Page 2: Table Of Contents
Table of Contents DWS-1008 CLI Reference Guide Table of Contents Using the Command Line Interface ..............2 CLI Conventions ..................2 Globs ......................4 Command Line Editing ................6 Using CLI Help...................8 Access Commands..................10 System Services Commands ...............12 Port Commands....................24 VLAN Commands..................44 IP Services Commands................54 AAA Commands ..................119...
Page 3: Using The Command Line Interface
DWS-1008 CLI Reference Guide Using the Command Line Interface Using the Command Line Interface CLI Conventions Command Prompts By default, the MSS CLI provides the following prompt for restricted users. The mm portion shows the DWS switch model number (for example, 1008) and the nnnnnn portion shows the last 6 digits of the switch’s media access control (MAC) address.
Page 4: Text Entry Conventions And Allowed Characters
MAC addresses, virtual LAN (VLAN) names, and ports in a single command. D-Link recommends that you do not use the same name with different capitalizations for VLANs or access control lists (ACLs). For example, do not conﬁgure two separate VLANs with the names red and RED.
Page 5: Globs
DWS-1008 CLI Reference Guide Using the Command Line Interface Wildcard Masks Security access control lists (ACLs) use source and destination IP addresses and wildcard masks to determine whether the switch ﬁlters or forwards IP packets. Matching packets are either permitted or denied network access. The ACL checks the bits in IP addresses that correspond to any 0s (zeros) in the mask, but does not check the bits that correspond to 1s (ones) in the mask.
Page 6: Mac Address Globs
DWS-1008 CLI Reference Guide Using the Command Line Interface EXAMPLE\* All users in the Windows Domain EXAMPLE with usernames that have no delimiters. EXAMPLE\*.* All users in the Windows Domain EXAMPLE whose usernames contain periods. All users. MAC Address Globs...
Page 7: Command Line Editing
CLI command by using the appropriate list format. The ports on a DWS-1008 switch are numbered 1 through 8. No port 0 exists on the switch. You can include a single port or multiple ports in a command that includes port port-list. Use one of the following formats for port-list: •...
Page 8: Keyboard Shortcuts
DWS-1008 CLI Reference Guide Using the Command Line Interface Keyboard Shortcuts The following table lists the keyboard shortcuts for entering and editing CLI commands: Keyboard Shortcut(s) Function ---------------------------------- --------------------------------------------------------------------------- Ctrl+A Jumps to the ﬁrst character of the command line. Ctrl+B or Left Arrow key Moves the cursor back one character.
Page 9: Using Cli Help
DWS-1008 CLI Reference Guide Using the Command Line Interface Using CLI Help The CLI provides online help. To see the full range of commands available at your access level, type the help command. For example: DWS-1008# help Commands: --------------------------------------------------------------------------------------------------- backup Backup system information to ﬁlename (or url)
Page 10: Understanding Command Descriptions
---------------------------------- Disabled Understanding Command Descriptions Each command description in the D-Link Command Reference contains the following elements: • A command name, which shows the keywords but not the variables. For example, the following command name appears at the top of a command description and in the...
Page 11: Access Commands
Access Commands DWS-1008 CLI Reference Guide Access Commands Use access commands to control access to the Mobility Software System (MSS) (CLI). This chapter presents access commands alphabetically. Use the following table to locate commands in this chapter based on their use.
Page 12: Set Enablepass
Access Commands DWS-1008 CLI Reference Guide quit Exit from the CLI session. Syntax: quit Defaults: None Access: Examples: To end the administrator’s session, type the following command: DWS-1008> quit set enablepass Sets the password that provides enabled access (for conﬁguration and monitoring) to the DWS-1008 switch.
Page 13: System Services Commands
System Services Commands Use system services commands to conﬁgure and monitor system information for a DWS-1008 switch. This chapter presents system services commands alphabetically. Use the following table to located commands in this chapter based on their use. clear banner motd Deletes the message-of-the-day (MOTD) banner that is displayed before the login prompt for each CLI session on the switch.
Page 14: Clear System
Clears the system conﬁguration of the speciﬁed information. Syntax: clear system [contact | countrycode | ip-address | location | name] contact Resets the name of contact person for the DWS-1008 switch to null. countrycode Resets the country code for the switch to null.
Page 15 DWS-1008 CLI Reference Guide System Services Commands help Displays a list of commands that can be used to conﬁgure and monitor the switch. Syntax: help Defaults: None. Access: All. Examples: Use this command to see a list of available commands. If you have restricted access, you see fewer commands than if you have enabled access.
Page 16: Set Banner Motd
• Angle brackets (< >) • Double quotation marks (“”) Examples: To create a banner that says Meeting at 3 p.m., type the following command: DWS-1008# set banner motd ^Update meeting at 3 p.m.^ success: change accepted. D-Link Systems, Inc.
Page 17: Set Length
DWS-1008 CLI Reference Guide System Services Commands set conﬁrm Enables or disables the display of conﬁrmation messages for commands that might have a large impact on the network. Syntax: set conﬁrm {on | off} Enables conﬁrmation messages. Disables conﬁrmation messages.
Page 18: Set Prompt
Alphanumeric string up to 32 characters long. To include spaces in the prompt, you must enclose the string in double quotation marks (“”). Defaults: The factory default for the switch name is DWS-1008-nnnnnn, where nnnnnn is the last 6 digits of the 12-digit system MAC address.
Page 19: Set System Contact
DWS-1008 CLI Reference Guide System Services Commands set system contact Stores a contact name for the DWS-1008 switch. Syntax: set system contact string string Alphanumeric string up to 256 characters long, with no blank spaces. Defaults: None Access: Enabled To view the system contact string, type the show system command.
Page 20 Usage: You must set the system county code to a valid value before using any set ap com- mands to conﬁgure a DWL-8220AP access point. Examples: To set the country code to Canada, type the following command: DWS-1008# set system country code CA success: change accepted. set system ip-address Sets the system IP address so that it can be used by various services in the switch.
Page 21: Set System Location
Alphanumeric string up to 256 characters long, with no blank spaces. Defaults: By default, the system name and command prompt have the same value. The factory default for both is DWS-1008-nnnnnn, where nnnnnn is the last 6 digits of the12-digit system MAC address.
Page 22: Show Banner Motd
DWS-1008 CLI Reference Guide System Services Commands show banner motd Shows the banner that was conﬁgured with the set banner motd command. Syntax: show banner motd Defaults: None Access: Enabled Examples: To display the banner with the message of the day, type the following command:...
Page 23 Common interface, source, and default IP address for the switch, in dotted decimal notation (conﬁgured with set system ip-address). System MAC DWS-1008’s media access control (MAC) machine address set at the factory, in 6-byte hexadecimal format. License Type of session license currently installed on the switch: •...
Page 24 Optional subdirectory name, and a string up to 32 alphanumeric characters. The command’s output is saved into a ﬁle with the speciﬁed name in nonvolatile storage. Defaults: None Access: Enabled Usage: Enter this command before calling the D-Link Technical Support. D-Link Systems, Inc.
Page 25: Port Commands
DWS-1008 CLI Reference Guide Port Commands Port Commands Use port commands to conﬁgure and manage individual ports and load-sharing port groups. This chapter presents port commands alphabetically. clear dap Caution: When you clear a Distributed AP, MSS ends user sessions that are using the AP.
Page 26: Clear Port Name
Name of the port group. Defaults: None. Access: Enabled. Examples: The following command clears port group server1: DWS-1008# clear port-group name server1 success: change accepted. clear port name Removes the name assigned to a port. Syntax: clear port port-list name port-list List of physical ports.
Page 27: Monitor Port Counters
Not applicable Maximum user sessions Not applicable Examples: The following command clears port 5: DWS-1008# clear port type 5 This may disrupt currently authenticated users. Are you sure? (y/n) [n]y success: change accepted. monitor port counters Displays and continually updates port statistics.
Page 28 DWS-1008 CLI Reference Guide Port Commands monitor port counters (continued) Defaults: All types of statistics are displayed for all ports. MSS refreshes the statistics every 5 seconds. This interval cannot be conﬁgured. Statistics types are displayed in the following order by default: •...
Page 29 DWS-1008 CLI Reference Guide Port Commands Port Status Rx Octets Tx Octets ============================================================= 27965420 34886544 To cycle the display to the next set of statistics, press the Spacebar. In this example, packet statistics are displayed next: Port Status Rx Unicast...
Page 30 DWS-1008 CLI Reference Guide Port Commands Statistics Option Field Description receive-errors Rx Crc Number of frames received by the port that had the correct length but contained an invalid frame check sequence (FCS) value. This statistic includes frames with misalignment errors.
Page 31: Reset Port
Usage: The reset command disables the port’s link and PoE (if applicable) for at least 1 second, then reenables them. This behavior is useful for forcing a DWL-8220AP access point that is connected to two DWS-1008 switches to reboot over the link to the other switch.
Page 32 {ap |dap} radio antennatype command. Access: Enabled Examples: The following command conﬁgures Distributed AP 1 for a DWL-8220AP with serial-ID 0322199999: DWS-1008# set dap 1 serial-id 0322199999 model dwl-8220ap success: change accepted. The following command removes Distributed AP 1: DWS-1008# clear dap 1 This will clear speciﬁed DAP devices.
Page 33: Set Port
Usage: A port that is administratively disabled cannot send or receive packets.This command does not affect the link state of the port. Examples: The following command disables port 16: DWS-1008# set port disable 16 success: set “disable” on port 16 The fol1owing command reenables the port: DWS-1008# set port enable 16 success: set “enable”...
Page 34: Set Port Name
Access: Enabled Usage: To simplify conﬁguration and avoid confusion between a port’s number and its name, D-Link recommends that you do not use numbers as port names. Examples: The following command sets the name of port 5 to adminpool: DWS-1008# set port 5 name adminpool success: change accepted.
Page 35: Set Port Negotiation
Caution: When you set the port type for AP use, you can enable PoE on the port. Use the switch’s PoE to power D-Link DWL-8220AP access points only. If you enable PoE on ports connected to other devices, damage can result and the warranty will be void.
Page 36: Set Port Speed
Examples: The following command disables PoE on ports 1 and 3, which are connected to DWL-8220AP access points: DWS-1008# set port poe 1,3 disable If you are enabling power on these ports, they must be connected only to approved PoE devices with the correct wiring.
Page 37: Set Port Trap
Caution: When you set the port type for AP use, you must specify the PoE state (enable or disable) of the port. Use the switch’s PoE to power D-Link DWL-8220AP access points only. If you enable PoE on a port connected to another device, physical damage to the device can result.
Page 38 Examples: The following commands set port 2 for the DWL-8220AP, enable PoE on the port, and specify external antenna model ANT-1120 for the 802.11b/g radio: DWS-1008# set port type ap 2 model dwl-8220ap poe enable This may affect the power applied on the conﬁgured ports. Would you like to continue? (y/n) [n]y success: change accepted.
Page 39 The following command sets port 1 for the DWL-8220AP, enables PoE on the port, and sets the radio type to 802.11b only: DWS-1008# set port type ap 1 model dwl-8220ap poe enable radiotype 11b This may affect the power applied on the conﬁgured ports. Would you like to continue? (y/n) [n]y success: change accepted.
Page 40 The following command sets port 5 for a wired authentication user and subdivides the port into three virtual ports to support three simultaneous user sessions: DWS-1008# set port type wired-auth 5 1,2,3 success: change accepted D-Link Systems, Inc.
Page 41: Show Port Counters
Defaults: None Access: All Usage: You can specify one statistic type with the command. Examples: The following command shows octet statistics for port 3: DWS-1008> show port counters octets port 3 Port Status Rx Octets Tx Octets...
Page 42 Displays information for the speciﬁed port group. Defaults: None Access: All Examples: The following command displays the conﬁguration of port group server2: DWS-1008# show port-group name server2 Port group: server2 is up Ports: 1, 3 The table below describes the ﬁelds in the show port-group output.
Page 43: Show Port Status
DWS-1008 CLI Reference Guide Port Commands Examples: The following command displays PoE information for all ports on the DWS-1008 switch: DWS-1008# show port poe Link Port Port Name Status Type conﬁg Draw ============================================================= disabled down disabled down disabled down disabled...
Page 44 DWS-1008 CLI Reference Guide Port Commands Examples: The following command displays information for all ports on the DWS-1008: DWS-1008# show port status Port Name Admin Oper Conﬁg Actual Type Media ============================================================= auto 100/full network 10/100BaseTx down auto network 10/100BaseTx down...
Page 45: Vlan Commands
DWS-1008 CLI Reference Guide VLAN Commands VLAN Commands Use virtual LAN (VLAN) commands to conﬁgure and manage parameters for individual port VLANs on network ports. This chapter presents VLAN commands alphabetically. clear fdb Deletes an entry from the forwarding database (FDB).
Page 46: Clear Vlan
VLAN Commands clear fdb (continued) Examples: The following command clears all static forwarding database entries that match VLAN blue: DWS-1008# clear fdb static vlan blue success: change accepted. The following command clears all dynamic forwarding database entries that match all VLANs: DWS-1008# clear fdb dynamic success: change accepted.
Page 47: Set Fdb
The following command removes port 4, which uses tag value 68, from VLAN red: DWS-1008# clear vlan red port 4 tag 68 This may disrupt user connectivity. Do you wish to continue? (y/n) [n]y success: change accepted.
Page 48: Set Fdb Agingtime
Examples: The following command adds a permanent entry for MAC address 00:11:22:aa:bb:cc on ports 3 and 5 in VLAN blue: DWS-1008# set fdb perm 00:11:22:aa:bb:cc port 3,5 vlan blue success: change accepted. The following command adds a static entry for MAC address 00:2b:3c:4d:5e:6f on port 1 in...
Page 49: Set Vlan Name
Usage:You must assign a name to a VLAN (other than the default VLAN) before you can add ports to the VLAN. D-Link recommends that you do not use the name default. This name is already used for VLAN 1. D-Link also recommends that you do not rename the default VLAN.
Page 50: Set Vlan Port
VLAN. If you do specify a tag value, D-Link recommends that you use the same value as the VLAN number. MSS does not require the VLAN number and tag value to be the same but some other vendors’...
Page 51: Show Fdb
DWS-1008 CLI Reference Guide VLAN Commands show fdb Displays entries in the forwarding database. Syntax: show fdb [mac-addr-glob [vlan vlan-id]] show fdb {perm | static | dynamic | system | all} [port port-list | vlan vlan-id] mac-addr-glob A single MAC address or set of MAC addresses. Specify a MAC address, or use the wildcard character (*) to specify a set of MAC addresses.
Page 52 Note: This Class of Service (CoS) value is not associated with MSS quality of service (QoS) features. Destination Ports DWS-1008 switch port associated with the entry. A switch sends trafﬁc to the destination MAC address through this port. Protocol Type Layer 3 protocol address types that can be mapped to this entry.
Page 53: Show Fdb Agingtime
VLAN name or number. Entries are listed for only the speciﬁed VLAN Defaults: None. Access: All. Examples: The following command lists the number of dynamic entries that the forwarding database contains: DWS-1008# show fdb count dynamic Total Matching Entries = 2 D-Link Systems, Inc.
Page 54 VLAN name or number. If you do not specify a VLAN, information for all VLANs is displayed. Defaults: None Access: All Examples: The following command displays information for VLAN burgundy: DWS-1008# show vlan conﬁg burgundy Admin VLAN Tunl Port VLAN Name...
Page 55: Ip Services Commands
• Default source IP address used in unsolicited communications such as AAA accounting reports and SNMP traps. Examples: The following command removes the IP interface conﬁgured on VLAN mauve: DWS-1008# clear interface mauve ip success: cleared ip on vlan mauve clear ip alias Removes an alias, which is a string that represents an IP address.
Page 56: Clear Ip Dns Domain
Syntax: clear ip dns server ip-addr ip-addr IP address of a DNS server. Defaults: None Access: Enabled Examples: The following command removes DNS server 10.10.10.68 from a DWS-1008 switch’s conﬁguration: DWS-1008# clear ip dns server 10.10.10.68 success: change accepted. clear ip route Removes a route from the IP route table.
Page 57: Clear Ip Telnet
DWS-1008# clear ip route 10.10.10.68/24 10.10.10.1 success: change accepted. clear ip telnet Resets the Telnet server’s TCP port number to its default value. A DWS-1008 switch listens for Telnet management trafﬁc on the Telnet server port. Syntax: clear ip telnet Defaults: The default Telnet port number is 23.
Page 58: Clear Snmp Community
Syntax: clear snmp community name comm-string comm-string Name of the SNMP community you want to clear. Defaults: None Access: Enabled Examples: The following command clears community string setswitch2: DWS-1008# clear snmp community name setswitch2 success: change accepted. D-Link Systems, Inc.
Page 59: Clear Snmp Notify Target
ID of the target. Defaults: None Access: Enabled Examples: The following command clears notiﬁcation target 3: DWS-1008# clear snmp notify target 3 success: change accepted. clear snmp proﬁle Clears an SNMP notiﬁcation proﬁle. Syntax: clear snmp proﬁle proﬁle-name proﬁle-name Name of the notiﬁcation proﬁle you are clearing.
Page 60: Clear Summertime
Clears the summertime setting from a DWS-1008 switch. Syntax: clear summertime Defaults: None Access: Enabled. Examples: To clear the summertime setting from a DWS-1008 switch, type the following command: DS-1008# clear summertime success: change accepted. clear system ip-address Clears the system IP address.
Page 61 DWS-1008# clear timezone success: change accepted. ping Tests IP connectivity between a DWS-1008 switch and another device. MSS sends an Internet Control Message Protocol (ICMP) echo packet to the speciﬁed device and listens for a reply packet. Syntax: ping host [count num-packets] [dnf] [ﬂood] [interval time] [size size]...
Page 62: Set Arp
DWS-1008 CLI Reference Guide IP Services Commands ping (continued) vlan-name VLAN name to use as the ping source. MSS uses the IP address conﬁgured on the VLAN as the source IP address in the ping packets. Defaults: • count - 5.
Page 63: Set Arp Agingtime
Access: Enabled Examples: The following command adds a static ARP entry that maps IP address 10.10.10.1 to MAC address 00:bb:cc:dd:ee:ff: DWS-1008# set arp static 10.10.10.1 00:bb:cc:dd:ee:ff success: added arp 10.10.10.1 at 00:bb:cc:dd:ee:ff on VLAN 1 set arp agingtime Changes the aging timeout for dynamic ARP entries.
Page 64: Set Interface
10.10.10.10 netmask 255.255.255.0 on vlan default The following command conﬁgures IP interface 10.10.20.10 255.255.255.0 on VLAN mauve: DWS-1008# set interface mauve ip 10.10.20.10 255.255.255.0 success: set ip address 10.10.20.10 netmask 255.255.255.0 on vlan mauve set interface dhcp-client Conﬁgures the DHCP client on a VLAN, to allow the VLAN to obtain its IP interface from a...
Page 65 Note: Use of the MSS DHCP server to allocate client addresses is intended for temporary, demonstration deployments and not for production networks. D-Link recommends that you do not use the MSS DHCP server to allocate client addresses in a production network.
Page 66: Set Interface Status
Examples: The following command enables the DHCP server on VLAN red-vlan to serve addresses from the 192.168.1.5 to 192.168.1.25 range: DWS-1008# set interface red-vlan ip dhcp-server enable start 192.168.1.5 stop 192.168.1.25 success: change accepted.
Page 67: Set Ip Alias
Disables DNS. Defaults: DNS is disabled by default. Access: Enabled. Examples: The following command enables DNS on a DWS-1008 switch: DWS-1008# set ip dns enable Start DNS Client set ip dns domain Conﬁgures a default domain name for DNS queries. The switch appends the default domain name to domain names or hostnames you enter in commands.
Page 68: Set Ip Dns Server
Makes the server a secondary server. MSS consults a secondary server only if the primary server does not reply. Defaults: None Access: Enabled Usage: You can conﬁgure a DWS-1008 switch to use one primary DNS server and up to ﬁve secondary DNS servers. D-Link Systems, Inc.
Page 69 DWS-1008 CLI Reference Guide IP Services Commands set ip dns server (continued) Examples: The following commands conﬁgure a DWS-1008 switch to use a primary DNS server and two secondary DNS servers: DWS-1008# set ip dns server 10.10.10.50/24 primary success: change accepted.
Page 70: Set Ip Route
Syntax: set ip route {default | ip-addr mask | ip-addr/mask-length} gateway metric default Default route. A DWS-1008 switch uses the default route if an explicit route is not available for the destination. Note: default is an alias for IP address 0.0.0.0/0.
Page 71: Set Ip Snmp Server
DWS-1008# set ip route default 10.2.4.17 2 success: change accepted. The following command adds an explicit route from a DWS-1008 switch to any host on the 192.168.4.x subnet through the local router 10.5.4.2, and gives the route a cost of 1: DWS-1008# set ip route 192.168.4.0 255.255.255.0 10.5.4.2 1...
Page 72 DWS-1008 CLI Reference Guide IP Services Commands set ip ssh Changes the TCP port number on which a DWS-1008 switch listens for Secure Shell (SSH) management trafﬁc. Caution: If you change the SSH port number from an SSH session, MSS immediately ends the session.
Page 73: Set Ip Ssh Server
Usage: You must generate an SSH authentication key to use SSH. The maximum number of SSH sessions supported on a DWS-1008 switch is eight. If Telnet is also enabled, the switch can have up to eight Telnet or SSH sessions, in any combination, and one Console session.
Page 74: Set Ip Telnet
DWS-1008 CLI Reference Guide IP Services Commands set ip telnet Changes the TCP port number on which a DWS-1008 switch listens for Telnet management trafﬁc. Caution: If you change the Telnet port number from a Telnet session, MSS immediately ends the session.
Page 75: Set Ntp Server
Usage: If NTP is conﬁgured on a system whose current time differs from the NTP server time by more than 10 minutes, convergence of the switch time can take many NTP update intervals. D-Link recommends that you set the time manually to the NTP server time before enabling NTP to avoid a signiﬁcant delay in convergence.
Page 76: Set Snmp Community
Defaults: The default NTP update interval is 64 seconds. Access: Enabled Examples: The following command changes the NTP update interval to 128 seconds: DWS-1008# set ntp update-interval 128 success: change accepted. set snmp community Conﬁgures a community string for SNMPv1 or SNMPv2c.
Page 77: Set Snmp Notify Target
Defaults: None Access: Enabled Usage: SNMP community strings are passed as clear text in SNMPv1 and SNMPv2c. D-Link recommends that you use strings that cannot easily be guessed by unauthorized users. For example, do not use the well-known strings public and private.
Page 78 DWS-1008 CLI Reference Guide IP Services Commands set snmp notify target (continued) target-num IDforthetarget.ThisIDislocaltotheDWS-1008switchanddoesnot need to correspond to a value on the target itself.You can specify a number from 1 to 10. ip-addr IP address of the server. You also can specify the UDP port [:udp-port-number] number to send notiﬁcations to.
Page 79 [security {unsecured | authenticated | encrypted}] target-num ID for the target. This ID is local to the DWS-1008 switch and does not need to correspond to a value on the target itself. You can specify a number from 1 to 10.
Page 80 (continued) SNMPv2c with Informs target-num ID for the target. This ID is local to the DWS-1008 switch and does not need to correspond to a value on the target itself. You can specify a number from 1 to 10.
Page 81 Syntax: set snmp notify target target-num ip-addr[:udp-port-number] v1 community-string [proﬁle proﬁle-name] target-num ID for the target. This ID is local to the DWS-1008 switch and does not need to correspond to a value on the target itself. You can specify a number from 1 to 10.
Page 82 DWS-1008 CLI Reference Guide IP Services Commands set snmp proﬁle Conﬁgures an SNMP notiﬁcation proﬁle.A notiﬁcation proﬁle is a named list of all the notiﬁcation types that can be generated by a switch, and for each notiﬁcation type, the action to take (drop or send) when an event occurs.
Page 83 DWS-1008 CLI Reference Guide IP Services Commands • ClientDot1xFailureTraps - Generated when a client experiences an 802.1X failure. • ClientRoamingTraps - Generated when a client roams. • CounterMeasureStartTraps - Generated when MSS begins countermeasures against a rogue access point. • CounterMeasureStopTraps - Generated when MSS stops countermeasures against a rogue access point.
Page 84 (continued) • MPBootTraps - Generated when an access point boots. • MPTimeoutTraps - Generated when an access point fails to respond to the DWS-1008 switch. • PoEFailTraps - Generated when a serious PoE problem, such as a short circuit, occurs.
Page 85 • RFDetectSpoofedMacAPTraps - Generated when MSS detects a wireless packet with the source MAC address of a D-Link AP, but without the spoofed AP’s signature (ﬁngerprint). • RFDetectSpoofedSsidAPTraps - Generated when MSS detects beacon frames for a valid SSID, but sent by a rogue •...
Page 86 RFDetectAdhocUserTraps success: change accepted. DWS-1008# set snmp notify proﬁle snmpprof_rfdetect send RFDetectClientViaRogueWiredAPTraps success: change accepted. DWS-1008# set snmp notify proﬁle snmpprof_rfdetect send RFDetectDoSTraps success: change accepted. DWS-1008# set snmp notify proﬁle snmpprof_rfdetect send RFDetectAdhocUserTraps success: change accepted. DWS-1008# set snmp notify proﬁle snmpprof_rfdetect send RFDetectInterferingRogueAPTraps success: change accepted.
Page 87: Set Snmp Protocol
IP address. You also must enable the SNMP service using the set ip snmp server command. Examples: The following command enables all SNMP versions: DWS-1008# set snmp protocol all enable success: change accepted. set snmp security Sets the minimum level of security MSS requires for SNMP message exchanges.
Page 88: Set Snmp Usm
SNMPv1 or SNMPv2c, leave the minimum level of SNMP security set to unsecured. Examples: The following command sets the minimum level of SNMP security allowed to authentication and encryption: DWS-1008# set snmp security encrypted success: change accepted. set snmp usm Creates a USM user for SNMPv3.
Page 89 DWS-1008 CLI Reference Guide IP Services Commands set snmp usm (continued) usm-username Name of the SNMPv3 user. Specify between 1 and 32 alphanumeric characters, with no spaces. snmp-engine-id {ip ip-addr Speciﬁes a unique identiﬁer for the SNMP engine. | local | hex hex-string} To send informs, you must specify the engine ID of the inform receiver.
Page 90 DWS-1008 CLI Reference Guide IP Services Commands set snmp usm (continued) auth-type {none | md5 | sha} Speciﬁes the authentication type used to authenticate {auth-pass-phrase string communications with the remote SNMP engine. You can | auth-key hex-string} specify one of the following: •...
Page 91 The following command creates USM user securesnmpmgr1, which uses SHA authentication and 3DES encryption with passphrases.This user can send informs to the notiﬁcation receiver that has engine ID 192.168.40.2. DWS-1008# set snmp usm securesnmpmgr1 snmp-engine-id ip 192.168.40.2 auth-type sha auth-pass-phrase myauthpword encrypt-type 3des encrypt-pass-phrase mycryptpword success: change accepted.
Page 92: Set Summertime
DWS-1008 CLI Reference Guide IP Services Commands set summertime Offsets the real-time clock of a switch by +1 hour and returns it to standard time for daylight savings time or a similar summertime period that you set. Syntax: set summertime summer-name [start week weekday month hour min...
Page 93: Set Timedate
10.10.20.20 netmask 255.255.255.0 on vlan taupe DWS-1008# set system ip-address 10.10.20.20 success: change accepted. set timedate Sets the time of day and date on the DWS-1008 switch. Syntax: set timedate {date mmm dd yyyy [time hh:mm:ss]} date mmm dd yyyy System date: •...
Page 94: Set Timezone
Time now is: Sun Feb 29 2004, 23:58:02 PST set timezone Sets the number of hours, and optionally the number of minutes, that the DWS-1008 switch’s real-time clock is offset from Coordinated Universal Time (UTC). These values are also used by Network Time Protocol (NTP), if it is enabled.
Page 95: Show Arp
DWS-1008 CLI Reference Guide IP Services Commands show arp Displays the ARP table. Syntax: show arp [ip-addr] ip-addr IP address. Defaults: If you do not specify an IP address, the whole ARP table is displayed. Access: All Examples: The following command displays ARP entries:...
Page 96 DWS-1008 CLI Reference Guide IP Services Commands show dhcp-client Displays DHCP client information for all VLANs. Syntax: show dhcp-client Defaults: None Access: All Examples: The following command displays DHCP client information: DWS-1008# show dhcp-client Interface: corpvlan(4) Conﬁguration Status: Enabled DHCP State: IF_UP...
Page 97 DWS-1008 CLI Reference Guide IP Services Commands show dhcp-client (continued) Field Description Subnet Mask Network mask of the IP address received from the DHCPserver. Default Gateway Default gateway IP address received from the DHCP server. If the address is 0.0.0.0, the server did not provide an address.
Page 98 DWS-1008 CLI Reference Guide IP Services Commands show dhcp-server (continued) The following command displays conﬁguration and status information for each VLAN on which the DHCP server is conﬁgured: DWS-1008# show dhcp-server Interface: 0 (Direct AP) Status: UP Address Range: 10.0.0.1-10.0.0.253...
Page 99 DWS-1008 CLI Reference Guide IP Services Commands Output for show dhcp-client verbose Field Description Interface VLAN name and number. Status Status of the interface: • UP • DOWN Address Range Range from which the server can lease addresses. Hardware Address MAC address of the DHCP client.
Page 100: Show Interface
Access: All Usage: The IP interface table ﬂags an address assigned by a DHCP server with an asterisk ( * ). Examples: The following command displays all the IP interfaces conﬁgured on a DWS-1008 switch: DWS-1008# show interface VLAN Name...
Page 101: Show Ip Alias
Syntax: show ip alias [name] name Alias string. Defaults: If you do not specify an alias name, all aliases are displayed. Access: Enabled Examples: The following command displays all the aliases conﬁgured on a DWS-1008 switch: DWS-1008# show ip alias Name IP Address...
Page 102: Show Ip Route
(continued) The table below describes the ﬁelds in this display. Field Description Domain Name Default domain name conﬁgured on the DWS-1008 switch Status Status of the switch’s DNS client: • Enabled • Disabled IP Address IP address of the DNS server...
Page 103 If you add a static route and the route’s state is shown as Down, use the show interface command to verify that the DWS-1008 has an IP interface in the gateway router’s subnet. MSS cannot resolve a static route unless one of the switch’s VLANs has an interface in the gateway router’s subnet.
Page 104: Show Ip Telnet
DWS-1008 CLI Reference Guide IP Services Commands show ip route (continued) NH-Type Next-hop type: • Local - Route is for a local interface. MSS adds the route when you conﬁgure an IP address on the switch. • Direct - Route is for a locally attached subnet. MSS adds the route when you add an interface in the same subnet to the switch.
Page 105: Show Ntp
Displays NTP client information. Syntax: show ntp Defaults: None Access: All Examples: To display NTP information for a DWS-1008 switch, type the following command: DWS-1008> show ntp NTP client: enabled Current update-interval: 20(secs) Current time: Fri Feb 06 2004, 12:02:57 Timezone is set to ‘PST’, offset from UTC is -8:0 hours.
Page 106 DWS-1008 CLI Reference Guide IP Services Commands show ntp (continued) Field Description NTP client State of the NTP client. The state can be one of the following: • Enabled • Disabled Current update-interval Number of seconds between queries sent by the switch to the NTP servers for updates.
Page 107: Show Snmp Community
DWS-1008 CLI Reference Guide IP Services Commands show snmp community Displays the conﬁgured SNMP community strings. Syntax: show snmp community Defaults: None Access: Enabled Examples: To display the conﬁgured SNMP community strings, use the following command: DWS-1008# show snmp community Communities: “wireless_switch”, access=read-write-notify, notify target use cnt=0...
Page 108: Show Snmp Counters
DWS-1008 CLI Reference Guide IP Services Commands show snmp counters Displays SNMP statistics counters. Syntax: show snmp counters Defaults: None Access: Enabled Examples: To display SNMP statistics counters, use the following command: DWS-1008# show snmp counters Base SNMP Stats: input packets: 0 output packets: 0 output notifys(traps &...
Page 109 Displays SNMP notiﬁcation proﬁles. Syntax: show snmp notify proﬁle Defaults: None Access: Enabled Examples: To display notiﬁcation proﬁles, use the following command: DWS-1008# show snmp notify proﬁle Notify proﬁles: default notify proﬁle use cnt=0 notify status for proﬁle: LINKDOWN, drop LINKUP, drop The command lists settings separately for each notiﬁcation...
Page 110 Displays SNMP notiﬁcation targets. Syntax: show snmp notify target Defaults: None Access: Enabled Examples: To display a list of the SNMP notiﬁcation targets, use the following command: DWS-1008# show snmp notiﬁcation target Notify targets: 1: 10.10.40.99:162 user=”remote-nmsuser”, exists=no engineID=ip notify proﬁle=default, exists=yes...
Page 111: Show Snmp Status
DWS-1008 CLI Reference Guide IP Services Commands show snmp status Displays SNMP version and status information. Syntax: show snmp status Defaults: None Access: Enabled Examples: To display SNMP version and status information, use the following command: DWS-1008# show snmp status...
Page 112 DWS-1008 CLI Reference Guide IP Services Commands show snmp status (continued) Field Description SNMP minimum security Lowest (least secure) security level set on the switch: • authenticated - SNMP message exchanges are authenticated but are not encrypted. • auth-req-unsec-notify - SNMP message exchanges are authenticated but are not encrypted, and notiﬁcations...
Page 113 DWS-1008 CLI Reference Guide IP Services Commands show snmp usm Displays information about SNMPv3 users. Defaults: None Access: Enabled Examples: To display USM settings, use the following command: DWS-1008# show snmp usm USM users: “nmsuser”, engineID=localSnmpID access=read-notify auth=NONE encrypt=NONE notify target use cnt=0 The table below describes the ﬁelds in this display.
Page 114: Show Summertime
Recurring : yes, starting at 2:00 am of ﬁrst Sunday of April and ending at 2:00 am on last Sunday of October. show timedate Shows the date and time of day currently set on a DWS-1008 switch’s real-time clock. Syntax: show timedate Defaults: None Access: All Examples: To display the time and date set on a switch’s real-time clock, type the following...
Page 115: Show Timezone
DWS-1008 CLI Reference Guide IP Services Commands show timezone Shows the time offset for the real-time clock from UTC on a DWS-1008 switch. Syntax: show timezone Defaults: None Access: All Examples: To display the offset from UTC, type the following command: DWS-1008# show timezone Timezone set to ‘pst’, offset from UTC is -8 hours...
Page 116 ------ ------ ------ ------- default none backbone none none When the administrator presses Ctrl+t to end the Telnet connection, the management session returns to the local prompt: DWS-1008-remote> Session 0 pty tty2.d terminated tt name tty2.d DWS-1008# D-Link Systems, Inc.
Page 117 DWS-1008 CLI Reference Guide IP Services Commands traceroute Traces the route to an IP host. Syntax: traceroute host [dnf] [no-dns] [port port-num] [queries num] [size size] [ttl hops] [wait ms] host IP address, hostname, or alias of the destination host. Specify the IP address in dotted decimal notation.
Page 118 DWS-1008 CLI Reference Guide IP Services Commands traceroute (continued) The ﬁrst row of the display indicates the target host, the maximum number of hops, and the packet size. Each numbered row displays information about one hop. The rows are displayed in the order in which the hops occur, beginning with the hop closest to the DWS-1008 switch.
Page 119 DWS-1008 CLI Reference Guide IP Services Commands Notes D-Link Systems, Inc.
Page 120: Aaa Commands
ﬁrst delimiter character - either an at sign (@) or a period (.). Defaults: None Access: Enabled Examples: The following command removes accounting services for authorized network user Nin: DWS-1008# clear accounting dot1x Nin success: change accepted. D-Link Systems, Inc.
Page 121: Clear Authentication Admin
However, the options and behavior for the clear authentication admin command are the same as in previous releases. Examples: The following command clears authentication for administrator Jose: DWS-1008# clear authentication admin Jose success: change accepted. clear authentication console Removes an authentication rule for administrative access through the Console.
Page 122: Clear Authentication Dot1X
Access: Enabled Examples: The following command removes 802.1X authentication for network users with usernames ending in @thiscorp.com who try to access SSID ﬁnance: DWS-1008# clear authentication dot1x ssid ﬁnance *@thiscorp.com clear authentication last-resort Removes a last-resort authentication rule. Syntax: clear authentication last-resort {ssid ssid-name | wired} ssid ssid-name SSID name to which this authentication rule applies.
Page 123: Clear Authentication Mac
Access: Enabled Examples: The following command removes a MAC authentication rule for access to SSID thatcorp by MAC addresses beginning with aa:bb:cc: DWS-1008# clear authentication mac ssid thatcorp aa:bb:cc:* clear authentication proxy Removes a proxy rule for third-party AP users.
Page 124: Clear Location Policy
DWS-1008 CLI Reference Guide AAA Commands clear location policy Removes a rule from the location policy on a DWS-1008 switch. Syntax: clear location policy rule-number rule-number Index number of a location policy rule to remove from the location policy. Defaults: None...
Page 125 Defaults: None Access: Enabled Examples: The following command removes an access control list (ACL) from the proﬁle of a user at MAC address 01:02:03:04:05:06: DWS-1008# clear mac-user 01:02:03:04:05:06 attr ﬁlter-id success: change accepted. D-Link Systems, Inc.
Page 126 Examples: The following command deletes the user proﬁle for a user at MAC address 01:02:03:04:05:06 from its user group: DWS-1008# clear mac-user 01:02:03:04:05:06 group success: change accepted. clear mac-usergroup Removes a user group from the local database on the switch, for a group of users who are authenticated by a MAC address.
Page 127 Usage: To remove the group itself, use the clear mac-usergroup command. Examples:The following command removes the members of the MAC user group eastcoasters from a VLAN assignment by deleting the VLAN-Name attribute from the group: DWS-1008# clear mac-usergroup eastcoasters attr vlan-name success: change accepted. clear mobility-proﬁle Removes a Mobility Proﬁle entirely.
Page 128: Clear User
DWS-1008 CLI Reference Guide AAA Commands clear user Removes a user proﬁle from the local database on the switch, for a user with a password. (To remove a user proﬁle in RADIUS, see the documentation for your RADIUS server). Syntax: clear user username username Username of a user with a password.
Page 129: Clear Usergroup
Removes a user with a password from membership in a user group in the local database on the DWS-1008 switch. (To remove a user from a user group in RADIUS, see the documentation for your RADIUS server).
Page 130: Clear Usergroup Attr
Examples: The following command removes the members of the user group cardiology from a network access time restriction by deleting the Time-Of-Day attribute from the group: DWS-1008# clear usergroup cardiology attr time-of-day success: change accepted. set accounting {admin | console} Sets up accounting services for speciﬁed wireless users with administrative access, and...
Page 131 MSS sends interim updates to the RADIUS server when the user roams. Examples: The following command issues start-and-stop accounting records at the local database for administrator Natasha, when she accesses the switch using Telnet: DWS-1008# set accounting admin Natasha start-stop local success: change accepted. set accounting {dot1x | mac} Sets up accounting services for speciﬁed wireless users with network access, and deﬁnes...
Page 132 MSS sends interim updates to the RADIUS server when the user roams. Examples: The following command issues stop-only records to the RADIUS server group sg2 for network user Nin, who is authenticated by 802.1X: DWS-1008# set accounting dot1x Nin stop-only sg2 success: change accepted. D-Link Systems, Inc.
Page 133: Set Authentication Admin
DWS-1008 CLI Reference Guide AAA Commands set authentication admin Conﬁgures authentication and deﬁnes where it is performed for speciﬁed users with administrative access through Telnet. Syntax: set authentication admin user-glob method1 [method2] [method3] [method4] user-glob Single user or set of users with administrative access or network access.
Page 134: Set Authentication Console
Examples: The following command conﬁgures administrator Jose, who connects via Telnet, for authentication on RADIUS server group sg3: DWS-1008# set authentication admin Jose sg3 success: change accepted. set authentication console Conﬁgures authentication and deﬁnes where it is performed for speciﬁed users with administrative access through a console connection.
Page 135 MSS requires no username or password, by default. These users can press Enter at the prompts for administrative access. Note: D-Link recommends that you change the default setting unless the switch is in a secure physical location. Access: Enabled Usage:You can conﬁgure different authentication methods for different groups of users.
Page 136: Set Authentication Dot1X
DWS-1008 CLI Reference Guide AAA Commands set authentication dot1x Conﬁgures authentication and deﬁnes how and where it is performed for speciﬁed wireless or wired authentication clients who use an IEEE 802.1X authentication protocol to access the network through the switch.
Page 137 DWS-1008 CLI Reference Guide AAA Commands • eap-tls - EAP with Transport Layer Security (TLS): • Provides mutual authentication, integrity-protected negotiation, and key exchange • Requires X.509 public key certiﬁcates on both sides of the connection • Provides encryption and integrity checking for the connection •...
Page 138 Examples: The following command conﬁgures EAP-TLS authentication in the local database for SSID mycorp and 802.1X client Geetha: DWS-1008# set authentication dot1x ssid mycorp Geetha eap-tls local success: change accepted. The following command conﬁgures PEAP-MS-CHAP-V2 authentication at RADIUS server groups sg1 through sg3 for all 802.1X clients at example.com who want to access SSID...
Page 139 DWS-1008 CLI Reference Guide AAA Commands method1 At least one of up to four methods that MSS uses to handle method2 authentication. Specify one or more of the following methods in priority method3 order. MSS applies multiple methods in the order you enter them.
Page 140: Set Authentication Mac
Examples: The following command conﬁgures a last-resort authentication rule in the local database for SSID mycorp: DWS-1008# set authentication last-resort ssid mycorp local success: change accepted. set authentication mac Conﬁgures authentication and deﬁnes where it is performed for speciﬁed non-802.1X users with network access through a media access control (MAC) address.
Page 141: Set Authentication Proxy
Examples: To use the local database to authenticate all users who access the mycorp2 SSID by their MAC address, type the following command: DWS-1008# set authentication ssid mycorp2 mac ** local success: change accepted. set authentication proxy Conﬁgures a proxy authentication rule for a third-party AP’s wireless users.
Page 142 Examples: The following command conﬁgures a proxy authentication rule that matches on all usernames associated with SSID mycorp. MSS uses RADIUS server group srvrgrp1 to proxy RADIUS requests and hence to authenticate and authorize the users. DWS-1008# set authentication proxy ssid mycorp ** srvrgrp1 D-Link Systems, Inc.
Page 143: Set Location Policy
AAA Commands set location policy Creates and enables a location policy on a DWS-1008 switch. A location policy enables you to locally set or change authorization attributes for a user after the user is authorized by AAA, without making changes to the AAA server.
Page 144 DWS-1008 CLI Reference Guide AAA Commands set location policy (continued) vlan operator VLAN-Name attribute assigned by AAA and condition by which to vlan-glob determine if the location policy rule applies. Replace operator with one of the following operands: eq - Applies the location policy rule to all users assigned VLAN names matching vlan-glob.
Page 145 DWS-1008 CLI Reference Guide AAA Commands set location policy (continued) Usage: Only a single location policy is allowed per DWS-1008 switch. Once conﬁgured, the location policy becomes effective immediately. To disable location policy operation, use the clear location policy command.
Page 146 DWS-1008# set location policy permit vlan ﬂoor2 if port 2-4,6 The following command places all users who are authorized for SSID tempvendor_a into VLAN kiosk_1: DWS-1008# set location policy permit vlan kiosk_1 if ssid eq tempvendor_a success: change accepted. set mac-user Conﬁgures a user proﬁle in the local database on the switch for a user who can be authenticated...
Page 147 DWS-1008 CLI Reference Guide AAA Commands set mac-user attr (continued) Syntax: set mac-user mac-addr attr attribute-name value mac-addr MAC address of the user, in hexadecimal numbers separated by colons (:). You can omit leading zeros. attribute-name value Name and value of an attribute you are using to authorize the MAC user for a particular service or session characteristic.
Page 148 DWS-1008 CLI Reference Guide AAA Commands • Use acl-name.in to ﬁlter trafﬁc that enters the switch from users via an access port or wired authentication port, or from the network via a network port. • Use acl-name.out to ﬁlter trafﬁc sent from the switch...
Page 149 DWS-1008 CLI Reference Guide AAA Commands service-type (continued) • 6 - Administrative; for administrative access to the switch, with authorization to access the enabled (conﬁguration) mode. The user must enter the enable command and the correct enable password to access the enabled mode.
Page 150 DWS-1008 CLI Reference Guide AAA Commands set mac-user attr (continued) start-date Date and time at which Date and time, in the following the user becomes eligible format: YY/MM/DD-HH:MM to access the network. You can use start-date alone or with MSS does not end-date.
Page 151 Examples: The following command assigns input access control list (ACL) acl-03 to ﬁlter the packets from a user at MAC address 01:02:03:04:05:06: DWS-1008# set mac-user 01:02:03:04:05:06 attr ﬁlter-id acl-03.in success: change accepted. The following command restricts a user at MAC address 06:05:04:03:02:01 to network access between 7 p.m.
Page 152 To delete an attribute, use clear mac-usergroup attr. Examples: The following command creates the MAC user group eastcoasters and assigns the group members to VLAN orange: DWS-1008# set mac-usergroup eastcoasters attr vlan-name orange success: change accepted. set mobility-proﬁle Creates a Mobility Proﬁle and speciﬁes the DWL-8220AP access point and/or wired authentication ports on the switch through which any user assigned to the proﬁle is allowed...
Page 153 DWS-1008 CLI Reference Guide AAA Commands Defaults: No default Mobility Proﬁle exists on the DWS-1008 switch. If you do not assign Mobility Proﬁle attributes, all users have access through all ports, unless denied access by other AAA servers or by access control lists (ACLs).
Page 154: Set User
Examples: The following command creates a user proﬁle for user Nin in the local database, and assigns the password goody: DWS-1008# set user Nin password goody success: User Nin created The following command assigns the password chey3nne to the admin user:...
Page 155: Set User Attr
Usage: To change the value of an attribute, enter set user attr with the new value. To delete an attribute, use clear user attr. Examples: The following command assigns user Tamara to VLAN orange: DWS-1008# set user Tamara attr vlan-name orange success: change accepted. The following command assigns Tamara to the Mobility Proﬁle tulip.
Page 156: Set Usergroup
Usage: MSS does not require users to belong to user groups. To create a user group, user the command set usergroup. Examples: The following command adds user Hosni to the cardiology user group: DWS-1008# set user Hosni group cardiology success: change accepted. set usergroup Creates a user group in the local database on the switch for users and assigns authorization attributes for the group.
Page 157: Show Aaa
DWS-1008 CLI Reference Guide AAA Commands show aaa Displays all current AAA settings. Syntax: show aaa Defaults None Access: Enabled show aaa Examples: To display all current AAA settings, type the following command: DWS-1008# show aaa Default Values authport=1812 acctport=1813 timeout=5 acct-timeout=5 retrans=3...
Page 158 DWS-1008 CLI Reference Guide AAA Commands user last-resort-any Vlan-Name = foo mac-user 01:02:03:04:05:06 usergroup eastcoasters session-timeout = 99 The table below describes the ﬁelds that can appear in show aaa output. Field Description Default Values RADIUS default values for all parameters.
Page 159 DWS-1008 CLI Reference Guide AAA Commands show aaa (continued) Field Description Ports UDP ports that the switch uses for authentication messages and for accounting records. Setting of timeouts on each RADIUS server currently active. Tries Number of retransmissions conﬁgured for each RADIUS server currently active.
Page 160 DWS-1008 CLI Reference Guide AAA Commands The table below describes the ﬁelds that can appear in show accounting statistics output. Acct-Authentic Location where the user was authenticated (if authentication took place) for the session: • 1 - RADIUS server • 2 - Local database User-Name Username of a user with a password.
Page 161 3) permit vlan bld4.tac inacl tac_24.in if user eq *.ny.wodeﬁrm.com show mobility-proﬁle Displays the named Mobility Proﬁle. If you do not specify a Mobility Proﬁle name, this command shows all Mobility Proﬁle names and port lists on the DWS-1008. Syntax: show mobility-proﬁle [name] name Name of an existing Mobility Proﬁle.
Page 162 DWS-1008 CLI Reference Guide AAA Commands Notes D-Link Systems, Inc.
Page 163 DWS-1008 CLI Reference Guide AAA Commands Notes D-Link Systems, Inc.
Page 164: Access Point Commands
Use DWL-8220AP access point commands to conﬁgure and manage DWL-8220AP access points. Be sure to do the following before using the commands: • Deﬁne the country-speciﬁc IEEE 802.11 regulations on the DWS-1008 switch. • Install the DWL-8220AP access point and connect it to a port on the switch.
Page 165 The following command disables and resets radio 2 on the DWL-8220AP access point connected to port 3: DWS-1008# clear ap 3 radio 2 clear radio-proﬁle Removes a radio proﬁle or resets one of the proﬁle’s parameters to its default value.
Page 166 DWS-1008 CLI Reference Guide Access Point Commands The following commands disable the radios that are using radio proﬁle rptest and remove the proﬁle: DWS-1008# set radio-proﬁle rptest mode disable DWS-1008# clear radio-proﬁle rptest success: change accepted. clear service-proﬁle Removes a service proﬁle or resets one of the proﬁle’s parameters to its default value.
Page 167: Set Dap Auto
DWS-1008 CLI Reference Guide Access Point Commands Usage: When you enter this command, the DWL-8220AP access point drops all sessions and reboots. Caution: Restarting a DWL-8220AP access point can cause data loss for users who are currently associated with the DWL-8220AP.
Page 168: Set Dap Auto Mode
Examples: The following command enables the template for automatic Distributed AP conﬁguration: DWS-1008# set dap auto mode enable success: change accepted. set dap auto radiotype Sets the radio type for single-DWL-8220AP radios that use the DWL-8220AP conﬁguration template.
Page 169 DWS-1008# set dap auto radiotype 11b success: change accepted. set {ap | dap} bias Changes the bias for an DWL-8220AP. Bias is the priority of one DWS-1008 switch over other switches for booting and conﬁguring the DWL-8220AP. Syntax: set {ap port-list | dap {dap-num | auto}} bias {high | low}...
Page 170 DWS-1008 CLI Reference Guide Access Point Commands For example, if an DWL-8220AP is dual homed to two DWS-1008 switches, and one of the switches has 50 active DWL-8220APs while the other switch has 60 active DWL-8220APs, the new DWL-8220AP selects the switch that has only 50 active DWL-8220APs.
Page 171 Examples: The following example sets the ﬁngerprint for Distributed AP 8: DWS-1008# set dap 8 ﬁngerprint b4:f9:2a:52:37:58:f4:d0:10:75:43:2f:45:c9:52:c3 success: change accepted. set {AP | dap} group Conﬁgures a named group of DWL-8220AP access points. MSS automatically load balances sessions among the access points in a group.
Page 172 The following command conﬁgures a DWL-8220AP access point group named loadbalance1 that contains the DWL-8220AP access points on ports 1, 4, and 6: DWS-1008# set ap 1,4,6 group loadbalance1 success: change accepted. The following command removes the DWL-8220AP access point on port 4 from all...
Page 173 Examples: The following command conﬁgures the 802.11b/g radio on Distributed AP 1 to use antenna model ANT1060: DWS-1008# set dap 1 radio 1 antennatype ANT1060 success: change accepted. set {ap | dap} radio auto-tune max-power Sets the maximum power that RF Auto-Tuning can set on a radio.
Page 174 The following command sets the maximum power that RF Auto-Tuning can set on radio 1 on the DWL-8220AP access point on port 5 to 12 dBm. DWS-1008# set ap 5 radio 1 auto-tune max-power 12 success: change accepted. set {ap | dap} radio auto-tune max-retransmissions Sets the maximum percentage of client retransmissions a radio can experience before RF Auto-Tuning considers changing the channel on the radio.A high percentage of retransmissions...
Page 175 Examples: The following command changes the max-retransmissions value to 20: DWS-1008# set ap 6 radio 1 auto-tune max-retransmissions 20 success: change accepted. D-Link Systems, Inc.
Page 176 The following command conﬁgures the channel and transmit power on the 802.11b/g radio on the DWL-8220AP access point connected to port 2: DWS-1008# set ap 2 radio 1 channel 1 tx-power 10 success: change accepted. set {ap | dap} radio auto-tune min-client-rate Sets the minimum rate at which a radio is allowed to transmit trafﬁc to clients.
Page 177 DWS-1008 CLI Reference Guide Access Point Commands ap port-list List of ports connected to the DWL-8220AP access points on which to set the minimum data rate. dap dap-num Number of a Distributed AP on which to set the minimum data rate.
Page 178 Examples: The following command enables radio 1 on the DWL-8220AP access points connected to ports 1 through 5: DWS-1008# set ap 1-5 radio 1 mode enable success: change accepted. The following command enables radio 2 on ports 1 through 3: DWS-1008# set ap 1-3 radio 2 mode enable success: change accepted.
Page 179 Examples: The following command enables radio 1 on ports 4 through 6 assigned to radio proﬁle rp1: DWS-1008# set ap 4-6 radio 1 radio-proﬁle rp1 mode enable success: change accepted. set {ap | dap} radio tx-power Sets an DWL-8220AP radio’s transmit power.
Page 180: Set Dap Security
Sets security requirements for management sessions between a DWS-1008 switch and its Distributed APs. This feature applies to Distributed APs only, not to directly connected DWL- 8220APs conﬁgured on DWL-8220AP access ports. In addition, DWL-8220AP models DWL- 8220AP-101 and DWL-8220AP-122 do not have encryption keys and do not support this feature regardless of how they are connected to the switch.
Page 181 The switch also requires their ﬁngerprints to be conﬁrmed in MSS. When DWL-8220AP security is required, an AP can establish a management session with the DWS-1008 switch only if its ﬁngerprint has been conﬁrmed by you in MSS. A change to DWL-8220AP security support does not affect management sessions that are already established.
Page 182 Examples: The following command conﬁgures the 802.11b/g radios in radio proﬁle rp1 to allow associations from 802.11g clients only: DWS-1008# set radio-proﬁle rp1 11g-only enable success: change accepted. set radio-proﬁle active-scan Disables or reenables active RF detection scanning on the DWL-8220AP radios managed by a radio proﬁle.
Page 183 DWS-1008 CLI Reference Guide Access Point Commands Usage: You can enter this command on any DWS-1008 switch. The command takes effect only on that switch. Examples: The following command disables active scan in radio proﬁle radprof3: DWS-1008# set radio-proﬁle radprof3 active-scan disable success: change accepted.
Page 184 Access: Enabled. Usage: D-Link recommends that you use an interval of at least 300 seconds (5 minutes). RF Auto-Tuning can change a radio’s channel before the channel interval expires in response to RF anomalies. Even in this case, channel changes cannot occur more frequently than the channel holddown interval.
Page 185 Examples: The following command changes the power-backoff interval for radios in radio proﬁle rp2 to 15 seconds: DWS-1008# set radio-proﬁle rp2 auto-tune power-backoff-timer 15 success: change accepted. set radio-proﬁle auto-tune power-conﬁg Enables or disables dynamic power tuning (RF Auto-Tuning) for the DWL-8220AP radios in a radio proﬁle.
Page 186 Examples: The following command enables dynamic power tuning for radios in the rp2 radio proﬁle: DWS-1008# set radio-proﬁle rp2 auto-tune power-conﬁg enable success: change accepted. set radio-proﬁle auto-tune power-interval Sets the interval at which RF Auto-Tuning decides whether to change the power level on radios in a radio proﬁle.
Page 187 DWL-8220AP radios can also issue countermeasures against interfering devices. An interfering device is not part of the D-Link network but also is not a rogue. No client connected to the device has been detected communicating with any network entity listed in the forwarding database (FDD) of any DWS-1008 switch in the MobileLAN.
Page 188 The DTIM interval does not apply to unicast frames. Examples: The following command changes the DTIM interval for radio proﬁle rp1 to 2: DWS-1008# set radio-proﬁle rp1 dtim-interval 2 success: change accepted. set radio-proﬁle frag-threshold Changes the fragmentation threshold for the DWL-8220AP radios in a radio proﬁle. The fragmentation threshold speciﬁes the maximum length a frame is allowed to be without being...
Page 189 Examples: The following command changes the fragmentation threshold for radio proﬁle rp1 to 1500 bytes: DWS-1008# set radio-proﬁle rp1 frag-threshold 1500 success: change accepted. set radio-proﬁle long-retry Changes the long retry threshold for the DWL-8220AP radios in a radio proﬁle. The long retry threshold speciﬁes the number of times a radio can send a long unicast frame without...
Page 190 Examples: The following command changes the maximum receive threshold for radio proﬁle rp1 to 4000 ms: DWS-1008# set radio-proﬁle rp1 max-rx-lifetime 4000 success: change accepted. set radio-proﬁle max-tx-lifetime Changes the maximum transmit threshold for the DWL-8220AP radios in a radio proﬁle. The maximum transmit threshold speciﬁes the number of milliseconds that a frame scheduled to...
Page 191 DWS-1008# set radio-proﬁle rp1 success: change accepted. The following command enables the radios that use radio proﬁle rp1: DWS-1008# set radio-proﬁle rp1 mode enable The following commands disable the radios that use radio proﬁle rp1, change the beacon interval, then reenable the radios: DWS-1008# set radio-proﬁle rp1 mode disable...
Page 192 Examples: The following command conﬁgures 802.11b/g radios that use the radio proﬁle rp_long to advertise support for long preambles instead of short preambles: DWS-1008# set radio-proﬁle rp_long preamble-length long success: change accepted. set radio-proﬁle rts-threshold Changes the RTS threshold for the DWL-8220AP radios in a radio proﬁle. The RTS threshold speciﬁes the maximum length a frame can be before the radio uses the RTS/CTS method to...
Page 193 Examples: The following command changes the RTS threshold for radio proﬁle rp1 to 1500 bytes: DWS-1008# set radio-proﬁle rp1 rts-threshold 1500 success: change accepted. set radio-proﬁle service-proﬁle Maps a service proﬁle to a radio proﬁle. All radios that use the radio proﬁle also use the parameter settings, including SSID and encryption settings, in the service proﬁle.
Page 194 Examples: The following command changes the short retry threshold for radio proﬁle rp1 to 3: DWS-1008# set radio-proﬁle rp1 short-retry 3 success: change accepted. set radio-proﬁle wmm Disables or reenables Wi-Fi Multimedia (WMM) on the DWL-8220AP radios in a radio proﬁle.
Page 195 Examples: The following command disables 802.1X authentication for WPA clients that use service proﬁle wpa_clients: DWS-1008# set service-proﬁle wpa_clients auth-dot1x disable success: change accepted. set service-proﬁle auth-fallthru Speciﬁes the authentication type for users who do not match an 802.1X or MAC authentication rule for an SSID managed by the service proﬁle.
Page 196 Examples: The following command sets the fallthru authentication for SSIDS managed by the service proﬁle rnd_lab to none: DWS-1008# set service-proﬁle rnd_lab auth-fallthru none success: change accepted. set service-proﬁle auth-psk Enables preshared key (PSK) authentication of Wi-Fi Protected Access (WPA) clients by DWL-8220AP radios in a radio proﬁle, when the WPA information element (IE) is enabled in...
Page 197 Enabled Examples: The following command disables beaconing of the SSID managed by service proﬁle sp2: DWS-1008# set service-proﬁle sp2 beacon disable success: change accepted. set service-proﬁle cipher-ccmp Enables Counter with Cipher Block Chaining Message Authentication Code Protocol encryption with WPA clients, for a service proﬁle.
Page 198 To use TKIP, you must also enable the WPA IE. Examples: The following command disables TKIP encryption in service proﬁle sp2: DWS-1008# set service-proﬁle sp2 cipher-tkip disable success: change accepted. set service-proﬁle cipher-wep104 Enables dynamic Wired Equivalent Privacy (WEP) with 104-bit keys, in a service proﬁle.
Page 199 Examples: The following command conﬁgures service proﬁle sp2 to use 104-bit WEP encryption: DWS-1008# set service-proﬁle sp2 cipher-wep104 enable success: change accepted. set service-proﬁle cipher-wep40 Enables dynamic Wired Equivalent Privacy (WEP) with 40-bit keys, in a service proﬁle. set service-proﬁle name cipher-wep40 {enable | disable}...
Page 200 Examples: The following command conﬁgures service proﬁle sp3 to use passphrase “1234567890123<>?=+&% The quick brown fox jumps over the lazy sl”: DWS-1008# set service-proﬁle sp3 psk-phrase “1234567890123<>?=+&% The quick brown fox jumps over the lazy sl” success: change accepted. set service-proﬁle psk-raw Conﬁgures a raw hexadecimal preshared key (PSK) to use for authenticating WPA clients,...
Page 201 Enables shared-key authentication, in a service proﬁle. Note: Use this command only if advised to do so by D-Link. This command does not enable preshared key (PSK) authentication for Wi-Fi Protected Access (WPA). To enable PSK encryption for WPA, use the set service-proﬁle auth-psk command.
Page 202 Examples: The following command applies the name guest to the SSID managed by service proﬁle clear_wlan: DWS-1008# set service-proﬁle clear_wlan ssid-name guest success: change accepted. set service-proﬁle ssid-type Speciﬁes whether the SSID managed by a service proﬁle is encrypted or unencrypted.
Page 203 Examples: The following command changes the countermeasures wait time for service proﬁle sp3 to 30,000 ms (30 seconds): DWS-1008# set service-proﬁle sp3 tkip-mc-time 30000 success: change accepted. set service-proﬁle wep active-multicast-index Speciﬁes the static Wired-Equivalent Privacy (WEP) key (one of four) to use for encrypting multicast frames.
Page 204 Examples: The following command conﬁgures service proﬁle sp2 to use WEP key 2 for encrypting multicast trafﬁc: DWS-1008# set service-proﬁle sp2 wep active-multicast-index 2 success: change accepted. set service-proﬁle wep active-unicast-index Speciﬁes the static Wired-Equivalent Privacy (WEP) key (one of four) to use for encrypting unicast frames.
Page 205 Examples: The following command conﬁgures WEP key index 1 for service proﬁle sp2 to aabbccddee: DWS-1008# set service-proﬁle sp2 wep key-index 1 key aabbccddee success: change accepted. set service-proﬁle wpa-ie Enables the WPA information element (IE) in wireless frames. The WPA IE advertises the WPA authentication methods and cipher suites supported by radios in the radio proﬁle...
Page 206 MSS lists information separately for each DWL-8220AP access point. Examples: The following example shows conﬁguration information for a DWL-8220AP access point on port 2: DWS-1008# show ap conﬁg 2 Port 2: AP model: DWL-8220AP, POE: enable, bias: high, name: DWL-8220AP02 boot-download-enable: YES load balancing group: none Radio 1: type: 802.11g, mode: disabled, channel: 6 tx pwr: 1, proﬁle: default auto-tune...
Page 207 DWS-1008 CLI Reference Guide Access Point Commands Connection ID for the Distributed AP. Note: This ﬁeld is applicable only if the DWL-8220AP is conﬁgured on the switch as a Distributed AP. serial-id Serial ID of the DWL-8220AP access point. Note: This ﬁeld is displayed only for Distributed APs.
Page 208 DWS-1008 CLI Reference Guide Access Point Commands auto-tune min-client-rate Minimum data rate the radio must maintain for associated clients. When RF Auto-Tuning is enabled, the radio can temporarily increase its power to maintain the data rate with an associated client.
Page 209 DWS-1008 CLI Reference Guide Access Point Commands DWS-1008# show ap counters 7 Port: 7 radio: 1 ========================================================= LastPktXferRate PktTxCount 91594255 NumCntInPwrSave 4294966683 MultiPktDrop LastPktRxSigStrength MultiBytDrop LastPktSigNoiseRatio User Sessions TKIP Pkt Transfer Ct MIC Error Ct TKIP Pkt Replays TKIP Decrypt Err...
Page 210 DWS-1008 CLI Reference Guide Access Point Commands CCMP Pkt Decrypt Err Number of times a decryption error occurred with a packet encrypted with CCMP. CCMP Pkt Transfer Ct Total number of CCMP packets sent and received by the radio. PktTxCount Number of packets transmitted by the radio.
Page 211 None. Access: Enabled. Examples: The following command shows statistics for the DWL-8220AP forwarding queues on a Distributed AP: DWS-1008# show dap qos-stats 4 CoS Queue Tx =========================== DAP: 4 radio: 1 1,2 Background 19 0,3 BestEffort 437 4,5 Video 3034...
Page 212 Number of a Distributed AP for which to display counters. Defaults: None. Access: Enabled. Examples: The following command displays Ethernet statistics for the Ethernet ports on Distributed AP 1: DWS-1008# show dap etherstats 1 DAP: 1 ether: 1 ================================= RxUnicast: 75432 TxGoodFrames: 55210...
Page 213 DWS-1008 CLI Reference Guide Access Point Commands RxMulticast: 21798 TxSingleColl: RxBroadcast: TxLateColl: RxGoodFrames: 86188 TxMaxColl: RxAlignErrs: TxMultiColl: RxShortFrames: TxUnderruns: RxCrcErrors: TxCarrierLoss: RxOverruns: TxDeferred: RxDiscards: The table describes the ﬁelds in this display. Field Description --------------------------------------------------------------------------------------------------------------- RxUnicast Number of unicast frames received.
Page 214 Name of an DWL-8220AP group or Distributed AP group. Defaults: None. Access: Enabled. Examples: The following command displays information for DWL-8220AP access point group loadbalance1: DWS-1008# show ap group loadbalance1 Load Balance Grp Port Clients Status Refused loadbalance1 Accepting loadbalance1 Refusing The table describes the ﬁelds in this display.
Page 215 Note: This ﬁeld applies to the display for Distributed APs only. Examples: The following command displays the status of a Distributed AP access point: DWS-1008# show dap status 1 Dap: 1, IP-addr: 10.2.30.5 (vlan ‘vlan-corp’), AP model: DWL-8220AP, manufacturer: D- Link, name: AP01 ﬁngerprint: b4:f9:2a:52:37:58:f4:d0:10:75:43:2f:45:c9:52:c3...
Page 216 Access Point Commands The following command displays the status of a directly connected DWL-8220AP access point: DWS-1008# show ap status 1 Port: 1, AP model: DWL-8220AP, manufacturer D-Link name: AP01 ==================================================== State: operational CPU info: IBM:PPC speed=266666664 Hz version=405GPr id=0x28b08a1e047f1d0f ram=33554432...
Page 217 DWS-1008 CLI Reference Guide Access Point Commands Field Description ----------------------------------------------------------------------------------------------------------------------- Connection ID for the Distributed AP. Note: This ﬁeld is applicable only if the DWL-8220AP is conﬁgured on the switch as a Distributed AP. ----------------------------------------------------------------------------------------------------------------------- Port Switch port number. ----------------------------------------------------------------------------------------------------------------------- Note: This ﬁeld is applicable only if the DWL-8220AP is directly...
Page 218 DWS-1008 CLI Reference Guide Access Point Commands ----------------------------------------------------------------------------------------------------------------------- CPU info Speciﬁcations and identiﬁcation of the CPU. For DWL-8220AP models other than DWL-8220AP-1xx or DWL-8220AP-2xx, the ID portion of this field is not applicable. ----------------------------------------------------------------------------------------------------------------------- Uptime Amount of time since the DWL-8220AP booted using this link.
Page 219 The following command displays RF attribute information for radio 1 on the directly connected DWL-8220AP access point on port 2: DWS-1008# show auto-tune attributes ap 2 radio 1 Auto-tune attributes for port 2 radio 1: The table describes the ﬁelds in this display.
Page 220 DWS-1008 CLI Reference Guide Access Point Commands Packet Retransmission Number of retransmitted packets sent from the client Count to the radio on the active channel. Retransmissions can indicate that the client is not receiving ACKs from the DWL-8220AP radio. -----------------------------------------------------------------------------------------------------------------------...
Page 221 DWS-1008 CLI Reference Guide Access Point Commands show auto-tune neighbors Displays the other D-Link radios and third-party 802.11 radios that a D-Link radio can hear. show auto-tune neighbors [ap ap-num Syntax: [radio {1 | 2| all}]] Syntax: show auto-tune neighbors [dap dap-num...
Page 222 DWS-1008 CLI Reference Guide Access Point Commands Field Description ----------------------------------------------------------------------------------------------------------------------- Channel Channel on which the BSSID is detected. ----------------------------------------------------------------------------------------------------------------------- Neighbor BSS/MAC BSSID detected by the radio. ----------------------------------------------------------------------------------------------------------------------- RSSI Received signal strength indication (RSSI), in decibels referred to 1 milliwatt (dBm). A higher value indicates a stronger signal.
Page 223 This is the switch that the DWL-8220AP used for booting and conﬁguration and is using for data transfer. show dap global Displays conﬁguration information for Distributed APs conﬁgured on the DWS-1008 switch. Syntax: show dap global [dap-num | serial-id serial-ID] dap-num Number of a Distributed AP for which to display conﬁguration settings.
Page 224 DWS-1008 CLI Reference Guide Access Point Commands DWS-1008# show dap global Total number of entries: 8 DAP Serial Id Switch IP Address Bias 11223344 10.3.8.111 HIGH 11223344 10.4.3.2 332211 10.3.8.111 332211 10.4.3.2 HIGH 0322100185 10.3.8.111 HIGH 0322100185 10.4.3.2 0321500120 10.3.8.111 0321500120 10.4.3.2...
Page 225 DWS-1008 CLI Reference Guide Access Point Commands Usage: This command also displays an DWL-8220AP that is directly connected to a switch, if the switch port to which the DWL-8220AP is connected is conﬁgured as a network port instead of an DWL-8220AP access port, and if the network port is a member of a VLAN.
Page 226 Defaults: None. Access: Enabled. Usage: MSS contains a default radio proﬁle. D-Link recommends that you do not change this proﬁle but instead keep the proﬁle for reference. Examples: The following command shows radio proﬁle information for the default radio proﬁle: DWS-1008# show radio-proﬁle default...
Page 227 DWS-1008 CLI Reference Guide Access Point Commands RTS Threshold Minimum length (in bytes) a frame can be for a radio in the radio proﬁle to use the RTS/CTS method to send the frame. The RTS/CTS method clears the air of other trafﬁc to avoid corruption of the frame due to a collision with another frame.
Page 228 DWS-1008 CLI Reference Guide Access Point Commands Client Backoff Timer Interval, in minutes, at which radios in a radio proﬁle reduce power after temporarily increasing the power to maintain the minimum data rate for an associated client. At the end of each power-backoff interval, radios that temporarily increased their power reduce it by 1 dBm.
Page 229 DWS-1008 CLI Reference Guide Access Point Commands Field Description ----------------------------------------------------------------------------------------------------------------------- ssid-name Service set identiﬁer (SSID) managed by this service proﬁle. ----------------------------------------------------------------------------------------------------------------------- ssid-type SSID type: • crypto - Wireless trafﬁc for the SSID is encrypted. • clear - Wireless trafﬁc for the SSID is unencrypted.
Page 230 DWS-1008 CLI Reference Guide Access Point Commands Shared Key Auth Indicates whether shared-key authentication is enabled. ----------------------------------------------------------------------------------------------------------------------- WPA enabled Indicates that the Wi-Fi Protected Access (WPA) information element (IE) is enabled. Additional ﬁelds display the settings of other WPA parameters: •...
Page 231: Spanning Tree Protocol (Stp) Commands
STP Commands Use Spanning Tree Protocol (STP) commands to conﬁgure and manage spanning trees on the virtual LANs (VLANs) conﬁgured on a DWS-1008 switch, to maintain a loop-free network. This chapter presents STP commands alphabetically. Use the following table to locate commands in this chapter based on their use.
Page 232: Clear Spantree Portvlancost
Usage: MSS does not change a port’s cost for VLANs other than the one(s) you specify. Examples: The following command resets the STP cost for port 12 in VLAN sunﬂower: DWS-1008# clear spantree portvlancost 12 vlan sunﬂower success: change accepted. clear spantree portvlanpri Resets to the default value the priority of a network port or ports for selection as part of the path to the STP root bridge, on one VLAN or all VLANs.
Page 233: Clear Spantree Statistics
Usage: MSS does not change a port’s priority for VLANs other than the one(s) you specify. Examples: The following command resets the STP priority for port 5 in VLAN avocado: DWS-1008# clear spantree portvlanpri 5 vlan avocado success: change accepted. clear spantree statistics Clears STP statistics counters for a network port or ports and resets them to 0.
Page 234: Set Spantree Backbonefast
DWS-1008# set spantree enable success: change accepted. The following command disables STP on VLAN burgundy: DWS-1008# set spantree disable vlan burgundy success: change accepted. set spantree backbonefast Enables or disables STP backbone fast convergence on a switch. This feature accelerates a port’s recovery following the failure of an indirect link.
Page 235: Set Spantree Fwddelay
Access: Enabled. Examples: The following command changes the forwarding delay on VLAN pink to 20 seconds: DWS-1008# set spantree fwddelay 20 vlan pink success: change accepted. set spantree hello Changes the interval between STP hello messages sent by a switch when operating as the root bridge, on one or all of its conﬁgured VLANs.
Page 236: Set Spantree Maxage
DWS-1008 CLI Reference Guide STP Commands DWS-1008# set spantree hello 4 all success: change accepted. set spantree maxage Changes the maximum age for an STP root bridge hello packet that is acceptable to a switch acting as a designated bridge on one or all of its VLANs. After waiting this period of time for a new hello packet, the switch determines that the root bridge is unavailable and issues a topology change message.
Page 237: Set Spantree Portfast
VLAN, use the set spantree portvlancost command. Examples: The following command changes the cost on ports 3 and 4 to 20: DWS-1008# set spantree portcost 3,4 cost 20 success: change accepted. set spantree portfast Enables or disables STP port fast convergence on one or more ports on a switch.
Page 238: Set Spantree Portpri
VLAN, use the set spantree portvlanpri command. Examples: The following command sets the priority of ports 3 and 4 to 48: DWS-1008# set spantree portpri 3-4 priority 48 success: change accepted. set spantree portvlancost Changes the cost of a network port or ports on paths to the STP root bridge for a speciﬁc...
Page 239: Set Spantree Portvlanpri
STP Commands Access: Enabled. Examples: The following command changes the cost on ports 3 and 4 to 20 in VLAN mauve: DWS-1008# set spantree portvlancost 3,4 cost 20 vlan mauve success: change accepted. set spantree portvlanpri Changes the priority of a network port or ports for selection as part of the path to the STP root bridge, on one VLAN or all VLANs.
Page 240: Set Spantree Uplinkfast
Defaults: The default root bridge priority for the switch on all VLANs is 32,768. Access: Enabled. Examples: The following command sets the bridge priority of VLAN pink to 69: DWS-1008# set spantree priority 69 vlan pink success: change accepted. set spantree uplinkfast Enables or disables STP uplink fast convergence on a switch.
Page 241 Displays information for only the active (forwarding) ports. Defaults: None. Access: All. Examples: The following command displays STP information for VLAN default: DWS-1008# show spantree vlan default VLAN Spanning tree mode PVST+ Spanning tree type IEEE Spanning tree enabled...
Page 242 DWS-1008 CLI Reference Guide STP Commands Output for show spantree Field Description VLAN VLAN number. Spanning tree mode In the current software version, the mode is always PVST+, which means Per VLAN Spanning Tree+. Spanning tree type In the current software version, the type is always IEEE, which means STP is based on the IEEE 802 standards.
Page 243: Show Spantree Blockedports
DWS-1008 CLI Reference Guide STP Commands Port-State STP state of the port: • Blocking - The port is not forwarding Layer 2 trafﬁc but is listening to and forwarding STP control trafﬁc. • Disabled - The port is not forwarding any trafﬁc, including STP control trafﬁc.
Page 244: Show Spantree Portfast
Access: All. Usage: The command lists information separately for each VLAN. Examples: The following command shows information about blocked ports on a switch for the default VLAN (VLAN 1): DWS-1008# show spantree blockedports vlan default Port Vlan Port-State Cost Prio Portfast...
Page 245: Show Spantree Portvlancost
Examples: The following command shows the STP port cost of port 1: DWS-1008# show spantree portvlancost 1 port 1 VLAN 1 have path cost 19 show spantree statistics Displays STP statistics for one or more DWS-1008 switch network ports. Syntax: show spantree statistics port-list vlan vlan-id D-Link Systems, Inc.
Page 246 Defaults: None. Access: All. Usage: The command displays statistics separately for each port. Examples: The following command shows STP statistics for port 1: DWS-1008# show spantree statistics 1 BPDU related parameters Port 1 VLAN 1 spanning tree enabled for VLAN = 1...
Page 247 DWS-1008 CLI Reference Guide STP Commands Status of Port Timers forward delay timer INACTIVE forward delay timer value message age timer ACTIVE message age timer value topology change timer INACTIVE topology change timer value hold timer INACTIVE hold timer value...
Page 248 DWS-1008 CLI Reference Guide STP Commands Output for show spantree statistics Field Description Port Port number. VLAN VLAN ID. Spanning Tree enabled for vlan State of the STP feature on the VLAN. port spanning tree State of the STP feature on the port.
Page 249 DWS-1008 CLI Reference Guide STP Commands top_change_ack Value of the topology change acknowledgment ﬂag in the next conﬁgured bridge protocol data unit (BPDU) to be transmitted on the associated port. The ﬂag is set in reply to a topology change notiﬁcation BPDU.
Page 250 DWS-1008 CLI Reference Guide STP Commands topology change timer Status of the topology change timer. This timer determines the time period during which conﬁgured BPDUs are transmitted with the topology change ﬂag set by this switch when it is the root bridge, after detection of a topology change.
Page 251 DWS-1008 CLI Reference Guide STP Commands topology change time Time period, in seconds, during which BPDUs are transmitted with the topology change ﬂag set by this switch when it is the root bridge, after detection of a topology change. It is equal to the sum of the switch’s maximum age and...
Page 252: Show Spantree Uplinkfast
DWS-1008 CLI Reference Guide STP Commands show spantree uplinkfast Displays uplink fast convergence information for one VLAN or all VLANs. Syntax: show spantree uplinkfast vlan vlan-id vlan vlan-id VLAN name or number. If you do not specify a VLAN, MSS displays STP statistics for all VLANs.
Page 253: Igmp Snooping Commands
DWS-1008 CLI Reference Guide IGMP Snooping Commands IGMP Snooping Commands Use Internet Group Management Protocol (IGMP) snooping commands to conﬁgure and manage multicast trafﬁc reduction on a switch. clear igmp statistics Clears IGMP statistics counters on one VLAN or all VLANs on a switch and resets them to...
Page 254: Set Igmp Lmqi
Access: Enabled. Examples: The following command changes the last member query interval on VLAN orange to 5 tenths of a second: DWS-1008# set igmp lmqi 5 vlan orange success: change accepted. set igmp mrouter Adds or removes a port in a switch’s list of ports on which it forwards trafﬁc to multicast routers.
Page 255: Set Igmp Mrsol
Examples: The following command adds port 9 as a static multicast router port: DWS-1008# set igmp mrouter port 9 enable success: change accepted. The following command removes port 9 from the static multicast router port list: DWS-1008# set igmp mrouter port 9 disable success: change accepted.
Page 256: Set Igmp Mrsol Mrsi
Access: Enabled. Examples: The following example changes the multicast router solicitation interval to 60 seconds: DWS-1008# set igmp mrsol mrsi 60 success: change accepted. set igmp oqi Changes the IGMP other-querier-present interval timer on one VLAN or all VLANs on a switch.
Page 257 IGMP Snooping Commands Examples: The following command changes the other-querier-present interval on VLAN orange to 200 seconds: DWS-1008# set igmp oqi 200 vlan orange success: change accepted. set igmp proxy-report Disables or reenables proxy reporting by a switch on one VLAN or all VLANs.
Page 258: Set Igmp Qri
Examples: The following command changes the query interval on VLAN orange to 100 seconds: DWS-1008# set igmp qi 100 vlan orange success: change accepted. set igmp qri Changes the IGMP query response interval timer on one VLAN or all VLANs on a switch.
Page 259: Set Igmp Querier
VLANs. Defaults: The pseudo-querier is disabled on all VLANs by default. Access: Enabled. Usage: D-Link recommends that you use the pseudo-querier only when the VLAN contains local multicast trafﬁc sources and no multicast router is servicing the subnet.
Page 260: Show Igmp
Examples: The following command adds port 7 as a static multicast receiver port: DWS-1008# set igmp receiver port 7 enable success: change accepted. The following command removes port 7 from the list of static multicast receiver ports: DWS-1008# set igmp receiver port 7 disable success: change accepted.
Page 261 VLAN, MSS displays IGMP information for all VLANs. Defaults: None. Access: All. Examples: The following command displays IGMP information for VLAN orange: DWS-1008# show igmp vlan orange VLAN: orange IGMP is enabled Proxy reporting is on Mrouter solicitation is on Querier functionality is off Conﬁguration values: qi: 125 oqi: 300 qri: 100 lmqi: 10 rvalue: 2 Multicast...
Page 262 DWS-1008 CLI Reference Guide IGMP Snooping Commands Mrouter-Term Mrouter-Sol DVMRP PIM V1 PIM V2 Topology notiﬁcations: 0 Packets with unknown IGMP type: 0 Packets with bad length: 0 Packets with bad checksum: 0 Packets dropped: 4 Output for show igmp...
Page 263 DWS-1008 CLI Reference Guide IGMP Snooping Commands Type How the switch learned that the port is a multicast router port: • conf - Static multicast port conﬁgured by an administrator • madv - Multicast advertisement • quer - IGMP query •...
Page 264: Show Igmp Mrouter
Defaults: None. Access: All. Examples: The following command displays the multicast routers in VLAN orange: DWS-1008# show igmp mrouter vlan orange Multicast routers for vlan orange Port Mrouter-IPaddr Mrouter-MAC Type TTL ---- --------------- ----------------- ----- ----- 192.28.7.5 00:01:02:03:04:05 dvmrp D-Link Systems, Inc.
Page 265: Show Igmp Querier
DWS-1008 CLI Reference Guide IGMP Snooping Commands Output for show igmp mrouter Field Description Multicast routers for VLAN containing the multicast routers. vlan Ports are listed separately for each VLAN. Port Number of the physical port through which the switch can reach the router.
Page 266 DWS-1008 CLI Reference Guide IGMP Snooping Commands DWS-1008# show igmp querier vlan orange Querier for vlan orange Port Querier-IP Querier-MAC ---- --------------- ----------------- ----- 1 193.122.135.178 00:0b:cc:d2:e9:b4 The following command shows the information MSS displays when the querier is the switch...
Page 267 MSS displays the multicast receivers for all groups. Defaults: None. Access: All. Examples: The following command displays all multicast receivers in VLAN orange: DWS-1008# show igmp receiver-table vlan orange VLAN: orange Session Port Receiver-IP Receiver-MAC...
Page 268: Show Igmp Statistics
VLAN, MSS displays IGMP statistics for all VLANs. Defaults: None. Access: All. Examples: The following command displays IGMP statistics for VLAN orange: DWS-1008# show igmp statistics vlan orange IGMP statistics for vlan orange: IGMP message type Received Transmitted Dropped...
Page 269 DWS-1008 CLI Reference Guide IGMP Snooping Commands Leave Mrouter-Adv Mrouter-Term Mrouter-Sol DVMRP PIM V1 PIM V2 Topology notiﬁcations: 0 Packets with unknown IGMP type: 0 Packets with bad length: 0 Packets with bad checksum: 0 Packets dropped: 4 Output for show igmp statistics...
Page 270 DWS-1008 CLI Reference Guide IGMP Snooping Commands IGMP message type Type of IGMP message, continued: • Mrouter-Term - Multicast router termination messages. A multicast router sends this type of message when multicast forwarding is disabled on the router interface, the router interface is administratively disabled, or the router itself is gracefully shutdown.
Page 271: Security Acl Commands
(CoS) to deﬁne the priority of treatment for packet ﬁltering. (Security ACLs are different from the location policy on a DWS-1008 switch, which helps you locally control user access. clear security acl Clears a speciﬁed security ACL, an access control entry (ACE), or all security ACLs, from...
Page 272: Clear Security Acl Map
1. deny IP source IP 192.168.1.1 0.0.0.0 destination IP any enable-hits DWS-1008# clear security acl acl_133 DWS-1008# commit security acl acl_133 conﬁguration accepted DWS-1008# show security acl info all ACL information for all set security acl ip acl_134 (hits #3 0) --------------------------------------------------------------------------- 1.
Page 273: Commit Security Acl
Examples: To clear the mapping of security ACL acljoe from port 4 for incoming packets, type the following command: DWS-1008# clear security acl map acljoe port 4 in clear mapping accepted To clear all physical ports, virtual ports, and VLANs on a switch of the ACLs mapped for incoming and outgoing trafﬁc, type the following command:...
Page 274 Static acl_124 Static DWS-1008# show security acl info all editbuffer acl editbuffer information for all hit-sample-rate Speciﬁes the time interval, in seconds, at which the packet counter for each security ACL is sampled for display. The counter counts the number of packets ﬁltered by the security ACL - or “hits.”...
Page 275: Rollback Security Acl
The results show that 916 packets matching security acl_153 were sent since the ACL was mapped. DWS-1008# hit-sample-rate 15 DWS-1008# show security acl info acl_153 ACL information for acl_153 set security acl ip acl_153 (hits #3 916) 1.
Page 276: Set Security Acl
DWS-1008# show security acl info all editbuffer ACL edit-buffer information for all set security acl ip acl_122 (ACEs 3, add 3, del 0, modiﬁed 0) --------------------------------------------------------------------------- 1.
Page 277 • Numbers 0 through 9 • Hyphen (-), underscore (_), and period (.) D-Link recommends that you do not use the same name with different capitalizations for ACLs. For example, do not conﬁgure two separate ACLs with the names acl_123 and ACL_123.
Page 278 DWS-1008 CLI Reference Guide Security ACL Commands • 4 or 5 - Video. Packets are queued in DWL-8220AP forwarding queue 2. Use CoS level 4 or 5 for voice over IP (VoIP) packets other than SpectraLink Voice Priority (SVP). • 6 or 7 - Voice. Packets are queued in DWL-8220AP forwarding queue Use 6 or 7 only for VoIP phones that use SVP, not for other types of trafﬁc...
Page 279 DWS-1008 CLI Reference Guide Security ACL Commands code icmp-code For ICMP messages ﬁltered by type, additionally ﬁlters ICMP messages by code. Specify a value from 0 through 255. (For a list of ICMPmessage type and code numbers, see www.iana.org/assignments/icmp-parameters.) precedence Filters packets by precedence level.
Page 280 IP address 192.168.0.1 to destination IP address 192.168.0.2 for established sessions only, and counts the hits: DWS-1008# set security acl ip acl_125 deny tcp 192.168.0.1 0.0.0.0 192.168.0.2 0.0.0.0 established hits The following command adds an ACE to acl_125 that denies TCP packets from source IP address 192.168.1.1 to destination IP address 192.168.1.2, on destination port 80 only,...
Page 281: Set Security Acl Map
DWS-1008 CLI Reference Guide Security ACL Commands set security acl map Assigns a committed security ACL to a VLAN, physical port or ports, virtual port, or Distributed AP on the switch. Note: To assign a security ACL to a user or group in the local database, use the command set user attr, set mac-user attr, set usergroup attr, or set mac-usergroup attr with the Filter-Id attribute.
Page 282 Security ACL Commands Examples: The following command maps security ACL acl_133 to port 4 for incoming packets: DWS-1008 set security acl map acl_133 port 4 in success: change accepted. show security acl Displays a summary of security ACLs that are committed - saved in the running conﬁguration and nonvolatile storage - or a summary of ACLs in the edit buffer.
Page 283 Use the ﬁrst ACE to match on the precedence and ToS values corresponding to the DSCP value. Use the second ACE to match on the same precedence value but on the ToS value plus 1. Examples: The following command displays the table: DWS-1008# show security acl dscp DSCP precedence -----------------------------------------------------------------------------------------...
Page 284 If you do not use this parameter, only committed ACLs are shown. Defaults: None Access: Enabled Examples: To display the contents of all security ACLs committed on a switch, type the following command: DWS-1008# show security acl info all ACL information for all D-Link Systems, Inc.
Page 285 The following command displays the contents of acl_123 in the edit buffer, including the committed ACE rules 1 and 2 and the uncommitted rule 3: DWS-1008# show security acl info acl_123 editbuffer ACL edit-buffer information for acl_123 set security acl ip acl_123 (ACEs 3, add 3, del 0, modiﬁed 0) ----------------------------------------------------------------------------------------------------- 1.
Page 286 Displays statistics about the resources used by security ACL ﬁltering on the switch. Syntax: show security acl resource-usage Defaults: None Access: Enabled Usage: Use this command with the help of D-Link Technical Assistance Examples: To display security ACL resource usage, type the following command: DWS-1008# show security acl resource-usage ACL resources Classiﬁer tree counters...
Page 287 DWS-1008 CLI Reference Guide Security ACL Commands In mapping : True No VLAN or PORT mapping : False No VPORT mapping : True The table below explains the ﬁelds in the show security acl resource-usage output. show security acl resource-usage Output...
Page 288 DWS-1008 CLI Reference Guide Security ACL Commands show security acl resource-usage Output (continued) ----------------------------------------------------------------------------------------------------------------------------- Field Description ----------------------------------------------------------------------------------------------------------------------------- Leaves in secondary Number of ACL data entries stored in secondary leaf memory. ----------------------------------------------------------------------------------------------------------------------------- Sum node depth Total number of security ACL data entries.
Page 289 DWS-1008 CLI Reference Guide Security ACL Commands show security acl resource-usage Output (continued) ----------------------------------------------------------------------------------------------------------------------------- Field Description ----------------------------------------------------------------------------------------------------------------------------- Root in ﬁrst Leaf buffer allocation: • True - Enough primary leaf buffers are allocated in nonvolatile memory to accommodate all leaves. • False - Insufﬁcient primary leaf buffers are allocated in nonvolatile memory to accommodate all leaves.
Page 290: Cryptography Commands
IEEE 802.1X wireless clients for which the switch performs authentication. crypto ca-certiﬁcate Installs a certiﬁcate authority’s own PKCS #7 certiﬁcate into the DWS-1008 switch certiﬁcate and key storage area. Syntax: crypto ca-certiﬁcate {eap} PEM-formatted-certiﬁcate...
Page 291 DWS-1008 CLI Reference Guide Cryptography Commands 3. When MSS prompts you for the PEM-formatted certiﬁcate, paste the PKCS #7 object ﬁle onto the command line. Examples: The following command adds the certiﬁcate authority’s certiﬁcate to certiﬁcate and key storage: DWS-1008# crypto ca-certiﬁcate admin Enter PEM-encoded certiﬁcate...
Page 292: Crypto Generate Key
Access: Enabled Usage: You can overwrite a key by generating another key of the same type. Examples: To generate an administrative key for use, type the following command: DWS-1008# crypto generate key admin 1024 key pair generated D-Link Systems, Inc.
Page 293: Crypto Generate Request
DWS-1008 CLI Reference Guide Cryptography Commands crypto generate request Generates a Certiﬁcate Signing Request (CSR). This command outputs a PEM-formatted PKCS #10 text string that you can cut and paste to another location for delivery to a certiﬁcate authority. This command generates either an administrative CSR for use with an EAP CSR for use with 802.1X clients.
Page 294 DWS-1008 CLI Reference Guide Cryptography Commands Defaults: None Access: Enabled Usage: To use this command, you must already have generated a public-private encryption key pair with the crypto generate key command. Enter crypto generate request eap and press Enter. When you are prompted, type the identifying values in the ﬁelds, or press Enter if the ﬁeld is optional.You must enter a common...
Page 295 DWS-1008 CLI Reference Guide Cryptography Commands crypto generate self-signed Generates a self-signed certiﬁcate for either an administrative certiﬁcate for use with an EAP certiﬁcate for use with 802.1X wireless users. Syntax: crypto generate self-signed {eap} Generates an EAP certiﬁcate to authenticate the switch to 802.1X supplicants (clients).
Page 296: Crypto Otp
D-Link recommends that you create a password that is memorable to you but is not subject to easy guesses or a dictionary attack. For best results, create a password of alphanumeric uppercase and lowercase characters.
Page 297: Crypto Pkcs
Unpacks a PKCS #12 object ﬁle into the certiﬁcate and key storage area on the switch. This object ﬁle contains a public-private key pair, a DWS-1008 switch certiﬁcate signed by a certiﬁcate authority, and the certiﬁcate authority’s certiﬁcate.
Page 298 Displays information about the certiﬁcate authority’s certiﬁcate that signed the Extensible Authentication Protocol (EAP) certiﬁcate for the switch. The EAP certiﬁcate authenticates the DWS-1008 switch to 802.1X supplicants (clients). Defaults: None Access: Enabled Examples: To display information about the certiﬁcate of a certiﬁcate authority, type the following command: DWS-1008# show crypto ca-certiﬁcate...
Page 299 Usage: You must have generated a self-signed certiﬁcate or obtained a certiﬁcate from a certiﬁcate authority before displaying information about the certiﬁcate. Examples: To display information about a cryptographic certiﬁcate, type the following command: DWS-1008# show crypto certiﬁcate eap Table 69 describes the ﬁelds of the display. Fields...
Page 300: Show Crypto Key Ssh
SSH clients remember the encryption key after the ﬁrst connection, so you need to check the key only once. Syntax: show crypto key ssh Defaults: None Access: Enabled Examples To display SSH key information, type the following command: DWS-1008# show crypto key ssh ec:6f:56:7f:d1:fd:c0:28:93:ae:a4:f9:7c:f5:13:04 D-Link Systems, Inc.
Page 301 DWS-1008 CLI Reference Guide Cryptography Commands Notes D-Link Systems, Inc.
Page 302: Radius Commands
DWS-1008 CLI Reference Guide RADIUS Commands RADIUS Commands Use RADIUS commands to set up communication between an switch and groups of up to four RADIUS servers for remote authentication, authorization, and accounting (AAA) of administrators and network users. This chapter presents RADIUS commands alphabetically.
Page 303: Clear Radius Proxy Client
None. Access: Enabled. Examples: The following command clears all RADIUS proxy client entries from the switch: DWS-1008# clear radius proxy client all success: change accepted. clear radius proxy port Removes a RADIUS proxy port conﬁgured for a third-party AP. D-Link Systems, Inc.
Page 304: Clear Radius Server
None. Access: Enabled. Examples: The following command clears all RADIUS proxy port entries from the switch: DWS-1008# clear radius proxy port all success: change accepted. clear radius server Removes the named RADIUS server from the switch conﬁguration. Syntax: clear radius server server-name server-name Name of a RADIUS server conﬁgured to perform...
Page 305: Set Radius
DWS-1008# clear server group sg-77 success: change accepted. To disable load balancing in a server group shorebirds, type the following command: DWS-1008# set server group shorebirds load-balance disable success: change accepted. set radius Conﬁgures global defaults for RADIUS servers that do not explicitly set these values themselves.
Page 306: Set Radius Proxy Client
The following commands sets the dead time to 5 minutes, the RADIUS key to goody, the number of retransmissions to 1, and the timeout to 21 seconds on all RADIUS servers connected to the switch: DWS-1008# set radius deadtime 5 success: change accepted. DWS-1008# set radius key goody success: change accepted.
Page 307: Set Radius Proxy Port
The following command conﬁgures a RADIUS proxy entry for a third-party AP RADIUS client at 10.20.20.9, sending RADIUS trafﬁc to the default UDP ports 1812 and 1813 on the switch: DWS-1008# set radius proxy client address 10.20.20.9 key radkey1 success: change accepted. set radius proxy port Conﬁgures the switch port connected to a third-party AP as a RADIUS proxy for the SSID...
Page 308: Set Radius Server
Examples: The following command maps SSID mycorp to packets received on port 3 or 4, using 802.1Q tag value 104: DWS-1008# set radius proxy port 3-4 tag 104 ssid mycorp success: change accepted. set radius server Conﬁgures RADIUS servers and their parameters. By default, the switch automatically sets all these values except the password (key).
Page 309 5 minutes of dead time, a key string of keys4u, and the default authorization password of dlink, type the following command: DWS-1008# set radius server RS42 address 198.162.1.1 timeout 30 retransmit 2 deadtime 5 key keys4U D-Link Systems, Inc.
Page 310: Set Server Group
Examples: To set server group shorebirds with members heron, egret, and sandpiper, type the following command: DWS-1008# set server group shorebirds members heron egret sandpiper success: change accepted. set server group load-balance Enables or disables load balancing among the RADIUS servers in a server group.
Page 311 AAA method. Examples: To enable load balancing between the members of server group shorebirds, type the following command: DWS-1008# set server group shorebirds load-balance enable success: change accepted. To disable load balancing between shorebirds server group members, type the following command: DWS-1008# set server group shorebirds load-balance disable success: change accepted.
Page 312: 802.1X Management Commands
DWS-1008 CLI Reference Guide 802.1x Management Commands 802.1X Management Commands Use 802. IEEE X management commands to modify the default settings for IEEE 802.1X sessions on a switch. For best results, change the settings only if you are aware of a problem with the switch’s 802.1X performance.
Page 313 DWS-1008 CLI Reference Guide 802.1x Management Commands clear dot1x port-control Resets all wired authentication ports on the switch to default 802.1X authentication. clear dot1x port-control Syntax: Defaults: By default, all wired authentication ports are set to auto and they process authentication requests as determined by the set authentication dot1X command.
Page 314: Clear Dot1X Timeout Supplicant
Examples: To reset the default timeout for requests to an authentication server, type the following command: DWS-1008# clear dot1x timeout auth-server success: change accepted. clear dot1x timeout supplicant Resets to the default setting the number of seconds that must elapse before the switch times out an authentication session with a supplicant (client).
Page 315: Set Dot1X Authcontrol
Examples: Type the following command to reset the timeout period for an authentication session: DWS-1008# clear dot1x timeout supplicant success: change accepted. clear dot1x tx-period Resets to the default setting the number of seconds that must elapse before the switch retransmits an EAP over LAN (EAPoL) packet.
Page 316 WPA or RSN. These clients can be affected by the 802.1X reauthentication parameter or the RADIUS Session-Timeout parameter. D-Link recommends that you try 60 seconds, and change the period to a longer value only if clients are unable to authenticate within 60 seconds.
Page 317 Access: Enabled. Examples: Type the following command to enable key transmission: DWS-1008# set dot1x key-tx enable success: dot1x key transmission enabled. set dot1x max-req Sets the maximum number of times the switch retransmits an EAP request to a supplicant (client) before ending the authentication session.
Page 318 DWS-1008# set dot1x port-control forceauth 19 success: authcontrol for 19 is set to FORCE-AUTH. set dot1x quiet-period Sets the number of seconds a DWS-1008 switch remains quiet and does not respond to a supplicant after a failed authentication. set dot1x quiet-period seconds...
Page 319: Set Dot1X Reauth
802.1x Management Commands Examples: Type the following command to set the quiet period to 90 seconds: DWS-1008# set dot1x quiet-period 90 success: dot1x quiet period set to 90. set dot1x reauth Determines whether the switch allows the reauthentication of supplicants (clients).
Page 320: Set Dot1X Timeout Supplicant
Examples: Type the following command to set the authentication server timeout to 60 seconds: DWS-1008# set dot1x timeout auth-server 60 success: dot1x auth-server timeout set to 60. set dot1x timeout supplicant Sets the number of seconds that must elapse before the switch times out an authentication session with a supplicant (client).
Page 321 Causes the broadcast and multicast keys for WEP to be rotated at an interval set by the set dot1x weprekeyperiod for each radio, associated VLAN, and encryption type. The DWS-1008 switch generates the new broadcast and multicast keys and pushes the keys to the clients via EAPoL key messages.
Page 322: Show Dot1X
VLAN, or encryption type receive the new keys at the same time. Examples: Type the following command to disable WEP key rotation: DWS-1008# set dot1x wep-rekey disable success: wep rekeying disabled set dot1x wep-rekey-period Sets the interval for rotating the WEP broadcast and multicast keys.
Page 323 DWS-1008 CLI Reference Guide 802.1x Management Commands Defaults: None. Access: Enabled. Examples: Type the following command to display the 802.1X clients: DWS-1008# show dot1x clients MAC Address State Vlan Identity ----------------------------------------------------------------------------------------------------------- 00:20:a6:48:01:1f Connecting (unknown) 00:05:3c:07:6d:7c Authenticated vlan-it EXAMPLE\jose 00:05:5d:7e:94:83 Authenticated vlan-eng...
Page 324 DWS-1008 CLI Reference Guide 802.1x Management Commands Type the following command to display 802.1X statistics: DWS-1008# show dot1x stats 802.1X statistic value ---------------- ----- Enters Connecting: Logoffs While Connecting: Enters Authenticating: Success While Authenticating: 0 Timeouts While Authenticating: 52 Failures While Authenticating: 0...
Page 325 DWS-1008 CLI Reference Guide 802.1x Management Commands Starts While Number of times that the switch Authenticating state wildcard transitions from AUTHENTICATING to ABORTING, as a result of an EAPoL-Start message being received from the Supplicant (client). Logoffs While Number of times that the switch...
Page 326: Session Management Commands
DWS-1008 CLI Reference Guide Session Management Commands Session Management Commands Use session management commands to display and clear administrative and network user sessions. clear sessions Clears all administrative sessions, or clears administrative console or Telnet sessions. Syntax: clear sessions {admin | console | telnet [client [session-id]]}...
Page 327: Clear Sessions Network
DWS-1008 CLI Reference Guide Session Management Commands To clear Telnet client session 0, type the following command: DWS-1008# clear sessions telnet client 0 clear sessions network Clears all network sessions for a speciﬁed username or set of usernames, MAC address or set of MAC addresses, virtual LAN (VLAN) or set of VLANs, or session ID.
Page 328: Show Sessions
Session Management Commands Examples: To clear all sessions for MAC address 00:01:02:03:04:05, type the following command: DWS-1008# clear sessions network mac-addr 00:01:02:03:04:05 To clear session 9, type the following command: DWS-1008# clear sessions network session-id 9 SM Apr 11 19:53:38 DEBUG SM-STATE: localid 9, mac 00:06:25:09:39:5d, ﬂags 0000012fh, to change state to KILLING...
Page 329 DWS-1008> show sessions telnet Username Time (s) ------- -------------------- -------- tty2 7395 To view information about Telnet client sessions, type the following command: DWS-1008# show sessions telnet client Session Server Address Server Port Client Port ----------------------------------------------------------------------- 192.168.1.81 48000 10.10.1.22 48001...
Page 330: Show Sessions Network
DWS-1008 CLI Reference Guide Session Management Commands show sessions telnet client Output Field Description Session Session number assigned by MSS when the client session is established. Server IP address of the remote device. Address Server Port TCP port number of the remote device’s TCP server.
Page 331 DWS-1008 CLI Reference Guide Session Management Commands vlan vlan-glob Displays all network sessions on a single VLAN or a set of VLANs. Specify a VLAN name, use the double-asterisk wildcard character (**) to specify all VLAN names, or use the single-asterisk wildcard character (*) to specify a set of VLAN names up to or following the ﬁrst delimiter character,...
Page 332 EXAMPLE\Havel 10.10.10.40 vlan-eng 2 sessions match criteria (of 3 total) The following command displays detailed (verbose) session information about user nin@example.com: DWS-1008> show sessions network user nin@example.com verbose User Sess IP or MAC VLAN Port/ Name ID Address Name...
Page 333 (Additional show sessions network verbose Ou describes the additional ﬁelds of the verbose output of show sessions network commands.) The following command displays information about network session 27: DWS-1008> show sessions network session-id 27 Global Id: SESS-27-000430-835586-58dfe5a State: ACTIVE Port/Radio: 3/1...
Page 334 DWS-1008 CLI Reference Guide Session Management Commands Additional show sessions network verbose Output Field Description Client MAC MAC address of the session user. Global session ID, a unique session number. State Status of the session: • AUTH, ASSOC REQ—Client is being associated by the 802.1X protocol.
Page 335 DWS-1008 CLI Reference Guide Session Management Commands State Status of the session: • AUTH, ASSOC REQ—Client is being associated by the 802.1X protocol. • AUTH AND ASSOC—Client is being associated by the 802.1X protocol, and the user is being authenticated.
Page 336 DWS-1008 CLI Reference Guide Session Management Commands Unicast bytes in Total number of unicast bytes received from the user by the switch (64-bit counter). Unicast packets Total number of unicast packets sent by the switch to the user (64-bit counter).
Page 337: Rf Detection Commands
MSS automatically performs RF detection scans on enabled and disabled radios to detect rogue access points. A rogue access point is a BSSID (MAC address associated with an SSID) that does not belong to a D-Link device . MSS can issue countermeasures against rogue devices to prevent clients from being able to use them.
Page 338: Clear Rfdetect Ignore
Defaults: None. Access: Enabled. Examples: The following command removes BSSID aa:bb:cc:11:22:33 from the ignore list for RF scans: DWS-1008# clear rfdetect ignore aa:bb:cc:11:22:33 success: aa:bb:cc:11:22:33 is no longer ignored. clear rfdetect ssid-list Removes an SSID from the permitted SSID list.
Page 339 Examples: The following command removes client OUI aa:bb:cc:00:00:00 from the permitted vendor list: DWS-1008# clear rfdetect vendor-list client aa:bb:cc:00:00:00 success: aa:bb:cc:00:00:00 is no longer in client vendor-list. set rfdetect attack-list Adds an entry to the attack list. The attack list speciﬁes the MAC address of devices that MSS should issue countermeasures against whenever the devices are detected on the network.
Page 340: Set Rfdetect Ignore
Syntax: set rfdetect ignore mac-addr mac-addr BSSID (MAC address) of the device to ignore. Defaults: MSS reports all non-D-Link BSSIDs detected during an RF scan. Access: Enabled. Usage: Use this command to identify third-party APs and other devices you are already aware of and do not want MSS to report following RF scans.
Page 341: Set Rfdetect Signature
Usage: The command applies only to APs managed by the switch on which you enter the command. Examples: The following command enables AP signatures on an DWS-1008 switch: DWS-1008# set rfdetect signature enable success: signature is now enabled. set rfdetect ssid-list Adds an SSID to the permitted SSID list.The permitted SSID list speciﬁes the SSIDs that are...
Page 342 Switches do not share permitted vendor lists. Examples: The following command adds an entry for clients whose MAC addresses start with aa:bb:cc: DWS-1008# set rfdetect vendor-list client aa:bb:cc:00:00:00 success: MAC aa:bb:cc:00:00:00 is now in client vendor-list. The trailing 00:00:00 value is required.
Page 343: Show Rfdetect Clients
Client Mac Address: 00:0c:41:63:fd:6d, Vendor: D-Link Port: dap 1, Radio: 1, Channel: 11, RSSI: -82, Rate: 2, Last Seen (secs ago): 84 Bssid: 00:0b:0e:01:02:00, Vendor: D-Link, Type: intfr, Dst: ff:ff:ff:ff:ff:ff Last Rogue Status Check (secs ago): 3 The ﬁrst line lists information for the client. The other lines list information about the most recent 802.11 packet detected from the client.
Page 344 DWS-1008 CLI Reference Guide RF Detection Commands show rfdetect clients Output Field Description Client MAC MAC address of the client. Client Vendor Company that manufactures or sells the client. AP MAC MAC address of the radio with which the rogue client is associated.
Page 345: Show Rfdetect Counters
DWS-1008 CLI Reference Guide RF Detection Commands Classiﬁcation of the rogue device: • rogue - Wireless device that is on the network but is not supposed to be on the network. • intfr - Wireless device that is not part...
Page 346 Defaults: None. Access: Enabled. Usage: You can enter this command on any DWS-1008 switch. To display all devices that a speciﬁc D-Link radio has detected, even if the radio is managed by another switch, use the show rfdetect visible command.
Page 347: Show Rfdetect Ignore
DWS-1008 CLI Reference Guide RF Detection Commands show rfdetect data Output Field Description BSSID MAC address of the SSID used by the detected device. Vendor Company that manufactures or sells the rogue device. Type Classiﬁcation of the rogue device: • rogue - Wireless device that is not supposed to be on the network.
Page 348 DWS-1008 CLI Reference Guide RF Detection Commands Examples: The following example displays the list of ignored devices: DWS-1008# show rfdetect ignore Total number of entries: 2 Ignore MAC ----------------- aa:bb:cc:11:22:33 aa:bb:cc:44:55:66 show rfdetect SSID The lines in this display are compiled from data from multiple listeners (AP radios). If an item has the value unresolved, not all listeners agree on the value for that item.
Page 349: Show Rfdetect Visible
------ aa:bb:cc:00:00:00 client 11:22:33:00:00:00 ap show rfdetect visible Displays the BSSIDs discovered by a speciﬁc D-Link radio. The data includes BSSIDs transmitted by other D-Link radios as well as by third-party access points. show rfdetect visible mac-addr Syntax: show rfdetect visible ap ap-num [radio {1 | 2}]...
Page 350 DWS-1008 CLI Reference Guide RF Detection Commands Usage: If a D-Link radio is supporting more than one SSID, each of the corresponding BSSIDs is listed separately. Examples: To following command displays information about the rogues detected by radio 1 on AP port 3:...
Page 351 DWS-1008 CLI Reference Guide RF Detection Commands Flags Classiﬁcation and encryption information for the rogue: • The i, a, or u ﬂag indicates the classiﬁcation. • The other ﬂags indicate the encryption used by the rogue. For ﬂag deﬁnitions, see the key in the command output.
Page 352: File Management Commands
DWS-1008 CLI Reference Guide File Management Commands File Management Commands Use ﬁle management commands to manage system ﬁles and to display software and boot information. backup Creates an archive of switch system ﬁles and optionally, user ﬁle, in Unix tape archive (tar) format.
Page 353 TFTP server. The ﬁlename in this example includes a TFTP server IP address, so the archive is not stored locally on the switch. DWS-1008# backup system tftp:/10.10.20.9/sysa_bak critical success: sent 28263 bytes in 0.324 seconds [ 87231 bytes/sec] clear boot conﬁg Resets to the factory default the conﬁguration that MSS loads during a reboot.
Page 354 DWS-1008 CLI Reference Guide File Management Commands Syntax: copy source-url destination-url source-url Name and location of the ﬁle to copy. The uniform resource locator (URL) can be one of the following: • [subdirname/]ﬁlename • ﬁle:[subdirname/]ﬁlename • tftp://ip-addr/[subdirname/]ﬁlename • tmp:ﬁlename For the ﬁlename, specify between 1 and 128 alphanumeric characters, with no spaces.
Page 355 DWS-1008 CLI Reference Guide File Management Commands Examples: The following command copies a ﬁle called ﬂoor from nonvolatile storage to a TFTP server: DWS-1008# copy ﬂoormx tftp://10.1.1.1/ﬂoor success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] The following command copies a ﬁle called closet from a TFTP server to nonvolatile storage: DWS-1008# copy tftp://10.1.1.1/closet closet...
Page 356 DWS-1008 CLI Reference Guide File Management Commands DWS-1008# copy testconﬁg tftp://10.1.1.1/testconﬁg success: sent 365 bytes in 0.401 seconds [ 910 bytes/sec] DWS-1008# delete testconﬁg success: ﬁle deleted. Examples: The following command deletes ﬁle dang_doc from subdirectory dang: DWS-1008# delete dang/dang_doc success: ﬁle deleted.
Page 357 DWS-1008 CLI Reference Guide File Management Commands The following command displays the ﬁles in the old subdirectory: DWS-1008# dir old ============================================================= ﬁle: Filename Size Created ﬁle:conﬁguration.txt 3541 bytes Sep 22 2003, 22:55:44 ﬁle:conﬁguration.xml 24 KB Sep 22 2003, 22:55:44 Total: 27 Kbytes used, 207824 Kbytes free The table below describes the ﬁelds in the dir output.
Page 358 DWS-1008 CLI Reference Guide File Management Commands Defaults: If you do not specify a ﬁlename, MSS uses the same conﬁguration ﬁlename that was used for the previous conﬁguration load. For example, if the switch used conﬁguration for the most recent conﬁguration load, MSS uses conﬁguration again unless you specify a different ﬁlename.
Page 359: Reset System
Filename Size Created Total: 0 bytes used, 93537 Kbytes free reset system Restarts a DWS-1008 switch and reboots the software. Syntax: reset system [force] force Immediately restarts the system and reboots, without comparing the running conﬁguration to the conﬁguration ﬁle.
Page 360 CAUTION: Do not use this option unless advised to do so by D-Link Tech Support. If you restore one switch’s system ﬁles onto another switch, you must generate new key pairs and certiﬁcates on the switch.
Page 361 DWS-1008 CLI Reference Guide File Management Commands Usage: The backup command stores the MAC address of the switch in the archive. By default, the restore command works only if the MAC address in the archive matches the MAC address of the switch where the restore command is entered. The force option overrides this restriction and allows you to unpack one switch’s archive onto...
Page 362 Defaults: The default conﬁguration ﬁlename is conﬁguration. Access: Enabled. Usage: The ﬁle must be located in the switch’s nonvolatile storage. Examples: The following command sets the boot conﬁguration ﬁle to testconﬁg1: DWS-1008# set boot conﬁguration-ﬁle testconﬁg1 success: boot conﬁg set. D-Link Systems, Inc.
Page 363: Set Boot Partition
Displays the system image and conﬁguration ﬁlenames used after the last reboot and conﬁgured for use after the next reboot. Syntax: show boot Defaults: None. Access: Access. Examples: The following command shows the boot information for a DWS-1008 switch: DWS-1008# show boot Conﬁgured boot image: boot0:020003.020 Conﬁgured boot conﬁguration: ﬁle:newconﬁg Booted version: 2.0.3...
Page 364 MSS is running this software image. Booted conﬁguration Conﬁguration ﬁlename MSS used to load the conﬁguration the last time the software was rebooted. show conﬁg Displays the conﬁguration running on the DWS-1008 switch. Syntax: show conﬁg [area area D-Link Systems, Inc.
Page 365 DWS-1008 CLI Reference Guide File Management Commands area area Conﬁguration area. You can specify one of the following: • • acls • • • eapol • httpd • • ip-conﬁg • • • portconﬁg • portgroup • radio-proﬁle • rfdetect •...
Page 366: Show Version
Defaults: None Access: All. Examples: The following command displays version information for a DWS-1008 switch: DWS-1008# show version Mobility System Software, Version: 3.0.0 Copyright (c) 2003,2004 by D-Link Systems, Inc Build Information: (build#75) TOP 2004-06-30 07:25:00...
Page 367 File Management Commands The following command displays additional software build information and DWL-8220AP access point information: DWS-1008# show version details Mobility System Software, Version: 3.0.0 Copyright (c) 2003,2004 by D-Link Systems, Inc Build Information: (build#75) TOP 2004-06-30 07:25:00 Model: DWS-1008 Hardware Mainboard: version 0 ;...
Page 368 DWS-1008 CLI Reference Guide File Management Commands Port/DAP Port number connected to a DWL-8220AP access point. AP Model AP model number. Serial # AP serial number. Versions AP hardware, ﬁrmware, and software versions. D-Link Systems, Inc.
Page 369: Trace Commands
DWS-1008 CLI Reference Guide Trace Commands Trace Commands Use trace commands to perform diagnostic routines. While MSS allows you to run many types of traces, this chapter describes commands for those traces you are most likely to use. For a complete listing of the types of traces MSS allows, type the set trace ? command.
Page 370: Save Trace
DWS-1008 CLI Reference Guide Trace Commands To clear the session manager trace, type the following command: DWS-1008# clear trace sm success: clear trace sm save trace Saves the accumulated trace data for enabled traces to a ﬁle in the switch’s nonvolatile storage.
Page 371: Set Trace Authorization
Defaults: The default trace level is 5. Access: Enabled. Examples: The following command starts a trace for information about user jose’s authentication: DWS-1008# set trace authentication user jose success: change accepted. set trace authorization Traces authorization information. Syntax: set trace authorization [mac-addr mac-address] [port port-num] [user...
Page 372: Set Trace Dot1X
Defaults: The default trace level is 5. Access: Enabled. Examples: The following command starts a trace for the 802.1X sessions for MAC address 00:01:02:03:04:05: DWS-1008# set trace dot1x mac-addr 00:01:02:03:04:05: success: change accepted. set trace sm Traces session manager activity.
Page 373: Show Trace
Access: Enabled. Examples: Type the following command to trace session manager activity for MAC address 00:01:02:03:04:05: DWS-1008# set trace sm mac-addr 00:01:02:03:04:05: success: change accepted. show trace Displays information about traces that are currently conﬁgured on the switch, or all possible trace options.
Page 374: Snoop Commands
Access: Enabled. Examples: The following command removes snoop ﬁlter snoop2 from radio 2 on Distributed AP 3: DWS-1008# clear snoop map snoop2 dap 3 radio 2 success: change accepted. The following command removes all snoop ﬁlter mappings from all radios: DWS-1008# clear snoop map all success: change accepted.
Page 375: Set Snoop
Speciﬁes the maximum number of bytes to capture. If you do not specify a length, the entire packet is copied and sent to the observer. D-Link recommends specifying a snap length of 100 bytes or less. Defaults: No snoop ﬁlters are conﬁgured by default.
Page 376: Set Snoop Map
MAC address aa:bb:cc:dd:ee:ff and the device with MAC address 11:22:33:44:55:66, and copies the trafﬁc to the device that has IP address 10.10.30.3: DWS-1008# set snoop snoop2 frame-type eq data mac-pair aa:bb:cc:dd:ee:ff 11:22:33:44:55:66 observer 10.10.30.3 snap-length 100 set snoop map Maps a snoop ﬁlter to a radio on a Distributed AP.
Page 377: Set Snoop Mode
If the ﬁlter does not have an observer, the AP still maintains a counter of the number of packets that match the ﬁlter. Examples: The following command maps snoop ﬁlter snoop1 to radio 2 on Distributed AP3: DWS-1008# set snoop map snoop1 dap 3 radio 2 success: change accepted. set snoop mode Enables a snoop ﬁlter.
Page 378 DWS-1008 CLI Reference Guide Snoop Commands show snoop Displays the AP radio mapping for all snoop ﬁlters. Syntax: show snoop Defaults: None. Access: Enabled. Usage: To display the mappings for a speciﬁc AP radio, use the show snoop map command.
Page 379 Defaults: None. Access: Enabled. Usage: To display the mappings for all snoop ﬁlters, use the show snoop command. Examples: The following command shows the mapping for snoop ﬁlter snoop1: DWS-1008# show snoop map snoop1 ﬁlter ‘snoop1’ mapping Dap: 3 Radio: 2 show snoop stats Displays statistics for enabled snoop ﬁlters.
Page 380 DWS-1008 CLI Reference Guide Snoop Commands The table below describes the ﬁelds in this display. Field Description Filter Name of the snoop ﬁlter. Distributed AP containing the radio to which the ﬁlter is mapped. Radio Radio to which the ﬁlter is mapped.
Page 381: System Log Commands
Enables or disables logging of DWS-1008 and AP events to the switch log buffer or other logging destination and sets the level of the events logged. For logging to a syslog server only, you can also set the facility logged.
Page 382 DWS-1008 CLI Reference Guide System Log Commands Syntax: set log {buffer | console | current | server ip-addr | sessions | trace} [severity severity-level] [enable | disable] set log server ip-addr [severity severity-level [local-facility facility-level]] [enable | disable] buffer Sets log parameters for the log buffer in nonvolatile storage.
Page 383: Set Log Trace Mbytes
Examples: To log only emergency, alert, and critical system events to the console, type the following command: DWS-1008# set log console severity critical enable success: change accepted. set log trace mbytes Changes the size of trace log ﬁles.
Page 384 Defaults: The default trace buffer size is 1 MB. Access: Enabled. Examples: The following command increases the trace buffer size to 4 MB: DWS-1008# set log trace mbytes 4 success: change accepted. show log buffer Displays system information stored in the nonvolatile log buffer or the trace buffer.
Page 385 Access: Enabled. Usage: The debug level produces a lot of messages, many of which can appear to be somewhat cryptic. Debug messages are used primarily by D-link for troubleshooting and are not intended for administrator use. Examples: Type the following command to see the facilities for which you can view event...
Page 386 DWS-1008 CLI Reference Guide System Log Commands show log conﬁg Displays log conﬁguration information. Syntax: show log conﬁg Defaults: None. Access: Enabled. Examples: To display how logging is conﬁgured, type the following command: DWS-1008# show log conﬁg Logging console: disabled...
Page 387 DWS-1008 CLI Reference Guide System Log Commands +|-|/number-of- Displays the number of messages speciﬁed as messages follows: • A positive number (for example, +100), displays that number of log entries starting from the oldest in the log. • A negative number (for example, -100) displays that number of log entries starting from newest in the log.
Page 388 AP, RAPDA, EAP, PORTCONFIG, FP. The following command displays the newest ﬁve trace log entries for the ROGUE facility: DWS-1008# show log trace +5 facility ROGUE ROGUE Oct 28 16:30:19.695141 ERROR ROGUE_AP_ALERT: Xmtr Mac 01:0b:0e:ff:00:3b Po rt 7 Radio 1 Chan 36 RSSI 18 Tech DOT_11A SSID default ROGUE Oct 28 16:30:19.7046...
Page 389: Boot Prompt Commands
Enter (return). Caution: Generally, boot prompt commands are used only for troubleshooting. D-Link recommends that you use these commands only when working with D-link to diagnose a system issue.In particular, commands that change boot parameters can interfere with a switch’s ability to boot successfully.
Page 390 The options are appended to the options already in the boot proﬁle. Use this parameter only if advised to do so by D-Link. Defaults: The boot settings in the currently active boot proﬁle are used by default.
Page 391 DWS-1008 CLI Reference Guide Boot Prompt Commands Examples: The following command loads system image ﬁle 010101.020 from boot partition 1: boot> boot FN=010101.020 DEV=boot1 Compact Flash load from boot1:testcfg matches 010101.020. unzip: Inﬂating ramdisk_1.1.1.. OK unzip ﬁle len 36085486 OK Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003 The NetBSD Foundation, Inc.
Page 392 Access: Boot prompt. Usage: A DWS-1008 switch can have up to four boot proﬁles. The boot proﬁles are stored in slots, numbered 0 through 3. When you create a new proﬁle, the system uses the next available slot for the proﬁle. If all four slots already contain proﬁles and you try to create a ﬁfth proﬁle, the switch displays a message advising you to change one...
Page 393 Usage: Access to the diagnostic mode requires a password, which is not user conﬁgurable. Use this mode only if advised to do so by D-Link. Displays the boot code and system image ﬁles on a DWS-1008 switch. D-Link Systems, Inc.
Page 394 DWS-1008 CLI Reference Guide Boot Prompt Commands Syntax: dir [c: | d: | e: | f: | boot0 | boot1] Nonvolatile storage area containing boot partition 0 (primary). Nonvolatile storage area containing boot partition 1 (secondary). Primary partition of the ﬂash card in the ﬂash card slot.
Page 395 DWS-1008 CLI Reference Guide Boot Prompt Commands Secondary partition of the ﬂash card in the ﬂash card slot. boot0: Boot partition 0. boot1: Boot partition 1. [ﬁlename] System image ﬁlename. Defaults: None. Access: Boot prompt. Usage: To display the image ﬁlenames, use the dir command. This command does not list the boot code versions.
Page 396 Defaults: None. Access: Boot prompt. Usage: A DWS-1008 switch contains 4 boot proﬁle slots, numbered 0 through 3. This command activates the boot proﬁle in the next slot, in ascending numerical order. If the currently active slot is 3, the command activates the boot proﬁle in slot 0.
Page 397 DWS-1008 CLI Reference Guide Boot Prompt Commands Examples: To activate the boot proﬁle in the next slot and display the proﬁle, type the following command: boot> next BOOT Index: BOOT TYPE: DEVICE: boot1: FILENAME: testcfg FLAGS: 00000000 OPTIONS: run=nos;boot=0 reset Resets the switch’s hardware.
Page 398 DWS-1008 CLI Reference Guide Boot Prompt Commands show Displays the currently active boot proﬁle. A boot proﬁle is a set of parameters that a switch uses to control the boot process. Each boot proﬁle contains the following parameters: • Boot type - Either compact ﬂash (local device on the switch) or network (TFTP) •...
Page 399 Displays or changes the state of the poweron test ﬂag.The poweron test ﬂag controls whether a DWS-1008 performs a set of self tests prior to the boot process. Syntax: test [ON | on | OFF | off] Enables the poweron test ﬂag.
Page 400 DWS-1008 CLI Reference Guide Boot Prompt Commands Examples: The following command displays the current setting of the poweron test ﬂag: boot> test The diagnostic execution ﬂag is not set. version Displays version information for a switch’s hardware and boot code.
Page 401: Warranty
D-Link’s sole obligation shall be to repair or replace the defective Hardware during the Warranty Period at no charge to the original owner or to refund at D-Link’s sole discretion. Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Ofﬁce.
Page 402 Period from the date or original retail purchase. If a material non-conformance is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to replace the non-conforming Software, the price paid by the original licensee for the non-conforming Software will be refunded by D-Link;...
Page 403: What Is Not Covered
DWS-1008 CLI Reference Guide Warranty D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and...
Page 404: Governing Law
DWS-1008 CLI Reference Guide Warranty Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES...
Page 405: Fcc Caution
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. • Consult the dealer or an experienced radio/TV technician for help. For detailed warranty outside the United States, please contact corresponding local D-Link ofﬁce. FCC Caution: The manufacturer is not responsible for any radio or TV interference caused by unauthorized modiﬁcations to this equipment;...
Page 406: Registration
DWS-1008 CLI Reference Guide Registration Registration Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights. Revised: April 4, 2006 Version 1.1 D-Link Systems, Inc.

D-Link DWS-1008 Cli Reference Manual

Quick Links

Related Manuals for D-Link DWS-1008

Summary of Contents for D-Link DWS-1008