CLI Commands: Base 4.3 Management Commands 4.3.6 network priority This command configures the VLAN priority or the IP DSCP value for out- going management packets. The <ipdscp> is specified as either an integer from 0-63, or symbolically through one of the following keywords: af11,af12,af13,af21,af22,af23,af31,af32,af33,af41,af42,af43,be,cs0, cs1, cs2,cs3,cs4,cs5,cs6,cs7,ef.
  • Page 68: Serial Timeout

    CLI Commands: Base 4.3 Management Commands 4.3.7 serial timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected in- definitely. The time range is 0 to 160. Default Format serial timeout <...
  • Page 69: Set Prompt

    CLI Commands: Base 4.3 Management Commands 4.3.8 set prompt This command changes the name of the prompt. The length of name may be up to 64 alphanumeric characters. Format set prompt < prompt string> Mode Privileged EXEC CLI L2B Release 4.0 11/07...
  • Page 70: Show Network

    CLI Commands: Base 4.3 Management Commands 4.3.9 show network This command displays configuration settings associated with the switch's network interface. The network interface is the logical interface used for in- band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
  • Page 71: Show Serial

    CLI Commands: Base 4.3 Management Commands 4.3.10 show serial This command displays serial communication settings for the switch. Format show serial Mode Privileged EXEC and User EXEC Serial Port Login Timeout (minutes) Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection.
  • Page 72: Show Snmp-Access

    CLI Commands: Base 4.3 Management Commands 4.3.11 show snmp-access This command displays SNMP access information related to global and SNMP version settings. SNMPv3 is always enabled. Format show snmp-access Mode Privileged EXEC and User EXEC CLI L2B Release 4.0 11/07...
  • Page 73: Show Snmpcommunity

    CLI Commands: Base 4.3 Management Commands 4.3.12 show snmpcommunity This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP Version 1 (for more about the SNMP specification, see the SNMP RFCs).
  • Page 74: Show Snmptrap

    CLI Commands: Base 4.3 Management Commands 4.3.13 show snmptrap This command displays SNMP trap receivers. Trap messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network. Six trap re- ceivers are simultaneously supported.
  • Page 75: Show Trapflags

    CLI Commands: Base 4.3 Management Commands 4.3.14 show trapflags This command displays trap conditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the trap to all enabled trap receivers.
  • Page 76: Snmp-Access Global

    CLI Commands: Base 4.3 Management Commands 4.3.15 snmp-access global This command configures the global SNMP access setting (for all SNMP versions). Format snmp-access global {disable|enable|read-only} Mode Global Config disable Disable SNMP access to this switch, regardless of the SNMP version used.
  • Page 77: Snmp-Access Version

    CLI Commands: Base 4.3 Management Commands 4.3.16 snmp-access version This command configures the SNMP version specific access mode for SNMPv1 and SNMPv2. Format snmp-access version {all|v1|v2} {disable|enable} Mode Global Config Enable or disable SNMP access by all protocol versions (v1 and v2). Enable or disable SNMP access by v1.
  • Page 78: Snmp-Server Community

    CLI Commands: Base 4.3 Management Commands 4.3.17 snmp-server community This command adds (and names) a new SNMP community. A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of name can be up to 16 case-sensitive characters.
  • Page 79: Snmp-Server Community Ipaddr

    CLI Commands: Base 4.3 Management Commands 4.3.18 snmp-server community ipaddr This command sets a client IP address for an SNMP community. The ad- dress is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 80: Snmp-Server Community Ipmask

    CLI Commands: Base 4.3 Management Commands 4.3.19 snmp-server community ipmask This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
  • Page 81: Snmp-Server Community Mode

    CLI Commands: Base 4.3 Management Commands 4.3.20 snmp-server community mode This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch accord- ing to its access right. If the community is disabled, no SNMP requests using this community are accepted.
  • Page 82: Snmp-Server Community Ro

    CLI Commands: Base 4.3 Management Commands 4.3.21 snmp-server community ro This command restricts access to switch information. The access mode is read-only (also called public). Format snmp-server community ro <name> Mode Global Config 4.3.22 snmp-server community rw This command restricts access to switch information. The access mode is read/write (also called private).
  • Page 83: Snmp-Server Location

    CLI Commands: Base 4.3 Management Commands 4.3.24 snmp-server location This command configures the system location. Format snmp-server location <system location> Mode Global Config 4.3.25 snmp-server sysname This command configures the system name. Format snmp-server sysname <system name> Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 84: Snmp-Server Enable Traps

    CLI Commands: Base 4.3 Management Commands 4.3.26 snmp-server enable traps This command enables the Authentication Trap Flag. Default enabled Format snmp-server enable traps Mode Global Config no snmp-server enable traps This command disables the Authentication Trap Flag. Format no snmp-server enable traps Mode Global Config CLI L2B...
  • Page 85: Snmp-Server Enable Traps Chassis

    CLI Commands: Base 4.3 Management Commands 4.3.27 snmp-server enable traps chassis Configures whether traps that are related to the chassis functionality of the switch will be sent. These functions include the signal contacts, the ACA, warnings about the temperature, changes in the module map, addition or removal of SFP modules, power failure and the LLDP and SNTP features.
  • Page 86: Snmp-Server Enable Traps L2Redundancy

    CLI Commands: Base 4.3 Management Commands 4.3.28 snmp-server enable traps l2redundancy Indicates whether traps that are related to the layer 2 redundancy features of the switch will be sent. The HiPER-Ring and the Redundant Coupling will tell you with these traps when the main line has failed or returned. May be enabled or disabled.
  • Page 87: Snmp-Server Enable Traps Linkmode

    CLI Commands: Base 4.3 Management Commands 4.3.29 snmp-server enable traps linkmode This command enables Link Up/Down traps for the entire switch. When en- abled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command). Default enabled Format...
  • Page 88: Snmp-Server Enable Traps Multiusers

    CLI Commands: Base 4.3 Management Commands 4.3.30 snmp-server enable traps multiusers This command enables Multiple User traps. When the traps are enabled, a Multiple User Trap is sent when a user logs in to the terminal interface (EIA 232 (serial port) or telnet) and there is an existing terminal interface session. Default enabled Format...
  • Page 89: Snmp-Server Enable Traps Stpmode

    CLI Commands: Base 4.3 Management Commands 4.3.31 snmp-server enable traps stpmode This command enables the sending of new root traps and topology change notification traps. Default enabled Format snmp-server enable traps stpmode Mode Global Config no snmp-server enable traps stpmode This command disables the sending of new root traps and topology change notification traps.
  • Page 90: Snmptrap

    CLI Commands: Base 4.3 Management Commands 4.3.32 snmptrap This command adds an SNMP trap name. The maximum length of name is 16 case-sensitive alphanumeric characters. Default The default name for the six undefined community names is Delete. Format snmptrap < name>...
  • Page 91: Snmptrap Ipaddr

    CLI Commands: Base 4.3 Management Commands 4.3.33 snmptrap ipaddr This command assigns an IP address to a specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters. Note: IP addresses in the SNMP trap receiver table must be unique. If you make multiple entries using the same IP address, the first entry is retained and processed.
  • Page 92: Syslog Commands

    CLI Commands: Base 4.4 Syslog Commands 4.4 Syslog Commands This section provides a detailed explanation of the Syslog commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other in- formation. Configuration Commands configure features and options of the device. For every configuration command there is a show command that displays the configuration setting.
  • Page 93: Logging Buffered Wrap

    CLI Commands: Base 4.4 Syslog Commands 4.4.2 logging buffered wrap This command enables wrapping of in-memory logging when full capacity reached. Otherwise when full capacity is reached, logging stops. Default wrap Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in-memory logging and configures logging to stop when capacity is full.
  • Page 94: Logging Cli-Command

    CLI Commands: Base 4.4 Syslog Commands 4.4.3 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch software to log all Command Line Interface (CLI) commands issued on the system. Default enabled Format logging cli-command Mode Global Config...
  • Page 95: Logging Console

    CLI Commands: Base 4.4 Syslog Commands 4.4.4 logging console This command enables logging to the console. The <severitylevel> value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
  • Page 96: Logging Host

    CLI Commands: Base 4.4 Syslog Commands 4.4.5 logging host This command enables logging to a host where up to eight hosts can be configured. Default Port - 514; Level - Critical; Format logging host <hostaddress> [<port> [<severi tylevel>]] Mode Global Config Severity number Sevirity name Meaning...
  • Page 97: Logging Host Remove

    CLI Commands: Base 4.4 Syslog Commands Mode Global Config 4.4.7 logging host remove The Logging Host Index to be removed. Format logging host remove <hostindex> Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 98 CLI Commands: Base 4.4 Syslog Commands CLI L2B Release 4.0 11/07...
  • Page 99: Device Configuration Commands

    4.5 Device Configuration Commands Device Configuration Commands 4.5.1 auto-negotiate This command enables automatic negotiation on a port. The default value is enable. Format auto-negotiate Mode Interface Config no auto-negotiate This command disables automatic negotiation on a port. Format no auto-negotiate Mode Interface Config CLI L2B...
  • Page 100: Auto-Negotiate All

    4.5 Device Configuration Commands 4.5.2 auto-negotiate all This command enables automatic negotiation on all ports. The default value is enable. Format auto-negotiate all Mode Global Config no auto-negotiate all This command disables automatic negotiation on all ports. Format no auto-negotiate all Mode Global Config 4.5.3 media-module remove...
  • Page 101: Monitor Session

    4.5 Device Configuration Commands 4.5.4 monitor session This command configures a probe port and a monitored port for monitor ses- sion (port monitoring). The first slot/port is the source monitored port and the second slot/port is the destination probe port. If this command is executed while port monitoring is enabled, it will have the effect of changing the probe and monitored port values.
  • Page 102: Monitor Session Mode

    4.5 Device Configuration Commands 4.5.5 monitor session mode This command configures the monitor session (port monitoring) mode to en- able. The probe and monitored ports must be configured before monitor ses- sion (port monitoring) can be enabled. If enabled, the probe port will monitor all traffic received and transmitted on the physical monitored port.
  • Page 103: Monitor Session Source/Destination

    4.5 Device Configuration Commands 4.5.6 monitor session <session-id> source/ destination This command allows you to configure and activate the port mirroring func- tion of the switch. Port mirroring is when the data traffic of a source port is copied to a specified destination port. The data traffic at the source port is not influenced by port mirroring.
  • Page 104: Set Igmp

    4.5 Device Configuration Commands 4.5.7 set igmp This command enables IGMP Snooping on the system. The default value is disable. Note: The IGMP snooping application supports the following: Global configuration or per interface configuration. Validation of the IP header checksum (as well as the IGMP header check- sum) and discarding of the frame upon checksum error.
  • Page 105: Set Igmp

    4.5 Device Configuration Commands 4.5.8 set igmp This command enables IGMP Snooping on a selected interface. Default enabled Format set igmp Mode Interface Config no set igmp This command disables IGMP Snooping on a selected interface. Format no set igmp Mode Interface Config 4.5.9...
  • Page 106: Set Igmp Forward-All

    4.5 Device Configuration Commands 4.5.10 set igmp forward-all This command activates the forwarding of multicast frames to this interface even if the given interface has not received any reports by hosts. N. B.: this applies only to frames that have been learned via IGMP Snooping. The pur- pose is that an interface (e.
  • Page 107: Set Igmp Forward-Unknown

    4.5 Device Configuration Commands 4.5.11 set igmp forward-unknown This command defines how to handle unknown multicast frames. This command is available for MS20/30 and RS20/30. Format set igmp forward-unknown {discard|flood|query- ports} Mode Global Config discard Unknown multicast frames will be discarded.
  • Page 108: Set Igmp Static-Query-Port

    4.5 Device Configuration Commands 4.5.12 set igmp static-query-port This command activates the forwarding of IGMP membership report frames to this interface even if the given interface has not received any queries. The purpose is that a port may need to forward such frames even if no queries have been received on it (e.
  • Page 109: Set Igmp Groupmembershipinterval

    4.5 Device Configuration Commands 4.5.13 set igmp groupmembershipinterval This command sets the IGMP Group Membership Interval time on the sys- tem. The Group Membership Interval time is the amount of time in seconds that a switch will wait for a report from a particular group on a particular inter- face before deleting the interface from the entry.
  • Page 110: Set Igmp Interfacemode

    4.5 Device Configuration Commands 4.5.14 set igmp interfacemode This command enables IGMP Snooping on all interfaces. Format set igmp interfacemode Mode Global Config no set igmp interfacemode This command disables IGMP Snooping on all interfaces. Format no set igmp interfacemode Mode Global Config CLI L2B...
  • Page 111: Set Igmp Maxresponse

    4.5 Device Configuration Commands 4.5.15 set igmp maxresponse This command sets the IGMP Maximum Response time on the system. The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query in response to a received leave message, before deleting the multicast group received in the leave message.
  • Page 112: Show Igmpsnooping

    4.5 Device Configuration Commands 4.5.16 how igmpsnooping This command displays IGMP Snooping information. Configured information is displayed whether or not IGMP Snooping is enabled. Status information is only displayed when IGMP Snooping is enabled. Format show igmpsnooping Mode Privileged EXEC and User EXEC Admin Mode This indicates whether or not IGMP Snooping is globally enabled on the switch.
  • Page 113: Show Mac-Filter-Table Igmpsnooping

    4.5 Device Configuration Commands 4.5.17 show mac-filter-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forward- ing Database (MFDB) table. Format show mac-filter-table igmpsnooping Mode Privileged EXEC and User EXEC Mac Address A multicast MAC address for which the switch has forwarding and or filtering information.
  • Page 114: Show Mac-Filter-Table Stats

    4.5 Device Configuration Commands 4.5.18 show mac-filter-table stats This command displays the Multicast Forwarding Database (MFDB) statis- tics. Format show mac-filter-table stats Mode Privileged EXEC and User EXEC Total Entries This displays the total number of entries that can possibly be in the Multicast Forwarding Database table.
  • Page 115: Show Monitor

    4.5 Device Configuration Commands 4.5.19 show monitor This command displays the Port monitoring information for the system. Format show monitor Mode Privileged EXEC and User EXEC Port Monitor Mode indicates whether the Port Monitoring feature is enabled or disabled. The possible values are enable and disable. Probe Port slot/port is the slot/port configured as the probe port.
  • Page 116: Show Port

    4.5 Device Configuration Commands 4.5.20 show port This command displays port information. Format show port { } [name] <slot/port> | all Mode Privileged EXEC and User EXEC Slot/Port Valid slot and port number separated by forward slashes. Name When the optional command parameter name was specified, the out- put is different.
  • Page 117 4.5 Device Configuration Commands Link Trap This object determines whether or not to send a trap when link status changes. The factory default is enabled. Flow Indicates if enable flow control is enabled on this port. Device Status Indicates whether or not the given port's link status is monitored by the device status.
  • Page 118: Shutdown

    4.5 Device Configuration Commands 4.5.21 shutdown This command disables a port. Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port. Format no shutdown Mode Interface Config CLI L2B Release 4.0 11/07...
  • Page 119: Shutdown All

    4.5 Device Configuration Commands 4.5.22 shutdown all This command disables all ports. Default enabled Format shutdown all Mode Global Config no shutdown all This command enables all ports. Format no shutdown Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 120: Snmp Trap Link-Status

    4.5 Device Configuration Commands 4.5.23 snmp trap link-status This command enables link status traps by interface. Note: This command is valid only when the Link Up/Down Flag is enabled. See ‘snmp-server enable traps linkmode’ command. Format snmp trap link-status Mode Interface Config no snmp trap link-status This command disables link status traps by interface.
  • Page 121: Snmp Trap Link-Status All

    4.5 Device Configuration Commands 4.5.24 snmp trap link-status all This command enables link status traps for all interfaces. Note: This command is valid only when the Link Up/Down Flag is enabled (see “snmp-server enable traps linkmode” ). Format snmp trap link-status all Mode Global Config no snmp trap link-status all...
  • Page 122: Speed

    4.5 Device Configuration Commands 4.5.25 speed This command sets the speed and duplex setting for the interface. Format speed { <100 | 10> <half-duplex | full-duplex> | 1000 full-duplex} Mode Interface Config Acceptable values are: 1000f 1000BASE-T full duplex 100h 100BASE-T half duplex 100f 100BASE-T full duplex...
  • Page 123: User Account Management Commands

    4.6 User Account Management Commands User Account Management Commands These commands manage user accounts. 4.6.1 disconnect This command closes a telnet session. Format disconnect { <sessionID> | all} Mode Privileged EXEC CLI L2B Release 4.0 11/07...
  • Page 124: Show Loginsession

    4.6 User Account Management Commands 4.6.2 show loginsession This command displays current telnet and serial port connections to the switch. Format show loginsession Mode Privileged EXEC and User EXEC Login Session ID User Name The name the user will use to login using the serial port or Telnet. A new user may be added to the switch by entering a name in a blank entry.
  • Page 125: Show Users

    4.6 User Account Management Commands 4.6.3 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system. Format show users Mode...
  • Page 126: Users Defaultlogin

    4.6 User Account Management Commands 4.6.4 users defaultlogin Enter an alphanumeric string of not more than 15 characters. Format users defaultlogin < > listname Mode Global Config no users name This command removes an operator. Format no users default < listname>...
  • Page 127: Users Login

    4.6 User Account Management Commands 4.6.5 users login Enter user name. Format users login < > listname Mode Global Config no users name This command removes an operator. Format no users login < listname> Mode Global Config Note: The ‘admin’ user account cannot be deleted. CLI L2B Release 4.0 11/07...
  • Page 128: Users Name

    4.6 User Account Management Commands 4.6.6 users name This command adds a new user (account) if space permits. The account <username> can be up to eight characters in length. The name may be com- prised of alphanumeric characters as well as the dash (‘-’) and underscore (‘_’).
  • Page 129: Users Passwd

    4.6 User Account Management Commands 4.6.7 users passwd This command is used to change a password. The password should not be more than eight alphanumeric characters in length. If a user is authorized for authentication or encryption is enabled, the password must be at least eight alphanumeric characters in length.
  • Page 130: Users Snmpv3 Accessmode

    4.6 User Account Management Commands 4.6.8 users snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user. The valid accessmode values are readonly or readwrite. The <username> is the login user name for which the specified access mode applies.
  • Page 131: Users Snmpv3 Authentication

    4.6 User Account Management Commands 4.6.9 users snmpv3 authentication This command specifies the authentication protocol to be used for the specified login If md5 or sha are none user. The valid authentication protocols are specified, the user login password is also used as the snmpv3 authentication password and therefore must be at least eight characters in length.
  • Page 132: Users Snmpv3 Encryption

    4.6 User Account Management Commands 4.6.10 users snmpv3 encryption This command specifies the encryption protocol to be used for the specified login user. The valid encryption protocols are des or none. If des is specified, the required key may be specified on the command line. The key may be up to 16 characters long.
  • Page 133: System Utilities

    4.7 System Utilities System Utilities This section describes system utilities. 4.7.1 clear eventlog Clear the event log. The CLI will ask for confirmation. Answer y (yes) or n (no). The CLI displays the end of this operation. Format clear eventlog Mode Privileged EXEC 4.7.2 traceroute...
  • Page 134: Clear Arp-Table-Switch

    4.7 System Utilities Mode Privileged EXEC 4.7.3 clear arp-table-switch This command clears the agent´s ARP table (cache). Format clear arp-table-switch Mode Privileged EXEC CLI L2B Release 4.0 11/07...
  • Page 135: Clear Config

    4.7 System Utilities 4.7.4 clear config This command resets the configuration to the factory defaults without power- ing off the switch. Format clear config Mode Privileged EXEC 4.7.5 clear counters This command clears the stats for a specified <slot/port>or for all the ports or for the entire switch based upon the argument.
  • Page 136: Clear Igmpsnooping

    4.7 System Utilities 4.7.7 clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Data- base. Format clear igmpsnooping Mode Privileged EXEC 4.7.8 clear mac-addr-table This command clears the switch's MAC address table (the forwarding data- base that contains the learned MAC addresses).
  • Page 137: Clear Pass

    4.7 System Utilities 4.7.9 clear pass This command resets all user passwords to the factory defaults without pow- ering off the switch. You are prompted to confirm that the password reset should proceed. Format clear pass Mode Privileged EXEC 4.7.10 clear signal-contact This command clears the signal-contact output configuration.
  • Page 138: Copy

    4.7 System Utilities 4.7.11 copy This command uploads and downloads to/from the switch. Remote URLs can be specified using tftp. A list of valid commands is provided below. The command can be used to the save the running configuration to nvram by specifying the source as system:running-config and the destination as nvram:startup-config.
  • Page 139: Device-Status

    4.7 System Utilities 4.7.12 device-status This command configures the device status link error monitoring for this port. Default ignore Format device-status connection-error {ignore|propagate} Mode Interface Config 4.7.13 device-status This command configures the device-status. Format device-status {monitor {aca-removal|all |connection-error|fan-broken |module-removal |power-supply-1| power-supply-2 |power-supply-3-1|power-supply-3-2 |power-supply-4-1|power-supply-4-2 |temperature} {error|ignore}...
  • Page 140: Logout

    4.7 System Utilities trap Configure if a trap is sent when the device status changes its state. – enable enables sending traps, – disable disables sending traps. 4.7.14 logout This command closes the current telnet connection or resets the current se- rial connection.
  • Page 141: Ping

    4.7 System Utilities 4.7.15 ping This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in- band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
  • Page 142 4.7 System Utilities {mode {auto|device-status|manual} |monitor {aca-removal|all|connection-error |fan-broken|module-removal |power-supply-1| power-supply-2 |power-supply-3-1|power-supply-3-2 |power-supply-4-1|power-supply-4-2 |temperature} {disable|enable} |state {closed|open} |trap {disable|enable} } Mode Global Config Contact No. Selection of the signal contact: – 1 signal contact 1, – 2 signal contact 2, – all signal contact 1 and signal contact 2. mode Selection of the operational mode: –...
  • Page 143: Temperature

    4.7 System Utilities 4.7.18 temperature This command configures the lower and upper temperature limit for the device. If these limits are exceeded, a trap is sent. The unit for the temperature limit is °C (Celsius), the minimum value is -99, the maximum val- ue is 99.
  • Page 144: Reload

    4.7 System Utilities 4.7.20 reload This command resets the switch (warm start, See “reboot” on page 143). Reset means that all network connections are terminated and the boot code executes. The switch uses the stored configuration to initialize the switch. You are prompted to confirm that the reset should proceed.
  • Page 145: Lldp - Link Layer Discovery Protocol

    4.8 LLDP - Link Layer Discovery Protocol LLDP - Link Layer Discovery Protocol These commands show and configure the LLDP parameters in compliance with IEEE 802.1 AB. 4.8.1 show lldp This command shows all LLDP settings. Format show lldp Mode Privileged EXEC and User EXEC 4.8.2 show lldp config...
  • Page 146: Show Lldp Config Chassis

    4.8 LLDP - Link Layer Discovery Protocol 4.8.3 show lldp config chassis This command shows all LLDP configuration settings concerning the entire device. Format show lldp config chassis Mode Privileged EXEC and User EXEC 4.8.4 show lldp config chassis admin-state Display the LLDP/IEEE802.1AB functionality on this device.
  • Page 147: Show Lldp Config Chassis Notification-Interval

    4.8 LLDP - Link Layer Discovery Protocol 4.8.5 show lldp config chassis notification- interval Display the LLDP minimum notification trap interval (unit: seconds). Format show lldp config chassis notification-interval Mode Privileged EXEC and User EXEC 4.8.6 show lldp config chassis re-init-delay Display the LLDP configuration's chassis re-initialization delay (unit: seconds).
  • Page 148: Show Lldp Config Chassis Tx-Delay

    4.8 LLDP - Link Layer Discovery Protocol 4.8.7 show lldp config chassis tx-delay Display the LLDP transmit delay (unit: seconds). It indicates the delay between successive LLDP frame transmissions. Format show lldp config chassis tx-delay Mode Privileged EXEC and User EXEC 4.8.8 show lldp config chassis tx-hold-mult Display the LLDP transmit hold multiplier, a time-to-live value expressed as...
  • Page 149: Show Lldp Config Port

    Display the port's LLDP admin state (if LLDP/IEEE802.1AB frames will be transmitted and/or received). fdb-mode Display the port's LLDP FDB mode. hm-mode Display the port's LLDP Hirschmann mode. max-neighbors Display the port's max. no. of LLDP neighbors. notification Display the port's LLDP notification (trap) setting.
  • Page 150: Show Lldp Config Port Tlv

    4.8 LLDP - Link Layer Discovery Protocol 4.8.11 show lldp config port tlv This command shows all LLDP TLV configuration settings (if the given infor- mation is included in the sent LLDP frames or not) concerning one or all ports. Format show lldp config port <{slot/port|all}>...
  • Page 151: Show Lldp Remote-Data

    4.8 LLDP - Link Layer Discovery Protocol 4.8.12 show lldp remote-data This command shows all LLDP remote-data settings and states concerning one or all ports. Format show lldp remote-data <{slot/port|all}> Mode Privileged EXEC and User EXEC chassis-id Display the remote data's chassis ID only. detailed Display remote data in detailed format (i.
  • Page 152: Lldp

    4.8 LLDP - Link Layer Discovery Protocol summary Display remote data in summary format (table with most important data only, strings will be truncated if necessary, indicated by an appended '>' character). sys-desc Display the remote data's system description only. sys-name Display the remote data's system name only.
  • Page 153: Lldp Config Chassis Admin-State

    4.8 LLDP - Link Layer Discovery Protocol 4.8.14 lldp config chassis admin-state Configure the LLDP/IEEE802.1AB functionality on this device. If disabled, the LLDP protocol will become inactive, but the LLDP MIBs can still be accessed. off: Disable the LLDP/IEEE802.1AB functionality. on: Enable the LLDP/IEEE802.1AB functionality.
  • Page 154: Lldp Config Chassis Re-Init-Delay

    4.8 LLDP - Link Layer Discovery Protocol 4.8.16 lldp config chassis re-init-delay Configure the LLDP re-initialization delay (unit: seconds, min.: 1 sec., max.: 10 sec., default: 2 sec.). Format lldp config chassis re-init-delay Mode Global Config 4.8.17 lldp config chassis tx-delay Configure the LLDP transmit delay, the delay between successive LLDP frame transmissions (unit: seconds, min.: 1 sec., max.: 8192 sec., default: 2 sec.).
  • Page 155: Lldp Config Chassis Tx-Hold-Mult

    4.8 LLDP - Link Layer Discovery Protocol 4.8.18 lldp config chassis tx-hold-mult Configure the LLDP transmit hold multiplier, a time-to-live value expressed as a multiple of the LLDP Message Tx Interval (tx-interval), min.: 2, max.: 10, default: 4. Format lldp config chassis tx-hold-mult Mode Global Config 4.8.19 lldp chassis tx-interval...
  • Page 156: Clear Lldp Config All

    4.8 LLDP - Link Layer Discovery Protocol 4.8.20 clear lldp config all Clear the LLDP configuration, i. e., set all configurable parameters to default values (all chassis- as well as port-specific parameters at once). Note: LLDP Remote data remains unaffected. Format clear lldp config all Mode...
  • Page 157: Lldp Fdb-Mode

    <{lldp-only|mac-only|lldp-and- mac|autodetect}> Mode Interface Config 4.8.23 lldp hm-mode Configure the port's LLDP Hirschmann mode (if LLDP/IEEE802.1AB frames will be transmitted to and/or received from the Hirschmann-specific multicast address 01:80:63:2f:ff:0b). The default setting is tx-and-rx. Format lldp hm-mode <{tx-only|rx-only|tx-and-rx|off}> Mode...
  • Page 158: Lldp Max-Neighbors

    4.8 LLDP - Link Layer Discovery Protocol 4.8.24 lldp max-neighbors Configure the port's LLDP max. no. of neighbors (min.: 1, max.: 50, default: 10). Format lldp max-neighbors <1..50 (10)> Mode Interface Config 4.8.25 lldp notification Configure the port's LLDP notification setting (on or off, default: off). Format lldp notification <{off|on}>...
  • Page 159: Lldp Tlv Mac-Phy-Config-State

    4.8 LLDP - Link Layer Discovery Protocol 4.8.27 lldp tlv mac-phy-config-state Configure the port's LLDP TLV inclusion of MAC Phy. Cfg. State (on or off, default: on). Format lldp tlv mac-phy-config-state <{off|on}> Mode Interface Config 4.8.28 lldp tlv max-frame-size Configure the port's LLDP TLV inclusion of Max. Frame Size (on or off, default: on).
  • Page 160: Lldp Tlv Port-Desc

    4.8 LLDP - Link Layer Discovery Protocol 4.8.30 lldp tlv port-desc Configure the port's LLDP TLV inclusion of Port Description (on or off, default: on). Format lldp tlv port-desc <{off|on}> Mode Interface Config 4.8.31 lldp tlv protocol Configure the port's LLDP TLV inclusion of Protocol (on or off, default: on). Format lldp tlv protocol <{off|on (on)}>...
  • Page 161: Lldp Tlv Sys-Desc

    4.8 LLDP - Link Layer Discovery Protocol 4.8.33 lldp tlv sys-desc Configure the port's LLDP TLV inclusion of System Description (on or off, default: on). Format lldp tlv sys-desc <{off|on}> Mode Interface Config 4.8.34 lldp tlv sys-name Configure the port's LLDP TLV inclusion of System Name (on or off, default: on).
  • Page 162 4.8 LLDP - Link Layer Discovery Protocol CLI L2B Release 4.0 11/07...
  • Page 163: Sntp - Simple Network Time Protocol

    4.9 SNTP - Simple Network Time Protocol SNTP - Simple Network Time Protocol These commands show and configure the SNTP parameters. 4.9.1 show sntp This command shows all SNTP settings. Format show sntp Mode Privileged EXEC and User EXEC 4.9.2 show sntp anycast This command shows all SNTP anycast configuration settings.
  • Page 164: Show Sntp Client

    4.9 SNTP - Simple Network Time Protocol transmit-interval Show the SNTP Server's interval for sending Anycast messages (unit: seconds). 4.9.3 show sntp client This command shows all SNTP anycast configuration settings. Format show sntp client Mode Privileged EXEC and User EXEC accept-broadcast Show if the SNTP Client accepts SNTP broadcasts.
  • Page 165: Show Sntp Operation

    4.9 SNTP - Simple Network Time Protocol 4.9.4 show sntp operation This command shows if the SNTP function is enabled or disabled. Format show sntp operation Mode Privileged EXEC and User EXEC 4.9.5 show sntp status This command shows the SNTP state, synchronization and error messages. Format show sntp status Mode...
  • Page 166: Show Sntp Time

    4.9 SNTP - Simple Network Time Protocol 4.9.6 show sntp time This command shows time and date. Format show sntp time Mode Privileged EXEC and User EXEC sntp Show the current SNTP date and UTC time. system Show the local system's current date and time. 4.9.7 no sntp This command disables sntp.
  • Page 167: Sntp Anycast Address

    4.9 SNTP - Simple Network Time Protocol 4.9.8 sntp anycast address Set the SNTP server's anycast destination IP Address, default: 0.0.0.0 (none). Format sntp anycast address <Ziel-IP-Adresse> Mode Global Config no sntp anycast address Set the SNTP server's anycast destination IP Address to 0.0.0.0. Format no sntp anycast address Mode...
  • Page 168: Sntp Client Accept-Broadcast

    4.9 SNTP - Simple Network Time Protocol 4.9.10 sntp client accept-broadcast Enable/Disable that the SNTP Client accepts SNTP broadcasts. Format sntp client accept-broadcast <on | off> Mode Global Config no sntp accept-broadcast Disable the SNTP Client accepts SNTP broadcasts. Format no sntp client accept-broadcast Mode Global Config...
  • Page 169: Sntp Client Request-Interval

    4.9 SNTP - Simple Network Time Protocol 4.9.12 sntp client request-interval The synchronization interval in seconds, default: 30. Format sntp client request-interval <1-3600> Mode Global Config 4.9.13 no sntp client server Disable the SNTP client servers. Format no sntp client server Mode Global Config 4.9.14 sntp client server primary...
  • Page 170 4.9 SNTP - Simple Network Time Protocol no sntp client server primary Disable the primary SNTP client server. Format no sntp client server primary Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 171: Sntp Client Server Secondary

    4.9 SNTP - Simple Network Time Protocol 4.9.15 sntp client server secondary Set the SNTP Client's secondary server IP Address, default: 0.0.0.0 (none). Format sntp client server secondary <IP-Adresse> Mode Global Config no sntp client server secondary Disable the secondary SNTP client server. Format no sntp client server secondary Mode...
  • Page 172: Sntp Operation

    4.9 SNTP - Simple Network Time Protocol 4.9.16 sntp operation Enable/Disable the SNTP function. Format sntp operation <on | off> Mode Global Config no sntp operation Disable the SNTP Client and Server. Format no sntp operation Mode Global Config 4.9.17 sntp time system Set the current sntp time.
  • Page 173: Poe - Power Over Ethernet

    4.10 PoE - Power over Ethernet 4.10 PoE - Power over Ethernet These commands show and configure the Power over Ethernet (IEEE 802.3af) parameters. PoE is available for MACH 4002 devices with PoE modules. 4.10.1 show inlinepower This command shows global Inline Power settings PoE. Format show inlinepower Mode...
  • Page 174: Inlinepower

    4.10 PoE - Power over Ethernet 4.10.3 inlinepower Configure the global Inline Power parameters. Format inlinepower {admin-mode {disable|enable} | trap {disable|enable} | threshold <1-99> } Mode Global Config admin-mode Configure the global Inline Power administrative setting (enable or disable, default: enable). trap Configure the Inline Power notification (trap) setting (enable or dis- able, default: disable).
  • Page 175: Inlinepower

    4.10 PoE - Power over Ethernet 4.10.4 inlinepower Configure the portrelated Inline Power parameters. Note: The interface name you enter in the name-command. Format inlinepower {admin-mode {disable|enable} | priority {critical|high|low} } Mode Interface Config admin-mode Configure the port-related Inline Power administrative setting (enable or disable, default: enable).
  • Page 176 4.10 PoE - Power over Ethernet CLI L2B Release 4.0 11/07...
  • Page 177: Cli Commands: Switching

    CLI Commands: Switching 5 CLI Commands: Switching This section provides detailed explanation of the Switching commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other information. Configuration Commands configure features and options of the switch. For every configuration command there is a show command that displays the configuration setting.
  • Page 178 CLI Commands: Switching CLI L2B Release 4.0 11/07...
  • Page 179: Mrp

    CLI Commands: Switching 5.1 MRP 5.1 MRP The concept of the MRP-Ring enables the construction of high-availability, ring-shaped network structures. It is possible to mix the devices that support this function in any combination within the MRP ring. If a line section fails, the ring structure of up to 50 switches typically trans- forms back to a line-type configuration within 150 ms (maximum 500 ms).
  • Page 180: Show Mrp Current-Domain

    CLI Commands: Switching 5.1 MRP 5.1.2 show mrp current-domain This command displays the settings and states of the MRP-Ring´s current domain. The following details are displayed on execution of the command. If you omit the optional keywords (e. g., advanced-mode), all settings will be displayed.
  • Page 181: Mrp

    CLI Commands: Switching 5.1 MRP 5.1.3 mrp Configure the MRP Ring. Format Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 182: Mrp Current-Domain

    CLI Commands: Switching 5.1 MRP 5.1.4 mrp current-domain Specify that you want to configure the current MRP domain's settings. Default none Format mrp current-domain {advanced-mode {disable|enable} | name <domain-name> | operation {disable|enable} | port {primary|secondary} <slot/port>} Mode Global Config advanced-mode Enable or disable the switch's advanced mode for the given MRP domain.
  • Page 183: Mrp Delete-Domain

    CLI Commands: Switching 5.1 MRP 5.1.5 mrp delete-domain Delete current MRP domain. Format mrp delete-domain current-domain Mode Global Config 5.1.6 mrp new-domain Create a new MRP domain. The configuration will consist of default parame- ters and its operation will be disabled. Default n/a not set Format...
  • Page 184 CLI Commands: Switching 5.1 MRP CLI L2B Release 4.0 11/07...
  • Page 185: Hiper-Ring

    HIPER-Ring are connected with each other via their ring ports. Exactly one redundancy manager assumes control of the ring. These commands are for configuring the Hirschmann High Performance Redundancy Ring. Further information concerning this function you will find in the manual of the switch.
  • Page 186: Show Hiper-Ring

    CLI Commands: Switching 5.2 HIPER-Ring 5.2.1 show hiper-ring This command displays the settings and states of the HIPER-Ring. The fol- lowing details are displayed on execution of the command. Format show hiper-ring Mode Privileged EXEC and User EXEC info Display the information about the HIPER-Ring configuration (cabling). mode Display the HIPER-Ring mode settings.
  • Page 187: Show Hiper-Ring Info

    CLI Commands: Switching 5.2 HIPER-Ring 5.2.2 show hiper-ring info HIPER-Ring setup information. Format show hiper-ring info Mode Privileged EXEC and User EXEC 5.2.3 hiper-ring Configure the HIPER-Ring. Format hiper-ring Mode Global Config no hiper-ring Clear the HIPER Ring configuration (delete it). Format no hiper-ring Mode...
  • Page 188: Hiper-Ring Mode

    CLI Commands: Switching 5.2 HIPER-Ring 5.2.4 hiper-ring mode This command sets the HIPER-Ring mode. Possible values are: ring-switch Set the switch's HIPER Ring mode to Ring Switch. rs Abbreviation of Ring Switch. Default none Format hiper-ring mode <ring-switch | rs> Mode Global Config 5.2.5 hiper-ring port primary...
  • Page 189: Hiper-Ring Port Secondary

    CLI Commands: Switching 5.2 HIPER-Ring 5.2.6 hiper-ring port secondary Enter the switch's secondary HIPER Ring port. Default n/a not set Format hiper-ring port primary (<slot/port>) Mode Global Config CLI L2B Release 4.0 11/07...
  • Page 190 CLI Commands: Switching 5.2 HIPER-Ring CLI L2B Release 4.0 11/07...
  • Page 191: Dhcp Relay Commands

    CLI Commands: Switching 5.3 DHCP Relay Commands 5.3 DHCP Relay Commands These commands configure the DHCP Relay parameters. The commands are divided by functionality into these different groups: Configuration Commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
  • Page 192: Dhcp-Relay

    CLI Commands: Switching 5.3 DHCP Relay Commands 5.3.2 dhcp-relay Set different options for BOOTP/DHCP relay and option 82 inclusion. Format dhcp-relay {opt82 {operation {disable|enable}| man-id <Manual Remote ID>| remote-id-type {client-id|ip|mac|other}|server- address <Server-ID (1..4)> <Server IP Address> Mode Global Config dhcp-relay opt82 operation {disable|enable} Enable/Disable option 82 globally.
  • Page 193: Dhcp-Relay

    {disable|enable} Enable or disable the forwarding of DHCP requests that are received on this port. Enable this parameter if a Hirschmann DHCP client is connected to this port. Default: disable. Disable this parameter if a Non-Hirschmann DHCP client is con- nected to this port (these devices send normal broadcast DHCP requests;...
  • Page 194 CLI Commands: Switching 5.3 DHCP Relay Commands CLI L2B Release 4.0 11/07...
  • Page 195: Cli Commands: Security

    CLI Commands: Security 6 CLI Commands: Security This chapter provides a detailed explanation of the Security commands. The following Security CLI commands are available in the software Switching Package. Use the security commands to configure security settings for login users and port users. The commands are divided into these different groups: Show commands are used to display device settings, statistics and other information.
  • Page 196 CLI Commands: Security CLI L2B Release 4.0 11/07...
  • Page 197: Security Commands

    CLI Commands: Security 6.1 Security Commands 6.1 Security Commands 6.1.1 users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is config- ured locally.
  • Page 198: Users Login

    CLI Commands: Security 6.1 Security Commands 6.1.2 users login This command assigns the specified authentication login list to the specified user for system login. The <user> must be a configured <user> and the <listname> must be a configured login list. If the user is assigned a login list that requires remote authentication, all ac- cess to the interface from all CLI, web, and telnet sessions will be blocked until the authentication is complete.
  • Page 199: Http Commands

    CLI Commands: Security 6.2 HTTP Commands 6.2 HTTP Commands 6.2.1 ip http secure-port This command is used to set the sslt port where port can be 1-65535 and the default is port 443. Default Format ip http secure-port <portid> Mode Privileged EXEC no ip http secure-port This command is used to reset the sslt port to the default value.
  • Page 200: Ip Http Secure-Protocol

    CLI Commands: Security 6.2 HTTP Commands 6.2.2 ip http secure-protocol This command is used to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Default SSL3 and TLS1 Format ip http secure-protocol [SSL3] [TLS1] Mode Privileged EXEC CLI L2B...
  • Page 201: Ip Http Secure-Server

    CLI Commands: Security 6.2 HTTP Commands 6.2.3 ip http secure-server This command is used to enable the secure socket layer for secure HTTP. Default disabled Format ip http secure-server Mode Privileged EXEC no ip http secure-server This command is used to disable the secure socket layer for secure HTTP. Format ip http secure-server Mode...
  • Page 202: Ip Http Server

    CLI Commands: Security 6.2 HTTP Commands 6.2.4 ip http server This command enables access to the switch through the Web interface. When access is enabled, the user can login to the switch from the Web inter- face. When access is disabled, the user cannot login to the switch's Web server.
  • Page 203: Show Ip Http

    CLI Commands: Security 6.2 HTTP Commands 6.2.5 show ip http This command displays the http settings for the switch. Format show ip http Mode Privileged EXEC and User EXEC Secure-Server Administrative Mode This field indicates whether the administrative mode of secure HTTP is enabled or disabled.
  • Page 204 CLI Commands: Security 6.2 HTTP Commands CLI L2B Release 4.0 11/07...
  • Page 205: Glossary

    Glossary 7 Glossary Numerics (LAN). This Layer 2 network standard improves support of time critical traffic, and limits the extent of 802.1D. The IEEE designator for high bandwidth multicast traffic Spanning Tree Protocol (STP). STP, within a bridged LAN. To do this, a link management protocol, is part 802.1P defines a methodology for of the 802.1D standard for media...
  • Page 206 (hardware) addresses on a LAN. Boundary Router” on page 206. Advanced Network Device Layer/ ATM Subscriber Access Software. Hirschmann term for the Multiplexer. A telephone central Device Driver level. office multiplexer that supports SDL Aging. When an entry for a node is...
  • Page 207 Glossary metrics based on policy statements. (BGP-4 is sometimes called BGP4, without the hyphen.) BGP BPDU. See “Bridge Protocol Data communicates with autonomous Unit” on page 207. (local) networks using Internal BGP BGP. See “Border Gateway (IBGP) since it doesn't work well Protocol”...
  • Page 208 (In the case of construction. Hirschmann, it is one of the user interfaces they have programmed COPS. See “Common Open Policy for allowing programmers to Service Protocol.” on page 208.
  • Page 209 Glossary Device Application Programming A six-bit field, known as the Interface. DAPI is the software Differentiated Services Code Point interface that facilitates (DSCP), in the Internet Protocol communication of both data and (Internet Protocol) header specifies control information between the the per hop behavior for a given flow Application Layer and HAPI, with of packets.
  • Page 210 Glossary addresses rather than requiring an asynchronous communication is administrator to manage the task. A called xon-xoff. In this case, the new computer can be added to a receiving device sends a an “xoff” network without the hassle of message to the sending device manually assigning it a unique IP when its buffer is full.
  • Page 211 Glossary Group membership information with operation of the GARP Application the MAC Bridges attached to the concerned. same LAN segment, and for that Gigabit Ethernet. A high-speed information to be disseminated Ethernet connection. across all Bridges in the Bridged LAN that support Extended Filtering GIP.
  • Page 212 Glossary IGMP. See “Internet Group IP. See “Internet Protocol” on Management Protocol” on page 212. page 212. IGMP Snooping. A series of IP Multicasting. Sending out data operations performed by to distributed servers on the MBone intermediate systems to add logic to (Multicast Backbone).
  • Page 213 Glossary gateway recognizes the packet as server that can support IPv6 packets belonging to a computer within its can also support IPv4 packets. immediate neighborhood or domain. That gateway then forwards the packet directly to the computer whose address is specified. Joint Test Action Group.
  • Page 214 Glossary Learning. The bridge examines the what is called a WAN or Wide Area Layer 2 source addresses of every Network. frame on the attached networks (called listening) and then maintains a table, or cache, of which MAC addresses are attached to each of MAC.
  • Page 215 Glossary MDIX. Management Dependent will allow users to easily join Interface Crossover. multicast groups. Note that multicasting refers to sending a MIB. See “Management Information message to a select group whereas Base” on page 214. broadcasting refers to sending a message to everyone connected to MOSPF.
  • Page 216 Glossary autonomous system—or ISP—in fiber-optic cables to be plugged into order to simplify and improve IP- compatible devices as easily as packet exchange. MPLS gives plugging in a telephone cable. network operators a great deal of MUX. See “Multiplexing” on flexibility to divert and route traffic page 215.
  • Page 217 Glossary Open Shortest Path First. A link- PDU. See “Protocol Data Unit” on state (algorithm used by the router to page 218. determine the current topology of a PHY. The OSI Physical Layer: The network), Interior Gateway physical layer provides for (distributes routing information transmission of cells over a physical between routers belonging to a...
  • Page 218 Glossary first port will be forwarded onto the Throughput is the amount of data second port as well. The transferred from one device to administrator places a protocol another or processed in a specified analyzer on the port receiving the amount of time - typically, mirrored data to monitor each throughputs are measured in bytes...
  • Page 219 Glossary derived UNIX systems. Many Simple Network Management networks use RIP; it works well for Protocol. SNMP is the protocol small, isolated, and topologically governing network management and simple networks. the monitoring of network devices and their functions. It is not RIPng.
  • Page 220 Glossary of SNMPv2p and SNMPv2u. (It is stub area. OSPF area that carries also called SNMPv2star.) The a default route, intra-area routes, documents defing this version were and interarea routes, but does not never published as RFCs. carry external routes. Virtual links cannot be configured across a stub SNMPv3 (proposed): This version of area, and they cannot contain an...
  • Page 221 Glossary direct protocol used to communicate across a large, extended LAN. The datagrams over a network with little VLAN identifier is part of the 802.1Q error recovery) and provides no tag, which is added to an Ethernet security features. It is often used by frame by an 802.1Q-compliant servers to boot diskless switch or router.
  • Page 222 Glossary XModem. One of the most popular file transfer protocols (FTPs). Xmodem is fairly effective at WAN. See “Wide Area Network” on detecting errors. It sends blocks of page 222. data together with a checksum and Web. Also known as World-Wide then waits for acknowledgment of Web (WWW) or W3.
  • Page 223: Index

    Index 8 Index areaid hiper-ring auto-negotiate hiper-ring mode auto-negotiate all hiper-ring port primary hiper-ring port secondary bridge aging-time inlinepower 174, 175 Interface Config Mode classofservice dot1pmapping inventory 112, 113, 114 classofservice ip-dscp-mapping ip http secure-port classofservice trus ip http secure-protocol clear arp-table-switch ip http secure-server clear commands...
  • Page 224 Index logging host remove set igmp automatic-mode logical slot/port set igmp forward-all 106, 107 logout set igmp groupmembershipinterval logout command set igmp interfacemode all set igmp maxresponse set prompt macaddr show arp media-module remove show arp switch 38, 38, 38, 38, 49, 49 monitor session show bridge aging-time monitor session mode...
  • Page 225 Index show port system utilities 133–141, 141, 195 show running-config 51, 52 show serial show snmpcommunity 72, 73 telnet show snmptrap sessions, closing 123, 140 show sntp sessions, displaying 124 show sntp anycast temperature show sntp client traceroute show sntp operation transport input telnet show sntp status trap log...
  • Page 226 Index CLI L2B Release 4.0 11/07...
  • Page 227: Hirschmann Competence

    Hirschmann Competence In the longterm, product excellence alone is not an absolute guarantee of a successful project implementation. Comprehensive service makes a differ- ence worldwide. In the current scenario of global competition, the Hir- schmann Competence Center stands head and shoulders above the...

Table of Contents