Table of Contents About This Manual ..........................4 Understanding the Command Line Interface ..................5 Accessing the Switch ..........................5 Logging in using the RS-232 Console ....................5 Logging in using Telnet ........................8 Command Modes ..........................11 Basic Configuration ........................11 Understanding All Command Modes ....................
About This Manual This chapter describes how to use the command line to configure Moxa’s managed Ethernet switches. Besides the web interface configuration, the command line interface helps system administrators easily and quickly manage, monitor, and configure Moxa’s managed Ethernet switch. MX-NOS Rail Version V1 Command Line Interface Manual...
Understanding the Command Line Interface This chapter helps users understand the command line interface, and demonstrates a general idea on the command line operation. Accessing the Switch Users can connect to the switch using one of two methods: by console or by Telnet. Logging in using the RS-232 Console The Moxa managed switch features an RJ45 serial console port to allow users to connect to the switch and configure settings.
Page 6
In Windows, click Start > Moxa > PComm Terminal Emulator. Click Port Manager > Open to establish a new connection. The Property window will appear. MX-NOS Rail Version V1 Command Line Interface Manual...
Page 7
On the Communication Parameter tab, select the COM port that will be used for the console connection. Configure the fields as follows: 115200 for Baud rate, 8 for Data bits, None for Parity, and 1 for Stop bits. On the Terminal tab, select VT100 as the Terminal Type, and click OK to continue. MX-NOS Rail Version V1 Command Line Interface Manual...
Log in to the console using the default login name admin and password moxa. This password will be required to access any of the consoles (web, serial, Telnet). When successfully connected to the switch, you can start configuring the switch parameters by using command line instructions.
Page 9
After making sure that the Moxa switch is connected to the same LAN and logical subnet as your PC, open the Moxa switch’s Telnet console as follows: 10. In Windows, click Start > Run. 11. In the Windows Run window, enter telnet followed by the Moxa switch’s IP address (192.168.127.253). You can also issue the Telnet command from a DOS prompt.
Page 10
12. Log in to the Telnet console using the default login name admin and password moxa. This password will be required to access any of the consoles (web, serial, Telnet). 13. When successfully connected to the switch, you can start configuring the switch parameters by using command line instructions.
Command Modes Basic Configuration The CLI (Command Line Interface) for Moxa’s Managed switches can be accessed through either the serial console or the Telnet console. For either type of connection, access to the CLI is generally referred to as an EXEC session.
Refer to the following example of changing configuration modes below. Type config at the command prompt to enter configuration mode. Type exit to return to the previous configuration mode. Type end from within any configuration level to return to privileged Exec mode. Help Messages The CLI supports several types of interactive commands.
Special Usage and Limitations If the command contains any special characters, such as *, #, and %, you need to use the quotation marks (“”) to cover these special characters. Refer to the following figure for an example. In addition, you may use a semicolon mark (;) to separate several commands. Refer to the figure below for an example.
In addition, when pressing Tab after typing the prefix letter, the syntax of the commands starting with that letter will be shown. See the figure below for details. No and Default Forms of Commands A “no” command can be used to perform the “delete”, “disable”, or “reset to default” functions. Type “no ?” to check how parameters can be used.
CLI Error Messages You may encounter some error messages while configuring Moxa’s Ethernet switch. Refer the following table for an overview of error messages and solutions. Error Message Meaning Solution Re-enter the command with a space The characters you entered are between the command and the question % Ambiguous command insufficient for the switch to recognize...
Commands This chapter covers all commands for users to configure Moxa’s managed Ethernet switch. System System Management Information Setting Configure Device Hostname Commands hostname <device-name> no hostname Syntax Description Reset to default value hostname Configure the device hostname parameters device-name Device name which only a-z, A-Z, 0-9 or - are allowed.
Page 17
Configure Contact Information Commands contact <text> no contact Syntax Description Remove configuration/delete entry/reset to default value contact Configure device contact information text The contact information of the device Defaults Command Modes Global Configuration Usage Guidelines Examples moxa# configure terminal moxa(config)# contact "contact info" moxa(config)# no contact Error Messages Related...
Show System Information Commands show system information Syntax Description show Display configuration/status information system Display system information information Display system information Defaults Command Modes User EXEC Privileged EXEC Usage Guidelines Examples moxa# show system information Hardware Version : V0.0.0 Firmware Version : v0.3 build 2019_050202111 Device Contact Device Name...
Page 19
Related commands Configuration Backup and Restore Copy Running Configuration Commands Use below privileged command on the device to copy the current running config into a remote server through specific a protocol, an external storage, or into the non-volatile memory (e.g. flash). copy running-config { <tftp_url>...
copy customer-key {<tftp_url> | <sftp_url>} private {<tftp_url> | <sftp_url>} certificate label <name> clear customer-key signed-config {enable | disable} Copy Startup Configuration Use the copy startup-config privileged command to copy the system startup config into a remote server through specific protocol or an external storage, or into the flash ROM as the custom default settings. Commands copy startup-config { <tftp_url>...
Page 21
Configure the Configuration Name Use the config-name command to configure the name of the current configuration. Commands config-name <string (32)> Syntax Description config-name Configure the configuration name string (32 Enter the configuration name (32 characters max.) Defaults Command Modes Global configuration Usage Guidelines Examples (config)# config-name 123...
Page 22
Configure Auto Restore Settings Commands auto-restore config { enable | disable } Syntax Description auto-restore Configure auto restore settings to restore files from an external storage config Configure auto restore for configuration files enable Enable auto restore disable Disable auto restore Defaults Command Modes Global configuration...
Page 23
Examples (moxa)# show external-storage info External Storage info ---------------------------------- Auto-backup event log Enable : YES Auto-backup configuration Enable : YES Auto-restore configuration Enable : YES Error messages Related commands auto-backup log auto-backup config auto-restore config hardware-interface usb enable File Encryption Configure File Encryption Use the config-file encryption privileged command to encrypt all data or sensitive information only when exporting a configuration file to an external or remote storage.
Commands show Display running information for the function config-file Display configuration file-related information encryption Display the configuration file encryption information Defaults Command Modes Privileged EXEC Usage Guidelines Examples # show config-file encryption Error messages Related commands copy running-config { <tftp_url> | <sftp_url> | usb: <filename>| micro-sd: <filename>...
Page 25
Clear Custom Certificate and Key Files Commands clear customer-key Syntax Description clear Clear the key pair customer-key The key pair generated and imported from the customer Defaults Command Modes Privileged EXEC Usage Guidelines A custom certificate must exist before using this command. Examples Moxa# clear customer-key Error messages...
Page 27
passwd The password to be entered by the user group Configures the user privilege level { admin | user | Valid values are "admin", "supervisor", and "user" supervisor } "admin" for admin group, "supervisor" for supervisor, and "user" for normal user group status Configures user status parameters enable...
Page 28
Syntax Description password Configure password parameters max-life-time Configure the maximum lifetime of the password days Maximum lifetime in days; a 0 or “no” value means it does not expire Defaults Command Modes Global configuration Usage Guidelines Examples moxa# config moxa(config)# password max-life-time 30 moxa(config)# password max-life-time Error Messages Related...
Page 29
Command Modes Global configuration Usage Guidelines Examples moxa# show password minimum-length 8 Error Messages Related password minimum-length Commands Show Password Maximum Lifetime Commands show password max-life-time Syntax Description show Display running information for the function password Display password parameters max-life-time Displays the maximum life time of the password before it expires Defaults Command Modes...
Page 30
Online Account Show System Online Account Commands show system online-account Syntax Description show Display running information for the function system Display system related information online-account Accounts already logged into this device Defaults Command Modes Privilege EXEC Usage Guidelines Examples moxa# show system online-account Online Account -------------------------- Account...
Management Interface Hardware Interfaces Configure Hardware Interface Settings Commands hardware-interface usb {enable | disable} Syntax Description hardware-interface Configure hardware interfaces Configure USB interface settings enable Enable the USB interface disable Disable the USB interface Defaults Command Modes Global configuration Usage Guidelines Examples (config)# hardware-interface usb enable (config)# hardware-interface usb disable...
Page 32
4. Event (RMON v1 group 9): Generate a log or a SNMP trap for Alarm group, when an event is triggered by an alarm. Enable/Disable RMON Commands rmon { enable | disable } Syntax Description rmon Configure RMON parameters enable Enable RMON disable Disable RMON...
Network IP Configuration Configure IPv4 Management Address Commands ip management address { dhcp [bootfile] [client-identifier user-defined <string (64)>] | <ipv4- address> <ipv4-netmask> [ <ipv4-gateway> ] } no ip management address dhcp bootfile no ip management address dhcp client-identifier Syntax Description Configure IP parameters management Configure IPv4 management address parameters...
Page 36
Configure IPv6 Management Address Commands ipv6 management address <global-unicast-prefix> Syntax Description ipv6 Configure IPv6 parameters management Configure IPv6 management address parameters address Configure the IPv6 management address of the device global-unicast-prefix Specify the IPv6 global unicast prefix of device, last 64 bits must be zero Defaults Command Modes...
Gateway DNS Server IPv6 Global Unicast Address Prefix : Global Unicast Address Link-Local Address : fe80::201:3ff:fe05:709 DNS Server Error Messages Related Commands DHCP Server Show IP DHCP Commands show ip dhcp [ { binding | static | port-based-ip-assignment } ] Syntax Description show Display configuration/status information...
Page 38
DNS Server 2 moxa# show ip dhcp binding Host Name IP Address MAC Address Time Left -------------------- --------------- ----------------- ---------------- host1 192.168.127.30 08:00:27:f6:bf:98 (static) // A Port-based IP assignment is created moxa# show ip dhcp port-based-ip-assignment DHCP Server Mode: Port-based IP Assignment Port-based IP Assignment List ---------------------------------------------- Port...
Page 39
Configure/Disable DHCP Server Mode Commands dhcp-server mode disable dhcp-server mode dhcp-and-mac-based-ip-assignment dhcp-server mode port-based-ip-assignment Syntax Description dhcp-server Configure DHCP server parameters mode Configure DHCP server mode parameters disable Disable the DHCP server dhcp-and-mac-based-ip- Standard DHCP server and MAC-based DHCP assignment port-based-ip-assignment Port-based DHCP sever Defaults...
Page 40
Examples moxa(config)# ip dhcp classless-static-route mode disable Error Messages Related ip dhcp classless-static-route destination Commands ip dhcp classless-static-route default-gateway dhcp-server mode show ip dhcp classless-static-route Enable/Disable DHCP Classless Static Route (Option 121) Settings Commands ip dhcp classless-static-route default-gateway { enable | disable } Syntax Description Configure IP parameters dhcp...
Page 41
Examples moxa(config)# ip dhcp classless-static-route destination 192.168.127.1 255.255.255.0 gateway 192.168.127.254 add member ethernet 1/1-12,1/13-16 port-channel 1 moxa(config)# ip dhcp classless-static-route destination 192.168.127.2 255.255.255.0 gateway 192.168.127.254 add member ethernet 1/1-12,1/13-16 port-channel 1 Error Messages % DHCP Server: Invalid: The given IP Address does not represent a valid IPv4 address.
Page 42
dhcp Configure DHCP server parameters pool Configure address pool parameters <integer> Specify the DHCP pool index enable Enable the DHCP address pool disable Disable the DHCP address pool Defaults Command Modes Privileged EXEC Global Configuration Usage Guidelines Examples moxa(config)# ip dhcp pool 1 enable moxa(dhcp-config)# Error Messages Related...
Page 43
Remove IP DHCP Pool Commands no ip dhcp pool <integer> Syntax Description Remove configuration/delete entry/reset to default value Configure IP parameters dhcp Configure DHCP server parameters pool Configure address pool parameters <integer> Specify the DHCP pool index to remove Defaults Command Modes Privileged EXEC Global Configuration...
Page 44
DHCP and MAC-based IP Assignment Configure DHCP Server Pool Commands network <ucast_addr> <ucast_addr> <ip_mask> Syntax Description network Configure network parameters <ucast_addr> The address pool starting IP address <ucast_addr> The address pool ending IP address <ip_mask> The subnet mask Defaults Command Modes Privileged EXEC DHCP Configuration Usage Guidelines...
Page 45
Configure Lease Time Commands lease <integer (10-604800)> Syntax Description lease Configure the IP lease duration <integer (10-604800)> The IP lease duration in seconds Defaults Command Modes Privileged EXEC DHCP Configuration Usage Guidelines Examples moxa(dhcp-config)# lease 3600 Error Messages Related Commands Reset Lease time Commands no lease...
Page 46
Remove Default Router IP Address Commands no default-router Syntax Description Remove configuration/delete entry/reset to default value default-router Configure the default router Defaults Command Modes Privileged EXEC DHCP Configuration Usage Guidelines Examples moxa(dhcp-config)# no default-router Error Messages Related Commands Configure DNS Server IP Address Commands dns-server <ucast_addr>...
Page 47
Configure NTP Server IP Address Commands ntp-server <ucast_addr> Syntax Description ntp-server Configure the NTP server <ucast_addr> The unicast IP address Defaults Command Modes Privileged EXEC DHCP Configuration Usage Guidelines Examples moxa(dhcp-config)# ntp-server 192.168.127.254 Error Messages Related Commands Remove NPT Server IP Address Commands no ntp-server Syntax Description...
Page 48
Remove Port-based IP Assignment Commands no ip dhcp port-based-ip-assignment Syntax Description Remove configuration / delete entry / reset to default value Configure IP parameters dhcp Configure DHCP server parameters port-based-ip-assignment Configure port-based IP assignment parameters Defaults Command Modes Privileged EXEC Interface Configuration Usage Guidelines Examples...
Page 50
log-server Configure log server Defaults Command Modes Privileged EXEC Interface Configuration Usage Guidelines Examples moxa(config-if)# no ip dhcp port-based-ip-assignment lease moxa(config-if)# no ip dhcp port-based-ip-assignment default-router moxa(config-if)# no ip dhcp port-based-ip-assignment dns-server moxa(config-if)# no ip dhcp port-based-ip-assignment ntp-server moxa(config-if)# no ip dhcp port-based-ip-assignment host-name moxa(config-if)# no ip dhcp port-based-ip-assignment domain-name moxa(config-if)# no ip dhcp port-based-ip-assignment log-server Error Messages...
DHCP Relay Agent Display IP DHCP Relay Configurations Commands show ip dhcp relay Syntax Description show Display configuration/statistics information Display the IP-related configuration dhcp Display the DHCP-related configuration relay Display the DHCP Relay configuration Defaults Command Modes Privileged EXEC/ User EXEC Usage Guidelines Use this command to show the DHCP relay configuration details.
Page 52
Related commands Enable/Disable DHCP Relay Global Status Commands ip dhcp relay {enable | disable} Syntax Description Configure IP-related parameters dhcp Configure DHCP-related parameters relay Configure DHCP relay parameters enable Enable the global DHCP relay disable Disable the global DHCP relay Defaults Disable Command Modes...
Page 53
Error messages Related commands Configure the DHCP Relay Trust Mode Commands ip dhcp relay trust no ip dhcp relay trust Syntax Description Configure IP-related parameters dhcp Configure DHCP-related parameters relay Configure DHCP relay parameters trust Configure the DHCP relay trust mode Defaults Untrust Command Modes...
Page 54
Eth1/1 Disabled Untrusted Disabled Eth1/2 Disabled Untrusted Disabled Eth1/3 Disabled Untrusted Disabled Eth1/4 Enabled Trusted Enabled Eth1/5 Disabled Untrusted Disabled Error messages Related commands Configure the DHCP Relay Option 82 Remote ID Commands ip dhcp relay option82 remote-id {ip | mac | client-id | other <string(15)>} Syntax Description Configure IP-related parameters dhcp...
Page 55
DNS Server Enable/Disable DNS Server Commands dns-server [ { enable | disable }] Syntax Description dns-server Configure DNS server parameters enable Enable DNS server functionality disable Disable DNS server functionality Defaults Disabled Command Modes Global Configuration Usage Guidelines Examples moxa (config)# dns-server enable moxa (config)# dns-server disable Error Messages Related...
Page 56
moxa# show ip dns-server zone 3 ZONE-3 -------------------------------------------------------- Domain name: xxx DNS table: -------------------------------------------------------- Total entries: 0 Error Messages % this zone is not created, domain name of this zone should be set first Related Commands Show DNS Server Settings Commands show ip dns-server [ zone [<zone-index>] ] Syntax Description...
Page 58
moxa(config)# clock timezone "8" Error Messages Related Commands System Time Configure Clock Source Commands clock source { local | ntp | sntp } Syntax Description clock Configure system clock parameters source Configure the source of the system clock local Use the local clock Use Network Time Protocol (NTP) sntp Use Simple Network Time Protocol (SNTP)
Page 59
Related Commands Disable Clock Summertime Commands clock summer-time disable Syntax Description clock Configure system clock parameters summer-time Configure Daylight Savings Time parameters disable Disable Daylight Savings Time Defaults Daylight saving time is disabled by default Command Modes Privileged EXEC Global Configuration Usage Guidelines Examples moxa# configure terminal...
Page 60
no ntp authentication-key <key-index> Syntax Description Remove configuration/delete entry/reset to default value Configure NTP/SNTP parameters authentication-key Configure the NTP authentication key key-index The index of the key, ranging from 1 to 10 key-id The key ID, ranging from 1 to 65535 Use MD5 authentication key-string The authentication key with a maximum length of 32...
Page 61
Configure SNTP Remote Server Commands ntp remote-server sntp <server-index> <server-address> no ntp remote-server sntp <server-index> Syntax Description Remove configuration/delete entry/reset to default value Configure NTP/SNTP parameters remote-server Configure remote time server parameters sntp Configure SNTP server parameters server-index The index of the server, ranging from 1 to 2 server-address The SNTP server address Defaults...
Page 62
Enable NTP Server Commands ntp server enable Syntax Description Configure NTP/SNTP parameters server Configure NTP server parameters enable Enable the NTP server Defaults NTP server: disable Command Modes Global Configuration Usage Guidelines Examples moxa# configure terminal moxa(config)# ntp server enable Error Messages Related Commands...
Page 63
Configure NTP Server Authentication Commands ntp server authentication Syntax Description Configure NTP/SNTP parameters server Configure NTP server parameters authentication Enable authentication Defaults NTP server authentication is disabled by default Command Modes Global Configuration Usage Guidelines Examples moxa# configure terminal moxa(config)# ntp server authentication Error Messages Related Commands...
Show Clock Information Commands show clock Syntax Description show Display configuration/status information clock Display system clock information Defaults Command Modes User EXEC Privileged EXEC Usage Guidelines Examples moxa# show clock Clock Source : Local Time Zone : UTC+00:00 Current Time : Fri May 03 22:59:33 2019 Daylight Saving : Disabled...
Command Modes Global Configuration Usage Guidelines Examples moxa(config)# auto-configuration mode import moxa(config)# auto-configuration timeout 360 moxa(config)# auto-configuration control-unit-port ethernet 1/6 Error Messages Related Commands show auto-configuration Show Auto Configuration Settings Commands show auto-configuration Syntax Description show Show configuration/status information auto- Display Auto Configuration information configuration Defaults...
Page 66
Eth2/2 not present Eth2/3 not present Eth2/4 not present Eth3/1 not connected Half Auto Eth3/2 not connected Half Auto Eth3/3 not connected Half Auto Error Messages Related Commands MX-NOS Rail Version V1 Command Line Interface Manual...
Show Interface Type and ID Commands show interfaces [{ [<interface-type> <interface-id>] [{ description | storm-control | flowcontrol | status }] }] Syntax Description show Display configuration/statistics/general interfaces Display interface information interface-type The Ethernet type interface-id The slot number/port number description Description about the interface storm-control Broadcast, multicast, and unicast storm control suppression levels...
Timeout Drops Error Packets Error Messages Related Commands Show Port-channel Interface Commands show interfaces port-channel Syntax Description show Display configuration/statistics/general information interfaces Display interface information port-channel Display the port-channel interface Defaults Command Modes Privileged EXEC Usage Guidelines Examples moxa# show interfaces port-channel Port : Eth1/2 ------------- Port State = Down, Not in Bundle...
Page 69
Syntax Description show Display configuration/statistics/general information interface Display interface information description Description about the interface Defaults Command Modes Privileged EXEC Usage Guidelines Examples moxa# show interfaces description Interface AdminStatus OperProtocol Description --------- ----------- ------------ ----------- Eth1/1 down Eth1/2 down Eth1/3 down Eth1/4 down...
Show Flow Control Commands show flow-control [ interface [{ port-channel <port-channel-id>| <interface-type> <interface-id> }] ] Syntax Description show Display configuration/statistics/general information flow-control Display flow-control information interface Protocol-specific configuration of the interface port-channel Display the port-channel interface port-channel-id Display channel group information interface-type ethernet interface-id...
Page 71
Show Linkup Delay Status Commands show linkup-delay [ interface <interface-type> <interface-id>] Syntax Description show Display configuration/statistics/general linkup-delay Display linkup-delay information interface Interface-related configuration interface-type ethernet interface-id The interface ID: slot number/port number Defaults Command Modes Privileged EXEC Usage Guidelines Examples moxa# show linkup-delay LinkUp Delay Table --------------------...
Page 72
Configure Description Settings Commands description <description of this interface> no description Syntax Description Remove configuration/delete entry/reset to default value description Configure description parameters description of this interface The description of the interface Defaults Empty string Command Modes Interface Configuration Usage Guidelines Examples moxa(config-if)# description moxa Error Messages...
Page 73
Enable/Disable Flow Control Setting Commands flowcontrol { on | off } Syntax Description flowcontrol Configure flow-control parameters Enable flow control Disable flow control Defaults Flow control is disabled by default Command Modes Interface Configuration Usage Guidelines Examples moxa(config-if)# flowcontrol off Error Messages Related Commands...
Page 74
Configure Linkup Delay Timer Commands linkup-delay timer <integer (1-1000)> no linkup-delay timer Syntax Description linkup-delay Configure linkup-delay parameters timer Set the timer for linkup-delay integer (1-1000) Timer value ranger from 1 to 1000 seconds Defaults The linkup delay timer is 2 seconds by default Command Modes Interface Configuration Usage Guidelines...
Link Aggregation Port Channel Configure Interface Port Channel Commands interface port-channel <port-channel-id> no interface port-channel [<port-channel-id>] Syntax Description Remove configuration/delete entry/reset to default value interface Configure interface parameters port-channel The port-channel interface port-channel-id Configure port-channel ID parameters. This is an integer value and it is recommended to configure it incrementally.
Page 76
Configure Port Channel Load Balance Commands port-channel load-balance { src-mac | dest-mac | src-dest-mac } [ <port-channel-id>] no port-channel load-balance [<port-channel-id>] Syntax Description Remove configuration/delete entry/reset to default value port-channel Configure port-channel parameters load-balance Configure load balancing policy parameters src-mac Load distribution is based on the source MAC address dest-mac Load distribution is based on the destination MAC address...
Page 77
Configure Channel Group Mode Commands channel-group <port-channel-id> mode { on | active | passive } no channel-group Syntax Description Remove configuration/delete entry/reset to default value channel-group Configure port-channel parameters port-channel-id Configure channel group number parameters mode Configure mode for port-channel parameters Configure the interface to use static trunk channel without LACP active Configure LACP negotiation to start unconditionally...
Page 78
Configure LACP Wait Time Commands lacp wait-time < wait-time-value > no lacp wait-time Syntax Description Remove configuration/delete entry/reset to default value lacp Configure LACP parameters wait-time Configure LACP wait-time parameters wait-time-value Configure the LACP wait-time value Defaults The default wait time is 2 seconds Command Modes Interface Configuration Mode Usage Guidelines...
Page 79
Show Link Aggregation Information Commands show port-channel [<channel-group-number>] [{ detail | load-balance | port | port-channel | summary | protocol }] Syntax Description show Display configuration / status information port-channel Display port-channel information channel-group-number Display channel group information detail Display detailed information load-balance Display load-balance scheme among ports in the port-channel port...
PoE General Settings Enable/Disable PoE Output Setting Commands poe { enable | disable } Syntax Description Configure PoE parameters enable Enable PoE on the switch disable Disable PoE on the switch Defaults PoE is enabled by default Command Modes Privileged EXEC Global Configuration Usage Guidelines Enable global power output.
Page 81
moxa(config)# no poe auto-power-cutting Are you sure you want to disable the auto-power-cutting? If so, the power-management-mode will become allocated-power mode. [y/N] y Error Messages Related Commands show poe [interface <iftype> <ifnum>] {config | status | diagnosis} poe priority {critical | high | low} PD Failure Check Configure Port PD Failure Check Setting Commands...
Page 82
scheduling Schedule PoE availability with rules rule-name: string (63) The scheduling rule name start-date-year: integer (1970-2038) The scheduling rule starting year start-date-month: integer (1-12) The scheduling rule starting month start-date-day: integer (1-31) The scheduling rule starting day start-time-hour: integer (0-23) The scheduling rule starting hour start-time-min: integer (0-59) The scheduling rule starting minute...
Page 83
Apply Port Scheduling Rule Commands poe scheduling <rule-name: string (63)> no poe scheduling <rule-name: string (63)> Syntax Description Remove configuration/delete entry/reset to default value Configure PoE parameters scheduling Schedule PoE with rules rule-name: string(63) The scheduling rule name as the index key Defaults Scheduling rules are not applied to ports by default Command Modes...
Page 84
weekday Repeat on weekdays weekend Repeat on weekends sunday Repeat every Sunday monday Repeat every Monday tuesday Repeat every Tuesday wednesday Repeat every Wednesday thursday Repeat every Thursday friday Repeat every Friday saturday Repeat every Saturday Defaults Command Modes Privileged EXEC Global Configuration Usage Guidelines Set PoE scheduling rules to repeat on the specified day(s).
Page 85
Examples moxa(config-if)# poe output-mode force power-allocation 30 Error Messages 'Invalid: In PoE Output Auto Mode, the Power Allocation value is not valid.' 'Invalid: Sum of power allocation cannot exceed system power budget.' Related Commands show poe [interface <iftype> <ifnum>] {config | status | diagnosis} Reset PoE Output Mode Commands no poe output-mode...
Page 86
moxa(config-if)# no poe priority Error Messages Related show poe [interface <iftype> <ifnum>] {config | status | diagnosis} Commands poe auto-power-cutting no poe auto-power-cutting PoE Status Show System and Port Settings, Status, and Diagnosis Commands show poe [ interface <iftype> <ifnum> ] { config | status | diagnosis } Syntax Description show Display configuration/status information...
Page 87
Eth1/7 0.00 0.00 0.00 Eth1/8 14.65 48.59 0.71 Error Messages Related poe {enable | disable} Commands poe system-power-budget <watt: integer (30-Maximum value of actual power budget*)> poe auto-power-cutting no poe auto-power-cutting no poe poe output-mode { auto | force power-allocation <watt: integer(0-90)> } poe legacy-pd-detection no poe legacy-pd-detection poe priority { critical | high | low }...
Page 88
Rule Name: test Enable: Enabled Start Date (YYYY/MM/DD): 2020/05/29 Schedule Time: 08:00-15:00, None Apply the same setting to port: Eth1/4 Error Messages Related poe scheduling <rule-name: string(63)> <start-date-year: integer(1970-2038)> Commands <start-date-month: integer(1-12)> <start-date-day: integer(1-31)> <start-time-hour: integer(0-24)> <start-time-min: integer(0-59)> <end-time-hour: integer(0-24)> <end-time-min: integer(0-59)>...
Layer 2 Switching VLAN IEEE 802.1Q Show VLAN Device Information Commands show vlan device info Syntax Description vlan Display VLAN bridge status and information device The VLAN device info Information Defaults Command Modes Privileged EXEC/ User EXEC Usage Guidelines Examples moxa# show vlan device info vlan device configurations --------------------------...
Page 90
Show VLAN Interface Status Commands show vlan [{brief | id <vlan-range> | summary | ascending}] Syntax Description show Display configuration/statistics/general information vlan Display the VLAN interface status brief Display the VLAN entry related information of all active VLANs and VLANs (that are not active) for which the port details are configured.
Page 91
Show VLAN Port Configuration Commands show vlan port config port [{port-channel <integer> | < interface-type > < interface-id> }] Syntax Description show Display configuration/statistics/general information vlan Display VLAN interface status port The port interface config The port’s configuration port The port interface port-channel The port channel integer...
Page 92
Show MAC Address Table Information Commands show mac-address-table [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port- channel <integer> | <interface-type> <interface-id>} ] show mac-address-table aging-time show mac-address-table count [vlan <vlan-id>] show mac-address-table dynamic multicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer> | <interface-type> <interface-id> }] show mac-address-table dynamic unicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer>...
Page 93
Show MAC Address Table for Dynamic Multicast and Unicast Commands show mac-address-table dynamic multicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer> | <interface-type> <interface-id> }] show mac-address-table dynamic unicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer> | <interface-type> <interface-id> }] Syntax Description show Display configuration/statistics/general information...
Page 94
Show MAC Address Table for Static Multicast and Unicast Commands show mac-address-table static multicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer> | <interface-type> <interface-id> }] show mac-address-table static unicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>] [interface {port-channel <integer> | <interface-type> <interface-id> }] Syntax Description show Display configuration/statistics/general information...
Show GVRP Statistics Commands show gvrp statistics [port {port-channel <integer> | <interface-type> <interface-id>}] Syntax Description show Display configuration/statistics/general information gvrp statistics Display GVRP statistics port Display port information port-channel The port channel integer Integer value, should be valid port-channel ID interface-type ethernet interface-id...
Page 96
Show GMRP Statistics Commands show gmrp statistics [port {port-channel <integer> | <interface-type> <interface-id> }] Syntax Description show Display configuration/statistics/general information gmrp statistics Display GMRP statistics port Display port information port-channel Configure port channel parameters integer Specify the integer value, must be valid port-channel ID interface-type Specify the interface type (Ethernet) interface-id...
Page 97
no vlan <vlan-id> vlan active vlan name < vlan name string > SyntaxDescription vlan/no vlan Create/delete a VLAN vlan-id The VLAN identifier active Activate the VLAN name < vlan name string > The VLAN name string consisting of a total of 32 characters Defaults Command Modes...
Page 99
Globally Enable/Disable GVRP on All Ports Commands gvrp {enable | disable} Syntax Description gvrp Configure GVRP parameters enable Enable on all ports and start the GVRP on the switch disable Disable GVRP on all ports. Defaults GVRP is disabled by default Command Modes Configuration Usage Guidelines...
Page 100
Enable/Disable GVRP on Specific Ports Commands gvrp no gvrp Syntax Description Remove configuration/delete entry/reset to default value gvrp Configure GVRP parameters GVRP: Enable GVRP on the specific port(s) No GVRP: Disable GVRP on the specific port(s) Defaults GVRP is disabled by default Command Modes Interface Configuration Usage Guidelines...
Page 101
Configure PVID on a Specified Port Commands switchport pvid <vlan-id> no switchport pvid Syntax Description Remove configuration/delete entry/reset to default value pvid Configure port-based VLAN parameters vlan-id The VLAN ID, ranging from 1 to 4094. Defaults Command Modes Interface Configuration Usage Guidelines If a PVID does not exist for this system, it will be created automatically after configuration.
Page 102
Enable/Disable Ingress Filter Commands switchport ingress-filter no switchport ingress-filter Syntax Description Remove configuration/delete entry/reset to default value switchport The switch port ingress-filtering Enable ingress-filtering Defaults disable Command Modes Configuration Usage Guidelines Examples moxa (config-if)# switchport ingress-filter moxa (config-if)# no switchport ingress-filter Error Messages Related switchport...
Page 103
Error Messages Related switchport Commands port gvrp vlan ports switchport acceptable-frame-type show vlan port config Configure Restricted VLAN Registration Commands vlan restricted no vlan restricted Syntax Description vlan restricted Configure restricted VLAN parameters Enable or disable the restricted VLAN registration feature on the port.
Page 104
Set VLAN Access Port Commands switchport access vlan <vlan-id> no switchport access vlan Syntax Description switchport access Configure the port as an access port vlan <vlan-id> The specified VLAN ID for which this access port will carry traffic, ranging from 1 to 4094. Defaults The port mode is set to access port by default Command Modes...
GARP Configure GARP Timer Commands garp timer {join | leave | leaveall} <time in milli seconds> Syntax Description garp timer Configure GARP timer parameters join Configure the time (ms) a GARP participant should wait for its join message to be acknowledged before re-sending the join message. The join message is retransmitted only once if the initial message is not acknowledged.
Page 106
Eth1/3 10000 Eth1/4 10000 Eth2/1 10000 Eth2/2 10000 Eth2/3 10000 Eth2/4 10000 ….. Error Messages Related garp timer Commands no shutdown garp MX-NOS Rail Version V1 Command Line Interface Manual...
Classification Configure Mapping Rule for DSCP Priority Commands qos ip-dscp-mapping dscp-priority <dscp-priority(0-63)> cos-priority <cos-priority(0-7)> Syntax Description Configure QoS parameters ip-dscp-mapping Configure mapping rules for DSCP priority dscp-priority The DSCP priority dscp-priority (0-63) The Differentiated Services Code Point (DSCP) value cos-priority The CoS priority cos-priority (0-7) The Class of Service (CoS) value...
Configure QoS P-bit Preference Commands qos pbit-preference {dscp | cos} Syntax Description Configure QoS parameters pbit-preference Configure pbit preference parameters dscp Use DSCP priority Use CoS priority Defaults Command Modes Interface Configuration Mode Usage Guidelines Examples moxa (config-if)#qos pbit-preference dscp Error Messages Related moxa # show qos pbit-preference [interface <iftype>...
Page 111
Show QoS COS Mapping Rule Commands show qos cos-mapping [cos-priority <integer (0-7)>] Syntax Description show Display configuration/status information Display QoS information cos-mapping Display the QoS CoS mapping table cos-priority The CoS priority cos-priority (0-7) The VLAN priority value Defaults Command Modes Privileged EXEC Mode Usage Guidelines Examples...
Page 112
Show QoS Default Priority Setting Commands show qos default-priority [ interface <iftype> <ifnum> ] Syntax Description show Display configuration/status information Display QoS information default-priority Display the QoS default user priority interface Interface information iftype The interface type ifnum The interface index Defaults Command Modes Privileged EXEC Mode...
Page 113
Show QoS P-bit Preference Commands show qos pbit-preference [interface <iftype> <ifnum>] Syntax Description show Display configuration/status information Display QoS information pbit-preference Display the pbit preference interface Interface information iftype The interface type ifnum The interface index Defaults Command Modes Privileged EXEC Mode Usage Guidelines If no interface is entered, the QoS pbit preference is shown for all ports.
Page 120
Enable/Disable Port Shutdown Commands rate-limit port-shutdown { enable | disable } Syntax Description rate-limit Configure rate limit parameters port-shutdown Configure rate limit port shutdown parameters enable Enable rate limit port shutdown disable Disable rate limit port shutdown Defaults Disabled. Command Modes Global configuration mode Usage Guidelines Examples...
Page 121
Configure Port Shutdown Threshold Commands rate-limit port-shutdown port threshold <threshold value> Syntax Description rate-limit Configure rate limit parameters port-shutdown Configure rate limit port shutdown parameters port Configure the port-based rate limit port shutdown parameters threshold Configure the rate limit port shutdown port threshold parameters threshold_value Specify the port shutdown threshold value (in Mbps).
Page 122
: Disable : Disable Color Mode : Blind Confirm Action : None Remark CoS Value : None Remark DSCP Value : None Exceed Action : Drop Remark CoS Value : None Remark DSCP Value : None Violate Action : Drop Remark CoS Value : None Remark DSCP Value...
Page 123
Related moxa # show qos scheduler [ interface <iftype> <ifnum> ] Commands MX-NOS Rail Version V1 Command Line Interface Manual...
Page 124
Show QoS Scheduler Setting Commands show qos scheduler [ interface <iftype> <ifnum> ] Syntax Description show Display configuration/status information Display QoS information scheduler Display QoS scheduler interface The interface information iftype The interface type ifnum The interface index Defaults Command Modes Privileged EXEC mode Usage Guidelines Examples...
Page 125
Egress Shaper Configure Shaper Setting Commands qos shaper cir <cir(1-max_rate)> [cbs <cbs(10-10240)>] Syntax Description Configure QoS parameters shaper Configure QoS shaper parameters Committed Information Rate cir (1-max_rate) The Committed Information Rate in Kbps Committed Burst Size cbs (10-10240) The Committed Burst Size in KByte Defaults Command Modes Interface configuration mode...
Multicast IGMP Snooping Enable/disable System-based IGMP Snooping Commands igmp-sooping {enable | disable} Syntax Description igmp-snooping Configure IGMP Snooping parameters enable Enable system-based IGMP Snooping disable Disable system-based IGMP Snooping Defaults Command Modes Global Configuration Usage Guidelines GMRP has to be disabled in order to enable GMP snooping Examples moxa# configure terminal moxa(config)# igmp-snooping enable...
Page 127
Configure IGMP Querier Role Commands igmp-snooping querier no igmp-snooping querier Syntax Description Remove configuration/delete entry/reset to default value igmp-snooping Configure IGMP Snooping parameters querier Configure the IGMP Snooping role Defaults By default, the switch is configured as a non-querier Command Modes Config-VLAN Mode Usage Guidelines Examples...
Page 128
Configure IGMP Snooping General Query Interval Commands igmp-snooping query-interval <integer (20 - 600) second> no igmp-snooping query-interval Syntax Description Remove configuration/delete entry/reset to default value igmp-snooping Configure IGMP Snooping parameters query-interval The interval in which the general queries are sent by the IGMP Snooping switch when configured as a querier integer (20-600) The general query interval period in seconds...
Page 129
Assign IGMP Snooping Router Port Commands igmp-snooping router-port [<interface-type> <slot/port-port,slot/port,...>] [port-channel <integer>] no igmp-snooping router-port [<interface-type> <slot/port-port,slot/port,...>] [port-channel <integer>] Syntax Description Remove configuration/delete entry/reset to default value igmp-snooping Configure IGMP Snooping parameters router-port The IGMP Snooping router port status interface-type The interface type slot/port-port, slot/port, The interface list (slot number/port ID, slot number/port...
Page 130
Show IGMP Information of VLAN Commands show igmp-snooping [vlan <vlan-id/vfi-id>] Syntax Description show Display configuration/status information igmp-snooping Display IGMP Snooping information vlan Protocol specific information for the VLAN vlan-id/vfi-id The VLAN ID range between 1-4094 and the VFI ID range between 4096-65535 Defaults Command Modes...
Page 131
Show IGMP Information of Forwarding Database Commands show igmp-snooping forwarding-database [vlan <vlan-id/vfi-id>] Syntax Description show Display configuration/status information igmp-snooping Display IGMP Snooping information forwarding-database Display the forwarding database vlan Protocol specific information for the VLAN vlan-id/vfi-id The VLAN ID range between 1-4094 and the VFI ID range between 4096-65535 Defaults Command Modes...
Page 132
Show IGMP Information of Router Port Commands show igmp-snooping router-port [vlan <vlan-id/vfi-id>] Syntax Description show Display configuration/status information igmp-snooping Display IGMP Snooping information router-port The IGMP Snooping router port status vlan Protocol specific information for the VLAN vlan-id/vfi-id The VLAN ID range between 1-4094 and the VFI ID range between 4096-65535 Defaults Command Modes...
Page 133
GMRP Show Global GMRP information Commands show vlan device info Syntax Description show Display configuration/statistics/general information vlan device info Display the VLAN device information Defaults Command Modes Privileged EXEC Mode. Usage Guidelines Examples moxa# show vlan device info vlan device configurations -------------------------- vlan Status : Enabled vlan Oper status : Enabled...
Page 134
Show Port GMRP Information Commands show vlan port config [{port <interface-id> ] Syntax Description show Display configuration/statistics/general information vlan port config Display VLAN port configuration port interface-id The input port number Defaults Command Modes Privileged EXEC Mode. Usage Guidelines Examples moxa# show vlan port config 1/1 vlan Port configuration table -------------------------------...
Page 135
Configure GMRP Global Setting Commands gmrp { enable | disable } Syntax Description gmrp Configure the GMRP parameters enable Enable GMRP on all switch ports and automatically start the GARP on the switch if the GARP is disabled. disable Disable GMRP on all switch ports. Defaults Global GMRP is enabled by default Command Modes...
Static Multicast Show MAC Address Table for Static Multicast Commands show mac-address-table static multicast [vlan <vlan-range>] [address <aa:aa:aa:aa:aa:aa>][{interface {port-channel <integer> | <interface-type> <interface-id>] Syntax Description mac-address-table Display the MAC address table information static multicast Display static multicast address information vlan <vlan-range> Display all entries in the FDB table for the specified VLANs address <aa:aa:aa:aa:aa:aa>...
Page 137
Configure MAC Address Table for Static Multicast Commands mac-address-table static multicast <aa:aa:aa:aa:aa:aa> vlan <vlan-id> {add | set} interface [<interface-type> <slot/port-port,slot/port,...>] [port-channel <integer>] [forbidden-ports [<interface-type> <slot/port-port,slot/port,...>] [port-channel <integer>]] [status permanent] Syntax Description mac-address-table Configure the MAC address table static multicast Configure the static multicast address aa:aa:aa:aa:aa:aa The multicast destination MAC address vlan <vlan-id>...
Network Redundancy Layer 2 Redundancy Spanning Tree Enable/Disable RSTP Commands rstp { enable | disable } Syntax Description rstp Configure RSTP enable Enable RSTP disable Disable RSTP Defaults Disabled Command Modes Global Configuration Usage Guidelines Examples moxa# configure terminal moxa(config)# rstp enable moxa(config)# rstp disable Error Messages Invalid: Two redundant protocols can not use the same port.
Page 139
Syntax Description Disable the configuration/delete the entry/resets to default value spanning-tree Configure Spanning Tree Protocol parameters compatibility The Spanning Tree compatibility version Spanning Tree Protocol configuration rstp Rapid Spanning Tree configuration Defaults Spanning Tree Protocol compatibility is set to rstp by default. Command Modes Global Configuration Usage Guidelines...
Page 140
Configure Spanning Tree Priority Commands spanning-tree priority <value (0-61440)> no spanning-tree priority Syntax Description Disable the configuration / deletes the entry / resets to default value spanning-tree Configure Spanning Tree Protocol parameters priority Configure switch priority for Spanning Tree instances value The switch priority value ranging from 0 to 61440 Defaults...
Configure Spanning Tree Hello Time Commands spanning-tree hello-time <seconds (1-2)> no spanning-tree hello-time Syntax Description Disable the configuration/deletes the entry/resets to default value spanning-tree Configure Spanning Tree Protocol parameters hello-time The interval (in seconds) between the transmission of configuration BPDUs seconds The hello time interval ranging from 1 to 2 seconds Defaults...
Page 142
Configure Spanning Tree Transmission Hold Counter Commands spanning-tree transmit hold-count <value (1-10)> no spanning-tree transmit hold-count Syntax Description Disable the configuration/delete the entry/reset to default value spanning-tree Configure Spanning Tree Protocol transmit Transmission hold counter configuration hold-count Configure the hold counter to limit the maximum transmission rate of the switch value The transmission hold counter value ranging from 1 to 10...
Page 143
Configure Spanning Tree Cost Commands spanning-tree cost <value (0-200000000)> no spanning-tree cost Syntax Description Disable the configuration/delete the entry/reset to default value spanning-tree Configure Spanning Tree Protocol cost Configure the path cost value The Spanning Tree cost ranging from 0 to 200000000 Defaults The default path cost is set to 0 Command Modes...
Configure Spanning Tree Portfast Commands spanning-tree portfast no spanning-tree portfast Syntax Description Disable the configuration/delete the entry/reset to default value spanning-tree Configure Spanning Tree Protocol parameters portfast Specify ports that have only hosts connected to enable immediate transition to a forwarding state Defaults Spanning Tree Portfast is disabled by default Command Modes...
Page 146
Configure the Maximum Number of Hops Permitted in MST Commands spanning-tree mst max-hops <short(6-40)> Syntax Description spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree max-hops Maximum number of hops allowed 6-40 Value for maximum hops Defaults Command Modes Global Configuration Mode Usage Guidelines Examples...
Page 147
Error Messages Related Commands Note The maximum instances vary on the number of targets. MX-NOS Rail Version V1 Command Line Interface Manual...
Page 148
Delete the MST Instance or Remove VLANs from MST Instance Commands no spanning-tree mst instance <short(1-16)> [vlan < vlan_range >] Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree instance An MST instance (1-16) Instance ID vlan...
Page 149
Reset Bridge Priority for the Spanning Tree to Its Default Value Commands no spanning-tree mst {instance <short(1-16)> | cist} priority Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree instance An MST instance (1-16) Instance ID cist...
Delete Spanning Tree MST Configuration Name Commands no spanning-tree mst { name | revision } Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree name Configuration name revision Configure revision number for the MST region Defaults Name: MAC address, Revision: 0 Command Modes...
Page 151
Reset the MSTP Timer to the Default Value Commands no spanning-tree mst { forward-time | hello-time | max-age } Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree forward-time Interval (in seconds) until which a port stays in a state before moving to next state hello-time Interval (in seconds) between the transmission of configuration...
Page 152
Disable Spanning Tree MST Instance on This Port Commands no spanning-tree mst { instance <short(1-16)> | cist | all } Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree instance An MST instance (1-16) Instance ID cist...
Page 153
Reset Spanning Tree Properties of an Interface to Default Value Commands no spanning-tree mst { instance <short(1-16)> | cist } {cost | port-priority } Syntax Description Remove configuration/delete entry/reset to default value spanning-tree Configure the related spanning tree parameters Multiple Spanning Tree instance An MST instance (1-16)
Page 154
Show Multiple Spanning Tree Instance Configuration Commands show spanning-tree mst configuration Syntax Description show Display configuration/status information spanning-tree Configure the related spanning tree parameters Multiple spanning tree instance configuration Multiple spanning tree instance configuration Defaults Command Modes Privileged EXEC Mode Usage Guidelines Examples moxa# show spanning-tree mst configuration...
Configure Spanning Tree Errordisabled Recovery Interval Commands spanning-tree errordisable recovery-interval <second (30-65535)> no spanning-tree errordisable recovery-interval Syntax Description Disable the configuration/delete the entry/reset to default value spanning-tree Configure Spanning Tree Protocol errordisable Configure the error-disable timer recovery-interval The interval (in seconds) for a port to recover from error- disabled state second The errordisabled recovery interval ranging from 30 to 65535...
Page 156
Show Spanning Tree Bridge Information Commands show spanning-tree bridge Syntax Description show Display the Configuration/statistics/general information spanning-tree Spanning Tree-related information bridge Spanning Tree bridge information Defaults Command Modes User EXEC Mode Usage Guidelines Examples moxa# show spanning-tree bridge Bridge ID HelloTime MaxAge FwdDly Protocol...
Page 157
Show Spanning Tree Interface Information Commands show spanning-tree interface { ethernet <slot/port> | port-channel <id> } show spanning-tree interface { ethernet <slot/port> | port-channel <id> } detail show spanning-tree interface { ethernet <slot/port> | port-channel <id> } inconsistency Syntax Description show Display the configuration/statistics/general information spanning-tree...
Page 158
Show Spanning Tree Details Commands show spanning-tree [detail] show spanning-tree active [detail] Syntax Description show Display the configuration/statistics/general information spanning-tree Spanning Tree related information detail Detailed Spanning Tree information active Spanning Tree information of active ports Defaults Command Modes User EXEC Mode Usage Guidelines Examples moxa# show spanning-tree...
Page 159
Turbo Ring v2 Show Turbo Ring v2 Status Commands show turbo-ring-v2 { config | status } Syntax Description show Display configuration/statistics/general information turbo-ring-v2 Display Turbo Ring v2 information config Ring configuration information status Ring status information Defaults Command Modes User EXEC/Privileged EXEC Usage Guidelines Examples moxa# show turbo-ring-v2 config...
Page 160
Configure Redundancy Mode Setting Commands turbo-ring-v2 { enable | disable } Syntax Description turbo-ring-v2 Configure Turbo Ring V2 parameters enable Enable Turbo Ring V2 disable Disable Turbo Ring V2 Defaults Turbo Ring V2 is disabled by default Command Modes Global configuration Usage Guidelines Examples moxa(config)# turbo-ring-v2 enable...
Page 161
Configure the Switch as the Ring Master Commands turbo-ring-v2 <ring-id> master no turbo-ring-v2 <ring-id> master Syntax Description Remove configuration/delete entry/reset to default value turbo-ring-v2 Configure Turbo Ring V2 parameters ring-id Configure the ring ID (1-2) master Enable ring master Defaults Command Modes Global configuration Usage Guidelines...
Page 162
Configure Backup Port of Ring Coupling Commands turbo-ring-v2 coupling backup interface <interface-type> <interface-id> no turbo-ring-v2 coupling Syntax Description turbo-ring-v2 Configure Turbo Ring V2 parameters coupling Configure ring coupling parameters backup Coupling backup mode interface The port interface interface-type Ethernet interface-id The slot number/port number <1-7>/<1-4>...
Page 163
ring Configure MRP ring settings enable Enable the MRP ring disable Disable the MRP ring Defaults The MRP ring is disabled by default. Command Modes Global configuration Usage Guidelines Examples Product(config)# mrp ring enable Error messages % L2 Redundancy: Invalid: A maximum of two redundant protocols can be enabled.
Page 164
Syntax Description Configure MRP settings ring Configure the MRP ring settings domain Configure domain UUID settings default Set the domain UUID to the default UUID profinet Set the domain UUID to the PROFINET UUID Defaults The default Domain UUID is the Default UUID. Command Modes Global configuration Usage Guidelines...
Management Network Management SNMP Configure SNMP Server Access Mode Commands snmp-server access { enable | disable | read-only } Syntax Description snmp-server Configure SNMP server parameters access Configure the SNMP server access mode enable Enable SNMP server access disable Disable SNMP server access read-only Set SNMP server access to read-only mode Defaults...
Page 166
Configure SNMP Server Read-Only Community Settings Commands snmp-server community read-only <community-name(4-32)> Syntax Description snmp-server Configure snmp-server related parameters community Configure the SNMP server community read-only Configure the SNMP server community for read-only string (32) The SNMP server read-only community name Defaults The default read-only community name is set to public Command Modes...
Page 167
Configure SNMP Server Read-Write Community to Default Value Commands no snmp-server community read-write Syntax Description Disable the configuration/delete the entry /reset to default value snmp-server Configures SNMP server parameters community Configure the SNMP server community read-write Configure the SNMP server community for read-write Defaults Command Modes Global configuration...
Page 168
Configure SNMP Server User Account Settings Commands snmp-server user <user-name(32)> authority { read-only | read-write } auth-type { none | md5 | sha | sha-256 | sha-512 } [auth-passwd <authentication-password(64)> ] encryption { disable| des | aes } [encryption-key <encryption-key(64)>] Syntax Description snmp-server Configure SNMP server parameters...
Page 169
Delete SNMP Server User Account Commands no snmp-server user <user-name (32)> Syntax Description Disable the configuration/delete the entry/reset to default value snmp-server Configure SNMP server parameters user Configure SNMP server user accounts user-name (32) The user name of the SNMP server user account Defaults Command Modes Global configuration...
Page 170
Delete SNMP Trap Host Entry Commands no snmp-trap host <host-address(32)> Syntax Description Disable the configuration/delete the entry/reset to default value snmp-trap Configure SNMP trap parameters host Configure the SNMP trap host address host-address (32) The SNMP trap host address Defaults Command Modes Global configuration Usage Guidelines...
Page 171
Configure SNMP Trap Inform Timeout Setting Commands snmp-trap inform-timeout <inform-timeout-number(1-300)> Syntax Description snmp-trap Configure SNMP trap parameters inform-timeout Configure the SNMP trap inform timeout inform-timeout-number (1-300) The SNMP trap inform timeout in seconds Defaults The default SNMP trap inform timeout is set to 10 seconds Command Modes Global configuration Usage Guidelines...
Page 173
Delete SNMP Trap User Account Commands no snmp-trap user <user-name (32)> Syntax Description Disable the configuration/delete the entry/reset to default value snmp-trap Configures SNMP trap parameters user Configure SNMP trap user accounts user-name (32) The user name of the SNMP trap user account Defaults Command Modes Global configuration...
Page 174
Show SNMP Server User Account Information Commands show snmp-server user Syntax Description show Displays the configuration/statistics/general information snmp-server Displays SNMP server information user Displays SNMP server user accounts Defaults Command Modes Global configuration Usage Guidelines Examples moxa# show snmp-server user ---------------------------------------------- snmp-server user-account ----------------------------------------------...
Page 175
SNMP Trap/Inform Show SNMP Trap Information Commands show snmp-trap information Syntax Description show Display the configuration/statistics/general information snmp-trap Display SNMP trap information information Display general SNMP trap information Defaults Command Modes Global configuration Usage Guidelines Examples moxa# show snmp-trap information ---------------------------------------------- snmp-trap ----------------------------------------------...
Page 176
Show SNMP Trap Host Information Commands host Syntax Description show Display the configuration/statistics/general information snmp-trap Display SNMP trap information host Display SNMP trap host information Defaults Command Modes Global configuration Usage Guidelines Examples moxa# show snmp-trap host ---------------------------------------------- snmp-trap host-table ---------------------------------------------- hostName : 192.168.137.254...
Security Device Security Management Interface Enable Network Server Commands ip { http | https | telnet | ssh | moxa-command } server enable Syntax Description Configure IP parameters http Configure HTTP management UI service parameters https Configure HTTPS management UI service parameters telnet Configure Telnet management UI service parameters Configure SSH management UI service parameters...
Page 178
Configure Network Port Numbers Commands ip { http | https | telnet | ssh } port <port-number> Syntax Description Configure IP parameters http Configure HTTP management UI service parameters https Configure HTTPS management UI service parameters telnet Configure Telnet management UI service parameters Configure SSH management UI service parameters port Configure the service port of the management UI service...
Page 179
Configure Network Terminal Maximum Session Numbers Commands ip terminal max-session <session-number> Syntax Description Configure IP parameters terminal Configure Telnet and SSH terminal parameters max-session Configure the maximum number of concurrent login sessions through Telnet and SSH terminal session-number Maximum number of login sessions Defaults max terminal session: 1 Command Modes...
Page 180
Login Policy Configure Login Lockout Settings Commands login lockout <enable | disable> login lockout <minute(1-10)> attempts <tries(1-10)> Syntax Description login Configure login parameters lockout Configure the maximum number of failed login attempts and the lockout time to block the user from logging in enable Enable login lockout disable...
Page 181
Configure Login Failure Message Commands login fail-message <string (500)> no login fail-message Syntax Description Remove configuration/delete entry/reset to default value login Configure login parameters fail-message Configure a login failure message string The login failure message up to 500 characters Defaults Command Modes Global configuration Usage Guidelines...
Page 182
Show Login Failure Message Commands show login fail-message Syntax Description show Display running information login Display login information fail-message Display the login failure message Defaults Command Modes Global configuration Usage Guidelines Examples moxa# show log fail-message Login Fail Message: This is a failed message! Error messages Related commands...
Page 183
lockout Displays the maximum number of fail login attempts and the lockout time to block the user Defaults Command Modes Global configuration Usage Guidelines Examples moxa# show login lockout Enable: False Lockout: 10 Attempts: 3 Error messages Related commands MX-NOS Rail Version V1 Command Line Interface Manual...
Page 184
Trusted Access Configure Trusted Access Settings Commands trusted-access ip-source <ucast_addr> [ { <ip_mask> | / <short(0-32)> } ] no trusted-access ip-source <ucast_addr> [ { <ip_mask> | / <short(0-32)> } ] Syntax Description Disable the configuration/delete the entry/reset to default value trusted-access Configure IP trusted access parameters ip-source...
Page 185
Show Trusted Access IP List Commands show trusted-access Syntax Description show Display configuration/status information trusted-access Display IP trusted access information Defaults Command Modes User EXEC Privileged EXEC Usage Guidelines Examples moxa# show trusted-access Trusted Access Table : Disabled --------------------------- IP Address : 210.222.222.225 Subnet Mask : 255.255.255.0...
Export Web SSL Certificate Signing Request via TFTP/SFTP Commands web signing-request export {<tftp_url> | <sftp_url>} Syntax Description Configure Web related parameters signing-request Configure the web server certificate signing request export Export the certificate tftp_url The file on the remote TFTP server to be copied sftp_url The file on the remote SFTP server to be copied Defaults...
Page 187
Enable/Disable IEEE 802.1X Function Commands dot1x { enable | disable } Syntax Description dot1x Configure IEEE 802.1X port-based network access control enable Enable dot1x authentication disable Disable dot1x authentication Defaults Dot1x authentication is disabled by default Command Modes Global configuration mode Usage Guidelines This command enables dot1x on the switch.
Page 188
Authorize IEEE 802.1X Commands dot1x port-control { auto | force-authorized | force-unauthorized } no dot1x port-control Syntax Description dotx1 Configure IEEE 802.1X port-based network access control port-control Configure authenticator port control parameters auto Enable 802.1X authentication on the interface force-authorized Allow all traffic without any restrictions force-unauthorized Block all traffic over the interface...
Page 189
Configure IEEE 802.1X Reauthentication Commands dot1x reauthentication no dot1x reauthentication Syntax Description Remove configuration/delete entry/reset to default value dot1x Configure IEEE 802.1X port-based network access control reauthentication Perform periodic reauthentication Defaults Dot1x reauthentication is disabled by default Command Modes Interface Configuration Mode. Usage Guidelines This command enables periodic re-authentication from authenticator to client.
Page 191
Show IEEE 802.1X Information Commands show dot1x [ { interface < interface-type > < interface-id > | local-database | all } ] Syntax Description show Display configuration/statistics/general information dot1x Configure IEEE 802.1X port-based network access control interface interface-type The interface type interface-id The slot number/port number local-database...
Page 193
Show IEEE 802.1X Authentication RADIUS Server Commands show dot1x auth radius server Syntax Description show Display configuration/statistics/general information dot1x Display dot1x configuration information auth Display authentication type information. radius Display RADIUS server information. server Display server information. Defaults Command Modes Privileged EXEC Mode Usage Guidelines This command displays radius server information.
Page 194
Enable/Disable MAC Authentication Bypass Commands mab {enable | disable} Syntax Configure MAB parameters Description enable Enable MAB on the switch disable Disable MAB on the switch Defaults Disable Command Global Configuration Modes Usage Guidelines Examples moxa(config)# mab enable moxa(config)# mab disable Error messages Warning...
Page 195
no mab Syntax Remove configuration / delete entry / reset to default Description value Enable/Disable MAB on an interface Defaults Disable Command Interface Configuration Modes Usage ‘no mab’ will invalid HW operation but keep the configuration on a port. Guidelines Examples moxa(config-if)# mab moxa(config-if)# no mab...
Page 196
Enable/Disable MAB Reauthentication Commands mab reauthentication no mab reauthentication Syntax Remove configuration / delete entry / reset to default Description value Configure MAB parameters reauthentication Periodic re-authentication from authenticator to server Defaults Disable Command Interface Configuration Modes Usage ‘no’ command will reset parameters to default value. Guidelines Examples moxa(config-if)# mab reauthentication...
Page 197
Warning messages Related show mab commands Configure MAB Local Database MAC Address Commands mab local-database mac-address <ucast_mac> no mab local-database {mac-address <ucast_mac> | all } Syntax Remove configuration / delete entry / reset to default Description value Configure MAB parameters local-database Configure local database authentication mac-address...
Page 198
Command User EXEC Modes Privileged EXEC Usage Guidelines Examples moxa# show mab MAB Status: Enabled MAB Authentication Method: Local Port Enable Quiet Period Reauthentication Reauth Period ------- -------- ------------ ----------------- ------------- Eth1/1 Disabled Enabled 3600 Eth1/2 Disabled Disabled 3600 Eth1/3 Disabled Disabled 3600...
Total MAC entries System Max. Addresses : 1024 Error messages Warning messages Related commands Port Security Configure Port Security Mode Commands port-security mode { static-port-lock | mac-sticky } Syntax Description port-security Configure port security parameters mode Configure the security mode (port security port/address table will be reset when the mode changes) static-port-lock Use Static Port Lock mode...
Page 200
Enable/Disable Port Security Commands port-security { enable | disable } Syntax Description port-security Configure port security parameters enable Enable port security disable Disable port security Defaults Port security is enabled by default Command Modes Privileged EXEC Global Configuration Usage Guidelines Examples moxa(config)# port-security enable moxa(config)# port-security disable...
Page 201
Configure Port Security Setting Commands port-security [ { limit <integer(1-1024)> | violation { packet-drop | port-shutdown } | mac- address <ucast_mac> vlan <vlan_vfi_id> } ] Syntax Description port-security Configure port security parameters limit The maximum number of addresses on the port integer (1-1024) The limit value (MAC address will be removed on the configured port when the limit value changes)
Page 202
Remove Port Security Setting Commands no port-security [ { limit | mac-address { <mac_addr> vlan <integer(1-4094)> | all } } ] Syntax Description Remove configuration/delete entry/reset to default value port-security Configure port security parameters limit The maximum number of addresses on the port mac-address The new MAC address mac_addr...
Page 203
Traffic Storm Control Enable/Disable Storm Control Commands storm-control { bc | mc | dlf | bc_mc | bc_dlf | mc_dlf | bc_mc_dlf } level <rate-value(625- 1488100)> no storm-control {bc | mc | dlf | bc_mc | bc_dlf | mc_dlf | bc_mc_dlf} Syntax Description Remove configuration delete entry/reset to default value storm-control...
Show Storm Control Status Commands show interfaces [<interface-type> <interface-id>] storm-control Syntax Description show Display configuration/status information interface Display interface information interface-type The Ethernet type interface-id The slot number/port number storm-control Display the broadcast, multicast, and unicast storm control suppression levels of the interface Defaults Command Modes Privileged EXEC...
Page 205
Access Control List Define IPv4 Access-list and Enter IPv4 Access-list Configuration Mode Commands ip access-list <short(1-16)> Syntax Description Configure IP related parameters access-list Configure ACL related parameters 1-16 Access control list index Defaults Command Modes Global Configuration Mode Usage Guidelines An access list is created when the access list’s name or rule is configured Examples moxa# configure terminal...
Page 206
Configure Permitted IPv4 ACL Rules Commands permit {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [dscp <short(0-63)>] [redirect interface <interface-type> <interface-id>] [dscp-remark <short(0-63)>] Syntax Description permit Configure the permitted ACL rule Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask) Configure the filtering of a rule to a specific address/mask...
Page 207
Configure Permitted TCP ACL Rules Commands permit tcp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [src-port <short(0-65535)>] [dst-port <short(0-65535)>] [dscp <short(0-63)>] [redirect interface <interface-type> <interface-id> ] [dscp-remark <short(0-63)>] Syntax Description permit Configure the permitted ACL rule Configure the tcp related ACL parameters Configure the filtering of a rule to any address...
Page 208
Configure Permitted UDP ACL Rules Commands permit udp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [src-port <short(0-65535)>] [dst-port <short(0-65535)>] [dscp <short(0-63)>] [redirect interface <interface-type> <interface-id> ] [dscp-remark <short(0-63)>] Syntax Description permit Configure the permitted ACL rule Configure the udp related ACL parameters Configure the filtering of a rule to any address...
Page 213
Configure Unacceptable ACL Rules Commands deny {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask) Configure the filtering of a rule to a specific address/mask...
Page 214
Configure Unacceptable TCP ACL Rules Commands deny tcp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [src-port <short(0-65535)>] [dst-port <short(0-65535)>] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule Configure the tcp related ACL parameters Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask)
Page 215
Configure Unacceptable UDP ACL Rules Commands deny udp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [src-port <short(0-65535)>] [dst-port <short(0-65535)>] Syntax Description deny Configure the unacceptable ACL rule Configure the udp related ACL parameters Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask)
Page 216
Configure Unacceptable ICMP ACL Rules Commands deny icmp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [type <short(0-255)>] [code <short(0-15)>] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule icmp Configure the icmp related ACL parameters Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask)
Page 217
Configure Unacceptable IGMP ACL Rules Commands deny igmp {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [type <short(0-255)>] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule igmp Configure the igmp related ACL parameters Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask)
Page 218
Configure Unacceptable OSPF ACL Rules Commands deny ospf {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule ospf Configure the ospf related ACL parameters Configure the filtering of a rule to any address Configure the source related ACL parameters (ip-addr/mask)
Page 219
Configure Unacceptable Protocol ACL Rules Commands deny protocol <short(0-255)> {any | src <ip-address> | <ip-address> <ip-mask>} [{ any | dst <ip-address> | <ip-address> <ip-mask> }] [dscp <short(0-63)>] Syntax Description deny Configure the unacceptable ACL rule protocol Configure the protocol related ACL parameters (0-255) Protocol value to filter Configure the filtering of a rule to any address...
Page 220
Remove an IPv4 Access-list Commands no ip access-list <short(1-16)> Syntax Description Remove configuration / delete entry / reset to default value Configure IP related parameters access-list Configure ACL related parameters (1-16) Access control list index Defaults Command Modes IP Access-list Configuration Mode Usage Guidelines Examples moxa(config-ip-acl)# no ip accessl-list 10...
Page 221
Configure Permitted MAC ACL Rules Commands permit {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] [redirect interface <interface-type> <interface-id> ] [cos-remark <short(0-7)>] Syntax Description permit...
Page 222
Configure Permitted Goose ACL Rules Commands permit goose {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] [redirect interface <interface-type>...
Page 223
Configure Permitted SMV ACL Rules Commands permit smv {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] [redirect interface <interface-type>...
Page 224
Configure Permitted Ethertype ACL Rules Commands permit ethertype <short(0-65535)> {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] [redirect interface <interface-type>...
Page 225
Configure Unacceptable MAC ACL Rules Commands deny {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] Syntax Description deny Configure the unacceptable ACL rule Configure the filtering of a rule to any address...
Page 226
Configure Unacceptable Goose ACL Rules Commands deny goose {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] Syntax Description deny Configure the unacceptable ACL rule...
Page 227
Configure Unacceptable SMV ACL Rules Commands deny smv {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] Syntax Description deny Configure the unacceptable ACL rule...
Page 228
Configure Unacceptable Ethertype ACL Rules Commands deny ethertype <short(0-65535)> {any | src < mac -address> | < mac -address> < mac -mask>} [{ any | dst < mac -address> | < mac -address> < mac -mask> }] [vlan <short(1-4094)>] [cos <short(0-7)>] Syntax Description deny Configure the unacceptable ACL rule...
Page 229
Remove MAC ACL Rules Commands no rule <short(1-10)> Syntax Description Remove configure/delete entry/reset to default value rule Configure the rule related ACL parameters (1-10) Rule index Defaults Command Modes IP Access-list Configuration Mode Usage Guidelines Examples moxa(config-ip-acl)# no rule 9 Error Messages Related show ip access-lists <short(1-16)>...
Page 230
Apply an IPv4 Access-list to a VLAN Interface Commands ip access-list <short(1-16)> { in | out } Syntax Description Configure IP related parameters access-list Configure ACL related parameters 1-16 Access control list index Apply IP access-list to inbound traffic Apply IP access-list to outbound traffic Defaults Command Modes VLAN interface Configuration Mode...
Page 231
Remove an IPv4 Access-list to a VLAN Interface Commands no ip access-list <short(1-16)> { in | out } Syntax Description Remove configuration/delete entry/reset to default value Configure IP related parameters access-list Configure ACL related parameters 1-16 Access control list index Apply IP access-list to inbound traffic Apply IP access-list to outbound traffic Defaults...
Page 232
Apply a MAC Access-list to a VLAN Interface Commands mac access-list <short(1-16)> { in | out } Syntax Description Configure MAC related parameters access-list Configure ACL related parameters 1-16 Access control list index Apply IP access-list to inbound traffic Apply IP access-list to outbound traffic Defaults Command Modes VLAN Interface Configuration Mode...
Page 233
Remove a MAC Access-list to a VLAN Interface Commands no mac access-list <short(1-16)> { in | out } Syntax Description Remove configuration/delete entry/reset to default value Configure MAC related parameters access-list Configure ACL related parameters 1-16 Access control list index Apply IP access-list to inbound traffic Apply IP access-list to outbound traffic Defaults...
Page 234
Destination MAC Address : any : any Action : None --------------------------------------------------------------------------- Ip Access List 1 Name : IP-ACL-1 In Port List : Eth1/1, Eth1/2, Eth1/3, Eth3/4, Eth4/1 Eth6/2, Eth6/3, Eth7/2, Eth7/3 Out Port List : Eth1/1, Eth1/2, Eth3/3, Eth3/4, Eth6/1 Eth6/2, Eth7/1, Eth7/2, Eth7/4 --------------------------------------------------------------------------- Rule Index...
Page 235
ICMP Type ICMP Code : 15 Dscp : any Action : None --------------------------------------------------------------------------- Ip Access List 2 Name : 123 In VLAN List : 1, 300, 2536, 4094 Out VLAN List : 2, 40, 336, 594 Error Messages Related ip access-list <short(1-16)> Commands Show Specific IPv4 Access-list Commands...
Page 236
Remark dscp to 36 --------------------------------------------------------------------------- Rule Index Rule Status : enabled Rule Type : permit Protocol : any Source IP Address : any Destination IP Address : any Dscp : any Action : Mirror to Session 5 --------------------------------------------------------------------------- Rule Index Rule Status : enabled Rule Type...
Page 237
Mac Access List 10 Name In VLAN List Out VLAN List --------------------------------------------------------------------------- Rule Index Rule Status : enabled Rule Type : permit Ethertype : any Source MAC Address : any Destination MAC Address : any : any Action : None --------------------------------------------------------------------------- Error Messages Related...
Page 238
Show Port Access-list Configuration Commands show interface <interface-type> <interface-id> access-list Syntax Description show Display configuration/status information interface Display interface related information <interface- Port index to display type/interface id> access-list Configure ACL related parameters Defaults Command Modes Privileged EXEC Mode Usage Guidelines Examples moxa# show interface ethernet 1/1 access-list Error Messages...
Page 239
Configure the Network Loop Protection Detection Interval Commands loop-protect detect-interval <integer(1-30)> Syntax Descriptions loop-protect Configure Loop Protection parameters detect-interval Configures loop detection frame interval <integer(1-30)> Specify the interval (in seconds) at which the system will send loop detection frames Defaults Command Modes Global configuration Usage Guidelines...
Page 240
dhcp Configure DHCP-related parameters snooping Configure DHCP Snooping parameters enable Globally enable DHCP snooping disable Globally disable DHCP snooping Defaults Disable Command Modes Global configuration Usage Guidelines Examples Product(config)# ip dhcp snooping enable Error messages Related commands Enable/Disable DHCP Snooping on a Specific VLAN Commands ip dhcp snooping vlan <vlan-id>...
Change port status on member port: Product(config-if)# ip dhcp snooping trust This port is a member of Port-Channel. DHCP Snooping cannot be enabled on a member port. Related commands Add/Delete a DHCP Snooping Binding Entry Commands ip dhcp snooping binding <src_mac> vlan <vlan-id> <src_ip> interface {port-channel <integer> | <interface-type>...
Page 242
Show IP-related configuration information dhcp Show DHCP-related configuration information snooping Show DHCP Snooping information interface Display DHCP snooping interface information vlan Display the configuration and statistics of DHCP snooping on a specific VLAN <vlan id> Specify the VLAN ID binding Display the DHCP snooping binding database Defaults Command Modes...
Page 243
MX-NOS Rail Version V1 Command Line Interface Manual...
Page 244
IP Source Guard Enable/Disable IP Source Guard Commands ip source guard no ip source guard Syntax Descriptions ip source Enable IP source guard. guard no ip source Disable IP source guard. guard Defaults Disable Command Modes Interface configuration mode Usage Guidelines Examples Enable on untrusted interface: Product(config-if)# ip source guard...
Page 245
Command Modes interface configuration mode Usage Guidelines Examples Enable on DHCP Snooping untrusted interface: Product(config-if)# ip arp inspection Error messages Enable on DHCP Snooping trusted interface: Product(config-if)# ip arp inspection Dynamic ARP Inspection must be enabled on a DHCP Snooping untrusted interface.
Authentication Login Authentication Configure Login Authentication Settings Commands login authentication [{ radius | tacacs }] [local] no login authentication Syntax Description login Configure login parameters authentication Configure authentication parameters radius Configure RADIUS authentication servers tacacs Configure a TACACS authentication system local Configure a local authentication database Defaults...
Page 247
Show RADIUS Server Information Commands show radius-server Syntax Description show Display running information radius-server Display the RADIUS server parameters Defaults Command Modes Privileged EXEC / User EXEC Usage Guidelines Examples moxa# show radius-server Error messages Related commands TACACS+ Configure TACACS+ Server Host Settings Commands tacacs-server host { <ucast_addr>...
Show TACACS+ Server Information Commands show tacacs-server Syntax Description show Displays running information tacacs-server Displays the TACACS server parameters Defaults Command Modes Privileged EXEC / User EXEC Usage Guidelines Examples moxa# show tacacs-server Error messages Related commands Customer Key Management Show Customer Key Information Commands show customer-key info...
Page 249
Clear Customer Key Commands clear customer-key Syntax Description clear Clear the key pair customer-key Key pair generated and imported from customer Defaults Command Modes User EXEC Usage Guidelines Examples moxa# clear customer-key Error Messages Related show customer-key info Commands copy customer-key {<tftp_url> | <sftp_url>} private {<tftp_url> | <sftp_url>} certificate label name Enable/Disable Digital Signature Commands...
Diagnostics System Status Utilization Show Device Current Information Commands show env {all | power | RAM [statistics] | CPU [statistics]} Syntax Description show Display the statistics information Display switch information Show the current information for all resources such as CPU, RAM, and power power Show the current power input information...
Page 251
Statistics Show Traffic Statistics Commands show statistics [interfaces {port-channel <integer> | <interface-type> <interface-id>}] Syntax Description show Display configuration/status information statistics Display the interface statistics table interface Configure the interface port-channel The port channel integer Integer value, should be valid port-channel ID interface-type Display interface information interface-id...
Clear Traffic Statistics Commands clear statistics [ interfaces {port-channel <integer> | <interface-type> <interface-id>}] Syntax Description clear Clear input statistics Clear statistics interfaces Specify which interface will be applied to this command port-channel The port channel interface integer The port channel ID interface-type The Ethernet interface type interface-id...
Page 253
moxa# show event-notification port-event Port link up Event Enable :Enabled Registered Action :Trap, Email, Registered Port :1/1, 1/2, 1/3, 1/4, 2/1, 2/2, 2/3, 2/4, 3/1, 3/2, 3/3, 3/4 , 4/1, 4/2, 4/3, 4/4, 5/1, 5/2, 5/3, 5/4, 6/1, 6/2, 6/3, 6/4, 7/1, 7/2, 7/3, 7/4 Port link down Event Enable :Enabled...
Page 254
account-setting-changed Notify when the user account information changes, including create account, remove account, and change of username, permission password-changed Notify when the user account password changes config-import Notify when the system configuration is imported ssl-certificated-changed Notify when the system certificate changes log-capacity Notify when the system log reaches the capacity threshold...
Page 255
mgmt-relay Set the MGMT relay action for notifications pwr1-relay Set the PWR1 relay action for notifications pwr2-relay Set the PWR2 relay action for notifications Defaults All configuration, trap, email event notifications are enabled by default. Command Modes Global configuration Usage Guidelines Examples moxa# config moxa(config)# event-notification poe-event all action trap...
Related show event-notification Commands event-notification general-event event-notification poe-event event-notification port-event Email Notification Configure Email Notification Server Settings Command email-notification server server-address <ucast_addr> [server-port <integer(1-65535)>] username <string(60)> password <string(60)> Syntax Description email-notification Configure email notification parameters server Configure email server parameters server-address Configure the email notification server IP address ucast_addr...
Page 259
Configure the Email Notification Sender Commands email-notification sender <string (60)> Syntax Description email-notification Configure email notification parameters sender Configure the email notification sender’s email address string (60) The sender’s email address (up to 60 characters) Defaults Command Modes Global configuration Usage Guidelines Examples (config)# email-notification sender testuser@test.com...
Page 260
Show Email Notification Server Settings Commands show email-notification server Syntax Description show Display the configuration/statistics/general information email-notification Display email notification parameters server Display server parameters Defaults Command Modes Privileged EXEC / User EXEC Usage Guidelines Examples # show email-notification server Error Messages Related Commands...
Page 261
Enable/Disable the Syslog Server Commands logging syslog-server { enable | disable } Syntax Description logging Configure logging server parameters syslog-server Configure the syslog server enable Enable the syslog server disable Disable the syslog server Defaults Command Modes Global Configuration Usage Guidelines Examples moxa(config)# logging syslog-server { enable | disable } Error Messages...
Page 262
Copy the Syslog Server Client Certificate and Key Commands copy syslog-server {<tftp_url> | <sftp_url>} client-certificate {<tftp_url> | <sftp_url>} client-key {<tftp_url> | <sftp_url>} ca-key Syntax Description copy Perform the copy operation syslog-server Copy syslog server configurations client-certificate Copy the syslog server client certificate file client-key Copy the syslog server client key file ca-key...
Diagnosis LLDP Show LLDP Information Commands show lldp Syntax Description show Display configuration/statistics/general information lldp Display LLDP information Defaults Command Modes Privileged EXEC User EXEC Usage Guidelines Display the global LLDP settings. Examples moxa# show lldp LLDP is disabled Transmit Interval : 30 Holdtime Multiplier Reinitialization Delay...
Show LLDP Neighbors Commands show lldp neighbors [detail] Syntax Description show Display configuration/statistics/general information lldp Display LLDP information neighbors Display LLDP neighbor information detail Display all detailed information Defaults Command Modes Privileged EXEC User EXEC Usage Guidelines Display LLDP neighbor interface information. Examples moxa# show lldp neighbors Capability Codes :...
Management Address Interface Management Address ----------- ------------------------------ 192.168.127.253 Eth1/1 : Port Id SubType : Interface Alias Port Id : Eth1/1 Port Description : Ethernet Interface Port 01 Enabled Tx Tlvs : Port Description, System Name, System Capability, Management Address, CIP Identification Extended 802.3 TLV Info -MAC PHY Configuration &...
Page 266
Related show lldp Commands Show LLDP Error Information Commands show lldp errors Syntax Description show Display configuration/statistics/general information lldp Configure LLDP information errors Display LLDP error information such as memory allocation failures, queue overflows, and table overflows Defaults Command Modes Privileged EXEC User EXEC Usage Guidelines...
Configure the LLDP Hold Time Multiplier Commands lldp holdtime-multiplier <value (2-10)> no lldp holdtime-multiplier Syntax Description Remove configuration/delete entry/reset to default value lldp Configure LLDP parameters holdtime-multiplier Configure the hold time multiplier applied to the transmit interval used to calculate the TTL value txTTL value The multiplier value (2 to 10) Defaults...
Page 269
Configure the LLDP Reinitialization Delay Commands lldp reinitialization-delay <seconds (1-10)> no lldp reinitialization-delay Syntax Description Remove configuration/delete entry/reset to default value lldp Configure LLDP parameters reinitialization-delay Configure the delay after the admin status becomes ‘disabled’ before reinitialization is attempted seconds The reinitialization delay (1 to 10 seconds) Defaults The default reinitialization delay time is 2 seconds.
Configure LLDP Global Settings Commands lldp chassis-id-subtype { chassis-comp <string(255)> | if-alias | port-comp <string(255)> | mac- addr | nw-addr | if-name | local <string(255)> } Syntax Description lldp Configure LLDP parameters chassis-id-subtype Configure the chassis-component and local system sybtypes chassis-comp Specify the value of the entPhysicalAlias object of a chassis component as the chassis identifier...
Configure LLDP Port Settings Commands lldp {transmit | receive} no lldp {transmit | receive} Syntax Description Remove configuration/delete entry/reset to default value lldp Configure LLDP parameters transmit Enable the transmission of LLDPDU from one of the ports of the server to the LLDP module receive Enable the reception of LLDPDU from one of the ports of the server to the LLDP module...
Page 272
Configure LLDP TLV Settings Commands lldp tlv-select basic-tlv { port-descr | sys-name | sys-descr } no lldp tlv-select basic-tlv { port-descr | sys-name | sys-descr } Syntax Description lldp Configure LLDP parameters tlv-select Configure basic LLDP TLV transmission parameters basic-tlv Configure basic TLV parameters port-descr Use a port description for the TLV.
Page 273
Configure LLDP TLV DOT3 Settings Commands lldp tlv-select dot3tlv { link-aggregation | max-framesize } Syntax Description lldp Configure LLDP parameters tlv-select Configure basic LLDP TLV transmission parameters dot3tlv Configure specific IEEE 802.3 TLV parameters link-aggregation Configure the link aggregation protocol statistics for each port on the device max-framesize Specify the maximum frame size of the TLV...
Page 274
Show Mirroring Information Commands show monitor { session <session-id (1-7)> | range <session-list> } Syntax Description show Display configuration/status information monitor Display port mirror information session Display the mirroring information of a specific mirroring session session-id Specify the index of the mirroring session range Display the mirroring information for a range of mirroring sessions session-list...
Page 275
Session Status : Active ------------------------------------------- ------------------------------------------- [RSPAN] Session Reflect Port Mode Disabled Rspan Type : Destination Rspan Vlan Id Source Ports : None : None Both : None Destination Port(s) : Eth2/1,Eth2/2 Session Status : Active ------------------------------------------- Error Messages % Invalid: Monitor session range must be in between (1-5) Example: Key “range 1-8”...
Page 276
Configure the Source for a Mirroring Session Commands monitor session <session-id (1-7)> { source { interface { port-channel <port-channel-id> | <interface-type> <interface-id> } [{ rx | tx | both }] }} Syntax Description monitor Configure port mirroring parameters session Configure the mirroring session session-id The index of the mirroring session source...
Page 277
Remove Source Port Configurations for a Mirroring Session Commands no monitor session <session-id (1-7)> {source { interface {port-channel <port-channel-id> | <interface-type> <interface-id> }}} Syntax Description Remove configuration/delete entry/reset to default value monitor Configure port mirroring parameters session Configure the mirroring session session-id The index of the mirroring session source...
Page 278
Configure the Destination for a Mirroring Session Commands monitor session <session-id (1-7)> destination {interface <interface-type> <interface-id>} [reflect- port-mode] Syntax Description monitor Configure port mirroring parameters session Configure the mirroring session session-id The index of the mirroring session destination Configure the mirroring destination port interface Configure the interface interface-type...
Page 279
Delete the Destination Configuration for a Mirroring Session Commands no monitor session <session-id (1-7)> destination {interface <interface-type> <interface- id>}[reflect-port-mode] Syntax Description Remove configuration/delete entry/reset to default value monitor Configure port mirroring parameters session Configure the mirroring session session-id The index of the mirroring session destination Configure the mirroring destination port interface...
Page 280
Delete Mirroring Configurations Commands no monitor session {range <session-list> | session-id (1-7)} Syntax Description Remove configuration/delete entry/reset to default value monitor Configure port mirroring parameters session Configure the mirroring session range The list of sessions for which the mirroring configuration should be removed session-list The mirroring session list...
Page 281
% Invalid: If the port is set as the Dual Homing redundant port, it cannot be set to the destination port. % Invalid: If the port is set as the MSTP port, it cannot be set to the destination port. % Invalid: If the port is set as the MRP port, it cannot be set to the destination port.
Page 282
vlan Configure RSPAN session VLAN parameters vlan-id Specify the VLAN ID Defaults Command Modes Global Configuration Mode Usage Guidelines Examples moxa-product# configure moxa-product(config)# monitor session 6 rspan-type source vlan 3 moxa-product# configure moxa-product(config)# monitor session 7 rspan-type destination vlan 2 Error messages % Invalid: The RSPAN VLAN ID cannot be configured to the Management VLAN ID.
Page 283
% Invalid: The PVID of the reflect port is in a session that conflicts with the reflect port PVID or the RSPAN VLAN ID of another session, or the RSPAN Intermediate VLAN ID. Related commands Ping Ping the Host Commands ping <host>...
Event Log Show Logging Event Log Commands show logging event-log Syntax Description show Display configuration/status information logging Display logging information event-log Display event log entries Defaults Command Modes Privileged EXEC / User EXEC Examples moxa# show logging event-log Total number of log entries = 7 Boot SEV Timestamp Message ----- ---- -------------------- ----------...
Page 285
Export an Event Log File Commands copy event-log {tftp://server/filename | sftp://<user-name>:<pass-word>@server/filename} Syntax copy Copy the target file or input Description event-log Export the system event log tftp://server/filename The address of the remote TFTP server and target filename in the format "tftp://server/filename" sftp://<username>:<pass The address of the remote SFTP server and target filename in the word>@server/filename...
Page 286
Configure Oversized Log Action Settings Commands logging oversize-action { overwrite-oldest | stop-recording } Syntax Description logging Configure logging parameters oversize-action Configure the action when exceeding the log threshold overwrite-oldest Overwrite the oldest entry stop-recording Stop recording events Defaults Command Modes Privileged EXEC Global Configuration Usage Guidelines...
Command Modes Privileged EXEC Usage Guidelines Use the auto-backup log privileged command on the device to automatically back up the oldest 1000 log entries to prevent logs from being overwritten. Examples (config)# auto-backup log enable (config)# auto-backup log disable Error messages Related commands show external-storage info auto-backup config...
Page 288
Configure MMS IED Name Commands mms ied <iedname> Syntax Description Configure MMS parameters Configure the IED name <iedname> Specify the IED name Defaults RKS4000 Command Modes Global Configuration Usage Guidelines This command is to configure MMS IED name. Examples moxa (config)# mms ied test Error Messages Related Commands...
Page 289
Export the MMS CID File Commands mms cid export { tftp://server/filename | sftp://<user-name>:<pass-word>@server/filename } Syntax Configure MMS parameters Description Configure the CID file export Export the CID file tftp://server/filename The address of the remote TFTP server and filename in the format "tftp://server/filename"...
Page 290
Import/Export the MMS T-Profile CA File Commands mms t-profile ca import { tftp://server/filename | sftp://<user-name>:<pass-word>@server/filename } mms t-profile ca export { tftp://server/filename | sftp://<user-name>:<pass-word>@server/filename } Syntax Configure MMS parameters Description t-profile Configure T-profile settings Configure the CA file import Import the CA file export Export the CA file tftp://server/filename...
Page 292
Show the MMS Status Commands show mms enable Syntax Description show Display the configuration Display MMS settings enable Display the MMS status Defaults Command Modes Privileged EXEC Mode Usage Guidelines This command shows MMS status information. Examples moxa# show mms enable mms enable Error Messages Related Commands...
Page 293
Show MMS RCB Information Commands show mms rcb Syntax Description show Display the configuration Display MMS settings Display RCB information Defaults Command Modes Privileged EXEC Mode Usage Guidelines This command shows MMS RCB information. Examples moxa# show mms rcb Report Control Block Table ------------------------------ urcbLnkSt DataChange...
Show the MMS T-profile Status Commands show mms t-profile enable Syntax Description show Display the configuration Display MMS settings t-profile Display T-profile settings enable Display the T-profile status Defaults Command Modes Privileged EXEC Mode Usage Guidelines This command is used to check if MMS T-profile is enabled. Examples moxa# show mms t-profile enable mms t-profile enable...
Reboot Reboot the Switch Commands reload Syntax Description reload Perform a warm restart Defaults Command Modes Privileged EXEC Usage Guidelines Examples moxa# reload Are you sure you want to restart the device? [y/N] y Restarting device... Error Messages Related Commands Reset to Default Reset to Default Commands...
Page 296
Resetting device to the custom default and restarting... Error Messages % Invalid: The specified custom default configuration does not exist. Related Commands Log Out Commands exit Syntax Description exit Log out from the device Defaults Command Modes Privileged EXEC Usage Guidelines Examples moxa# exit Error messages...
Page 297
Enable or Disable the Tech Support Mechanism Commands tech-support system [ enable | disable ] Syntax tech-support Configure tech support troubleshooting settings Description system Configure tech support for the switch system Enable Enable the tech support function Disable Enable the tech support function Defaults Disable Command Modes...
Supplementary Information The table below lists known issues or limitations related to the CLI commands in this version. Item Descriptions Moxa# debug debuglog clear While these commands may be Moxa# debug debuglog export usb { all | os | framework | package | hw } visible in the terminal, it's Moxa# debug terminal important to note that they are...
Need help?
Do you have a question about the ToughNet TN-4500B Series and is the answer not in the manual?
Questions and answers