Reference Manual Command Line Interface Industrial ETHERNET Gigabit Switch RS20 CLI L2B Technical Support Release 4.0 11/07 HAC-Support@hirschmann.de...
Page 2
This publication has been created by Hirschmann Automation and Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change the contents of this manual without prior notice. Hirschmann can give no guarantee in respect of the correctness or accuracy of the details in this publication.
Content Content Content Command Structure Format 1.1.1 Command 1.1.2 Parameters 1.1.3 Values 1.1.4 Conventions 1.1.5 Annotations 1.1.6 Special keys 1.1.7 Special characters in scripts 1.1.8 Secrets in scripts Quick Start up Quick Starting the Switch System Info and System Setup Mode-based CLI Mode-based Topology Mode-based Command Hierarchy...
Page 4
Content 4.1.7 show interface 4.1.8 show interface ethernet 4.1.9 show interface switchport 4.1.10 show logging 4.1.11 show mac-addr-table 4.1.12 show signal-contact 4.1.13 show running-config 4.1.14 show sysinfo 4.1.15 show temperature 4.1.16 snmp-server Class of Service (CoS) Commands 4.2.1 classofservice dot1p-mapping 4.2.2 classofservice ip-dscp-mapping 4.2.3 classofservice trust 4.2.4 show classofservice dot1p-mapping...
Page 6
Content 4.5.20 show port 4.5.21 shutdown 4.5.22 shutdown all 4.5.23 snmp trap link-status 4.5.24 snmp trap link-status all 4.5.25 speed User Account Management Commands 4.6.1 disconnect 4.6.2 show loginsession 4.6.3 show users 4.6.4 users defaultlogin 4.6.5 users login 4.6.6 users name 4.6.7 users passwd 4.6.8 users snmpv3 accessmode 4.6.9 users snmpv3 authentication...
Page 7
Content 4.8.1 show lldp 4.8.2 show lldp config 4.8.3 show lldp config chassis 4.8.4 show lldp config chassis admin-state 4.8.5 show lldp config chassis notification-interval 4.8.6 show lldp config chassis re-init-delay 4.8.7 show lldp config chassis tx-delay 4.8.8 show lldp config chassis tx-hold-mult 4.8.9 show lldp chassis tx-interval 4.8.10 show lldp config port 4.8.11 show lldp config port tlv...
Page 8
Content 4.9.6 show sntp time 4.9.7 no sntp 4.9.8 sntp anycast address 4.9.9 sntp anycast transmit-interval 4.9.10 sntp client accept-broadcast 4.9.11 sntp client offset 4.9.12 sntp client request-interval 4.9.13 no sntp client server 4.9.14 sntp client server primary 4.9.15 sntp client server secondary 4.9.16 sntp operation 4.9.17 sntp time system 4.10 PoE - Power over Ethernet...
Page 9
CLI Commands: Security Security Commands 6.1.1 users defaultlogin 6.1.2 users login HTTP Commands 6.2.1 ip http secure-port 6.2.2 ip http secure-protocol 6.2.3 ip http secure-server 6.2.4 ip http server 6.2.5 show ip http Glossary Index Hirschmann Competence CLI L2B Release 4.0 11/07...
Command Structure 1 Command Structure The Command Line Interface (CLI) syntax, conventions and terminology are described in this section. Each CLI command is illustrated using the structure outlined below. CLI L2B Release 4.0 11/07...
Command Structure 1.1 Format 1.1 Format Commands are followed by values, parameters, or both. Example 1 network parms <ipaddr> <netmask> [gateway] network parms is the command name. <ipaddr> <netmask> are the required values for the command. [gateway] is the optional value for the command. Example 2 snmp-server location <loc>...
Command Structure 1.1 Format 1.1.1 Command The text in courier font must be typed exactly as shown. 1.1.2 Parameters Parameters are order dependent. Parameters may be mandatory values, optional values, choices, or a combi- nation. <parameter>. The <> angle brackets indicate that a mandatory param- eter must be entered in place of the brackets and text inside them.
Command Structure 1.1 Format 1.1.3 Values ipaddr This parameter is a valid IP address, made up of four decimal bytes ranging from 0 to 255. The default for all IP parameters con- sists of zeros (that is, 0.0.0.1). The inter- face IP address of 0.0.0.0 is invalid.
Command Structure 1.1 Format 1.1.4 Conventions Network addresses are used to define a link to a remote host, workstation or network. Network addresses are shown using the following syntax: Address Type Format Range ipaddr 192.168.11.110 0.0.0.0 to 255.255.255.255 (decimal) macaddr A7:C9:89:DD:A9:B3 hexidecimal digit pairs Table 1: Network Address Syntax...
Command Structure 1.1 Format 1.1.5 Annotations The CLI allows the user to type single-line annotations at the command prompt for use when writing test or configuration scripts and for better read- ability. The exclamation point (‘!’) character flags the beginning of a com- ment.
Command Structure 1.1 Format 1.1.6 Special keys The following list of special keys may be helpful to enter command lines. delete previous character Ctrl-A go to beginning of line Ctrl-E go to end of line Ctrl-F go forward one character Ctrl-B go backward one character Ctrl-D...
Command Structure 1.1 Format 1.1.7 Special characters in scripts Some of the configuration parameters are strings that can contain special characters. When the switch creates a script from the running configuration (by use of the command #show running-config <scriptname.cli>), these spe- cial characters are written to the script with a so-called escape character pre- ceding them.
Page 19
Command Structure 1.1 Format The commands with strings that may contain these special characters are listed below. Note: Not every string is allowed to contain special characters. The string that is output with the escape characters (if necessary) is shown as "...". Command Note !System Description "..."...
Command Structure 1.1 Format 1.1.8 Secrets in scripts A configuration may include secrets (e. g., passwords). When creating a script, these secrets are written to it in a scrambled form, not in clear text. These secrets may be up to 31 characters long. The format for a scrambled secret is: ":v1:<scrambled secret>:"...
Quick Start up 2 Quick Start up The CLI Quick Start up details procedures to quickly become acquainted with the Hirschmann software. CLI L2B Release 4.0 11/07...
2.1 Quick Starting the Switch V Read the device Installation Guide for the connectivity procedure. In-band connectivity allows access to the Hirschmann software locally or from a remote workstation. The device must be configured with IP information (IP address, subnet mask, and default gateway).
Quick Start up 2.2 System Info and System Setup 2.2 System Info and System Setup Quick Start up Physical Port Data Command Details show port all Displays the Ports (in Privileged EXEC) slot/port Type - Indicates if the port is a special type of port Admin Mode - Selects the Port Control Administration State Physical Mode - Selects the desired port speed and duplex mode Physical Status - Indicates the port speed and duplex mode...
Page 24
Quick Start up 2.2 System Info and System Setup Command Details users passwd <user Allows the user to set passwords or change passwords name> needed to login (in Global Config) A prompt will appear after the command is entered requesting the users old password. In the absence of an old password leave the area blank.
Page 25
Quick Start up 2.2 System Info and System Setup Note: Helpful Hint: The user should do a ‘copy system:running-config nvram:startup-config’ after configuring the network parameters so that the configurations are not lost. Command Details show network Displays the Network Configurations (in User EXEC) IP Address - IP Address of the switch Default IP is 0.0.0.0...
Quick Start up 2.2 System Info and System Setup Quick Start up Downloading from TFTP Server Before starting a TFTP server download, the operator must complete the Quick Start up for the IP Address. Command Details Sets the destination (download) datatype to be an copy <url>...
The CLI groups all the commands in appropriate modes according to the na- ture of the command. A sample of the CLI command modes are described below. Each of the command modes support specific Hirschmann software commands. User Exec Mode...
Page 28
Mode-based CLI Command Mode Access Method Prompt Exit or Access Next Mode Stack Global Con- From the Global Switch (Config- To exit to Global Config- stack )# fig Mode Configuration uration mode enter exit. mode, enter the To return to user EXEC command mode, enter ctrl-Z stack...
Mode-based CLI 3.1 Mode-based Topology 3.1 Mode-based Topology The CLI tree is built on a mode concept where the commands are available according to the interface. Some of the modes are depicted in the mode- based CLI Figure 1. ROOT The User Exec commands User Exec are also accessible in the...
When the operator logs into the CLI, the User Exec mode is the initial mode. The User Exec mode contains a limited set of commands. The command prompt shown at this level is: Command Prompt: (Hirschmann PowerMICE)> Privileged Exec Mode To have access to the full suite of commands, the operator must enter the Privileged Exec mode.
Page 31
In this mode, a physical port is set up for a specific logical connection operation. The Interface Config mode provides access to the router interface configuration commands. The command prompt at this level Command Prompt: (Hirschmann PowerMICE)(Interface <slot/port>)# The resulting prompt for the interface configuration command entered...
If the operator has given an invalid input parameter in the command, then the message conveys to the operator an invalid input was detected. The layout of the output is depicted below: (Hirschmann PowerMICE)(exec) #show sspanning-tree %Invalid input detected at '^' marker. Fig. 2:...
Page 33
Mode-based CLI 3.3 Flow of Operation For mandatory parameters, the command tree extends till the mandatory parameters make the leaf of the branch. The callback function is only in- voked when all the mandatory parameters are provided. For optional pa- rameters, the command tree extends till the mandatory parameters and the optional parameters make the leaf of the branch.
Mode-based CLI 3.4 “No” Form of a Command 3.4 “No” Form of a Command “No” is a specific form of an existing command and does not represent a new or distinct command. Only the configuration commands are available in the “no”...
CLI Commands: Base 4 CLI Commands: Base This chapter provides detailed explanation of the Switching commands. The commands are divided into five functional groups: Show commands display switch settings, statistics, and other information. Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1 System Information and Statistics Commands 4.1.1 show arp switch This command displays the Address Resolution Protocol cache of the switch. Format show arp switch Mode Privileged EXEC and User EXEC 4.1.2 show bridge aging-time This command displays the timeout for address aging.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.3 show device-status The signal device status is for displaying the monitoring functions of the switch, the device status trap setting. Format show device-status [monitor|state|trap] Mode Privileged EXEC and User EXEC Device status monitor Displays the possible monitored events and which of them are monitored:...
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.4 show authentication This command displays users assigned to authentication login lists. Format show authentication [users <listname>] Mode Privileged EXEC and User EXEC 4.1.5 show classofservice This command displays class of service settings. Format show classofservice dot1p-mapping [slot/port] Mode...
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.6 show eventlog This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format show eventlog Mode Privileged EXEC and User EXEC File The file in which the event originated.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.7 show interface This command displays a summary of statistics for a specific port or a count of all CPU traffic based upon the argument. Format slot/port show interface { < >...
Page 41
CLI Commands: Base 4.1 System Information and Statistics Com- Broadcast Packets Received The total number of packets received that were directed to the broad- cast address. Note that this does not include multicast packets. Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.8 show interface ethernet This command displays detailed statistics for a specific port or for all CPU traffic based upon the argument. Format show interface ethernet {<slot/port> | switchport Mode Privileged EXEC and User EXEC The display parameters, when the argument is '<slot/port>', are as follows : Packets Received Octets Received - The total number of octets of data (including those...
Page 43
CLI Commands: Base 4.1 System Information and Statistics Com- octets in length inclusive (excluding framing bits but including FCS octets). Packets Received 1024-1518 Octets - The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
Page 44
CLI Commands: Base 4.1 System Information and Statistics Com- Alignment Errors - The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.
Page 45
CLI Commands: Base 4.1 System Information and Statistics Com- StatsPkts and etherStatsOctets objects should be sampled before and after a common interval. ----- Packets Transmitted 64 Octets - The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
Page 46
CLI Commands: Base 4.1 System Information and Statistics Com- Broadcast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent. Transmit Errors Total Errors - The sum of Single, Multiple, and Excessive Collisions. Tx FCS Errors - The total number of packets transmitted that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence...
Page 47
CLI Commands: Base 4.1 System Information and Statistics Com- STP BPDUs Transmitted - Spanning Tree Protocol Bridge Protocol Data Units sent STP BPDUs Received - Spanning Tree Protocol Bridge Protocol Data Units received RST BPDUs Transmitted - Rapid Spanning Tree Protocol Bridge Protocol Data Units sent RSTP BPDUs Received - Rapid Spanning Tree Protocol Bridge Pro- tocol Data Units received...
Page 48
CLI Commands: Base 4.1 System Information and Statistics Com- Packets Transmitted without Errors - The total number of packets transmitted out of the interface. Unicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a subnetwork-uni- cast address, including those that were discarded or not sent.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.9 show interface switchport This command displays data concerning the internal port to the management agent. Format show interface switchport Mode Privileged EXEC and User EXEC 4.1.10 show logging This command displays the trap log maintained by the switch. The trap log contains a maximum of 256 entries that wrap.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.11 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the optional parameter.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.12 show signal-contact The signal contact is for displaying the manual setting and the current state of the signal contact, the monitoring functions of the switch, the signal-contacts trap setting. Format show signal-contact [1|2|all [mode|monitor|state|trap]] Mode...
CLI Commands: Base 4.1 System Information and Statistics Com- Signal contact trap enabled A trap is sent if the signal contact state changes. disabled No trap is sent if the signal contact state changes. Note: To show the signal contact´s port related settings, use the command show port {<slot/port>...
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.14 show sysinfo This command displays switch information. Format show sysinfo Mode Privileged EXEC and User EXEC Alarm Displays the latest present Alarm for a signal contact. System Description Text used to identify this switch. System Name Name used to identify the switch.
Page 54
CLI Commands: Base 4.1 System Information and Statistics Com- Backplane Hardware Revision The hardware´s revision number. Backplane Hardware description The hardware´s device description. Serial Number (Backplane) The hardware´s serial number. Base MAC Address (Backplane) The hardware´s base MAC address. Number of MAC Addresses (Backplane) The number of hardware MAC addresses.
CLI Commands: Base 4.1 System Information and Statistics Com- 4.1.15 show temperature This command displays the lower and upper temperature limit for sending a trap. Format show temperature Mode Privileged EXEC and User EXEC 4.1.16 snmp-server This command sets the name and the physical location of the switch, and the organization responsible for the network.The range for name, location and contact is from 1 to 31 alphanumeric characters.
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2 Class of Service (CoS) Commands This chapter provides a detailed explanation of the QoS CoS commands. The following commands are available. The commands are divided into these different groups: Configuration Commands are used to configure features and options of the switch.
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.1 classofservice dot1p-mapping This command maps an 802.1p priority to an internal traffic class for a device when in ‘Global Config’ mode. The number of available traffic classes may vary with the platform. Userpriority and trafficclass can both be the range from 0-7.
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.2 classofservice ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The <ipdscp> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef.
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.3 classofservice trust This command sets the class of service trust mode of an interface. The mode can be set to trust one of the Dot1p (802.1p) or IP DSCP packet markings. Note: In trust ip-dscp mode the switch modifies the vlan priority for out- going frames according to –...
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.4 show classofservice dot1p-mapping This command displays the current 802.1p priority mapping to internal traffic classes for a specific interface. The slot/port parameter is required on platforms that support priority to traffic class mapping on a ‘per-port’ basis. Platforms that support priority to traffic class mapping on a per-port basis: Format show classofservice dot1p-mapping [<slot/port>]...
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.5 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic class- es for the global configuration settings. Format show classofservice ip-dscp-mapping Mode Privileged EXEC The following information is repeated for each user priority. IP DSCP The IP DSCP value.
CLI Commands: Base 4.2 Class of Service (CoS) Commands 4.2.6 show classofservice trust This command displays the current trust mode for the specified interface. The slot/port parameter is optional. If specified, the trust mode of the inter- face is displayed. If omitted, the most recent global configuration settings are displayed.
CLI Commands: Base 4.3 Management Commands 4.3 Management Commands These commands manage the switch and show current management settings. 4.3.1 transport input telnet This command regulates new telnet sessions. If sessions are enabled, new telnet sessions can be established until there are no more sessions available.
CLI Commands: Base 4.3 Management Commands 4.3.2 bridge aging-time This command configures the forwarding database address aging timeout in seconds. Default Format bridge aging-time < 10-630> Mode Global Config Seconds The <seconds> parameter must be within the range of 10 to 630 sec- onds.
CLI Commands: Base 4.3 Management Commands Mode Privileged EXEC no network javascriptmode When the user accesses the switch’s web interface, the switch’s web server will deliver a HTML page that contains no JavaScript. Format no network javamode Mode Privileged EXEC 4.3.4 network parms This command sets the IP Address, subnet mask and gateway of the router.
Page 66
CLI Commands: Base 4.3 Management Commands (BootP) server or a DHCP server until a response is received. none indicates that the switch should be manually configured with IP information. Independently of the BootP and DHCP settings, HiDiscovery can be configured as an additional protocol. Default None Format...
CLI Commands: Base 4.3 Management Commands 4.3.6 network priority This command configures the VLAN priority or the IP DSCP value for out- going management packets. The <ipdscp> is specified as either an integer from 0-63, or symbolically through one of the following keywords: af11,af12,af13,af21,af22,af23,af31,af32,af33,af41,af42,af43,be,cs0, cs1, cs2,cs3,cs4,cs5,cs6,cs7,ef.
CLI Commands: Base 4.3 Management Commands 4.3.7 serial timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected in- definitely. The time range is 0 to 160. Default Format serial timeout <...
CLI Commands: Base 4.3 Management Commands 4.3.8 set prompt This command changes the name of the prompt. The length of name may be up to 64 alphanumeric characters. Format set prompt < prompt string> Mode Privileged EXEC CLI L2B Release 4.0 11/07...
CLI Commands: Base 4.3 Management Commands 4.3.9 show network This command displays configuration settings associated with the switch's network interface. The network interface is the logical interface used for in- band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
CLI Commands: Base 4.3 Management Commands 4.3.10 show serial This command displays serial communication settings for the switch. Format show serial Mode Privileged EXEC and User EXEC Serial Port Login Timeout (minutes) Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection.
CLI Commands: Base 4.3 Management Commands 4.3.11 show snmp-access This command displays SNMP access information related to global and SNMP version settings. SNMPv3 is always enabled. Format show snmp-access Mode Privileged EXEC and User EXEC CLI L2B Release 4.0 11/07...
CLI Commands: Base 4.3 Management Commands 4.3.12 show snmpcommunity This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities. The switch does not have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP Version 1 (for more about the SNMP specification, see the SNMP RFCs).
CLI Commands: Base 4.3 Management Commands 4.3.13 show snmptrap This command displays SNMP trap receivers. Trap messages are sent across a network to an SNMP Network Manager. These messages alert the manager to events occurring within the switch or on the network. Six trap re- ceivers are simultaneously supported.
CLI Commands: Base 4.3 Management Commands 4.3.14 show trapflags This command displays trap conditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the trap to all enabled trap receivers.
CLI Commands: Base 4.3 Management Commands 4.3.15 snmp-access global This command configures the global SNMP access setting (for all SNMP versions). Format snmp-access global {disable|enable|read-only} Mode Global Config disable Disable SNMP access to this switch, regardless of the SNMP version used.
CLI Commands: Base 4.3 Management Commands 4.3.16 snmp-access version This command configures the SNMP version specific access mode for SNMPv1 and SNMPv2. Format snmp-access version {all|v1|v2} {disable|enable} Mode Global Config Enable or disable SNMP access by all protocol versions (v1 and v2). Enable or disable SNMP access by v1.
CLI Commands: Base 4.3 Management Commands 4.3.17 snmp-server community This command adds (and names) a new SNMP community. A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of name can be up to 16 case-sensitive characters.
CLI Commands: Base 4.3 Management Commands 4.3.18 snmp-server community ipaddr This command sets a client IP address for an SNMP community. The ad- dress is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
CLI Commands: Base 4.3 Management Commands 4.3.19 snmp-server community ipmask This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device.
CLI Commands: Base 4.3 Management Commands 4.3.20 snmp-server community mode This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch accord- ing to its access right. If the community is disabled, no SNMP requests using this community are accepted.
CLI Commands: Base 4.3 Management Commands 4.3.21 snmp-server community ro This command restricts access to switch information. The access mode is read-only (also called public). Format snmp-server community ro <name> Mode Global Config 4.3.22 snmp-server community rw This command restricts access to switch information. The access mode is read/write (also called private).
CLI Commands: Base 4.3 Management Commands 4.3.24 snmp-server location This command configures the system location. Format snmp-server location <system location> Mode Global Config 4.3.25 snmp-server sysname This command configures the system name. Format snmp-server sysname <system name> Mode Global Config CLI L2B Release 4.0 11/07...
CLI Commands: Base 4.3 Management Commands 4.3.26 snmp-server enable traps This command enables the Authentication Trap Flag. Default enabled Format snmp-server enable traps Mode Global Config no snmp-server enable traps This command disables the Authentication Trap Flag. Format no snmp-server enable traps Mode Global Config CLI L2B...
CLI Commands: Base 4.3 Management Commands 4.3.27 snmp-server enable traps chassis Configures whether traps that are related to the chassis functionality of the switch will be sent. These functions include the signal contacts, the ACA, warnings about the temperature, changes in the module map, addition or removal of SFP modules, power failure and the LLDP and SNTP features.
CLI Commands: Base 4.3 Management Commands 4.3.28 snmp-server enable traps l2redundancy Indicates whether traps that are related to the layer 2 redundancy features of the switch will be sent. The HiPER-Ring and the Redundant Coupling will tell you with these traps when the main line has failed or returned. May be enabled or disabled.
CLI Commands: Base 4.3 Management Commands 4.3.29 snmp-server enable traps linkmode This command enables Link Up/Down traps for the entire switch. When en- abled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command). Default enabled Format...
CLI Commands: Base 4.3 Management Commands 4.3.30 snmp-server enable traps multiusers This command enables Multiple User traps. When the traps are enabled, a Multiple User Trap is sent when a user logs in to the terminal interface (EIA 232 (serial port) or telnet) and there is an existing terminal interface session. Default enabled Format...
CLI Commands: Base 4.3 Management Commands 4.3.31 snmp-server enable traps stpmode This command enables the sending of new root traps and topology change notification traps. Default enabled Format snmp-server enable traps stpmode Mode Global Config no snmp-server enable traps stpmode This command disables the sending of new root traps and topology change notification traps.
CLI Commands: Base 4.3 Management Commands 4.3.32 snmptrap This command adds an SNMP trap name. The maximum length of name is 16 case-sensitive alphanumeric characters. Default The default name for the six undefined community names is Delete. Format snmptrap < name>...
CLI Commands: Base 4.3 Management Commands 4.3.33 snmptrap ipaddr This command assigns an IP address to a specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters. Note: IP addresses in the SNMP trap receiver table must be unique. If you make multiple entries using the same IP address, the first entry is retained and processed.
CLI Commands: Base 4.4 Syslog Commands 4.4 Syslog Commands This section provides a detailed explanation of the Syslog commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other in- formation. Configuration Commands configure features and options of the device. For every configuration command there is a show command that displays the configuration setting.
CLI Commands: Base 4.4 Syslog Commands 4.4.2 logging buffered wrap This command enables wrapping of in-memory logging when full capacity reached. Otherwise when full capacity is reached, logging stops. Default wrap Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in-memory logging and configures logging to stop when capacity is full.
CLI Commands: Base 4.4 Syslog Commands 4.4.3 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch software to log all Command Line Interface (CLI) commands issued on the system. Default enabled Format logging cli-command Mode Global Config...
CLI Commands: Base 4.4 Syslog Commands 4.4.4 logging console This command enables logging to the console. The <severitylevel> value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
CLI Commands: Base 4.4 Syslog Commands 4.4.5 logging host This command enables logging to a host where up to eight hosts can be configured. Default Port - 514; Level - Critical; Format logging host <hostaddress> [<port> [<severi tylevel>]] Mode Global Config Severity number Sevirity name Meaning...
CLI Commands: Base 4.4 Syslog Commands Mode Global Config 4.4.7 logging host remove The Logging Host Index to be removed. Format logging host remove <hostindex> Mode Global Config CLI L2B Release 4.0 11/07...
4.5 Device Configuration Commands Device Configuration Commands 4.5.1 auto-negotiate This command enables automatic negotiation on a port. The default value is enable. Format auto-negotiate Mode Interface Config no auto-negotiate This command disables automatic negotiation on a port. Format no auto-negotiate Mode Interface Config CLI L2B...
4.5 Device Configuration Commands 4.5.2 auto-negotiate all This command enables automatic negotiation on all ports. The default value is enable. Format auto-negotiate all Mode Global Config no auto-negotiate all This command disables automatic negotiation on all ports. Format no auto-negotiate all Mode Global Config 4.5.3 media-module remove...
4.5 Device Configuration Commands 4.5.4 monitor session This command configures a probe port and a monitored port for monitor ses- sion (port monitoring). The first slot/port is the source monitored port and the second slot/port is the destination probe port. If this command is executed while port monitoring is enabled, it will have the effect of changing the probe and monitored port values.
4.5 Device Configuration Commands 4.5.5 monitor session mode This command configures the monitor session (port monitoring) mode to en- able. The probe and monitored ports must be configured before monitor ses- sion (port monitoring) can be enabled. If enabled, the probe port will monitor all traffic received and transmitted on the physical monitored port.
4.5 Device Configuration Commands 4.5.6 monitor session <session-id> source/ destination This command allows you to configure and activate the port mirroring func- tion of the switch. Port mirroring is when the data traffic of a source port is copied to a specified destination port. The data traffic at the source port is not influenced by port mirroring.
4.5 Device Configuration Commands 4.5.7 set igmp This command enables IGMP Snooping on the system. The default value is disable. Note: The IGMP snooping application supports the following: Global configuration or per interface configuration. Validation of the IP header checksum (as well as the IGMP header check- sum) and discarding of the frame upon checksum error.
4.5 Device Configuration Commands 4.5.8 set igmp This command enables IGMP Snooping on a selected interface. Default enabled Format set igmp Mode Interface Config no set igmp This command disables IGMP Snooping on a selected interface. Format no set igmp Mode Interface Config 4.5.9...
4.5 Device Configuration Commands 4.5.10 set igmp forward-all This command activates the forwarding of multicast frames to this interface even if the given interface has not received any reports by hosts. N. B.: this applies only to frames that have been learned via IGMP Snooping. The pur- pose is that an interface (e.
4.5 Device Configuration Commands 4.5.11 set igmp forward-unknown This command defines how to handle unknown multicast frames. This command is available for MS20/30 and RS20/30. Format set igmp forward-unknown {discard|flood|query- ports} Mode Global Config discard Unknown multicast frames will be discarded.
4.5 Device Configuration Commands 4.5.12 set igmp static-query-port This command activates the forwarding of IGMP membership report frames to this interface even if the given interface has not received any queries. The purpose is that a port may need to forward such frames even if no queries have been received on it (e.
4.5 Device Configuration Commands 4.5.13 set igmp groupmembershipinterval This command sets the IGMP Group Membership Interval time on the sys- tem. The Group Membership Interval time is the amount of time in seconds that a switch will wait for a report from a particular group on a particular inter- face before deleting the interface from the entry.
4.5 Device Configuration Commands 4.5.14 set igmp interfacemode This command enables IGMP Snooping on all interfaces. Format set igmp interfacemode Mode Global Config no set igmp interfacemode This command disables IGMP Snooping on all interfaces. Format no set igmp interfacemode Mode Global Config CLI L2B...
4.5 Device Configuration Commands 4.5.15 set igmp maxresponse This command sets the IGMP Maximum Response time on the system. The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query in response to a received leave message, before deleting the multicast group received in the leave message.
4.5 Device Configuration Commands 4.5.16 how igmpsnooping This command displays IGMP Snooping information. Configured information is displayed whether or not IGMP Snooping is enabled. Status information is only displayed when IGMP Snooping is enabled. Format show igmpsnooping Mode Privileged EXEC and User EXEC Admin Mode This indicates whether or not IGMP Snooping is globally enabled on the switch.
4.5 Device Configuration Commands 4.5.17 show mac-filter-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forward- ing Database (MFDB) table. Format show mac-filter-table igmpsnooping Mode Privileged EXEC and User EXEC Mac Address A multicast MAC address for which the switch has forwarding and or filtering information.
4.5 Device Configuration Commands 4.5.18 show mac-filter-table stats This command displays the Multicast Forwarding Database (MFDB) statis- tics. Format show mac-filter-table stats Mode Privileged EXEC and User EXEC Total Entries This displays the total number of entries that can possibly be in the Multicast Forwarding Database table.
4.5 Device Configuration Commands 4.5.19 show monitor This command displays the Port monitoring information for the system. Format show monitor Mode Privileged EXEC and User EXEC Port Monitor Mode indicates whether the Port Monitoring feature is enabled or disabled. The possible values are enable and disable. Probe Port slot/port is the slot/port configured as the probe port.
4.5 Device Configuration Commands 4.5.20 show port This command displays port information. Format show port { } [name] <slot/port> | all Mode Privileged EXEC and User EXEC Slot/Port Valid slot and port number separated by forward slashes. Name When the optional command parameter name was specified, the out- put is different.
Page 117
4.5 Device Configuration Commands Link Trap This object determines whether or not to send a trap when link status changes. The factory default is enabled. Flow Indicates if enable flow control is enabled on this port. Device Status Indicates whether or not the given port's link status is monitored by the device status.
4.5 Device Configuration Commands 4.5.21 shutdown This command disables a port. Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port. Format no shutdown Mode Interface Config CLI L2B Release 4.0 11/07...
4.5 Device Configuration Commands 4.5.22 shutdown all This command disables all ports. Default enabled Format shutdown all Mode Global Config no shutdown all This command enables all ports. Format no shutdown Mode Global Config CLI L2B Release 4.0 11/07...
4.5 Device Configuration Commands 4.5.23 snmp trap link-status This command enables link status traps by interface. Note: This command is valid only when the Link Up/Down Flag is enabled. See ‘snmp-server enable traps linkmode’ command. Format snmp trap link-status Mode Interface Config no snmp trap link-status This command disables link status traps by interface.
4.5 Device Configuration Commands 4.5.24 snmp trap link-status all This command enables link status traps for all interfaces. Note: This command is valid only when the Link Up/Down Flag is enabled (see “snmp-server enable traps linkmode” ). Format snmp trap link-status all Mode Global Config no snmp trap link-status all...
4.6 User Account Management Commands 4.6.2 show loginsession This command displays current telnet and serial port connections to the switch. Format show loginsession Mode Privileged EXEC and User EXEC Login Session ID User Name The name the user will use to login using the serial port or Telnet. A new user may be added to the switch by entering a name in a blank entry.
4.6 User Account Management Commands 4.6.3 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system. Format show users Mode...
4.6 User Account Management Commands 4.6.4 users defaultlogin Enter an alphanumeric string of not more than 15 characters. Format users defaultlogin < > listname Mode Global Config no users name This command removes an operator. Format no users default < listname>...
4.6 User Account Management Commands 4.6.5 users login Enter user name. Format users login < > listname Mode Global Config no users name This command removes an operator. Format no users login < listname> Mode Global Config Note: The ‘admin’ user account cannot be deleted. CLI L2B Release 4.0 11/07...
4.6 User Account Management Commands 4.6.6 users name This command adds a new user (account) if space permits. The account <username> can be up to eight characters in length. The name may be com- prised of alphanumeric characters as well as the dash (‘-’) and underscore (‘_’).
4.6 User Account Management Commands 4.6.7 users passwd This command is used to change a password. The password should not be more than eight alphanumeric characters in length. If a user is authorized for authentication or encryption is enabled, the password must be at least eight alphanumeric characters in length.
4.6 User Account Management Commands 4.6.8 users snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user. The valid accessmode values are readonly or readwrite. The <username> is the login user name for which the specified access mode applies.
4.6 User Account Management Commands 4.6.9 users snmpv3 authentication This command specifies the authentication protocol to be used for the specified login If md5 or sha are none user. The valid authentication protocols are specified, the user login password is also used as the snmpv3 authentication password and therefore must be at least eight characters in length.
4.6 User Account Management Commands 4.6.10 users snmpv3 encryption This command specifies the encryption protocol to be used for the specified login user. The valid encryption protocols are des or none. If des is specified, the required key may be specified on the command line. The key may be up to 16 characters long.
4.7 System Utilities System Utilities This section describes system utilities. 4.7.1 clear eventlog Clear the event log. The CLI will ask for confirmation. Answer y (yes) or n (no). The CLI displays the end of this operation. Format clear eventlog Mode Privileged EXEC 4.7.2 traceroute...
4.7 System Utilities 4.7.4 clear config This command resets the configuration to the factory defaults without power- ing off the switch. Format clear config Mode Privileged EXEC 4.7.5 clear counters This command clears the stats for a specified <slot/port>or for all the ports or for the entire switch based upon the argument.
4.7 System Utilities 4.7.7 clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Data- base. Format clear igmpsnooping Mode Privileged EXEC 4.7.8 clear mac-addr-table This command clears the switch's MAC address table (the forwarding data- base that contains the learned MAC addresses).
4.7 System Utilities 4.7.9 clear pass This command resets all user passwords to the factory defaults without pow- ering off the switch. You are prompted to confirm that the password reset should proceed. Format clear pass Mode Privileged EXEC 4.7.10 clear signal-contact This command clears the signal-contact output configuration.
4.7 System Utilities 4.7.11 copy This command uploads and downloads to/from the switch. Remote URLs can be specified using tftp. A list of valid commands is provided below. The command can be used to the save the running configuration to nvram by specifying the source as system:running-config and the destination as nvram:startup-config.
4.7 System Utilities 4.7.12 device-status This command configures the device status link error monitoring for this port. Default ignore Format device-status connection-error {ignore|propagate} Mode Interface Config 4.7.13 device-status This command configures the device-status. Format device-status {monitor {aca-removal|all |connection-error|fan-broken |module-removal |power-supply-1| power-supply-2 |power-supply-3-1|power-supply-3-2 |power-supply-4-1|power-supply-4-2 |temperature} {error|ignore}...
4.7 System Utilities trap Configure if a trap is sent when the device status changes its state. – enable enables sending traps, – disable disables sending traps. 4.7.14 logout This command closes the current telnet connection or resets the current se- rial connection.
4.7 System Utilities 4.7.15 ping This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in- band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP.
Page 142
4.7 System Utilities {mode {auto|device-status|manual} |monitor {aca-removal|all|connection-error |fan-broken|module-removal |power-supply-1| power-supply-2 |power-supply-3-1|power-supply-3-2 |power-supply-4-1|power-supply-4-2 |temperature} {disable|enable} |state {closed|open} |trap {disable|enable} } Mode Global Config Contact No. Selection of the signal contact: – 1 signal contact 1, – 2 signal contact 2, – all signal contact 1 and signal contact 2. mode Selection of the operational mode: –...
4.7 System Utilities 4.7.18 temperature This command configures the lower and upper temperature limit for the device. If these limits are exceeded, a trap is sent. The unit for the temperature limit is °C (Celsius), the minimum value is -99, the maximum val- ue is 99.
4.7 System Utilities 4.7.20 reload This command resets the switch (warm start, See “reboot” on page 143). Reset means that all network connections are terminated and the boot code executes. The switch uses the stored configuration to initialize the switch. You are prompted to confirm that the reset should proceed.
4.8 LLDP - Link Layer Discovery Protocol LLDP - Link Layer Discovery Protocol These commands show and configure the LLDP parameters in compliance with IEEE 802.1 AB. 4.8.1 show lldp This command shows all LLDP settings. Format show lldp Mode Privileged EXEC and User EXEC 4.8.2 show lldp config...
4.8 LLDP - Link Layer Discovery Protocol 4.8.3 show lldp config chassis This command shows all LLDP configuration settings concerning the entire device. Format show lldp config chassis Mode Privileged EXEC and User EXEC 4.8.4 show lldp config chassis admin-state Display the LLDP/IEEE802.1AB functionality on this device.
4.8 LLDP - Link Layer Discovery Protocol 4.8.7 show lldp config chassis tx-delay Display the LLDP transmit delay (unit: seconds). It indicates the delay between successive LLDP frame transmissions. Format show lldp config chassis tx-delay Mode Privileged EXEC and User EXEC 4.8.8 show lldp config chassis tx-hold-mult Display the LLDP transmit hold multiplier, a time-to-live value expressed as...
Display the port's LLDP admin state (if LLDP/IEEE802.1AB frames will be transmitted and/or received). fdb-mode Display the port's LLDP FDB mode. hm-mode Display the port's LLDP Hirschmann mode. max-neighbors Display the port's max. no. of LLDP neighbors. notification Display the port's LLDP notification (trap) setting.
4.8 LLDP - Link Layer Discovery Protocol 4.8.11 show lldp config port tlv This command shows all LLDP TLV configuration settings (if the given infor- mation is included in the sent LLDP frames or not) concerning one or all ports. Format show lldp config port <{slot/port|all}>...
4.8 LLDP - Link Layer Discovery Protocol 4.8.12 show lldp remote-data This command shows all LLDP remote-data settings and states concerning one or all ports. Format show lldp remote-data <{slot/port|all}> Mode Privileged EXEC and User EXEC chassis-id Display the remote data's chassis ID only. detailed Display remote data in detailed format (i.
4.8 LLDP - Link Layer Discovery Protocol summary Display remote data in summary format (table with most important data only, strings will be truncated if necessary, indicated by an appended '>' character). sys-desc Display the remote data's system description only. sys-name Display the remote data's system name only.
4.8 LLDP - Link Layer Discovery Protocol 4.8.14 lldp config chassis admin-state Configure the LLDP/IEEE802.1AB functionality on this device. If disabled, the LLDP protocol will become inactive, but the LLDP MIBs can still be accessed. off: Disable the LLDP/IEEE802.1AB functionality. on: Enable the LLDP/IEEE802.1AB functionality.
4.8 LLDP - Link Layer Discovery Protocol 4.8.18 lldp config chassis tx-hold-mult Configure the LLDP transmit hold multiplier, a time-to-live value expressed as a multiple of the LLDP Message Tx Interval (tx-interval), min.: 2, max.: 10, default: 4. Format lldp config chassis tx-hold-mult Mode Global Config 4.8.19 lldp chassis tx-interval...
4.8 LLDP - Link Layer Discovery Protocol 4.8.20 clear lldp config all Clear the LLDP configuration, i. e., set all configurable parameters to default values (all chassis- as well as port-specific parameters at once). Note: LLDP Remote data remains unaffected. Format clear lldp config all Mode...
<{lldp-only|mac-only|lldp-and- mac|autodetect}> Mode Interface Config 4.8.23 lldp hm-mode Configure the port's LLDP Hirschmann mode (if LLDP/IEEE802.1AB frames will be transmitted to and/or received from the Hirschmann-specific multicast address 01:80:63:2f:ff:0b). The default setting is tx-and-rx. Format lldp hm-mode <{tx-only|rx-only|tx-and-rx|off}> Mode...
4.8 LLDP - Link Layer Discovery Protocol 4.8.27 lldp tlv mac-phy-config-state Configure the port's LLDP TLV inclusion of MAC Phy. Cfg. State (on or off, default: on). Format lldp tlv mac-phy-config-state <{off|on}> Mode Interface Config 4.8.28 lldp tlv max-frame-size Configure the port's LLDP TLV inclusion of Max. Frame Size (on or off, default: on).
4.8 LLDP - Link Layer Discovery Protocol 4.8.30 lldp tlv port-desc Configure the port's LLDP TLV inclusion of Port Description (on or off, default: on). Format lldp tlv port-desc <{off|on}> Mode Interface Config 4.8.31 lldp tlv protocol Configure the port's LLDP TLV inclusion of Protocol (on or off, default: on). Format lldp tlv protocol <{off|on (on)}>...
4.8 LLDP - Link Layer Discovery Protocol 4.8.33 lldp tlv sys-desc Configure the port's LLDP TLV inclusion of System Description (on or off, default: on). Format lldp tlv sys-desc <{off|on}> Mode Interface Config 4.8.34 lldp tlv sys-name Configure the port's LLDP TLV inclusion of System Name (on or off, default: on).
4.9 SNTP - Simple Network Time Protocol SNTP - Simple Network Time Protocol These commands show and configure the SNTP parameters. 4.9.1 show sntp This command shows all SNTP settings. Format show sntp Mode Privileged EXEC and User EXEC 4.9.2 show sntp anycast This command shows all SNTP anycast configuration settings.
4.9 SNTP - Simple Network Time Protocol transmit-interval Show the SNTP Server's interval for sending Anycast messages (unit: seconds). 4.9.3 show sntp client This command shows all SNTP anycast configuration settings. Format show sntp client Mode Privileged EXEC and User EXEC accept-broadcast Show if the SNTP Client accepts SNTP broadcasts.
4.9 SNTP - Simple Network Time Protocol 4.9.4 show sntp operation This command shows if the SNTP function is enabled or disabled. Format show sntp operation Mode Privileged EXEC and User EXEC 4.9.5 show sntp status This command shows the SNTP state, synchronization and error messages. Format show sntp status Mode...
4.9 SNTP - Simple Network Time Protocol 4.9.6 show sntp time This command shows time and date. Format show sntp time Mode Privileged EXEC and User EXEC sntp Show the current SNTP date and UTC time. system Show the local system's current date and time. 4.9.7 no sntp This command disables sntp.
4.9 SNTP - Simple Network Time Protocol 4.9.8 sntp anycast address Set the SNTP server's anycast destination IP Address, default: 0.0.0.0 (none). Format sntp anycast address <Ziel-IP-Adresse> Mode Global Config no sntp anycast address Set the SNTP server's anycast destination IP Address to 0.0.0.0. Format no sntp anycast address Mode...
4.9 SNTP - Simple Network Time Protocol 4.9.10 sntp client accept-broadcast Enable/Disable that the SNTP Client accepts SNTP broadcasts. Format sntp client accept-broadcast <on | off> Mode Global Config no sntp accept-broadcast Disable the SNTP Client accepts SNTP broadcasts. Format no sntp client accept-broadcast Mode Global Config...
4.9 SNTP - Simple Network Time Protocol 4.9.12 sntp client request-interval The synchronization interval in seconds, default: 30. Format sntp client request-interval <1-3600> Mode Global Config 4.9.13 no sntp client server Disable the SNTP client servers. Format no sntp client server Mode Global Config 4.9.14 sntp client server primary...
Page 170
4.9 SNTP - Simple Network Time Protocol no sntp client server primary Disable the primary SNTP client server. Format no sntp client server primary Mode Global Config CLI L2B Release 4.0 11/07...
4.9 SNTP - Simple Network Time Protocol 4.9.15 sntp client server secondary Set the SNTP Client's secondary server IP Address, default: 0.0.0.0 (none). Format sntp client server secondary <IP-Adresse> Mode Global Config no sntp client server secondary Disable the secondary SNTP client server. Format no sntp client server secondary Mode...
4.9 SNTP - Simple Network Time Protocol 4.9.16 sntp operation Enable/Disable the SNTP function. Format sntp operation <on | off> Mode Global Config no sntp operation Disable the SNTP Client and Server. Format no sntp operation Mode Global Config 4.9.17 sntp time system Set the current sntp time.
4.10 PoE - Power over Ethernet 4.10 PoE - Power over Ethernet These commands show and configure the Power over Ethernet (IEEE 802.3af) parameters. PoE is available for MACH 4002 devices with PoE modules. 4.10.1 show inlinepower This command shows global Inline Power settings PoE. Format show inlinepower Mode...
4.10 PoE - Power over Ethernet 4.10.3 inlinepower Configure the global Inline Power parameters. Format inlinepower {admin-mode {disable|enable} | trap {disable|enable} | threshold <1-99> } Mode Global Config admin-mode Configure the global Inline Power administrative setting (enable or disable, default: enable). trap Configure the Inline Power notification (trap) setting (enable or dis- able, default: disable).
4.10 PoE - Power over Ethernet 4.10.4 inlinepower Configure the portrelated Inline Power parameters. Note: The interface name you enter in the name-command. Format inlinepower {admin-mode {disable|enable} | priority {critical|high|low} } Mode Interface Config admin-mode Configure the port-related Inline Power administrative setting (enable or disable, default: enable).
Page 176
4.10 PoE - Power over Ethernet CLI L2B Release 4.0 11/07...
CLI Commands: Switching 5 CLI Commands: Switching This section provides detailed explanation of the Switching commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other information. Configuration Commands configure features and options of the switch. For every configuration command there is a show command that displays the configuration setting.
CLI Commands: Switching 5.1 MRP 5.1 MRP The concept of the MRP-Ring enables the construction of high-availability, ring-shaped network structures. It is possible to mix the devices that support this function in any combination within the MRP ring. If a line section fails, the ring structure of up to 50 switches typically trans- forms back to a line-type configuration within 150 ms (maximum 500 ms).
CLI Commands: Switching 5.1 MRP 5.1.2 show mrp current-domain This command displays the settings and states of the MRP-Ring´s current domain. The following details are displayed on execution of the command. If you omit the optional keywords (e. g., advanced-mode), all settings will be displayed.
CLI Commands: Switching 5.1 MRP 5.1.4 mrp current-domain Specify that you want to configure the current MRP domain's settings. Default none Format mrp current-domain {advanced-mode {disable|enable} | name <domain-name> | operation {disable|enable} | port {primary|secondary} <slot/port>} Mode Global Config advanced-mode Enable or disable the switch's advanced mode for the given MRP domain.
CLI Commands: Switching 5.1 MRP 5.1.5 mrp delete-domain Delete current MRP domain. Format mrp delete-domain current-domain Mode Global Config 5.1.6 mrp new-domain Create a new MRP domain. The configuration will consist of default parame- ters and its operation will be disabled. Default n/a not set Format...
HIPER-Ring are connected with each other via their ring ports. Exactly one redundancy manager assumes control of the ring. These commands are for configuring the Hirschmann High Performance Redundancy Ring. Further information concerning this function you will find in the manual of the switch.
CLI Commands: Switching 5.2 HIPER-Ring 5.2.1 show hiper-ring This command displays the settings and states of the HIPER-Ring. The fol- lowing details are displayed on execution of the command. Format show hiper-ring Mode Privileged EXEC and User EXEC info Display the information about the HIPER-Ring configuration (cabling). mode Display the HIPER-Ring mode settings.
CLI Commands: Switching 5.2 HIPER-Ring 5.2.2 show hiper-ring info HIPER-Ring setup information. Format show hiper-ring info Mode Privileged EXEC and User EXEC 5.2.3 hiper-ring Configure the HIPER-Ring. Format hiper-ring Mode Global Config no hiper-ring Clear the HIPER Ring configuration (delete it). Format no hiper-ring Mode...
CLI Commands: Switching 5.2 HIPER-Ring 5.2.4 hiper-ring mode This command sets the HIPER-Ring mode. Possible values are: ring-switch Set the switch's HIPER Ring mode to Ring Switch. rs Abbreviation of Ring Switch. Default none Format hiper-ring mode <ring-switch | rs> Mode Global Config 5.2.5 hiper-ring port primary...
CLI Commands: Switching 5.2 HIPER-Ring 5.2.6 hiper-ring port secondary Enter the switch's secondary HIPER Ring port. Default n/a not set Format hiper-ring port primary (<slot/port>) Mode Global Config CLI L2B Release 4.0 11/07...
CLI Commands: Switching 5.3 DHCP Relay Commands 5.3 DHCP Relay Commands These commands configure the DHCP Relay parameters. The commands are divided by functionality into these different groups: Configuration Commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting.
{disable|enable} Enable or disable the forwarding of DHCP requests that are received on this port. Enable this parameter if a Hirschmann DHCP client is connected to this port. Default: disable. Disable this parameter if a Non-Hirschmann DHCP client is con- nected to this port (these devices send normal broadcast DHCP requests;...
CLI Commands: Security 6 CLI Commands: Security This chapter provides a detailed explanation of the Security commands. The following Security CLI commands are available in the software Switching Package. Use the security commands to configure security settings for login users and port users. The commands are divided into these different groups: Show commands are used to display device settings, statistics and other information.
CLI Commands: Security 6.1 Security Commands 6.1 Security Commands 6.1.1 users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is config- ured locally.
CLI Commands: Security 6.1 Security Commands 6.1.2 users login This command assigns the specified authentication login list to the specified user for system login. The <user> must be a configured <user> and the <listname> must be a configured login list. If the user is assigned a login list that requires remote authentication, all ac- cess to the interface from all CLI, web, and telnet sessions will be blocked until the authentication is complete.
CLI Commands: Security 6.2 HTTP Commands 6.2 HTTP Commands 6.2.1 ip http secure-port This command is used to set the sslt port where port can be 1-65535 and the default is port 443. Default Format ip http secure-port <portid> Mode Privileged EXEC no ip http secure-port This command is used to reset the sslt port to the default value.
CLI Commands: Security 6.2 HTTP Commands 6.2.2 ip http secure-protocol This command is used to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Default SSL3 and TLS1 Format ip http secure-protocol [SSL3] [TLS1] Mode Privileged EXEC CLI L2B...
CLI Commands: Security 6.2 HTTP Commands 6.2.3 ip http secure-server This command is used to enable the secure socket layer for secure HTTP. Default disabled Format ip http secure-server Mode Privileged EXEC no ip http secure-server This command is used to disable the secure socket layer for secure HTTP. Format ip http secure-server Mode...
CLI Commands: Security 6.2 HTTP Commands 6.2.4 ip http server This command enables access to the switch through the Web interface. When access is enabled, the user can login to the switch from the Web inter- face. When access is disabled, the user cannot login to the switch's Web server.
CLI Commands: Security 6.2 HTTP Commands 6.2.5 show ip http This command displays the http settings for the switch. Format show ip http Mode Privileged EXEC and User EXEC Secure-Server Administrative Mode This field indicates whether the administrative mode of secure HTTP is enabled or disabled.
Glossary 7 Glossary Numerics (LAN). This Layer 2 network standard improves support of time critical traffic, and limits the extent of 802.1D. The IEEE designator for high bandwidth multicast traffic Spanning Tree Protocol (STP). STP, within a bridged LAN. To do this, a link management protocol, is part 802.1P defines a methodology for of the 802.1D standard for media...
Page 206
(hardware) addresses on a LAN. Boundary Router” on page 206. Advanced Network Device Layer/ ATM Subscriber Access Software. Hirschmann term for the Multiplexer. A telephone central Device Driver level. office multiplexer that supports SDL Aging. When an entry for a node is...
Page 207
Glossary metrics based on policy statements. (BGP-4 is sometimes called BGP4, without the hyphen.) BGP BPDU. See “Bridge Protocol Data communicates with autonomous Unit” on page 207. (local) networks using Internal BGP BGP. See “Border Gateway (IBGP) since it doesn't work well Protocol”...
Page 208
(In the case of construction. Hirschmann, it is one of the user interfaces they have programmed COPS. See “Common Open Policy for allowing programmers to Service Protocol.” on page 208.
Page 209
Glossary Device Application Programming A six-bit field, known as the Interface. DAPI is the software Differentiated Services Code Point interface that facilitates (DSCP), in the Internet Protocol communication of both data and (Internet Protocol) header specifies control information between the the per hop behavior for a given flow Application Layer and HAPI, with of packets.
Page 210
Glossary addresses rather than requiring an asynchronous communication is administrator to manage the task. A called xon-xoff. In this case, the new computer can be added to a receiving device sends a an “xoff” network without the hassle of message to the sending device manually assigning it a unique IP when its buffer is full.
Page 211
Glossary Group membership information with operation of the GARP Application the MAC Bridges attached to the concerned. same LAN segment, and for that Gigabit Ethernet. A high-speed information to be disseminated Ethernet connection. across all Bridges in the Bridged LAN that support Extended Filtering GIP.
Page 212
Glossary IGMP. See “Internet Group IP. See “Internet Protocol” on Management Protocol” on page 212. page 212. IGMP Snooping. A series of IP Multicasting. Sending out data operations performed by to distributed servers on the MBone intermediate systems to add logic to (Multicast Backbone).
Page 213
Glossary gateway recognizes the packet as server that can support IPv6 packets belonging to a computer within its can also support IPv4 packets. immediate neighborhood or domain. That gateway then forwards the packet directly to the computer whose address is specified. Joint Test Action Group.
Page 214
Glossary Learning. The bridge examines the what is called a WAN or Wide Area Layer 2 source addresses of every Network. frame on the attached networks (called listening) and then maintains a table, or cache, of which MAC addresses are attached to each of MAC.
Page 215
Glossary MDIX. Management Dependent will allow users to easily join Interface Crossover. multicast groups. Note that multicasting refers to sending a MIB. See “Management Information message to a select group whereas Base” on page 214. broadcasting refers to sending a message to everyone connected to MOSPF.
Page 216
Glossary autonomous system—or ISP—in fiber-optic cables to be plugged into order to simplify and improve IP- compatible devices as easily as packet exchange. MPLS gives plugging in a telephone cable. network operators a great deal of MUX. See “Multiplexing” on flexibility to divert and route traffic page 215.
Page 217
Glossary Open Shortest Path First. A link- PDU. See “Protocol Data Unit” on state (algorithm used by the router to page 218. determine the current topology of a PHY. The OSI Physical Layer: The network), Interior Gateway physical layer provides for (distributes routing information transmission of cells over a physical between routers belonging to a...
Page 218
Glossary first port will be forwarded onto the Throughput is the amount of data second port as well. The transferred from one device to administrator places a protocol another or processed in a specified analyzer on the port receiving the amount of time - typically, mirrored data to monitor each throughputs are measured in bytes...
Page 219
Glossary derived UNIX systems. Many Simple Network Management networks use RIP; it works well for Protocol. SNMP is the protocol small, isolated, and topologically governing network management and simple networks. the monitoring of network devices and their functions. It is not RIPng.
Page 220
Glossary of SNMPv2p and SNMPv2u. (It is stub area. OSPF area that carries also called SNMPv2star.) The a default route, intra-area routes, documents defing this version were and interarea routes, but does not never published as RFCs. carry external routes. Virtual links cannot be configured across a stub SNMPv3 (proposed): This version of area, and they cannot contain an...
Page 221
Glossary direct protocol used to communicate across a large, extended LAN. The datagrams over a network with little VLAN identifier is part of the 802.1Q error recovery) and provides no tag, which is added to an Ethernet security features. It is often used by frame by an 802.1Q-compliant servers to boot diskless switch or router.
Page 222
Glossary XModem. One of the most popular file transfer protocols (FTPs). Xmodem is fairly effective at WAN. See “Wide Area Network” on detecting errors. It sends blocks of page 222. data together with a checksum and Web. Also known as World-Wide then waits for acknowledgment of Web (WWW) or W3.
Index 8 Index areaid hiper-ring auto-negotiate hiper-ring mode auto-negotiate all hiper-ring port primary hiper-ring port secondary bridge aging-time inlinepower 174, 175 Interface Config Mode classofservice dot1pmapping inventory 112, 113, 114 classofservice ip-dscp-mapping ip http secure-port classofservice trus ip http secure-protocol clear arp-table-switch ip http secure-server clear commands...
Page 224
Index logging host remove set igmp automatic-mode logical slot/port set igmp forward-all 106, 107 logout set igmp groupmembershipinterval logout command set igmp interfacemode all set igmp maxresponse set prompt macaddr show arp media-module remove show arp switch 38, 38, 38, 38, 49, 49 monitor session show bridge aging-time monitor session mode...
Page 225
Index show port system utilities 133–141, 141, 195 show running-config 51, 52 show serial show snmpcommunity 72, 73 telnet show snmptrap sessions, closing 123, 140 show sntp sessions, displaying 124 show sntp anycast temperature show sntp client traceroute show sntp operation transport input telnet show sntp status trap log...
Hirschmann Competence In the longterm, product excellence alone is not an absolute guarantee of a successful project implementation. Comprehensive service makes a differ- ence worldwide. In the current scenario of global competition, the Hir- schmann Competence Center stands head and shoulders above the...