Page 2: Copyright Statement
Software Release 2.00.022 Date: November 3, 2011 Copyright Statement D-Link Corporation © 2011 All rights reserved. Without our written permission this document may not be excerpted, reproduced, transmitted, or otherwise in all or part by any party by any means.
Page 3 Other Documentation The documents below are a further source of information in regards to configuring and troubleshooting the switch . All the documents are available for download from D-Links web site www.d-link.com. • DGS-6600 Series Quick Installation Guide • DGS-6600 Series Hardware Installation Guide...
Page 4 Conventions Convention Description boldface font Commands, command options and keywords are printed in boldface. Key words in the command line, are to be entered exactly as they are displayed. UPPERCASE ITALICS Parameters or values that must be specified are printed in UPPERCASE font ITALICS.
Page 5: Command Descriptions
Command Descriptions: The information pertaining to each command in this reference guide is presented using a number of template fields. The fields are: • Description - This is a short and consise statement describing the commands functionality. • Syntax - The precise form to use when entering and issuing the command. The form conventions are described in the table shown under the section “Conventions”...
Page 6 • User EXEC mode • Privileged EXEC mode • Global Configuration mode All other sub-configuration modes can be accessed via global configuration mode. When a user logs in to the Switch, the privilege level of the user determines the command mode the user will enter after initially logging in.
Page 7 Not all configuration modes are listed in the above figure. For example, in Note: global configuration mode, enter “router ospf” to enter OSPF router configuration mode The following table briefly lists the available command modes. Only the basic command modes and some of the sub-configuration modes are enumerated.
Page 8 Command Mode & Privilege Level Purpose VLAN Interface Configuration Mode For applying VLAN interface related settings. VLAN Configuration Mode For applying settings to a VLAN. IP Access-List Configuration Mode For specifying filtering criteria for an IP access list. User EXEC Mode at Basic User Level This command mode is mainly designed for checking basic system settings, allowing users to change the local terminal session settings and carry out basic network connectivity verification.
Page 9 DGS-6604 Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.029 Copyright (c) 2010 D-Link Corporation. All rights reserved. DGS-6604:12# In the following example, the user enters the enable privilege LEVEL command in user EXEC mode to enter privileged EXEC mode at Power User level: DGS-6604:2>enable privilege 12...
Page 10: Global Configuration Mode
In the following example, the user enters the enable privilege LEVEL command in privileged EXEC mode at power user level to enter privileged EXEC mode at an administrator level: DGS-6604:12#enable privilege 15 DGS-6604:15# Global Configuration Mode The primary purpose of global configuration mode is to apply global settings on the entire Switch. Global configuration mode can be accessed at both power user and administrator level.
Page 11 DGS-6604 Command Listing by Feature 802.1x dot1x auth-mode — 160 dot1x auth-protocol — 161 dot1x control-direction — 162 dot1x default — 163 dot1x forward-pdu — 164 dot1x guest-vlan — 165 dot1x initialize — 167 dot1x max-req — 168 dot1x pae authenticator — 169 dot1x port-control —...
Page 12 DGS-6604 Access ip access-group — 214 Control Lists ip access-list — 215 ipv6 access-group — 317 ipv6 access-list — 319 mac access-group — 399 mac access-list — 400 periodic — 457 permit | deny (ip access-list) — 458 permit | deny (ipv6 access list) — 461 permit | deny (mac access-list) —...
Page 13: Table Of Contents
DGS-6604 ip telnet service-port — 314 ip trusted-host — 315 login — 392 logout — 393 password encryption — 456 show history — 590 show ip trusted-host — 680 show username — 754 show user-session — 755 telnet — 873 terminal length —...
Page 14 DGS-6604 ipv6 nd other-config-flag — 333 ipv6 nd prefix — 334 ipv6 nd ra-interval — 335 ipv6 nd ra-lifetime — 336 ipv6 nd reachable-time — 337 ipv6 nd retrans-timer — 338 ipv6 nd suppress-ra — 339 ipv6 neighbor — 340 show ipv6 interface —...
Page 15 DGS-6604 bgp router-id — 78 clear ip bgp — 94 clear ip bgp peer-group — 96 default-information originate (BGP) — 137 ip dhcp screening ports — 220 ip community-list — 235 match as-path — 409 match community — 410 neighbor advertisement-interval — 429 neighbor description —...
Page 16 DGS-6604 show ip as-path access-list — 594 show ip bgp — 595 show ip bgp community-list — 597 show ip bgp filter-list — 599 show ip bgp neighbors — 600 show ip community-list — 603 synchronization — 871 timers bgp — 885 Broadcast show storm-control —...
Page 17 DGS-6604 ip dhcp relay address — 244 ip dhcp relay hops — 245 ip dhcp relay information check — 246 ip dhcp relay information option — 247 ip dhcp relay information policy — 249 ip dhcp relay information trust-all — 250 ip dhcp relay information trusted —...
Page 18 DGS-6604 domain-name — 154 ip address-list — 219 ip dhcp ping packets — 240 ip dhcp ping timeout — 241 ip dhcp pool — 242 lease — 367 netbios node-type — 441 netbios scope-id — 442 netbios wins-server — 443 next-server —...
Page 19 DGS-6604 show ip dhcp snooping — 615 show ip dhcp snooping binding — 773 show ip dhcp snooping database — 776 clear dos prevention counter — 91 Prevention dos_prevention action — 155 dos_prevention type — 156 show dos_prevention — 575 DVMRP ip dvmrp —...
Page 20 DGS-6604 Errdisable errdisable recovery — 196 show errdisable recovery — 582 File System delete — 147 dir — 149 GVRP clear gvrp statistics interface — 93 gvrp (Global) — 199 gvrp (Interface) — 200 gvrp advertise (Interface) — 201 gvrp advertise (VLAN) — 202 gvrp dynamic-vlan-creation —...
Page 21 DGS-6604 ip igmp snooping static-group — 268 show ip igmp snooping — 626 show ip igmp snooping group — 628 show ip igmp snooping mrouter — 631 Interface clear counters — 90 description — 148 interface — 211 interface range — 212 show interface —...
Page 22 DGS-6604 tunnel mode — 894 tunnel source — 895 Jumbo Frame ip mtu — 273 max-rcv-frame-size — 414 mtu — 424 L2 FDB clear mac address-table — 111 mac address-table aging destination-hit — 401 mac address-table aging-time — 402 mac address-table static — 403 multicast filtering-mode —...
Page 23 DGS-6604 lldp med-tlv-select — 377 lldp receive — 379 lldp reinit — 380 lldp run — 381 lldp tlv-select — 382 lldp transmit — 384 lldp tx-delay — 385 lldp tx-interval — 386 show lldp — 795 show lldp interface — 797 show lldp local interface —...
Page 24 DGS-6604 shutdown (Management Port ) — 771 Mirror monitor session — 416 monitor session destination remote vlan — 418 monitor session source remote vlan — 422 remote-span — 511 show monitor session — 715 MSTP instance — 210 name — 426 revision —...
Page 25 DGS-6604 host area — 207 ip ospf authentication — 276 ip ospf authentication-key — 277 ip ospf cost — 278 ip ospf dead-interval — 279 ip ospf hello-interval — 280 ip ospf message-digest-key — 281 ip ospf priority — 282 ip ospf retransmit-interval —...
Page 26 DGS-6604 show ip ospf interface — 655 show ip ospf neighbor — 657 show ip ospf virtual-links — 658 OSPFv3 area default-cost (IPv6) — 40 area range (IPv6) — 44 area stub (IPv6) — 46 area virtual-link (IPv6) — 51 auto-cost reference-bandwidth (IPv6) —...
Page 27 DGS-6604 show ipv6 ospf interface — 694 show ipv6 ospf neighbor — 695 show ipv6 ospf route — 696 show ipv6 ospf virtual-links — 697 show ipv6 protocols [PROCESS-ID ospf | rip ] — 698 Password password recovery — 452 Recovery ip pim —...
Page 28 DGS-6604 poe port priority — 467 poe port description — 468 poe service-policy — 469 poe power-inline — 470 show poe power system — 814 show poe power-inline — 816 Policy-based ip policy route-map — 301 Route show ip policy — 785 Port Security clear port-security —...
Page 29 DGS-6604 police cir — 478 policy-map — 482 qos aggregate-policer — 487 qos bandwidth — 490 qos cos — 491 qos deficit-round-robin — 492 qos dscp-mutation — 495 qos map cos-color — 496 qos map dscp-color — 497 qos map dscp-cos — 498 qos map dscp-mutation —...
Page 30 Preface vlan-tunnel ctag-mapping static — 906 vlan-tunnel ingress checking — 907 vlan-tunnel interface-type — 908 vlan-tunnel remove-inner-tag — 909 vlan-tunnel tpid — 910 accept-lifetime — 34 default-information originate (RIP) — 139 default-metric (RIP) — 144 ip rip authentication key-chain — 303 ip rip authentication mode —...
Page 31 Preface default-information originate (RIP IPv6) — 140 default-metric (RIP IPv6) — 145 ipv6 rip metric-offset — 348 ipv6 rip split-horizon — 349 ipv6 rip split-horizon poisoned — 350 ipv6 router rip — 358 neighbor (RIP IPv6) — 428 passive-interface (RIP IPv6) — 451 redistribute (RIP IPv6) —...
Page 32 DGS-6604 cpu-protect safeguard — 129 cpu-protect sub-interface — 134 show cpu-protect safeguard — 571 show cpu-protect type — 572 show cpu-protect sub-interface — 574 sFlow sflow — 551 sflow receiver — 552 sflow sampler — 554 sflow poller — 556 show sflow —...
Page 33 DGS-6604 ip ssh — 311 show ip ssh — 679 show ssh — 743 ssh — 819 clear spanning-tree detected-protocols — 114 show spanning-tree — 738 spanning-tree ( Global configuration ) — 840 spanning-tree ( Interface configuration ) — 841 spanning-tree (timers) —...
Page 34 DGS-6604 logging on — 391 show logging — 707 System File boot config — 79 Management boot image — 82 clear running-config factory-defaults — 113 copy — 124 show boot — 564 show running-config — 729 show startup-config — 744 Time and SNTP clock set —...
Page 35 DGS-6604 show vlan — 757 subnet-base ( VLAN ) — 866 trunk allowed-vlan — 892 vlan — 899 vlan name — 901 VRRP show vrrp — 766 show vrrp brief — 769 vrrp critical-ip — 915 vrrp ip — 917 vrrp preempt —...
Page 36 DGS-6604 CLI Reference Guide...
Page 37: Aaa Authentication
DGS-6604 aaa authentication aaa authentication Use this command to enable the AAA authentication function (console, telnet, ssh or http) using the method or methods specified and to create a login list to specify the application or applications used for system access. Use aaa group server to first define authentication servers before aaa Note: authentication can be configured.
Page 38 DGS-6604 aaa authentication Multiple methods for the login/enable authentication per application can be specified. The new setting will overwrite the old association. Use no aaa authentication to disable authentication for system access or to disable the login list of applications used for system access. To configure AAA authentication, first define a group of authentication servers (use aaa group server command).
Page 39: Aaa Authorization
DGS-6604 aaa authorization aaa authorization Use this command to enable the authorization function. Use the no form of the command to disable AAA authorization. aaa authorization no aaa authorization Syntax None Default Disabled Command Mode Global configuration at privilege level 15 Usage Guideline When the AAA authorization function is enabled, the system will use configuration settings authorized by the RADIUS server in addition to the...
Page 40: Aaa Group Server
DGS-6604 aaa group server aaa group server Use the aaa group server command to enter AAA group server mode and identify AAA server groups used for AAA authentication. In AAA group server mode server hosts are grouped into distinct lists and distinct methods. To remove a group server from the configuration list, use the no aaa group server form of this command.
Page 41: Accept Dhcp Client-Identifier
DGS-6604 accept dhcp client-identifier accept dhcp client-identifier Use this command to turn on validation checking of the Client Identifier. Use the no form of the command to turn off validation checking of the Client Identifier. accept dhcp client-identifier no accept dhcp client-identifier Syntax None Default...
Page 42: Accept Dhcp Relay-Agent
DGS-6604 accept dhcp relay-agent accept dhcp relay-agent To accept relay agent information use the accept dhcp relay-agent command, use the no form of the command to reject DHCP relay agent information. accept dhcp relay-agent [circuit-id|remote-id] no accept dhcp relay-agent [circuit-id|remote-id] Syntax Description circiut-id (Optional) Agent Circuit ID Sub-option.
Page 43: Acceptable-Frame
DGS-6604 acceptable-frame acceptable-frame Use the acceptable-frame interface command to set the acceptable frame type of a port for . The default acceptable frame type is admit-all. IEEE 802.1Q VLANs acceptable-frame { tagged-only | untagged-only | admit-all } Syntax Description tagged-only Set acceptable frame type for tagged only of the interface.
Page 44: Syntax Description
DGS-6604 accept-lifetime accept-lifetime The accept-lifetime command is used to set a time period when an authentication key on a key chain is accepted as the valid key. accept-lifetime START-TIME { infinite | END-TIME | duration SECONDS } Syntax Description START-TIME The beginning time that the key specified, by the key command, is valid to be received.
Page 45 DGS-6604 accept-lifetime Example The following example configures a key chain named chain1. Key 1 named "forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key 3 named "forkey3string" will be accepted from 2:30 p.m.
Page 46: Vlan Access Vlan
DGS-6604 access vlan access vlan Use the access vlan interface configuration command to specify the access VLAN for the interface. Use default interface vlan command to reset to default setting. access vlan VLAN-ID default access vlan Syntax Description access vlan Specifies the access VLAN for the interface.
Page 47: Address-Family Ipv
DGS-6604 address-family ipv4 address-family ipv4 Use this command to enter address family configuration mode to configure a routing session using standard IP Version 4 address prefixes. Use the no form of this command to remove the IPv4 address family configuration from the running configuration.
Page 48: Aggregate-Address
DGS-6604 aggregate-address aggregate-address Use this command to configure BGP aggregate entries. Use the no form of the command to disable this function. aggregate-address NETWORK-NUMBER/SUBNET-LENGTH [summary-only] [as-set] no aggregate-address NETWORK-NUMBER/SUBNET-LENGTH [summary-only] [as-set] Syntax Description NETWORK-NUMBER/ Specifies the number of network and the length of network that BGP will SUBNET-LENGTH aggregate.
Page 49: Area Default-Cost
DGS-6604 area default-cost area default-cost The cost of the default summary route sent into a not-so-stubby area (NSSA) or a stub area is defined with the area default-cost command in router configuration mode. The no area default-cost command is used to remove an assigned default route cost.
Page 50: Area Default-Cost (Ipv)
DGS-6604 area default-cost (IPv6) area default-cost (IPv6) To set the summary-default cost of a stub area, use the area default-cost command. To disable this function, use the no form of this command. area AREA-ID default-cost COST no area AREA-ID default-cost Syntax Description AREA-ID Identifier of the area about which routes are to be summarized.
Page 51: Area Nssa
DGS-6604 area nssa area nssa Use this command to define an area as an NSSA (not-so-stubby) area. Use the no nssa command to remove the NSSA designation. Note: For OSPFv3 this command is not supported. area AREA-ID nssa [no-redistribution] [default-information-originate [metric METRIC-VALUE] [metric-type TYPE-VALUE ] ] [no-summary] no area AREA-ID nssa [no-redistribution] [default-information-originate] [no-summary] Syntax Description...
Page 52 DGS-6604 area nssa An NSSA allows external routes to be advertised to the area in type 7 link state advertisement (LSA). These routes are then leaked into other areas. Although, the external routes from other areas still do not enter the NSSA. Use the area nssa command to simplify the administration of connecting a central site using OSPF to a remote site that is using a different routing protocol.
Page 53: Area Range
DGS-6604 area range area range Use this command to summarize and consolidate routes at an area boundary. Use the no area range command to disable this function. area AREA-ID range PREFIX/PREFIX-LENGTH [advertise | not-advertise] [cost COST] no area AREA-ID range [PREFIX/PREFIX-LENGTH ] Syntax Description AREA-ID Specifies the identifier of the area for which routes are summarized.
Page 54: Area Range (Ipv)
DGS-6604 area range (IPv6) area range (IPv6) To consolidate and summarize routes at an area boundary, use the area range command. To disable this function, use the no form of this command. area AREA-ID range IPv6-PREFIX/PREFIX-LENGTH [advertise | not-advertise] no area AREA-ID range IPv6-PREFIX / PREFIX-LENGTH Syntax Description AREA-ID Identifier of the area for which routes are to be summarized.
Page 55: Area Stub
DGS-6604 area stub area stub Use this command to configure an area as a stub area. Use the no area stub command to disable this function. area AREA-ID stub [no-summary] no area AREA-ID stub [no-summary] Syntax Description AREA-ID Specifies the identifier of the stub area. The identifier can be specified as either an IP address or a decimal value.
Page 56: Area Stub (Ipv)
DGS-6604 area stub (IPv6) area stub (IPv6) To set the summary-default cost of a stub area, use the area default-cost command. To disable this function, use the no form of this command. area AREA-ID stub [no-summary] no area AREA-ID stub [no-summary] Syntax Description AREA-ID Identifier of the area about which routes are to be summarized.
Page 57: Area Virtual-Link
DGS-6604 area virtual-link area virtual-link Use this command to configure a link between two backbone areas that are physically separated through other non-backbone area. Use the no area virtual- link command to remove a virtual link. area AREA-ID virtual-link ROUTER-ID [ authentication [ message-digest ] ] [ hello-interval SECONDS ] [ dead-interval SECONDS ] [ transmit-delay SECONDS ] [ retransmit-interval SECONDS ] [ [authentication-key PASSWORD ] | [ message-digest-key KEY-ID md5 KEY ] ] no area AREA-ID virtual-link ROUTER-ID [dead-interval|hello-interval|tansmit-...
Page 58 DGS-6604 area virtual-link Default • AREA-ID: None • ROUTER-ID: None • authentication: null • hello-interval:10 seconds • dead-interval: 40 seconds • transmit-delay: 1 second • retransmit-interval: 5 seconds • authentication-key: None • message-digest-key: None Command Mode Router configuration Usage Guideline In OSPF, all non-backbone areas must be connected to a backbone area.
Page 59 DGS-6604 area virtual-link The password created by the area virtual-link authentication-key command is used as a "key" that is inserted directly into the OSPF header when the switch system software originates routing protocol packets over this virtual link. Usually, one key per interface (or virtual link) is used to generate authentication information when sending packets and to authenticate incoming packets.
Page 60 DGS-6604 area virtual-link Switch# configure terminal Switch(config)# router ospf 1 Switch(config-router)# area virtual-link 192.168.255.1 authentication-key yourpass Switch(config-router)# area 1 virtual-link 192.168.255.1 authentication Verify the settings by entering the show ip ospf virtual-links command. CLI Reference Guide...
Page 61: Area Virtual-Link (Ipv)
DGS-6604 area virtual-link (IPv6) area virtual-link (IPv6) To define an OSPF virtual link, use the area virtual-link command with the optional parameters. To remove a virtual link, use the no form of this command. area AREA-ID virtual-link ROUTER-ID [instance-id INSTANCE-ID] [hello-interval SECONDS] [dead-interval SECONDS] [transmit-delay SECONDS] [retransmit-interval SECONDS] no area AREA-ID virtual-link ROUTER-ID Syntax Description...
Page 62 DGS-6604 area virtual-link (IPv6) In OSPF, all non-backbone areas must be connected to a backbone area. If the connection to the backbone is lost, the virtual link repairs the connection. Virtual links can be configured between any two backbone-routers that have an interface to a common non-backbone area.
Page 63 DGS-6604 Use this command to add a static entry in the Address Resolution Protocol (ARP) cache. Use the no arp command to remove a static entry in the ARP cache. arp IP-ADDRESS HARDWARE-ADDRESS no arp IP-ADDRESS HARDWARE-ADDRESS Syntax Description IP-ADDRESS IP address in four-part dotted decimal format corresponding to the local data-link address.
Page 64: Arp Timeout
DGS-6604 arp timeout arp timeout Use the arp timeout command to set the ARP aging time for the ARP table. arp timeout SECONDS Syntax Description SECONDS Number of seconds that dynamic entries will remain in the ARP table before being deleted; valid values are from 0 to 65535. Default 14400 seconds (4 hours) Command Mode...
Page 65: Auto-Cost Reference-Bandwidth
DGS-6604 auto-cost reference-bandwidth auto-cost reference-bandwidth Use this command to control how OSPF calculates default metrics for the interface.The no form of this command will reset the reference bandwidth to the default value. auto-cost reference-bandwidth MBPS no aut-cost reference-bandwidth Syntax Description MBPS The reference bandwidth in Mbps.
Page 66: Auto-Cost Reference-Bandwidth (Ipv)
DGS-6604 auto-cost reference-bandwidth (IPv6) auto-cost reference-bandwidth (IPv6) To control the reference value IPv6 OSPF uses when calculating metrics for interfaces, use the auto-cost reference-bandwidth command. To return the reference value to its default, use the no form of this command. auto-cost reference-bandwidth MBPS no auto-cost reference-bandwidth Syntax Description...
Page 67: Banner Login
DGS-6604 Chassis Ethernet Switch Command Line Interface, Firmware: Build 1.00.027 Copyright (c) 2011 D-Link Corporation, all rights reserved. Where 2011 represents the year for release of the new firmware. It should be updated if needed by the subsequent release of the firmware.
Page 68 DGS-6604 banner login Example This example shows how to modify the banner login message: Switch:12(config)# banner login DGS-6604 Chassis Ethernet Switch Command Line Interface, Access for authorized users only. Please enter your username and password. Switch:12# CLI Reference Guide...
Page 69: Based-On Client-Id
DGS-6604 based-on client-id based-on client-id This command is used to specify the client identifier as a rule for IP address assignment from the DHCP address pool. Use the no form to remove the rule from DHCP address pool. based-on client -id {hex|string} CLIENT-ID no based-on client -id {hex|string} CLIENT-ID Syntax Description CLIENT-ID...
Page 70: Based-On C-Vid
DGS-6604 based-on c-vid based-on c-vid This command is used to specify the customer vlan ID (C-VID) as a rule for IP address assignment from the DHCP address pool. Use the no form of the command to remove the C-VID rule from DHCP address pool. based-on c-vid V-ID [,|-] no based-on c-vid V-ID [,|-] Syntax Description...
Page 71: Based-On Interface-Ip-Address
DGS-6604 based-on interface-ip-address based-on interface-ip-address This command is used to specify a rule for a DHCP address pool to respond to a request from the specified IP interface. Use the no form of the command to remove the rule from the DHCP address pool. based-on interface-ip-address IP-ADDRESS no based-on interface-ip-address IP-ADDRESS Syntax Description...
Page 72: Based-On Mac-Address
DGS-6604 based-on mac-address based-on mac-address This command is used to specify the host MAC address as a rule for IP address assignment from the DHCP address pool. Use the no form to remove the MAC address rule from the DHCP address pool. based-on mac-address MAC-ADDRESS [,|-] no based-on mac-address MAC-ADDRESS [,|-] Syntax Description...
Page 73: Based-On Relay-Ip-Address
DGS-6604 based-on relay-ip-address based-on relay-ip-address This command is used to specify a rule for the DHCP address pool’s only response for BOOTP forwarder or relay. Use the no form of the command to remove the rule from a DHCP address pool. based-on relay-ip-address IP-ADDRESS no based-on relay-ip-address IP-ADDRESS Syntax Description...
Page 74: Based-On S-Vid
DGS-6604 based-on s-vid based-on s-vid This command is used to specify the service provider vlan ID (S-VID) as a rule for IP address assignment from the DHCP address pool. Use the no form of the command to remove the S-VID rule from the DHCP address pool. based-on s-vid V-ID [,|-] no based-on s-vid V-ID [,|-] Syntax Description...
Page 75: Based-On User-Class
DGS-6604 based-on user-class based-on user-class This command is used so that DHCP administrators can define specific user class identifiers to convey information about a client's software configuration or about its user's preferences. Use the no form of the command to remove the related setting rule.
Page 76: Based-On Vendor-Class
DGS-6604 based-on vendor-class based-on vendor-class This command is used to create an address binding rule for the DHCP address pool based on the vendor class. Use the no form of the command to delete the related rule setting. based-on vendor-class {hex HEXADECIMAL |string STRING} no based-on vendor-class {hex HEXADECIMAL |string STRING} Syntax Description HEXADECIMAL...
Page 77: Bgp Always-Compare-Med
DGS-6604 bgp always-compare-med bgp always-compare-med Use this command to compare the Multi-Exit Discriminator (MED) for paths from neighbors in different autonomous systems. Use the no bgp always-compare- med command to disallow the comparison. bgp always-compare-med no bgp always-compare-med Syntax None Default Disabled Command Mode...
Page 78: Bgp Asnotation Dot
DGS-6604 bgp asnotation dot bgp asnotation dot Use this command to change the default display and regular expression match format of BGP 4-byte AS numbers from asplain (decimal values) to dot notation. Use the no form of the command to reset the default 4-byte autonomous system number display and regular expression match format to asplain.
Page 79 DGS-6604 bgp asnotation dot Switch # show ip bgp BGP table version is 30, local router ID is 10.10.11.50 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path...
Page 80: Bgp Bestpath As-Path Ignore
DGS-6604 bgp bestpath as-path ignore bgp bestpath as-path ignore Use this command to ignore AS path as a factor in the selection of the best path. Use the no form of the command to restore the default behavior and configure BGP to consider the AS path during route selection.
Page 81 DGS-6604 bgp bestpath as-path ignore Use the commands, bgp bestpath as-path ignore, bgp bestpath compare- router-id or bgp default local-preference to customize the path selection process. Example This example shows how to configure to ignore the AS path as the best path for autonomous system 65534: Switch(config)# router bgp 65534 Switch(config-router)# bgp bestpath as-path ignore...
Page 82: Bgp Bestpath Compare-Routerid
DGS-6604 bgp bestpath compare-routerid bgp bestpath compare-routerid Use this command to compare router IDs for the best-path selection process when external BGP (eBGP) paths are identical. Use the no form of the command to disable this function. bgp bestpath compare-routerid no bgp bestpath compare-routerid Syntax None...
Page 83: Bgp Default Ipv4-Unicast
DGS-6604 bgp default ipv4-unicast bgp default ipv4-unicast Use this command to enable the IP version 4 (IPv4) unicast address family for all neighbors. This affects the BGP global configuration. Use the no form of the command to disable this function. bgp default ipv4-unicast no bgp default ipv4-unicast Syntax...
Page 84: Bgp Default Local-Preference
DGS-6604 bgp default local-preference bgp default local-preference Use this command to change the default local preference value. To return the local preference value to the default setting, use the no form of this command. bgp default local-preference NUMBER no bgp default local-preference Syntax Description NUMBER Range of local preference is 0 to 4294967295.
Page 85: Bgp Deterministic-Med
DGS-6604 bgp deterministic-med bgp deterministic-med Use this command to include the Multi Exit Discriminator (MED) value for comparison of the best path selection between all paths received from the same autonomous system. Use the no form of the command to prevent BGP from considering the MED attribute in path comparison.
Page 86: Bgp Enforce-First-As
DGS-6604 bgp enforce-first-as bgp enforce-first-as Use this command to enforce the first AS for the eBGP routes. To disable this feature, use the no form of this command. bgp enforce-first-as no bgp enforce-first-as Syntax None Default Disabled Command Mode Router configuration. Usage Guideline This command specifies that any updates received from an external neighbor that do not have the neighbor’s configured Autonomous System (AS), at the...
Page 87: Bgp Log-Neighbor-Changes
DGS-6604 bgp log-neighbor-changes bgp log-neighbor-changes Use the bgp log-neighbor-changes command to enable logging of BGP neighbor resets. Use no bgp log-neighbor-changes to disable the logging. bgp log-neighbor-changes no bgp log-neighbor-changes Syntax None Default Disabled. Command Mode Router configuration. Usage Guideline This command enables logging of both BGP resets and alternating status changes to use for toubleshooting purposes .
Page 88: Bgp Router-Id
DGS-6604 bgp router-id bgp router-id Use this command to configure a fixed router ID for the Border Gateway Protocol (BGP) routing process. Use the no form of this command to remove the fixed router ID from the running configuration file. bgp router-id IP-ADDRESS no bgp router-id [IP-ADDRESS] Syntax Description...
Page 89: Boot Config
DGS-6604 boot config boot config Use this command to specify the file that will be used as the configuration file for the next boot up. boot config [check] MEDIUM: URL no boot config Syntax Description MEDIUM:URL Specifies the media where the file system is located. The valid values are flash:\, cf1:\., etc.
Page 90 DGS-6604 boot config The specified URL must be represented by an absolute path. It cannot be represented by a relative path. Examples The following example shows how to specify the file switch-config as the startup configuration file: Switch# configure terminal Switch(config)# boot config flash:\switch-config Switch(config)# end Verify the settings by entering the show boot command.
Page 91: Bootfile
DGS-6604 bootfile bootfile This command is used to specify the name of the default boot image for a Dynamic Host Configuration Protocol (DHCP) client. To delete the boot image name, use the no form of the command. boofile URL no bootfile Syntax Description Specifies the path name and file name of the file that is used as a boot image.
Page 92: Boot Image
DGS-6604 boot image boot image Use this command to specify the file used as the image file for the next boot. boot image [ check ] MEDIUM: URL Syntax Description MEDIUM Specifies the media where the file system is located. The valid values are flash:\ and cf1:\.
Page 93 DGS-6604 boot image Switch# configure terminal Switch(config)#boot image flash:\images\switch_image1.had Checking image at local flash:\images\switch_image1.had ... Done. Update bootlist ..Done. Success Verify the settings by entering the show boot command. CLI Reference Guide...
Page 94: Lacp Channel-Group
DGS-6604 channel-group channel-group Use the channel-group command to assign an interface to a channel group. Use no channel-group to remove an interface from a channel-group. channel-group CHANNEL-NO mode { on| active| passive } no channel-group Syntax Description CHANNEL-NO Specifies the Channel group ID. mode { on | active | Specifies the mode of channel group as follows: passive }...
Page 95 DGS-6604 channel-group • In order to be a member of the LACP channel-group, the member ports must have the same speed setting. LACP will not prevent the user config- uration if these ports have difference speed setting in the same channel group.
Page 96: Class
DGS-6604 class class Use this command to specify the name of the class map in order to define its traffic policy and enter into policy-map class configuration mode. Use the no form of the command to remove the policy definition for the specified class. All the traffic that does not match any defined class will be classified to default class, class-default.
Page 97: Class-Map
DGS-6604 class-map class-map To create a class map to be used for matching packets to a specified class, use the class-map command. To remove an existing class map from the switch, use the no form of this command. The class-map command enters the class-map configuration mode in which multiple issues of the match command on page 405 can be entered to configure the match criteria for this class.
Page 98 DGS-6604 class-map traffic that matches the access control list acl_home_user or match ipv6 protocol will be included in class_home_user. Switch(config)# class-map match-any class_home_user Switch(config-cmap)# match access-list acl_home_user Switch(config-cmap)# match protocol ipv6 Switch(config-cmap)# exit Switch(config)# Verify the settings by entering the show class-map command. CLI Reference Guide...
Page 99: Clear Arp-Cache
DGS-6604 clear arp-cache clear arp-cache To remove dynamically created entries from the Address Resolution Protocol (ARP) cache, use the clear arp-cache command in Privileged EXEC mode. clear arp-cache [interface INTERFACE-ID | IP-ADDRESS ] Syntax Description INTERFACE-ID (Optional) Removes only the ARP table entries associated with this interface such as for example, vlan100 for the VLAN interface.
Page 100: Clear Counters
DGS-6604 clear counters clear counters Use the command to clear counters for a specific port interface or all port interfaces. clear counters [INTERFACE-ID [ , | - ] ] Syntax Description INTERFACE-ID (Optional) Specifies the interface ID. If no interface is specified, all counters on applicable interfaces (physical ports) will be cleared.
Page 101: Clear Dos Prevention Counter
DGS-6604 clear dos prevention counter clear dos prevention counter Use this command to clear the counter of all attack types. clear dos_prevention counter Syntax None Default None Command Mode Global configuration. Usage Guideline Use to reset counters of DoS prevention to zero. Examples This example shows how to clear counters.
Page 102: Clear Cpu-Protect Counters
DGS-6604 clear cpu-protect counters clear cpu-protect counters Use this command to clear the cpu-protect related counters. clear cpu-protect counters [ sub-interface [ manage | protocol | route] | type [PROTOCOL- NAME] ] Syntax Description sub-interface [ (Option) Clear the cpu-protect related counters of all sub-interfaces if no sub- interface name is specified.
Page 103: Clear Gvrp Statistics Interface
DGS-6604 clear gvrp statistics interface clear gvrp statistics interface Use the clear gvrp statistics command to clear the statistics of a single port, a range of ports or all gvrp ports. clear gvrp statistics [ interface INTERFACE-ID [ , | -] ] Syntax Description INTERFACE-ID (Optional) Specifies the interface to be cleared.
Page 104: Clear Ip Bgp
DGS-6604 clear ip bgp clear ip bgp To reset BGP connections using hard or soft reconfiguration, use the command. clear ip bgp { * | AUTONOMOUS-SYSTEM-NUMBER | NEIGHBOR-ADDRESS} [ soft ] [ in | out ] Syntax Description Specifies that all current BGP sessions will be reset. AUTONOMOUS- Specifies that sessions with BGP peers in the specified autonomous system will SYSTEM-NUMBER...
Page 105 DGS-6604 clear ip bgp Use the in keyword to clear only the inbound neighbor connections. Outbound neighbor sessions will not be reset. Use this form of the command in the following situations: • Additions or modifications to BGP-related access lists. •...
Page 106: Clear Ip Bgp Peer-Group
DGS-6604 clear ip bgp peer-group clear ip bgp peer-group To reset BGP connections using hard or soft reconfiguration for all the members of a BGP peer group, use the clear ip bgp peer-group command. Without Address Family Syntax clear ip bgp peer-group PEER-GROUP-NAME [ soft ] [ in | out ] Syntax Description PEER-GROUP-NAME Peer group name.
Page 107 DGS-6604 clear ip bgp peer-group To determine if a BGP router supports this capability, use the show ip bgp neighbors command on page 600 command. The following message is displayed in the output when the router supports the route refresh capability: Received route refresh capability from peer If all BGP routers support the route refresh capability, use the clear ip bgp peer- group command with the in keyword.
Page 108: Clear Ip Dhcp Binding
DGS-6604 clear ip dhcp binding clear ip dhcp binding Use this command to delete an address binding from the DHCP Server database. clear ip dhcp binding [pool NAME] [ADDRESS] Syntax Description pool NAME (Optional) Name of the DHCP pool. If the pool name option is not specified the command will parse all the DHCP pools for the specified binding.
Page 109 DGS-6604 clear ip dhcp binding The following example deletes address binding 10.13.2.99 from the address pool named pool2: switch# clear ip dhcp pool pool2 binding 10.13.2.99 switch# Verify the settings by entering the show ip dhcp binding command. CLI Reference Guide...
Page 110: Clear Ip Dhcp Conflict
DGS-6604 clear ip dhcp conflict clear ip dhcp conflict Use this command to clear an address conflict from the DHCP server database. clear ip dhcp conflict [pool NAME] [ADDRESS] Syntax Description pool NAME (Optional) Name of the DHCP pool. ADDRESS (Optional) The IP address, that is in conflict, to be deleted Default None...
Page 111 DGS-6604 clear ip dhcp conflict The following example deletes all the address conflicts from the address pool named pool1: switch#clear ip dhcp conflict pool pool1 switch# CLI Reference Guide...
Page 112: Clear Ip Dhcp Server Statistics
DGS-6604 clear ip dhcp server statistics clear ip dhcp server statistics Use this command to reset all Dynamic Host Configuration Protocol (DHCP) server counters. clear ip dhcp server statistics Syntax None Default None Command Mode Privileged EXEC Usage Guideline This command clears all of the DHCP statistic counters. That is all of counters will be initialized, or set to zero.
Page 113: Clear Ip Ospf
DGS-6604 clear ip ospf clear ip ospf Use this command to restart the OSPF process. clear ip ospf Syntax None Default None Command Mode Privileged EXEC Usage Guideline This command is used to restart the OSPF routing process. The following is a situation where this command can be used: •...
Page 114: Clear Ipv6 Dhcp Client
DGS-6604 clear ipv6 dhcp client clear ipv6 dhcp client This command is used to restart the DHCPv6 client on an interface. clear ipv6 dhcp client INTERFACE-NAME Syntax Description INTERFACE-NAME Specifies the identifier of the switch interface on which to restart the DHCPv6 client.
Page 115: Clear Ipv6 Neighbors
DGS-6604 clear ipv6 neighbors clear ipv6 neighbors This command is used to clear the IPv6 neighbor information. clear ipv6 neighbors [IFNAME] Syntax None Default None Command Mode Privileged EXEC Usage Guideline The command clear ipv6 neighbors will only clear dynamic entries. Example This example shows how to clear instances of IPv6 neighbors: Switch >...
Page 116: Clear Ipv6 Ospf Process
DGS-6604 clear ipv6 ospf process clear ipv6 ospf process To restart the state of IPv6 OSPF, use the clear ipv6 ospf process command. clear ipv6 ospf [PROCESS-ID] process Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process.
Page 117: Clear Ipv6 Rip
DGS-6604 clear ipv6 rip clear ipv6 rip To delete routes from the IPv6 RIP routing table, use the clear ipv6 rip command. clear ipv6 rip Syntax None Default None Command Mode Privileged EXEC Usage Guideline All IPv6 RIP routes are deleted. Examples The following example deletes all the IPv6 routes for the RIP process.
Page 118: Clear Lldp Neighbors
DGS-6604 clear lldp neighbors clear lldp neighbors Use this command to delete all LLDP information learned from neighboring devices. clear lldp neighbors [interface INTERFACE-ID [, | -] ] Syntax INTERFACE-ID (Optional) Delete LLDP neighboring information for a specific interface. Valid interfaces are physical interface (Optional) Specifies a series of physical interfaces.
Page 119: Clear Lldp Statistics
DGS-6604 clear lldp statistics clear lldp statistics Use this command to delete LLDP statistics. clear lldp statistics [interface INTERFACE-ID [, | -] ] Syntax interface (Optional) Specifies the interface to clear LLDP neighboring information. Valid INTERFACE-ID interfaces are physical interface (Optional) Specifies a series of physical interfaces.
Page 120: Clear Logging
DGS-6604 clear logging clear logging Use this command to clear log messages from the system logging buffer. clear logging Syntax None Default None Command Mode Privileged EXEC Usage Guideline Use this command to clear log messages from the logging buffer. Example The following example to show how to clear log messages in buffer.
Page 121: Clear Mac Address-Table
DGS-6604 clear mac address-table clear mac address-table Use the clear mac address-table command to delete from the MAC address table: • specific dynamic address, • all dynamic addresses on a particular interface, • all dynamic addresses, • or all dynamic addresses on a particular VLAN. clear mac address-table { dynamic [ address MAC-ADDR | interface INTERFACE-ID | vlan VLAN-ID ] } Syntax Description...
Page 122: Clear Port-Security
DGS-6604 clear port-security clear port-security To delete all of the secured MAC addresses, except for manually configured secured MAC addresses, from the MAC address table, use the clear port- security command. clear port-security [{address MAC-ADDR } | {interface INTEFACE-ID }] [vlan VLAN-ID] Syntax Description address MAC-ADDR (Optional) Deletes the specified secure MAC address auto-learned.
Page 123: Clear Running-Config Factory-Defaults
DGS-6604 clear running-config factory-defaults clear running-config factory-defaults Use this command to clear the system’s running configuration. clear running-config factory-defaults Syntax None Command Mode Privileged EXEC at level 15 Usage Guideline The user can enter the clear running-config factory-defaults command to clear the system configuration retained in Dynamic RAM.
Page 124: Clear Spanning-Tree Detected-Protocols
DGS-6604 clear spanning-tree detected-protocols clear spanning-tree detected-protocols To restart the protocol migration, use the clear spanning-tree detected- protocol command. clear spanning-tree detected-protocols [ interface INTERFACE-ID ] Syntax Description interface (Optional) Specifies the port interface that will trigger the detecting action. If no INTERFACE-ID option is specified, every port is effected by this command.
Page 125: Clear Vlan-Tunnel Ctag-Mapping Dynamic
DGS-6604 clear vlan-tunnel ctag-mapping dynamic clear vlan-tunnel ctag-mapping dynamic Use this command to clear all dynamically learned mappings between customer VLAN tags and source IPs. clear vlan-tunnel ctag-mapping dynamic Syntax None Default None Command Mode User EXEC Usage Guideline This command is used to clear all dynamically learned mappings between a customer VLAN tag and source IP in the switch software.
Page 126: Clock Set
DGS-6604 clock set clock set Use this command to manually set the system clock. clock set HH:MM:SS DAY MONTH YEAR Syntax Description HH:MM:SS Current time in hours (24-hour format), minutes and seconds. Current day (by date) in the month. MONTH Current month (by name, January, Jan, February, Feb, and so on).
Page 127: Clock Summer-Time
DGS-6604 clock summer-time clock summer-time Use one of the optional keyword formats of the clock summer-time command to configure the system time to automatically set the seasonal time adjustment (daylight saving time). To disable automatic seasonal time adjustment, use the no form of this command.
Page 128 DGS-6604 clock summer-time Example The following example shows how to specify that summer time starts on the first Sunday in April at 2 a.m. and ends on the last Sunday in October at 2 a.m: Switch# configure terminal Switch(config)# clock summer-time recurring 1 sun April 2:00 last sun October 2:00 Switch(config)# end Verify the settings by entering the show clock command.
Page 129: Clock Timezone
DGS-6604 clock timezone clock timezone Use the command to set the time zone for display purpose. To set the time to Coordinated Universal Time (UTC), use the no form of this command. clock timezone {+|-} HOURS-OFFSET [ MINUTES-OFFSET ] no clock timezone Syntax Description ‘+’...
Page 130: Color-Aware
DGS-6604 color-aware color-aware Use the color-aware command to specify the color aware mode for a class. Use the no form of the command to set the class to color blind mode. color-aware no color-aware Syntax None Default color-blind mode Command Mode Policy-map class configuration Usage Guideline The color-aware command specifies that the configured policer for the traffic...
Page 131: Command Prompt
DGS-6604 command prompt command prompt Use this command to change the device cli prompt to, for example: the product name, system name, or other user-defined strings. The command can also specify whether to display the current privilege level in the prompt. command prompt [level | no-level] [string STRING | product-name | system-name] Syntax Description level...
Page 132 DGS-6604 command prompt The following example shows how to hide the privilege information from the console prompt. DGS-6600:15# command prompt no-level DGS-6600# This example shows define alpha as the console prompt. DGS-6600:15# command prompt level string alpha alpha:15# CLI Reference Guide...
Page 133: Configure Terminal
DGS-6604 configure terminal configure terminal Use this command to enter the global configuration mode configure terminal Syntax None Default None Command Mode Privileged EXEC Usage Guideline Entering into the configuration mode allows configuration settings of the switch to be entered or modified i.e. performing switch configuration. Example This example shows how to enter into the configuration mode: Switch#configure terminal...
Page 134: Copy
DGS-6604 copy copy Use the copy command to copy a image, log or configuration file from a remote or local source to a local or remote destination file. copy SOURCE-URL DESTINATION-URL copy SOURCE-URL tftp:\\ {IP-ADDRESS | IPv6-ADDRESS} \[ DIRECTORY \] FILENAME copy tftp:\\ {IP-ADDRESS | IPv6-ADDRESS} \ [ DIRECTORY \ ] FILENAME DESTINATION-URL Syntax Description SOURCE-URL...
Page 135 DGS-6604 copy IP-ADDRESS\ The IP address of TFTP server. DIRECTORY\ The directory name of the source or destination file in TFTP server. Default None Command Mode Privileged EXEC Level 15 for configuration copy. Usage Guideline The copy command (when the source/destination URL is running-config, startupconfig is only available at privilege level 15.
Page 136 DGS-6604 copy Examples This example shows how to configure the switch (running configuration) to use a configuration (switch-config.txt) that is download from a TFTP server(10.1.1.254). Switch# copy tftp:\\10.1.1.254\config\switch-config.txt running-config Configure using 10.1.1.254\config\switch-config.txt (y/n) [n]? y Finished network download. (134 bytes) Apply to system configuration….
Page 137 DGS-6604 cos remarking cos remarking Use this command to remark the receiving CoS priority for a VLAN tunnel application. Use the no form of this command to set as customer CoS trusted. cos remarking NEW-COS [C-VID [, | -]] no cos remarking [ C-VID[, | -]] Syntax Description NEW-COS Specifies the new COS value to be added into the outer priority tag for VLAN...
Page 138 DGS-6604 cos remarking Use the no cos remarking C-VID command (with optional parameters) to set the related C-VID as customer CoS trusted at the interface (cos remarking NEW-COS command is not set at the interface). Example Please follow the below example for a detailed step by step explanation 1.
Page 139: Cpu-Protect Safeguard
DGS-6604 cpu-protect safeguard cpu-protect safeguard Use this command to enable and configure the threshold for Safeguard Engine. Use the no form of this command to disable Safeguard Engine. cpu-protect safeguard [ threshold RISING-THRESHOLD FALLING-THRESHOLD ] no cpu-protect safeguard Syntax Description threshold Configure the utilization for the Safeguard Engine.
Page 140 DGS-6604 The following example shows how to disable Safeguard Engine and reset threshold to default value. Switch(config)# no cpu-protect safeguard You can verify your settings by entering show cpu-protect safeguard command. CLI Reference Guide...
Page 141: Cpu-Protect Type
DGS-6604 cpu-protect type cpu-protect type Use this command to configure the rate-limit of traffic destined to CPU by protocol type. cpu-protect type PROTOCOL-NAME pps RATE no cpu-protect type PROTOCOL-NAME Syntax Description PROTOCOL-NAME Specifies the protocol name (for example, bgp) to be configured. See the “Usage Guideline”...
Page 142 DGS-6604 cpu-protect type Table 1 Supported protocol name for the command cpu-protect type Classification Protocol Name Description (sub-interface) IP Address Resolution Protocol (ARP) protocol Border Gateway Protocol (IPv4) protocol dhcp Dynamic Host Configuration (IPv4) protocol dhcpv6 Dynamic Host Configuration (IPv6) protocol dot1x Port Based Network Access Control...
Page 143 DGS-6604 cpu-protect type The following example shows how to remove threshold of OSPF protocol packet. Switch(config)# no cpu-protect type ospf Verifying the settings by show cpu-protect type command. CLI Reference Guide...
Page 144: Cpu-Protect Sub-Interface
DGS-6604 cpu-protect sub-interface cpu-protect sub-interface Use this command to configure the rate-limit for traffic destined to CPU by sub- interface type. cpu-protect sub-interface { manage | protocol | route } pps RATE no cpu-protect sub-interface { manage | protocol | route } Syntax Description RATE Specify the threshold.
Page 145: Crypto Key
DGS-6604 crypto key crypto key To generate and configure an RSA or DSA key pair, use the crypto key command. crypto key { rsa|dsa } NBITS [ force ] Syntax Description Configure an RSA key pair. Configure a DSA key pair. NBITS Specifies the size of the key pair(s): For RSA the valid values are 512, 768, 1024, and 2048.
Page 146: Default-Gateway (Management Port)
DGS-6604 default-gateway (management port) default-gateway (management port) Use this command to set the IP address of the default gateway. Use the no form of this command to revert to the default value. default-gateway IP-ADDRESS no default-gateway Syntax Description IP-ADDRESS IP address in four-part dotted decimal format. Default IP-ADDRESS: 0.0.0.0.
Page 147: Default-Information Originate (Bgp)
DGS-6604 default-information originate (BGP) default-information originate (BGP) Use this command to configure a Border Gateway Protocol (BGP) routing process to distribute a default route (network 0.0.0.0), use the default- information originate command in address family or router configuration mode. To disable the advertisement of a default route, use the no form of this command.
Page 148: Default-Information Originate (Ipv6 Ospf)
DGS-6604 default-information originate (IPv6 OSPF) default-information originate (IPv6 OSPF) Use default-information originate to configure an IPv6 OSPF to generate a default external route (type 0x4005 LSA). Use the no form of the command to disable the originate type 0x4005 LSA default route. default-information originate [always] [metric METRIC-VALUE] [metric-type TYPE-VALUE] no default-information originate Syntax Description...
Page 149: Default-Information Originate (Rip)
DGS-6604 default-information originate (RIP) default-information originate (RIP) To generate a default route into Routing Information Protocol (RIP), use the default-information originate command. To disable this feature, use the no form of this command. default-information originate no default-information originate Syntax None Default Disabled Command Mode...
Page 150: Default-Information Originate (Rip Ipv)
DGS-6604 default-information originate (RIP IPv6) default-information originate (RIP IPv6) To originate a default IPv6 route into RIP, use the default-information originate command. To remove the default IPv6 RIP route, use the no form of this command. default-information originate no default-information originate Syntax None Default...
Page 151: Default Ipv6 Nd Prefix
DGS-6604 default ipv6 nd prefix default ipv6 nd prefix This command is used to default the IPv6 RA prefix information. default ipv6 nd prefix X:X::X:X/M Syntax Description X:X::X:X/M IPv6 network address. This argument must be in the form documented in RFC2373 where the address is specified in hexadecimal using 16-bit value between colons.
Page 152: Default-Metric (Ospf)
DGS-6604 default-metric (OSPF) default-metric (OSPF) To set default metric values for OSPF, use the default-metric command. Use the no form of the command to remove the default-metric setting. default-metric METRIC-VALUE no default-metric Syntax Description METRIC-VALUE Default metric value appropriate for the specified routing protocol. Default Command Mode Router configuration...
Page 153: Default-Metric (Ipv6 Ospf)
DGS-6604 default-metric (IPv6 OSPF) default-metric (IPv6 OSPF) To set the default metric for IPv6 OSPF, use the default-mertic command. To return the metric to its default value, use the no form of this command. default-metric METRIC-VALUE no default-metric [METRIC-VALUE] Syntax Description METRIC-VALUE Default metric value.
Page 154: Default-Metric (Rip)
DGS-6604 default-metric (RIP) default-metric (RIP) To set default metric values for Routing Information Protocol (RIP), use the default-metric command. To return to the default state, use the default form of the command. default-metric METRIC-VALUE default default-metric Syntax Description METRIC-VALUE Default metric value. (From 1 to 16). Default Command Mode Router configuration...
Page 155: Default-Metric (Rip Ipv)
DGS-6604 default-metric (RIP IPv6) default-metric (RIP IPv6) To set the default metric for IPv6 RIP, use the default-metric. To return the metric to its default value, use the no form of this command. default-metric METRIC-VALUE no default-metric [ METRIC-VALUE ] Syntax Description METRIC-VALUE Default metric value.
Page 156: Default-Router
DGS-6604 default-router default-router This command specifies the default router list for a DHCP client. Use the no form of this command to remove the default router list. default-router IP-ADDRESS no default-router [IP-ADDRESS] Syntax Description IP-ADDRESS Specifies the IP address of the default-router to DHCP clients. Default None Command Mode...
Page 157 DGS-6604 delete delete Use this command to delete a file. delete FILE-SYSTEM:\ [ PATH-NAME\ ] FILE-NAME Syntax Description FILE-SYSTEM Specifies the file system.The valid values are flash or cf1. flash represents the Compact FLASH storage of the control management unit. cf1 represents the first open slot of compact FLASH storage .
Page 158: Description
DGS-6604 description description Use this command to add a description for an interface. Use the no description to clear the interface description. description DESCRIPTION no description Syntax Description DESCRIPTION Add a description for an interface (up to 128 characters). The syntax is a general string that allows spaces.
Page 159 DGS-6604 Use the dir command to display the information for a file or the list of files in the specified path name. dir FILESYSTEM: [ \ PATH-NAME ] Syntax Description FILES-SYSTEM Specifies the file system. The valid values are flash and cf1; where flash represents the compact FLASH (CF) storage of the control management unit and cf1 represents the compact FLASH storage card inserted in the left slot from the front of the CM module.
Page 160: Disable
DGS-6604 disable disable Use this command to return to the User EXEC mode from the Privileged EXEC mode. disable Syntax None Default None Command Mode Privileged EXEC Usage Guideline The command will go to the User EXEC level from the power user level. Example This example shows how to logout after executing the disable command to return to the User EXEC mode.
Page 161: Distance
DGS-6604 distance distance Use the command distance to define an administrative distance for a protocol (RIP, OSPF, etc) or the routes that fall in the range of the specified networks- prefix. Use the no form of the command to remove the distance configuration and then the distance will go back to the default.
Page 162 DGS-6604 distance If the distances for specific routes are not specified, the distances of the routes learned by a routing protocol follows the distance of the routing protocol. In the current configuration, there is a difference between RIP and RIPng. 1.
Page 163: Dns-Server
DGS-6604 dns-server dns-server This command configures the IP address list of DNS servers available to DHCP clients. Use the no form of this command to remove the DNS server list. dns-server IP-ADDRESS no dns-server [IP-ADDRESS] Syntax Description IP-ADDRESS Specifies the IP address of DNS server to DHCP clients. Default None Command Mode...
Page 164: Domain-Name
DGS-6604 domain-name domain-name This command configures the domain name for a DHCP client. Use the no form of this command to remove the domain name. domain-name DOMAIN no domain-name Syntax Description DOMAIN Specifies the domain name. Default None Command Mode DHCP pool configuration Usage Guideline This command configures the domain name for a DHCP client.
Page 165: Dos_Prevention Action
DGS-6604 dos_prevention action dos_prevention action Use this command to specify the action to perform when a DoS attack occurs dos_prevention action {trap_log } no dos_prevention action {trap_log} Syntax Description action [ACTION] Specify the action the device should take when an attacking event occurs. User can specify multiple actions.
Page 166: Dos_Prevention Type
DGS-6604 dos_prevention type dos_prevention type Use this command to enable/disable DoS prevention mechanism. The packet matching and actions are handled by hardware. For each type of attack, the device will match the specific pattern automatically. dos_prevention type {ATTACK-TYPES } no dos_preventioin type {ATTACK-TYPES } Syntax Description type ATTACK-TYPES Enables the DoS prevention mechanism for etiher a specified or all attacking type.
Page 167 DGS-6604 dos_prevention type Syntax Description - continued All of the above types. Default Disabled. DoS prevention of all supported ATTACK-TYPE is disabled. Command Mode Global configuration Usage Guideline This command is used to enable/disable the DoS prevention mechanism for specific attack types or for all supported types. Examples The following example shows how to enable the DoS prevention mechanism for a land_attack.
Page 168: Dot1V Binding Protocol-Group
DGS-6604 dot1v binding protocol-group dot1v binding protocol-group Use the dot1v binding protocol-group interface configuration command to set a protocol VLAN group and bind VLAN of the port. The no form of this command can remove the port from the specific protocol VLAN group. dot1v binding protocol-group GROUP-ID vlan VLAN-ID no dot1v binding protocol-group [ GROUP-ID ] Syntax Description...
Page 169: Dot1V Protocol-Group
DGS-6604 dot1v protocol-group dot1v protocol-group Use the dot1v protocol-group global configuration command to add a protocol to a protocol group. Use no command to remove the specified protocol group, or to remove a protocol VLAN from the specified group. dot1v protocol-group GROUP-ID frame { ethernet2 | snap | llc } TYPE-VLAUE no dot1v protocol-group GROUP-ID [ frame { ethernet2 | snap | llc } TYPE-VLAUE ] Syntax Description GROUP-ID...
Page 170: Dot1X Auth-Mode
DGS-6604 dot1x auth-mode dot1x auth-mode Use the dot1x auth-mode command to specify the 802.1x authentication mode. dot1x auth-mode {port-based | host-based} Syntax Description port-based Specifies the authentication mode as port-based. When in the port-based mode if one supplicant is successfully authenticated, other hosts that are connected to the same port are allowed to access the port.
Page 171: Dot1X Auth-Protocol
DGS-6604 dot1x auth-protocol dot1x auth-protocol Use this command to specify the authentication method used for 802.1x authentication. dot1x auth-protocol {local | radius} Syntax Description local Specifies local accounts for authentication radius Specifies RADIUS servers for authentication Default radius Command Mode Global configuration Usage Guideline If local is specified, a user account should be configured.
Page 172: Dot1X Control-Direction
DGS-6604 dot1x control-direction dot1x control-direction Use this command to configure the direction of the traffic on a controlled port as unidirectional (in) or bidirectional (both). dot1x control-direction { both | in } Syntax Description both Enable bidirectional control. Both incoming and outgoing traffic through an 802.1X-enabled port are blocked if the port is not successfully authenticated.
Page 173: Dot1X Default
DGS-6604 dot1x default dot1x default Using this command resets the configurable 802.1X parameters to the default values. dot1x default Syntax None Default The default values are listed as following: The authorization state on a controlled port is auto. The direction of the traffic through a controlled port is bidirectional. The number of maximum retransmit times which the switch will retransmit an EAP request frame to the supplicant before restarting the authentication process is 2.
Page 174: Dot1X Forward-Pdu
DGS-6604 dot1x forward-pdu dot1x forward-pdu Use this command to allow a 1X-disabled interface to forward 802.1X BPDU. Use the no form of this command to disable the forwarding function on a 1X- disabled interface. dot1x forward-pdu no dot1x forward-pdu Syntax None Default 802.1x BPDU is not forwarded when 802.1x is disabled.
Page 175: Dot1X Guest-Vlan
DGS-6604 dot1x guest-vlan dot1x guest-vlan Use this command to enable the 802.1X guest VLAN function and specify the guest VLAN. Use the no form of this command to disable the guest VLAN function. dot1x guest-vlan VLAN-ID no dot1x guest-vlan Syntax None Default Disabled...
Page 176 DGS-6604 dot1x guest-vlan Switch# configure terminal Switch(config)# interface eth4.1 Switch(config-if)# dot1x guest-vlan 99 This example shows how to make eth4.1 leave the guest VLAN. Switch# configure terminal Switch(config)# interface eth4.1 Switch(config-if)# no dot1x guest-vlan Verify the settings by entering show do1x auth-configuration and show vlan interface command.
Page 177: Dot1X Initialize
DGS-6604 dot1x initialize dot1x initialize Use this command to initialize the authentication state machine of: • a port in port-based mode. -or- • an associated MAC address in host-based mode. dot1x initialize [ interface INTERFACE-ID [ mac-address MAC-ADDRESS ] ] Syntax Description interface (Optional) Specifies a physical interface to initialize.
Page 178: Dot1X Max-Req
DGS-6604 dot1x max-req dot1x max-req Use this command to set the maximum number of times that the switch sends EAP-request/identity frames to the client before restarting the authentication process. dot1x max-req TIMES Syntax Description max-req Number of times that the switch retransmits an EAP frame to the client before TIMES restarting the authentication process.
Page 179: Dot1X Pae Authenticator
DGS-6604 dot1x pae authenticator dot1x pae authenticator Use this command to enable 802.1X authentication on a specific port. Use the no form of this command to disable 802.1X authentication on the port. dot1x pae authenticator no dot1x pae Syntax Description authenticator Enable 802.1X authentication on a specific port.
Page 180: Dot1X Port-Control
DGS-6604 dot1x port-control dot1x port-control Use this command to manually control the authorization state on a specific port. dot1x port-control { auto | force-authorized | force-unauthorized } Syntax Description auto The state (authorized or unauthorized) for a specific port is determined according to the outcome of the authentication.
Page 181: Dot1X Re-Authenticate
DGS-6604 dot1x re-authenticate dot1x re-authenticate Use this command to re-authenticate a specific port or a specific MAC address. dot1x re-authenticate [ interface INTERFACE-ID [ mac-address MAC-ADDRESS ] ] Syntax Description interface (Optional) Specifies a port to re-authenticate. This option is only valid for INTERFACE- physical port interface.
Page 182: Dot1X Re-Authentication
DGS-6604 dot1x re-authentication dot1x re-authentication Use this command to enable periodic re-authentication. Use the no form of this command to disable periodic re-authentication. dot1x re-authentication no dot1x re-authentication Syntax None Default Disabled Command Mode Interface configuration Usage Guideline This command is valid only for physical port interface. The number of seconds between re-authentication attempts can be configured using the dot1x timeout command on page 174 with the reauth-period keyword.
Page 183: Dot1X System-Auth-Control
DGS-6604 dot1x system-auth-control dot1x system-auth-control Use dot1x system-auth-control to globally enable 802.1X authentication on a switch. Use the no form of this command to return to globally disable 802.1X function. dot1x system-auth-control no dot1x system-auth-control Syntax None Default Disabled Command Mode Global configuration Usage Guideline None...
Page 184: Dot1X Timeout
DGS-6604 dot1x timeout dot1x timeout Use this command to set timeout values for various 802.1X timers. dot1x timeout {quiet-period SECONDS | reauth-period SECONDS | server-timeout SECONDS | supp-timeout SECONDS | tx-period SECONDS } Syntax Description quiet-period Number of seconds that the switch remains in the quiet state following a failed SECONDS authentication exchange with the client.
Page 185: Dot1X User
DGS-6604 dot1x user dot1x user Use this command to create a local account used for authentication. Use the no form of this command to delete local accounts. dot1x user NAME password PASSWORD no dot1x user [ NAME ] Syntax Description NAME Specifies the name of a local account used for authentication.
Page 186 DGS-6604 duplex duplex Use this command to configure the physical port interface speed/duplex setting. duplex { full | half | auto } Syntax Description full Specifies to operate in full duplex mode. half Specifies to operate in half duplex mode. auto Specifies that the duplex mode will be determined by auto-negotiation.
Page 187: Enable
DGS-6604 enable enable Use this command to enter a Privileged EXEC mode. enable [privilege LEVEL] Syntax Description privilege LEVEL (Optional) Sets the privilege level for the user. The privilege levels are 12 and 15. Default LEVEL: 15 Command Mode User EXEC Usage Guideline Use the enable command to enter the Privileged EXEC mode and use the disable command on page 150 to return to the User EXEC mode from the...
Page 188: Enable Password
DGS-6604 enable password enable password Use this command to setup the enable password to enter into different privileged modes. Use the no form of the command to return the password for all levels to an empty string. When a level is specified, the password for that level is returned to an empty string.
Page 189 DGS-6604 Use this command to end the current configuration session and go back to the Privileged EXEC mode. Syntax None Default None Command Mode Any configuration mode Usage Guideline Using this command will end the configuration task in any configuration mode and go back to the Privileged EXEC mode.
Page 190: Exit
DGS-6604 exit exit Use this command to end the current configuration mode and go back to the to the last mode used. exit Syntax None Default None Command Mode Usage Guideline The user can exit the current configuration mode and go back to the last mode used.
Page 191: Erps Erps
DGS-6604 erps erps Use the erps command to enable ERPS function globally. Use the no form of this command to disable ERPS function globally. erps no erps Syntax None Default Disabled Command Mode Global configuration mode Usage Guideline Enable ERPS function globally will also enable all ERP instances which state are enabled by using "erpi enable"...
Page 192: Erps Domain
DGS-6604 erps domain erps domain Use the erps domain command to create or modify an ERPS domain and enter the ERPS domain configuration mode. Use the no form of this command to delete an ERPS domain. erps domain DOMAIN-NAME no erps domain DOMAIN-NAME Syntax Description DOMAIN-NAME Specifies the name of ERPS domain with a maximum of 32 characters.
Page 193: Erpi Enable
DGS-6604 erpi enable erpi enable Use the erpi enable command to enable the ERP instance in an ERPS domain. Use the no form of this command to disable the ERP instance. erpi INSTANCE-ID enable no erpi INSTANCE-ID enable Syntax Description INSTANCE-ID Specifies the identifier of ERP instance.
Page 194: Erpi Type
DGS-6604 erpi type erpi type Use the erpi type command to create an ERP instance with ring type in an ERPS domain. Use the no form of this command to delete an ERP instance. erpi INSTANCE-ID type {major | sub} no erpi INSTANCE-ID Syntax Description INSTANCE-ID...
Page 195 DGS-6604 erpi type Switch(config-erps-domain)# no erpi 1 Switch(config-erps-domain)# CLI Reference Guide...
Page 196: Erpi Raps-Vlan
DGS-6604 erpi raps-vlan erpi raps-vlan Use the erpi raps-vlan command to configure the R-APS controlled VLAN of an ERP instance. Use the no form of this command to remove the R-APS controlled VLAN setting. erpi INSTANCE-ID raps-vlan VLAN-ID no erpi INSTANCE-ID raps-vlan Syntax Description INSTANCE-ID Specifies the identifier of ERP instance.
Page 197: Erpi Ring-Mel
DGS-6604 erpi ring-mel erpi ring-mel Use the erpi ring-mel command to configure ring MEL value of an ERP instance. Use the no form of this command to return to default setting. erpi INSTANCE-ID ring-mel MEL-VALUE no erpi INSTANCE-ID ring-mel Syntax Description INSTANCE-ID Specifies the identifier of the ERP instance.
Page 198: Erpi Ring-Port
DGS-6604 erpi ring-port erpi ring-port Use the erpi ring-port command to configure the ring ports of an ERP instance. Use the no form of this command to remove the ring port setting. erpi INSTANCE-ID ring-port {east | west} {shared | INTERFACE-ID} no erpi INSTANCE-ID ring-port {east | west | shared} Syntax Description INTERFACE-ID...
Page 199 DGS-6604 erpi ring-port The following example shows how to remove east ring port setting of ERP instance 1: Switch(config-erps-domain)# no erpi 1 ring-port east Switch(config-erps-domain)# The following example shows how to configure east ring port to shared ring port of ERP instance 2 (sub ERP instance) Switch(config-erps-domain)# erpi 2 ring-port east shared Switch(config-erps-domain)# The following example shows how to remove shared ring port of ERP instance 2...
Page 200: Erpi Rpl
DGS-6604 erpi rpl erpi rpl Use the erpi rpl command to configure an ERP instance as the RPL owner and the RPL port. Use the no form of this command to remove the RPL related setting. erpi INSTANCE-ID rpl owner rpl-port {east | west } no erpi INSTANCE-ID rpl Syntax Description INSTANCE-ID...
Page 201: Erpi Protected-Vlan
DGS-6604 erpi protected-vlan erpi protected-vlan Use the erpi protected-vlan command to add or remove service protected VLANs for an ERP instance. Use the no form of this command to remove all service protected VLANs. erpi INSTANCE-ID protected-vlan {VLAN-ID [,|-] | add VLAN-ID [,|-] | remove VLAN-ID [,|-]} no erpi INSTANCE-ID protected-vlan Syntax Description INSTANCE-ID...
Page 202 DGS-6604 erpi protected-vlan Switch(config-erps-domain)# erpi 1 protected-vlan remove 3 Switch(config-erps-domain)# The following example shows how to remove all service protected VLANs of ERP instance 1: Switch(config-erps-domain)# no erpi 1 protected-vlan Switch(config-erps-domain)# CLI Reference Guide...
Page 203: Erpi Timer
DGS-6604 erpi timer erpi timer Use the erpi timer command to configure timers for an ERP instance. Use the no form of this command to reset timer to default value. erpi INSTANCE-ID timer [guard MILLI-SECONDS] [hold-off MILLI-SECONDS] [wtr MINUTES] no erpi INSTANCE-ID timer [guard] [hold-off] [wtr] Syntax Description INSTANCE-ID Specifies the identifier of the ERP instance.
Page 204 DGS-6604 erpi timer The following example shows how to configure hold-off timer as default time value of ERP instance 1: Switch(config-erps-domain)# no erpi 1 timer hold-off Switch(config-erps-domain)# CLI Reference Guide...
Page 205: Erpi Tc-Propagation
DGS-6604 erpi tc-propagation erpi tc-propagation Use the erpi tc-propagation command to enable topology change propagation of the sub ERP instance. Use the no form of this command to disable topology change propagation. erpi INSTANCE-ID tc-propagation no erpi INSTANCE-ID tc-propagation Syntax Description INSTANCE-ID Specifies rhe identifier of the sub ERP instance.
Page 206: Errdisable Recovery
DGS-6604 errdisable recovery errdisable recovery Use the errdisable recovery command to enable and configure the error recovery function. Use the no command to disable the auto recovery for causes or to return interval to default setting for causes. errdisable recovery cause {all | loopback-detection } [ intervalSECONDS ] no errdisable recovery cause {all | loopback-detection } [ interval ] Syntax Description Specifies the configure auto recovery for all causes.
Page 207 DGS-6604 errdisable recovery The following example shows how to enable the auto recovery for loopback- detection. Switch# configure terminal Switch(config)# errdisable recovery cause loopback-detection Switch(config)# end You can verify your settings by entering the show errdisable recovery command. CLI Reference Guide...
Page 208: Flowcontrol
DGS-6604 flowcontrol flowcontrol Use this command to configure the flow control capability of the port interface. flowcontrol [ send | receive ] { on | off } Syntax Description send (Optional) Flow control setting for a port sends PAUSE frames receive (Optional) Flow control setting for a port receives PAUSE frames Enable a port to send PAUSE frames or process PAUSE frames from remote...
Page 209: Gvrp (Global)
DGS-6604 gvrp (Global) gvrp (Global) Use the gvrp interface command to enable GVRP function globally, and use the no gvrp command to disable the GVRP function globally. gvrp no gvrp Syntax None Default Disabled Command Mode Global configuration Usage Guideline None Example This example shows how to enable the GVRP protocol global state.
Page 210: Gvrp (Interface)
DGS-6604 gvrp (Interface) gvrp (Interface) Use the gvrp interface command to enable GVRP function for a port, and use the no gvrp command to disable the GVRP function for a port. gvrp no gvrp Syntax None Default Disabled Command Mode Interface configuration Usage Guideline Use the gvrp interface configuration command to enable/disable the GVRP...
Page 211: Gvrp Advertise (Interface)
DGS-6604 gvrp advertise (Interface) gvrp advertise (Interface) Use the gvrp advertise command to specify that this VLAN will be advertised out by GVRP protocol. Use no gvrp advertise to disable this function. gvrp advertise [ VLAN-ID [ , | - ] ] no gvrp advertise [ VLAN-ID [ , | - ] ] Syntax Description (Optional) Specifies a VLAN.
Page 212: Gvrp Advertise (Vlan)
DGS-6604 gvrp advertise (VLAN) gvrp advertise (VLAN) Use the gvrp advertise command to specify that this VLAN will be advertised out by GVRP protocol. Use no gvrp advertise to disable this function. gvrp advertise no gvrp advertise Syntax None Default Advertise is enabled Command Mode Config-VLAN configuration...
Page 213: Gvrp Dynamic-Vlan-Creation
DGS-6604 gvrp dynamic-vlan-creation gvrp dynamic-vlan-creation Use the gvrp dynamic-vlan-creation command to enable dynamic VLAN creation, and use the no form of the command to disable the dynamic VLAN creation function. gvrp dynamic-vlan-creation no gvrp dynamic-vlan-creation Syntax None Default Disabled Command Mode Global configuration Usage Guideline When gvrp dynamic-vlan-creation is enabled, and a port learns a new VLAN...
Page 214: Gvrp Forbidden
DGS-6604 gvrp forbidden gvrp forbidden Use the gvrp forbidden command to specify the port as a forbidden member. Use the no gvrp forbidden command to remove the port as a forbidden member. gvrp forbidden no gvrp forbidden Syntax None Default None Command Mode Interface configuration...
Page 215: Gvrp Timer
DGS-6604 gvrp timer gvrp timer Use the gvrp timer command to set the GVRP timer value for a port. gvrp timer { join | leave | leave-all } TIMER-VALUE Syntax Description join Set the timer for joining the group. The unit is hundredths of a second. leave Set the timer for leaving a group.
Page 216: Help
DGS-6604 help help To display a brief description of the help system, use the help command in any command mode. help Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline The help command provides a brief description of the context-sensitive help system, which functions as follows: To list all commands available for a particular command mode, enter a question mark (?) at the system prompt.
Page 217: Host Area
DGS-6604 host area host area Use the host area command to configure a stub host entry belonging to a particular area. Use the no form of this command to remove the host area configuration. host IP-ADDRESS area AREA-ID [ cost COST ] no host IP-ADDRESS area AREA-ID Syntax Description IP-ADDRESS...
Page 218: Hybrid Vlan Vlan-Id
DGS-6604 hybrid vlan VLAN-ID hybrid vlan VLAN-ID Use the hybrid VLAN command to set the VLAN characteristic. It sets the interface as a tagged member or untagged member. hybrid vlan VLAN-ID [ , | - ] { tagged | untagged } no hybrid vlan [ VLAN-ID [ , | - ] ] Syntax Description VLAN-ID...
Page 219: Ingress-Checking
DGS-6604 ingress-checking ingress-checking Use the ingress-checking to enable ingress frame checking at a port. Use the no ingress-checking to disable the ingress frame checking function. ingress-checking no ingress-checking Syntax None Default Enabled Command Mode Interface configuration Usage Guideline The valid interfaces for this command are physical ports. Use the ingress-checking interface command to enable ingress checking at the switch interfaces.
Page 220 DGS-6604 instance instance To map a VLAN or a set of VLANs to a single Multiple Spanning Tree (MST) instance, use the instance command. To return the VLANs to the default instance (CIST), use the no form of this command. instance INSTANCE-ID vlans VLANDID [ , | .
Page 221: Interface
DGS-6604 interface interface Enter the interface command to go into interface configuration mode. The command executed in this mode will be applied to the interface specified by the command. interface INTERFACE-ID Syntax Description INTERFACE-ID The interface can be a physical port, port-channel, or VLAN. Default None Command Mode...
Page 222: Interface Range
DGS-6604 interface range interface range Enter the interface range command to go into interface range configuration mode. The command executed in this mode will be applied to all interfaces specified by the command. interface range INTERFACE-ID [ , | - ] Syntax Description INTERFACE-ID The interface can be physical port, port-channel, or IP interface.
Page 223: Interface Tunnel
DGS-6604 interface tunnel interface tunnel Use the interface tunnel configuration command to add a tunnel and to enter the interface configuration mode. Use the no interface tunnel configuration command to remove a tunnel. interface tunnel {tunnel-ID} no interface tunnel {tunnel-ID} Syntax Description tunnel-ID Specifies the ID of the tunnel to be added, removed or configured.
Page 224: Ip Access-Group
DGS-6604 ip access-group ip access-group Use the ip access-group command to specify the IP access-list to be applied to an interface. Use the no form of this command to remove an IP access list. ip access-group NAME [ in ] no ip access-group NAME [ in ] Syntax Description NAME...
Page 225: Ip Access-List
DGS-6604 ip access-list ip access-list Use the command to create or modify an IP access list. This command enters the user interface into the ip access-list configuration mode. Use no command to remove an IP access-list. ip access-list [ extended ] NAME no ip access-list [ extended ] NAME Syntax Description extended...
Page 226: Ip Address
DGS-6604 ip address ip address Use ip address to set a primary or secondary IP address for an interface, or acquire an IP address on an interface from DHCP. Use the no form of the command to remove the IP settings configuration from the interface. ip address { IP-ADDRESS SUBNET-MASK [ secondary ] | dhcp } no ip address [ IP-ADDRESS SUBNET-MASK ] Syntax Description...
Page 227 DGS-6604 ip address Switch# configure terminal Switch(config)# interface vlan100 Switch(config-if)# ip address 10.108.1.27 255.255.255.0 Switch(config-if)# ip address 192.31.7.17 255.255.255.0 secondary Switch(config-if)# ip address 192.31.8.17 255.255.255.0 secondary Switch(config)# end Verify the settings by entering the show ip interface command. CLI Reference Guide...
Page 228: Ip Address (Management Port)
DGS-6604 ip address (management port) ip address (management port) Use the command to set the IP address of the Management Port. Use the no form of this command to revert to the default IP address. ip address IP-ADDRESS / PREFIX-LENGTH no ip address Syntax Description IP-ADDRESS...
Page 229: Ip Address-List
DGS-6604 ip address-list ip address-list Use this command to specify the IP addresse range in a DHCP address pool and one of which is allowed to be bound with a DHCP client. Use the no form of this command to remove the range of IP addresses from the DHCP address pool. ip address-list IP-ADDRESS [,|-] no ip address-list IP-ADDRESS [,|-] Syntax Description...
Page 230: Ip Dhcp Screening Ports
DGS-6604 ip dhcp screening ports ip dhcp screening ports Use the command to configure the state of the function for filtering of DHCP server packet on ports and Use the no form of this command to disable function on ports. ip dhcp screening ports INTERFACE-ID [, | - ] no ip dhcp screening ports INTERFACE-ID [, | - ] Syntax Description...
Page 231: Ip Dhcp Screening
DGS-6604 ip dhcp screening ip dhcp screening Use this command to add/delete the DHCP server/client binding entry. ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE-ID [, | - ] no ip dhcp screening server-ip IP-ADDRESS [client-mac MAC-ADDRESS] ports INTERFACE- ID [, | - ] Syntax Description IP-ADDRESS...
Page 232: Ip Dhcp Screening Trap-Log
DGS-6604 ip dhcp screening trap-log ip dhcp screening trap-log Used to enable trap/log function and use the no form to disable trap/log function. ip dhcp screening trap-log no ip dhcp screening trap-log Syntax None Default Disabled Command Mode Global configuration mode Usage Guideline Use this command to enable the function of trap/log.
Page 233: Ip Dhcp Snooping
DGS-6604 ip dhcp snooping ip dhcp snooping Use this command to globally enable DHCP snooping. Use no command to disable DHCP snooping. ip dhcp snooping no ip dhcp snooping Syntax None Default Disabled Command Mode Global configuration Usage Guideline The DHCP snooping function snoops the DHCP packets arriving at the un- trusted interface on VLAN that is enabled for DHCP snooping.
Page 234: Ip Dhcp Snooping Information Option
DGS-6604 ip dhcp snooping information option ip dhcp snooping information option Use this command to globally allow DHCP packets with relay option 82 on the un-trusted interface. Use the no form of the command to not allow the packets with relay option 82. ip dhcp snooping information option allow-untrusted no ip dhcp snooping information option allow-untrusted Syntax...
Page 235: Ip Dhcp Snooping Trust
DGS-6604 ip dhcp snooping trust ip dhcp snooping trust Use this command to configure a port as interface trusted for DHCP snooping. Use the no form of this command to return to the default setting. ip dhcp snooping trust no ip dhcp snooping trust Default Disabled Command Mode...
Page 236: Ip Dhcp Screening Suppress-Duration
DGS-6604 ip dhcp screening suppress-duration ip dhcp screening suppress-duration Used to set the suppressed duration for trap/log and use the no form of this command to restore back to default setting. ip dhcp screening suppress-duration SUPPRESS-TIME no ip dhcp screening suppress-duration Syntax Description SUPPRESS-TIME The monitoring interval...
Page 237: Ip Arp Inspection Trust
DGS-6604 ip arp inspection trust ip arp inspection trust Use the command to trust an interface for dynamic ARP inspection. Use the no form of the command to disable the trust state. ip arp inspection trust no ip arp inspection trust Syntax Not applicable.
Page 238: Ip Arp Inspection Validate
DGS-6604 ip arp inspection validate ip arp inspection validate Use the command to specify the additional checks to be performed during ARP inspection check. Use the no form of the command to remove specific additional check. ip arp inspection validate {[src-mac] [dst-mac] [ip]} no ip arp inspection validate [src-mac] [dst-mac] [ip] Syntax Description src-mac...
Page 239 DGS-6604 ip arp inspection validate Switch# configure terminal Switch(config)# no ip arp inspection validate src-mac Switch(config)# CLI Reference Guide...
Page 240: Ip Arp Inspection Vlan
DGS-6604 ip arp inspection vlan ip arp inspection vlan Use the command to enable specific VLANs for dynamic ARP inspection. Use the no form of the command disable dynamic ARP inspection for VLAN. ip arp inspection vlan VLAN-ID [, | -] no ip arp inspection vlan VLAN-ID [, | -] Syntax Description vlan VLAN-ID...
Page 241: Ip Verify Source Vlan Dhcp-Snooping
DGS-6604 ip verify source vlan dhcp-snooping ip verify source vlan dhcp-snooping Use this command to enable IP source guard for a port. Use the no form of the command to disable IP source guard. ip verify source vlan dhcp-snooping port-security no ip verify source vlan dhcp-snooping port-security Syntax Description port-security...
Page 242: Ip Source Binding
DGS-6604 ip source binding ip source binding Use this command to create a static entry used for IP source guard. Use the no form of the command to delete a static entry. ip source binding MAC-ADDRESS vlan VLAN-ID IP-ADDRESS interface PORT [, | -] no ip source binding MAC-ADDRESS vlan VLAN-ID IP-ADDRESS interface PORT [, | -] Syntax Description Specifies the MAC address of the IP to MAC address binding entry.
Page 243 DGS-6604 This example shows how to delete an IP Source Guard entry with IP address 10.1.1.1 and MAC address 00-01-02-03-04-05, at VLAN 2 on interface eth3.10: Switch# configure terminal Switch(config)# no ip source binding 00-01-02-03-04-05 vlan 2 10.1.1.1 interface eth3.10 Switch# CLI Reference Guide...
Page 244: Ip As-Path Access-List
DGS-6604 ip as-path access-list ip as-path access-list Use this command to define a BGP Autonomous System (AS) path access list. Use the no form of this command to disable use of the access list. ip as-path access-list ACCESS-LIST-NAME { permit | deny } REGEXP no ip as-path access-list ACCESS-LIST-NAME Syntax Description ACCESS-LIST-NAME Specifies the name of the access list.
Page 245: Ip Community-List
DGS-6604 ip community-list ip community-list Use this command to add a community list entry. Use the no form of this command to delete the community list entry. ip community-list COMMUNITY-LIST-NAME { permit | deny } COMMUNITY no ip community-list COMMUNITY-LIST-NAME [ {permit | deny } COMMUNITY ] Syntax Description COMMUNITY-LIST- Specifies the community list name.
Page 246 DGS-6604 ip community-list named“mycommlist” that permit routes from network 10 in autonomous system 50000: Switch(config)# ip community-list mycommlist permit 50000:10 Verify the settings by entering the show ip community-list command. CLI Reference Guide...
Page 247: Ip Dhcp Snooping Verify Mac-Address
DGS-6604 ip dhcp snooping verify MAC-address ip dhcp snooping verify MAC-address Use this command to enable the verification that the source MAC address in a DHCP packet matches the client hardware address. Use the no command to disable the verification of the MAC address. ip dhcp snooping verify mac-address no ip dhcp snooping verify mac-address Syntax...
Page 248: Ip Dhcp Snooping Vlan
DGS-6604 ip dhcp snooping vlan ip dhcp snooping vlan Use this command to enable DHCP snooping on a VLAN or a group of VLANs. Use no command to disable DHCP snooping on a VLAN or a group of VLANs. ip dhcp snooping vlan VLAN-ID [, | -] no ip dhcp snooping vlan VLAN-ID [, | -] Syntax Description vlan VLAN-ID...
Page 249 DGS-6604 This example shows how to disable DHCP snooping on vlan10: Switch# configure terminal Switch(config)# no ip dhcp snooping vlan 10 Switch(config)# This example shows how to enable DHCP snooping on range of VLAN: Switch# configure terminal Switch(config)# ip dhcp snooping vlan 10,15-18 Switch(config)# This example shows how to disable DHCP snooping on range of VLAN: Switch# configure terminal...
Page 250: Ip Dhcp Ping Packets
DGS-6604 ip dhcp ping packets ip dhcp ping packets User this command to specify the number of packets that the DHCP server will send as a part of the ping operation. Use the no form of this command to prevent the server from pinging pool addresses.
Page 251: Ip Dhcp Ping Timeout
DGS-6604 ip dhcp ping timeout ip dhcp ping timeout Use this command to specify how long the DHCP server will wait for the ping reply from a pool address. Use the no form of this command to restore the wait time for the ping reply back to the default value (500ms).
Page 252: Ip Dhcp Pool
DGS-6604 ip dhcp pool ip dhcp pool Use this command to configure a DHCP address pool on a DHCP Server and enter the DHCP pool configuration mode. Use the no form of this command to remove the address pool. ip dhcp pool NAME no ip dhcp pool NAME Syntax Description NAME...
Page 253: Ip Dhcp Relay
DGS-6604 ip dhcp relay ip dhcp relay Use this command to enable Dynamic Host Configuration Protocol (DHCP) relay agent features on the switch. Use the no form of this command to disable DHCP relay agent features. ip dhcp relay no ip dhcp relay Syntax None Default...
Page 254: Ip Dhcp Relay Address
DGS-6604 ip dhcp relay address ip dhcp relay address Use this command to specify the DHCP relay server IP address. Use the no form of the command to delete a DHCP server. When using the no form of the command if no IP address is specified, all DHCP servers will be deleted. ip dhcp relay address IP-ADDRESS no ip dhcp relay address [ IP-ADDRESS ] Syntax Description...
Page 255: Ip Dhcp Relay Hops
DGS-6604 ip dhcp relay hops ip dhcp relay hops Use this command to configure the maximum number of relay hops that the DHCP packets can traverse. ip dhcp relay hops HOP-COUNT Syntax Description HOP-COUNT The number of relay hops that the DHCP packets can traverse. The valid setting is 1-16.
Page 256: Ip Dhcp Relay Information Check
DGS-6604 ip dhcp relay information check ip dhcp relay information check Use this command to configure the DHCP relay agent to validate the relay agent information option in the received DHCP reply packet. ip dhcp relay information check no ip dhcp relay information check Syntax None Default...
Page 257: Ip Dhcp Relay Information Option
DGS-6604 ip dhcp relay information option ip dhcp relay information option Use this command to enable the insertion of the relay agent information option (option 82). Use the no form of the command to disable this function. ip dhcp relay information option no ip dhcp relay information option Syntax None...
Page 258 DGS-6604 ip dhcp relay information option Example This example shows how to enable insertion of the option-82 field during the relay of DHCP request packets. Switch# configure terminal Switch(config)# ip dhcp relay information option Verify the settings by entering the show ip dhcp relay command. CLI Reference Guide...
Page 259: Ip Dhcp Relay Information Policy
DGS-6604 ip dhcp relay information policy ip dhcp relay information policy Use this command to configure the information re-forwarding policy for the DHCP relay agent. ip dhcp relay information policy {drop | keep | replace} Syntax Description drop Discards the packet that already has the relay option. This packet represents a packet that is relayed by a relay agent and already has the option inserted.
Page 260: Ip Dhcp Relay Information Trust-All
DGS-6604 ip dhcp relay information trust-all ip dhcp relay information trust-all Use this global command to direct the DHCP relay agent to accept the packets with giaddr==0 (this relay agent is the first relay of this DHCP request packet) and the relay agent information option already present in the packet. Use the no form of the command to specify to drop these DHCP request packets.
Page 261: Ip Dhcp Relay Information Trusted
DGS-6604 ip dhcp relay information trusted ip dhcp relay information trusted Use this interface command to direct the DHCP relay agent to accept the packets with giaddr==0 (this relay agent is the first relay of this DHCP request packet) and relay agent information option is already present in the packet. Use the no form of the command to configure to drop these DHCP request packet.
Page 262: Dvmrp Ip Dvmrp
DGS-6604 ip dvmrp ip dvmrp Use this command to enable DVMRP on the current interface. Use the no form to disable DVMRP on the interface. ip dvmrp no ip dvmrp Syntax None Default Disabled Command Mode VLAN interface configuration Usage Guideline This command is only valid for the VLAN interface.
Page 263: Ip Dvmrp Metric
DGS-6604 ip dvmrp metric ip dvmrp metric Use this command to configure the metric value on the current interface. ip dvmrp metric METRIC Syntax Description METRIC It can be a value from 1 to 31. A value of 32 sets the route metric to infinite or unreachable.
Page 264: Ip Http Server
DGS-6604 ip http server ip http server Use this command to enable HTTP server. Use the no form of the command to disable HTTP server function. ip http server no ip http server Syntax None Default HTTP interface is enabled. Command Mode Global configuration Usage Guideline...
Page 265: Ip Http Service-Port
DGS-6604 ip http service-port ip http service-port Use this command to specify the HTTP service port. And use the default command to return the service port to 80. ip http service-port TCP-PORT default ip http service-port Syntax Description TCP-PORT TCP port number. TCP ports are numbered between 1 and 65535. The "well- known"...
Page 266: Ip Igmp Access-Group
DGS-6604 ip igmp access-group ip igmp access-group Using the ip igmp access-group command in interface configuration restricts a subnet's hosts to join only multicast groups that are permitted by an IP basic access list. It also can be used to restrict hosts (receivers) on a subnet to membership of only the (S,G) channels that are permitted by an IP basic access list.
Page 267 DGS-6604 ip igmp access-group Switch#configure terminal Switch(config)# ip access-list igmp_filter Switch(config-ip-acl)#permit any 226.1.1.1 255.255.255.255 Switch(config-ip-acl)# exit Switch(config)# interface vlan1000 Switch(config-if)# ip igmp access-group igmp_filter Switch(config-if)# end Verfiy the settings by entering the show ip igmp interface command. CLI Reference Guide...
Page 268: Ip Igmp Last-Member-Query-Interval
DGS-6604 ip igmp last-member-query-interval ip igmp last-member-query-interval Use this command to configure the interval at which the router sends IGMP group-specific or group-source-specific (with IGMP Version 3) query messages. The command sets the timer value for both IGMP L3 queries and IGMP snooping.
Page 269: Ip Igmp Query-Interval
DGS-6604 ip igmp query-interval ip igmp query-interval Use this command to configure the interval at which the router sends IGMP general-query messages periodically. ip igmp query-interval SECONDS Syntax Description SECONDS Configure the frequency at which the designated router sends IGMP general- query messages.
Page 270: Ip Igmp Query-Max-Response-Time
DGS-6604 ip igmp query-max-response-time ip igmp query-max-response-time Use this command to configure the maximum response time advertised in IGMP queries. ip igmp query-max-response-time SECONDS Syntax Description SECONDS Set the maximum response time, in seconds, advertised in IGMP queries.The range is 1 to 25. Default 10 seconds Command Mode...
Page 271: Ip Igmp Robustness-Variable
DGS-6604 ip igmp robustness-variable ip igmp robustness-variable Use this command to tune for the expected packet loss on a network, i.e. the Robustness Variable of IGMP. ip igmp robustness-variable VALUE Syntax Description VALUE Provides fine-tuning to allow for expected packet loss on a subnet. The value of the robustness variable is used in calculating the following IGMP message intervals: •...
Page 272: Ip Igmp Snooping
DGS-6604 ip igmp snooping ip igmp snooping Use this command to enable IGMP Snooping function on the switch. Use the no form of this command to disable IGMP Snooping function. ip igmp snooping no ip igmp snooping Syntax None Default IGMP snooping is disabled on all VLAN interfaces The IGMP snooping global state is disabled by default.
Page 273 DGS-6604 ip igmp snooping Examples This example shows how to globally enable IGMP Snooping for all existing VLANs. Switch(config)# ip igmp snooping Switch(config)# end Switch# This example shows how to enable IGMP Snooping on VLAN1 Switch(config)# interface vlan1 Switch(config-if)# ip igmp snooping Switch(config-if)# end Switch# Verfiy the settings by entering the show ip igmp snooping command.
Page 274: Ip Igmp Snooping (Multicast Router)
DGS-6604 ip igmp snooping (multicast router) ip igmp snooping (multicast router) Use this command to configure the specified interface(s) as multicast router ports, or forbidden to be multicast router ports on the switch. Use the no form of this command to remove the interface(s) from multicast router ports, or forbidden multicast router ports.
Page 275 DGS-6604 ip igmp snooping (multicast router) Examples This example shows how to add a multicast router port on vlan1. Switch# configure terminal Switch(config)# interface vlan1 Switch(config-if)# ip igmp snooping mrouter-designate interface eth3.1 Switch(config-if)# exit Switch(config)# Verfiy the settings by entering the show ip igmp snooping mrouter command. This example displays a configuration error, eth3.1 (on vlan4) is not eligible to be designated as a multicast router interface for VLAN 5.
Page 276: Ip Igmp Snooping Immediate-Leave
DGS-6604 ip igmp snooping immediate-leave ip igmp snooping immediate-leave Use this command to configure the IGMP Snooping immediate-leave function on VLAN interfaces. Use no ip igmp snooping immediate-leave to disable the immediate-leave function on the specified VLAN. ip igmp snooping immediate-leave no ip igmp snooping immediate-leave Syntax None...
Page 277: Ip Igmp Snooping Querier
DGS-6604 ip igmp snooping querier ip igmp snooping querier Use this command to enable the IGMP Snooping querier function in Layer 2 networks. Use the no form of this command to disable the function of the IGMP Snooping Querier. ip igmp snooping querier no ip igmp snooping querier Syntax None...
Page 278: Ip Igmp Snooping Static-Group
DGS-6604 ip igmp snooping static-group ip igmp snooping static-group Use this command to configure an IGMP snooping static group. Use the no form of this command to delete an IGMP snooping static group. ip igmp snooping static-group IP-ADDRESS [ source IP-ADDRESS] interface INTERFACE-ID [,|-] no ip igmp snooping static-group [ IP-ADDRESS [ source IP-ADDRESS ] [ interface INTERFACE-ID [ , | - ] ]]...
Page 279 DGS-6604 ip igmp snooping static-group Example The following example, on the next page, shows how to statically add group and/ or source records for IGMP Snooping. Switch# configure terminal Switch(config)# interface vlan1 Switch(config-if)# ip igmp snooping static-group 226.1.2.3 interface eth3.5 Switch(config-if)# exit Switch(config)#interface vlan1 Switch(config-if)#ip igmp snooping static-group 226.1.2.6 source 10.1.2.3...
Page 280: Ip Igmp Version
DGS-6604 ip igmp version ip igmp version Use this command to change the IGMP version on the specified interface. ip igmp version {1|2|3} Syntax Description Configure the Switch to run IGMP version 1. Configure the Switch to run IGMP version 2. Configure the Switch to run IGMP version 3.
Page 281: Ip Mroute
DGS-6604 ip mroute ip mroute Use this command to create a multicast static route (mroute). Use the no form of this command to delete the route. ip mroute SOURCE-NETWORK { RPF-ADDRESS | Null } [ DISTANCE ] no ip mroute SOURCE-NETWORK Syntax Description SOURCE-NETWORK Network address of the multicast source.
Page 282 DGS-6604 ip mroute The following example removes a previously configured ip mroute entry of 192.168.8.0/24. Switch(config)#no ip mroute 192.168.8.0/24 Verify the settings using the show running-config command. CLI Reference Guide...
Page 283: Ip Mtu
DGS-6604 ip mtu ip mtu Use this command to set the MTU value in TCP/IP stack. Use the default form to restore to the default ip mtu size. ip mtu BYTES default ip mtu Syntax Description BYTES Set the IP MTU value in TCP/IP stack. The range is 1280 to 9692 bytes. Default 1500 bytes Command Mode...
Page 284: Ip Mtu (Management Port)
DGS-6604 ip mtu (management port) ip mtu (management port) Use this command to set the IP layer maximum transfer unit of the Management Port. Use no form command to reset to the default ip mtu. ip mtu BYTES no ip mtu Syntax Description BYTES The maximum transfer unit in bytes.
Page 285: Ip Multicast-Routing
DGS-6604 ip multicast-routing ip multicast-routing Use this command to enable IP multicast routing. Use the no form of this command to disable IP Multicast routing. ip multicast-routing no ip multicast-routing Syntax None Default Disabled Command Mode Global configuration Usage Guideline If the no ip multicast-routing command is used, the device stops routing multicast packets even when the protocols are enabled.
Page 286: Ip Ospf Authentication
DGS-6604 ip ospf authentication ip ospf authentication Use this command to send and receive OSPF packets with the specified authentication method. Use the no form of this command to disable the authentication. ip ospf authentication [ message-digest ] no ip ospf authentication Syntax Description message-digest (Optional) Use the message digest authentication.
Page 287: Ip Ospf Authentication-Key
DGS-6604 ip ospf authentication-key ip ospf authentication-key Use this command to specify an OSPF authentication password for the neighboring routers. Use the no form of this command to remove an OSPF authentication password. ip ospf authentication-key PASSWORD no ip ospf authentication-key Syntax Description PASSWORD Specifies the authentication password.
Page 288: Ip Ospf Cost
DGS-6604 ip ospf cost ip ospf cost Use this command to explicitly specify the cost of sending a packet on an interface. Use the no form of the command to remove the assignment. ip ospf cost COST no ip ospf cost Syntax Description COST Specifies the value of the link-state metric.
Page 289: Ip Ospf Dead-Interval
DGS-6604 ip ospf dead-interval ip ospf dead-interval Use this command to set the interval during which no hello packets are received and after which a neighbor is declared dead. The no form of this command will reset the dead-interval to the default value. ip ospf dead-interval SECONDS no ospf dead-interval Syntax Description...
Page 290: Ip Ospf Hello-Interval
DGS-6604 ip ospf hello-interval ip ospf hello-interval Use this command to specify the interval between hello packets. The no-form of this command will reset the hello-interval to the default value. ip ospf hello-interval SECONDS no ip ospf hello-interval Syntax Description SECONDS Specifies the interval in seconds.
Page 291: Ip Ospf Message-Digest-Key
DGS-6604 ip ospf message-digest-key ip ospf message-digest-key Use this command to register an MD5 key for OSPF MD5 authentication. Use the no form of this command to remove an MD5 key. ip ospf message-digest-key KEY-ID md5 KEY no ip ospf message-digest-key KEY-ID Syntax Description KEY-ID Specifies a value for key identifier.
Page 292: Ip Ospf Priority
DGS-6604 ip ospf priority ip ospf priority Use this command to set the router priority to determine the designated router for the network. The no form of this command will reset the priority to the default value. ip ospf priority PRIORITY no ip ospf prority Syntax Description PRIORITY...
Page 293: Ip Ospf Retransmit-Interval
DGS-6604 ip ospf retransmit-interval ip ospf retransmit-interval Use this command to specify the time between link-state advertisement (LSA) retransmissions for adjacencies belonging to the interface. The no form of this command will reset the retransmit-interval to the default value. ip ospf retransmit-interval SECONDS no ip ospf retransmit-interval Syntax Description SECONDS...
Page 294: Ip Ospf Shutdown
DGS-6604 ip ospf shutdown ip ospf shutdown To initiate a graceful shutdown of Open Shortest Path First (OSPF) protocol at interface level, use the ip ospf shutdown command in router configuration mode. To restart the OSPF protocol on an interface, use the no form of this command.
Page 295: Ip Ospf Transmit-Delay
DGS-6604 ip ospf transmit-delay ip ospf transmit-delay Use this command to set the estimated time it takes to transmit a link-state- update packet on the interface. Use the no parameter with this command to return to the default value. ip ospf transmit-delay SECONDS no ip ospf transmit-delay Syntax Description SECONDS...
Page 296: Ip Ospf Mtu-Ignore
DGS-6604 ip ospf mtu-ignore ip ospf mtu-ignore To disable OSPF MTU mismatch detection on receiving DBD packets, use the ip ospf mtu-ignore command in interface configuration mode. To reset to default, use the no form of this command. ip ospf mtu-ignore no ip ospf mtu-ignore Syntax None...
Page 297: Ip Pim
DGS-6604 ip pim ip pim Enable PIM on the interface for either sparse mode or dense mode operation. Use the no form of the command to disable the PIM function on the interface. ip pim {sparse-mode | dense-mode} no ip pim {sparse-mode | dense-mode } Syntax Description sparse-mode Enables sparse mode of operation.
Page 298: Ip Pim Accept-Register
DGS-6604 ip pim accept-register ip pim accept-register To configure a candidate rendezvous point (RP) router to filter PIM register messages, use the ip pim accept-register command in global configuration mode. To disable this function, use the no form of this command. ip pim accept-register source-list ACCESS-LIST-NAME no ip pim accept-register Syntax Description...
Page 299: Ip Pim Bsr-Candidate
DGS-6604 ip pim bsr-candidate ip pim bsr-candidate Use this command to configure the router to advertise itself as a candidate bootstrap router (BSR). Use the no form of this command to remove this router as a candidate for being a BSR. ip pim bsr-candidate INTERFACE-ID [HASH-MASK-LENGTH] [PRIORITY] no ip pim bsr-candidate Syntax Description...
Page 300 DGS-6604 ip pim bsr-candidate Example The following example shows how to configure the IP address of the router on VLAN 1 to be a candidate BSR with hash-mask length of 20 and priority of 192: Switch(config)# ip pim bsr-candidate vlan1 20 192 Switch(config)# Verify the settings by using the show ip pim command.
Page 301: Ip Pim Dr-Priority
DGS-6604 ip pim dr-priority ip pim dr-priority Use this command to change the Designated Router Priority value inserted into the DR Priority option of the PIM Hello message. Use default command to return the setting to default. ip pim dr-priority PRIORITY default ip pim dr-priority Syntax Description PRIORITY...
Page 302: Ip Pim Join-Prune-Interval
DGS-6604 ip pim join-prune-interval ip pim join-prune-interval Use this command to configure a Join/Prune interval value different from the default (60 seconds). ip pim join-prune-interval SECONDS Syntax Description SECONDS The number of seconds that can be configured for the interval between Join/ Prune messages.
Page 303: Ip Pim Prune-Limit-Interval
DGS-6604 ip pim prune-limit-interval ip pim prune-limit-interval Use this command to configure the time interval for the prune limit timer to limit the Pruning rate on a LAN. ip pim prune-limit-interval SECONDS Syntax Description SECONDS Specifies the value of Prune Limit Timer (in seconds), which is used to prevent Prune storms on a LAN.
Page 304: Ip Pim Query-Interval
DGS-6604 ip pim query-interval ip pim query-interval Use this command to configure the frequency of PIM hello message. ip pim query-interval SECONDS Syntax Description SECONDS The number of seconds that can be configured for the interval between Hello messages. The range is 1 to 18000. Default 30 seconds Command Mode...
Page 305: Ip Pim Register-Checksum-Include-Data
DGS-6604 ip pim register-checksum-include-data ip pim register-checksum-include-data Use this command to configure the option to calculate the Register checksum over the whole packet. Use the no form of this command to disable calculating the Register checksum over the whole packet. ip pim register-checksum-include-data { group-list ACCESS-LIST-NAME} no ip pim register-checksum-include-data Syntax Description...
Page 306: Ip Pim Register-Suppresion
DGS-6604 ip pim register-suppresion ip pim register-suppresion Use this command to configure the register-suppression time. ip pim register-suppression SECONDS Syntax Description SECONDS Register suppression time-out value in seconds. The range is 11 to 255. Default 60 seconds Command Mode Global configuration Usage Guideline This command is valid for SM mode.
Page 307: Ip Pim Rp-Address
DGS-6604 ip pim rp-address ip pim rp-address Use this command to statically configure the rendezvous point (RP) address for multicast groups. To remove an RP address, use the no form of this command. ip pim rp-address IP-ADDRESS [group-list ACCESS-LIST-NAME] [override] no ip pim rp-address IP-ADDRESS Syntax Description IP-ADDRESS...
Page 308: Ip Pim Rp-Candidate
DGS-6604 ip pim rp-candidate ip pim rp-candidate Use this command to configure the router as an RP candidate. Use the no form of this command to remove the router as a candidate RP. ip pim rp-candidate INTERFACE-ID [ group-list ACCESS-LIST-NAME ] [interval SECONDS] [priority PRIORITY] no ip pim rp-candidate [INTERFACE-ID ] Syntax Description...
Page 309 DGS-6604 ip pim rp-candidate access list, named PIM-Control, which specifies the group prefix (239.0.0.0/8), is associated with the RP that has the address identified by VLAN interface 1 and with priority 3. Switch(config)# ip access-list PIM-Control Switch(config-ip-acl)# permit any 239.0.0.0 255.0.0.0 Switch(config-ip-acl)# exit Switch(config)# ip pim rp-candidate vlan1 group-list PIM-Control priority 3 Verify the settings by using the show ip pim command.
Page 310: Ip Pim State-Refresh Origination-Interval
DGS-6604 ip pim state-refresh origination-interval ip pim state-refresh origination-interval Configure a PIM-DM State-Refresh origination interval different from the default value (60 seconds). The origination interval is the number of seconds between PIM-DM State Refresh control messages. ip pim state-refresh origination-interval SECONDS Syntax Description SECONDS The number of seconds that can be configured for the interval between state-...
Page 311: Ip Policy Route-Map
DGS-6604 ip policy route-map ip policy route-map Use the command to specify a route map as the routing policy on an interface,. To disable policy routing on the interface, use the no form of this command. ip policy route-map MAP-NAME no ip policy route-map [MAP-NAME] Syntax Description MAP-NAME...
Page 312 DGS-6604 ip policy route-map Switch(config)#route-map pbr-map Switch(config-route-map)# match ip address pbr-acl Switch(config-route-map)# set ip next-hop 20.1.1.254 Switch(config-route-map)# exit Switch(config)# Switch(config)#interface vlan100 Switch(config-if)#ip policy route-map pbr-map Switch(config-if)#exit You can verify your settings by entering show ip policy command. CLI Reference Guide...
Page 313: Ip Rip Authentication Key-Chain
DGS-6604 ip rip authentication key-chain ip rip authentication key-chain Use this command to enable authentication for RIP Version 2 packets and to specify the key that can be used on an interface. To prevent authentication, use the no form of this command. ip rip authentication key-chain NAME-OF-KEY no ip rip authentication key-chain Syntax Description...
Page 314 DGS-6604 ip rip authentication key-chain Example The following example configures a key chain named chain1. Key1 named "forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key3 named "forkey3string" will be accepted from 2:30 p.m.
Page 315: Ip Rip Authentication Mode
DGS-6604 ip rip authentication mode ip rip authentication mode To configure the type of authentication used in Routing Information Protocol (RIP) Version 2 packets, use the ip rip authentication mode command in interface configuration mode. Use the no form of the command to disable the authentication function.
Page 316: Ip Rip Receive Version
DGS-6604 ip rip receive version ip rip receive version Use this command to specify a RIP version to receive on each interface. Use the no form of the command to let the version follow the setting specified in the router configuration mode.
Page 317: Ip Rip Send Version
DGS-6604 ip rip send version ip rip send version Use this command to specify a RIP version to send on an interface basis. Use the no form of the command to let the version following the setting specified in the router configuration mode. ip rip send version VERSION-ID [ , | - ] no ip rip send version Syntax Description...
Page 318: Ip Rip V2-Broadcast
DGS-6604 ip rip v2-broadcast ip rip v2-broadcast Use this command to allow Routing Information Protocol (RIP) Version 2 update packets to be sent as broadcast packets instead of multicast packets, Use the no form of the command to go back to multicast sending of the packet. ip rip v2-broadcast no ip rip v2-broadcast Syntax...
Page 319: Ip Route
DGS-6604 ip route ip route Use ip route to add a static route entry. Use the no form of the command to remove a static route entry. ip route {NETWORK-PREFIX NETWORK-MASK | NETWORK-PREFIX/PREFIX-LENGTH} IP- ADDRESS [distance DISTANCE] no ip route {NETWORK-PREFIX NETWORK-MASK | NETWORK-PREFIX/PREFIX-LENGTH} [IP- ADDRESS] Syntax Description NETWORK-PREFIX...
Page 320: Ip Route Multi-Path
DGS-6604 ip route multi-path ip route multi-path Use ip route multi-path to enable multiple paths for same route. Use the no form of the command to disable multiple paths. ip route multi-path no ip route multi-path Syntax None Description Default Enabled Command Mode Global configuration...
Page 321: Ip Ssh
DGS-6604 ip ssh ip ssh Use this command to configure Secure Shell (SSH) control parameters or enable the SSH service on the switch. Use the no ip ssh command to disable the SSH service. ip ssh [ timeout SECONDS | authentication-retries NUMBER | service-port TCP-PORT ] no ip ssh Syntax Description timeout SECONDS...
Page 322 DGS-6604 ip ssh Examples This example shows how to enable the SSH service. Switch# configure terminal Switch(config)# ip ssh This example shows how to set the SSH timeout to 160 seconds. Switch# configure terminal Switch(config)# ip ssh timeout 160 This example shows how to set the number of SSH authentication-retries to 2. The connection will be failed when the number of authentication retries reaches 2 tries without success.
Page 323: Ip Telnet Server
DGS-6604 ip telnet server ip telnet server Use this command to enable the TELNET server function. Use the no form of the command to disable the TELNET server function. ip telnet server no ip telnet server Syntax None Default Enabled Command Mode Global configuration Usage Guideline...
Page 324: Ip Telnet Service-Port
DGS-6604 ip telnet service-port ip telnet service-port Use this command to specify the service port for the TELNET server. Use the default command to return the service port to 23. ip telnet service-port TCP-PORT default ip telnet service-port Syntax Description TCP-PORT The TCP port number.
Page 325: Ip Trusted-Host
DGS-6604 ip trusted-host ip trusted-host Use this command to create the trusted host entries on the switch. Use the no ip trusted-host command to remove the trusted host entries. ip trusted-host {IP-ADDRESS | NETWORK-ADDRESS/PREFIX-LENGTH} [snmp] [http] [telnet]] no ip trusted-host [IP-ADDRESS | NETWORK-ADDRESS/PREFIX-LENGTH] [snmp] [http] [telnet] Syntax Description IP-ADDRESS...
Page 326 DGS-6604 ip trusted-host This example shows how to remove the trusted host with IP address 163.10.50.126 for all access interfaces. Switch(config)# no ip trusted-host 163.10.50.126 You can verify your settings by entering the show ip trusted-host command. CLI Reference Guide...
Page 327: Ipv6 Access-Group
DGS-6604 ipv6 access-group ipv6 access-group Use the ipv6 access-group command to specify the IPv6 access-list to be applied to an interface. Use the no form of the command to remove an IPv6 access list. Ipv6 access-group NAME [in] no ipv6 access-group NAME [in] Syntax Description NAME The name of the IPv6 access-list to be applied.
Page 328 DGS-6604 ipv6 access-group Example This example shows how to specify the IPv6 access-list ip6-control as an IPv6 access group for eth3.3 Switch(config)# interface eth3.3 Switch(config-if)#ipv6 access-group ip6-control in Verify the settings by entering show access-group. CLI Reference Guide...
Page 329: Ipv6 Access-List
DGS-6604 ipv6 access-list ipv6 access-list Use this command to create or modify an IPv6 access list. This command will enter into the ipv6 access-list configuration mode. Use the no form of the command to remove an IPv6 access-list. ipv6 access-list extended NAME no ipv6 access-list extended NAME Syntax Description NAME...
Page 330: Ipv6 Address
DGS-6604 ipv6 address ipv6 address This command is used to assign the IPv6 address to an interface of the switch. The no form of this command deletes the IPv6 address assigned to the interface. ipv6 address X:X::X:X/M no ipv6 address [X:X::X:X/M] Syntax Description X:X::X:X/M IPv6 network address.
Page 331 DGS-6604 ipv6 address ipv6 address This command is used to add or delete an IPv6 address to an interface. The address is configured using an IPv6 general prefix and when set it enables IPv6 processing on the interface. To remove the address from the interface, use the no form of this command.
Page 332 DGS-6604 ipv6 address Examples The following example shows how to enable IPv6 processing on the interface and configure an address based on the general prefix called my-prefix and the directly specified bits: Switch > enable Switch # configure terminal Switch (config) # interface vlan2 Switch (config-if) # ipv6 address my-prefix 0:0:0:1::1/64 Assuming the general prefix named my-prefix has the value of 3ffe:1:2::/48, then the interface would be configured with the global address: 3ffe:1:2:1::1/64.
Page 333: Ipv6 Address (Management Port)
DGS-6604 ipv6 address (management port) ipv6 address (management port) Use this command to set the IPv6 address of the Management Port. Use the no form of this command to set the IPv6 address of the Management Port to the default value. ipv6 address IPv6-ADDRESS/PREFIX-LENGTH no ipv6 address Syntax Description...
Page 334: Ipv6 Default-Gateway (Management Port)
DGS-6604 ipv6 default-gateway (management port) ipv6 default-gateway (management port) Use this command to set the IPv6 address of the IPv6 default gateway that is used by the management port. Use the no form of this command to set the IPv6 default gateway to the default value.
Page 335: Ipv6 Dhcp Client Information Refresh Minimum
DGS-6604 ipv6 dhcp client information refresh minimum ipv6 dhcp client information refresh minimum To configure the minimum acceptable refresh time of the DHCPv6 client information on a specified interface. To remove the configured refresh time, use the no form of this command. ipv6 dhcp client information refresh minimum SECONDS no ipv6 dhcp client information refresh minimum Syntax Description...
Page 336: Ipv6 Dhcp Client Pd
DGS-6604 ipv6 dhcp client pd ipv6 dhcp client pd This command enables a specified IPv6 interface’s DHCP client process and it enables the request for prefix delegation through the same interface. To disable requests for prefix delegation, use the no form of this command. ipv6 dhcp client pd { PREFIX-NAME | hint IPV6-PREFIX } [ rapid-commit ] no ipv6 dhcp client pd Syntax Description...
Page 337 DGS-6604 ipv6 dhcp client pd Examples The following example enables prefix delegation, where dhcp-prefix is the genenal prefix name configured by ipv6 address command. Switch > enable Switch # configure terminal Switch (config) # interface vlan2 Switch (config-if) # ipv6 address dhcp-prefix 0:0:0:7272::72/64 Switch (config-if) # exit Switch (config) # interface vlan1 Switch (config-if) # ipv6 dhcp client pd dhcp-prefix...
Page 338: Ipv6 Dhcp Relay Destination
DGS-6604 ipv6 dhcp relay destination ipv6 dhcp relay destination These commands are used to enable or disable the DHCP relay function. ipv6 dhcp relay destination IPV6-ADDRESS [VLAN-INTERFACE] no ipv6 dhcp relay destination Syntax Description IPV6-ADDRESS Relay destination address. This argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons.
Page 339 DGS-6604 ipv6 dhcp relay destination Unspecified, loopback and node-local multicast addresses are not acceptable as the relay destination. If any one of them is configured, the message "Invalid destination address" is displayed. Note that it is not necessary to enable the relay function on an interface for it to accept and forward an incoming relay reply message from servers.
Page 340: Ipv6 Enable
DGS-6604 ipv6 enable ipv6 enable This command is used to enable and disable the IPv6 protocol on an interface of the switch. The no form of this command can disable the IPv6 protocol. ipv6 enable no ipv6 enable Syntax None Default The default IPv6 incidence status is "Disable".
Page 341: Ipv6 Hop-Limit
DGS-6604 ipv6 hop-limit ipv6 hop-limit This command is used to configure the IPv6 hop limit setting for an interface of this switch. The no form of this command resets the IPv6 hop limit to the default value. ipv6 hop-limit <0-255> no ipv6 hop-limit Syntax Description <0-255>...
Page 342: Ipv6 Nd Managed-Config-Flag
DGS-6604 ipv6 nd managed-config-flag ipv6 nd managed-config-flag This command is used to turn on the IPv6 RA (router advertisement) management configure flag setting on an interface of this switch. The no form of this command turns off this flag. ipv6 nd managed-config-flag no ipv6 nd managed-config-flag Syntax None...
Page 343: Ipv6 Nd Other-Config-Flag
DGS-6604 ipv6 nd other-config-flag ipv6 nd other-config-flag This command is used to turn on the IPv6 RA (router advertisement) other configure flag incidence per interface on this switch. The no form of this command turns off this flag. ipv6 nd other-config-flag no ipv6 nd other-config-flag Syntax None...
Page 344: Ipv6 Nd Prefix
DGS-6604 ipv6 nd prefix ipv6 nd prefix This command is used to add or modify IPv6 prefix information to RA (router advertisement) for an interface of this switch. If the prefix already exists, then the command modifies the parameter. The no form of the command removes it. ipv6 nd prefix X:X::X:X/M <0-4294967295>...
Page 345: Ipv6 Nd Ra-Interval
DGS-6604 ipv6 nd ra-interval ipv6 nd ra-interval This command is used to configure the IPv6 RA (router advertisement) interval timer for an interface of this switch. The no form of this command sets the lifetime to the default value. ipv6 nd ra-interval <4-1800> [<3-1350>] no ipv6 nd ra-interval Syntax Description <4-1800>...
Page 346: Ipv6 Nd Ra-Lifetime
DGS-6604 ipv6 nd ra-lifetime ipv6 nd ra-lifetime This command is used to configure the IPv6 RA (router advertisement) lifetime on an interface of this switch. The no form of this command sets the lifetime to the default value. ipv6 nd ra-lifetime <0-9000> no ipv6 nd ra-lifetime Syntax Description <0-9000>...
Page 347: Ipv6 Nd Reachable-Time
DGS-6604 ipv6 nd reachable-time ipv6 nd reachable-time This command is used to configure IPv6 RA (router advertisement) reachable time on an interface of this switch. The no form of this command sets the reachable time to the default value. ipv6 nd reachable-time <0-3600000> no ipv6 nd reachable-time Syntax Description <0-3600000>...
Page 348: Ipv6 Nd Retrans-Timer
DGS-6604 ipv6 nd retrans-timer ipv6 nd retrans-timer This command is used to configure IPv6 RA (router advertisement) retrans timer per interface on this switch. The no form of this command sets the retrans timer to the default value. ipv6 nd retrans-timer <0-4294967295> no ipv6 nd retrans-timer Syntax Description <0-4294967295>...
Page 349: Ipv6 Nd Suppress-Ra
DGS-6604 ipv6 nd suppress-ra ipv6 nd suppress-ra This command is used to suppress IPv6 RA (router advertisement) on an interface of this switch. Use the no ipv6 nd suppress-ra configuration command to enable the sending of IPv6 router advertisements on an ISATAP tunnel interface.
Page 350: Ipv6 Neighbor
DGS-6604 ipv6 neighbor ipv6 neighbor This command is used to add a static ipv6 neighbor entry. The no form of this command deletes the IPv6 neighbor entry. ipv6 neighbor X:X::X:X IFNAME MAC no ipv6 neighbor X:X::X:X IFNAME Syntax Description X:X::X:X IPv6 address.
Page 351: Ipv6 Ospf Cost
DGS-6604 ipv6 ospf cost ipv6 ospf cost To explicitly specify the cost of sending a packet on an interface, use the ipv6 ospf cost command. To reset the interface cost to the default value, use the no form of this command. ipv6 ospf cost COST [instance-id INSTANCE-ID] no ipv6 ospf cost [instance-id INSTANCE-ID] Syntax Description...
Page 352: Ipv6 Ospf Dead-Interval
DGS-6604 ipv6 ospf dead-interval ipv6 ospf dead-interval To set the time period used, during which hello packets are not detected, before neighbors declare the router down, use the ipv6 ospf dead-interval command. To return to the default time, use the no form of this command. ipv6 ospf dead-interval SECONDS [instance-id INSTANCE-ID] no ipv6 ospf dead-interval [instance-id INSTANCE-ID] Syntax Description...
Page 353: Ipv6 Ospf Hello-Interval
DGS-6604 ipv6 ospf hello-interval ipv6 ospf hello-interval To specify the interval between hello packets sent from an interface, use the ipv6 ospf hello-interval command. To return to the default time, use the no form of this command. ipv6 ospf hello-interval SECONDS [instance-id INSTANCE-ID] no ipv6 ospf hello-interval [instance-id INSTANCE-ID] Syntax Description SECONDS...
Page 354: Ipv6 Ospf Priority
DGS-6604 ipv6 ospf priority ipv6 ospf priority To set the router priority, which helps determine the designated router for this network, use the ipv6 ospf priority. To return to the default value, use the no form of this command. ipv6 ospf priority PRIORITY [instance-id INSTANCE-ID] no ipv6 ospf priority [instance-id INSTANCE-ID] Syntax Description PRIORITY...
Page 355: Ipv6 Ospf Retransmit-Interval
DGS-6604 ipv6 ospf retransmit-interval ipv6 ospf retransmit-interval This command specifies the time between link-state advertisement (LSA) retransmissions for adjacencies belonging to an interface. ipv6 ospf retransmit-interval SECONDS [instance-id INSTANCE-ID] no ipv6 ospf retransmit-interval [instance-id INSTANCE-ID] Syntax Description SECONDS The interval the router waits before it retransmits a packet. The valid setting is 1- 65535.
Page 356: Ipv6 Ospf Shutdown
DGS-6604 ipv6 ospf shutdown ipv6 ospf shutdown To initiate an IPv6 OSPF protocol graceful shutdown at the interface level, use the ipv6 ospf shutdown command. To restart the OSPF protocol on an interface, use the no form of this command ipv6 ospf shutdown [IFNAME] no ipv6 ospf shutdown [IFNAME] Syntax Description...
Page 357: Ipv6 Ospf Transmit Delay
DGS-6604 ipv6 ospf transmit delay ipv6 ospf transmit delay To set the estimated time required to send a link-state update packet on the interface, use the ipv6 ospf transmit-delay command. To return to the default value, use the no form of this command. ipv6 ospf transmit-delay SECONDS [instance-id INSTANCE-ID] no ipv6 ospf transmit-delay [instance-id INSTANCE-ID] Syntax Description...
Page 358: Ipv6 Rip Metric-Offset
DGS-6604 ipv6 rip metric-offset ipv6 rip metric-offset To set the IPv6 RIP metric for an interface, use the ipv6 rip metric-offset command. To return the metric to its default value, use the no form of this command. ipv6 rip metric-offset METRIC-VALUE no ipv6 rip metric-offset Syntax Description METRIC-VALUE...
Page 359: Ipv6 Rip Split-Horizon
DGS-6604 ipv6 rip split-horizon ipv6 rip split-horizon To enable IPv6 RIP split-horizon mechanism, use the ipv6 rip split-horizon command. To disable the split horizon processing of IPv6 RIP updates, use the no form of this command. ipv6 rip split-horizon no ipv6 rip split-horizon Syntax None Default...
Page 360: Ipv6 Rip Split-Horizon Poisoned
DGS-6604 ipv6 rip split-horizon poisoned ipv6 rip split-horizon poisoned To configure the poison reverse processing of IPv6 RIP router updates, use the ipv6 rip split-horizon poisoned command. To disable the poison reverse processing of IPv6 RIP updates, use the no form of this command. ipv6 rip split-horizon poisoned no ipv6 rip split-horizon Syntax...
Page 361: Ipv6 Ospf Mtu-Ignore
DGS-6604 ipv6 ospf mtu-ignore ipv6 ospf mtu-ignore To disable IPv6 Open Shortest Path First (OSPF) maximum transmission unit (MTU) mismatch detection on receiving database descriptor (DBD) packets, use the ipv6 ospf mtu-ignore command in interface configuration mode. To reset to default, use the no form of this command.
Page 362: Ipv6 Route
DGS-6604 ipv6 route ipv6 route Use ipv6 route to add an IPv6 static route entry. Use the no form of the command to remove an IPv6 static route entry. ipv6 route NETWORK-PREFIX / PREFIX-LENGTH {NEXT-HOP-ADDRESS | INTERFACE-TYPE INTERFACE-NUMBER NEXT-HOP-ADDRESS} [distance DISTANCE] no ipv6 route NETWORK-PREFIX / PREFIX-LENGTH [NEXT-HOP-ADDRESS | INTERFACE- TYPE INTERFACE-NUMBER NEXT-HOP-ADDRESS ] Syntax Description...
Page 363 DGS-6604 ipv6 route Practical Usage Operators may prefer to specify a default path for the managed devices. By specifying a default gateway, traffic inside the managed topology always has the proper path to follow. Usually, routers on smaller networks may need this configuration, since they have less CPU computing power or less memory to keep the entire routing table of the topology.
Page 364 DGS-6604 ipv6 route Practical Usage Operators may prefer to specify the forwarding path of certain traffic. By doing this, the traffic of certain applications in the managed domain will always be forwarded to the expected destination. When the network prefixes and prefix- length are both zero, it implies the specific static route is the default route.
Page 365 DGS-6604 ipv6 route Then we can use the show command to check whether the configured static route works or not. Switch > enable Switch # show ipv6 route IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP 2177:0:4:141::/64 is directly connected, vlan141 2177:0:3:134::/64 [1/0] via 2177:0:4:906::8003...
Page 366 DGS-6604 ipv6 route • RIP 120 • RIPNG 120 • OSPF 110 • OSPF6 110 • EBGP 20 • IBGP 200 • ISIS 115 Examples Assume that a routing protocol originates the same route to the same destination as an existing static route. However, an operator would like to select the calculation of the best route to choose from the routing protocols first.
Page 367: Ipv6 Router Ospf Area
DGS-6604 ipv6 router ospf area ipv6 router ospf area To enable IPv6 OSPF on an interface, use the ipv6 router ospf area command. To disable IPv6 OSPF routing for interfaces defined, use the no form of this command. ipv6 router ospf area AREA-ID [tag PROCESS-ID] [instance-id INSTANCE-ID] no ipv6 router ospf area AREA-ID [tag PROCESS-ID] [instance-id INSTANCE-ID] Syntax Description AREA-ID...
Page 368: Ipv6 Router Rip
DGS-6604 ipv6 router rip ipv6 router rip To enable the IPv6 RIP routing process on an interface, use the ipv6 router rip command. To disable the IPv6 RIP routing process on an interface, use the no form of this command. ipv6 router rip no ipv6 router rip Syntax...
Page 369 DGS-6604 Use the key command to identify a key on a key chain used for routing protocol authentication. Use the no key command to remove the key from the key chain. key KEY-ID no key KEY-ID Syntax Description KEY-ID The iIdentification number of an authentication key of a key chain. The available range for the key ID is a number from 0 to 2147483647, up to 32 key IDs can be configured.
Page 370 DGS-6604 Example The following example configures a key chain named chain1. Key1 named "forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key3 named "forkey3string" will be accepted from 2:30 p.m.
Page 371: Key Chain
DGS-6604 key chain key chain To manage authentication keys, define a key chain, identify the keys that belong to the key chain, and specify how long each key is valid by using the key chain command. To remove the key chain, use the no form of this command. key chain NAME-OF-KEY no key chain NAME-OF-KEY Syntax Description...
Page 372 DGS-6604 key chain Example The following example configures a key chain named chain1. Key1 named "forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key3 named "forkey3string" will be accepted from 2:30 p.m.
Page 373: Key-String
DGS-6604 key-string key-string Use the key-string command ito specify the authentication string for a key. Use the no key-string command to remove the authentication string. key-string TEXT no key-string [TEXT ] Syntax Description TEXT The required authentication string sent and received in packets using the routing protocol being authenticated.
Page 374 DGS-6604 key-string Example The following example configures a key chain named chain1. Key1 named forkey1string will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key3 named forkey3string will be accepted from 2:30 p.m. to 4:30 p.m.
Page 375: Lacp Port-Priority
DGS-6604 lacp port-priority lacp port-priority Use the lacp port-priority command to configure the port priority. Use the no form to configure the port priority to the default. lacp port-priority PRIORITY no lacp port-priority Syntax Description PRIORITY Specifies the port priority. The range is 1 to 65535. Default 32768 Command Mode...
Page 376: Lacp System-Priority
DGS-6604 lacp system-priority lacp system-priority Use the lacp system-priority command to configure the system priority used for LACP ports. Use the no form to configure the system priority to the default. lacp system-priority PRIORITY no lacp system-priority Syntax Description PRIORITY Specifies the system priority.
Page 377: Lease
DGS-6604 lease lease Use this command to configure the lease duration of an IP address that is assigned from a DHCP server to a client. Use the no form of this command to restore the default value. lease { DAYS [HOURS | MINUTES] | infinite } no lease Syntax Description DAYS...
Page 378: Lldp Dot1-Tlv-Select
DGS-6604 lldp dot1-tlv-select lldp dot1-tlv-select To specify which optional type-length-value settings (TLVs) in the IEEE 802.1 Organizationally Specific TLV set will be transmitted and encapsulated in the LLDPDUs and sent to neighbor devices, use the lldp dot1-tlv-select command in interface configuration mode. To disable transmit the TLVs, use the no form of this command.
Page 379 DGS-6604 lldp dot1-tlv-select Syntax Description protocol-identify Specify the Protocol Identify TLV to send. The Protocol Identify TLV is an [PROTOCOL-NAME ] optional TLV that allows an IEEE 802 LAN station to advertise particular protocols that are accessible through the port. The valid strings for PROTOCOL- NAME are: eapol: Extensible Authentication Protocol (EAP) over LAN lacp: Link Aggregation Control Protocol...
Page 380 DGS-6604 lldp dot1-tlv-select Switch(config-if)# lldp dot1-tlv-select protocol-vlan The following example disabling Port And Protocol Vlan ID TLV advertisement from valn1 to vlan3 Switch(config-if))# no lldp dot1-tlv-select protocol-vlan 1-3 This example shows how to enable VLAN Name TLV advertisement from vlan1 to vlan3 Switch(config-if)# lldp dot1-tlv-select vlan-name 1-3 The following example disables VLAN Name advertisement from valn1 to vlan3...
Page 381: Lldp Dot3-Tlv-Select
DGS-6604 lldp dot3-tlv-select lldp dot3-tlv-select To specify which optional type-length-value settings (TLVs) in the IEEE 802.3 Organizationally Specific TLV set will be transmitted and encapsulated in the LLDPDUs and sent to neighbor devices, use the lldp dot3-tlv-select command in Interface Configuration mode. To disable transmit the TLVs, use the no form of this command.
Page 382 DGS-6604 lldp dot3-tlv-select Default No IEEE 802.3 Organizationally Specific TLV is selected. Command Mode Interface configuration. Usage Guideline The lldp dot3-tlv-select command enables the advertisement of the optional IEEE 802.3 Organizationally Specific TLVs. The respective TLV will be encapsulated in LLDPDU and sent to other devices if the advertisement state is enabled.
Page 383: Lldp Fast-Count
DGS-6604 lldp fast-count lldp fast-count To set the LLDP-MED fast start repeat count on the switch, use the lldp fast- count command. Use the no form of this command to return to the default settings. lldp fast-count VALUE no lldp fast-count Syntax Description VALUE The valid range is from 1 to 10.
Page 384: Lldp Hold-Multiplier
DGS-6604 lldp hold-multiplier lldp hold-multiplier To set the hold multiplier for LLDP updates on the switch, use the lldp hold- multiplier command. Use the no form of this command to return to the default settings. lldp hold-multiplier VALUE no hold-multiplier Syntax VALUE Specifies a multiplier on the LLDPDUs transmission interval that...
Page 385: Lldp Management-Address
DGS-6604 lldp management-address lldp management-address To configure management address which will be advertised on the physical interface, use the lldp management-address command. Use the no form of this command to remove the settings. lldp management-address [ IP-ADDRESS | IPV6-ADDRESS ] no lldp management-address [ IP-ADDRESS | IPV6-ADDRESS ] Syntax Description IP-ADDRESS...
Page 386 DGS-6604 lldp management-address Switch(config)# interface range eth3.3-3.4 Switch(config-if-range)# lldp management-address FE80::250:A2FF:FEBF:A056 This example shows how to delete the management address 10.1.1.1 on eth3.1 and eth3.2. If 10.1.1.1 is the last one, no Management Address TLV will be sent. Switch(config)# interface range eth3.1-3.2 Switch(config-if-range)# no lldp management-address 10.1.1.1 This example shows how to delete the management address FE80::250:A2FF:FEBF:A056 on eth3.3 and eth3.4.
Page 387: Lldp Med-Tlv-Select
DGS-6604 lldp med-tlv-select lldp med-tlv-select To specify which optional LLDP-MED TLV will be transmitted and encapsulated in the LLDPDUs and sent to neighbor devices, use the lldp med-tlv-select command in Interface configuration mode. To disable transmit the TLVs, use the no form of this command.
Page 388 DGS-6604 lldp med-tlv-select Example This example shows how to enable all TLVs: Switch(config-if)# lldp med-tlv-select This example shows how to enable transmitting LLDP-MED TLVs and LLDP- MED Capabilities TLV will be sent: Switch(config-if)# lldp med-tlv-select capabilities This example shows how to enable transmitting LLDP MED Inventory Management TLV: Switch(config-if)# lldp med-tlv-select inventory-management CLI Reference Guide...
Page 389: Lldp Receive
DGS-6604 lldp receive lldp receive To enable a physical interface to receive LLDP message, use the lldp receive command in Interface Configuration mode. Use the no form of this command to disable receiving LLDP message. lldp receive no lldp receive Syntax This command has no arguments or keywords.
Page 390: Lldp Reinit
DGS-6604 lldp reinit lldp reinit To set the minimum time of re-initialization delay interval on the switch, use the lldp reinit command. Use the no form of this command to return to the default settings. lldp reinit SECONDS no lldp reinit Syntax Description SECONDS Specifies a delay for LLDP initialization on an interface;...
Page 391: Lldp Run
DGS-6604 lldp run lldp run To enable Link Layer Discovery Protocol (LLDP) globally, use the lldp run command in global configuration mode. Use the no form of this command to return to the default settings. lldp run no lldp run Syntax This command has no arguments or keywords.
Page 392: Lldp Tlv-Select
DGS-6604 lldp tlv-select lldp tlv-select To select optional type-length-value (TLVs) in the 802.1AB basic management set will be transmitted and encapsulated in the LLDPDUs and sent to neighbor devices, use the lldp tlv-select command in Interface Configuration mode. To disable transmit the TLVs, use the no form of this command. lldp tlv-select [ port-description | system-capabilities | system-description | system-name ] no lldp tlv-select [ port-description | system-capabilities | system-description | system-name Syntax Description...
Page 393 DGS-6604 lldp tlv-select This example shows how to disable advertising System Name TLV: Switch(config-if)# no lldp tlv-select system-name CLI Reference Guide...
Page 394: Lldp Transmit
DGS-6604 lldp transmit lldp transmit To enable the LLDP advertise (transmit) capability, use the lldp transmit command in Interface Configuration mode. Use the no form of this command to disable LLDP transmission. lldp transmit no lldp transmit Syntax This command has no arguments or keywords. Default LLDP transmit is enabled on all supported interfaces.
Page 395: Lldp Tx-Delay
DGS-6604 lldp tx-delay lldp tx-delay To set the transmission delay timer use the lldp tx-delay command. This delay timer defines the minimum interval between sending of LLDP messages due to constantly change of MIB content. Use the no form of this command to return to the default settings.
Page 396: Lldp Tx-Interval
DGS-6604 lldp tx-interval lldp tx-interval To set the LLDPDUs transmission interval on the switch, use the lldp tx-interval command. Use the no form of this command to return to the default settings. lldp tx-interval SECONDS no lldp tx-interval Syntax Description SECONDS Specifies the interval between consecutive transmissions of LLDP advertisements on each physical interface.
Page 397: Logging File
DGS-6604 logging file logging file Use the logging file command to enable the storage of log messages to FLASH memory from the logging buffer. logging file Syntax None Default None Command Mode Global configuration Usage Guideline Use this command to save log messages from the logging buffer to flash. Example The example below sets log messages to be saved to flash.
Page 398: Logging Host
DGS-6604 logging host logging host Use the logging host command to log system messages to a remote host. Remove logging hosts from the configuration with the no logging host command. logging host IPADDRESS [ port UDP-PORT] [severity {emergency |alert |critical |error |warning |notice |informational|debugging}] [facility {local0|local1| local2| local3| local4| local5| local6| local7}] no logging host [ IP-ADDRESS ]...
Page 399 DGS-6604 logging host facility: local7 Command Mode Global configuration Usage Guideline The number of supporting SYSLOG servers is project dependent. When the number of configured SYSLOG servers reaches the maximum capacity, a new SYSLOG server is unable to be configured before and existing entry is deleted using the command no logging host.
Page 400: Logging Level
DGS-6604 logging level logging level Use this command to limit messages logged to the message buffer based on severity level. logging level all SEVERITY Syntax Description All facilities SEVERITY Value for the severity level of system messages to capture. Severity level definitions are shown in the following table.
Page 401: Logging On
DGS-6604 logging on logging on Use the logging on command to start logging system messages on this switch. Use the no form of this command to stop logging. logging on no logging on Syntax None Default Logging of system messages is on. Command Mode Global configuration Usage Guideline...
Page 402: Login
Example This example shows how to login with username user1. Switch>login User Access Verification Username: user1 Password: DGS-6604 Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.029 Copyright (c) 2011 D-Link Corporation. All rights reserved. Switch# CLI Reference Guide...
Page 403: Logout
DGS-6604 logout logout Use this command to close an active terminal session by logging off the switch. logout Syntax None Default None Command Mode User EXEC Usage Guideline Close an active terminal session by logging off the device using the logout command.
Page 404: Loopback-Detection (Interface)
DGS-6604 loopback-detection (interface) loopback-detection (interface) Use the command to enable interface loopback detection function. Use the no form to disable the function. loopback-detection no loopback-detection Syntax None Default Disabled Command Mode Interface mode Usage Guideline The command is available for port and port channel interface configuration. When a port enables the loopback-detection function, and switch is in forwarding state, will periodically sends out CTP packets with the SA field set to device's MAC, DA field set to CF-00-00-00-00-00.
Page 405 DGS-6604 loopback-detection (interface) You can verify your settings by entering the show loopback-detection command. CLI Reference Guide...
Page 406: Loopback-Detection (Global)
DGS-6604 loopback-detection (global) loopback-detection (global) Use the command to enable global loopback detection function. Use no form to disable the function. loopback-detection no loopback-detection Syntax None Default Disabled Command Mode Configuration mode Usage Guideline Used to enable or disable the LBD function globally. When a port enables the loopback-detection function, and switch is in forwarding state, will periodically sends out CTP packets with the SA field set to device's MAC, DA field set to CF-00-00-00-00-00.
Page 407: Loopback-Detection Mode
DGS-6604 loopback-detection mode loopback-detection mode Use the command to decide the loopback detection mode. To return to the default settings, use the no form of this command. loopback-detection mode {port-based | vlan-based} no loopback-detection mode Syntax In the port-based mode, the port will enter the error disabled state when detects the port-based loop vlan-based...
Page 408: Loopback-Detection Interval-Time
DGS-6604 loopback-detection interval-time loopback-detection interval-time Use the command to configure timer interval. Use no command to return the default settings. loopback-detection interval-time SECONDS no loopback-detection interval-time Syntax The time interval (in seconds) at which device transmits all the CTP (Configuration Interval-time Test Protocol) packets to detect the loop-back event.
Page 409: Mac Access-Group
DGS-6604 mac access-group mac access-group Use the mac access-group command to specify a MAC access list to be applied to an interface. Use the no mac access-group command to remove the access group control from the interface. mac access-group NAME [ in ] no mac access-group NAME [ in ] Syntax Description NAME...
Page 410: Mac Access-List
DGS-6604 mac access-list mac access-list Use the mac access-list command to create a MAC access list in the configuration. Enter this command to go into mac access-list configuration mode. Use the no form of the command to delete a MAC access list. mac access-list extended NAME no mac acces-list extended NAME Syntax Description...
Page 411: Mac Address-Table Aging Destination-Hit
DGS-6604 mac address-table aging destination-hit mac address-table aging destination-hit Use the MAC address-table aging destination-hit command to enable the destination MAC address triggered update function (Updates the hit bit of the MAC address entry based on the destination MAC of the forwarding packet). Use the no form of the command to disable the triggered updated function.
Page 412: Mac Address-Table Aging-Time
DGS-6604 mac address-table aging-time mac address-table aging-time Use this command to set the length of time that a dynamic entry remains in the MAC address table. mac address-table aging-time SECONDS Syntax Description SECONDS Aging time in seconds. The valid range is 0 or 10 to 1000000 seconds. 0 means that the aging function is disabled so entries never age out.
Page 413: Mac Address-Table Static
DGS-6604 mac address-table static mac address-table static Use the mac address-table static command to add a static address to the MAC address table. Use the no mac address-table static command to remove static addresses from the table. mac address-table static MAC-ADDR vlan VLAN-ID interface INTERFACE-ID [ , | - ] no mac address-table static MAC-ADDR vlan VLAN-ID [interface INTERFACE-ID ] [ , | - ] Syntax Description MAC-ADDR...
Page 414: Mac-Base ( Vlan)
DGS-6604 mac-base ( VLAN ) mac-base ( VLAN ) Use the mac-base command to create a MAC-based VLAN ID assignment entry. Use the no form of this command to remove a MAC-based VLAN ID assignment entry. mac-base MAC-ADDRESS no mac-base MAC-ADDRESS Syntax Description MAC-ADDRESS Specifies the MAC address for the entry.
Page 415: Match
DGS-6604 match match Use the match command in the class map configuration mode to configure the match criteria for a class-map. Use the no form of the command to remove the match criteria. match {access-list ACCESS-LIST-NAME | cos COS-LIST | [ip] dscp DSCP-LIST | [ip] precedence IP-PRECEDENCE-LIST| | protocol PROTOCOL-NAME | vlan VLAN-LIST} no match { access-list ACCESS-LIST-NAME | cos COS-LIST | [ip] dscp DSCP-LIST | [ip] precedence IP-PRECEDENCE-LIST| | protocol PROTOCOL-NAME | vlan VLAN-ID-LIST}...
Page 416 DGS-6604 match value from a class map, use the no form of this command. As an example for the match dscp command, if the user wants to match the DCSP values of 0, 1, 2, 3, 4, 5, 6, or 7 (note that only one of the IP DSCP values needs to be matched, not all of the specified DSCP values), enter the match dscp 0,1,2,3,4,5,6,7 command.
Page 417 DGS-6604 match Protocol Description Secured shell telnet Telnet tftp Trivial File Transfer Protocol Examples The following example specifies a class map called class-home-user and configures the access list named acl-home-user to be used as the match criteria for that class: Switch(config)# class-map class-home-user Switch(config-cmap)# match access-list acl-home-user Switch(config-cmap)# exit...
Page 418 DGS-6604 match In the following example, classes called voice and video-n-data are created to classify traffic based on the CoS values. QoS treatment is then given to the appropriate packets in the cos-based-treatment policy map (in this example, the QoS treatment is a single rate policer and a two rate policer for class voice and video-n-data respectively).
Page 419: Match As-Path
DGS-6604 match as-path match as-path Use this command to match a BGP autonomous system path access list. To delete an entry, use the no form of this command. match as-path ACCESS-LIST-NAME no match as-path ACCESS-LIST-NAME Syntax Description ACCESS-LIST-NAME Specifies the name of AS path access list. Default Not configured Command Mode...
Page 420: Match Community
DGS-6604 match community match community Use the match community command to match a Border Gateway Protocol (BGP) community. Use the no match community command to remove the entry from the list and return to the default condition. match community COMMUNITY-LIST-NAME [ exact ] no match community COMMUNITY-LIST-NAME [ exact ] Syntax Description COMMUNITY-LIST-...
Page 421: Route Map Match Ip Address
DGS-6604 match ip address match ip address Use this command to define a clause to match the route based on IP standard access list. match ip address ACCESS-LIST-NAME no match ip address [ACCESS-LIST-NAME] Syntax Description ACCESS-LIST-NAME Specify a standard or an extended IP access list name. Default Not configured Command Mode...
Page 422: Match Ipv6 Address
DGS-6604 match ipv6 address match ipv6 address Use this command to define a clause to match the route based on IPv6 access list. match ipv6 address IPv6-ACCESS-LIST-NAME no match ipv6 address [IPv6-ACCESS-LIST-NAME] Syntax Description IPv6-ACCESS-LIST- Specify an IPv6 access list name. NAME Default Not configured...
Page 423: Maximum-Paths
DGS-6604 maximum-paths maximum-paths To control the maximum number of parallel routes that an IP routing protocol can support, use the maximum-paths command in router configuration mode. maximum-paths NUMBER-PATHS Syntax Description NUMBER-PATHS Maximum number of parallel routes that an IP routing protocol installs in a routing table;...
Page 424: Max-Rcv-Frame-Size
DGS-6604 max-rcv-frame-size max-rcv-frame-size Use the command to set the maximum Ethernet frame size allowed. Use the default form to restore the default max-rcv-frame-size size. max-rcv-frame-size BYTES default max-rcv-frame-size Syntax Description BYTES Set the maximum Ethernet frame size allowed. The range is 1536 to 9728 bytes. Default BYTES: 1536 bytes Command Mode...
Page 425: Mgmt-If
DGS-6604 mgmt-if mgmt-if Use this command to enter into the management interface mode. Commands entered in this mode will be applied to the management port. mgmt-if Syntax None Default None Command Mode Global configuration Usage Guideline None Example The following example displays how to enter the management interface mode. Switch(config)# mgmt-if Switch(mgmt-if)# Verify the settings using the show mgmt-if command.
Page 426: Monitor Session
DGS-6604 monitor session monitor session Use monitor session to create a port mirroring session, allowing source ports as mirrored ports to be monitored through a destination port. Use the no form of this command to delete all or a specific port mirroring session, or remove either a destination port or a source port within a specific port mirroring session.
Page 427 DGS-6604 monitor session • IEEE 802.1x authentication on a port cannot be enabled for a destination port, but is allowed on the source port. Entering no monitor session without specifying a session number deletes all port mirroring sessions. Examples This example shows how to create a port mirroring session with session number 1.
Page 428: Monitor Session Destination Remote Vlan
DGS-6604 monitor session destination remote vlan monitor session destination remote vlan Use the command to configure the RSPAN VLAN and destination port for a RSPAN source session. Use the no form of the command to remove configuration of the RSPAN VLAN. monitor session SESSION-NUMBER destination remote vlan VLAN-ID interface INTERFACE- no monitor session SESSION-NUMBER destination remote vlan Syntax Description...
Page 429 DGS-6604 Switch# configure terminal Switch(config)# vlan 100 Switch(config-vlan)# remote-span Switch(config-vlan)#exit Switch(config)# monitor session 2 source interface eth2.2-2.4 Switch(config)# monitor session 2 destination remote vlan 100 interface eth3.6 Switch(config)# You can verify your settings by entering the show monitor session command. CLI Reference Guide...
Page 430: Monitor Session Source Interface
DGS-6604 monitor session source interface monitor session source interface Use monitor session source interface to configure the source port of a port monitor session. Use the no form of this command to remove all or a port monitor session, or remove a source port from the port monitor session. monitor session SESSION-NUMBER source interface INTERFACE-ID [, | -] [both | rx | tx] no monitor session SESSION-NUMBER source interface INTERFACE-ID [, | -] [both | rx | tx] no monitor session [SESSION-NUMBER]...
Page 431 DGS-6604 monitor session source interface Switch# configure terminal Switch(config)# monitor session 1 destination interface eth2.1 Switch(config)# monitor session 1 source interface eth2.2-2.4 Switch(config)# This example shows how to remove two source ports from port monitor session Switch# configure terminal Switch(config)# no monitor session 1 source interface eth2.2,eth2.4 Switch(config)# You can verify your settings by entering the show monitor session command.
Page 432: Monitor Session Source Remote Vlan
DGS-6604 monitor session source remote vlan monitor session source remote vlan Use the command to configure the RSPAN VLAN for a RSPAN destination session. Use the no form of the command to remove configuration of the RSPAN VLAN. monitor session SESSION-NUMBER source remote vlan VLAN-ID no monitor session SESSION-NUMBER source remote vlan Syntax Description SESSION-NUMBER...
Page 433 DGS-6604 monitor session source remote vlan Switch# configure terminal Switch(config)# vlan 100 Switch(config-vlan)# remote-span Switch(config-vlan)#exit Switch(config)# interface eth2.1 Switch(config-vlan)# trunk-allowed vlan 100 Switch(config-vlan)# exit Switch(config)# interface eth2.4 Switch(config-vlan)# access vlan 100 Switch(config-vlan)# exit Switch(config)# monitor session 2 source remote vlan 100 Switch(config)# monitor session 2 destination interface eth2.4 Switch(config)# CLI Reference Guide...
Page 434 DGS-6604 Use the command to set the MTU value. This value is used to monitor oversize IP packets. Use default form to restore to the default mtu size. mtu BYTES default mtu Syntax Description BYTES Set the monitor threshold. The settable range is 1280 to 9692 bytes. Default BYTES: 1500 bytes Command Mode...
Page 435: Multicast Filtering-Mode
DGS-6604 multicast filtering-mode multicast filtering-mode Use the multicast filtering mode command to configure the method how an interface handles unknown multicast packets. multicast filtering-mode { forward-all | forward-unregistered | filter-unregistered } Syntax Description forward-all Flood all multicast packets based on VLAN domain. forward-unregistered Forward the registered multicast packet based on forwarding table, and flood all un-registered multicast packets based on VLAN domain.
Page 436: Name
DGS-6604 name name Use the name command to set the name of an MST region. To return to the default name, use the no form of this command. name NAME no name Syntax Description NAME The name given for a specified MST region. The name string has a maximum length of 32 characters and the type is a general string which allows spaces.
Page 437: Neighbor
DGS-6604 neighbor neighbor Use the neighbor command to define a neighboring router with which to exchange routing information. Use the no form to remove an entry. neighbor IP-ADDRESS no neighbor IP-ADDRESS Syntax Description IP-ADDRESS IP address of a peer router with which routing information will be exchanged. Default Not configured Command Mode...
Page 438: Neighbor (Rip Ipv)
DGS-6604 neighbor (RIP IPv6) neighbor (RIP IPv6) To define a neighboring router with which to exchange routing information, use the neighbor command in router configuration mode. Use the no form of the command to remove an entry. neighbor IPv6-ADDRESS IFNAME no neighbor IPv6-ADDRESS IFNAME Syntax Description IPv6-ADDRESS...
Page 439: Neighbor Advertisement-Interval
DGS-6604 neighbor advertisement-interval neighbor advertisement-interval Use this command to set the minimum interval between each transmission of Border Gateway Protocol (BGP) routing updates. Use the no form of the command to return to the default configuration. neighbor { IP-ADDRESS | PEER-GROUP-NAME } advertisement-interval SECONDS default neighbor { IP-ADDRESS | PEER-GROUP-NAME } advertisement-interval Syntax Description IP-ADDRESS...
Page 440: Neighbor Description
DGS-6604 neighbor description neighbor description Use this command to associate a text description with a neighbor. Use the no form of the command to remove the description. neighbor { IP-ADDRESS | PEER-GROUP-NAME } description TEXT no neighbor { IP-ADDRESS | PEER-GROUP-NAME } description Syntax Description IP-ADDRESS Specifies IP address prefixes.
Page 441: Neighbor Filter-List
DGS-6604 neighbor filter-list neighbor filter-list Use this command to create a BGP filter. Use the no form of the command to disable this function. neighbor { IP-ADDRESS | PEER-GROUP-NAME } filter-list AS-PATH-LIST-NAME { in | out } no neighbor { IP-ADDRESS | PEER-GROUP-NAME } filter-list AS-PATH-LIST-NAME { in | out } Syntax Description IP-ADDRESS Specifies the IP address prefix.
Page 442: Neighbor Peer-Group (Create Group)
DGS-6604 neighbor peer-group (create group) neighbor peer-group (create group) Use this command to create a peer group. Use the no form of the command to remove a peer group. neighbor PEER-GROUP-NAME peer-group no neighbor PEER-GROUP-NAME peer-group Syntax Description PEER-GROUP-NAME Name of the BGP peer group Default Not configured Command Mode...
Page 443: Neighbor Peer-Group (Add Group Member)
DGS-6604 neighbor peer-group (add group member) neighbor peer-group (add group member) Use this command to add a neighbor into a peer group. Use the no form of the command to remove a neighbor from a peer group. neighbor IP-ADDRESS peer-group PEER-GROUP-NAME no neighbor IP-ADDRESS peer-group PEER-GROUP-NAME Syntax Description IP-ADDRESS...
Page 444: Neighbor Remote-As
DGS-6604 neighbor remote-as neighbor remote-as Use this command to add an entry to the Border Gateway Protocol (BGP) neighbor table. Use the no form of this command to remove an entry from the table. neighbor { IP-ADDRESS | PEER-GROUP-NAME} remote-as AS-NUMBER no neighbor { IP-ADDRESS | PEER-GROUP-NAME} remote-as AS-NUMBER Syntax Description IP-ADDRESS...
Page 445: Neighbor Route-Map
DGS-6604 neighbor route-map neighbor route-map Use this command to apply a route map to incoming or outgoing routes. Use the no form of the command to remove the route map. neighbor { IP-ADDRESS | PEER-GROUP-NAME } route-map MAP-NAME { out } no neighbor { IP-ADDRESS | PEER-GROUP-NAME } route-map MAP-NAME { out } Syntax Description IP-ADDRESS...
Page 446: Neighbor Send-Community
DGS-6604 neighbor send-community neighbor send-community Use this command to specify that the communities attribute should be sent to a BGP neighbor, use the no form of this command to remove the entry. neighbor { IP-ADDRESS | PEER-GROUP-NAME } send-community [both | standard | extended] no neighbor { IP-ADDRESS | PEER-GROUP-NAME } send-community [both | standard | extended]...
Page 447: Neighbor Shutdown
DGS-6604 neighbor shutdown neighbor shutdown Use this command to disable a neighbor or peer group. Use the no form of this command to re-enable a neighbor or peer group. neighbor { IP-ADDRESS | PEER-GROUP-NAME} shutdown no neighbor { IP-ADDRESS | PEER-GROUP-NAME} shutdown Syntax Description IP-ADDRESS Specifies IP address prefixes.
Page 448: Neighbor Timers
DGS-6604 neighbor timers neighbor timers Use this command to set the timers for a specific BGP peer or peer group. Use the no form of this command to clear the timers for a specific BGP neighbor. neighbor { IP-ADDRESS | PEER-GROUP-NAME} timers KEEP-ALIVE HOLD-TIME no neighbor { IP-ADDRESS | PEER-GROUP-NAME} timers Syntax Description IP-ADDRESS...
Page 449: Neighbor Update-Source
DGS-6604 neighbor update-source neighbor update-source Use this command to allow internal BGP sessions to use any operational interface for TCP connections. Use the no form of this command to restore the interface assignment to the closest interface. neighbor { IP-ADDRESS | PEER-GROUP-NAME } update-source INTERFACE-ID no neighbor { IP-ADDRESS | PEER-GROUP-NAME } update-source INTERFACE-ID Syntax Description IP-ADDRESS...
Page 450: Neighbor Weight
DGS-6604 neighbor weight neighbor weight Use this command to specify the weight associated with a specific neighbor. To remove a weight assignment, use the no form of this command. neighbor {IP-ADDRESS | PEER-GROUP-NAME} weight NUMBER no neighbor {IP-ADDRESS | PEER-GROUP-NAME} weight Syntax Description IP-ADDRESS Specifies IP address prefixes.
Page 451: Netbios Node-Type
DGS-6604 netbios node-type netbios node-type This command is used to configure the NetBIOS node’s type for Microsoft Dynamic Host Configuration Protocol (DHCP) clients. Use the no form of this command to restore the configuration of the NetBIOS node’s type back to default configuration (Hybrid).
Page 452: Netbios Scope-Id
DGS-6604 netbios scope-id netbios scope-id This command configures the NetBIOS scope id for Microsoft Dynamic Host Configuration Protocol (DHCP) clients. Use the no form of this command to remove the configuration of NetBIOS scope id. netbios scope-id STRING no netbios scope-id Syntax Description STRING A character string.
Page 453: Netbios Wins-Server
DGS-6604 netbios wins-server netbios wins-server To configure the IP address of a WINS server for Microsoft Dynamic Host Configuration Protocol (DHCP) clients. Use the no form of this command to remove the configuration of WINS server. netbios wins-server IP-ADDRESS no netbios wins-server [IP-ADDRESS] Syntax Description IP-ADDRESS The IP address of the WINS server.
Page 454: Network
DGS-6604 network network Use the command to specify that the network utilizes Routing Information Protocol (RIP). To remove an RIP network entry, use the no form of this command. network NETWORK-PREFIX / MASK no network NETWORK-PREFIX / MASK Syntax Description NETWORK-PREFIX / The network prefix and the prefix length specify the destination network in the MASK...
Page 455: Network (Bgp)
DGS-6604 network (BGP) network (BGP) Use this command to configure the networks to be advertised by the Border Gateway Protocol (BGP) protocol. To remove an entry from the routing table, use the no form of this command. network { NETWORK-NUMBER [ /SUBNET-LENGTH ] | NETWORK-NUMBER [ mask NETWORK-NUMBER ] } [ route-map MAP-TAG] no network { NETWORK-NUMBER [ /SUBNET-LENGTH ] | NETWORK-NUMBER [ mask NETWORK-NUMBER ] } [ route-map MAP-TAG ]...
Page 456: Network Area
DGS-6604 network area network area Use this command to enable OSPF routing with a specified Area ID. It enables this routing on interfaces with IP addresses that match the specified network address. Use the no parameter with this command to remove the configuration and disable OSPF routing on the interfaces.
Page 457: Next-Server
DGS-6604 next-server next-server Configure the next server in a DHCP client's boot process. Use the no form of this command to remove the boot server list. next-server IP-ADDRESS no next-server Syntax Description IP-ADDRESS The IP address of next-server in a DHCP client's boot process. Default Not configured Command Mode...
Page 458: Passive-Interface
DGS-6604 passive-interface passive-interface Use the passive-interface command to disable sending OSPF protocol packets on an interface. To re-enable sending and receiving routing updates, use the no form of this command. passive-interface IFNAME no passive-interface IFNAME Syntax Description IFNAME Specifies a layer 3 interface (VLAN). Default Routing updates are sent on the interface.
Page 459: Passive-Interface (Ipv6 Ospf)
DGS-6604 passive-interface (IPv6 OSPF) passive-interface (IPv6 OSPF) To disable sending IPv6 OSPF protocol packets on an interface, use the passive-interface command. To re-enable sending and receiving routing updates, use the no form of this command. passive-interface IFNAME no passive-interface IFNAME Syntax Description IFNAME Interface type and number i.e VLAN 1.
Page 460: Passive Interface (Rip)
DGS-6604 passive interface (RIP) passive interface (RIP) To disable sending routing updates on an interface, use the passive-interface command. To re-enable sending routing updates, use the no form of this command. passive-interface IFNAME no passive-interface IFNAME Syntax Description IFNAME Specifies the Interface type and Interface number. Default Routing updates are sent on the interface.
Page 461: Passive-Interface (Rip Ipv)
DGS-6604 passive-interface (RIP IPv6) passive-interface (RIP IPv6) To disable sending routing updates on an interface, use the passive-interface command . To re-enable sending routing updates, use the no form of this command. passive-interface IFNAME no passive-interface IFNAME Syntax Description IFNAME Specifies the Interface type and Interface number.
Page 462: Password Recovery
DGS-6604 password recovery password recovery To configure the security password recovery mechanism, use the password recovery command. password-recovery Syntax None Default None Command Mode reset configuration. Usage Guideline It is necessary to authenticate a user for access management. The pairing of username and password is a basic authenticating mechanism.
Page 463 Do you want to force switching authentication function of AAA modules to do local authentication for console type (y/n) [n]?y Switch(reset-config)# logout User Access Verification Username: alex Password: Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.014 Copyright (c) 2010 D-Link Corporation. All rights reserved. DGS-6600:15# CLI Reference Guide...
Page 464 DGS-6604 password recovery This example shows the situation when user account is full. User could use show username command to find the existent user account, when the number of user account reaches to maximum and the user wants to add a new account, the error message will be prompt. Switch(reset-config)#show username Password Encryption : Disabled Username...
Page 465 DGS-6604 password recovery This example shows how to verify the configuration: Switch(reset-config)#show username Password Encryption : Disabled Username Access Level Password Encrypted --------------------------------------------------------------------------- ----- alex 123456 Total Entries: 1 Switch(reset-config)# Switch reset-config)#show aaa Console Session: Login authentication: Local Authentication: yes Enable authentication: Local Authentication: yes Telnet Session:...
Page 466: Password Encryption
DGS-6604 password encryption password encryption Use the password encryption command to enable encryption of the password defined by both: • the username command - and - • the enable command before they are stored in the configuration file. Using the no command will disable the encryption.
Page 467: Periodic
DGS-6604 periodic periodic Use the periodic command to specify the period of time to be covered in a time range profile. periodic { daily HH:MM to HH:MM | monthly DATE HH:MM to [DATE] HH:MM | weekly WEEKLY-DAY HH:MM to [ WEEKLY-DAY ] HH:MM } Syntax Description daily HH:MM to Specifies the time of day with an hour:minute format HH:MM, using a 24-hour...
Page 468: Permit | Deny (Ip Access-List)
DGS-6604 permit | deny (ip access-list) permit | deny (ip access-list) Use the permit command to define the rule for packets to be access based on their IP header information. Use the no permit command to remove a permit entry. Use the deny command to add a deny entry. Use the no deny command to remove a deny entry.
Page 469 DGS-6604 permit | deny (ip access-list) OPERATOR PORT (Optional) Compares source or destination port. OPERATOR can be lt (less than, match on a lower port number), gt (greater than, match on a greater port), eq (equal, match on a specific port). The PORT argument can be the L4 TCP/UDP source or destination port, as specified by a number from 0 to 65535.
Page 470 DGS-6604 permit | deny (ip access-list) Switch(config)# ip access-list extended Strict-Control Switch(config-ip-ext-acl)# permit tcp any 10.20.0.0 255.255.0.0 Switch(config-ip-ext-acl)# permit tcp any host 10.100.1.2 Switch(config-ip-ext-acl)# permit icmp any any Switch(config-ip-ext-acl)# exit Verify the settings by entering the show access-list command. CLI Reference Guide...
Page 471: Permit | Deny (Ipv6 Access List)
DGS-6604 permit | deny (ipv6 access list) permit | deny (ipv6 access list) Use the permit command to add an entry to the IPv6 access-list. Use the no permit command to remove a permit entry from the IPv6 access-list. Use the deny command to add a deny entry to the IPv6 access-list.
Page 472 DGS-6604 permit | deny (ipv6 access list) Syntax Description PROFILE-NAME Used with the no form of the commands, this option, time-range (without PROFILE-NAME), means to remove the setting of an active timer-period, rather than remove the whole entry. PRIORITY The range is 1 to 65535. The lower the number represents a better priority. It is used as the rule sequence number.
Page 473: Permit | Deny (Mac Access-List)
DGS-6604 permit | deny (mac access-list) permit | deny (mac access-list) Use the permit command to define the rule for packets to be based on their MAC address. Use the deny command to define the rule for packets that are to be denied.
Page 474 DGS-6604 permit | deny (mac access-list) Command Mode MAC access-list extended configuration Usage Guideline The time-range profile must be created before it can be specified in the statement. Otherwise, an error message will be displayed. Multiple entries can be added to the list; use permit for one entry and use deny for the other entry.
Page 475: Ping
DGS-6604 ping ping Use ping to diagnose basic network connectivity. ping [OPTIONS] { IP-ADDRESS | IPV6-ADDRESS } Syntax Description OPTIONS (Optional) The option can be any combination of the following parameters: Adapt to return interval of packets. That is to send packets at approximately the rate at which they are received.
Page 476 DGS-6604 ping -w: 0 (Don't stop) -W: 1 second Command Mode Management interface configuration or User EXEC Usage Guideline The ping command sends an echo request packet to an address, and then awaits a reply. Ping output can help to evaluate path-to-host reliability, delays over the path, and whether the host can be reached or is functioning.
Page 477: Poe Port Priority
DGS-6604 poe port priority poe port priority Use this command to configure the priority of power-sourcing for ports. Use the no poe port priority command to return to the default settings. poe port priority {1st | 2nd | 3rd} no poe port priority Syntax Description {1st | 2nd | 3rd} The 1st, 2nd and 3rd port priority.
Page 478: Poe Port Description
DGS-6604 poe port description poe port description Use the poe port description command to configure the PoE port specific description. Use no form of this command to clear the existed description. poe port description TEXT no poe port description Syntax Description description String that describes the PoE ports specific information.
Page 479: Poe Service-Policy
DGS-6604 poe service-policy poe service-policy Use the command to configure power service policy for whole system's usage under power shortage condition. poe service-policy { preemptive | non-preemptive } Syntax Description non-preemptive The power will not be provided to the new PD connected port regardless of port priority setting if the unit enters into critical section.
Page 480: Poe Power-Inline
DGS-6604 poe power-inline poe power-inline Use this command to configure the power management mode on the Power over Ethernet (PoE) ports. poe power-inline { auto | never | static [ max MAX-WATTAGE ] } [ time-range] [PROFILE-NAME Syntax Description auto Enable powered-device detection.
Page 481 DGS-6604 IEEE802.3af, it will be 16.9785W. This design is also for the better conformance of DGS-6600's PoE functionality. But we strongly recommend using 15.4W as the maximum power threshold in static mode. If PD only needs 15.4W, but the port is configured as maximum power threshold. That means PoE system will take 17W from system power budget and 1.6W will be wasted! The time range function could be also applied on PoE with a per-port based methodology.
Page 482: Police
DGS-6604 police police To configure traffic policing using single rate, use the police command in policy- map class configuration mode. To remove traffic policing from the configuration, use the no form of this command. police BPS [BURST-NORMAL] [BURST-MAX] exceed-action ACTION [violate-action ACTION] no police BPS [BURST-NORMAL] [BURST-MAX] exceed-action ACTION [violate-action ACTION] Syntax Description...
Page 483 DGS-6604 police Syntax Description ACTION Action to take on packets. Specifies one of the following keywords: "drop-Drops the packet. "set-dscp-transmit value-Sets the IP differentiated services code point (DSCP) value and transmits the packet with the new IP DSCP value. "transmit-Transmits the packet. The packet is not altered. Default None Command Mode...
Page 484 DGS-6604 police Later it is realized that a two rate police should be applied to class-movie traffic and a two rate police (police cir command) is added. The newer police cir command will overwrite the previous police command setting. Switch(config)# policy-map police-map1 Switch(config-pmap)# class class-movie Switch(config-pmap-c)# police cir 8000 pir 1000 exceed-action drop violate- action drop...
Page 485 DGS-6604 police is the number of bytes specified as the normal burst size). The exceed bucket is initially full (the full exceed bucket size is the number of bytes specified in the maximum burst size). The tokens for both the conform and exceed token buckets are updated based on the token arrival rate, or committed information rate (CIR).
Page 486 DGS-6604 police In this particular example, traffic policing is configured with an average rate at 8000 bits per second and the normal burst size at 1000 bytes for all packets ingress at eth 3.1: Switch(config)# class-map access-match Switch(config-cmap)# match access-list acl_rd Switch(config-cmap)# exit Switch(config)# policy-map police-setting Switch(config-pmap)# class access-match...
Page 487: Police Aggregate
DGS-6604 police aggregate police aggregate To configure a named aggregate policer as the policy for a traffic class in a policy map, use police aggregate command in the policy map class configuration mode. To delete the name aggregate policer from class policy, use the no form of this command.
Page 488: Police Cir
DGS-6604 police cir police cir To configure traffic policing using two rates, the committed information rate (CIR) and the peak information rate (PIR), use the police cir command in policy-map class configuration mode. To remove two-rate traffic policing from the configuration, use the no form of this command police cir CIR [bc CONFORM-BURST] pir PIR [be PEAK-BURST] [exceed-action ACTION [violate-action ACTION]]...
Page 489 DGS-6604 police cir violate-action: equals exceed-action Command Mode Policy map class configuration Usage Guideline As a packet arrives at a port, the packet will be initialized with a color. This color will be used in control of congestion. If the policer is operated in color blind mode, the packet is re-colored and the actions are taken based on the policer metering result.
Page 490 DGS-6604 police cir "The Tp token bucket is updated at the PIR value. The Tp token bucket can contain up to the peak burst (Be) value. Updating Token Buckets The following scenario illustrates how the token buckets are updated: A packet of B bytes arrives at time t. The last packet arrived at time t1. The CIR and the PIR token buckets at time t are represented by Tc(t) and Tp(t), respectively.
Page 491 DGS-6604 police cir Example Example In the following example, two-rate traffic policing is configured on a class called police to limit traffic to an average committed rate of 64 kbps and a peak rate of 128 kbps, and the policy map named policy1 is attached to eth3.1. Switch(config)# class-map police Switch(config-cmap)# match access-list 101 Switch(config-cmap)# policy-map policy1...
Page 492: Policy-Map
DGS-6604 policy-map policy-map To enter policy-map configuration mode and create or modify a policy map that can be attached to one or more interfaces as a service policy, use the policy-map command in global configuration mode. To delete a policy map, use the no form of this command.
Page 493 DGS-6604 policy-map second class is the default class, named class-default to which packets that do not satisfy the defined classes are included. Switch(config)# class-map class1 Switch(config-cmap)# match access-list acl_rd Switch(config-cmap)# exit Switch(config)# policy-map policy Switch(config-pmap)# class class1 Switch(config-pmap-c)# set ip dscp 46 Switch(config-pmap-c)# exit Switch(config-pmap)# class class-default Switch(config-pmap-c)# set ip dscp 00...
Page 494: Port-Channel Load-Balance
DGS-6604 port-channel load-balance port-channel load-balance Use port-channel load-balance to configure the load balance algorithm that the switch uses to distribute packets across ports in the same channel. To reset the load distribution to the default settings, use the no from of this command. port-channel load-balance {dst-ip | dst-mac | src-dst-ip | src-dst-mac | src-ip | src-mac} no port-channel load-balance Syntax Description...
Page 495: Power-Saving
DGS-6604 power-saving power-saving Use the power-saving command to enable "Power Saving" function in the device. And use the no form of this command to disable "Power Saving" function. power-saving {phy} no power-saving {phy} Default Disabled Command Mode Global configuration. Usage Guideline The "power-saving"...
Page 496: Pvid Vlan-Id
DGS-6604 pvid VLAN-ID pvid VLAN-ID Use the pvid interface configuration command to specify the native VLAN for the trunk or hybrid interface. Use default interface command to reset to default setting. pvid VLAN-ID default pvid Syntax Description pvid VLAN-ID Specifies the PVID for the trunk or hybrid interface. Default pvid VLAN-ID: 1 .(If the port is set to trunk/hybrid mode) Command Mode...
Page 497: Qos Aggregate-Policer
DGS-6604 qos aggregate-policer qos aggregate-policer To define a named aggregate policer for use in policy maps, use the qos aggregate-policer command in global configuration mode. To delete a named aggregate policer, use the no form of this command. The qos aggregate-policer command is for single rate policing and the qos aggregate-policer cir command is for two rate policing.
Page 498 DGS-6604 qos aggregate-policer Syntax Description PEAK-BURST PEAK-BURST Specifies the burst size for the second token bucket in bytes. min: max: 16MB default :4KB. exceed-action Specifies action to take on packets that exceed the rate limit. violation-action (Optional) Specifies action to take on packets that violate the normal and maximum burst sizes for singe rate policing.
Page 499 DGS-6604 qos aggregate-policer Example In the following example, an aggregate policer named agg-policer5 with single rate two colors is configured. This named aggregator policer is applied as the service policy for the class1 and class2 traffic class in the policy2 policy map. Switch(config)# qos aggregate-policer agg-policer5 10000 128 exceed-action drop Switch(config)# policy-map policy2...
Page 500: Qos Bandwidth
DGS-6604 qos bandwidth qos bandwidth To set the received bandwidth limit values for an interface, use the bandwidth ingress command in interface configuration mode. To set the transmit bandwidth limit values on an interface use the bandwidth egress command in interface configuration mode.
Page 501: Qos Cos
DGS-6604 qos cos qos cos To configure the default class of service (CoS) value of a port, use the qos cos command in interface configuration mode. qos cos COS-VALUE Syntax Description COS-VALUE Assigns a default CoS value to a port. This CoS will be with the incoming CoS of the untagged packet received by the port.
Page 502: Qos Deficit-Round-Robin
DGS-6604 qos deficit-round-robin qos deficit-round-robin Use the qos command in interface configuration mode to enable the Deficit Round Robin (DRR)/Weighted Round Robin (WRR) packet scheduling mechanism. To restore the packet scheduling mechanism, use the default form of this command. qos {deficit-round-robin [COS-QUEUE quantum WEIGHT] |weight-round-robin [COS-QUEUE weight WEIGHT]} default qos Syntax Description...
Page 503 DGS-6604 qos deficit-round-robin All queues are serviced until their credit counter is zero or negative and a packet is transmitted completely. As this condition happens, the credits are replenished. When the credits are replenished, as a quantum of credits are added to each CoS queue credit counter.
Page 504 DGS-6604 qos deficit-round-robin In the following example, Weight round robin is configured on eth 3.1. For this case, queue 5, 6, and 7 are set to strict priority mode; weight for queue 4 is set to 4 packets; weight for queue 2, 1, and 0 are set to 2 packets. Switch(config)# interface eth3.1 Switch(config-if)# qos weight-round-robin 0 weight 2 Switch(config-if)# qos weight-round-robin 2 weight 2...
Page 505: Qos Dscp-Mutation
DGS-6604 qos dscp-mutation qos dscp-mutation To attach an ingress differentiated-services-code-point (DSCP) mutation map to the interface, use the qos dscp-mutation command in interface configuration mode. To remove the ingress DSCP mutation map from the interface, use the no form of this command. qos dscp-mutation DSCP-MUTATION-TABLE-NAME no qos dscp-mutation DSCP-MUTATION-TABLE-NAME Syntax Description...
Page 506: Qos Map Cos-Color
DGS-6604 qos map cos-color qos map cos-color To define the CoS to color map for mapping of a packet's initial color, use the qos map cos-color command in interface configuration mode. To return the map to default setting, use the no form of this command. qos map cos-color COS-LIST to { green | yellow | red} no qos map cos-color Syntax Description...
Page 507: Qos Map Dscp-Color
DGS-6604 qos map dscp-color qos map dscp-color To define the DSCP to color map for mapping of packet's initial color, use the qos map dscp-color command in interface configuration mode. To return the map to the default setting, use the no form of this command. qos map dscp-color DSCP-LIST to { green | yellow | red} no qos map dscp-color Syntax Description...
Page 508: Qos Map Dscp-Cos
DGS-6604 qos map dscp-cos qos map dscp-cos To define a differentiated services code point (DSCP)-to-class of service (CoS) map, use the qos map dscp-cos command in global configuration mode. To remove a prior entry, use the no form of this command. qos map dscp-cos DSCP-LIST to COS-VALUE no qos map dscp-cos Syntax Description...
Page 509: Qos Map Dscp-Mutation
DGS-6604 qos map dscp-mutation qos map dscp-mutation To define a named differentiated services code point (DSCP) mutation map, use the qos map dscp-mutation command in global configuration mode. To return to the default mapping, use the no form of this command. qos map dscp-mutation MAP-NAME INPUT-DSCP-LIST to OUTPUT-DSCP no qos map dscp-mutation MAP-NAME Syntax Description...
Page 510: Qos Trust
DGS-6604 qos trust qos trust To set the trust state of a port, use the qos trust command in interface configuration mode; to trust either the CoS field or the DSCP field of the arriving packet for subsequent QoS operation. qos trust { cos | dscp } Syntax Description Specifies that the CoS bits of the arriving packets are trusted for subsequent...
Page 511: Reboot
DGS-6604 reboot reboot Use this command to reboot a module on the specified slot. The module can be either a control module or a line card control module. reboot [unit UNIT-ID ] Syntax Description UNIT-ID Specifies the unit id. Default None Command Mode.
Page 512: Redistribute
DGS-6604 redistribute redistribute Use redistribute to redistribute routes from one routing domain into BGP. Use no command to disable route redistribution. redistribute PROTOCOL [route-map MAP-NAME] no redistribute PROTOCOL Syntax Description PROTOCOL Specifies the protocol whose routes are to be redistributed. It can be one of the following keywords connected, ospf, rip static.
Page 513: Redistribute (Ospf)
DGS-6604 redistribute (OSPF) redistribute (OSPF) Use redistribute to redistribute routes from other routing domain into OSPF routing domain. Use the no form of the command to disable redistribution. redistribute PROTOCOL [metric METRIC-VALUE] [metric-type TYPE-VALUE] no redistribute PROTOCOL Syntax Description PROTOCOL The source protocol from which routes are being redistributed from.
Page 514 DGS-6604 redistribute (OSPF) 4. If the "default metric" is not configured, and the route is redistributed from BGP. The metric will be 1. 5. If the "default metric" is not configured, and the route is not redistributed from BGP. the metric will be 20. BGP, RIP can be redistributed to OSPF.
Page 515: Redistribute (Ipv6 Ospf)
DGS-6604 redistribute (IPv6 OSPF) redistribute (IPv6 OSPF) Use redistribute to redistribute routes from other routing domains into the IPv6 OSPF routing domain. Use the no form of the command to disable redistribution. redistribute PROTOCOL [metric METRIC-VALUE] [metric-type TYPE-VALUE] no redistribute PROTOCOL Syntax Description PROTOCOL Source protocol from which routes are being redistributed.
Page 516 DGS-6604 redistribute (IPv6 OSPF) The default-metric command cannot be used to affect the metric used to advertise connected routes. Example In the example, IPv6 OSPF redistributes any prefixes that have been learned through IPv6. Switch> enable Switch# configure terminal Switch(config)# router ipv6 ospf Switch(config-router)# redistribute rip metric 10 CLI Reference Guide...
Page 517: Redistribute (Rip)
DGS-6604 redistribute (RIP) redistribute (RIP) Use redistribute to redistribute routes from one routing domain into another routing domain. Use the no form of the command to disable redistribution. redistribute PROTOCOL [metric METRIC-VALUE] no redistribute PROTOCOL Syntax Description PROTOCOL Source protocol from which routes are being redistributed. It can be one of the following keywords: bgp, connected, ospf, static.
Page 518 DGS-6604 redistribute (RIP) 3. If the metric is specified as 0, the metric for the redistributed route from other protocols to RIP will be 1. If the default-metric is not specified, then the original metric from the redistributed protocol will be transparently carried through. 1.
Page 519: Redistribute (Rip Ipv)
DGS-6604 redistribute (RIP IPv6) redistribute (RIP IPv6) Use redistribute to redistribute routes from one routing domain into another routing domain. Use no command to disable redistribution. redistribute PROTOCOL [metric METRIC-VALUE] no redistribute PROTOCOL Syntax Description PROTOCOL Source protocol from which routes are being redistributed. It can be one of the following keywords: connected, ospf, and static.
Page 520 DGS-6604 redistribute (RIP IPv6) Example The following example causes the specified OSPF process routes to be redistributed into an RIPng domain. The metric will be remapped to 10. Switch > enable Switch # configure terminal Switch (config) # router ipv6 rip Switch (config-router) # redistribute ospf metric 10 CLI Reference Guide...
Page 521: Remote-Span
DGS-6604 remote-span remote-span Use the command to specify a VLAN as a RSPAN VLAN. Use the no form of the command to revert to a non RSPAN VLAN. remote-span no remote-span Syntax Not applicable Default 802.1q VLAN Command Mode VLAN config mode Usage Guideline Use the remote-span command in vlan config mode to specify a VLAN as a RSPAN VLAN.
Page 522: Resequence Access-List
DGS-6604 resequence access-list resequence access-list Use this command to re-sequence the priority of the access-list entries in an access-list (mac, ip or ipv6 access list). resequence access-list NAME STARTING-SEQUENCE-NUMBER INCREMENT Syntax Description NAME The name of the MAC, IP or IPv6 access-list to be configured. It can accept up to 32 characters.
Page 523: Revision
DGS-6604 revision revision To set the revision number for the MST configuration, use the revision command. To return to the default settings, use the no form of this command. revision REVISION no revision Syntax Description REVISION When a switch using the same given name but with a different revision level than another switch, then the two switches are considered members of different MST regions.
Page 524: Rmon Statistics
DGS-6604 rmon statistics rmon statistics Use the rmon collection stats interface configuration command to collect Ethernet group statistics, Use the no form of this command to return to disable RMON entry. rmon statistics ENTRY-NUMBER [owner NAME] no rmon statistics ENTRY-NUMBER Syntax Description ENTRY-NUMBER Remote Network Monitoring (RMON) table index.
Page 525: Route-Map
DGS-6604 route-map route-map Use route-map to add the policy routing entry. Use the no form of the command to remove a policy routing entry. route-map MAP-NAME { permit | deny } SEQUENCE-NUM no route-map MAP-NAME [ permit SEQUENCE-NUM | deny SEQUENCE-NUM ] Syntax Description MAP-NAME A meaningful name for the route map.
Page 526 DGS-6604 route-map Example This example shows how to add the policy routing entry with name "myPolicy": Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)#match community Mycommunity Switch(config-route-map)#set weight 1000 Switch(config-route-map)#end Switch# Verify the settings by entering the show running-config command. CLI Reference Guide...
Page 527: Router Bgp
DGS-6604 router bgp router bgp Use this command to enable (configure) BGP routing process. Use the no form of the command to remove a BGP routing process. router bgp AS-NUMBER no router bgp AS-NUMBER Syntax Description AS-NUMBER Specifies the number of an autonomous system that identifies the router to other BGP routers.
Page 528: Router-Id
DGS-6604 router-id router-id Use this command to specify a router ID for the OSPF process. Use the no form of the command to revert to the automatic determination of router-id. router-id IP-ADDRESS no router-id Syntax Description IP-ADDRESS Specifies the router ID in IPv4 address format. Default The router-id is automatically chosen based on the highest IP address present on the router.
Page 529: Router-Id (Ipv)
DGS-6604 router-id (IPv6) router-id (IPv6) To assign a fixed router ID, use the router-id command in router configuration mode, and force IPv6 OSPF routing process with the previous IPv6 OSPF router ID. To disable this function, use the no form of this command. router-id IP-ADDRESS no router-id Syntax Description...
Page 530: Router Ipv6 Rip
DGS-6604 router ipv6 rip router ipv6 rip To configure an IPv6 RIP routing process, use the router ipv6 rip command in global configuration mode. To remove a routing process, use the no form of this command. router ipv6 rip no router ipv6 rip Syntax None Default...
Page 531: Router Ipv6 Ospf
DGS-6604 router ipv6 ospf router ipv6 ospf To enable the IPv6 OSPF routing process, use the router ipv6 ospf command in global configuration mode. To disable this function, use the no form of this command. router ipv6 ospf [PROCESS-ID] no router ipv6 ospf [PROCESS-ID] Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an OSPF routing process.
Page 532: Router Ospf
DGS-6604 router ospf router ospf To configure an Open Shortest Path First (OSPF) routing process, use the router ospf command in global configuration mode. To terminate an OSPF routing process, use the no form of this command. router ospf no router ospf Syntax None Default...
Page 533: Router Rip
DGS-6604 router rip router rip Use the command to configure the RIP routing process. To turn off the RIP routing process, use the no form of this command. router rip no router rip Syntax None Default Not configured Command Mode Global configuration Usage Guideline This command is used to enable the RIP function and enter the Router...
Page 534: Send-Lifetime
DGS-6604 send-lifetime send-lifetime To set the time period during which an authentication key on a key chain is valid to be sent, use the send-lifetime command in key chain key configuration mode. send-lifetime START-TIME {infinite | END-TIME | duration SECONDS} Syntax Description START-TIME The beginning time that the key specified, by the key command, is valid to be...
Page 535 DGS-6604 send-lifetime Example The following example configures a key chain named chain1. Key 1 named "forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from 2:00 p.m. to 3:00 p.m. Key3 named "forkey3string" will be accepted from 2:30 p.m.
Page 536: Server
DGS-6604 server server Set up a server for different types of methods. Use the no form of this command to delete a server. server {tacacs | xtacacs} IP-ADDRESS [auth-port PORT-NUMBER] [timeout SECONDS] [retransmit COUNT ] server tacacs+ IP-ADDRESS [auth-port PORT-NUMBER] {key KEY-STRING | no-encrypt} server radius IP-ADDRESS [auth-port PORT-NUMBER] {key KEY-STRING | no-encrypt} [timeout SECONDS ] [retransmit COUNT ] no server {tacacs | xtacacs | tacacs+ | radius} IP-ADDRESS...
Page 537 DGS-6604 server dependent. However it is recommended to be 3 and use them as a backup server scheme. The encryption key is used to encrypt and authenticate all communication between the TACACS+/RADIUS client and server. The same key must be configured on the client and the server.
Page 538: Service Dhcp
DGS-6604 service dhcp service dhcp Use this command to enable a Dynamic Host Configuration Protocol (DHCP) server features on the switch. Use the no form of this command to disable DHCP server features. service dhcp no service dhcp Syntax None Default Disabled Command Mode...
Page 539: Service-Policy
DGS-6604 service-policy service-policy To attach a policy map to an input interface use the service-policy command in the interface configuration mode. To remove a service policy from an input interface, use the no form of this command. service-policy NAME no service-policy NAME Syntax Description NAME The name of a service policy map (created using the policy-map command) to...
Page 540 DGS-6604 service-policy The cust1-classes policy map is configured and then attached to eth3.1 and eth3.2 by the following commands. Switch(config)# class-map gold Switch(config-cmap)# match cos 6 Switch(config-cmap)# exit Switch(config)# class-map silver Switch(config-cmap)# match cos 5 Switch(config-cmap)# exit Switch(config)# class-map bronze Switch(config-cmap)# match cos 0 Switch(config-cmap)# exit Switch(config)# policy-map cust1-classes...
Page 541 DGS-6604 service-policy The cust2-classes policy map is configured and then attached to eth4.1by the following commands.: Switch(config)# policy-map cust2-classes Swtich(config-pmap)# class gold Switch(config-pmap-c)# police 128 256 exceed-action set-dscp-transmit 0 Switch(config-pmap-c)# exit Switch(config-pmap)# class silver Switch(config-pmap-c)# police 128 256 exceed-action set-dscp-transmit 0 Switch(config-pmap-c)# exit Switch(config-pmap)# class bronze Switch(config-pmap-c)# police 128 256 exceed-action set-dscp-transmit 0...
Page 542 DGS-6604 Use the set command in policy map class configuration mode to set the new precedence field, DSCP field, and CoS field of the out-going packet. The user can also directly specify the CoS queue for the packet. set { [ip] precedence PRECEDENCE | [ip] dscp DSCP | cos COS | internal-cos COS} no set { [ip] precedence PRECEDENCE | [ip] dscp DSCP | cos COS | internal-cos COS} Syntax Description precedence...
Page 543 DGS-6604 DSCP of 10 and policed by a singe rate policer with an average rate set to128 Kbits per second and the normal burst size set to 256 Kbytes. Switch(config)# policy-map policy1 Switch(config-pmap)# class class1 Switch(config-pmap-c)# set ip dscp 10 Switch(config-pmap-c)# police 128 256 exceed-action set-dscp-transmit 3 Switch(config-pmap-c)# exit Switch(config-pmap)# exit...
Page 544: Set As-Path
DGS-6604 set as-path set as-path Use this command to modify an autonomous system path for BGP routes. To delete an entry, use the no form of this command. set as-path prepend AS-NUMBER-LIST no set as-path prepend AS-NUMBER-LIST Syntax Description AS-NUMBER-LIST Appends the string following the keyword prepended to the autonomous systempath of the route, that is matched by the route map.
Page 545: Set Community
DGS-6604 set community set community Use this command to set the BGP communities attribute, to delete an entry, use the no form of this command. set community { COMMUNITY-NUMBER [additive] | WELL-KNOWN-COMMUNITY [additive] | none } no set community {COMMUNITY-NUMBER [additive] | WELL-KNOWN-COMMUNITY [additive] Syntax Description COMMUNITY- The community number value.
Page 546 DGS-6604 set community Example This example shows how to set a community (0:1) to the route map entry with name myPolicy: Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)# set community 0:1 Switch(config-route-map)# Verify the settings by entering the show route-map command. CLI Reference Guide...
Page 547: Set Default Interface
DGS-6604 set default interface set default interface Use the command in route-map configuration mode to set the interface to route the packets that pass a match clause of a route map and there is no route for the packets. To remove the setting, use the no form of the command to remove the setting.
Page 548: Set Ip Next-Hop
DGS-6604 set ip next-hop set ip next-hop Use this command to set the next-hop to route the packets that pass a match clause of a route map. Use the no command to remove the setting. set ip next-hop IP-ADDRESS no set ip next-hop [IP-ADDRESS] Syntax Description IP-ADDRESS Specify the next hop to route the packet.
Page 549 DGS-6604 set ip next-hop Switch(config)# ip access-list Strict-Control Switch(config-ip-acl)# permit 10.1.1.0 255.255.255.0 any Switch(config-ip-acl)# exit Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)# match ip address Strict-Control Switch(config-route-map)# set ip next-hop 120.1.2.2 Switch(config-route-map)# exit Switch(config)# interface vlan100 Switch(config-router)# ip policy route-map myPolicy You can verify your settings by entering the show route-map privileged EXEC command.
Page 550: Set Ip Precedence
DGS-6604 set ip precedence set ip precedence Use the set ip precedence command in route-map configuration mode to set the precedence value in the IP header. Use the no form of the command to remove the setting. set ip precedence {NUMBER | NAME} no set ip precedence {NUMBER | NAME} Syntax Description NUMBER | NAME...
Page 551: Set Interface
DGS-6604 set interface set interface Use the command in route-map configuration mode to set the interface to route the packets that pass a match clause of a route map. To remove the setting, use the no form of the command to remove the setting. set interface INTERFACE-NAME no set interface [INTERFACE-NAME] Syntax Description...
Page 552: Set Ipv6 Default Next-Hop
DGS-6604 set ipv6 default next-hop set ipv6 default next-hop Use the command in route-map configuration mode to set the next hop to route the packets that pass a match clause of a route map and there is no route for the packets. To remove the setting, use the no form of the command to remove the setting.
Page 553 DGS-6604 set ipv6 default next-hop Switch(config)# ipv6 access-list extended Strict-Control Switch(config-ip-acl)# permit 2000::3:4 ffff::0 any Switch(config-ip-acl)# exit Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)# match ipv6 address Strict-Control Switch(config-route-map)# set ipv6 default next-hop 100::BEAE:C5FF:FE9A Switch(config-route-map)# exit Switch(config)# interface vlan100 Switch(config-router)# ip policy route-map myPolicy You can verify your settings by entering the show route-map privileged EXEC command.
Page 554: Set Ip Default Next-Hop
DGS-6604 set ip default next-hop set ip default next-hop Use the command in route-map configuration mode to set the next hop to route the packets that pass a match clause of a route map and there is no route for the packets.
Page 555 DGS-6604 set ip default next-hop Lastly, in Vlan Interface configuration mode set the conditionally redistributed to previously created route-map, myPolicy. Switch(config)# ip access-list Strict-Control Switch(config-ip-acl)# permit 10.1.1.0 255.255.255.0 any Switch(config-ip-acl)# exit Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)# match ip address Strict-Control Switch(config-route-map)# set ip default next-hop 120.1.2.2 Switch(config-route-map)# exit Switch(config)# interface vlan100...
Page 556: Set Ipv6 Next-Hop
DGS-6604 set ipv6 next-hop set ipv6 next-hop Use this command to set the next-hop to route the packets that pass a match clause of a route map. Use the no command to remove the setting. set ipv6 next-hop IPv6-ADDRESS no set ipv6 next-hop [IPv6-ADDRESS] Syntax Description IPv6-ADDRESS Specify the next hop to route the packet.
Page 557 DGS-6604 set ipv6 next-hop Lastly, in Vlan Interface configuration mode set the conditionally redistributed to previously created route-map, myPolicy. Switch(config)# ipv6 access-list extended Strict-Control Switch(config-ip-acl)# permit 2000::3:4 ffff::0 any Switch(config-ip-acl)# exit Switch(config)# route-map myPolicy permit 1 Switch(config-route-map)# match ipv6 address Strict-Control Switch(config-route-map)# set ipv6 next-hop 100::BEAE:C5FF:FE9A Switch(config-route-map)# exit Switch(config)# interface vlan100...
Page 558: Set Default Interface
DGS-6604 set default interface set default interface Use the command in route-map configuration mode to set the interface to route the packets that pass a match clause of a route map and there is no route for the packets. To remove the setting, use the no form of the command to remove the setting.
Page 559: Set Origin
DGS-6604 set origin set origin To set the BGP origin code, use the set origin command in route-map configuration mode. To delete an entry, use the no form of this command. set origin {igp | egp | incomplete} no set origin {igp | egp | incomplete} Syntax None Default...
Page 560: Set Weight
DGS-6604 set weight set weight To specify the BGP weight for the routing table, use the set weight command in route-map configuration mode. To delete an entry, use the no form of this command. set weight NUMBER no set weight NUMBER Syntax Description NUMBER Weight value.
Page 561: Sflow Sflow
DGS-6604 sflow sflow Use the sflow command to enable sFlow functions. Use the no form of this command to disable sFlow functions. sflow no sflow Syntax None Default sFlow is disabled by default. Command Mode Global configuration mode. Usage Guideline When sFlow is disabled, Receivers stop to countdown and do not send sFlow datagrams.
Page 562: Sflow Receiver
DGS-6604 sflow receiver sflow receiver Use the sflow receiver command to configure a Receiver for the sFlow agent. Receivers cannot be added to or removed from the sFlow agent. Use the no form of this command to reset one Receiver or all Receivers to the default settings.
Page 563 DGS-6604 sflow receiver string. Once the owner is configured, it cannot be changed directly. It can only be reset by the no sflow receiver command. Use the no sflow receiver command to reset the Receiver. When a Receiver expired, the Receiver is disabled and the Receiver entry will be reset to the default settings.
Page 564: Sflow Sampler
DGS-6604 sflow sampler sflow sampler Use the sflow sampler command to create/configure a Sampler for the sFlow agent. Use the no form of this command to delete one Sampler or all Samplers. sflow sampler INSTANCE [receiver RECEIVER][sampling-rate RATE][max-header-size SIZE] no sflow sampler [INSTANCE] Syntax INSTANCE The instance index if multiple Samplers are associated with one interface.
Page 565 DGS-6604 sflow sampler Example This example shows how to create/configure the Sampler of INSTANCE 1 with RECEIVER as 1, RATE as 1024 and SIZE as 128 bytes. switch(config-if)# sflow sampler 1 receiver 1 sampling-rate 1024 max-header- size 128 CLI Reference Guide...
Page 566: Sflow Poller
DGS-6604 sflow poller sflow poller Use the sflow poller command to create/configure a Poller for the sFlow agent. Use the no form of this command to delete one Poller or all Pollers. sflow poller INSTANCE [receiver RECEIVER][ interval SECONDS] no sflow poller [INSTANCE] Syntax INSTANCE The instance index if multiple Pollers are associated with one interface.
Page 567: Show Aaa
DGS-6604 show aaa show aaa Use show aaa to display the login/enable method list for all applications. show aaa [login | enable] [console | telnet | http | ssh] [brief] Syntax Description login (Optional) Displays the login authentication information enable (Optional) Displays the enable authentication information.
Page 568 DGS-6604 show aaa Examples This example shows how to display the login/enable method list for all applications. DGS-6604:15#show aaa Console Session: Login authentication: Local Authentication: yes Enable authentication: Group Name: serverlist1 Local Authentication: no IP Address Protocol Port Timeout Retransmit Key --------------- -------- ----- ------- ---------- ------------ 122.248.150.251 RADIUS 1812...
Page 569 DGS-6604 show aaa The following example displays brief information for authentication: DGS-6604:15#show aaa brief Application Method Server group Local --------------- ------- -------------------------------- ---------- console login console enable serverlist1 telnet login serverlist1 telnet enable login serverlist1 enable http login http enable DGS-6604:15# The following example displays brief information for enable authentication: DGS-6604:15#show aaa enable brief...
Page 570: Show Aaa Group Server
DGS-6604 show aaa group server show aaa group server Use this command show aaa group server to display the authentication servers by group name or the authentication servers for all groups. show aaa group server [GROUP-NAME] Syntax Description GROUP-NAME (Optional) Specifies the name of the server method list to be displayed.The valid length for server-group is 1 to 16.
Page 571: Show Access-Group
DGS-6604 show access-group show access-group Use this command to display how the mac, ip and ipv6 access-lists are applied to interfaces. show access-group [ interface INTERFACE-ID ] [ ip [ NAME ] | mac [ NAME ] | ipv6 [ NAME ]] Syntax Description interface (Optional) Specifies the interface to be displayed.
Page 572: Show Access-List
DGS-6604 show access-list show access-list Use this command to display the access-list configuration. show access-list [ ip NAME | mac NAME | ipv6 NAME] Syntax Description (Optional) Specifies to display a listing for all ip access-lists. (Optional) Specifies to display a listing for all mac access-lists. ipv6 (Optional) Specifies to display a listing for all ipv6 access-lists.
Page 573: Show Arp
DGS-6604 show arp show arp Use the show arp command to display the Address Resolution Protocol (ARP) cache. show arp [ ARP-MODE ] [IP-ADDRESS [ / MASK ] ] [ INTERFACE-ID ] Syntax Description ARP-MODE (Optional) Displays the entries that are in a specific ARP mode. This argument can be replaced by one of the following keywords: dynamic—Displays only dynamic ARP entries.
Page 574: Show Boot
DGS-6604 show boot show boot Use this command to display which is the next boot configuration and which is the next boot image file. show boot Syntax None Default None Command Mode User EXEC Usage Guideline None Example The following example shows the display information for the system boot information: Switch# show boot Boot loader version 1.00.004...
Page 575: Show Channel-Group
DGS-6604 show channel-group show channel-group Use this command to display the information of channel groups. show channel-group [ [channel [CHANNEL-NO] [ detail | neighbor | protocol]] | load-balance | sys-id ] Syntax Description CHANNEL-NO Channel group ID. channel (Optional) Display information for specified port-channels. detail (Optional) Display detailed channel group information.
Page 576 DGS-6604 show channel-group This example shows how to display the detailed information of all port-channels. Switch> show channel-group channel detail S - Device is sending Slow LACPDUs F - Device is sending fast LACPDU A - Device is in active mode. P - Device is in passive mode.
Page 577 DGS-6604 show channel-group This example shows how to display the protocol information for all port-channels. Switch> show channel-group channel protocol Group Protocol ------------------------ LACP Static Total Entries: 2 Switch> This example shows how to display the load balance information for all channel groups.
Page 578 DGS-6604 show channel-group This example shows how to display the system identifier information Switch> show channel-group sys-id 32765,00-02-4b-29-3a-00 Switch> This example shows how to display the information of all the port-channels in brief format. Switch> show channel-group Group Protocol ------------------------ LACP Static Total Entries: 2...
Page 579: Show Class-Map
DGS-6604 show class-map show class-map Use this command to display the class map configuration. show class-map [NAME] Syntax Description NAME (Optional) Name of the class map. The class map name can be a maximum of 32 alphanumeric characters. Default None Command Mode User EXEC or any configuration mode Usage Guideline...
Page 580: Show Clock
DGS-6604 show clock show clock Use this command to display the time and date information. show clock Syntax None Default None Command Mode EXEC mode or any configuration mode Usage Guideline This command will also indicate the clock source. The clock source can be one of "No Time Source"...
Page 581: Show Cpu-Protect Safeguard
DGS-6604 show cpu-protect safeguard show cpu-protect safeguard Use this command to display the settings and status of Safeguard Engine. show cpu-protect safeguard Syntax none Description Default none Command Mode Privileged EXEC mode Usage Guideline The command show cpu-protect safeguard is used to display the settings and status of Safeguard Engine.
Page 582: Show Cpu-Protect Type
DGS-6604 show cpu-protect type show cpu-protect type Use this command to show the rate-limit and statistics of CPU protection show cpu-protect type { PROTOCOL-NAME [UNIT-ID] | unit UNIT-ID } Syntax Description The configured rate-limit and statistics of the specified protocol on CM-Card PROTOCOL-NAME UNIT-ID] and all existing IO-Cards will be displayed if the optional...
Page 583 DGS-6604 show cpu-protect type The following example is a sample output of the show cpu-protect type arp command. The configured rate is 300 pps, and there exists one IO-card on slot 3. Switch# show cpu-protect type arp Type: arp Pps : 300 Slot Total Drop...
Page 584: Show Cpu-Protect Sub-Interface
DGS-6604 show cpu-protect sub-interface show cpu-protect sub-interface Use this command to show the rate-limit and statistics by sub-interface. show cpu-protect sub-interface { manage | protocol | route } [UNIT-ID] Syntax Description (Optional) Specify the unit id, that you want, to display the rate limit configuration UNIT-ID and statistics by sub-interface.
Page 585: Show Dos_Prevention
DGS-6604 show dos_prevention show dos_prevention Use this command to show DoS prevention status and related drop counters. show dos_prevention Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Displays information about DoS prevention. Example The following example shows the information of a DoS configuration example. User has configured to enable DoS on attacking type “Land Attack”, ”Blat Attack”...
Page 586: Show Dot1V
DGS-6604 show dot1v show dot1v Use the show dot1v command to display the setting for the configuration of VLAN protocols. show dot1v { protocol-group [ GROUP-ID [ , | - ] ] | interface [ INTERFACE-ID [ , | - ] ] } Syntax Description protocol-group Show the protocol VLAN table entry information.
Page 587: Show Dot1X
DGS-6604 show dot1x show dot1x Use this command to display information about the: 802.1X state, configuration, statistics, diagnostics, session statistics, or authentication client. show dot1x [interface INTERFACE-ID ] {auth-state | auth-configuration | statistics | diagnostics | session-statistics} Syntax Description interface (Optional) Specifies a port to display the authentication state, configuration, INTERFACE-ID statistics, diagnostics, or session statistics.
Page 588 DGS-6604 show dot1x This example shows how to display the authentication statistics for port eth4.1. Switch#show dot1x interface eth4.1 statistics eth4.1 EAPOL Frames RX: 0 EAPOL Frames TX: 0 EAPOL-Start Frames RX: 0 EAPOL-Logoff Frames RX: 0 EAPOL-Resp/Id Frames RX: 0 EAPOL-Resp Frames RX: 0 EAPOL-Req/Id Frames TX: 0 EAPOL-Req Frames TX: 0...
Page 589 DGS-6604 show dot1x This example shows how to display the authentication diagnostics for port eth4.1. Switch#show dot1x interface eth4.1 diagnostics eth4.1 EntersConnecting: 0 EAP-LogoffsWhileConnecting: 0 EntersAuthenticating: 0 SuccessesWhileAuthenticating: 0 TimeoutsWhileAuthenticating: 0 FailsWhileAuthenticating: 0 ReauthsWhileAuthenticating: 0 EAP-StartsWhileAuthenticating: 0 EAP-LogoffsWhileAuthenticating: 0 ReauthsWhileAuthenticated: 0 EAP-StartsWhileAuthenticated: 0 EAP-LogoffsWhileAuthenticated: 0 BackendResponses: 0...
Page 590: Show Dot1X Vlan
DGS-6604 show dot1x vlan show dot1x vlan Use this command to show the vlan assigned by dot1x module. show dot1x vlan Syntax None Default None Command Mode EXEC mode or any configuration mode Usage Guideline None Example This example shows the output of this command. Switch#show dot1x vlan Port -----------------...
Page 591: Show Dot1X User
DGS-6604 show dot1x user show dot1x user Use this command to show the local accounts for 802.1x authentication. show dot1x user Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example This example shows the output of this command. Switch#show dot1x user Username Password...
Page 592: Show Errdisable Recovery
DGS-6604 show errdisable recovery show errdisable recovery Use this command to display the error-disable recovery timer related setting. show errdisable recovery Syntax None. Default None Command Mode EXEC mode or any configuration mode. Usage Guideline You can use this command to verify the setting of error disable recovery timer. Example This example shows how to display the setting of error disable recovery timer.
Page 593: Show Enable Password
DGS-6604 show enable password show enable password Use this command to display the password of the privilege enable function show enable password [privilege LEVEL] Syntax Description privilege LEVEL (Optional) Specifies the privilege level. Default None Command Mode Privileged EXEC at privilege level 15 or any configuration mode at privilege level Usage Guideline Issuimg this command will display the password of the privilege enable function for either or both privilege level 12 or 15.
Page 594: Show Environment
DGS-6604 show environment show environment Use the show environment command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch. show environment [ fan | power | temperature ] Syntax Description (Optional) Display the detail and status of the switch fans . power (Optional) Display the detail and status of the switch power.
Page 595 DGS-6604 show environment Example The example shows how to display the H/W environmental information.This example includes the thermal sensor status, the operation temperature range, fan operation speed, fan status, and power status. Switch#show environment Environmental Status Slot Inlet temperature Center temperature Outlet temperature current/operation range current/operation range current/operation range ---- ----------------------- ----------------------- ----------------------...
Page 596 DGS-6604 show environment The table below describes the significant fields shown in the display for the power module Field Description Max power The configured maximum power for the unit. Used power The allocated power for the unit Power status In-operation: The power rectifier is in normal operation mode. failed: The power rectifier can't work normally.
Page 597: Show Gvrp Configuration
DGS-6604 show gvrp configuration show gvrp configuration Use the show gvrp command to display the settings for gvrp. show gvrp configuration [ interface INTERFACE-ID [ , | - ] ] Syntax Description interface Display the gvrp settings of the interface INTERFACE-ID (Optional) Specifies the interface to display.
Page 598 DGS-6604 show gvrp configuration This example shows how to display the GVRP configuration for port's eth3.5 to eth3.6. Switch# show gvrp configuration interface eth3.5-6 Port GVRP Status Join Leave Leave-All (1/100 Secs) ------------------------------------------------------------- eth3.5 Enabled 1000 eth3.6 Enabled 1000 Total Entries: 2 Port based Forbidden VLAN Configuration: Port Forbidden VLANs...
Page 599: Show Gvrp Statistics
DGS-6604 show gvrp statistics show gvrp statistics Use the show gvrp statistics command to display the statistics for gvrp ports. show gvrp statistics [ interface INTERFACE-ID [ , | - ] ] Syntax Description INTERFACE-ID (Optional) Specifies the interface to display. If no interface is specified, the statistics on all interfaces will be shown.
Page 600: Show History
DGS-6604 show history show history To list the commands that have been entered in the current EXEC session, use the show history command. show history Syntax None Command Mode User EXEC or any configuration mode Usage Guideline The switch saves a record of the commands that the user entered. The recorded commands can be recalled to the screen prompt by pressing the following key.
Page 601: Show Interface
DGS-6604 show interface show interface Use this command to display information about a specified interface or all interfaces. show interface [INTERFACE-ID [ - | , ] ] Syntax Description INTERFACE-ID The interface can be a physical port, port-channel and VLAN. Default None Command Mode...
Page 602 DGS-6604 show interface This example is a sample output of information for interface port channel 1. Switch#show interface port-channel1 port-channel1 is down, line protocol is down (notconnect) Hardware is Ethernet, address is 00-00-00-00-00-00 (bia 00-00-00-00-00-00) Description: Members in this channel: 2 Member 0 : eth4.3 down...
Page 603: Show Interface Status Err-Disabled
DGS-6604 show interface status err-disabled show interface status err-disabled Use this command to display a list of interfaces in an error-disabled state, use the show interfaces status errdisable command. show interface status err-disabled Syntax None Description Default None Command Mode EXEC mode or any configuration mode.
Page 604: Show Ip As-Path Access-List
DGS-6604 show ip as-path access-list show ip as-path access-list To display configured as-path access-lists, use the show ip as-path access-list command. show ip as-path access-list [ACCESS-LIST-NAME] Syntax Description ACCESS-LIST-NAME (Optional) Specifies the access list to be displayed. Default None Command Mode User EXEC or any configuration mode Usage Guideline This command can be used without any arguments.
Page 605: Show Ip Bgp
DGS-6604 show ip bgp show ip bgp To display entries in the Border Gateway Protocol (BGP) routing table, use the show ip bgp command in user EXEC or privileged EXEC mode. show ip bgp [IP-ADDRESS[/MASK-LENGTH [ longer-prefixes] ] | route-map NAME ] Syntax Description IP-ADDRESS (Optional) An IP address entered to filter the output to display only a particular...
Page 606 DGS-6604 show ip bgp The following is example output from the show ip bgp command entered with the route-map keyword: Switch(config)#show ip bgp route-map RMAS1 BGP table version is 845, local router ID is 11.0.9.254 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete...
Page 607: Show Ip Bgp Community-List
DGS-6604 show ip bgp community-list show ip bgp community-list To display configured community lists, use the show ip community-list command . show ip bgp community-list COMMUNITY-LIST-NAME [ exact-match] Syntax Description COMMUNITY-LIST- The configured name of the Community list. NAME exact-match (Optional) Displays only routes that have an exact match.
Page 608 DGS-6604 show ip bgp community-list Field Description BGP table version Internal version number of the table. This number is incremented whenever the table changes. local router ID IP address of the router. Status codes Status of the table entry. The status is displayed at the beginning of each line in the table.
Page 609: Show Ip Bgp Filter-List
DGS-6604 show ip bgp filter-list show ip bgp filter-list To display routes that conform to a specified filter list, use the show ip bgp filter- list command. show ip bgp filter-list ACCESS-LIST-NAME Syntax Description ACCESS-LIST-NAME Specifies the AS path access list name and only the routes that match the access list are displayed.
Page 610: Show Ip Bgp Neighbors
DGS-6604 show ip bgp neighbors show ip bgp neighbors Use this command to display information about the TCP and Border Gateway Protocol (BGP) connections to neighbors. show ip bgp [ipv4 { unicast }] neighbors [ IP-ADDRESS [ advertised-routes | routes] ] Syntax Description ipv4 (Optional) Specifies the address family.
Page 611 DGS-6604 show ip bgp neighbors Examples The example on the next page shows how to display the 10.108.50.2 neighbor. This neighbor is an internal BGP (iBGP) peer. This neighbor supports the route refresh and graceful restart capabilities. Switch# show ip bgp neighbors 10.50.71.253 BGP neighbor is 10.50.71.253, remote AS 8001, local AS 8001, internal link Member of peer-group G1 for session parameters BGP version 4, remote router ID 51.50.71.253...
Page 612 DGS-6604 show ip bgp neighbors Graceful-restart Status: Remote restart-time is 120 sec Local host: 10.50.71.254, Local port: 179 Foreign host: 10.50.71.253, Foreign port: 49952 Nexthop: 10.50.71.254 Last Reset: 0DT0H39M28S, due to BGP Notification sent Notification Error Message: (Cease/Unspecified Error Subcode.) Switch>...
Page 613: Show Ip Community-List
DGS-6604 show ip community-list show ip community-list To display configured community lists, use the show ip community-list command. show ip community-list [COMMUNITY-LIST-NAME] Syntax Description COMMUNITY-LIST- (Optional) Community list name. The community list name can be standard or NAME expanded. Default None Command Mode User EXEC or any configuration mode...
Page 614: Show Ip Dhcp Binding
DGS-6604 show ip dhcp binding show ip dhcp binding To display the current status of address bindings on the DHCP Server. show ip dhcp binding [pool NAME] [ADDRESS] Syntax Description ADDRESS (Optional) Specifies the IP address of the DHCP client for which the bindings will be displayed.
Page 615 DGS-6604 show ip dhcp binding The following example shows the binding status of IP address 10.1.1.1 in DHCP address pool, pool1. switch# show ip dhcp binding pool pool1 10.1.1.1 IP address Hardware address Lease start Lease expiration ---------- ---------------- -------------------- -------------------- 10.1.1.1 00b8.3493.32b5...
Page 616: Show Ip Dhcp Conflict
DGS-6604 show ip dhcp conflict show ip dhcp conflict To display the conflict IP addresses while a DHCP Server attempts to assign the IP addresses for a client. show ip dhcp conflict [pool NAME][ADDRESS] Syntax Description ADDRESS (Optional) Specifies the conflict IP address. If no conflict IP address is specified, all conflict IP addresses are applied.
Page 617: Show Ip Dhcp Pool
DGS-6604 show ip dhcp pool show ip dhcp pool To display information about the Dynamic Host Configuration Protocol (DHCP) address pools, show ip dhcp pool [NAME] Syntax Description NAME (Optional) Displays information about a specific address pool. If not specified, displays information about all address pools.
Page 618 DGS-6604 show ip dhcp pool Example The following example shows DHCP address pool information for an On- Demand Address Pool (ODAP), pool 1. The table below describes the significant fields in the display. switch# show ip dhcp pool2 Pool name: pool2 Accept client ID: Yes Accept relay Agent: No Boot file: boot.bin...
Page 619 DGS-6604 show ip dhcp pool Field Description Subnet The bit combination with the address of the DHCP address pool Lease The duration of the lease for an IP address Accept client ID To validate the DHCP Client Identifier value sent by the client or not Accept DHCP packet contains option82 or not.
Page 620: Show Ip Dhcp Relay
DGS-6604 show ip dhcp relay show ip dhcp relay Display the IP DHCP relay agent configuration. show ip dhcp relay Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Display the DHCP relay agent configuration Example This example shows how to display the DHCP relay agent configuration.
Page 621: Show Ip Dhcp Relay Information Trusted-Sources
DGS-6604 show ip dhcp relay information trusted-sources show ip dhcp relay information trusted-sources Use the show ip dhcp relay information trusted-sources command to display all interfaces configured to be a trusted source for the Dynamic Host Configuration Protocol (DHCP) relay information option, . show ip dhcp relay information trusted-sources Syntax None...
Page 622: Show Ip Dhcp Server
DGS-6604 show ip dhcp server show ip dhcp server This command displays the current status of DHCP server show ip dhcp server Syntax None Default None Command Mode Privileged EXEC Usage Guideline Display the DHCP server status and user configured pool. Example This example shows how to display the status of DHCP server.
Page 623: Show Ip Dhcp Server Statistics
DGS-6604 show ip dhcp server statistics show ip dhcp server statistics To display Dynamic Host Configuration Protocol (DHCP) server statistics. show ip dhcp server statistics Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline The show ip dhcp server statistics command displays the DHCP counters. All counters are cumulative.
Page 624 DGS-6604 show ip dhcp server statistics Field Description The number of renew messages for a DHCP lease. The counter is Renew messages incremented when a new renew message has arrived after the first renew message. Message The DHCP message type that was received by the DHCP server. The number of DHCP messages that were received by the DHCP Received server.
Page 625: Show Ip Dhcp Snooping
DGS-6604 show ip dhcp snooping show ip dhcp snooping Use this command to display DHCP snooping configuration. show ip dhcp snooping Syntax Not applicable. Description Default Not applicable. Command Mode EXEC mode or any configuration mode. Usage Guideline Use the command to display DHCP snooping configuration setting. Example This example shows how to display DHCP Snooping configuration: Switch# show ip dhcp snooping...
Page 626: Show Ip Dvmrp Interface
DGS-6604 show ip dvmrp interface show ip dvmrp interface This command is used to display dvrmp configuration information on interface. show ip dvmrp interface [INTERFACE-ID [,|-] ] Syntax Description INTERFACE-ID [ , | - ] (Optional) Specifies a single interface, a range of interfaces separated by a hyphen, or a series of interfaces separated by a comma.
Page 627: Show Ip Dvmrp Neighbor
DGS-6604 show ip dvmrp neighbor show ip dvmrp neighbor Use this command to show DVMRP neighbor information. show ip dvmrp neighbor [ INTERFACE-ID | IP-ADDRESS ] [ detail ] Syntax Description INTERFACE-ID (Optional) Specifies the interface ID IP-ADDRESS (Optional) The IP address of the neighbor detail (Optional) Show the neighbor information in detail.
Page 628 DGS-6604 show ip dvmrp neighbor ExpTime The neighbor time-out interval, which SHOULD be set to 35 seconds. This setting allows early detection of a lost neighbor yet provides tolerance for busy multicast routers. These time-out values MUST be coordinated between all DVMRP routers of a particular physical network segment.
Page 629 DGS-6604 show ip dvmrp neighbor UpTime The total time elapsed since the neighbor was discoved until now. ExpTime The time remaining until the entry is removed from the DVMRP neighbor table. Generation ID If a DVMRP router is restarted, it will not be aware of any previous prunes that it had sent or received.
Page 630: Show Ip Dvmrp Prune
DGS-6604 show ip dvmrp prune show ip dvmrp prune Use this command to display DVMRP upstream prune state information. show ip dvmrp prune Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Display DVMRP upstream Prune state information. Example This example shows how to displays prune information.
Page 631: Show Ip Dvmrp Route
DGS-6604 show ip dvmrp route show ip dvmrp route Use this command to display DVMRP route information. show ip dvmrp route [ NETWORK-ADDRESS ] Syntax Description NETWORK- (Optional) Specifies the source network address and mask length be displayed. ADDRESS If NETWORK-ADDRESS is not specified, all DVMRP routes will be displayed. Default None Command Mode...
Page 632: Show Ip Igmp Group
DGS-6604 show ip igmp group show ip igmp group Used to display IGMP group information on an interface show ip igmp group [IP-ADDRESS | interface INTERFACE-ID] [detail] Syntax Description IP-ADDRESS (Optional) Specifies the Group IP address to display. If no IP address is specified, all IGMP group information will be displayed.
Page 633 DGS-6604 show ip igmp group This example shows how to display IGMP group detailed information for group 224.1.1.1. If the interface is operated at v3, the group source list will be displayed. If the interface is not operated at v3, the group source list will not be displayed.
Page 634 DGS-6604 show ip igmp group Display Field Description of significant display fields. Descriptions Display Field Description Uptime The time elapsed since the entry has been created in the format of [n]DT[n]H[n]M[n]S. Expires The time that the entry will be removed if there is no refresh on the entry in the format of [n]DT[n]H[n]M[n]S.
Page 635: Show Ip Igmp Interface
DGS-6604 show ip igmp interface show ip igmp interface Used to display IGMP configuration information on interface show ip igmp interface [INTERFACE-ID [ , | - ] ] Syntax Description INTERFACE-ID [,|-] (Optional) Specifies a single interface, a range of interfaces separated by a hyphen, or a series of interface separated by a comma.
Page 636: Show Ip Igmp Snooping
DGS-6604 show ip igmp snooping show ip igmp snooping Use this command to display IGMP Snooping information on the switch. show ip igmp snooping [VLAN VLAN-ID] Syntax Description VLAN VLAN-ID (Optional) Specifies a VLAN. The VLAN ID range is 1 to 4094. If no VLAN is specified, then this command shows IGMP Snooping Information for all VLANs where IGMP Snooping is enabled (i.e.
Page 637 DGS-6604 show ip igmp snooping Display Field The following table shows the field information for the above example. Descriptions Display Field Parameter Description Querier state Enabled IGMP Snooping querier is enabled. Disabled IGMP Snooping querier is disabled. Querier Router Active This VLAN interface of the switch works as an IGMP snooping querier.
Page 638: Show Ip Igmp Snooping Group
DGS-6604 show ip igmp snooping group show ip igmp snooping group Use this command to display IGMP Snooping group information learned by the switch. show ip igmp snooping group [IP-ADDRESS | VLAN VLAN-ID ] [ detail ] Syntax Description IP-ADDRESS (Optional) Specifies the Group IP address to display.
Page 639 DGS-6604 show ip igmp snooping group This example shows how to display the IGMP snooping group detailed information of group 224.1.1.1. If the interface is operated at v3, the group source list will be displayed. If the interface is not operated at v3, the group source list will not be displayed.
Page 640 DGS-6604 show ip igmp snooping group Display Field The following table shows the display field information for the example on the Descriptions previous page. Display Field Description IGMP version The version of IGMP. The version of IGMP that the multicast group has reported.
Page 641: Show Ip Igmp Snooping Mrouter
DGS-6604 show ip igmp snooping mrouter show ip igmp snooping mrouter Use this command to display IGMP Snooping mrouter information learned and configured on the switch. show ip igmp snooping mrouter [vlan VLAN-ID] [designate | auto | not-allowed] Syntax Description vlan VLAN-ID (Optional) Specifies a VLAN.
Page 642: Show Ip Interface
DGS-6604 show ip interface show ip interface Use this command to display the information of ip interfaces. show ip interface [INTERFAC E-ID ] [brief] Syntax Description INTERFACE-ID (Optional) Interface type and number. It refers to an IP interface, that is VLAN interfaces only.
Page 643 DGS-6604 show ip interface This example shows how to display the ip interface information for VLAN 1 Switch> show ip interface vlan1 vlan1 is up, Internet address is 100.0.0.1/24 Internet address is 110.0.0.1/24 (secondary) MAC Address is 08-01-02-24-00-01 ARP timeout is 14400 seconds IP MTU is 1500 bytes CLI Reference Guide...
Page 644: Show Ip Key-Chain
DGS-6604 show ip key-chain show ip key-chain Use this command to display the settings of the configured key chains. show ip key-chain [NAME-OF-KEY] Syntax Description NAME-OF-KEY (Optional) Specifies the name of a key chain to display. Default None Command Mode User EXEC or any configuration mode Usage Guideline Specify the name of key-chain (NAME-OF-KEY) to get the information of specific...
Page 645: Show Ip Mroute
DGS-6604 show ip mroute show ip mroute Use this command to display the content of the IP multicast routing table. show ip mroute [ { [group-addr GROUP-ADDRESS ] [source-addr NETWORK-ADDRESS ] [summary] } |static] Syntax Description group-addr (Optional) Specifies the Group IP address. GROUP-ADDRESS source-addr (Optional) Specifies the Source IP network address.
Page 646 DGS-6604 show ip mroute Example This example shows how to display the IP multicast route table summary: Switch> show ip mroute summary IP Multicast Routing Table: 1 entry Flags: D - PIM-DM, S - PIM-SM, V - DVMRP Timers: Uptime/Expires (10.10.1.52, 224.0.1.3), vlan1, 0DT0H1M32S/0DT0H3M20S, Flags: D The following is sample output from the show ip mroute command.
Page 647: Show Ip Ospf
DGS-6604 show ip ospf show ip ospf Use this command to display general information about the OSPF routing process. show ip ospf Syntax None Default None Command Mode User EXEC Usage Guideline Display general OSPF protocol information. It provides system-wide statistics and per area statistics for OSPF.
Page 648 DGS-6604 show ip ospf Switch#show ip ospf Operational Router ID 10.47.65.160 Process uptime is 0DT0H12M33S Conforms to RFC2328, and RFC1583Compatibility flag is disabled This router is an ABR, ABR Type is Standard (RFC2328) This router is an ASBR (injecting external routing information) This router is a BR SPF schedule delay 5 secs, Hold time between two SPFs 10 secs Number of external LSA 1240.
Page 649: Show Ip Ospf Border-Routers
DGS-6604 show ip ospf border-routers show ip ospf border-routers Use this command to display the ABRs and ASBRs for the OSPF instance. show ip ospf border-routers Syntax None Default None Command Mode User EXEC Usage Guideline Use this command to display the ABRs and ASBRs information. Example This is a sample output from the show ip ospf border-routers command Switch#show ip ospf border-routers...
Page 650: Show Ip Ospf Database
DGS-6604 show ip ospf database show ip ospf database Use this command to display a database summary for OSPF information. show ip ospf database Syntax None Default None Command Mode User EXEC Usage Guideline Display information about the database summary for OSPF information. Example The following page shows a sample output from the show ip ospf database command:...
Page 651 DGS-6604 show ip ospf database Switch#show ip ospf database Router Link States (Area 0.0.0.0) Link ID ADV Router Seq# CkSum Link count 10.47.65.160 10.47.65.160 1765 0x8000000e 0x107f 6 Net Link States (Area 0.0.0.0) Link ID ADV Router Seq# CkSum 47.65.49.111 47.65.49.111 1819 0x80000001 0x33da Summary Link States (Area 0.0.0.0)
Page 652: Show Ip Ospf Database Asbr-Summary
DGS-6604 show ip ospf database asbr-summary show ip ospf database asbr-summary Use this command to display information about the Autonomous System Boundary Router (ASBR) summary LSAs. show ip ospf database asbr-summary[LINK-STATE-ID|self-originate|adv-router IP-ADDRESS] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states.
Page 653 DGS-6604 show ip ospf database asbr-summary Switch#show ip ospf database asbr-summary ASBR-Summary Link States (Area 0.0.0.0) LS age: 893 Options: 0x2 (*|-|-|-|-|-|E|-) LS Type: ASBR-summary-LSA Link State ID: 10.47.65.160 (AS Boundary Router address) Advertising Router: 10.47.65.181 LS Seq Number: 80000003 Checksum: 0xb756 Length: 28 Network Mask: /0...
Page 654: Show Ip Ospf Database External
DGS-6604 show ip ospf database external show ip ospf database external Use this command to display information about the external LSAs. show ip ospf database external [ LINK-STATE-ID|self-originate|adv-router IP-ADDRESS ] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states.
Page 655: Show Ip Ospf Database Network
DGS-6604 show ip ospf database network show ip ospf database network Use this command to display information about the network LSAs. show ip ospf database external [LINK-STATE-ID|self-originate|adv-router IP-ADDRESS] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states. adv-router Displays all the LSAs of the specified router.
Page 656 DGS-6604 show ip ospf database network Switch#show ip ospf database network Net Link States (Area 0.0.0.0) LS age: 1034 Options: 0x0 (*|-|-|-|-|-|-|-) LS Type: network-LSA Link State ID: 47.65.49.111 (address of Designated Router) Advertising Router: 47.65.49.111 LS Seq Number: 80000001 Checksum: 0x33da Length: 32 Network Mask: /24...
Page 657: Show Ip Ospf Database Nssa-External
DGS-6604 show ip ospf database nssa-external show ip ospf database nssa-external Use this command to display information about the nssa-external LSAs. how ip ospf database nssa-external [ LINK-STATE-ID| self-originate|adv-router IP-ADDRESS] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states.
Page 658 DGS-6604 show ip ospf database nssa-external Switch#show ip ospf database nssa-external NSSA-external Link States (Area 0.0.0.61 [NSSA]) LS age: 1161 Options: 0x0 (*|-|-|-|-|-|-|-) LS Type: AS-NSSA-LSA Link State ID: 1.0.0.0 (External Network Number For NSSA) Advertising Router: 10.47.65.160 LS Seq Number: 80000001 Checksum: 0x82e6 Length: 36 Network Mask: /24...
Page 659: Show Ip Ospf Database Router
DGS-6604 show ip ospf database router show ip ospf database router Use this command to display information about the router LSAs. show ip ospf database router [ LINK-STATE-ID|self-originate|adv-router IP-ADDRESS ] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states.
Page 660 DGS-6604 show ip ospf database router Switch#show ip ospf database router Router Link States (Area 0.0.0.0) LS age: 1056 Options: 0x2 (*|-|-|-|-|-|E|-) Flags: 0x3 : ABR ASBR LS Type: router-LSA Link State ID: 10.47.65.160 Advertising Router: 10.47.65.160 LS Seq Number: 8000000e Checksum: 0x107f Length: 96 Number of Links: 6...
Page 661 DGS-6604 show ip ospf database router .Link connected to: a Virtual Link (Link ID) Neighboring Router ID: 10.47.65.184 (Link Data) Router Interface address: 47.65.54.1 Number of TOS metrics: 0 TOS 0 Metric: Link connected to: Stub Network (Link ID) Network/subnet number: 47.65.49.112 (Link Data) Network Mask: 255.255.255.255 Number of TOS metrics: 0 TOS 0 Metric: 0...
Page 662: Show Ip Ospf Database Summary
DGS-6604 show ip ospf database summary show ip ospf database summary Use this command to display information about the summary LSAs. how ip ospf database summary [LINK-STATE-ID|self-originate|adv-router IP-ADDRESS ] Syntax Description LINK-STATE-ID Link State ID (as an IP address). self-originate Self-originated link states.
Page 663 DGS-6604 show ip ospf database summary Switch#show ip ospf database summary Summary Link States (Area 0.0.0.0) LS age: 1225 Options: 0x2 (*|-|-|-|-|-|E|-) LS Type: summary-LSA Link State ID: 2.1.1.0 (summary Network Number) Advertising Router: 10.47.65.160 LS Seq Number: 80000001 Checksum: 0xe359 Length: 28 Network Mask: /24 TOS: 0...
Page 664: Show Ip Ospf Host-Route
DGS-6604 show ip ospf host-route show ip ospf host-route Use this command to display host-route information for OSPF. show ip ospf host-route Syntax None. Default None Command Mode User EXEC Usage Guideline Use this command to display host route information for OSPF. Example The following is a sample output of this command: Switch# show ip ospf host-route...
Page 665: Show Ip Ospf Interface
DGS-6604 show ip ospf interface show ip ospf interface Use this command to display interface information for OSPF. show ip ospf interface [ IFNAME ] Syntax Description IFNAME (Optional) Specifies the interface type of the interfaces to display the OSPF information for.
Page 666 DGS-6604 show ip ospf interface Switch#show ip ospf interface vlan49 is up, line protocol is up Internet Address 47.65.49.1/24, Area 0.0.0.0, MTU 1500 Router ID 10.47.65.160, Network Type BROADCAST, Cost: 1 Transmit Delay is 1000 sec, State BDR, Priority 1 Designated Router (ID) 47.65.49.111, Interface Address 47.65.49.111 Backup Designated Router (ID) 10.47.65.160, Interface Address 47.65.49.1 Timer intervals configured, Hello 20, Dead 80, Retransmit 10...
Page 667: Show Ip Ospf Neighbor
DGS-6604 show ip ospf neighbor show ip ospf neighbor Use this command to display information about the OSPF neighbors. show ip ospf neighbor [ IFNAME | NEIGHBOR-ID] [detail] Syntax Description IFNAME (Optional) Specifies the type of the interface to display the neighbor information for.
Page 668: Show Ip Ospf Virtual-Links
DGS-6604 show ip ospf virtual-links show ip ospf virtual-links Use this command to display virtual link information. show ip ospf virtual-links Syntax None Default None Command Mode User EXEC Usage Guideline Use this command to display virtual link information. Example The following pages show sample outputs from the show ip ospf neighbor.
Page 669 DGS-6604 show ip ospf virtual-links Switch#show ip ospf virtual-links Virtual Link to router 10.47.65.181 is up Transit area 0.0.0.1 via interface vlan51 Local address 47.65.51.1/32 Remote address 47.65.51.2/32 Transmit Delay is 1 sec, State Point-To-Point, Timer intervals configured, Hello 10, Dead 40, Retransmit 5 Hello due in 0DT0H0M9S Adjacency state Full Current Authentication Type: none...
Page 670: Show Ip Pim
DGS-6604 show ip pim show ip pim Use this command to show the PIM global information. show ip pim Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Use this command to display the global information of PIM. Example The following example displays PIM global information.
Page 671: Show Ip Pim Bsr
DGS-6604 show ip pim bsr show ip pim bsr Use this command to show the bootstrap router (BSR) information. show ip pim bsr Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Use this command to display the elected BSR information and information about the locally configured for the candidate rendezvous point (RP) advertisement.
Page 672: Show Ip Pim Interface
DGS-6604 show ip pim interface show ip pim interface Use this command to show the interface information. show ip pim interface [INTERFACE-ID] [detail] Syntax Description INTERFACE-ID (Optional) Specifies the interface to display the interface information for. Only VLAN interface IDs are applicable. detail (Optional) Use to display the interface information in detail.
Page 673 DGS-6604 show ip pim interface switch#show ip pim interface detail vlan100 Address : 90.1.1.1 Mode : Sparse Neighbor Count : 90.1.1.1 DR Priotity DR Priority Enabled : Enabled Generation ID : 164598300 Hello Interval : 30 seconds Triggered Hello Interval : 5 seconds Hello Hold time : 105 seconds Join Prune Interval...
Page 674: Show Ip Pim Mroute
DGS-6604 show ip pim mroute show ip pim mroute This command displays the PIM IP multicast routing table show ip pim mroute Syntax None Description Default None Command Mode User EXEC or any configuration mode Usage Guideline Use this command to display all entries in the IP multicast routing table. The switch populates the multicast routing table by creating source, group (S,G) entries from star, group (*,G) entries.
Page 675 DGS-6604 show ip pim mroute Switch#show ip pim mroute PT - Prune Timer, PPT - Prune Pending Timer, ET - Expiry Timer, PLT - Prune Limit Timer, GRT - Graft Retry Timer, AT - Assert Timer, KAT - Keep Alive Timer, OT - Override Timer, SAT - Source Active Timer, SRT - State Refresh Timer Flags: D - Dense, S - Sparse, T - SPT-bit set (*,239.1.1.1) Uptime: 0DT0H31M15S,...
Page 676: Show Ip Pim Neighbor
DGS-6604 show ip pim neighbor show ip pim neighbor Use this command to show the PIM-SM neighbor information. show ip pim neighbor [INTERFACE-ID] Syntax Description INTERFACE-ID (Optional) Specifies the interface to display the PIM-SM neighbor information for. If INTERFACE-ID is not specified, the information on all interfaces will be displayed.
Page 677 DGS-6604 show ip pim neighbor Field Descriptions DR Pri/Mode B: bidirectional mode, neighbor is using the Bidirectional-PIM Capable option. DR: indicates the neighbor is the Designated Neighbor. If an empty string is displayed it indicates the neighbor is not a DR. S: State Refresh Capable.
Page 678: Show Ip Pim Rp Mapping
DGS-6604 show ip pim rp mapping show ip pim rp mapping Use this command to show group-to-RP (rendezvous point) mappings, and the RP set. show ip pim rp mapping Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Use this command to display active rendezvous points (RPs) that are cached with associated multicast routing entries.
Page 679: Show Ip Pim Rp-Hash
DGS-6604 show ip pim rp-hash show ip pim rp-hash Use this command to display the rendezvous point (RP) to be chosen based on the group selected. show ip pim rp-hash GROUP-ADDRESS Syntax Description GROUP-ADDRESS Specifies the Group Address to display the selected RP of the group for. Default None Command Mode...
Page 680: Show Ip Protocols
DGS-6604 show ip protocols show ip protocols Use this command to display the state of the dynamic routing process. show ip protocols [rip] [ospf] [bgp] Syntax Description (Optional) RIP protocol information is displayed. ospf (Optional) Display OSPF global settings which are related to the overall IP routing function.
Page 681 DGS-6604 show ip protocols The table below describes the show ip protocols Field Descriptions for a RIP Process: Field Description Routing Protocol is Specifies the routing protocol used. "rip" Sending updates Specifies the time between sending updates. every 30 seconds next due in 2 seconds Precisely when the next update is due to be sent.
Page 682: Show Ip Rip Database
DGS-6604 show ip rip database show ip rip database To display summary address entries in the Routing Information Protocol (RIP) routing database entries, use the show ip rip database command. show ip rip database Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline show ip rip database will display route information, such as: network, next hop,...
Page 683: Show Ip Rip Interface
DGS-6604 show ip rip interface show ip rip interface Display interface specific information for RIP. show ip rip interface [INTERFACE-ID] Syntax Description interface (Optional) Specifies the interface ID to display the RIP information for. If no INTERFACE-ID INTERFACE-ID is specified, the RIP information on all interfaces will be shown. Default None Command Mode...
Page 684: Show Ip Route
DGS-6604 show ip route show ip route To display the current state of the routing table, use the show ip route command. show ip route [IP-ADDRESS [MASK] | [database] [PROTOCOL | connected | static]] Syntax Description IP-ADDRESS (Optional) Address about which routing information should be displayed. MASK (Optional) Argument specifying a subnet mask.
Page 685 DGS-6604 show ip route Examples The following examples show the standard routing tables displayed by the show ip route command. Use the codes displayed at the beginning of each report and the information in the following table to understand the types of routes. Field Description Indicates the protocol that derived the route.
Page 686 DGS-6604 show ip route Field Description [160/5] The first number in the brackets is the administrative distance of the information source; the second number is the metric for the route. via 10.119.254.6 Specifies the address of the next router to the remote network. 0DT0H0M44S Specifies the last time the route was updated.
Page 687 DGS-6604 show ip route The following example shows output of the show ip route database command. Switch#show ip route database Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter...
Page 688: Show Ip Route Summary
DGS-6604 show ip route summary show ip route summary To display the current state of the routing table, use the show ip route summary command. show ip route summary Syntax None Description Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example...
Page 689: Show Ip Ssh
DGS-6604 show ip ssh show ip ssh Use this command to display the user SSH configuration setting. show ip ssh Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Use the show ip ssh command to view the status of configured options such as retries and timeouts.
Page 690: Show Ip Trusted-Host
DGS-6604 show ip trusted-host show ip trusted-host Use this command to display the trusted host information on the device. show ip trusted-host [ snmp | http | https | telnet | ssh ] Syntax Description [ snmp | http | https | (Optional) Specifies which access interface which is to be displayed.
Page 691: Show Ipv6 Dhcp
DGS-6604 show ipv6 dhcp show ipv6 dhcp This command is used to display DHCPv6 client configuration running information of interface(s). show ipv6 dhcp [ interface [INTERFACE-NAME ] ] Syntax Description interface Specifies to show the interface DHCPv6 Client configuration and running information.
Page 692 DGS-6604 show ipv6 dhcp The following example shows the DHCPv6 client for interface vlan1, when vlan1 is in the REQUEST state: Switch > enable Switch # show ipv6 dhcp interface vlan1 Interface vlan1 is in DHCPv6 client mode. General prefix: aaa State: REQUEST Server IP: N/A Server DUID: N/A...
Page 693 DGS-6604 show ipv6 dhcp The following example shows the DHCPv6 client for interface vlan1, when vlan1 is in the RENEW state: Switch > enable Switch # show ipv6 dhcp interface vlan1 Interface vlan1 is in DHCPv6 client mode. General prefix: aaa State: RENEW Server IP: fe80::21d:92ff:fe2b:af48%eth0 Server DUID: 0001000611D6EE73001D922BAF48...
Page 694: Show Ipv6 Dhcp Relay Interface
DGS-6604 show ipv6 dhcp relay interface show ipv6 dhcp relay interface These commands are used to display DHCP relay information. show ipv6 dhcp relay interface VLAN-interface Syntax Description VLAN-interface Specific VLAN interface name. Default None Command Mode User EXEC or any configuration mode Usage Guideline The show ipv6 dhcp relay command shows the DHCP for IPv6 relay configuration and running information of the specified VLAN interface.
Page 695: Show Ipv6 General-Prefix
DGS-6604 show ipv6 general-prefix show ipv6 general-prefix This command is used to display IPv6 general prefix information. It is used the show ipv6 general-prefix command. show ipv6 general-prefix [PREFIX-NAME ] Syntax Description PREFIX-NAME The name of the general prefix to be showed. If the general prefix name is not specified, then all general prefixes on the system will be showed.
Page 696 DGS-6604 show ipv6 general-prefix The following example shows how to display information for a specified general prefix named my-prefix: Switch > enable Switch # show ipv6 general-prefix my-prefix IPv6 prefix my-prefix Acquired via Manual configuration: 3ffe:1:1::/48 Apply to interface: vlan2 ::1:1:1:1:1/64 CLI Reference Guide...
Page 697: Show Ipv6 Interface
DGS-6604 show ipv6 interface show ipv6 interface These commands are used to display IPv6 interface information. show ipv6 interface [IFNAME] Syntax None Default None Command Mode EXEC mode or any configuration mode. Usage Guideline If the IPv6 address DAD fail, the IPv6 address is marked "DAD check fail" Example This example shows how to display IPv6 interface incidence: Switch >...
Page 698: Show Ipv6 Interface Brief
DGS-6604 show ipv6 interface brief show ipv6 interface brief These commands are used to display IPv6 interface summary information. show ipv6 interface IFNAME brief Syntax None Default None Command Mode EXEC mode or any configuration mode. Usage Guideline The [status/protocol] information is the same description with "show ip interface brief"...
Page 699: Show Ipv6 Neighbors
DGS-6604 show ipv6 neighbors show ipv6 neighbors This command is used to display the IPv6 neighbor information. show ipv6 neighbors Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example The example shows how to display IPv6 neighbor information. Switch >...
Page 700: Show Ipv6 Ospf
DGS-6604 show ipv6 ospf show ipv6 ospf To display general information about OSPF routing processes, use the show ipv6 ospf command. show ipv6 ospf [PROCESS-ID] Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process. It is locally assigned and can be any positive integer. A unique value is assigned for each IPv6 OSPF routing process.
Page 701 DGS-6604 show ipv6 ospf Routing Process "OSPFv3 null" with Operational Router 10.76.37.30 Process uptime is 0DT0H13M51S. Conforms to RFC 2740 This router is an ABR; ABR Type is Standard (OSPFv3). This router is an ASBR (injecting external routing information). This router is a BR. SPF schedule delay 5 secs, Hold time between SPFs 10 secs Number of router LSA 5.
Page 702: Show Ipv6 Ospf Border-Routers
DGS-6604 show ipv6 ospf border-routers show ipv6 ospf border-routers To display the ABRs and ASBRs for the IPv6 OSPF process, use the show ipv6 ospf border-routers command. show ipv6 ospf [PROCESS-ID] border-routers Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process.
Page 703: Show Ipv6 Ospf Database
DGS-6604 show ipv6 ospf database show ipv6 ospf database Display the database summary of the OSPF routing processes, use the show ipv6 ospf database command. show ipv6 ospf [PROCESS-ID] database [router | network | inter-prefix | inter-router | external | link | intra-prefix] [adv-router [ self-originate | ROUTER-ID] ] Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing...
Page 704: Show Ipv6 Ospf Interface
DGS-6604 show ipv6 ospf interface show ipv6 ospf interface To display OSPF-related interface information, use the show ipv6 ospf interface command. show ipv6 ospf interface [IFNAME] Syntax Description IFNAME (Optional) Interface type and number. If no option is specified, applying the command displays the entire IPv6 OSPF process.
Page 705: Show Ipv6 Ospf Neighbor
DGS-6604 show ipv6 ospf neighbor show ipv6 ospf neighbor To display IPv6 OSPF neighbor information on a per interface basis, use the show ipv6 ospf neighbor command. show ipv6 ospf [PROCESS-ID] neighbor [IFNAME | NEIGHBOR-ID] [detail] Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process.
Page 706: Show Ipv6 Ospf Route
DGS-6604 show ipv6 ospf route show ipv6 ospf route To display the current contents of the IPv6 OSPF routing table, use the show ipv6 ospf route command. show ipv6 ospf [PROCESS-ID] route Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process.
Page 707: Show Ipv6 Ospf Virtual-Links
DGS-6604 show ipv6 ospf virtual-links show ipv6 ospf virtual-links To display parameters and the current state of IPv6 OSPF virtual links, use the show ipv6 ospf virtual-links command. show ipv6 ospf [PROCESS-ID] virtual-links Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing process.
Page 708: Show Ipv6 Protocols [Process-Id Ospf | Rip ]
DGS-6604 show ipv6 protocols [PROCESS-ID ospf | rip ] show ipv6 protocols [PROCESS-ID ospf | rip ] Use this command to display the parameters and current state of the active IPv6 OSPF or RIP routing protocol processes. show ipv6 protocols [PROCESS-ID ospf | rip ] Syntax Description PROCESS-ID (Optional) Internally used identification parameter for an IPv6 OSPF routing...
Page 709 DGS-6604 show ipv6 protocols [PROCESS-ID ospf | rip ] The following is sample output from the show ipv6 protocols rip command. switch#show ipv6 protocols rip Routing Protocol is "ripng" Sending updates every 30 seconds with +/-50%, next due in 1 seconds Timeout after 180 seconds, garbage collect after 120 seconds Default redistribute metric is 1 Redistributing:...
Page 710: Show Ipv6 Rip Database
DGS-6604 show ipv6 rip database show ipv6 rip database To display information about current IPv6 RIP processes, use the show ipv6 rip database command. show ipv6 rip database Syntax Description database If specifed the command displays the details of the entries in the specified RIP IPv6 routing table.
Page 711: Show Ipv6 Rip Interface
DGS-6604 show ipv6 rip interface show ipv6 rip interface To display the usability status of interfaces configured for IPv6 RIP, use the show ipv6 rip interface command. show ipv6 rip interface [IFNAME] Syntax Description IFNAME The specified interface type and interface number Default None Command Mode...
Page 712: Show Ipv6 Route
DGS-6604 show ipv6 route show ipv6 route Use this command show ipv6 route to display the active IPv6 routes in the system. show ipv6 route [ IPV6-ADDRESS [ INTERFACE-TYPE INTERFACE-NUMBER | NEXT-HOP- ADDRESS ] | NETWORK-PREFIX / PREFIX-LENGTH [ INTERFACE-TYPE INTERFACE- NUMBER | NEXT-HOP-ADDRESS ] | [ database ] PROTOCOL | [ database ] connected | [ database ] static ] Syntax Description...
Page 713 DGS-6604 show ipv6 route Example Use the show ipv6 route command to check what are the active routing entries for IPv6 . Switch > enable Switch # show ipv6 route IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP S ::/0 [1/0] via 192:0:7:2::2 C 20:50:71:1::/64 is directly connected, vlan10...
Page 714: Show Ipv6 Route Summary
DGS-6604 show ipv6 route summary show ipv6 route summary To display the current state of the IPv6 routing table, use the show ipv6 route summary command. show ipv6 route summary Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example...
Page 715: Show Loopback-Detection
DGS-6604 show loopback-detection show loopback-detection Use the command to show the current loopback detection control settings. show loopback-detection [interface [INTERFACE-ID] [, | -] Syntax <cr> To show all the loopback detection protocol information. Interface Specify the interface-ID which you want to display. INTERFACE-ID (Optional) Specify a series of interfaces, or separate a range of interfaces from a previous range.
Page 716 DGS-6604 show loopback-detection This example shows current loopback detection setting for vlan-based mode. Switch# show loopback-detection Status : Enabled Mode : VLAN-Based Interval : 20 sec Interface LoopDetect State Result Time Left(sec) ------------- --------------------- ------------------- --------------- eth3.1 Enabled Normal eth3.8 Enabled Normal eth4.5...
Page 717: Show Logging
DGS-6604 show logging show logging Use show logging to display the state of the system logging process and the contents of the standard system logging buffer. show logging [ host | buffer [ START-INDEX [ STOP-INDEX ] | + VALUE | - VALUE ] ] Syntax Description host (Optional) Displays the logging hosts.
Page 718 DGS-6604 show logging DGS-6600:15(config)#show logging host Host Severity Facility Port --------------------------------------------------------- 30.65.45.34 informational local7 35.4.56.2 critical local4 1300 DGS-6600:15(config)#show logging logging on :enabled logging buffer severity:notice Host Severity Facility Port --------------------------------------------------------- 30.65.45.34 informational local7 35.4.56.2 critical local4 1300 Below is an example of using the + VALUE and - VALUE arguments with the show logging buffer command: DGS-6600:15#show logging buffer + 3 Total logs:401...
Page 719 DGS-6604 show logging Below is an example of using the START-INDEX and STOP-INDEX arguments with the show logging buffer command. DGS-6600:15(mgmt-if)# show logging buffer 250 260 Total logs:402 Index Date Log Text --------------------------------------------------------------------------- 08:53:15, 2010-09-20 Interface vlan1 is down 08:53:14, 2010-09-20 Interface eth4.47 is up 08:53:14, 2010-09-20 Interface vlan1 is up...
Page 720: Show Mac Address-Table
DGS-6604 show mac address-table show mac address-table Use the show mac address-table command to display: a specific MAC address, static entries, dynamic entries or the MAC address table of static and dynamic entries for a specific physical interface, port-channel or VLAN. show mac address-table [ dynamic | static ] [ address MAC-ADDR | interface [ INTERFACE-ID [ , | - ] | vlan VLAN-ID ] Syntax Description...
Page 721 DGS-6604 show mac address-table This is an example of output from the show mac address-table static command: Switch> show mac address-table static Vlan Mac Address Type Ports ---- ----------------- ------- ------------------------- 1 01-00-0c-cc-cc-cc Static 1 01-80-c2-00-00-00 Static 1 01-00-0c-cc.cc-cd Static 1 01-80-c2-00.00-01 Static 1 01-80-c2-00.00-04 Static 1 01-80-c2-00.00-05 Static...
Page 722: Show Mac Address-Table Aging Destination-Hit
DGS-6604 show mac address-table aging destination-hit show mac address-table aging destination-hit Use the show mac address-table aging destination-hit command to display the status of destination MAC address triggered update function. show mac address-table aging destination-hit Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline None...
Page 723: Show Mac Address-Table Aging-Time
DGS-6604 show mac address-table aging-time show mac address-table aging-time Use the show mac address-table aging-time command to display the aging time. show mac address-table aging-time Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example This is an example of output from the show mac address-table aging-time command:...
Page 724: Show Mgmt-If
DGS-6604 show mgmt-if show mgmt-if Use this command to show the status of the management port, including user settings and link status. show mgmt-if Syntax None Description Default None Command Mode User EXEC, management interface mode or any configuration mode Usage Guideline None Example...
Page 725: Show Monitor Session
DGS-6604 show monitor session show monitor session Use this command to show all or a specific port mirroring session. show monitor session [ SESSION-NUMBER | remote | local ] S yntax De scrip tion SESSIO N-NUM BER (O ptional) Specify the session num ber which you want to display. local (O ptional) Specify to display local session.
Page 726 DGS-6604 show monitor session Switch# show monitor session Session 1 Session type: local session Destination Port : eth1.1 Source Ports Both : eth1.2-4 : eth1.5 : eth1.7 Session 2 Session type: local session Destination Port : eth2.1 Source Ports Both : eth2.2-4 : eth1.5 : eth1.7 Session 3...
Page 727: Show Multicast Filtering-Mode
DGS-6604 show multicast filtering-mode show multicast filtering-mode Use the show multicast filtering-mode command to display the filtering mode for handling the multicast packets received on the interface. show multicast filtering-mode [interface INTERFACE-ID] Syntax Description INTERFACE-ID (Optional) Specifies the interface to display the filtering mode on (only VLAN interfaces are supported).
Page 728: Show Policy-Map
DGS-6604 show policy-map show policy-map Use this command to display the policy map configuration. show policy-map [POLICY-NAME | interface INTERFACE-ID] Syntax Description INTERFACE-ID (Optional) Module and port number. POLICY-NAME (Optional) Specifies the name of the policy map. If not specified, all policy maps will be displayed.
Page 729 DGS-6604 show policy-map The following sample output shows the contents of the policy map called policy1: Switch# show policy-map policy1 Policy Map policy1 Class police police tr-tcm cir 500000 bc 10000 pir 1000000 be 10000 exceed-action : set- dscp-transmit 2 violate-action : drop Total Entries : 1 The following sample output shows all policy maps configured at eth3.1:...
Page 730: Show Port-Security
DGS-6604 show port-security show port-security Use this command to display the current port security setting. show port-security [interface INTERFACE-ID [, | -] ] [address] Syntax Description INTEFACE-ID (Optional) Specifies the ID of interfaces to display. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
Page 731: Show Power-Saving
DGS-6604 show power-saving show power-saving Use this command to display the power saving information. show power-saving Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example The following example shows how to display power-saving information. DGS-6600:2#show power-saving Power-saving status ============================ phy power-saving:Enabled...
Page 732: Show Qos Aggregate-Policer
DGS-6604 show qos aggregate-policer show qos aggregate-policer Use this command to display the configured aggregated policer. show qos aggregate-policer [NAME] Syntax Description NAME (Optional) Specifies the name of the aggregate policer. Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example...
Page 733: Show Qos Interface
DGS-6604 show qos interface show qos interface Use this command to display the port level QoS configurations. show qos interface INTERFACE-ID [,|-] { cos | deficit-round-robin | trust | bandwidth | dscp- mutation | map {dscp-color | cos-color | dscp-cos} } Syntax Description interface Specifies the interface ID to display.
Page 734 DGS-6604 show qos interface This example displays the port trust state for ports eth3.2 - eth3.5. Switch> show qos interface eth3.2-3.5 trust Interface Trust State ---------- ------------ eth3.2 trust DSCP eth3.3 trust CoS eth3.4 trust DSCP eth3.5 trust CoS Total Entries: 4 Switch>...
Page 735 DGS-6604 show qos interface The following example displays the CoS bandwidth allocation for ports eth3.1- 3.2: Switch> show qos interface eth3.1-3.2 bandwidth Bandwdith Control Table Interface Ingress Rate (Kbps) Egress Rate (Kbps) ------------------------------------------------------ eth3.1 64 (qos) 128 (qos) eth3.2 256 (dot1x) 256 (dot1x) Total Entries: 2 This example displays the DSCP to color map for ports eth3.1 to eth3.2.
Page 736 DGS-6604 show qos interface The following example displays the DSCP to CoS map for ports eth3.1. Switch> show qos interface eth3.1 map dscp-cos eth3.1 -------------------------------- 00 00 00 00 00 00 00 00 00 01 01 10 01 01 01 01 01 01 02 02 02 02 20 02 02 02 02 03 03 03 03 03 01 30 03 03 04 04 04 04 04 04 04 04 40 05 05 05 05 05 05 05 05 06 06...
Page 737: Show Qos Map
DGS-6604 show qos map show qos map Use this command to display the QoS DSCP mutation map configuration. show qos map dscp-mutation [MAP-NAME] Syntax Description MAP-NAME (Optional) Specifies the name of the DSCP mutation map to display. Default None Command Mode User EXEC or any configuration mode Usage Guideline If no name is specified after show qos map dscp-mutation, all maps will be...
Page 738: Show Route-Map
DGS-6604 show route-map show route-map Use this command to display static route maps, show route-map [MAP-NAME] Syntax Description MAP-NAME (Optional) Name of a specific route map. Default None Command Mode Privileged EXEC Usage Guideline The command displays all the ACL-specific information that pertains to the route map in the same display without having to execute a show route-map command to display each ACL that is associated with the route map.
Page 739: Show Running-Config
DGS-6604 show running-config show running-config Use this command to display the contents of the current running configuration file. show running-config Syntax None Default None Command Mode Privilege EXEC at level 15 Usage Guideline The show running-config command output for the current running system configuration.
Page 740: Snmp Show Snmp
DGS-6604 show snmp show snmp Use this command to display the SNMP information of the device. show snmp { community | host | view | group | engineID } Syntax Description community Display SNMP community information. host Display SNMP trap recipient information. view Display SNMP view information.
Page 741 DGS-6604 show snmp This example is sample output from the command show snmp view. Switch# show snmp view View Name Subtree View Type ----------------------------------------------------- restricted 1.3.6.1.2.1.1 Included restricted 1.3.6.1.2.1.11 Included restricted 1.3.6.1.6.3.10.2.1 Included restricted 1.3.6.1.6.3.11.2.1 Included restricted 1.3.6.1.6.3.15.1.1 Included CommunityView Included CommunityView 1.3.6.1.6.3...
Page 742 DGS-6604 show snmp This example is sample output from the command show snmp engineID. Switch# show snmp engineID Local SNMP engineID: 00000009020000000C025808 Switch# CLI Reference Guide...
Page 743: Show Snmp-Server
DGS-6604 show snmp-server show snmp-server Use this command to display configuration information about the SNMP server. show snmp-server [traps] Syntax Description traps (Optional) Display the control for all trap notifications. Default None Command Mode User EXEC or any configuration mode Usage Guideline Use this command to display the global configuration about the SNMP server without using the keyword traps.
Page 744 DGS-6604 show snmp-server Switch# show snmp-server traps Global Trap State : Enabled SNMP Authentication : Enabled linkup : Enabled linkdown : Enabled coldstart : Enabled warmstart : Disabled bridge : Enabled rmon : Disabled entity : Disabled vrrp : Enabled ping : Disabled traceroute...
Page 745: Show Snmp User
DGS-6604 show snmp user show snmp user Use this command to display information about the configured characteristics of an SNMP user. show snmp user [ USER-NAME ] Syntax Description USER-NAME (Optional) Name of a specific user or users about which to display SNMP information.
Page 746 DGS-6604 show snmp user Example This example shows how to display the SNMP user authuser’s information. Switch# show snmp user authuser User Name: authuser Engine ID: 00000009020000000C025808 Authentication Protocol: MD5 Privacy Protocol: DES Group Name: VacmGroupName Total Entries: 1 Display Field Description of significant display fields.
Page 747: Show Sntp
DGS-6604 show sntp show sntp Use this command to show information about the SNTP server. show sntp Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline None Example The following example shows how to display the SNTP information: Switch>...
Page 748: Show Spanning-Tree
DGS-6604 show spanning-tree show spanning-tree This command is used to show the information about the STP module. This command is only for STP & RSTP. show spanning-tree [ interface [INTERFACE-ID [ , | - ] ] Syntax Description interface Specifies the INTERFACE-ID which to display information for. INTERFACE-ID (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
Page 749 DGS-6604 show spanning-tree Switch# show spanning-tree Spanning tree: Enabled, mode: RSTP Forwarding BPDU : Disabled Root ID Priority : 4097 Address : 00-04-9B-78-08-00 Bridge ID Priority : 4097 (priority 4096 sys-id-ext 1) Address : 00-04-9B-78-08-00 Hello Time : 2 sec, Max Age: 20 sec, Forward Delay: 15 sec Topology Changes Count : 0 codes - F: Fast forwarding is configured as enabled Configured link type: A- Auto, P- point to point, S- shared...
Page 750: Mstp Instance
DGS-6604 show spanning-tree mst show spanning-tree mst Use the command to show the information that used in MSTP version. show spanning-tree mst [configuration [digest]] show spanning-tree mst [instance INSTANCE-ID [, | -] ] show spanning-tree mst [instance INSTANCE-ID [ , | - ] interface INTERFACE-ID [ , | - ] ] Syntax Description configuration Specifies to display a table of the mapping relationship between VLANs and...
Page 751 DGS-6604 show spanning-tree mst Examples This example shows how to MSTP summary information. Switch# show spanning-tree mst Spanning tree: Enabled, protocol:MSTP Operation status: Forward delay 15 sec, Max age 20 sec Configured : Forward delay 15 sec, Max age 20 sec, max hops 20, transmit hold count 6 >>>>>MST0 vlans mapped: 1,4-4094...
Page 752 DGS-6604 show spanning-tree mst This example shows how to display the MSTP MD5 digest information. Switch#show spanning-tree mst digest Name : [region1] Revision : 2, Instances configured: 3 Digest : 3C 60 DB F2 4B 03 EB F0 9C 59 22 F4 56 D1 8A 03 Switch# CLI Reference Guide...
Page 753: Show Ssh
DGS-6604 show ssh show ssh Use this command to display the status of Secure Shell (SSH) server connections. show ssh Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline Use the show ssh command to display the status of the SSH connections on the switch.
Page 754: Show Startup-Config
DGS-6604 show startup-config show startup-config Use this command to display the content of the startup configuration file. show startup-config Syntax None Default None Command Mode Privilege EXEC at level 15 Usage Guideline Use show startup-config command to display the system configuration contents of the file which is specified with the boot config command.
Page 755: Show Storm-Control
DGS-6604 show storm-control show storm-control Use this command to show the current storm control settings. show storm-control [interface [INTERFACE-ID] [, | -] [broadcast | multicast | unicast]] Syntax Description INTERFACE-ID Interface name/id. broadcast Displays the current Broadcast storm setting multicast Displays the current Multicast storm setting unicast Displays the current Unicast (DLF) storm setting...
Page 756 DGS-6604 show storm-control This example shows all the interface settings. Switch# show storm-control interface Interface Storm Action Type Threshold ----------- -------------- ------------ ---------------- --------------- eth3.1 Broadcast Drop eth3.1 Multicast Drop percentage eth3.1 Unicast Drop percentage eth3.2 Broadcast Shutdown percentage eth3.2 Multicast Drop percentage...
Page 757: Show System
DGS-6604 show system show system Use this command to display information about the Switch system. show system [cpu] [protocol-state] Syntax Description (Optional) Shows the information about the CPU utilization of the management control unit. protocol-state (Optional) Shows the information about supporting protocols. Default None Command Mode...
Page 758 DGS-6604 show system Switch>show system Device Type :Chassis-based High-Speed Switch Hardware Version First MAC Address :06:B0:00:17:00:00 Number of MAC Address(es) :4096 Slot: 1 Hardware Version :0A1G Bootloader Version :1.00.002 Firmware Version :1.00.018 :QT0X1AC000001 Model Name :DGS-6600-CMI First MAC Address :06:60:0c:10:00:20 Number of MAC Address(es) Slot: 2 Hardware Version...
Page 759 DGS-6604 show system The following shows the output for the command show system protocol-state command: CLI Reference Guide...
Page 760 DGS-6604 show system DGS-6600:15#show system protocol-state Password Encryption :Disabled SNMP Server :Disabled SNMP6 Server :Disabled Sys Logging :Enabled TELNETv4 :Enabled(TCP:23) TELNETv6 :Enabled(TCP:23) :Enabled(TCP:80) :Disabled(TCP:22) SSH6 :Disabled(TCP:22) RMON :Enabled Spanning Tree Version :Disabled LACP :Enabled 802.1x :Disabled GVRP :Disabled ERPS :Disabled :Disabled OSPF :Disabled...
Page 761: Show Time-Range
DGS-6604 show time-range show time-range Use this command to display the time range profile configuration. show time-range [ NAME ] Syntax Description NAME (Optional) The name of the time-range profile to be displayed. If no NAME argument is specified, all time-range profiles will be displayed. Up to 32 characters are allowed.
Page 762: Show Traffic-Segmentation
DGS-6604 show traffic-segmentation show traffic-segmentation Use this command to show the traffic segmentation for some ports or all ports. show traffic-segmentation [ interface INTERFACE-ID [ , | - ] ] Syntax Description interface (Optional) Specifies the ID of an interface. The allowable interfaces are either INTERFACE-ID physical ports or port channels.
Page 763: Show Unit
DGS-6604 show unit show unit Use this command to display information about the system’s modules. show unit [ UNIT-ID ] Syntax Description UNIT-ID (Optional) Slot ID to indicate which slot (module) the information is going to be displayed for. Default None Command Mode User EXEC or any configuration mode...
Page 764: Show Username
DGS-6604 show username show username Use this command to display the username and password pair database. show username [NAME] Syntax Description NAME (Optional) A specfied name of a user account. Only one word is allowed for the name arguement. If no NAME is specified, all user accounts will be displayed. Default None Command Mode...
Page 765: Show User-Session
DGS-6604 show user-session show user-session Use this command to display information about the active lines on the switch. show user-session [console | telnet | ssh | http | https] Syntax Description console (Optional) displays the information of the current console users. telnet (Optional) displays the information of the current telnet users.
Page 766: Show Version
DGS-6604 show version show version To display version information about software, hardware, etc., use the show version command. show version Syntax None Default None Command Mode User EXEC or any configuration mode Usage Guideline This command displays the software and hardware information about the Switch. Example This example shows how to display the software and hardware versions on a DGS-6604 switch:...
Page 767: Show Vlan
DGS-6604 show vlan show vlan Use the show VLAN command to display the parameters for all configured VLANs or one VLAN (if the VLAN id or name is specified) on the switch. Use the command show vlan subnet-base or show vlan mac-base to display a subnet-based VLAN or MAC-based VLAN respectively.
Page 768 DGS-6604 show vlan The following are the causes for an interface to become an untagged member port of a VLAN. 1. Configuration using an access VLAN command. 2. VLAN assignment from a RADIUS server. Use the command show vlan [ subnet-base | mac-base ] to display a Subnet- based VLAN or MAC-based VLAN respectively.
Page 769 DGS-6604 show vlan Switch# show vlan VLAN 1: Name: default GVRP advertisement: yes Static Tag Member Ports: None Static Untag Member Ports: eth4.2, eth4.3, eth4.4, eth4.5, eth4.6, eth4.7, eth4.8, eth4.9, eth4.10, eth4.11, eth4.12, eth4.13, eth4.14, eth4.15, eth4.16, eth4.17, eth4.18, eth4.19, eth4.20, eth4.21, eth4.22, eth4.23, eth4.24, eth4.25, eth4.26, eth4.27, eth4.28, eth4.29, eth4.30, eth4.31, eth4.32, eth4.33, eth4.34, eth4.35, eth4.36,...
Page 770 DGS-6604 show vlan This example shows how to display information for interface ports eth4.1 to eth4.3. Information such as ingress checking and the acceptable frame type is displayed. Switch# show vlan interface eth4.1-4.3 eth4.1 PVID : 99 GVRP State : Disabled Ingress checked : Enabled Access VLAN...
Page 771 DGS-6604 show vlan This example shows how to display the MAC-base VLAN table. Switch(config)#show vlan mac-base MAC Address VLAN ID ----------------- ------- 00-80-cc-00-00-11 00-80-cc-00-00-21 00-80-cc-00-00-12 00-80-cc-00-00-31 00-80-cc-00-00-33 Total Entries: 5 Switch(config)# This example shows how to display the subnet-base VLAN table. Switch(config)#show vlan subnet-base Subnet VLAN ID...
Page 772: Show Vlan-Tunnel
DGS-6604 show vlan-tunnel show vlan-tunnel Use this command to display the VLAN tunnel related settings. show vlan-tunnel [ INTERFACE-ID [ , | - ] ] Syntax Description [ INTERFACE-ID (Optional) Multiple interfaces can be specified to be displayed. The multiple interface numbers are separated by comma, or hyphen.
Page 773 DGS-6604 show vlan-tunnel Examples This example shows how to display the status of VLAN tunnel mode. Switch# show vlan-tunnel VLAN tunneling: enabled eth4.1:UNI port, CoS remarking: 5, ingress-checking: disabled, remove-inner-tag: disabled VLAN S-VID C-VID ------------- ---- ----- ------- encapsulation 1001 2002 2003 2004...
Page 774 DGS-6604 show vlan-tunnel Field Description CoS remarking Indicates the CoS remarking status at the port. It could be either disabled or an integer from 0~7 (indicating the remarking CoS Value). VLAN Shows the VLAN encapsulation and remarking pairs. S-VID/C-VID Indicates the service provider VLAN ID and customer VLAN ID of the VLAN tunneling pair.
Page 775: Show Vlan-Tunnel Ctag-Mapping
DGS-6604 show vlan-tunnel ctag-mapping show vlan-tunnel ctag-mapping This command is used to display the state of the dynamically learned customer VLAN tag mechanism and the static customer VLAN tag mappings. show vlan-tunnel ctag-mapping { dynamic state | static } Syntax Description dynamic state Display the state of dynamic learned customer VLAN tag mechanism.
Page 776: Vrrp Show Vrrp
DGS-6604 show vrrp show vrrp This command is used to view the VRRP status. show vrrp [interface INTERFACE-ID [ VRID ] ] Syntax Description INTERFACE-ID (Optional) The interface name of a configured IP interface. When the INTERFACE-ID is specified, the VRRP information that is related to the interface will be displayed.
Page 777 DGS-6604 show vrrp Switch#show vrrp vlan1 – VRID 7 State is Master Virtual IP address is 20.0.1.1 Virtual MAC address is 00-00-5e-00-01-07 Advertisement interval is 1 sec Preemption enabled Priority is 255 Critical IP address is 0.0.0.0 Master router is 20.0.1.1 (local) Master Down interval is 3.003 sec vlan1 –...
Page 778 DGS-6604 show vrrp The following example shows how to view VRRP information of interface vlan1 and VRID 8. Switch#show vrrp interface vlan1 8 vlan1 – VRID 8 State is Master Virtual IP address is 20.1.1.2 Virtual MAC address is 00-00-5e-00-01-08 Advertisement interval is 1 sec Preemption disabled Priority is 200...
Page 779: Show Vrrp Brief
DGS-6604 show vrrp brief show vrrp brief This command is used to view the VRRP brief status. show vrrp brief [ all ] Syntax Description (Optional) Displays all information for all virtual routers, including virtual routers in a shutdown state. Default None Command Mode...
Page 780: Shutdown (Interface)
DGS-6604 shutdown (interface) shutdown (interface) Use this command to disable the port interface. Use the no form of the command to enable the port interface. shutdown no shutdown Syntax None Default Enabled Command Mode Interface configuration Usage Guideline Only physical port interfaces are valid for this configuration. The command will change the state of a port to be disabled.
Page 781: Shutdown (Management Port)
DGS-6604 shutdown (Management Port ) shutdown (Management Port ) Use this command to disable the management port. Use the no form of the command to turn the management port back to the enabled state. shutdown no shutdown Syntax None Default Enabled Command Mode Management interface...
Page 782 DGS-6604 show ip dhcp snooping Use this command to display DHCP snooping configuration. show ip dhcp snooping Syntax Not Applicable Default Not Applicable Command Mode EXEC mode or any configuration mode Usage Guideline Use the command to display DHCP snooping configuration setting. Example This example shows how to display DHCP Snooping configuration: Switch# show ip dhcp snooping...
Page 783: Show Ip Dhcp Snooping Binding
DGS-6604 show ip dhcp snooping binding show ip dhcp snooping binding Use the command to display DHCP snooping binding entries. show ip dhcp snooping binding [IP-ADDRESS] [MAC-ADDRESS] [vlan VLAN-ID] [interface [INTERFACE-ID [, | -]]] Syntax IP-ADDRESS (Optional) Display the binding entry based on IP address. MAC-ADDRESS (Optional) Display the binding entry based on MAC address.
Page 784 DGS-6604 This example shows how to display DHCP snooping binding entries by IP 10.1.1.1: Switch# show ip dhcp snooping binding 10.1.1.1 Mac Address IP Address Lease(seconds) Type VLAN Interface ----------------- --------------- ------------- -------------- ------ ---- ----- 00-01-02-03-04-05 10.1.1.1 1500 dhcp-snooping eth3.5 Total Entry: 1 Switch#...
Page 785 DGS-6604 This example shows how to display DHCP snooping binding entries by IP 10.1.1.1 and MAC 00-01-02-03-04-05 on vlan100: Switch# show ip dhcp snooping binding 10.1.1.11 00-01-02-03-04-05 vlan 100 Mac Address IP Address Lease(seconds) Type VLAN Interface ----------------- --------------- ------------- -------------- ------ ---- ----- 00-01-02-03-04-05 10.1.1.1...
Page 786: Show Ip Dhcp Snooping Database
DGS-6604 show ip dhcp snooping database show ip dhcp snooping database This command is used to display the statistics of the DHCP snooping database. show ip dhcp snooping database Syntax None Default Not applicable Command Mode EXEC mode or any configuration mode Usage Guideline User can use this command to display DHCP snooping database statistics Example...
Page 787: Show Erps Domain
DGS-6604 show erps domain show erps domain The show erps domain command is used to display information of all created ERPS domains. show erps domain [DOMAIN-NAME] Syntax Description DOMAIN-NAME Specifies the name of ERPS domain with a maximum of 32 characters. (Only allow character set: ‘0-9’.
Page 788 DGS-6604 show erps domain Switch# show erps domain Domain ERPI Type Status Port-State -------------------- ---- ------ ---------- ------------------------- campus1 1 Major Idle East:Blocked West:Forwarding campus1 2 Sub Protection East:Virtual-Channel West:Forwarding campus2 3 Major Disabled East: - West: - Total ERPS domains : 2 Total ERP instances : 3 Switch# The following example displays instance information of ERPS domain campus1:...
Page 789: Show Erps Erpi
DGS-6604 show erps erpi show erps erpi The show erps erpi command is used to display information of ERP instance. show erps erpi [INSTANCE-ID] Syntax INSTANCE-ID Specifies the identifier of ERP instance which will be showed. (Range: 1-4095) Default Not applicable Command Mode EXEC mode or any configuration mode Usage Guideline...
Page 790 DGS-6604 show erps erpi Switch# show erps erpi 1 ERPS global state : Enabled ERP instance #1 ------------------------------------ Domain name : campus1 Instance type : Major Instance state : Enabled Instance status : Idle R-APS controlled VLAN : 2 Ring MEL : 1 East ring port : eth3.1 East ring port state : Blocked West ring port : eth3.2...
Page 791 DGS-6604 show erps erpi Switch# show erps erpi 2 ERPS global state : Enabled ERP instance #2 ------------------------------------ Domain name : campus1 Instance type : Sub Instance state : Disabled Instance status : - R-APS controlled VLAN : 3 Ring MEL : 1 East ring port : eth3.2[Shared] East ring port state : - West ring port : eth3.3...
Page 792: Show Vlan Voice-Vlan
DGS-6604 show vlan voice-vlan show vlan voice-vlan Use this command to display the voice VLAN configurations. show vlan voice-vlan [ oui | interface INTERFACE-ID [, | -] ] show vlan voice-vlan [ lldp-med ] device [ interface INTERFACE-ID [, | -] ] Syntax Description (Optional) Display OUI information of voice VLAN.
Page 793 DGS-6604 This example displays the OUI information of voice VLAN. Switch#show vlan voice-vlan oui OUI Address Mask Description ---------------- ----------------- ------------- 00-01-e3-00-00-00 ff-ff-ff-00-00-00 Siemens 00-03-6b-00-00-00 ff-ff-ff-00-00-00 Cisco 00-09-6e-00-00-00 ff-ff-ff-00-00-00 Avaya 00-0f-e2-00-00-00 ff-ff-ff-00-00-00 Huawei&3COM 00-60-b9-00-00-00 ff-ff-ff-00-00-00 NEC&Philips 00-d0-1e-00-00-00 ff-ff-ff-00-00-00 Pingtel 00-e0-75-00-00-00 ff-ff-ff-00-00-00 Veritel 00-e0-bb-00-00-00...
Page 794 DGS-6604 This example displays the learned voice devices on ports eth3.1 and eth3.2. Switch#show vlan voice-vlan device interface eth3.1-3.2 Interface Voice Device Address ------------- -------------------- eth3.1 00-03-6b-00-00-01 eth3.1 00-03-6b-00-00-02 eth3.1 00-03-6b-00-00-05 eth3.2 00-03-6b-00-00-09 eth3.2 00-03-6b-00-00-0a Total Entries: 5 Switch# This example displays the voice devices discovered by LLDP-MED. If the remaining time decreases to 0, the voice device will be deleted.
Page 795: Show Ip Policy
DGS-6604 show ip policy show ip policy Use the command to display the route map used for policy based routing. show ip policy Syntax Not applicable. Default Not applicable. Command Mode EXEC mode. Usage Guideline The user can use the command to display the policy based routing configured on interfaces.
Page 796: Show Ip Arp Inspection
DGS-6604 show ip arp inspection show ip arp inspection Use this command to display the status of DAI for a specific range of VLANs. show ip arp inspection [interfaces [PORT [, | -]] | statistics VLAN [, | -]] Syntax Specifies a port, range of ports or all ports to configure.
Page 797 DGS-6604 show ip arp inspection This example shows how to display the statistics of packets that have been processed by DAI for all active VLANs: Switch# show ip arp inspection statistics VLAN Forwarded Dropped DHCP Drops ----- --------- --------- ---------- 21546 145261 145261...
Page 798 DGS-6604 show ip arp inspection This example shows how to display the trust state of interface eth3.3: Switch# show ip arp inspection interfaces eth3.3 Interface Trust State --------- ----------- eth3.3 untrusted Switch# This example shows how to display the trust state of interfaces on the switch: Switch# show ip arp inspection interfaces Interface Trust State...
Page 799: Show Ip Source Binding
DGS-6604 show ip source binding show ip source binding Use the command to display IP-source guard binding entry. show ip source binding [IP-ADDRESS] [MAC-ADDRESS] [dhcp-snooping | static] [vlan VLAN- ID] [interface INTERFACE-ID [, | -] ] Syntax IP-ADDRESS (Optional) Display the IP-source guard binding entry based on IP address. MAC-ADDRESS (Optional) Display the IP-source guard binding entry based on MAC address.
Page 800 DGS-6604 show ip source binding This example shows how to display IP Source Guard binding entries by IP address 10.1.1.11. Switch# show ip source binding 10.1.1.11 MAC Address IP Address Lease(sec) Type VLAN Interface ----------------- --------------- ---------- ------------- ----- ---------- ------ 00-01-01-01-01-01 10.1.1.11 infinite...
Page 801: Show Ip Verify Source
DGS-6604 show ip verify source show ip verify source Use this command to display the port ACL entry on a particular interface. show ip verify source [interface INTERFACE-ID [, | -]] Syntax INTERFACE-ID Specifies a port or a range of ports to configure. (Optional) Specify a series of interfaces, or separate a range of interfaces from a previous range.
Page 802: Show Ip Dhcp Screening
DGS-6604 show ip dhcp screening show ip dhcp screening Used to display the configuration of DHCP server screening show ip dhcp screening Syntax None. Default Not applicable Command Mode EXEC mode or any other configuration mode Usage Guideline This command is used to display the configuration of DHCP server screening. Example The following example shows the configuration which enables functions on port range from eth4.1 to eth4.23 and adds a binding composed of server IP 10.1.1.1...
Page 803: Show Sflow
10.1.1.2. The flow samples and counter samples of eth3.2 are sent to both 10.1.1.2 and 10.1.1.3: switch(config)# show sflow sFlow Agent Version: 1.3;D-Link Corporation;2.00 sFlow Agent Address: 10.1.1.1 sFlow State...
Page 804 DGS-6604 show sflow Port : 6343 Datagram Version Index Owner : collector2 Current Countdown Time: 86355 Max Datagram Size : 1400 Address : 10.1.1.3 Port : 6343 Datagram Version Index Owner : (NULL) Current Countdown Time: 0 Max Datagram Size : 1400 Address : 0.0.0.0...
Page 805: Show Lldp
DGS-6604 show lldp show lldp To displays the switch's general LLDP configuration, use the show lldp command. show lldp Syntax This command has no arguments or keywords. Default Not applicable. Command Mode EXEC mode or any configuration mode Usage Guideline This command is used to show LLDP system global configurations.
Page 806 Hardware Revision : 0A Firmware Revision : XXXXXXXXXX Software Revision : XXXXXXXXXX Serial Number : 123456789-123456789-123456789-01 Manufacturer Name : D-Link Corporation. Model Name : DGS-6604 Asset ID : XXXXXXXXXX PoE Device Type : PSE Device PoE PSE Power Source : Primary...
Page 807: Show Lldp Interface
DGS-6604 show lldp interface show lldp interface To display the LLDP each physical interface configuration for advertisement options, use the show lldp interface command in user EXEC mode. show lldp interface INTERFACE-ID [, | -] Syntax Description INTERFACE-ID Displays LLDP configuration for a specific interface. Valid interfaces are physical interface.
Page 808 DGS-6604 show lldp interface Switch> show lldp interface eth4.4 Port ID: eth4.4 Port ID : eth4.4 Admin Status : TX and RX Basic Management TLVs: Port Description : Disabled System Name : Disabled System Description : Disabled System Capabilities : Disabled Enabled Management Address IPv4 Address: 192.168.254.10, 192.168.254.11...
Page 809: Show Lldp Local Interface
DGS-6604 show lldp local interface show lldp local interface To display the each physical interface information, which will be carried in the LLDP TLVs and sent to neighbor devices, use the show lldp local interface command. show lldp local interface INTERFACE-ID [, | -] [brief | detail ] Syntax Description INTERFACE-ID...
Page 810 DGS-6604 show lldp local interface Switch> show lldp local interface eth4.4 detail Port ID : eth4.4 --------------------------------------------------------------------------- Port ID Subtype : MAC Address Port ID : 08-03-04-17-00-03 Port Description : RMON Port 4 on Unit 4 Port VLAN ID Management Address Count Subtype : IPv4 Address...
Page 811 DGS-6604 show lldp local interface Protocol Identity Entries Count Entry 1 : Protocol Index Protocol ID : 00 27 42 42 03 00 00 03 Protocol Name : STP MAC/PHY Configuration/Status Auto-Negotiation Support : Supported Auto-Negotiation Enabled : Enabled Auto-Negotiation Advertised Capability : 6c03(hex) Auto-Negotiation Operational MAU Type : 0000(hex)
Page 812 DGS-6604 show lldp local interface Inventory : Support Network Policy Application type : Voice VLAN ID Priority DSCP Unknown False Tagged True Extended Power-Via-MDI TLV Power priority High Power value 30 Watts Switch> The following is sample output from the show lldp local interface command to display outbound LLDP advertisements for eth3.1 in brief mode.
Page 813 DGS-6604 show lldp local interface Switch> show lldp local interface eth 3.1 Port ID : eth3.1 ----------------------------------------------------------------------- Port ID Subtype : MAC Address Port ID : 08-03-04-17-00-03 Port Description : RMON Port 1 on Unit 3 Port VLAN ID Management Address Count PPVID Entries Count VLAN Name Entries Count Protocol Identity Entries Count: 2...
Page 814: Show Lldp Management-Address
DGS-6604 show lldp management-address show lldp management-address To display the LLDP management address information, use the show lldp management-address in user EXEC mode. show lldp management-address [ IP-ADDRESS | IPV6-ADDRESS ] Syntax Description IP-ADDRESS (Optional) Display the LLDP management information for specific IPv4 address.
Page 815 DGS-6604 show lldp management-address Switch> show lldp management-address Address 1: (default) ------------------------------------------------ Subtype : IPv4 Address : 10.90.90.90 IF Type : IfIndex : 1.3.6.1.4.1.171.10.118.3 Advertising Ports eth3.1-3.3 Address 2 : ------------------------------------------------ Subtype : IPv4 Address : 10.90.90.90 IF Type : IfIndex : 1.3.6.1.4.1.171.10.118.3 Advertising Ports eth3.4...
Page 816: Show Lldp Neighbor Interface
DGS-6604 show lldp neighbor interface show lldp neighbor interface To display the each physical interface information currently learned from the neighbor, use the show lldp neighbor interface command. show lldp neighbor interface INTERFACE-ID [, | -] [ brief | detail ] Syntax Description INTERFACE-ID Valid interfaces are physical interface...
Page 817 DGS-6604 show lldp neighbor interface Example The following is sample output from the show lldp neighbor interface command to display information about neighboring devices learned by LLDP on eth4.9 in detailed mode: Switch> show lldp neighbor interface eth4.9 detail Port ID : eth4.9 --------------------------------------------------------------------------- ---- Remote Entities Count : 1...
Page 818 DGS-6604 show lldp neighbor interface LLDP-MED capabilities: LLDP-MED device class : Endpoint device class III LLDP-MED capabilities support LLDP-MED capabilities : Support Network Policy : Support Location identification : Not Support Extended power via MDI : Support Inventory : Support LLDP-MED capabilities enabled LLDP-MED capabilities : Enabled...
Page 819 DGS-6604 show lldp neighbor interface Switch> show lldp neighbor interface eth3.1 Port ID : 1 ---------------------------------------------------------------------- Remote Entities Count : 2 Entity 1 Chassis ID Subtype : MAC Address Chassis ID : 00-01-02-03-04-01 Port ID Subtype : Local Port ID : eth3.1 Port Description : RMON Port 3 on Unit 1...
Page 820 DGS-6604 show lldp neighbor interface Entity 2 Chassis ID Subtype : MAC Address Chassis ID : 00-01-02-03-04-02 Port ID Subtype : Local Port ID : 2/1 Port Description : RMON Port 1 on Unit 2 System Name : Switch2 System Description : Stackable Ethernet Switch System Capabilities Supported : Repeater, Bridge...
Page 821 DGS-6604 show lldp neighbor interface Switch > show lldp neighbor interface eth3.1-3.2 brief Port ID: eth3.1 ------------------------------------------------------------ Remote Entities Count : 3 Entity 1 Chassis ID Subtype : MAC Address Chassis ID : 00-01-02-03-04-01 Port ID Subtype : Local Port ID : eth3.1 Port Description : RMON Port 1 on Unit 3...
Page 822: Show Lldp Statistics
DGS-6604 show lldp statistics show lldp statistics To display the system global LLDP statistics information, use the show lldp statistics in user EXEC mode, use the show lldp statistics command. show lldp statistics Syntax This command has no arguments or keywords. Default Not applicable Command Mode...
Page 823: Show Lldp Statistics Interface
DGS-6604 show lldp statistics interface show lldp statistics interface To display the each physical interface LLDP statistics information, use the show lldp statistics interface command. show lldp statistics interface INTERFACE-ID [, | -] Syntax Description INTERFACE-ID Valid interfaces are physical interface (Optional) Specify a series of interfaces, or separate a range of interfaces from a previous range.
Page 824: Show Poe Power System
DGS-6604 show poe power system show poe power system Use the command to display the setting and actual values of the whole POE system. show poe power system [unit UNIT-ID [,-]] {power-info | parameters} Syntax Description (Optional) Specify the unit to be displayed. If no specified unit, all supported PoE unit UNIT-ID units are displayed.
Page 825 DGS-6604 show poe power system Switch# show poe power system power-info PoE system power budget: 2400 Watts(Total) PoE system notification: enabled PoE system service policy: preemptive unit priority allocated(W) consumed(W) remaining(W) ---------------------------------------------- ---------------------------------------------- Total 1500 This example shows how to display the PoE system parameters with unit list contained of hyphen sign.
Page 826: Show Poe Power-Inline
DGS-6604 show poe power-inline show poe power-inline Use the show power inline to display the Power over Ethernet (PoE) status for the specified PoE port, or for all PoE ports in the switch system. show poe power inline [INTERFACE-ID ] {status | statistic | measurement | description} Syntax Description (Optional) Specify the interface to be displayed.
Page 827 DGS-6604 show poe power-inline switch# show poe power inline status Interface Priority PSE State OP Mode Class Max(mW) Used(W) Time- Range =========================================================================== ==== delivering auto class-1 4000 delivering auto class-2 7000 rdtime delivering static class-3 15400 15.0 4.2* delivering auto class-3 15400 12.4...
Page 828 DGS-6604 show poe power-inline switch# show poe power inline measurement Interface Voltage(V) Current(mA) Temp(C) Power(W) --------- ---------- ----------- -------- -------- 54.2 109.2 196.1 10.8 54.6 197.7 10.7 54.8 286.2 15.7 CLI Reference Guide...
Page 829 DGS-6604 To start an encrypted session with a remote networking device, use the ssh command in user EXEC mode. ssh [-c {3des | aes128-cbc | aes256-cbc}] [-m {hmac-md5 | hmac-sha1 | hmac-sha1-96}] [-p PORT-NUMBER] -l USERNAME {IP-ADDRESS | IPV6-ADDRESS} Syntax (Optional)Specifies the crypto algorithm, 3DES, AES128-CBC or AES256-CBC, to use for encrypting data.
Page 830 Chassis-based High-Speed Switch Command Line Interface Firmware: 1.50.B013 Copyright (c) 2007 D-Link Corporation. All rights reserved. Switch# The following example shows a ssh session using the crypto algorithm aes128- cbc and an HMAC of hmac-sha1-96. The username is admin, and the IP is 20.74.19.200.
Page 831: Switchport Voice-Vlan State
DGS-6604 switchport voice-vlan state switchport voice-vlan state Use the command to configure the voice VLAN state of ports. switchport voice-vlan state {enable | disable} Syntax Description enable Enable the voice VLAN function on ports. disable Disable the voice VLAN function on ports. Default The default state is disabled.
Page 832: Snmp-Server
DGS-6604 snmp-server snmp-server To enable the Simple Network Management Protocol (SNMP) agent, use the snmp-server command. To disable the SNMP agent, use the no form of this command. snmp-server no snmp-server Syntax None Default Disabled Command Mode Global configuration Usage Guideline The remote SNMP manager sends SNMP requests to agents and receives SNMP responses and notifications from agents.
Page 833: Snmp-Server Community
DGS-6604 snmp-server community snmp-server community Use this command to set up the community access string to provide access to SNMP. Use the no form of the command to remove the specified community string. snmp-server community COMMUNITY-STRING [ view VIEW-NAME ] [ro | rw] no snmp-server community COMMUNITY-STRING Syntax Description COMMUNITY-...
Page 834 DGS-6604 snmp-server community This example shows how to remove the community comaccess. Switch(config)# no snmp-server community comaccess Verify the settings by entering the show snmp community command. CLI Reference Guide...
Page 835: Snmp-Server Contact
DGS-6604 snmp-server contact snmp-server contact Use this command to configure the system’s snmp contact information. Use the no form of this command to remove the configuration of system contact information. snmp-server contact TEXT no snmp-server contact Syntax Description contact TEXT String that describes the system contact information.The maximum length is 255 characters (please refer to RFC1213 for the maximum length in detail).
Page 836: Snmp-Server Enable Traps
DGS-6604 snmp-server enable traps snmp-server enable traps To enable all Simple Network Management Protocol (SNMP) notification types that are available on the switch, use the snmp-server enable traps command. To disable all available SNMP notifications, use the no form of this command. snmp-server enable traps no snmp-server enable traps Syntax...
Page 837: Snmp-Server Enable Traps Snmp
DGS-6604 snmp-server enable traps snmp snmp-server enable traps snmp To enable the sending of RFC 1157 Simple Network Management Protocol (SNMP) notifications, use the snmp-server enable traps snmp command. Use the no form of this command to disable RFC 1157 SNMP notifications,. snmp-server enable traps snmp [authentication] [linkup] [linkdown] [coldstart] [warmstart] no snmp-server enable traps snmp [authentication ] [ linkup] [linkdown] [coldstart] [warmstart]...
Page 838 DGS-6604 snmp-server enable traps snmp command and the snmp-server host command for that host must be set to enabled. The snmp-server enable traps snmp [ linkup] [linkdown] form of this command globally enables SNMP linkUp and linkDown traps. After enabling either of these traps globally, disable these traps on specific interfaces using the no snmp trap link-status command in interface configuration mode.
Page 839: Snmp-Server Engineid Local
DGS-6604 snmp-server engineID local snmp-server engineID local Use this command to specify the SNMP engine ID on the switch. Use the no form of the command to remove a configured SNMP engine ID and return the engine ID setting to the original default value. snmp-server engineID local ENGINEID-STRING no snmp-server engineID local Syntax Description...
Page 840: Snmp-Server Group
DGS-6604 snmp-server group snmp-server group Use this command to configure a new SNMP group or a table that maps SNMP users to SNMP views. Use the no form of the command to remove a specified SNMP group. snmp-server group GROUP-NAME {v1 | v2c | v3 {auth | noauth | priv}} [ read READ-VIEW ] [ write WRITE-VIEW ] [notify NOTIFY-VIEW] no snmp-server group GROUP-NAME Syntax Description...
Page 841 DGS-6604 snmp-server group Usage Guideline An SNMP group defines the access method, the read view, the write view, and the notification view. For the access method, it means that when the user who belongs to this group must use the version and access method (for V3) to access the SNMP agent. For the read view, it means that the user who belongs to this group can only read objects that are part of this view.
Page 842: Snmp-Server Host
DGS-6604 snmp-server host snmp-server host Use the command to specify the recipient of a SNMP notification operation. Use the no command to remove the recipient. snmp-server host { IP-ADDRESS } [version { 1| 2c | 3 {auth | noauth | priv } } ] WORD [vlan- interface] no snmp-server host { IP-ADDRESS } Syntax Description...
Page 843 DGS-6604 snmp-server host will be sent in trap protocol data unit (PDU). For V3 SNMP, the notification will be sent in the SNMPv2-TRAP-PDU with the SNMPv3 header. If the user specifies to send the notification in V3 format, the user can further specify whether to perform authentication and encryption of the packet.
Page 844: Snmp-Server Location
DGS-6604 snmp-server location snmp-server location Use this command to configure the system location information. Use the no snmp-server location command to set the system location information to empty. snmp-server location TEXT no snmp-server location Syntax Description location TEXT A string that describes the system location information.The maximum length is 128 characters (please refer to RFC1213 for the maximum length in detail).
Page 845: Snmp-Server User
DGS-6604 snmp-server user snmp-server user Use this command to configure a new Simple Network Management Protocol (SNMP) user. Use the no snmp-server user command to remove a user. snmp-server user USER-NAME GROUP-NAME v3 [ encrypted ] [ auth { md5 | sha } AUTH- PASSWORD [priv PRIV-PASSWORD ] ] no snmp-server user USER-NAME Syntax Description...
Page 846 DGS-6604 snmp-server user Usage Guideline Use this command to create an SNMP user. The group to which this user belongs must be created first. If this user belongs to a V3 group and also specifies authentication or encryption, then the password used for authentication and encryption needs to be defined.
Page 847: Snmp-Server View
DGS-6604 snmp-server view snmp-server view Use this command to create or update a view entry for SNMP. And use the no snmp-server view command to remove a specified SNMP view entry. snmp-server view VIEW-NAME OID-TREE { included | excluded } no snmp-server view VIEW-NAME Syntax Description VIEW-NAME...
Page 848 DGS-6604 snmp-server view Example This example shows how to create a view that includes all objects in the MIB-II subtree. Switch(config)# snmp-server view mib2 1.3.6.1.2.1 included This example shows how to set a MIB view to interfacesMibView. Switch(config)#snmp-server view interfacesMibView 1.3.6.1.2.1.2 included Switch(config)# This example shows how to set the access rights for a group called guestgroup to SNMPv3 authentication-read mode.
Page 849: Sntp Server
DGS-6604 sntp server sntp server Use this command to allow the system clock to be synchronized with the SNTP time server. To remove a server from the list of SNTP servers, use the no form of this command. sntp server IP-ADDRESS no sntp server [ IP-ADDRESS ] Syntax Description IP-ADDRESS...
Page 850: Spanning-Tree ( Global Configuration)
DGS-6604 spanning-tree ( Global configuration ) spanning-tree ( Global configuration ) Use this command to enable STP mode. Use the no form of the command to disable STP. spanning-tree no spanning-tree Syntax None Default Disable Command Mode Global configuration Usage Guideline When the no spanning-tree command is used globally to disable STP, an STP BPDU will be treated as a normal multicast packet and it will be flooded to the other VLAN member ports.
Page 851: Spanning-Tree ( Interface Configuration)
DGS-6604 spanning-tree ( Interface configuration ) spanning-tree ( Interface configuration ) This setting is used to configure the STP function on the specified port. Use the no form of the command to disable the function. spanning-tree no spanning-tree Syntax None Default Enabled Command Mode...
Page 852: Spanning-Tree (Timers)
DGS-6604 spanning-tree (timers) spanning-tree (timers) Use this command to set the value of Spanning-Tree Timers. It is only used for RSTP and STP version. spanning-tree [ hello-time SECONDS | forward-time SECONDS | max-age SECONDS ] Syntax Description hello-time SECONDS Specifies the time interval to send one BPDU at the Designated Port. The range is 1 to 10 seconds.
Page 853: Spanning-Tree Cost
DGS-6604 spanning-tree cost spanning-tree cost This setting is used to configure the value of port path-cost on the specified port. spanning-tree cost COST no spanning-tree cost Syntax Description COST Specifies the path cost for the port. The range is 1 to 200000000. Default The path cost is computed from the bandwidth setting of the interface.
Page 854: Spanning-Tree Fast-Forwarding
DGS-6604 spanning-tree fast-forwarding spanning-tree fast-forwarding To enable fast forwarding mode, use the spanning-tree fast-forwarding command. When fast forwarding is enabled the interface will be immediately put into the forwarding state upon linkup without waiting for the timer to expire. spanning-tree fast-forwarding no spanning-tree fast-forwarding Syntax None...
Page 855: Spanning-Tree Guard Root
DGS-6604 spanning-tree guard root spanning-tree guard root To enable the guard mode, use the spanning-tree guard command. To return to the default settings, use the no form of this command. spanning-tree guard root no spanning-tree guard Syntax None Default Disabled Command Mode Interface configuration (physical port and port-channel interfaces) Usage Guideline...
Page 856: Spanning-Tree Link-Type
DGS-6604 spanning-tree link-type spanning-tree link-type To configure a link type for a port, use the spanning-tree link-type command. To return to the default settings, use the no form of this command. spanning-tree link-type { point-to-point | shared } no spanning-tree link-type Syntax Description point-to-point Specifies that the port's link type is point-to-point.
Page 857: Spanning-Tree Mode
DGS-6604 spanning-tree mode spanning-tree mode Use this command to decide the STP mode. To return to the default settings, use the no form of this command. spanning-tree mode { mstp | rstp |stp } no spanning-tree mode Syntax Description mstp Multiple Spanning Tree Protocol (MSTP).
Page 858: Spanning-Tree Mst (Cost | Port-Priority)
DGS-6604 spanning-tree mst (cost | port-priority) spanning-tree mst (cost | port-priority) To set the path cost and port-priority parameters for any MST instance (including the CIST with instance ID 0), use the spanning-tree mst command. To return to the default settings, use the no form of this command. spanning-tree mst INSTANCE-ID {cost COST | port-priority PRIORITY} no spanning-tree mst INSTANCE-ID {cost | port-priority} Syntax Description...
Page 859: Spanning-Tree Mst (Forward | Max-Age | Max-Hops)
DGS-6604 spanning-tree mst (forward | max-age | max-hops) spanning-tree mst (forward | max-age | max-hops) Use this command to configure the Protocol Timers used by the STP module in MSTP mode. spanning-tree mst { forward-time SECONDS | max-age SECONDS | max-hops HOP-COUNT } Syntax Description forward-time The maximum delay time in seconds for one BPDU to be transmitted by a bridge...
Page 860: Spanning-Tree Mst Configuration
DGS-6604 spanning-tree mst configuration spanning-tree mst configuration To enter MST-configuration submode, use the spanning-tree mst configuration command. To return to the default settings, use the no form of this command. spanning-tree mst configuration no spanning-tree mst configuration Syntax None Default The default value for the MST configuration is the default value for all its parameters: •...
Page 861: Spanning-Tree Mst Hello-Time
DGS-6604 spanning-tree mst hello-time spanning-tree mst hello-time Use this command to configure the per port hello time used in MSTP version. spanning-tree mst hello-time SECONDS Syntax Description SECONDS Used to determine the time interval to send one BPDU at the Designated Port.
Page 862: Spanning-Tree Mst Priority
DGS-6604 spanning-tree mst priority spanning-tree mst priority Use this command to configure the bridge priority value for the selected MSTP instance. Use the no form of the command to return the setting to the default setting. spanning-tree mst INSTANCE-ID priority PRIORITY no spanning-tree mst INSTANCE-ID priority Syntax Description INSTANCE-ID...
Page 863: Spanning-Tree Port-Priority
DGS-6604 spanning-tree port-priority spanning-tree port-priority This setting is used to configure the value of the STP port priority on a specified port. It is only used for RSTP and STP version. Use the no form of this command to reset to the default priority. spanning-tree port-priority PRIORITY no spanning-tree port-priority Syntax Description...
Page 864: Spanning-Tree Priority
DGS-6604 spanning-tree priority spanning-tree priority This command configures the bridge priority and is only used for RSTP and STP versions. Use the no form of this command to restore to default setting. spanning-tree priority PRIORITY no spanning-tree priority Syntax Description PRIORITY The bridge priority and bridge MAC Address together form the Spanning-Tree Bridge-ID, which is an important factor in the Spanning-Tree Topology.
Page 865: Spanning-Tree Tcnfilter
DGS-6604 spanning-tree tcnfilter spanning-tree tcnfilter To enable Topology Change Notification (TCN) filtering at the specific interface, use spanning-tree tcnfilter command at the interface mode. Use the no form of this command to disable TCN filtering. spanning-tree tcnfilter no spanning-tree tcnfilter Syntax None Default...
Page 866: Spanning-Tree Transmit Hold-Count
DGS-6604 spanning-tree transmit hold-count spanning-tree transmit hold-count This setting is used to limit the maximum BPDU transmission rate for every port. spanning-tree transmit-hold-count VALUE Syntax Description VALUE Specifies the value to restrict the numbers of BPDU transmitted on a port within the Hello Time period.
Page 867: Speed
DGS-6604 speed speed Use this command to configure the physical port interface speed/duplex setting. speed {10|100|1000[master|slave]|auto} Syntax Description Specifies to set the port speed to transmit at 10 Mbps. Specifies to set the port speed to transmit at 100 Mbps. 1000 Specifies to set the port speed to transmit at 1000 Mbps.
Page 868 DGS-6604 speed capability will consist of both the full and half duplex mode combined with the configured speeds. Before adding ports to a Port-Channel, verify that all settings are the same on these ports. Otherwise the ports in a Port-Channel with different settings will operate in an indeterminate manner.
Page 869: Storm-Control (Interface)
DGS-6604 storm-control (Interface) storm-control (Interface) Use this command to configure the device to prevent storm attacks on a LAN. There are three traffic types, broadcast, multicast, and unicast (DLF). Use the no form of the command to disable the storm-control function. storm-control {broadcast | multicast | unicast} no storm-control {broadcast | multicast | unicast} Syntax Description...
Page 870: Storm-Control Action (Interface)
DGS-6604 storm-control action (Interface) storm-control action (Interface) This command configures the action type for the Storm Control function. It is only used for two traffic types, broadcast and multicast. Use the no form of the command to return to the default settings. storm-control {broadcast | multicast} action {drop | shutdown} no storm-control {broadcast | multicast} action Syntax Description...
Page 871 DGS-6604 storm-control action (Interface) This example shows how to configure Broadcast storm control action and level. It assigns the shutdown action and rising threshold to 900 pps for interface eth3.1. Switch# configure terminal Switch(config)# interface eth3.1 Switch(config-if)# storm-control broadcast action shutdown Switch(config-if)# storm-control broadcast level pps 900 Switch(config-if)# show storm-control interface broadcast Interface...
Page 872: Storm-Control Level (Interface)
DGS-6604 storm-control level (Interface) storm-control level (Interface) This command configures the rising threshold for Storm Control function. Use no command to return the default settings. storm-control {broadcast | multicast | unicast} level {LEVEL | pps PPS} no storm-control {broadcast | multicast | unicast} level Syntax Description Broadcast Set Broadcast rate limiting...
Page 873 DGS-6604 storm-control level (Interface) This example shows how to configure the Broadcast storm control LEVEL by percentage mode. It assigns the percentage threshold level of interface eth3.1 for incoming broadcast packets to 90 and drops the packets that exceed the threshold.
Page 874: Storm-Control Timer (Global)
DGS-6604 storm-control timer (Global) storm-control timer (Global) Use this command to configure the timer options. The timers are used to implement a storm control shutdown action. Use the no form of the command to return the default settings. storm-control { time-interval SECONDS | countdown SECONDS | auto-recover-time SECONDS } no storm-control { time-interval | countdown | auto-recover-time} Syntax Description...
Page 875 DGS-6604 storm-control timer (Global) not be automatically recovered but it can be manually recovered by using the "no shutdown" command. Examples This example shows how to configure the time-interval. The count of received broadcast or multicast packets is monitored every 15 seconds. Switch# configure terminal Switch(config)# storm-control time-interval 15 Switch(config)#...
Page 876: Subnet-Base ( Vlan)
DGS-6604 subnet-base ( VLAN ) subnet-base ( VLAN ) Use the subnet command to specify a subnet-based VLAN ID assignment for un- tagged incoming packets. Use the no form of this command to remove a subnet- based VLAN ID entry setting. subnet-base { NETWORK-PREFIX NETWORK-MASK | NETWORK-PREFIX / PREFIX-LENGTH } no subnet-base { NETWORK-PREFIX NETWORK-MASK | NETWORK-PREFIX / PREFIX-LENGTH } Syntax Description...
Page 877: Subnet-Mask
DGS-6604 subnet-mask subnet-mask Use this command to configure the subnet mask for a DHCP address pool of the DHCP Server. Use the no form of this command to restore the configuration of a subnet mask to the default mask 255.255.255.0. subnet-mask MASK no subnet-mask Syntax Description...
Page 878: Switchport Port-Security
DGS-6604 switchport port-security switchport port-security Use this command to configure port security setting of a specified port interface to restrict the allowable number of users that can gain access to the port. Use the no form of the command to disable the port security, or delete user- defined secure MAC address.
Page 879 DGS-6604 switchport port-security If a port-security command is issued without specifying any arguments, then the port security feature will be enabled with the default settings for the maximum and mode parameters. As the port-security state is changed from disabled to enabled or vice versa, the auto-learned MAC entries are cleared, If no arguments are specified when issuing the no port-security command, then the port security feature will be disabled.
Page 880 DGS-6604 switchport port-security The no form of the command can be used in global coniguration so that one command can use then disable port-security at all ports. Examples This example shows how to configure port security in permanent mode with maximum number 5.
Page 881: Synchronization
DGS-6604 synchronization synchronization To enable the synchronization between Border Gateway Protocol (BGP) and an external Interior Gateway Protocol (IGP) system, use the synchronization command. To advertise a network route without waiting for the IGP, use the no form of this command. synchronization no synchronization Syntax...
Page 882: System-Name
DGS-6604 system-name system-name Use this command to configure the system name information. Use the no system-name command to set the system name to a null string. system-name TEXT no system-name Syntax Description TEXT Specifies the string that describes the system name information. The maximum length is 128 characters.
Page 883: Telnet
DGS-6604 telnet telnet The telnet command is used to login in another device that supports the TELNET protocol. telnet {IP-ADDRESS | IPV6-ADDRESS} [TCP-PORT] Syntax Description IP-ADDRESS IPv4 address of the host. IPV6-ADDRESS IPv6 address of the host. TCP-PORT Specifies the The TCP port number that telnet should use. TCP ports are numbered between 1 and 65535.
Page 884 Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.029 Copyright (c) 2010 D-Link Corporation. All rights reserved. Switch> The following example first shows a telnet session connecting to IP address 20.74.19.200 with default port 23, but the connection fails. The example then retries using TCP port 3500 instead at the same IPaddress 20.74.19.200 which...
Page 885 Telnet connecting ... Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.029 Copyright (c) 2010 D-Link Corporation. All rights reserved. Switch> Supported commands are: terminate the current Telnet session If other key is pressed, the terminal will return to the original active Telnet session.
Page 886 Telnet connecting ... Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.0029 Copyright (c) 2010 D-Link Corporation. All rights reserved. Switch> Supported commands are: terminate the current Telnet session If other key is pressed, the terminal will return to the original active Telnet session.
Page 887 Telnet connecting ... Chassis-based High-Speed Switch Command Line Interface Firmware: 1.00.029 Copyright (c) 2010 D-Link Corporation. All rights reserved. Switch> Supported commands are: terminate the current Telnet session If other key is pressed, the terminal will return to the original active Telnet session.
Page 888: Terminal Length
DGS-6604 terminal length terminal length This command configures the number of lines to be displayed in the monitor output. The terminal length command will only affect the current session. If option default is specified, the display length will be applied to all sessions. terminal length LINES [default] no terminal length Syntax Description...
Page 889: Terminal Timeout
DGS-6604 terminal timeout terminal timeout Use this command to setup a timeout value, which upon its expiry, will auto- logout the terminal session . terminal timeout {never| 2_minutes| 5_minutes| 10_minutes| 15_minutes} Syntax Description never Specifies that the terminal session will never timeout.(the default setting). 2_minutes Specifies that when the session is idle over 2 minutes, the terminal will auto logout.
Page 890: Terminal Width
DGS-6604 terminal width terminal width This command sets the number of character columns on the terminal screen for the current lines displayed in a session. The terminal width command will only affect the current session. If option default is specified, the display length will be applied to all subsequent sessions and will be stored in the system configuration (start-up config) to retain the setting for the next system restart.
Page 891 DGS-6604 terminal width The following example shows how to adjust the terminal session width to 120 as the system configuration setting for terminal width. This setting will affect all subsequently opened terminal sessions. Switch#terminal width 120 default CLI Reference Guide...
Page 892: Timers
DGS-6604 timers timers Use this command to configure the RIP network timers. To restore the default timers use the default form of this command. timers {update SECONDS | invalid SECONDS | flush SECONDS } default timers {update | invalid | flush} Syntax Description update SECONDS Specifies the rate (in seconds) at which updates are sent.
Page 893: Timers Basic
DGS-6604 timers basic timers basic To configure update, timeout, and garbage-collection timers for an IPv6 RIP routing process, use the timers basic command. To return the timers to their default values, use the no form of this command. timers basic update timeout garbage-collection no timers basic Syntax Description update...
Page 894 DGS-6604 timers basic Switch > enable Switch # configure terminal Switch (config) # router ipv6 rip Switch (config-router)# timers basic 5 15 30 CLI Reference Guide...
Page 895: Timers Bgp
DGS-6604 timers bgp timers bgp Use this command to adjust BGP network timers. Use the no form of this command to restore the timers to the default value. timers bgp KEEP-ALIVE [ HOLD-TIME ] no timers bgp Syntax Description KEEP-ALIVE Specifies the frequency, in seconds, with which the switch sends KEEPALIVE messages to its BGP peer.
Page 896: Time-Range
DGS-6604 time-range time-range Use this command to enter the time range configuration mode to define a time range. Use the no form of the command to delete a time range. time-range NAME no time-range NAME Syntax Description NAME Specifies the name of the time-range profile to be configured. It can accept up to 32 characters.
Page 897: Traceroute
DGS-6604 traceroute traceroute To display a hop-by-hop path through an IP network from the switch to a specific destination host, use the traceroute command. traceroute [OPTIONS] { IP-ADDRESS | IPV6-ADDRESS} Syntax Description OPTIONS (Optional) the option can be any combination of the following parameters: -w WAIT_TIME Optionally used to specify the amount of time (in seconds) that traceroute will wait for an ICMP response message.
Page 898 DGS-6604 traceroute Default -w: 5 seconds -i: 1 -m: 30 -p: 33434 -q: 3 -t: 0 -s: 40 bytes Command Mode Management interface mode or User EXEC Usage Guideline To interrupt traceroute after the command has been issued, press Ctrl-C. The traceroute command uses the TTL field in the IP header to cause routers and servers to generate specific return messages.
Page 899 DGS-6604 traceroute Display Field The following table describes the fields in the traceroute command output. Descriptions Display Field Description Indicates the sequence number of the router in the path to the host. 172.50.71.123 Host name of this router. (172.50.71.123) Internet address of this router. 30 hops max, 40 byte Maximum TTL value and the size of the ICMP datagrams being sent.
Page 900: Traffic-Segmentation Forward
DGS-6604 traffic-segmentation forward traffic-segmentation forward Use this command to segment or restrict the flooding domain of a port to a set of specified ports. Use the no form of this command to remove some ports from the forwarding domain. traffic-segmentation forward interface INTERFACE-ID [, | -] no traffic-segmentation [ forward [ interface INTERFACE-ID [, | -] ] ] Syntax Description forward...
Page 901 DGS-6604 traffic-segmentation forward When entering no traffic-segmentation without any keywords, then all ports will become the forwarding port. When entering no traffic-segmentation forward without the interface keyword, then all ports in forwarding port list will be removed. That is, the forwarding domain of the configured interface is empty. Examples This example shows how to configure traffic segmentation.
Page 902: Trunk Allowed-Vlan
DGS-6604 trunk allowed-vlan trunk allowed-vlan Use the trunk allowed-VLAN configuration command to set the VLAN characteristic. It sets the allowable VLANs that can receive and send traffic on the interface in tagged format. Use the no trunk allowed-VLAN command to remove a tagged member port from a specified VLAN.
Page 903: Tunnel Destination
DGS-6604 tunnel destination tunnel destination Use the tunnel destination configuration command to add the destination IPv4 address for the tunnel interface. Use the no tunnel destination configuration command to remove it. tunnel destination { IPv4-ADDRESS } no tunnel destination Syntax Description IPv4-ADDRESS Specifies the IPv4 address as the the destination address for the tunnel.
Page 904: Tunnel Mode
DGS-6604 tunnel mode tunnel mode Use the tunnel mode ipv6ip configuration command to manually specify an IPv6 configured tunnel. The optional parameter 6to4 or isatap means that tunnel type is 6to4 or ISATAP. Use the no form of the command to remove the IPv6 specification.
Page 905: Tunnel Source
DGS-6604 tunnel source tunnel source Use the tunnel source configuration command to add the source IPv4 address for the tunnel interface. Use the no tunnel source configuration command to remove it. tunnel source { IPv4-ADDRESS } no tunnel source Syntax Description IPv4-ADDRESS IPv4 address.
Page 906: Username
DGS-6604 username username Use the username command to create a user account, and use the no form of the command to delete the user account. For the no command, when a username is specified, a specific account is deleted. username NAME [privilege LEVEL] password {plain-text| encrypted } PASSWORD no username NAME Syntax Description NAME...
Page 907 DGS-6604 username The factory default setting sets the user account to an empty string. When the user account is empty, the any access will be logged in directly in the User Exec mode at the power user level. The user can further enter the Privileged Exec mode using the enable password.
Page 908: Version
DGS-6604 version version Use this command to specify the RIP version to send and receive. version { 1 | 2 } Syntax Description Only RIP Version 1 packets are received and transmitted. Only RIP Version 2 packets are received and transmitted. Default Version 2 Command Mode...
Page 909: Vlan
DGS-6604 vlan vlan Use the vlan configuration command to add VLANs and to enter the config-vlan mode. Use the no vlan configuration command to remove VLANs. The default VLAN with the VLAN ID 1, cannot be removed. vlan VLAN-ID [ , | - ] no vlan VLAN-ID [ , | - ] Syntax Description VLAN-ID...
Page 910: Vlan Encapsulation
DGS-6604 vlan encapsulation vlan encapsulation Use this command to encapsulate the original packet with an outer VLAN tag through from UNI to NNI. Use the no form of this command to delete the related VLAN encapsulation pairs. vlan encapsulation S-VID C-VID [, | -] no vlan encapsulation C-VID [, | -] Syntax Description C-VID [, | -]...
Page 911: Vlan Name
DGS-6604 vlan name vlan name Use the vlan name VLAN-NAME configuration command to specify the VLAN name. Use the no vlan name command to reset the VLAN name to the default VLAN name. vlan name VLAN-NAME no vlan name Syntax Description VLAN-NAME Specifies the VLAN name, an ASCII string from 1 to 32 characters that must be unique within the administrative domain.
Page 912: Vlan Remarking
DGS-6604 vlan remarking vlan remarking Use this command to define the VLAN remarking pair. Use the no form of this command to delete the related VLAN remarking pair. vlan remarking S-VID C-VID no vlan remarking C-VID[, | -] Syntax Description C-VID[, | -] The VLAN IDs specified here refers to the inner-VID list (i.e.
Page 913 DGS-6604 vlan remarking 3. Make a VLAN remarking from C-VID 200 to S-VID is 1002. So far the user's COS is trusted. Switch(config-if)#>vlan remarking 1002 200 4. Remark COS as 7. Switch(config-if)#>cos remarking 7 5. Remark COS as 3 for C-VID 101-102, remarking COS as 7 for and 103-104 and 200.
Page 914: Vlan-Tunnel
DGS-6604 vlan-tunnel vlan-tunnel Use this command to enable the VLAN tunnel mode. Use the no form of the command to disable the VLAN tunnel mode. vlan-tunnel no vlan-tunnel Syntax None Default Disabled Command Mode Global configuration Usage Guideline This command enables VLAN tunneling mode. To turn VLAN tunneling mode from disabled to enabled state.
Page 915: Vlan-Tunnel Ctag-Mapping Dynamic
DGS-6604 vlan-tunnel ctag-mapping dynamic vlan-tunnel ctag-mapping dynamic Use this command to enable or disable the dynamic customer VLAN tag learning mechanism for IPv4/IPv6 packets. vlan-tunnel ctag-mapping dynamic { ipv4 | ipv6 } { enable | disable} Syntax Description ipv4 Specifies IPv4 packets. ipv6 Specifies IPv6 packets.
Page 916: Vlan-Tunnel Ctag-Mapping Static
DGS-6604 vlan-tunnel ctag-mapping static vlan-tunnel ctag-mapping static Use this command to add a static customer VLAN tag mapping entry. Use the no form of the command to delete a static customer VLAN tag mapping entry. vlan-tunnel ctag-mapping static {A.B.C.D/M | X:X::X:X/M} C-VID no vlan-tunnel ctag-mapping static {A.B.C.D/M | X:X::X:X/M} Syntax Description A.B.C.D/M...
Page 917: Vlan-Tunnel Ingress Checking
DGS-6604 vlan-tunnel ingress checking vlan-tunnel ingress checking Use this command to specify to drop the C-tagged packets that do not match any VLAN encapsulation pair or remarking pair. Use the no form of this command to allow the unmatched packet to be forwarded. vlan-tunnel ingress-checking no vlan-tunnel ingress-checking Syntax...
Page 918: Vlan-Tunnel Interface-Type
DGS-6604 vlan-tunnel interface-type vlan-tunnel interface-type Use this command to configure an interface as NNI (Network-to Network) or UNI (User-to-Network). vlan- tunnel interface-type { nni | uni } Syntax Description nni | uni Specifies the interface type for the interface (port channel or ethernet port). nni - Network to Network Interface.
Page 919: Vlan-Tunnel Remove-Inner-Tag
DGS-6604 vlan-tunnel remove-inner-tag vlan-tunnel remove-inner-tag Use this command to strip off the packet’s inner tag (C-TAG; should the packet have it) of the incoming packet. Use the no form of the command to keep the packet's inner tag. vlan-tunnel remove-inner-tag no vlan-tunnel remove-inner-tag Syntax None...
Page 920: Vlan-Tunnel Tpid
DGS-6604 vlan-tunnel tpid vlan-tunnel tpid Use this command to specify the outer tag TPID at a Network-to-Network Interface (NNI) for the VLAN tunnel application. vlan-tunnel tpid TPID Syntax Description TPID Specifies the TPID for the VLAN tag. The value is in hexadecimal form. Range is 0x0 to 0xFFFF.
Page 921: Voice-Vlan
DGS-6604 voice-vlan voice-vlan Use the command to enable the voice VLAN function and to configure a VLAN as a voice VLAN. Use no form of this command to disable the voice VLAN function. voice-vlan VLAN-ID no voice-vlan Syntax Description VLAN-ID Specify the ID of the voice VLAN.
Page 922: Voice-Vlan Cos
DGS-6604 voice-vlan cos voice-vlan cos Use the command to configure the CoS priority for incoming voice VLAN traffic.. voice-vlan cos COS-VALUE Syntax Description COS-VALUE Specify the priority of voice VLAN. The available value is 0~7. Default The default CoS priority is 5. Command Mode Global configuration mode.
Page 923: Voice-Vlan Oui
DGS-6604 voice-vlan oui voice-vlan oui Use the command to add the user defined OUI of voice device. Use no form of this command to delete the user defined OUI of voice device. voice-vlan oui MAC-ADDRESS MASK [description TEXT] no voice-vlan oui MAC-ADDRESS MASK Syntax Description MAC-ADDRESS Specify the OUI MAC address.
Page 924 DGS-6604 voice-vlan oui Switch(config)#voice-vlan oui 01-02-03-04-05-06 ff-ff-ff-ff-ff-ff Switch(config)#end Switch# You can verify your settings by show vlan voice-vlan oui command. CLI Reference Guide...
Page 925: Vrrp Critical-Ip
DGS-6604 vrrp critical-ip vrrp critical-ip Use this command to configure the critical IP address. To remove the critical IP address using the no form of this command. vrrp VRID critical-ip IP-ADDRESS no vrrp VRID critical-ip Syntax Description VRID Specifies the Virtual router identifier, which is the number identifying the virtual router for which the critical IP address is being configured.
Page 926 DGS-6604 vrrp critical-ip Examples The following example shows how to configure the critical-ip address 60.5.1.1 for virtual router 7 with priority 200 on interface vlan1. Switch(config)#interface vlan1 Switch(config-if)#vrrp 7 ip 20.1.1.5 Switch(config-if)#vrrp 7 priority 200 Switch(config-if)#vrrp 7 critical-ip 60.5.1.1 The following example shows how to remove the critical-ip address for virtual router 7 on interface vlan1.
Page 927: Vrrp Ip
DGS-6604 vrrp ip vrrp ip To enable the Virtual Router Redundancy Protocol (VRRP) on an interface and identify the IP address of the virtual router, use the vrrp ip command. To disable VRRP on the interface and remove the IP address of the virtual router, use the no form of this command.
Page 928: Vrrp Preempt
DGS-6604 vrrp preempt vrrp preempt To configure the router to take over as the master virtual router for a Virtual Router Redundancy Protocol (VRRP) group, if it has higher priority than the current master virtual router, use the vrrp preempt command. To disable this function, use the no form of this command.
Page 929 DGS-6604 vrrp preempt The following example shows how to configure the router to disable preempt of a virtual router. Switch(config)#interface vlan1 Switch(config-if)#no vrrp 7 preempt CLI Reference Guide...
Page 930: Vrrp Priority
DGS-6604 vrrp priority vrrp priority To set the priority of the virtual router, use the vrrp priority command in VRRP interface configuration mode. To restore the default priority value of the virtual router, use the no form of this command. vrrp VRID priority PRIORITY no vrrp VRID priority Syntax Description...
Page 931 DGS-6604 vrrp priority The following example shows how to restore the default priority of the virtual router. Switch(config)#interface vlan1 Switch(config-if)#no vrrp 7 priority CLI Reference Guide...
Page 932: Vrrp Shutdown
DGS-6604 vrrp shutdown vrrp shutdown This command is to disable the VRRP of a VRID on an interface. Use the no form of the command to re-activate the VRRP. vrrp VRID shutdown no vrrp VRID shutdown Syntax Description VRID Specifies the virtual router identifier, the number identifying the virtual router that the shutdown is being configured for.
Page 933: Vrrp Timers Advertise
DGS-6604 vrrp timers advertise vrrp timers advertise This command configures the interval between successive advertisements by the master router. To restore the default value, use the no form of this command. vrrp VRID timers advertise INTERVAL no vrrp VRID timers advertise Syntax Description VRID Specifies the virtual router identifier, which is the number identifying the virtual...
Page 934 DGS-6604 Acronym List Access Control List Address Resolution Protocol Border Gateway Protocol BPDU Bridge Protocol Data Unit CHAP Challenge Handshake Authentication Protocol Committed Information Rate CIST Common and Internal Spanning Tree Command-Line Interface CLNS Connection-Less Network Service Class of Service CPLD Complex Programmable Logic Device Cyclic Redundancy Check...
Page 935 DGS-6604 dot1q 802.1Q dot1x 802.1X DRAM Dynamic RAM DVMRP Distance Vector Multicast Routing Protocol Extensible Authentication Protocol File Allocation Table Forwarding Information Base File Transfer Protocol GARP General Attribute Registration Protocol GBIC Gigabit Interface Converter GMRP GARP Multicast Registration Protocol GVRP GARP VLAN Registration Protocol ICMP...
Page 936 DGS-6604 ILMI Integrated Local Management Interface Internet Protocol IS-IS Intermediate System-to-Intermediate System Intradomain Routing Protocol International Organization of Standardization LACP Link Aggregation Control Protocol LACPDU Link Aggregation Control Protocol data unit Local Area Network LAPB Link Access Procedure, Balanced Link Control Protocol Logical Link Control Media Access Control Message Digest 5...
Page 937 DGS-6604 MSTCI MST configuration identifier Maximum Transmission Unit Network Address Translation NetBIOS Network Basic Input/Output System NSAP Network Service Access Point Non-Stop Forwarding Network Time Protocol NVRAM Non-Volatile RAM Operation, Administration, and Maintenance Open System Interconnection OSPF Open Shortest Path First Port Access Entity Protocol Data Unit Physical sublayer...
Page 938 DGS-6604 Quality of Service RADIUS Remote Access Dial-In User Service Random-Access Memory Routing Information Base RMON Remote Network Monitor Read-Only Memory Route Processor RSTP Rapid Spanning Tree Protocol Real-Time Transport Protocol Sparse Mode (PIM) CLI Reference Guide...
Page 939 aaa authentication 27 aaa authorization 29 aaa group server 30 accept dhcp client-identifier 31 accept dhcp relay-agent 32 acceptable-frame 33 accept-lifetime 34 access vlan 36 address-family ipv4 37 aggregate-address 38 area default-cost 39 area default-cost (IPv6) 40 area nssa 41 area range 43 area range (IPv6) 44 area stub 45...
Page 940 clear dos prevention counter 91 clear cpu-protect counters 92 clear gvrp statistics interface 93 clear ip bgp 94 clear ip bgp peer-group 96 clear ip dhcp binding 98 clear ip dhcp conflict 100 clear ip dhcp server statistics 102 clear ip ospf 103 clear ipv6 dhcp client 104 clear ipv6 neighbors 105 clear ipv6 ospf process 106...
Page 941 domain-name 154 dos_prevention action 155 dos_prevention type 156 dot1v binding protocol-group 158 dot1v protocol-group 159 dot1x auth-mode 160 dot1x auth-protocol 161 dot1x control-direction 162 dot1x default 163 dot1x forward-pdu 164 dot1x guest-vlan 165 dot1x initialize 167 dot1x max-req 168 dot1x pae authenticator 169 dot1x port-control 170 dot1x re-authenticate 171 dot1x re-authentication 172...
Page 942 interface 211 interface range 212 interface tunnel 213 ip access-group 214 ip access-list 215 ip address 216 ip address (management port) 218 ip address-list 219 ip dhcp screening ports 220 ip dhcp screening 221 ip dhcp screening trap-log 222 ip dhcp snooping 223 ip dhcp snooping information option 224 ip dhcp snooping trust 225 ip dhcp screening suppress-duration 226...
Page 943 ip mroute 271 ip mtu 273 ip mtu (management port) 274 ip multicast-routing 275 ip ospf authentication 276 ip ospf authentication-key 277 ip ospf cost 278 ip ospf dead-interval 279 ip ospf hello-interval 280 ip ospf message-digest-key 281 ip ospf priority 282 ip ospf retransmit-interval 283 ip ospf shutdown 284 ip ospf transmit-delay 285...
Page 944 ipv6 nd managed-config-flag 332 ipv6 nd other-config-flag 333 ipv6 nd prefix 334 ipv6 nd ra-interval 335 ipv6 nd ra-lifetime 336 ipv6 nd reachable-time 337 ipv6 nd retrans-timer 338 ipv6 nd suppress-ra 339 ipv6 neighbor 340 ipv6 ospf cost 341 ipv6 ospf dead-interval 342 ipv6 ospf hello-interval 343 ipv6 ospf priority 344 ipv6 ospf retransmit-interval 345...
Page 945 loopback-detection mode 397 loopback-detection interval-time 398 mac access-group 399 mac access-list 400 mac address-table aging destination-hit 401 mac address-table aging-time 402 mac address-table static 403 mac-base ( VLAN ) 404 match 405 match as-path 409 match community 410 match ip address 411 match ipv6 address 412 maximum-paths 413 max-rcv-frame-size 414...
Page 946 periodic 457 permit | deny (ip access-list) 458 permit | deny (ipv6 access list) 461 permit | deny (mac access-list) 463 ping 465 poe port priority 467 poe port description 468 poe service-policy 469 poe power-inline 470 police 472 police aggregate 477 police cir 478 policy-map 482 port-channel load-balance 484...
Page 947 set community 535 set default interface 537 set ip next-hop 538 set ip precedence 540 set interface 541 set ipv6 default next-hop 542 set ip default next-hop 544 set ipv6 next-hop 546 set default interface 548 set origin 549 set weight 550 sflow 551 sflow receiver 552 sflow sampler 554...
Page 948 show ip dhcp relay information trusted-sources 611 show ip dhcp server 612 show ip dhcp server statistics 613 show ip dhcp snooping 615 show ip dvmrp interface 616 show ip dvmrp neighbor 617 show ip dvmrp prune 620 show ip dvmrp route 621 show ip igmp group 622 show ip igmp interface 625 show ip igmp snooping 626...
Page 949 show ipv6 ospf border-routers 692 show ipv6 ospf database 693 show ipv6 ospf interface 694 show ipv6 ospf neighbor 695 show ipv6 ospf route 696 show ipv6 ospf virtual-links 697 show ipv6 protocols [PROCESS-ID ospf | rip ] 698 show ipv6 rip database 700 show ipv6 rip interface 701 show ipv6 route 702 show ipv6 route summary 704...
Page 950 show ip dhcp snooping binding 773 show ip dhcp snooping database 776 show erps domain 777 show erps erpi 779 show vlan voice-vlan 782 show ip policy 785 show ip arp inspection 786 show ip source binding 789 show ip verify source 791 show ip dhcp screening 792 show sflow 793 show lldp 795...
Page 951 spanning-tree transmit hold-count 856 speed 857 storm-control (Interface) 859 storm-control action (Interface) 860 storm-control level (Interface) 862 storm-control timer (Global) 864 subnet-base ( VLAN ) 866 subnet-mask 867 switchport port-security 868 synchronization 871 system-name 872 telnet 873 terminal length 878 terminal timeout 879 terminal width 880 timers 882...

This manual is also suitable for:

Dgs-6604 Dgs-6600 series

D-Link DGS-6600-48T Cli Reference Manual

Basic Ipv4

Ripng

Table of Contents

Quick Links

Chapters

Related Manuals for D-Link DGS-6600-48T

Summary of Contents for D-Link DGS-6600-48T