Page 1 D-Link ™ DES-3028/DES-3028P/DES-3052/DES-3052P Managed 10/100Mbps Fast Ethernet Switch Release I CLI Reference Manual...
Page 2 Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
Table of Contents CLI REFERENCE MANUAL ............................I INTRODUCTION ................................1 USING THE CONSOLE CLI............................4 COMMAND SYNTAX ..............................8 BASIC SWITCH COMMANDS...........................10 MODIFY BANNER AND PROMPT COMMANDS .....................20 SWITCH PORT COMMANDS ............................23 PORT SECURITY COMMANDS ..........................26 NETWORK MANAGEMENT (SNMP) COMMANDS ....................30 SWITCH UTILITY COMMANDS ..........................49 NETWORK MONITORING COMMANDS ........................57 MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .................69 FORWARDING DATABASE COMMANDS.......................81...
Page 4 TRAFFIC SEGMENTATION COMMANDS......................168 TIME AND SNTP COMMANDS ..........................170 ARP COMMANDS..............................176 ROUTING TABLE COMMANDS..........................180 MAC NOTIFICATION COMMANDS ........................182 ACCESS AUTHENTICATION CONTROL COMMANDS ..................185 SSH COMMANDS..............................206 SSL COMMANDS ..............................213 D-LINK SINGLE IP MANAGEMENT COMMANDS....................219 SMTP COMMANDS ..............................229 POE COMMANDS..............................233 COMMAND HISTORY LIST.............................237 TECHNICAL SPECIFICATIONS..........................241...
Page 5: Introduction
Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained in the CLI for members of this series, including the DES-3028, DES-3028P, DES-3052, and DES-3052P. Examples present in this manual may refer to any member of this series and may show different port counts, but are universal to this series of switches, unless otherwise stated.
Page 6 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Setting the Switch’s IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default Switch IP address to meet the specification of your networking address scheme.
Page 7 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 1-3. Assigning an IP Address In the above example, the Switch was assigned an IP address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully.
Page 8: Using The Console Cli
ONSOLE The DES-3028/28P/52/52P support a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
Page 9 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-2. The ? Command When users enter a command without its required parameters, the CLI will prompt users with a Next possible completions: message. Figure 2-3. Example Command Parameter Help In this case, the command config account was entered with the parameter <username>.
Page 10 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned the Next possible completions: <username>...
Page 11 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Figure 2-6. Next possible completions: Show Command In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the up arrow was used to re-enter the show command, followed by the account parameter.
Page 12: Command Syntax
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted function that changes text case.
Page 13 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual {braces} however the effect of the system reset is dependent on which, if any, value is specified. Therefore, with this example there are three possible outcomes of performing a system reset. See the following chapter, Basic Commands for more details about the reset command.
Page 14: Basic Switch Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ASIC WITCH OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create account [admin | user] <username 15>...
Page 15 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To create an administrator-level user account with the username “dlink”. DES-3028P:4#create account admin dlink Command: create account admin dlink Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success.
Page 16 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show account Command: show account Current Accounts: Username Access Level --------------- ------------ dlink Admin Total Entries: 1 DES-3028P:4# delete account Purpose Used to delete an existing user account.
Page 17 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the way that the users logged in: DES-3028P:4#show session Command: show session ID Login Time Live Time From Level Name ------------------------------ --------- ------------ -----...
Page 18 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show serial_port Purpose Used to display the current serial port settings. Syntax show serial_port Description This command displays the current serial port settings. Parameters None. Restrictions None Example usage:...
Page 19 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable clipaging Purpose Used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging Description This command is used when issuing a command which causes the console screen to rapidly scroll through several pages.
Page 20 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable telnet are numbered between 1 and 65535. The “well-known” TCP port for the Telnet protocol is 23. Restrictions Only administrator-level users can issue this command. Example usage:...
Page 21 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable web Purpose Used to enable the HTTP-based management software on the Switch. Syntax enable web <tcp_port_number 1-65535> Description This command is used to enable the Web-based management software on the Switch.
Page 22 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual save Restrictions Only administrator-level users can issue this command. Example usage: To save the Switch’s current configuration to non-volatile RAM: DES-3028P:4#save Command: save Saving all configurations to NV-RAM... Done.
Page 23 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To restore all of the Switch’s parameters to their default values: DES-3028P:4#reset config Command: reset config Are you sure you want to proceed with system reset?(y/n) Success. DES-3028P:4#...
Page 24: Modify Banner And Prompt Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ODIFY ANNER AND ROMPT OMMANDS Administrator level users can modify the login banner (greeting message) and command prompt by using the commands described below. Command Parameters config command_ prompt [<string 16>...
Page 25 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config greeting _message message). Parameters default – If the user enters default to the modify banner command, then the banner will be reset to the original factory banner.
Page 26 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch. Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch.
Page 27: Switch Port Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual WITCH OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | learning [enable | disable] | state [enable | disable] | [description <desc 1-32>...
Page 28 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the speed of port 3 to be 10 Mbps, full duplex, with learning and state enabled: DES-3028P:4#config ports 1-3 speed 10_full state enable Command: config ports 1-3 speed 10_full state enable Success.
Page 29 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the configuration of all ports on a standalone switch, with description: DES-3028P:4#show ports description Command: show ports description Port Port Settings Connection Address State...
Page 30: Port Security Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ECURITY OMMANDS The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<auth_portlist>...
Page 31 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Success. DES-3028P:4# delete port_security_entry Used to delete a port security entry by MAC address, port number Purpose and VLAN ID.
Page 32 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# clear port_security_entry port 6 Command: clear port_security_entry port 6 Success. DES-3028P:4# show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <auth_portlist>}...
Page 33 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable port_security trap_log Purpose Used to disable the trap log for port security. Syntax disable port_security trap_log Description This command, along with the enable port_security trap_log, will enable and disable the sending of log messages to the Switch’s log and SNMP agent when the port security of the Switch has been triggered.
Page 34: Network Management (Snmp) Commands
OMMANDS The DES-3028/28P/52/52P support the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. Users can specify which version of the SNMP users want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 35 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters delete snmp host <ipaddr> show snmp host <ipaddr> create trusted_host <ipaddr> delete trusted_host <ipaddr> show trusted_host <ipaddr> enable snmp traps enable snmp authenticate traps show snmp traps...
Page 36 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp user • <auth password 8-16> - An alphanumeric sting of between 8 and 16 characters that will be used to authorize the agent to receive packets for the host.
Page 37 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To delete a previously entered SNMP user on the Switch: DES-3028P:4#delete snmp user dlink Command: delete snmp user dlink Success. DES-3028P:4# show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table.
Page 38 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To create an SNMP view: DES-3028P:4#create snmp view dlinkview 1.3.6 view_type included Command: create snmp view dlinkview 1.3.6 view_type included Success. DES-3028P:4# delete snmp view Purpose Used to remove an SNMP view entry previously created on the Switch.
Page 39 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree View Type -------------------- ------------------------- ---------- ReadView Included WriteView Included NotifyView 1.3.6 Included restricted 1.3.6.1.2.1.1...
Page 40 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create snmp community dlink view ReadView read_write Command: create snmp community dlink view ReadView read_write Success. DES-3028P:4# delete snmp community Purpose Used to remove a specific SNMP community string from the Switch.
Page 41 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp community Command: show snmp community SNMP Community Table Community Name View Name Access Right -------------------------------- ------------------------------- ------------ private CommunityView read_write public CommunityView read_only dlink ReadView read_write...
Page 42 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views. Syntax create snmp group <groupname 32> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] {read_view <view_name 32>...
Page 43 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Success. DES-3028P:4# delete snmp group Purpose Used to remove an SNMP group from the Switch.
Page 44 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp groups Command: show snmp groups Vacm Access Table Settings Group Name : Group3 ReadView Name : ReadView WriteView Name : WriteView Notify View Name : NotifyView...
Page 45 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create snmp host strategies. It includes improvements in the Structure of Management Information (SMI) and adds some security features. v3 – Specifies that the SNMP version 3 will be used. SNMP v3 provides secure access to devices through a combination of authentication and encrypting packets over the network.
Page 46 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete snmp host 10.48.74.100 Command: delete snmp host 10.48.74.100 Success. DES-3028P:4# show snmp host Purpose Used to display the recipient of SNMP traps generated by the Switch’s SNMP agent.
Page 47 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create trusted_host 10.48.74.121 Command: create trusted_host 10.48.74.121 Success. DES-3028P:4# show trusted_host Purpose Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above.
Page 48 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable snmp traps Purpose Used to enable SNMP trap support. Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the Switch.
Page 49 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show snmp traps Command: show snmp traps SNMP Traps : Enabled Authenticate Traps : Enabled DES-3028P:4# disable snmp traps Purpose Used to disable SNMP trap support on the Switch.
Page 50 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch. Syntax config snmp system_contact{<sw_contact>} Description The config snmp system_contact command is used to enter the name and/or other information to identify a contact person who is responsible for the Switch.
Page 51 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config snmp system_name Purpose Used to configure the name for the Switch. Syntax config snmp system_name {<sw_name>} Description The config snmp system_name command configures the name of the Switch.
Page 52 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To disable RMON: DES-3028P:4#disable rmon Command: disable rmon Success. DES-3028P:4#...
Page 53: Switch Utility Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual WITCH TILITY OMMANDS The switch utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware_fromTFTP <ipaddr> <path_filename 64> {image_id <int 1-2>} | cfg_fromTFTP <ipaddr>...
Page 54 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Connecting to server....Done. Download configuration....Done. DES-3028P:4# DES-3028P:4##------------------------------------------------------------------- DES-3028P:4## DES-3028P Configuration DES-3028P:4## DES-3028P:4## Firmware: Build 1.00-B22 DES-3028P:4## Copyright(C) 2006-2009 D-Link Corporation. All rights reserved.
Page 55 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config firmware image_id 1 boot_up Command: config firmware image_id 1 boot_up Success. DES-3028P:4# show firmware information Purpose Used to display the firmware section information. Syntax show firmware information Description This command is used to display the firmware section information.
Page 56 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show config 1. Basic (serial port, Telnet and 19. ACL web management status) 20. SNTP 2. storm control 21. IP route 3. IP group management 22. LACP 4. Syslog 23.
Page 57 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual upload Purpose Used to upload the current switch settings or the switch history log to a TFTP. Syntax upload [cfg_toTFTP | log_toTFTP] <ipaddr> <path_filename 64> Description This command is used to upload either the Switch’s current settings or the Switch’s history log to a TFTP server.
Page 58 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual NOTE: Dual-purpose (DHCP/TFTP) server utility software may require entry of the configuration file name and path within the user interface. Alternatively, the DHCP software may require creating a separate ext file with the configuration file name and path in a specific directory on the server.
Page 59 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable autoconfig Purpose Use this to deactivate autoconfiguration from DHCP. Syntax disable autoconfig Description This instructs the Switch not to accept autoconfiguration instruction from the DHCP server. This does not change the IP settings of the Switch. The ipif settings will continue as DHCP client until changed with the config ipif command.
Page 60 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ping Purpose Used to test the connectivity between network devices. Syntax ping <ipaddr> {times <value 1-255>} {timeout <sec 1-99>} Description The ping command sends Internet Control Message Protocol (ICMP) echo messages to a remote IP address.
Page 61: Network Monitoring Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
Page 62 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show packet port 2 Command: show packet port 2 Port number : 2 Frame Size Frame Counts Frame/sec Frame Type Total Total/sec ------------ ------------ ---------- ---------- ------- ---------...
Page 63 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show utilization Purpose Used to display real-time port and CPU utilization statistics. Syntax show utilization [cpu | ports {<portlist>}] Description This command will display the real-time port and CPU utilization statistics for the Switch.
Page 64 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports <portlist>} Description This command will clear the counters used by the Switch to compile statistics.
Page 65 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show log index 1-5 Command: show log index 1-5 Index Data Time Log Text ----- ---------------------------- ------------------------------------------------------------------------------------- 00000-00-00 01:01:09 Successful login through Console (Username: Anonymous) 00000-00-00 00:00:14 System started up...
Page 66 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show syslog Purpose Used to display the syslog protocol status as enabled or disabled. Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled.
Page 67 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create syslog host kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon...
Page 68 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config syslog host Purpose Used to configure the syslog protocol to send system log data to a remote host. Syntax config syslog host [all | <index 1-4>] {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
Page 69 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Parameters Numerical Facility Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon...
Page 70 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3028P:4# Example usage: To configure a Syslog host for all hosts:...
Page 71 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show syslog host Command: show syslog host Syslog Global State: Disabled Host Id Host IP Address Severity Facility UDP port Status ------- --------------- -------------- -------- -------- -------- 10.1.1.2...
Page 72 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the time interval for saving log files: DES-3028P:4#show log_save_timing Command: show log_save_timing Saving log method: time_interval Interval : 30 DES-3028P:4#...
Page 73: Multiple Spanning Tree Protocol (Mstp) Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1d STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
Page 74 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters show stp instance {<value 0-4>} show stp mst_config id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch.
Page 75 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp version (RSTP) globally on the Switch. stp - Selecting this parameter will set the Spanning Tree Protocol (STP) globally on the Switch. Restrictions Only administrator-level users can issue this command.
Page 76 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp fbpdu [enable | disable] − Allows the forwarding of STP BPDU packets from other network devices when STP is disabled on the Switch. The default is enable.
Page 77 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp ports where an 802.1d network connects to an 802.1w or 802.1s enabled network. Migration should be set as yes on ports connected to network stations or segments that are capable of being upgraded to 802.1w RSTP or 802.1s MSTP on all or...
Page 78 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure STP with path cost 19, hellotime set to 5 seconds, migration enable, and state enable for ports 1-5 of module 1. DES-3028P:4#config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Command: config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Success.
Page 79 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp instance_id remove_vlan - Along with the vid_range <vidlist> parameter, this command will remove VIDs to the previously configured STP instance_id. <vidlist> - Specify the VID range from configured VLANs set on the Switch.
Page 80 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config stp priority Purpose Used to update the STP instance configuration Syntax config stp priority <value 0-61440> instance_id <value 0-4> Description This command is used to update the STP instance configuration settings on the Switch.
Page 81 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config stp mst_config_id revision_level 10 name Trinity Command : config stp mst_config_id revision_level 10 name Trinity Success. DES-3028P:4# config stp mst_ports Purpose Used to update the port configuration for a MSTP instance.
Page 82 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show stp Purpose Used to display the Switch’s current STP configuration. Syntax show stp Description This command displays the Switch’s current STP configuration. Parameters None Restrictions None. Example usage:...
Page 83 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show stp ports Purpose Used to display the Switch’s current STP ports configuration. Syntax show stp ports <portlist> Description This command displays the STP ports settings for a specified port or group of ports (one port at a time).
Page 84 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show stp instance 0 Command: show stp instance 0 STP Instance Settings --------------------------- Instance Type : CIST Instance Status : Enabled Instance Priority : 32768(bridge priority : 32768, sys ID ext : 0 )
Page 85: Forwarding Database Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32>...
Page 86 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table (database) Syntax create multicast_fdb <vlan_name 32> <macaddr> Description This command will make an entry into the Switch’s multicast MAC address forwarding database.
Page 87 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10-1000000> Description The aging time affects the learning process of the Switch. Dynamic...
Page 88 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete fdb default 01-00-00-00-01-02 Command: delete fdb default 01-00-00-00-01-02 Success. DES-3028P:4# clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan <vlan_name 32>...
Page 89 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show multicast_fdb vlan default Command: show multicast_fdb vlan default VLAN Name : default MAC Address : 01-00-5E-00-00-00 Egress Ports : 1-5 Mode : Static Total Entries DES-3028P:4# show fdb Purpose Used to display the current unicast MAC address forwarding database.
Page 90 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config multicast port_filtering_mode Purpose Used to configure the multicast packet filtering mode on a port per port basis. Syntax config multicast port_filtering_mode [<portlist> | all] [forward_unregistered_groups | filter_unregistered_groups]...
Page 91: Broadcast Storm Control Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ROADCAST TORM ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
Page 92 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config traffic control the Switch’s hardware will determine the Packet Storm based on the Threshold value stated and drop packets until the issue is resolved. shutdown - Utilizes the Switch’s software Traffic Control mechanism to determine the Packet Storm occurring.
Page 93 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show traffic control Description This command displays the current storm traffic control configuration on the Switch. Parameters <portlist> - Used to specify port or list of ports for which to display traffic control settings.
Page 94 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure notifications to be sent when a packet storm control has been detected and cleared by the Switch. DES-3028P:4# config traffic trap both Command: config traffic trap both Success.
Page 95: Cos Commands
OMMANDS The DES-3028/28P/52/52P supports 802.1p priority queuing. The Switch has four priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
Page 96 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Each command is listed, in detail, in the following sections. config bandwidth_control Purpose Used to configure bandwidth control on a port by-port basis. Syntax config bandwidth_control [<portlist>] {rx_rate [no_limit | <value 64-1024000>] | tx_rate [no_limit <value 64-1024000>]}...
Page 97 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show bandwidth_control 1-5 Command: show bandwidth_control 1-5 Bandwidth Control Table Port RX Rate (Kbit/sec) TX Rate (Kbit/sec) ---- ------------------------ ---------------------- no_limit no_limit no_limit no_limit no_limit no_limit no_limit no_limit...
Page 98 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show scheduling scheduling mechanisms in use on the Switch. Parameters None. Restrictions None. Example usage: To display the current scheduling configuration: DES-3028P:4# show scheduling Command: show scheduling QOS Output Scheduling...
Page 99 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config scheduling_mechanism strict Command: config scheduling_mechanism strict Note: The strict mode is only supported at the highest queue and the other lower queues will still work at WRR mode.
Page 100 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the Switch. Syntax config 802.1p user_priority <priority 0-7> <class_id 0-3>...
Page 101 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To show 802.1p user priority: DES-3028P:4# show 802.1p user_priority Command: show 802.1p user_priority QOS Class of Traffic Priority-0 -> <Class-1> Priority-1 -> <Class-0> Priority-2 -> <Class-0>...
Page 102 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1 default_priority Restrictions None. Example usage: To display the current 802.1p default priority configuration on the Switch: DES-3028P:4# show 802.1p default_priority Command: show 802.1p default_priority Port Priority...
Page 103 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cos mapping Purpose Used to configure the CoS to port mapping method to be used on the switch. Syntax config cos mapping port [<portlist> | all] [none | {port_mapping | ethernet [802.1p | mac_mapping] | ip [tos | dscp]}]...
Page 104 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p 802.1p CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All config cos port_mapping...
Page 105 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos port_mapping Purpose Used to map the destination MAC address in incoming packets to one of the hardware queues available on the switch. Syntax show cos port_mapping {port <portlist>}...
Page 106 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos mac_mapping Purpose Used to show the mapping between destination MAC addresses and CoS traffic classes. Syntax show cos mac_mapping {destination_addr <macaddr>} Description The show cos mac_mapping command display the information of the destination MAC address mapped to a traffic class.
Page 107 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show cos tos Purpose Used to show TOS value to traffic class mapping. Syntax show cos tos {value <value 0-7>} Description The show cos tos command displays the information of ToS to traffic class mappings.
Page 108 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show dscp_mapping Purpose Used to show DSCP value map to traffic class. Syntax show dscp_mapping {dscp_value <value 0-63>} Description The show dscp_mapping command displays the information for DSCP mapping to traffic class. This command is supported when the ACL commands are not supported.
Page 109: Port Mirroring Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port>...
Page 110 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-3028P:4# Example usage: To delete the mirroring ports:...
Page 111 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#disable mirror Command: disable mirror Success. DES-3028P:4# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
Page 112: Vlan Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32> {tag <vlanid 2-4094> | advertisement} delete vlan <vlan_name 32>...
Page 113 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete vlan Purpose Used to delete a previously configured VLAN on the Switch. Syntax delete vlan <vlan_name 32> Description This command will delete a previously configured VLAN on the Switch.
Page 114 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config vlan v1 delete 6-8 Command: config vlan v1 delete 6-8 Success. DES-3028P:4# config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1-4094>}...
Page 115 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To enable the generic VLAN Registration Protocol (GVRP): DES-3028P:4#enable gvrp Command: enable gvrp Success. DES-3028P:4# disable gvrp Purpose Used to disable GVRP on the Switch. Syntax...
Page 116 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show vlan Command: show vlan VLAN Name : default VLAN TYPE : static Advertisement : Enabled Member ports : 1,5-26 Static ports : 1,5-26 Current Untagged ports : 1,5-26...
Page 117: Link Aggregation Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-6> {type [lacp | static]} delete link_aggregation group_id <value 1-6>...
Page 118 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value 1-6> Description This command is used to delete a previously configured link aggregation group.
Page 119 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source | mac_destination | mac_source_dest ] Description This command configures the part of the packet examined by the Switch when selecting the egress port for transmitting load-sharing data.
Page 120 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source-dest Group ID Master Port Member Port : 1, 5-10 Active Port Status : Disabled Flooding Port DES-3028P:4# config lacp_ports Purpose Used to configure settings for LACP compliant ports.
Page 121 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show lacp_port Parameters <portlist> - Specifies a port or range of ports to be configured. If no parameter is specified, the system will display the current LACP status for all ports.
Page 122: Basic Ip Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IP C ASIC OMMANDS The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ipif [System] [{ipaddress <network_address>...
Page 123 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif Description This command will display the configuration of an IP interface on the Switch.
Page 124 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#enable autoconfig Command: enable autoconfig Success. DES-3028P:4# NOTE: More detailed information for this command and related commands can be found in the section titled Switch Utility Commands.
Page 125: Igmp Snooping Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [<vlan_name 32>...
Page 126 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure IGMP snooping: DES-3028P:4#config igmp_snooping default host_timeout 250 state enable Command: config igmp_snooping default host_timeout 250 state enable Success. DES-3028P:4# config igmp_snooping querier Purpose This command configures IGMP snooping querier.
Page 127 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure IGMP snooping: DES-3028P:4#config igmp_snooping querier default query_interval 125 state enable Command: config igmp_snooping querier default query_interval 125 state enable Success. DES-3028P:4# config router_ports Purpose Used to configure ports as router ports.
Page 128 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config router_ports_forbidden default add 1-10 Command: config router_ports_forbidden default add 1-10 Success. DES-3028P:4# enable igmp_snooping Purpose Used to enable IGMP snooping on the Switch. Syntax enable igmp_snooping {forward_mcrouter_only} Description This command allows users to enable IGMP snooping on the Switch.
Page 129 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show igmp_snooping Purpose Used to show the current status of IGMP snooping on the Switch. Syntax show igmp_snooping {vlan <vlan_name 32>} Description This command will display the current IGMP snooping configuration on the Switch.
Page 130 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast group: 224.0.0.2 MAC address : 01-00-5E-00-00-02 Reports Port Member : 2,5 VLAN Name : default Multicast group: 224.0.0.9...
Page 131 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show router_ports Command: show router_ports VLAN Name : default Static router port Dynamic router port Total Entries: 1 DES-3028P:4#...
Page 132: Dhcp Relay
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DHCP R ELAY The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1-16>...
Page 133 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To add an IP destination to the DHCP relay table: DES-3028P:4#config dhcp_relay add ipif System 10.58.44.6 Command: config dhcp_relay add ipif System 10.58.44.6 Success. DES-3028P:4# config dhcp_relay delete ipif...
Page 134 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure DHCP relay option 82 state: DES-3028P:4#config dhcp_relay option_82 state enable Command: config dhcp_relay option_82 state enable Success. DES-3028P:4# config dhcp_relay option_82 check Purpose Used to configure the checking mechanism of DHCP relay agent information option 82 of the switch.
Page 135 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config dhcp_relay option_82 policy replace Command: config dhcp_relay option_82 policy replace Success. DES-3028P:4# show dhcp_relay Purpose Used to display the current DHCP/BOOTP relay configuration. Syntax show dhcp_relay {ipif <ipif_name 12>}...
Page 136 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable dhcp_relay Restrictions Only administrator-level users can issue this command. Example usage: To enable DHCP relay: DES-3028P:4#enable dhcp_relay Command: enable dhcp_relay Success. DES-3028P:4# disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch.
Page 137: Commands
802.1X C OMMANDS The DES-3028/28P/52/52P implements the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
Page 138 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable 802.1x Purpose Used to enable the 802.1x server on the Switch. Syntax enable 802.1x Description The enable 802.1x command enables the 802.1x Network Access control server application on the Switch. To select between port-based or MAC-based, use the config 802.1x auth_mode command.
Page 139 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show 802.1x auth_configuration Purpose Used to display the current configuration of the 802.1x server on the Switch. Syntax show 802.1x auth_configuration {ports <portlist>} Description The show 802.1x auth_configuration command is used to display the 802.1x Port-based or MAC-based Network Access control local users...
Page 140 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x auth_configuration ports 1 Command: show 802.1x auth_configuration ports 1 802.1X : Enabled Authentication Mode : Port_based Authentication Protocol : Radius_Eap Port number Capability : None AdminCrlDir...
Page 141 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x auth_state Command: show 802.1x auth_state Port Auth PAE State Backend State Port Status ------ ----------------------- --------------------- ----------------- ForceAuth Success Authorized ForceAuth Success Authorized ForceAuth Success Authorized...
Page 142 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x auth_mode Parameters [port_based | mac_based] − The Switch allows users to authenticate 802.1x by either port or MAC address. Restrictions Only administrator-level users can issue this command.
Page 143 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x auth_parameter default parameter will return all ports in the specified range to their default 802.1x settings. <portlist> − Specifies a port or range of ports to be configured.
Page 144 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x auth_protocol Parameters radius_eap | local – Specify the type of authentication protocol desired. Restrictions Only administrator-level users can issue this command. Example usage: To configure the authentication protocol on the Switch: DES-3028P:4# config 802.1x auth_protocol radius_eap...
Page 145 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config 802.1x reauth based only on the port number. Ports approved for re-authorization can then be specified. mac_based − This instructs the Switch to re-authorize 802.1x functions based only on the MAC address. MAC addresses approved for re- authorization can then be specified.
Page 146 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config radius add 1 10.48.74.121 key dlink default Command: config radius add 1 10.48.74.121 key dlink default Success. DES-3028P:4# config radius delete Purpose Used to delete a previously entered RADIUS server configuration.
Page 147 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-3028P:4# show radius Purpose Used to display the current RADIUS configurations on the Switch.
Page 148 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#create 802.1x guest_vlan Trinity Command: create 802.1x guest_vlan Trinity Success. DES-3028P:4# config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1x guest VLAN. Syntax config 802.1x guest_vlan ports [<portlist> | all] state [enable | disable] Description The config 802.1x guest_vlan ports command is used to configure ports to...
Page 149 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Setting ----------------------------------------------------------- Guest VLAN : Trinity Enable guest VLAN ports: 1-5 DES-3028P:4# delete 802.1x guest_vlan Purpose Used to delete a 802.1x Guest VLAN.
Page 150 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show acct_client Command: show acct_client radiusAcctClient --------------------------------------------------------------------------------------- radiusAcctClientInvalidServerAddresses radiusAcctClientIdentifier D-Link radiusAuthServerEntry --------------------------------------------------------------------------------------- radiusAccServerIndex radiusAccServerAddress 10.53.13.199 radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators radiusAccClientPendingRequests radiusAccClientTimeouts radiusAccClientUnknownTypes radiusAccClientPacketsDropped CTRL+C ESC q...
Page 151 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual radiusAuthClientTimeouts radiusAuthClientUnknownTypes radiusAuthClientPacketsDropped CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry show auth_diagnostics Purpose Used to display the current authentication diagnostics. Syntax show auth_diagnostics {ports [<portlist> | all]}...
Page 152 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To display the current authentication session statistics for port 16 of module 1: DES-3028P:4#show auth_session_statistics ports 1 Command: show auth_session_statistics ports 1 Port number : 1 SessionOctetsRx SessionOctetsTx...
Page 153 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create 802.1x user users. <username 15> − A username of up to 15 alphanumeric characters in Parameters length. Restrictions Only administrator-level users can issue this command. Example usage: To create an 802.1x user:...
Page 154 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To delete 802.1x users: DES-3028P:4#delete 802.1x user dtremblett Command: delete 802.1x user dtremblett Are you sure to delete the user?(y/n) Success. DES-3028P:4#...
Page 155: Access Control List (Acl) Commands
ONTROL OMMANDS The DES-3028/28P/52/52P implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address. The access profile commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
Page 156 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters {user_define<hex 0x0-0xffffffff>}]} | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>...
Page 157 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0- 0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}] profile_id <value 1-256>...
Page 158 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create access_profile protocol_id_mask − Specifies that the Switch will examine the protocol field in each packet and if this field contains the value entered here, apply the following rules.
Page 159 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile Purpose Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operational method, with the values the Switch finds in the specified frame header fields.
Page 160 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile ip − Specifies that the Switch will look into the IP fields in each packet. Parameters • vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN.
Page 161 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config access_profile rate of 10 then the ingress rate is 640kbit/sec.) The user many select a value between 1- 156249 or no limit. The default setting is no limit.
Page 162 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create cpu access_profile Purpose Used to create an access profile specifically for CPU Interface Filtering on the Switch and to define which parts of each incoming frame’s header the Switch will examine. Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields.
Page 163 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create cpu access_profile src_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the source port. • dst_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the destination port.
Page 164 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cpu access_profile Purpose Used to configure a CPU access profile used for CPU Interface Filtering and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered.
Page 165 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config cpu access_profile • igmp − Specifies that the Switch will examine the Internet Group Management Protocol (IGMP) field within each packet. • tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field within each packet.
Page 166 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete cpu access_profile created CPU access profile. profile_id <value 1-3> − Enter an integer between 1 and 3 that is used to Parameters identify the CPU access profile to be deleted with this command. This value is assigned to the access profile when it is created with the create cpu access_profile command.
Page 167 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable cpu_interface_filtering Restrictions Only administrator-level users can issue this command. Example Usage: To enable CPU interface filtering: DES-3028P:4#enable cpu_interface_filtering Command: enable cpu_interface_filtering Success. DES-3028P:4# disable cpu_interface_filtering Purpose Used to disable CPU interface filtering on the Switch.
Page 168: Time Range Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ANGE OMMANDS The Time Range commands are used in conjunction with the Access Profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the Switch.
Page 169 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To configure the time range time1 to be between 6:30 a.m. and 9:40 p.m., Monday to Friday: DES-3028P:4#config time_range time1 hours start_time 6:30:00 end_time 21:40:00 weekdays mon-fri...
Page 170: Safeguard Engine Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
Page 171 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config safeguard_engine Restrictions Only administrator-level users can issue this command. Example usage: To configure the safeguard engine for the Switch: DES-3028P:4#config safeguard_engine state enable utilization rising 45 Command: config safeguard_engine state enable utilization rising 45 Success.
Page 172: Traffic Segmentation Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied.
Page 173 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the current traffic segmentation configuration on the Switch. DES-3028P:4#show traffic_segmentation Command: show traffic_segmentation Traffic Segmentation Table Port Forward Portlist ---- ---------------------------- 1-28 1-28 1-28...
Page 174: Time And Sntp Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
Page 175 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3028P:4# show sntp Purpose Used to display the SNTP information.
Page 176 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp). Parameters None.
Page 177 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config time_zone Purpose Used to determine the time zone used in order to adjust the system clock. Syntax config time_zone {operator [+ | -] | hour <gmt_hour 0-13> | min <minute 0-59>}...
Page 178 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config dst Parameters • <end_week 1-4,last> - The number of the week during the month in which DST ends where 1 is the first week, 2 is the second week and so on, last is the last week of the month.
Page 179 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To show the time currently set on the Switch’s System clock: DES-3028P:4#show time Command: show time Current Time Source : System Clock Current Time : 1 Days 01:39:17...
Page 180: Arp Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr>...
Page 181 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example Usage: To configure a static ARP entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: DES-3028P:4#config arpentry 10.48.74.12 00-50-BA-00-07-36 Command: config arpentry 10.48.74.12 00-50-BA-00-07-36 Success. DES-3028P:4#...
Page 182 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif [System] | ipaddress <ipaddr> | static} Description This command is used to display the current contents of the Switch’s ARP table.
Page 183 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual clear arptable Purpose Used to remove all dynamic ARP table entries. Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch’s ARP table. Static ARP table entries are not affected.
Page 184: Routing Table Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OUTING ABLE OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr>...
Page 185 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete iproute default 10.53.13.254 Command: delete iproute default 10.53.13.254 Success. DES-3028P:4# show iproute Purpose Used to display the Switch’s current IP routing table. Syntax show iproute {<network_address> | static} Description This command will display the Switch’s current IP routing table.
Page 186: Mac Notification Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification...
Page 187 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500>} Description MAC address notification is used to monitor MAC addresses learned and entered into the FDB.
Page 188 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show mac_notification Parameters None. Restrictions None. Example usage: To view the Switch’s MAC address table notification global settings: DES-3028P:4#show mac_notification Command: show mac_notification Global Mac Notification Settings State...
Page 189: Access Authentication Control Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
Page 190 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15> method_list_name config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local | none} delete authen_login <string 15>...
Page 191 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
Page 192 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage: To display the system access authentication policy: DES-3028P:4#show authen_policy Command: show authen_policy Authentication Policy: Enabled DES-3028P:4# create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for users logging on to the Switch.
Page 193 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_login Successful login using any of these methods will give the user a “user” privilege only. If the user wishes to upgrade his or her status to the administrator level, the user must implement the enable admin command, followed by a previously configured password.
Page 194 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_login Restrictions Only administrator-level users can issue this command. Example usage: To configure the user defined method list “Trinity” with authentication methods TACACS, XTACACS and local, in that order.
Page 195 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_login Parameters default – Entering this parameter will display the default method list for users logging on to the Switch. method_list_name <string 15> - Enter an alphanumeric string of up to 15 characters to define the given method list to view.
Page 196 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create authen_enable method_list_name Restrictions Only administrator-level users can issue this command. Example usage: To create a user-defined method list, named “Permit” for promoting user privileges to Administrator privileges:...
Page 197 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen_enable RADIUS server hosts of the RADIUS server group list. server_group <string 15> - Adding this parameter will require the user to be authenticated using a user-defined server group previously configured on the Switch.
Page 198 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# delete authen_enable method_list_name Purpose Used to delete a user-defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch.
Page 199 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show authen_enable and none (no authentication necessary to access any function on the Switch). Restrictions None. Example usage: To display all method lists for promoting user level privileges to administrator level privileges.
Page 200 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen application configured method list. Enter a alphanumeric string of up to 15 characters to define a previously configured method list. Restrictions Only administrator-level users can issue this command.
Page 201 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual create authen server_host More than one authentication protocol can be run on the same physical server host but, remember that TACACS/XTACACS/TACACS+/RADIUS are separate entities and are not compatible with each other. The maximum supported number of server hosts is 16.
Page 202 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen server_host TACACS/XTACACS/TACACS+/RADIUS server host on a remote host. The TACACS/XTACACS/TACACS+/RADIUS server host will then verify or deny the request and return the appropriate message to the Switch. More than one authentication protocol can be run on...
Page 203 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual delete authen server_host Description This command is used to delete a user-defined authentication server host previously created on the Switch. Parameters server_host <ipaddr> - The IP address of the remote server host to be deleted.
Page 204 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show authen server_host Command: show authen server_host IP Address Protocol Port Timeout Retransmit Key --------------- -------- ----- ------- --------------- ------------------ 10.53.13.94 TACACS No Use Total Entries : 1...
Page 205 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config authen server_group XTACACS protocol may be added to this group. tacacs+ – Use this parameter to utilize the built-in TACACS+ server protocol on the Switch. Only server hosts utilizing the TACACS+ protocol may be added to this group.
Page 206 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#delete server_group group_1 Command: delete server_group group_1 Success. DES-3028P:4# show authen server_group Purpose Used to view authentication server groups on the Switch. Syntax show authen server_group <string 15>...
Page 207 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To configure the response timeout for 60 seconds: DES-3028P:4# config authen parameter response_timeout 60 Command: config authen parameter response_timeout 60 Success. DES-3028P:4# config authen parameter attempt Purpose Used to configure the maximum number of times the Switch will accept authentication attempts.
Page 208 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show authen parameter Command: show authen parameter Response Timeout : 60 seconds User Attempts DES-3028P:4# enable admin Purpose Used to promote user level privileges to administrator level privileges.
Page 209 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#config admin local_enable Command: config admin local_enable Enter the old password: Enter the case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3028P:4#...
Page 210: Ssh Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
Page 211 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable ssh Purpose Used to enable SSH. Syntax enable ssh Description This command allows users to enable SSH on the Switch. Parameters None. Restrictions Only administrator-level users can issue this command.
Page 212 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh authmode Parameters password – This parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the Switch. publickey - This parameter may be chosen if the administrator wishes to use a publickey configuration set on a SSH server, for authentication.
Page 213 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh server Parameters maxsession <int 1-8> - Allows the user to set the number of users that may simultaneously access the Switch. The default setting is 8.
Page 214 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssh user Description This command allows users to configure the SSH user authentication method. Parameters <username 15> - Enter a username of no more than 15 characters to identify the SSH user.
Page 215 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Note: To configure the SSH user, the administrator must create a user account on the Switch. For information concerning configuring a user account, please see the section of this manual entitled Basic Switch Commands and then the command, create account.
Page 216 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show ssh algorithm Purpose Used to display the SSH algorithm setting. Syntax show ssh algorithm Description This command will display the current SSH algorithm setting status. Parameters None.
Page 217: Ssl Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a...
Page 218 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
Page 219 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
Page 220 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config ssl cachetimeout timeout Parameters timeout <value 60-86400> - Enter a timeout value between 60 and 86400 seconds to specify the total time an SSL key exchange ID stays valid before the SSL module will require a new, full SSL negotiation for connection.
Page 221 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show ssl Command: show ssl SSL Status Disabled RSA_WITH_RC4_128_MD5 0x0004 Enabled RSA_WITH_3DES_EDE_CBC_SHA 0x000A Enabled DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_MD5 0x0003 Enabled DES-3028P:4# show ssl certificate Purpose Used to view the SSL certificate file status on the Switch.
Page 222 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#download ssl certificate 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Command: download ssl certificate 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der Certificate Loaded Successfully! DES-3028P:4#...
Page 223: D-Link Single Ip Management Commands
SIM allows intermediate devices that do not support SIM. This enables the user to manage a switch that are more than one hop away from the CS. The SIM group is a group of switches that are managed as a single entity. The DES-3028/28P/52/52P may take on three different roles: Commander Switch(CS) –...
Page 224 CS, do not belong. The Upgrade to v1.6 To better improve SIM management, the DES-3028/28P/52/52P Switches have been upgraded to version 1.6 in this release. Many improvements have been made, including: The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction.
Page 225 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual enable sim Purpose Used to enable Single IP Management (SIM) on the Switch Syntax enable sim Description This command will enable SIM globally on the Switch. SIM features and functions will not function properly unless this function is enabled.
Page 226 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show sim MAC Address - Displays the MAC Address of the Switch. Capabilities – Displays the type of switch, be it Layer 2 (L2) or Layer 3 (L3).
Page 227 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show sim candidates Command: show sim candidates ID MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ----------------- ------------------------ ----- --------- ---------------- 00-01-02-03-04-00 DES-3028 L2 Switch 1.00-B22...
Page 228 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Port MAC Address Role ------ ------------------ --------- 00-35-26-00-11-99 Commander 00-35-26-00-11-91 Member 00-35-26-00-11-90 Candidate Total Entries: 3 DES-3028P:4# reconfig Purpose Used to connect to a member switch, through the commander switch, using Telnet.
Page 229 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Success. DES-3028P:4# To delete a member: DES-3028P:4# config sim_group delete 1 Command: config sim_group delete 1 Please wait for ACK... Success. DES-3028P:4# config sim Purpose Used to configure role parameters for the SIM protocol on the Switch.
Page 230 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual To change the hold time of the discovery protocol: DES-3028P:4# config sim hold_time 120 Command: config sim hold_time 120 Success. DES-3028P:4# To transfer the CS (commander) to be a CaS (candidate):...
Page 231 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual download sim Restrictions Only administrator-level users can issue this command. Example usage: To download firmware: DES-3028P:4# download sim_ms firmware_from_tftp 10.53.13.94 c:/des3028.had all Command: download sim_ms firmware_from_tftp 10.53.13.94 c:/des3028.had all This device is updating firmware.
Page 232 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4# upload sim_ms configuration_to_tftp 10.55.47.1 D:\configuration.txt 1 Command: upload sim_ms configuration 10.55.47.1 D:\configuration.txt 1 This device is upload configuration. Please wait several minutes ... Upload Status : ID MAC Address...
Page 233: Smtp Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
Page 234 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual The SMTP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable smtp disable smtp config smtp {server <ipaddr>...
Page 235 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client. Syntax config smtp {server <ipaddr> | server_port <tcp_port_number 1-65535> | self_mail_addr <mail_addr 64> | [add mail_receiver <mail_addr 64>...
Page 236 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028:4#show smtp Command: show smtp smtp status: Enabled smtp server address : 166.99.66.33 smtp server port : 25 self mail address: smtp@30XX.dev Index Mail Receiver Address -------- --------------------------------- darren_tremblett@nhl.com...
Page 237: Poe Commands
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMANDS DES-3028P and the DES-3052P support Power over Ethernet (PoE) as defined by the IEEE 802.3af specification. Ports 1-24 supply 48 VDC power to PDs over Category 5 or Category 3 UTP Ethernet cables. The DES-3028P and the DES-3052P follow the standard PSE pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6.
Page 238 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config poe system system. Parameters power_limit - The power limit parameter allows the user to configure the power budget of whole PoE system. The minimum setting is 37 W and the maximum is 370W (depending on the power supplier’s capability).
Page 239 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual config poe ports ports. These ports will be the first ports to receive power and the last to disconnect power. • high – Specifying this parameter will nominate these ports as having the second highest priority for receiving power and shutting down power.
Page 240 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual show poe system Restrictions None. Example usage: To display the power settings for the switch system: DES-3028P:4#show poe system Command: show poe system PoE System Information --------------------------------------------------- Power Limit...
Page 241: Command History List
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual OMMAND ISTORY The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config command_history <value 1-40>...
Page 242 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Example usage To display all of the commands in the CLI: DES-3028P:4#? clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode...
Page 243 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#dir clear clear arptable clear counters clear fdb clear log clear port_security_entry port config 802.1p default_priority config 802.1p user_priority config 802.1x auth_mode config 802.1x auth_parameter ports config 802.1x auth_protocol config 802.1x capability ports...
Page 244 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:4#show command_history Command: show command_history ? show show vlan show command history DES-3028P:4#...
Page 245: Technical Specifications
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual ECHNICAL PECIFICATIONS General IEEE 802.3 10BASE-T Ethernet Protocols IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D Spanning Tree IEEE 802.1D/S/W Spanning Tree...
Page 246 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual Physical and Environmental Input: 100~240V, AC/10A, 50~60Hz Internal Power Supply Output: DES-3028/DES-3052: 12V, 3.3A (Max) DES-3028P: 12V, 3.3A/50V, 3.7A (Max) DES-3052P: 12V,10.5A/50V,7.5A (Max) Power Consumption DES-3028 – 25W DES-3052 –...
Page 247 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DES-3028P:Random 12 ports PoE Capable Ports DES-3052P:Random 24 ports DES-3028P: Per port 15.4W (Default), Output capacity for DES-3028P 185W Power consumption Max. 225W Power feeding for PoE DES-3052P: Per port 15.4W (Default),...
Page 248 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual LED Indicators Location LED Indicative Color Status Description Solid Light Power On Power Green Light off Power Off Per Device Solid Light Console on Green Console Blinking POST is in progress/ POST is failure.
Page 249 Store and Forward Switching Capacity 12.8Gbps for DES-3028/DES-3028P 17.6Gbps for DES-3052/DES-3052P 64 Byte system packet forwarding rate 9.5 million packets per second for DES-3028/DES-3028P 13.1 million packets per second for DES-3052/DES-3052P Priority Queues 4 Priority Queues per port MAC Address Table...
Page 250 DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual DEM-310GT (1000BASE-LX) DEM-311GT (1000BASE-SX) DEM-314GT (1000BASE-LH) DEM-315GT (1000BASE-ZX) DEM-210 (Single Mode 100BASE-FX) DEM-211 (Multi Mode 100BASE-FX) -WDM Transceiver Supported: 1.DEM-330T (TX-1550/RX-1310nm),up to 10km,Single-Mode 2.DEM-330R (TX-1310/RX-1550nm), up to 10km,Single-Mode 3.DEM-331T (TX-1550/RX-1310nm), up to 40km, Single-Mode...

This manual is also suitable for:

Des-3052 Des-3052p Des-3028p

D-Link DES-3028 Cli Reference Manual

Quick Links

Related Manuals for D-Link DES-3028

Summary of Contents for D-Link DES-3028

This manual is also suitable for:

Table of Contents