Chapter 4, “Quality of Service” on page 53 Chapter 5, “Management” on page 57 Chapter 6, “Diagnostics” on page 75 The preface contains the following sections: “Safety Symbols Used in this Document” on page 8 “Contact Allied Telesis” on page 9 ...
Preface Safety Symbols Used in this Document This document uses the following conventions. Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Contact Allied Telesis If you need assistance with this product, you may contact Allied Telesis technical support by going to the Support & Services section of the Allied Telesis web site at www.alliedtelesis.com/support. You can find links for...
Chapter 1 Command-Line Interface Overview The command-line interface (CLI) is the primary user interface used to configure, monitor, and maintain the AT-S230-10GP switch. The user interface allows you to directly execute CLI commands. The following topics are included in this chapter: ”Initially Configuring a Device”...
Chapter 1: Command-Line Interface Overview Understanding Command Syntax The command syntax is the format used for entering CLI commands. The commands are derived from the use of the command, keywords, and arguments. The keywords are alphanumeric strings used literally, while arguments are used as placeholders for required values.
Page 13
IS230-10GP Industrial Ethernet Layer 2 Switch Installation Guide Table 1. Default Command Aliases Command Alias Original Command u or un undebug where...
Chapter 2 Layer 2 Features The following feature commands are included in this chapter: ”Port Configuration” “Flow Control” on page 18 “Port Mirror” on page 18 “Link Aggregation” on page 19 “802.1Q VLAN” on page 22 ...
Chapter 2: Layer 2 Features Table 2. Port Configuration Function Privilege Description Example Admin EXEC Use "shutdown" This example shows how to [no] shutdown command to disable port modify port duplex and use "no shutdown" to configuration. enable port. If port is switch(config)# interface fa1 error disabled for any switch(config-if)# shutdown"...
Page 17
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 2. Port Configuration (Continued) Function Privilege Description Example Admin EXEC Use "protected" This example shows how to [no] protected command to protect port. configure ports fa1 and fa2 Protected port is only as protected ports.
Chapter 2: Layer 2 Features Flow Control The switch maintains the orderly movement of data from an end-node through Flow Control in full duplex mode and Back Pressure in half duplex mode. Table 3. Flow Control Function Privilege Description Example Admin EXEC Use "back-pressure"...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 4. Port Mirror (Continued) Function Privilege Description Example Admin EXEC Specify the mirror switch# configure mirror session session to configure. switch(config)# mirror <1-4> source Specify the source session 1 source interface...
Page 20
Chapter 2: Layer 2 Features Table 5. Link Aggregation (Continued) Function Privilege Description Example Admin Link aggregation group This example shows how to lag load-balance EXEC port should transmit change load balance algorithm to (src-dst-mac|src- packets spread to all src-dst-mac-ip. dst-mac-ip|src- ports to balance traffic switch(config)# lag load-balance...
Page 21
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 5. Link Aggregation (Continued) Function Privilege Description Example User switch# show lacp counters show lacp counters EXEC LACPDUs LACPDUs Port Sent Recv Pkts Err --------------------------------------- clear lacp counters User switch# clear lacp counters EXEC <cr>...
Chapter 2: Layer 2 Features 802.1Q VLAN The 802.1Q VLAN feature allows for a single VLAN to support multiple VLANs. With the 802.1Q feature you can preserve VLAN IDs and segregate different VLAN traffic. The 802.1Q VLAN tag feature encapsulates the 802.1Q VLAN tagging within another 802.1Q VLAN tag.
Page 23
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 6. 802.1Q VLAN (Continued) Function Privilege Description Example Admin EXEC Hybrid port: Support all switch(config-if)# switchport switchport mode functions as defined in mode hybrid hybrid IEEE 802.1Q specification. User EXEC Display information about...
Chapter 2: Layer 2 Features Table 6. 802.1Q VLAN (Continued) Function Privilege Description Example Admin EXEC This command per port switch(config)# interface [no] switchport configures the GigabitEthernet 1 default-vlan membership of the switch(config-if)# switchport tagged default VLAN to tagged. mode hybrid Use "show interface switch(config-if)# switchport switchport"...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 7. MAC Address Table Function Privilege Description Example User EXEC View the aging time of switch# show mac address- show mac address-table the address table. table aging-time aging-time User EXEC Displays entries for a...
Page 26
Chapter 2: Layer 2 Features Table 7. MAC Address Table (Continued) Function Privilege Description Example Admin EXEC Delete static addresses switch(config)# no mac no mac address-table from the MAC address address-table static static A:B:C:D:E:F table. 0:1:2:3:4:5 vlan 1 interfaces vlan <1-4094>...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Q-in-Q Q-in-Q is commonly referred as VLAN stacking in which VLANs are nested by adding two tags to each frame instead of one. Network service provider and users both can use VLANs and makes it possible to have more than the 4094 separate VLANs allowed by 802.1Q.
Chapter 2: Layer 2 Features GARP The Generic Attribute Registration Protocol (GARP) is a local area network (LAN) protocol. The protocol defines procedures for the registration and de-registration of attributes (network identifiers or addresses) by end stations and switches with each other. Table 9.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide 802.3az Energy Efficient Ethernet (EEE) The EEE innovative green feature reduces energy consumption through intelligent functionality: Traffic detection — Energy Efficient Ethernet (EEE) compliance Inactive link detection Inactive link detection function automatically reduces power usage when inactive links or devices are detected.
Chapter 2: Layer 2 Features Multicast Multicast forwarding allows a single packet to be forwarded to multiple destinations. The service is based on L2 switch receiving a single packet addressed to a specific Multicast address. Multicast forwarding creates copies of the packet, and transmits the packets to the relevant ports. This section contains the following features: ”IGMP Snooping”...
Page 31
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 11. IGMP Snooping (Continued) Function Privilege Description Example Admin EXEC This command will clear switch# clear ip igmp clear ip igmp snooping the IP IGMP groups for snooping groups static groups [(dynamic...
Page 32
Chapter 2: Layer 2 Features Table 11. IGMP Snooping (Continued) Function Privilege Description Example Admin EXEC "IP IGMP snooping vlan switch(config)# ip igmp no ip igmp snooping 1 static-group 224.1.1.1 snooping vlan 1 static-group vlan VLAN-LIST group interfaces gi1" will add 224.1.1.1 interfaces gi1-2 A.B.C.D static group.
Page 33
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 11. IGMP Snooping (Continued) Function Privilege Description Example Admin EXEC When igmp snooping switch(config)# ip unknown- ip unknown-multicast and mld snooping multicast action action disabled, it can’t set drop Drop the packets (drop|flood|router- action router-port.
Page 34
Chapter 2: Layer 2 Features Table 11. IGMP Snooping (Continued) Function Privilege Description Example Admin EXEC "No IP IGMP snooping switch(config)# ip igmp [no] ip igmp snooping vlan 1 (last-member- snooping vlan 1 fastleave vlan VLAN-LIST query-count | last- switch(config)# ip igmp fastleave member-query-interval | snooping vlan 1 last-...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 11. IGMP Snooping (Continued) Function Privilege Description Example Admin EXEC "No IP IGMP snooping switch(config)# ip igmp [no] ip igmp snooping vlan 1" will clear all VLAN snooping vlan 1 vlan VLAN-LIST...
Page 36
Chapter 2: Layer 2 Features Table 12. MLD Snooping (Continued) Function Privilege Description Example User EXEC This command will switch# show ip mld show ip mld snooping display the IP MLD snooping groups groups [(dynamic | groups for dynamic or switch# show ip mld static)] static ports, or for all...
Chapter 2: Layer 2 Features Spanning Tree The Spanning Tree Protocol (STP) is a network protocol to ensure loop- free topology for any bridged Ethernet local area network. Table 14. Spanning Tree Function Privilege Description Example User EXEC Show spanning-tree switch# show spanning-tree show spanning- instance information.
Page 41
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 14. Spanning Tree (Continued) Function Privilege Description Example Admin EXEC Restore to default stp switch# configure no spanning-tree version. Default stp switch(config)# no force-version version is rstp. spanning-tree force-version switch(config)# exit...
Page 42
Chapter 2: Layer 2 Features Table 14. Spanning Tree (Continued) Function Privilege Description Example Admin EXEC Restore to default tx- switch# configure no spanning-tree hold-count. Default tx- switch(config)# no tx-hold-count hold-count is 6. spanning-tree tx-hold-count switch(config)# exit Admin EXEC Specify the type of switch# configure spanning-tree pathcost value as 32 bits...
Page 43
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 14. Spanning Tree (Continued) Function Privilege Description Example Admin EXEC Restore to default cost switch# configure no spanning-tree per port. Default cost is switch(config)# interface gi1 cost switch(config-if)# no spanning-tree cost...
Chapter 3 Security The following feature commands are included in this chapter: ”Storm Control” “Port Security” on page 48 “802.1X” on page 49 “Account Manager” on page 50 “DoS Attack Prevention” on page 50 “IP Security” on page 52 ...
Chapter 3: Security Table 17. Storm Control (Continued) Function Privilege Description Example Admin EXEC Set control rate of storm- switch(config-if)# storm-con- storm-control control type. trol broadcast level 1000 (broad- cast|unknown-uni- cast|unknown- multicast) level <1-1000000> Admin EXEC No control rate of storm- switch(config-if)# no storm- no storm-control control type.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide 802.1X The 802.1x function provides port-based authentication to prevent unauthorized devices (clients) from gaining access to the network. Table 19. 802.1X Function Privilege Description Example User EXEC Show Dot1x configuration. switch# show dot1x...
Chapter 3: Security Account Manager The account manager commands are used to change the default password and create additional passwords for access to the management software. Table 20. Account Manager Function Privilege Description Example User EXEC Show all user accounts in switch# show username show username local database.
Page 51
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 21. DoS Attack Prevention (Continued) Function Privilege Description Example User EXEC After select "Configure DUT switch(config)# dos [no] dos VALUE to enable/disable support daeqsa-deny Destination types of attacks MAC equals to source MAC...
Chapter 3: Security Table 21. DoS Attack Prevention (Continued) Function Privilege Description Example Admin EXEC Configure DUT to enable/ switch(config)# no dos land-deny [no] dos (tcp- disable support types of switch(config)# dos land-deny frag-off-min- attacks. check|synrst- deny|synfin- deny|xma- deny|nullscan- deny|syn- sportl1024- deny|tcphdr-min- check|smurf-...
Chapter 4 Quality of Service The Quality of Service function allows the switch to implement congestion- management and congestion-avoidance of the Ethernet traffic based on the prioritization values in Layer 2 frames. Implementing QoS in the network makes performance predictable and bandwidth utilization much more effective.
Page 54
Chapter 4: Quality of Service Table 23. QoS (Continued) Function Privilege Description Example Admin EXEC Specify the non-strict switch# configure qos queue weight priority queue weight switch(config)# qos queue SEQUENCE value. The valid queue weight 3 weight value is from 1 to switch(config)# exit 127.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 23. QoS (Continued) Function Privilege Description Example Admin EXEC Configure or show CoS switch# configure qos map queue-cos to queue map. switch(config)# interface gi1 SEQUENCE to <0-7> switch(config-if)# qos map cos-queue 6 7 to 1...
Page 56
Chapter 4: Quality of Service Table 24. Rate Limit (Continued) Function Privilege Description Example Admin EXEC Set egress rate-limit. switch(config-if)# rate- rate-limit limit egress 10000 egress <16- 1000000> Admin EXEC No egress rate-limit. switch(config-if)# no no rate-limit rate-limit egress egress Admin EXEC Set egress rate-limit in switch(config-if)# rate-...
Chapter 5 Management The following feature commands are included in this chapter: ”IP Management” “LLDP” on page 59 “SNMP” on page 61 “Power Over Ethernet” on page 62 “Configuration Management” on page 64 “Firmware Management” on page 65 ...
Page 58
Chapter 5: Management Table 25. IP Management (Continued) Function Privilege Description Example Admin EXEC Use "IP DHCP" command switch(config)# ip dhcp [no] ip dhcp to enable DHCP client to switch(config)# no ip dhcp get IP address from remote DHCP server. Use "No IP DHCP"...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide LLDP LLDP is a one-way protocol without request/response sequences. Information is advertised by stations implementing the transmit function, and is received and processed by stations implementing the receive function. Table 26. LLDP...
Page 60
Chapter 5: Management Table 26. LLDP (Continued) Function Privilege Description Example Admin EXEC Set the LLDP PDU hold switch(config)# lldp lldp holdtime- multiplier that decides holdtime-multiplier 4 multiplier <2- time-to-live (TTL) value 10> sent in LLDP advertisements: TTL = (tx-interval * holdtime- multiplier).
Page 63
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 28. Power Over Ethernet Function Privilege Description Example Admin EXEC Use PoE command to enter This example shows how to PoE's control level. enter PoE control level. switch# configure switch(config)# poe...
Chapter 5: Management Table 28. Power Over Ethernet Function Privilege Description Example Admin EXEC Use "power-limit <0- This example shows how to interfaces IF_NMLPORT 30000>" command to con- configure fa1's power of PoE to power-limit <0-30000> figure how much power can 15W.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Firmware Management The commands in Table 30 manage and upgrade the firmware image files. Table 30. Firmware Management Function Privilege Description Example Admin EXEC Dual image stores a backup switch(config)# boot system boot system image in the flash partition.
Chapter 5: Management Table 31. DHCP Server (Continued) Function Privilege Description Example Admin EXEC Set allocate IP range, sub- switch(config)# dhcp-server dhcp-server inter- net mask, gateway, DNS in interface GigabitEthernet1 low- face IF_NMLPORT specified port settings of ip-address 11.1.1.1 high-ip- low-ip-address DHCP server.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide DHCP Client Option 82 The DHCP Client Option 82 configurable Circuit ID and Remote ID feature enhances validation security by allowing you to select naming choices suboptions. You can select a switch-configured hostname or specify an ASCII test string for the remote ID.
Chapter 5: Management System Log (SYSLOG) The Logging Service page allows you to setup the logging services feature for the system log. Table 33. System Log (SYSLOG) Function Privilege Description Example User EXEC Display the global logging switch# show logging show logging status.
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide SNTP - Network Time Protocol SNTP (Simple Network Time Protocol) synchronizes the system time of a client with a Time Server on the network. The commands in Table 34 are used to configure the SNTP client on the switch.
Chapter 5: Management Table 34. SNTP - Simple Network Time Protocol Function Privilege Description Example Admin EXEC Use the clock summer-time switch(config)# clock summer-time clock summer-time command to set daylight ACRONYM date jan 1 2017 00:00 ACRONYM date saving time for system time. apr 30 2017 23:59 60 (jan|feb|mar|apr|ma y|jun|jul|aug|sep|o...
Chapter 5: Management Table 36. RMON (Continued) Function Privilege Description Example Admin EXEC Specify RMON history switch# configure rmon history index index. switch(config)# rmon history <1-65535> inter- Specify history interface. index 10 interface gi1 buckets face IF_NMLPORT Specify history bucket time. 20 interval 1000 owner ADV [buckets <1-50>] Specify history record inter-...
IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide Table 37. IP Configuration Function Privilege Description Example Admin EXEC Use "IP address" com- switch(config)# ip address ip address A.B.C.D mand to modify administra- 192.168.1.200 mask [mask A.B.C.D] tion IPv4 address. 255.255.255.0 Admin EXEC Use "IP default-gateway"...
Chapter 5: Management HTTP The HTTP page allows you to combine all kinds of AAA lists to the HTTP line. Attempts to access the switch’s Web UI from HTTP are first authenticated. Table 40. HTTP Function Privilege Description Example Admin EXEC Use "IP service"...
Chapter 6 Diagnostics The following feature commands are included in this chapter: ”Cable Diagnostic” “Device Monitoring Information” on page 76 “IP-based Diagnostic” on page 76 “Alarm LEDs” on page 77 “System Commands” on page 78 Cable Diagnostic The Cable Diagnostics page allows you to select the port for applying a copper test.
Chapter 6: Diagnostics Device The Device Monitoring Information (DMI) lists information, such as: System Name, System Location, MAC Address, Firmware version, and Monitoring more, pertaining to the system. The information is for review only. To Information modify the device information, see the respective item within the user interface.
Chapter 6: Diagnostics System Commands Table 45. System Function Privilege Description Example User EXEC Use "show version" com- switch# show version show version mand to show loader and firmware version and build date. User EXEC Use "show info" command switch# show info show info to show system summary information.
Need help?
Do you have a question about the IS230-10GP and is the answer not in the manual?
Questions and answers