Page 1 TL-SL5428E 24-Port 10/100Mbps + 4-Port Gigabit JetStream L2 Managed Switch REV2.0.0 1910011020...
Page 2 Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD.
Page 3: Table Of Contents
CONTENTS Preface ………………………………………………………………………………….1 Chapter 1 Using the CLI ..................5 1.1 Accessing the CLI ......................5 1.1.1 Logon by a console port ..................5 1.1.2 Configuring the Privileged EXEC Mode Password..........7 1.1.3 Logon by Telnet....................7 1.1.4 Logon by SSH....................13 1.2 CLI Command Modes ....................18 1.3 Security Levels ......................20 1.4 Conventions ........................20 1.4.1 Format Conventions ...................20...
Page 4 show vlan ..........................32 Chapter 4 MAC-based VLAN Commands ............33 mac-vlan mac-address ......................33 mac-vlan..........................34 show mac-vlan ........................34 show mac-vlan interface......................35 Chapter 5 Protocol-based VLAN Commands ........... 36 protocol-vlan template ......................36 protocol-vlan vlan ........................37 protocol-vlan..........................37 show protocol-vlan template....................38 show protocol-vlan vlan ......................38 show protocol-vlan interface....................39 Chapter 6 VLAN-VPN Commands..............
Page 5 private-vlan primary .......................51 private-vlan community......................51 private-vlan association ......................52 switchport private-vlan......................52 switchport private-vlan host-association ................53 switchport private-vlan mapping ....................54 show vlan private-vlan ......................55 Chapter 9 GVRP Commands................56 gvrp ............................56 gvrp (interface) ........................56 gvrp registration........................57 gvrp timer ..........................58 show gvrp global ........................59 show gvrp interface .......................59 Chapter 10 Etherchannel Commands ..............
Page 6 Chapter 12 Binding Table Commands..............73 ip source binding ........................73 ip source binding index......................74 ip dhcp snooping ........................75 ip dhcp snooping global......................75 ip dhcp snooping information option ..................76 ip dhcp snooping information strategy ...................77 ip dhcp snooping information remote-id.................78 ip dhcp snooping information circuit-id ..................78 ip dhcp snooping trust ......................79 ip dhcp snooping mac-verify....................80 ip dhcp snooping limit rate.....................80...
Page 7 ip dos-prevent detect ......................94 clear ip dos-prevent detect statistics..................94 show ip dos-prevent ......................95 Chapter 16 IEEE 802.1X Commands ..............96 dot1x system-auth-control .....................96 dot1x auth-method ........................96 dot1x guest-vlan(global) ......................97 dot1x quiet-period........................98 dot1x timeout.........................98 dot1x max-reauth-req ......................99 dot1x............................99 dot1x guest-vlan(interface) ....................100 dot1x port-control ........................101 dot1x port-method .......................101 radius...........................102...
Page 8 show logging flash....................... 115 Chapter 19 SSH Commands................117 ip ssh server ........................117 ip ssh version ........................117 ip ssh timeout ........................118 ip ssh max-client........................118 ip ssh download........................119 show ip ssh..........................120 Chapter 20 SSL Commands ................121 ip http secure-server......................121 ip http secure-server download certificate ................121 ip http secure-server download key ..................122 show ip http secure-server ....................123...
Page 9 ip address..........................138 ip address-alloc dhcp ......................138 ip address-alloc bootp ......................139 reset ............................139 reboot ..........................140 copy running-config startup-config ..................140 copy startup-config tftp ......................141 copy tftp startup-config ......................141 firmware upgrade ........................142 ping .............................143 tracert ..........................144 loopback interface .......................145 show system-time........................145 show system-time dst ......................146 show system-time ntp......................146 show system-info.........................146 show running-config ......................147...
Page 10 duplex..........................158 speed...........................159 storm-control broadcast.......................159 storm-control multicast ......................160 storm-control unicast ......................161 bandwidth ..........................161 clear counters........................162 show interface status......................162 show interface counters.......................163 show interface description ....................164 show interface flowcontrol ....................164 show interface configuration....................165 show storm-control ......................165 show bandwidth........................166 Chapter 25 QoS Commands................167 qos ............................167 qos cos ..........................167 qos dscp ..........................168...
Page 11 loopback-detection interval....................179 loopback-detection recovery-time..................180 loopback-detection(interface) ....................180 loopback-detection config....................181 loopback-detection recover ....................182 show loopback-detection global ..................182 show loopback-detection interface ..................183 Chapter 29 ACL Commands................184 time-range ...........................184 absolute..........................184 periodic..........................185 holiday ..........................186 holiday(global) ........................186 access-list create.........................187 mac access-list........................187 access-list standard......................188 access-list extended ......................189 rule ............................190 access-list policy name......................192 access-list policy action .......................192...
Page 12 spanning-tree mode......................202 spanning-tree mst configuration ..................203 instance ..........................203 name ...........................204 revision ..........................204 spanning-tree mst instance ....................205 spanning-tree mst........................206 spanning-tree priority......................206 spanning-tree tc-defend.......................207 spanning-tree timer......................208 spanning-tree hold-count.....................208 spanning-tree max-hops ......................209 spanning-tree bpdufilter.......................210 spanning-tree bpduguard ....................210 spanning-tree guard loop..................... 211 spanning-tree guard root ..................... 211 spanning-tree guard tc......................212 spanning-tree mcheck ......................212 show spanning-tree active....................213...
Page 13 show ethernet-oam statistics ....................227 show ethernet-oam status ....................227 Chapter 32 DLDP Commands ................229 dldp(global)..........................229 dldp interval .........................229 dldp shut-mode........................230 dldp reset(global).........................230 dldp(interface) ........................231 dldp reset(interface)......................231 show dldp ..........................232 show dldp interface......................232 Chapter 33 IGMP Snooping Commands ............234 ip igmp snooping(global) .....................234 ip igmp snooping(interface) ....................234 ip igmp snooping immediate-leave ..................235 ip igmp snooping drop-unknown..................235...
Page 14 ipv6 mld snooping router-aging-time ...................249 ipv6 mld snooping member-aging-time................250 ipv6 mld snooping report-suppression.................250 ipv6 mld snooping unknown-filter ..................251 ipv6 mld snooping last-listener query-inteval...............251 ipv6 mld snooping last-listener query-count ................252 ipv6 mld snooping multicast-vlan..................252 ipv6 mld snooping multicast-vlan vlan-id ................253 ipv6 mld snooping vlan ......................253 ipv6 mld snooping vlan router-aging-time................254 ipv6 mld snooping vlan member-aging-time ................254 ipv6 mld snooping vlan immediate-leave................255...
Page 15 snmp-server user ........................269 snmp-server community ......................271 snmp-server host.........................272 snmp-server engineID ......................273 snmp-server traps snmp......................274 snmp-server traps security ....................275 snmp-server traps link-status....................276 snmp-server traps........................276 snmp-server traps mac......................277 snmp-server traps vlan ......................278 rmon history.........................279 rmon event ..........................280 rmon alarm ..........................281 show snmp-server .......................283 show snmp-server view .......................283 show snmp-server group .....................283 show snmp-server user .......................284...
Page 16 cluster ndp...........................296 cluster ntdp ..........................297 cluster explore ........................298 cluster..........................298 cluster ip pool ........................299 cluster commander ......................299 cluster manage........................300 cluster member........................300 cluster candidate .........................301 cluster individual........................301 show cluster ndp........................302 show cluster ntdp.........................302 show cluster ........................303 show cluster member ......................303 show cluster manage role....................304 show cluster neighbor......................304...
Page 17: Preface
JetStream L2 Managed Switch CLI Guide Preface This Guide is intended for network administrator to provide referenced information about CLI (Command Line Interface). The device mentioned in this Guide stands for TL-SL5428E 24-Port 10/100Mbps + 4-Port Gigabit JetStream L2 Managed Switch. Overview of this Guide...
Page 18 TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 12: Binding Table Commands Provide information about the commands used for binding the IP address, MAC address, VLAN and the connected Port number of the Host together. Besides it also provide information about the...
Page 19 TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 24: Ethernet Configuration Commands Provide information about the commands used for configuring the Bandwidth Control, Negotiation Mode, and Storm Control for ethernet ports. Chapter 25: QoS Commands Provide information about the commands used for configuring the QoS function.
Page 20 TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 37: Cluster Commands Provide information about the commands used for configuring the Cluster Management function.
Page 21: Chapter 1 Using The Cli
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by the following two methods: Log on to the switch by the console port on the switch.
Page 22 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-2 Connection Description Select the port to connect in Figure 1-3, and click OK. Figure 1-3 Select the port to connect Configure the port selected in the step above as the following Figure 1-4 shown. Configure Bits per second as 38400, Data bits as 8, Parity as None, Stop bits as 1, Flow control as None, and then click OK.
Page 23: 1.1.2 Configuring The Privileged Exec Mode Password
TL-SL5428E JetStream L2 Managed Switch CLI Guide The DOS prompt” TL-SL5428E>” will appear after pressing the Enter button as Figure 1-5 shown. It indicates that you can use the CLI now. Figure 1-5 Log in the Switch 1.1.2 Configuring the Privileged EXEC Mode Password To configure the switch remotely by a Telnet or SSH connection, please set a password for entering the Privileged EXEC Mode through the console connection first.
Page 24 TL-SL5428E JetStream L2 Managed Switch CLI Guide Login Mode: It doesn’t require username and password, but a connection password is required. Note: Before Telnet login, you are required to configure Telnet login mode and login authentication information through console connection.
Page 25 TL-SL5428E JetStream L2 Managed Switch CLI Guide For example, the host’s global address is 3001::12/64（and its corresponding interface is 4 as showed in Figure 1-9 ）. The switch’s global address is 3001::1/64, and its auto-configured link-local address in EUI-64 format is FE80::20A:EBFF:FE00:1301. Ping the switch’s IPv6 global address and link-local address from the host to confirm that they...
Page 26 TL-SL5428E JetStream L2 Managed Switch CLI Guide Type the default user name and password admin/admin, then press the Enter button to enter the User EXEC Mode. Figure 1-10 Enter into the User EXEC Mode Now you can manage your switch with CLI commands through Telnet connection.
Page 27 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-11 Enter into the Privileged EXEC Mode  Login Mode Firstly configure the Telnet login mode as “login”, and both the connection password and the Privileged EXEC Mode password as 123 in the prompted DOS screen shown in Figure 1-12.
Page 28 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-13 Connecting to the switch You are prompted to enter the connection password 456 you have set through Console port connection, and then you are in User EXEC Mode. Figure 1-14 Enter into the User EXEC Mode When entering enable command to access Privileged EXEC Mode, you are required to give the password 123 you have set through Console port connection.
Page 29: 1.1.4 Logon By Ssh
TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-15 Enter into the Privileged EXEC Mode Now you can manage your switch with CLI commands through Telnet connection. Note: You can refer to Chapter 11 User Manage Commands for detailed commands information of the Telnet connection configuration.
Page 30 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-16 Enable SSH function  Password Authentication Mode Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type.
Page 31 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-18 Log on the Switch  Key Authentication Mode Select the key type and key length, and generate SSH key. Figure 1-19 Generate SSH Key Note: The key length is in the range of 256 to 3072 bits.
Page 32 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-20 Save the Generated Key Log on to the switch by the console port, and download the public key file from the TFTP server to the switch, as the following figure shows:...
Page 33 TL-SL5428E JetStream L2 Managed Switch CLI Guide Figure 1-22 SSH Connection Config Click Browse to load the private key file to SSH client software and click Open. Figure 1-23 Load the Private Key After successful authentication, please enter the login user name. If you log on to the switch...
Page 34: 1.2 Cli Command Modes
Use the enable command to access Privileged EXEC mode. Enter the disable or the exit command to enable return to User EXEC mode. Privileged command to enter this TL-SL5428E # EXEC Mode mode from User EXEC Enter configure command to access mode. Global Configuration mode.
Page 35 TL-SL5428E JetStream L2 Managed Switch CLI Guide Mode Accessing Path Prompt Logout or Access the next mode Use the exit or the end command or press Ctrl+Z to return to Privileged EXEC mode. configure interface fastEthernet/ Global command to enter this...
Page 36: 1.3 Security Levels
TL-SL5428E JetStream L2 Managed Switch CLI Guide e). Interface vlan: Configure parameters for the vlan-port. Vlan Configuration Mode: In this mode, users can create a VLAN and add a specified  port to the VLAN. 3. Some commands are global, that means they can be performed in all modes: show: Displays all information of switch, for example: statistic information, port ...
Page 37: 1.4.2 Special Characters
TL-SL5428E JetStream L2 Managed Switch CLI Guide Bold indicates an unalterable keyword. For example: show logging  Normal Font indicates a constant (several options are enumerated and only one can be  selected). For example: switchport type { access | trunk | general } Italic Font indicates a variable (an actual value must be assigned).
Page 38: Chapter 2 User Interface
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 2 User Interface enable Description The enable command is used to access Privileged EXEC Mode from User EXEC Mode. Syntax enable Command Mode User EXEC Mode Example If you have set the password to access Privileged EXEC Mode from User EXEC Mode: TL-SL5428E>enable...
Page 39: Disable
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#enable password admin disable Description The disable command is used to return to User EXEC Mode from Privileged EXEC Mode. Syntax disable Command Mode Privileged EXEC Mode Example Return to User EXEC Mode from Privileged EXEC Mode: TL-SL5428E#disable TL-SL5428E>...
Page 40: Exit
TL-SL5428E JetStream L2 Managed Switch CLI Guide exit Description The exit command is used to return to the previous Mode from the current Mode. Syntax exit Command Mode Any Configuration Mode Example Return to Global Configuration Mode from Interface Configuration Mode, and...
Page 41: Show History
Command Mode Privileged EXEC Mode and any Configuration Mode Example Show the commands you have entered before: TL-SL5428E(config-if)#show history TL-SL5428E# 1 show history clear history Description The clear history command is used to clear the commands you have entered before, therefore these commands will not be shown next time you use the show history command.
Page 42: Chapter 3 Ieee 802.1Q Vlan Commands
Parameter vlan-list —— VLAN ID list, ranging from 2 to 4094, in the format of 2-3, 5. It is multi-optional. Command Mode Global Configuration Mode Example Create VLAN 2-10 and VLAN 100: TL-SL5428E(config)#vlan 2-10,100 Delete VLAN 2: TL-SL5428E(config)#no vlan 2...
Page 43: Interface Vlan
—— Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Example Create VLAN Interface 2: TL-SL5428E(config)#interface vlan 2 name Description The name command is used to assign a description string to a VLAN. To clear the description, please use no name command.
Page 44: Switchport Mode
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Specify the Link Type of Fast Ethernet port 3 as “trunk”: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport mode trunk switchport access vlan Description The switchport access vlan command is used to add the desired Access port to IEEE 802.1Q VLAN, or to remove a port from the corresponding VLAN.
Page 45: Switchport Trunk Allowed Vlan
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the link type of port 2 as trunk and add it to VLAN 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#switchport mode trunk TL-SL5428E(config-if)#switchport trunk allowed vlan 2...
Page 46: Switchport General Allowed Vlan
Configure Fast Ethernet port 4 whose link type is “general” to VLAN 2 and its egress-rule as “tagged”: TL-SL5428E(config)#interface fastEthernet 1/0/4 TL-SL5428E(config-if)#switchport mode general TL-SL5428E(config-if)#switchport general allowed vlan 2 tagged switchport pvid Description The switchport pvid command is used to configure the PVID for the switch ports.
Page 47: Show Vlan Summary
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Specify the PVID of Fast Ethernet port 3 as 1: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport pvid 1 show vlan summary Description The show vlan summary command is used to display the summarized information of IEEE 802.1Q VLAN.
Page 48: Show Vlan
Syntax show vlan [id vlan-list] Parameter vlan-list —— Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the detailed information of VLAN 2-10: TL-SL5428E(config)#show vlan id 2-10...
Page 49: Chapter 4 Mac-Based Vlan Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 4 MAC-based VLAN Commands MAC VLAN (Virtual Local Area Network) is the way to classify the VLANs based on MAC address. A MAC address is relative to a single VLAN ID. The untagged packets and the priority-tagged packets coming from the MAC address will be tagged with this VLAN ID.
Page 50: Mac-Vlan
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the Fast Ethernet port 3 for the MAC-based VLAN feature: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#mac-vlan show mac-vlan Description The show mac-vlan command is used to display the information of the MAC-based VLAN entry.
Page 51: Show Mac-Vlan Interface
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Display the information of all the MAC-based VLAN entry: TL-SL5428E(config)#show mac-vlan all show mac-vlan interface Description The show mac-vlan interface command is used to display the port state of MAC-based VLAN. Syntax...
Page 52: Chapter 5 Protocol-Based Vlan Commands
—— The number of the Protocol-based VLAN Template. You can get the template corresponding to the number by the show protocol-vlan template command. Command Mode Global Configuration Mode Example Create a Protocol-based VLAN template named “TP” whose Ethernet protocol type is 0x2024: TL-SL5428E(config)#protocol-vlan template name TP ether-type 2024...
Page 53: Protocol-Vlan Vlan
Command Mode Global Configuration Mode Example Create Protocol-based VLAN 2 and bind it with Protocol-based VLAN Template 3: TL-SL5428E(config)#protocol-vlan vlan 2 template 3 protocol-vlan Description The protocol-vlan command is used to enable the Protocol-based VLAN feature for a specified port. To disable the Protocol-based VLAN feature of this port, please use no protocol-vlan command.
Page 54: Show Protocol-Vlan Template
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the Protocol-based VLAN feature for the Gigabit Ethernet port 25: TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#protocol-vlan show protocol-vlan template Description The show protocol-vlan template command is used to display the information of the Protocol-based VLAN templates.
Page 55: Show Protocol-Vlan Interface
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display information of the Protocol-based VLAN entry: TL-SL5428E(config)#show protocol-vlan vlan show protocol-vlan interface Description The show protocol-vlan interface command is used to display port state and of Protocol-based VLAN interface.
Page 56: Chapter 6 Vlan-Vpn Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 6 VLAN-VPN Commands VLAN-VPN (Virtual Private Network) function, the implement of a simple and flexible Layer 2 VPN technology, allows the packets with VLAN tags of private networks to be encapsulated with VLAN tags of public networks at the network access terminal of the Internet Service Provider.
Page 57: Dot1Q-Tunnel Mapping
—— Give a description to the VLAN Mapping entry, which contains 15 characters at most. Command Mode Global Configuration Mode Example Add a VLAN Mapping entry named “TP” with the C-VLAN being 2 and the SP-VLAN being 10: TL-SL5428E(config)#dot1q-tunnel mapping 2 10 TP...
Page 58: Switchport Dot1Q-Tunnel Mapping
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the VLAN Mapping feature for the Fast Ethernet port 3: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport dot1q-tunnel mapping switchport dot1q-tunnel mode uplink Description The switchport dot1q-tunnel mode uplink command is used to configure a specified port as the VPN Up-link port.
Page 59: Show Dot1Q-Tunnel
JetStream L2 Managed Switch CLI Guide Example Configure the Fast Ethernet port 3 as the VPN Up-link ports: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport dot1q-tunnel mode uplink show dot1q-tunnel Description The show dot1q-tunnel command is used to display the global configuration information of the VLAN VPN.
Page 60: Show Dot1Q-Tunnel Mapping Interface
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the enable state of all VLAN Mapping ports: TL-SL5428E(config)#show dot1q-tunnel mapping interface show dot1q-tunnel uplink Description The show dot1q-tunnel uplink command is used to display the configuration information of the VLAN VPN Up-link ports.
Page 61: Chapter 7 Voice Vlan Commands
Command Mode Global Configuration Mode Example Enable the Voice VLAN function for VLAN 10: TL-SL5428E(config)#voice vlan 10 voice vlan aging time Description The voice vlan aging time command is used to set the aging time for a voice VLAN. To restore to the default aging time for the Voice VLAN, please use no voice vlan aging time command.
Page 62: Voice Vlan Priority
Command Mode Global Configuration Mode Example Set the aging time for the Voice VLAN as 1 minute: TL-SL5428E(config)#voice vlan aging time 1 voice vlan priority Description The voice vlan priority command is used to configure the priority for the Voice VLAN.
Page 63: Voice Vlan Mac-Address
TL-SL5428E JetStream L2 Managed Switch CLI Guide voice vlan mac-address Description The voice vlan mac-address command is used to create Voice VLAN OUI. To delete the specified Voice VLAN OUI, please use no voice vlan mac-address command. Syntax voice vlan mac-address mac-addr mask mask [description descript]...
Page 64: Switchport Voice Vlan Security
Example Configure the Fast Ethernet port 3 to operate in the auto voice VLAN mode: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport voice vlan mode auto switchport voice vlan security Description The switchport voice vlan security command is used to enable the Voice VLAN security feature.
Page 65: Show Voice Vlan
The show voice vlan oui command is used to display the configuration information of Voice VLAN OUI. Syntax show voice vlan oui Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration information of Voice VLAN OUI: TL-SL5428E(config)#show voice vlan oui...
Page 66: Show Voice Vlan Switchport
Privileged EXEC Mode and Any Configuration Mode Example Display the configuration information of Fast Ethernet port 1 in the Voice VLAN: TL-SL5428E(config)#show voice vlan switchport fastEthernet 1/0/1 Display the configuration information of all the ports in the Voice VLAN: TL-SL5428E(config)#show voice vlan switchport...
Page 67: Chapter 8 Private Vlan Commands
Command Mode VLAN Configuration Mode (VLAN) Example Configure the VLAN 3 as the primary VLAN of the private VLAN: TL-SL5428E(config)#vlan 3 TL-SL5428E(config-vlan)#private-vlan primary private-vlan community Description The private-vlan community command is used to configure the designated VLAN as the community VLAN of the Private VLAN. To invalid the currently community VLAN, please use no private-vlan community command.
Page 68: Private-Vlan Association
VLAN Configuration Mode (VLAN) Example Associate primary VLAN 3 with community VLAN 4 as a private VLAN: TL-SL5428E(config)#vlan 3 TL-SL5428E(config-vlan)#private-vlan association 4 switchport private-vlan Description The switchport private-vlan command is used to configure the private VLAN mode for the switchport. To invalid the configuration, please use no switchport...
Page 69: Switchport Private-Vlan Host-Association
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure Fast Ethernet port 3 as “host”: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport private-vlan host switchport private-vlan host-association Description The switchport private-vlan host-association command is used to add host type port to private VLAN.
Page 70: Switchport Private-Vlan Mapping
Configure host type Fast Ethernet port 3 as a member of primary VLAN 3 and secondary VLAN 4: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#switchport private-vlan host-association 3 4 switchport private-vlan mapping Description The switchport private-vlan mapping command is used to add promiscuous type port to private VLAN.
Page 71: Show Vlan Private-Vlan
The show vlan private-vlan command is used to display the Private VLAN configuration information of the switch. Syntax show vlan private-vlan Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration information of all Private VLAN: TL-SL5428E(config)#show vlan private-vlan...
Page 72: Chapter 9 Gvrp Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 9 GVRP Commands GVRP (GARP VLAN registration protocol) is an implementation of GARP (generic attribute registration protocol). GVRP allows the switch to automatically add or remove the VLANs via the dynamic VLAN registration information and propagate the local VLAN registration information to other switches, without having to individually configure each VLAN.
Page 73: Gvrp Registration
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEhternet) Example Enable the GVRP function for Fast Ethernet ports 2-6: TL-SL5428E(config)#interface range fastEthernet 1/0/2-6 TL-SL5428E(config-if-range)#gvrp gvrp registration Description The gvrp registration command is used to configure the GVRP registration type for the desired port.
Page 74: Gvrp Timer
/ interface gigabitEthernet / interface range gigabitEhternet) Example Set the GARP leaveall timer of Fast Ethernet port 6 as 2000 centiseconds and restore the join timer of it to the default value: TL-SL5428E(config)#interface fastEthernet 1/0/6 TL-SL5428E(config-if)#gvrp timer leaveall 2000 TL-SL5428E(config-if)#no gvrp timer join...
Page 75: Show Gvrp Global
Ethernet ports is displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the GVRP configuration information of Fast Ethernet port 1: TL-SL5428E(config)#show gvrp interface fastEthernet 1/0/1 Display the GVRP configuration information of all Ethernet ports: TL-SL5428E(config)#show gvrp interface...
Page 76: Chapter 10 Etherchannel Commands
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEhternet) Example Add the Fast Ethernet port 2-4 to EtherChannel Group 1 and enable the static LAG: TL-SL5428E(config)#interface range fastEthernet 1/0/2-4 TL-SL5428E(config-if-range)#channel-group 1 mode on...
Page 77: Port-Channel Load-Balance
Command Mode Global Configuration Mode Example Configure the Aggregate Arithmetic for LAG as “src-dst-mac”: TL-SL5428E(config)#port-channel load-balance src-dst-mac lacp system-priority Description The lacp system-priority command is used to configure the LACP system priority globally. To return to the default configurations, please use no lacp system-priority command.
Page 78: Lacp Port-Priority
Command Mode Global Configuration Mode Example Configure the LACP system priority as 1024 globally: TL-SL5428E(config)#lacp system-priority 1024 lacp port-priority Description The lacp port-priority command is used to configure the LACP system priority globally. To return to the default configurations, please use no lacp port-priority command.
Page 79: Show Etherchannel Load-Balance
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the detailed information of EtherChannel Group 1: TL-SL5428E(config)#show etherchannel 1 detail show etherchannel load-balance Description The show etherchannel load-balance command is used to display the Aggregate Arithmetic of LAG.
Page 80: Show Lacp Sys-Id
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the internal LACP information of EtherChannel Group 1: TL-SL5428E(config)#show lacp 1 internal show lacp sys-id Description The show lacp sys-id command is used to display the LACP system priority globally.
Page 81: Chapter 11 User Manage Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 11 User Manage Commands User Manage Commands are used to manage the user’s logging information by Web, CLI or SSH, so as to protect the settings of the switch from being randomly changed.
Page 82: User Access-Control Ip-Based
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#user name tplink password password type admin status enable user access-control ip-based Description The user access-control ip-based command is used to limit the IP-range of the users for login. Only the users within the IP-range you set here are allowed to login.
Page 83: User Access-Control Port-Based
Global Configuration Mode Example Configure that only the user with the MAC address 00:00:13:0A:00:01 is allowed to login: TL-SL5428E(config)#user access-control mac-based 00:00:13:0A:00:01 user access-control port-based Description The user access-control port-based command is used to limit the ports for login. Only the users connected to these ports you set here are allowed for login.
Page 84: User Max-Number
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#user access-control port-based interface range fastEthernet 1/0/2-6 user max-number Description The user max-number command is used to configure the maximum login user number at the same time. To cancel the limit on login number, please use no user max-number command.
Page 85: Line
Command Mode Global Configuration Mode Example Configure the timeout time of the switch as 15 minutes: TL-SL5428E(config)#user idle-timeout 15 line Description The line command is used to enter the Line Configuration Mode and make related configurations for the desired user(s), including the login mode and password configurations.
Page 86: Password
JetStream L2 Managed Switch CLI Guide Enter the Virtual Terminal configuration mode so as to prepare further configurations such as password and login mode for virtual terminal 0 to 5: TL-SL5428E(config)#line vty 0 5 password Description The password command is used to configure the connection password. To clear the password, please use no password command.
Page 87: Login
Configure the login of Console port connection 0 as login mode: TL-SL5428E(config)#line console 0 TL-SL5428E(config-line)#login Configure the login of virtual terminal connection 0-5 as login mode: TL-SL5428E(config)#line vty 0 5 TL-SL5428E(config-line)#login login local Description The login local command is used to configure the login of a switch with the user name and password.
Page 88: Show User Account-List
TL-SL5428E JetStream L2 Managed Switch CLI Guide Configure the login of Console port connection 0 as login local mode: TL-SL5428E(config)#line console 0 TL-SL5428E(config-line)#login local show user account-list Description The show user account-list command is used to display the information of the current users.
Page 89: Chapter 12 Binding Table Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 12 Binding Table Commands You can bind the IP address, MAC address, VLAN and the connected Port number of the Host together, which can be the condition for the ARP Inspection and IP verify source to filter the packets.
Page 90: Ip Source Binding Index
Port number 5 manually. And then enable the entry for the ARP detection and IP filter function: TL-SL5428E(config)#ip source binding host1 192.168.0.1 00:00:00:00:00:01 vlan 2 interface fastEthernet 1/0/5 both Delete the IP-MAC –VID-PORT entry with the index 5:...
Page 91: Ip Dhcp Snooping
JetStream L2 Managed Switch CLI Guide Command Mode Global Configuration Mode Example Modify the hostname as “tp-link” of the entry with the index 1: TL-SL5428E(config)#ip source binding index 1 hostname tp-link ip dhcp snooping Description The ip dhcp snooping command is used to enable DHCP-Snooping function globally.
Page 92: Ip Dhcp Snooping Information Option
Example Configure the Global Flow Control as 30pps, the Decline Threshold as 20 pps, and decline Flow Control as 20 pps for DHCP Snooping: TL-SL5428E(config)#ip dhcp snooping global global-rate 30 dec-threshold 20 dec-rate 20 ip dhcp snooping information option Description The ip dhcp snooping information option command is used to enable the Option 82 function of DHCP Snooping.
Page 93: Ip Dhcp Snooping Information Strategy
Indicates to discard the packets including the Option 82 field Command Mode Global Configuration Mode Example Replace the Option 82 field of the packets with the switch defined one and then send out: TL-SL5428E(config)#ip dhcp snooping information strategy replace...
Page 94: Ip Dhcp Snooping Information Remote-Id
Global Configuration Mode Example Enable and configure the customized sub-option Remote ID for the Option 82 as tplink: TL-SL5428E(config)#ip dhcp snooping information remote-id tplink ip dhcp snooping information circuit-id Description The ip dhcp snooping information circuit-id command is used to enable and configure the customized sub-option Circuit ID for the Option 82.
Page 95: Ip Dhcp Snooping Trust
Example Enable and configure the customized sub-option Circuit ID for the Option 82 as “tplink”: TL-SL5428E(config)#ip dhcp snooping information circuit-id tplink ip dhcp snooping trust Description The ip dhcp snooping trust command is used to configure a port to be a Trusted Port.
Page 96: Ip Dhcp Snooping Mac-Verify
/ interface gigabitEthernet / interface range gigabitEthernet) Example Enable the MAC Verify feature for the Fast Ethernet port 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#ip dhcp snooping mac-verify ip dhcp snooping limit rate Description The ip dhcp snooping limit rate command is used to enable the Flow Control feature for the DHCP packets.
Page 97: Ip Dhcp Snooping Decline
Example Set the Flow Control of Fast Ethernet port 2 as 20 pps: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#ip dhcp snooping limit rate 20 ip dhcp snooping decline Description The ip dhcp snooping decline command is used to enable the Decline Protect feature.
Page 98: Show Ip Dhcp Snooping
The show ip dhcp snooping information command is used to display the Option 82 configuration status of DHCP-Snooping. Syntax show ip dhcp snooping information Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Option 82 configuration status of DHCP-Snooping: TL-SL5428E#show ip dhcp snooping information...
Page 99: Show Ip Dhcp Snooping Interface
——The Fast/Gigabit Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the DHCP-Snooping configuration of all Ethernet ports: TL-SL5428E#show ip dhcp snooping interface Display the DHCP-Snooping configuration of Fast Ethernet port 5: TL-SL5428E#show ip dhcp snooping interface fastEthernet 1/0/5...
Page 100: Chapter 13 Arp Inspection Commands
Command Mode Global Configuration Mode Example Enable the ARP Detection function globally: TL-SL5428E(config)#ip arp inspection ip arp inspection trust Description The ip arp inspection trust command is used to configure the port for which the ARP Detect function is unnecessary as the Trusted Port. To clear the Trusted Port list, please use no ip arp detection trust command .The specific...
Page 101: Ip Arp Inspection(Interface)
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEhternet) Example Configure the Fast Ethernet ports 2-5 as the Trusted Port: TL-SL5428E(config)#interface range fastEthernet 1/0/2-5 TL-SL5428E(config-if-range)#ip arp inspection trust ip arp inspection(interface) Description The ip arp inspection command is used to enable the ARP Defend function. To disable the ARP detection function, please use no ip arp inspection command.
Page 102: Ip Arp Inspection Limit-Rate
Configure the maximum amount of the received ARP packets per second as 50 pps for Fast Ethernet port 5: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#ip arp inspection limit-rate 50 ip arp inspection recover Description The ip arp inspection recover command is used to restore a port to the ARP transmit status from the ARP filter status.
Page 103: Show Ip Arp Inspection
JetStream L2 Managed Switch CLI Guide Example Restore Fast Ethernet port 5 to the ARP transmit status: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#ip arp inspection recover show ip arp inspection Description The show ip arp inspection command is used to display the ARP detection global configuration including the enable/disable status and the Trusted Port list.
Page 104: Show Ip Arp Inspection Statistics
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#show ip arp inspection interface fastEthernet 1/0/1 Display the configuration of all Ethernet ports: TL-SL5428E(config)#show ip arp inspection interface show ip arp inspection statistics Description The show ip arp inspection statistics command is used to display the number of the illegal ARP packets received.
Page 105: Chapter 14 Ip Verify Source Commands
Enable the IP Verify Source function for Fast Ethernet ports 5-10. Configure that only the packets with its source IP address, source MAC address and port number matched to the IP-MAC binding rules can be processed: TL-SL5428E(config)#interface range fastEthernet 1/0/5-10 TL-SL5428E(config-if-range)#ip verify source sip+mac...
Page 106: Show Ip Verify Source
The show ip verify source command is used to display the IP Verify Source configuration information. Syntax show ip verify source Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the IP Verify Source configuration information: TL-SL5428E(config)#show ip verify source...
Page 107: Chapter 15 Dos Defend Command
Command Mode Global Configuration Mode Example Enable the DoS defend function globally: TL-SL5428E(config)#ip dos-prevent ip dos-prevent ping-rate Description The ip dos-prevent ping-rate command is used to configure the transmission rate of the Ping packets. To restore to default, please use no ip dos-prevent ping-rate command.
Page 108: Ip Dos-Prevent Syn-Rate
Command Mode Global Configuration Mode Example Specify the transmission rate of the Ping packets as 256k: TL-SL5428E(config)#ip dos-prevent ping-rate 256k ip dos-prevent syn-rate Description The ip dos-prevent syn-rate command is used to configure the transmission rate of the SYN/SYN-ACK packets. To restore to default, please use no ip dos-prevent syn-rate command.
Page 109: Ip Dos-Prevent Type
512K when attacked by syn-flood. win-nuke —— winNuke attack. ping-of-death—— Ping of Death attack Command Mode Global Configuration Mode Example Enable the DoS Defend Type named Land attack: TL-SL5428E(config)#ip dos-prevent type land...
Page 110: Ip Dos-Prevent Detect
The clear ip dos-prevent detect statistics command is used to clear the information statistic of the detected DoS attack. Syntax clear ip dos-prevent detect statistics Command Mode Privileged EXEC Mode and Any Configuration Mode Example Clear the information statistic of the detected DoS attack: TL-SL5428E(config)#clear ip dos-prevent detect statistics...
Page 111: Show Ip Dos-Prevent
DoS attack, including enable/disable status, the DoS Defend Type, the count of the attack, etc. Syntax show ip dos-prevent Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the DoS information of the detected DoS attack globally: TL-SL5428E(config)#show ip dos-prevent...
Page 112: Chapter 16 Ieee 802.1X Commands
Command Mode Global Configuration Mode Example Enable the IEEE 802.1X function: TL-SL5428E(config)#dot1x system-auth-control dot1x auth-method Description The dot1x auth-method command is used to configure the Authentication Method of IEEE 802.1X and the default 802.1x authentication method is “eap-md5”.
Page 113: Dot1X Guest-Vlan(Global)
Command Mode Global Configuration Mode Example Configure the Authentication Method of IEEE 802.1X as “pap”: TL-SL5428E(config)#dot1x auth-method pap dot1x guest-vlan(global) Description The dot1x guest-vlan command is used to enable the Guest VLAN function globally. To disable the Guest VLAN function, please use no dot1x guest-vlan command.
Page 114: Dot1X Quiet-Period
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#dot1x guest-vlan 5 dot1x quiet-period Description The dot1x quiet-period command is used to enable the quiet-period function. To disable the function, please use no dot1x quiet-period command. Syntax dot1x quiet-period no dot1x quiet-period...
Page 115: Dot1X Max-Reauth-Req
Command Mode Global Configuration Mode Example Configure the quiet period as 100 seconds: TL-SL5428E(config)#dot1x timeout quiet-period 100 dot1x max-reauth-req Description The dot1x max-reauth-req command is used to configure the maximum transfer times of the repeated authentication request when the server cannot be connected.
Page 116: Dot1X Guest-Vlan(Interface)
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the IEEE 802.1X function for the Fast Ethernet port 1: TL-SL5428E(config)#interface fastEthernet 1/0/1 TL-SL5428E(config-if)#dot1x dot1x guest-vlan(interface) Description The dot1x guest-vlan command is used to enable the guest VLAN function for a specified port.
Page 117: Dot1X Port-Control
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the Control Mode for Gigabit Ethernet port 25 as “authorized-force”: TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#dot1x port-control authorized-force dot1x port-method Description The dot1x port-method command is used to configure the control type of IEEE 802.1X for the specified port.
Page 118: Radius
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the Control Type for Gigabit Ethernet port 25 as “port-based”: TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#dot1x port-method port-based radius Description The radius command is used to configure the parameters of radius.
Page 119: Radius Server-Account
Global Configuration Mode Example Configure the IP address of the accounting server as 10.20.1.100 and password as tplink: TL-SL5428E(config)#radius auth-pri 10.20.1.100 auth-key tplink radius server-account Description The radius server-account command is used to enable the accounting feature. To disable the accounting feature, please use no radius server-account command.
Page 120: Show Dot1X Global
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration information of 801.X for Gigabit Ethernet port 25: TL-SL5428E(config)#show dot1x interface gigabitEthernet 1/0/25 Display the configuration information of 801.X for all Ethernet ports:...
Page 121: Show Radius Accounting
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#show dot1x interface show radius accounting Description The show radius accounting command is used to display the configuration of the accounting server. Syntax show radius accounting Command Mode Privileged EXEC Mode and Any Configuration Modes...
Page 122: Chapter 17 Pppoe Circuit-Id Insertion Commands
Command Mode Global Configuration Mode Example Enable the PPPoE Circuit-ID Insertion function: TL-SL5428E(config)# pppoe circuit-id pppoe circuit-id(interface) Description The pppoe circuit-id command is used to enable the PPPoE Circuit-ID Insertion function for a specified port. To disable the PPPoE Circuit-ID Insertion...
Page 123: Pppoe Circuit-Id Type
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the PPPoE Circuit-ID Insertion function for the Fast Ethernet port 1/0/1: TL-SL5428E (config)# interface fastEthernet 1/0/1 TL-SL5428E (config-if)# pppoe circuit-id pppoe circuit-id type Description The pppoe circuit-id type command is used to configure the type of PPPoE Circuit-ID for a specified port.
Page 124: Show Pppoe Circuit-Id Global
Configure the type of PPPoE Circuit-ID as “mac” for the Fast Ethernet port 1/0/1: TL-SL5428E (config)# interface fastEthernet 1/0/1 TL-SL5428E (config-if)# pppoe circuit-id type mac show pppoe circuit-id global Description The show pppoe circuit-id global command is used to display the global configuration of PPPoE Circuit-ID Insertion function.
Page 125 Example Display the configuration information of PPPoE Circuit-ID Insertion function of all Ethernet ports: TL-SL5428E# show pppoe circuit-id interface Display the configuration of PPPoE Circuit-ID Insertion function of the Fast Ethernet port 1/0/1 : TL-SL5428E# show pppoe interface fastEthernet 1/0/1...
Page 126: Chapter 18 System Log Commands
Only the log with the same or smaller severity level value will be output. By default, it is 7 indicating that all the log information will be saved in the log buffer. Command Mode Global Configuration Mode Example Set the severity level as 6: TL-SL5428E(config)#logging buffer 6...
Page 127: Logging File Flash
Command Mode Global Configuration Mode Example Enable the log file function and set the severity as 7: TL-SL5428E(config)#logging file flash 7 logging file flash frequency Description The logging file flash frequency command is used to specify the frequency to synchronize the system log file in the log buffer to the flash. To resume the default synchronizing frequency, please use the no logging file flash frequency command.
Page 128: Logging File Flash Level
Command Mode Global Configuration Mode Example Specify the log file synchronization frequency as 10 hours: TL-SL5428E(config)# logging file flash frequency periodic10 logging file flash level Description The logging file flash level command is used to specify the system log message severity level. Messages will a severity level equal to or higher than this value will be stored to the flash.
Page 129: Clear Logging
Command Mode Global Configuration Mode Example Clear the information in the log file: TL-SL5428E(config)#clear logging buffer logging host index Description The logging host index command is used to configure the Log Host. To clear the configuration of the specified Log Host, please use no logging host index command.
Page 130: Show Logging Local-Config
Command Mode Global Configuration Mode Example Set the IP address as 192.168.0.148, the level 5: TL-SL5428E(config)#logging host index 2 192.168.0.148 5 show logging local-config Description The show logging local-config command is used to display the configuration of the Local Log including the log buffer and the log file.
Page 131: Show Logging Buffer
Privileged EXEC Mode and Any Configuration Mode Example Display the log information from level 0 to level 5 in the log buffer: TL-SL5428E(config)#show logging buffer level 5 show logging flash Description The show logging flash command is used to display the log information in the...
Page 132: Command Mode
Display all the log information in the log file by default. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the log information with the level marked 0–3 in the log file: TL-SL5428E(config)#show logging flash level 3...
Page 133: Chapter 19 Ssh Commands
Command Mode Global Configuration Mode Example Enable the SSH function: TL-SL5428E(config)#ip ssh server ip ssh version Description The ip ssh version command is used to enable the SSH protocol version. To disable the protocol version, please use no ip ssh version command.
Page 134: Ip Ssh Timeout
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Enable SSH v2: TL-SL5428E(config)#ip ssh version v2 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. To restore to the factory defaults, please use ip ssh timeout command.
Page 135: Ip Ssh Download
Download an SSH-1 type key file named ssh-key from TFTP server with the IP address 192.168.0.148: TL-SL5428E(config)#ip ssh download v1 ssh-key ip-address 192.168.0.148 Download an SSH-1 type key file named ssh-key from TFTP server with the IP address fe80::1234: TL-SL5428E(config)# ip ssh download v1 ssh-key ip-address fe80::1234...
Page 136: Show Ip Ssh
Description The show ip ssh command is used to display the global configuration of SSH. Syntax show ip ssh Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the global configuration of SSH: TL-SL5428E(config)#show ip ssh...
Page 137: Chapter 20 Ssl Commands
Command Mode Global Configuration Mode Example Enable the SSL function: TL-SL5428E(config)#ip http secure-server ip http secure-server download certificate Description The ip http secure-server download certificate command is used to download a certificate to the switch from TFTP server.
Page 138: Ip Http Secure-Server Download Key
TL-SL5428E(config)#ip http secure-server download certificate ssl-cert ip-address 192.168.0.146 Download an SSL Certificate named ssl-cert from TFTP server with the IP address of fe80::1234 TL-SL5428E(config)# ip http secure-server download certificate ssl-cert ip-address fe80::1234 ip http secure-server download key Description The ip http secure-server download key command is used to download an SSL key to the switch from TFTP server.
Page 139: Show Ip Http Secure-Server
The show ip http secure-server command is used to display the global configuration of SSL. Syntax show ip http secure-server Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the global configuration of SSL: TL-SL5428E(config)#show ip http secure-server...
Page 140: Chapter 21 Mac Address Commands
Example Add a static Mac address entry to bind the MAC address 00:02:58:4f:6c:23, VLAN1 and Fast Ethernet port 1 together: TL-SL5428E(config)#mac address-table static 00:02:58:4f:6c:23 vid 1 interface fastEthernet 1/0/1 Delete the static address entry whose VLAN id is 1: TL-SL5428E(config)#no mac address-table static vid 1...
Page 141: Mac Address-Table Aging-Time
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#no mac address-table static 00:02:58:4f:6c:23 mac address-table aging-time Description The mac address-table aging-time command is used to configure aging time for the dynamic address. To return to the default configuration, please use no mac address-table aging-time command.
Page 142: Mac Address-Table Max-Mac-Count
Global Configuration Mode Example Add a filtering address entry of which VLAN ID is 1 and MAC address is 00:1e:4b:04:01:5d: TL-SL5428E(config)#mac address-table filtering 00:1e:4b:04:01:5d vid 1 mac address-table max-mac-count Description The mac address-table max-mac-count command is used to configure the Port Security.
Page 143: Show Mac Address-Table
Enable Port Security function for Fast Ethernet port 1, select Static mode as the learn mode, and specify the maximum number of MAC addresses that can be learned on this port as 30: TL-SL5428E(config)#interface fastEthernet 1/0/1 TL-SL5428E(config-if)#mac address-table max-mac-count max-number 30 mode static status enable show mac address-table Description The show mac address-table command is used to display the information of all address entries.
Page 144: Show Mac Address-Table Aging-Time
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the security configuration of all Gigabit Ethernet ports: TL-SL5428E(config)#show mac address-table max-mac-count interface gigabitEthernet Display the security configuration of Gigabit Ethernet port 25: TL-SL5428E(config)#show mac address-table max-mac-count interface gigabitEthernet 1/0/25...
Page 145: Show Mac Address-Table Interface
Privileged EXEC Mode and Any Configuration Mode Example Display the address configuration of Fast Ethernet port 1: TL-SL5428E(config)#show mac address-table interface fastEthernet 1/0/1 show mac address-table count Description The show mac address-table count command is used to display the total amount of MAC address table.
Page 146: Show Mac Address-Table Vlan
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the information of the MAC address 00:00:00:23:00:00: TL-SL5428E(config)#show mac address-table address 00:00:00:23:00:00: show mac address-table vlan Description The show mac address-table vlan command is used to display the MAC address configuration of the specified vlan.
Page 147: Chapter 22 System Configuration Commands
Command Mode Global Configuration Mode Example Configure the system time as 02/14/2012-12:30:00: TL-SL5428E(config)#system-time manual 02/14/2012-12:30:00 system-time ntp Description The system-time ntp command is used to configure the time zone and the IP address for the NTP Server. The switch will get UTC automatically if it has connected to an NTP Server.
Page 148 TL-SL5428E JetStream L2 Managed Switch CLI Guide UTC-12:00 —— TimeZone for International Date Line West. UTC-11:00 —— TimeZone for Coordinated Universal Time-11. UTC-10:00 —— TimeZone for Hawaii. UTC-09:00 —— TimeZone for Alaska. UTC-08:00 —— TimeZone for Pacific Time(US Canada). UTC-07:00 —— TimeZone for Mountain Time(US Canada).
Page 149: System-Time Dst Predefined
Configure the system time mode as NTP, the time zone is UTC-12:00, the primary NTP server is 133.100.9.2 and the secondary NTP server is 139.78.100.163, the fetching-rate is 11 hours: TL-SL5428E(config)#system-time ntp UTC-12:00 133.100.9.2 139.79.100.163 system-time dst predefined Description The system-time dst predefined command is used to select a predefined DST configuration and the configuration can be recycled.
Page 150: System-Time Dst Date
Global Configuration Mode Example Configure the DST start time as 00:00 am on April 1 , the end time as 00:00 am on October 1 and the offset as 30 minutes: TL-SL5428E(config)#system-time dst date Apr 1 00:00 Oct 1 00:00 30...
Page 151: System-Time Dst Recurring
Specify the DST start time of the switch as 2:00 am on the first Sunday in May, the end time as 2:00 am on the last Sunday in October and the offset as 45 minutes: TL-SL5428E(config)#system-time dst recurring first Sun May 02:00 last Sun Oct 02:00 45...
Page 152: Hostname
Syntax hostname hostname no hostname hostname Parameter hostname —— System Name, ranging from 1 to 32 characters. It is the product name by default. Here it is TL-SL5428E. Command Mode Global Configuration Mode Example Configure the system name as TPLINK:...
Page 153: Contact-Info
—— Contact Information. It consists of 32 characters at most. It is www.tp-link.com by default. Command Mode Global Configuration Mode Example Configure the system contact information as www.tp-link.com: TL-SL5428E(config)#contact-info www.tp-link.com ip management-vlan Description The ip management-vlan command is used to configure the management VLAN, through which you can log on to the switch.
Page 154: Ip Address
Configure the system IP as 192.168.0.69 and the Subnet Mask as 255.255.255.0 when the management VLAN of the switch is VLAN1: TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ip address 192.168.0.69 255.255.255.0 ip address-alloc dhcp Description The ip address-alloc dhcp command is used to enable the DHCP Client function.
Page 155: Ip Address-Alloc Bootp
JetStream L2 Managed Switch CLI Guide Example Enable the DHCP Client function when the management VLAN of the switch is VLAN1: TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ip address-alloc dhcp ip address-alloc bootp Description The ip address-alloc bootp command is used to enable the BOOTP Protocol.
Page 156: Reboot
Privileged EXEC Mode Example Reboot the switch: TL-SL5428E#reboot copy running-config startup-config Description The copy running-config startup-config command is used to save the current settings. Syntax copy running-config startup-config Command Mode Privileged EXEC Mode Example Save current settings: TL-SL5428E#copy running-config startup-config...
Page 157: Copy Startup-Config Tftp
Backup the configuration files to TFTP server with the IP fe80::1234 and name this file config: TL-SL5428E# copy startup-config tftp ip-address fe80::1234 filename config copy tftp startup-config Description The copy tftp startup-config command is used to download the configuration file to the switch from TFTP server.
Page 158: Firmware Upgrade
Download the configuration file named as config to the switch from TFTP server with the IP fe80::1234 TL-SL5428E# copy tftp startup-config ip-address fe80::1234 filename config firmware upgrade Description The firmware upgrade command is used to upgrade the switch system file via the TFTP server.
Page 159: Ping
JetStream L2 Managed Switch CLI Guide Upgrade the switch system file named as firmware.bin via the TFTP server with the IP address fe80::1234 TL-SL5428E# firmware upgrade ip-address fe80::1234 filename firmware.bin ping Description The ping command is used to test the connectivity between the switch and one node of the network.
Page 160: Tracert
JetStream L2 Managed Switch CLI Guide milliseconds. If there is not any response after 8 times’ Ping test, the connection between the switch and the network device is failed to establish: TL-SL5428E# ping fe80::1234 –n 8 –l 512 tracert Description The tracert command is used to test the connectivity of the gateways during its journey from the source to destination of the test data.
Page 161: Loopback Interface
User EXEC Mode and Privileged EXEC Mode Example Do an internal-type loopback test for Gigabit Ethernet port 25: TL-SL5428E# loopback interface gigabitEthernet 1/0/25 internal Do an external-type loopback test for Gigabit Ethernet port 25: TL-SL5428E# loopback interface gigabitEthernet 1/0/25 external...
Page 162: Show System-Time Dst
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the DST time information of the switch TL-SL5428E#show system-time dst show system-time ntp Description The show system-time ntp command is used to display the NTP mode configuration information.
Page 163: Show Running-Config
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the system information: TL-SL5428E#show system-info show running-config Description The show running-config command is used to display the current operating configuration of the system or of a specified port.
Page 164 JetStream L2 Managed Switch CLI Guide Parameter port —— The number of the port which is selected for Cable test. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Show the cable-diagnostics of Gigabit Ethernet port 25: TL-SL5428E#show cable-diagnostics interface gigabitEthernet 1/0/25...
Page 165: Chapter 23 Ipv6 Address Configuration Commands
Command Mode Interface Configuration Mode（interface vlan） Example Enable the IPv6 function when the management VLAN of the switch is VLAN1： TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ipv6 enable ipv6 address autoconfig Description This command is used to enable the automatic configuration of the ipv6 link-local address.
Page 166: Ipv6 Address Link-Local
IPv6 address with the prefix fe80::/10, otherwise this command will be invalid. Configuration Mode Interface Configuration Mode (Interface vlan) Example Configure the link-local address as fe80::1234 when the management VLAN of the switch is VLAN1: TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ipv6 address fe80::1234 link-local...
Page 167: Ipv6 Address Dhcp
Interface Configuration Mode (interface vlan) Example Enable the DHCP Client function when the management VLAN of the switch is VLAN1: TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ipv6 address dhcp ipv6 address ra Description This command is used to configure the switch’s global IPv6 address according to the address prefix and other configuration parameters from its received RA(Router Advertisement) message.
Page 168: Ipv6 Address Eui-64
Example Configure an EUI-64 global address on the interface with the network prefix 3ffe::1/64 TL-SL5428E(config)# interface vlan 1 TL-SL5428E(config-if)# ipv6 address 3ffe::1/64 eui-64 ipv6 address Description This command is used to manually configure a global IPv6 address on the interface. To remove a global IPv6 address from the interface, please use no ipv6 address command.
Page 169: Show Ipv6 Interface Vlan
Syntax show ipv6 interface vlan vlan-id Parameter vlan-id—— The VLAN ID of the management VLAN. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the ipv6 information of the management vlan interface: TL-SL5428E(config)# show ipv6 interface vlan 1...
Page 170: Chapter 24 Ethernet Configuration Commands
Global Configuration Mode Example To enter the Interface fastEthernet Configuration Mode and configure Fast Ethernet port 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 interface range fastEthernet Description The interface range fastEthernet command is used to enter the interface range fastEthernet Configuration Mode and configure multiple Fast Ethernet ports at the same time.
Page 171: Interface Gigabitethernet
Example To enter the Interface Range fastEthernet Configuration Mode, and configure ports 1, 2, 3, 6, 7 and 9 at the same time by adding them to one port-list: TL-SL5428E(config)#interface range fastEthernet 1/0/1-3,1/0/6-7,1/0/9 interface gigabitEthernet Description The interface gigabitEthernet command is used to enter the interface gigabitEthernet Configuration Mode and configure the corresponding Gigabit Ethernet port.
Page 172: Description
To enter the Interface Range gigabitEthernet Configuration Mode, and configure Gigabit Ethernet ports 25, 26 and 28 at the same time by adding them to one port-list: TL-SL5428E(config)# interface range gigabitEthernet 1/0/25-26,1/0/28 description Description The description command is used to add a description to the Ethernet port. To clear the description of the corresponding port, please use no description command.
Page 173: Shutdown
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Disable Gigabit Ethernet port 25: TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#shutdown flow-control Description The flow-control command is used to enable the flow-control function for a port.
Page 174: Media-Type
Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Example Configure the media type of Combo port 28T as “SFP”: TL-SL5428E(config)# interface gigabitEthernet 1/0/28 TL-SL5428E(config-if)# media-type sfp duplex Description The duplex command is used to configure the Duplex Mode for an Ethernet port.
Page 175: Speed
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#duplex full speed Description The speed command is used to configure the Speed Mode for an Ethernet port. To return to the default configuration, please use no speed command. Syntax...
Page 176: Storm-Control Multicast
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the broadcast control function for Fast Ethernet port 5: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#storm-control broadcast storm-control multicast Description The storm-control multicast command is used to enable the multicast control function.
Page 177: Storm-Control Unicast
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the unicast control function for Fast Ethernet port 5: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#storm-control unicast bandwidth Description The bandwidth command is used to configure the bandwidth limit for an Ethernet port.
Page 178: Clear Counters
Example Configure the ingress-rate as 5120Kbps and egress-rate as 1024Kbps for Fast Ethernet port 5: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#bandwidth ingress 5120 egress 1024 clear counters Description The clear counters command is used to clear the statistic information of all the Ethernet ports.
Page 179: Show Interface Counters
Example Display the connective-status of all Ethernet ports: TL-SL5428E(config)#show interface status Display the connective-status of Fast Ethernet port 1: TL-SL5428E(config)#show interface fastEthernet 1/0/1 status show interface counters Description The show interface counters command is used to display the statistic information of an Ethernet port.
Page 180: Show Interface Description
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the description of all Ethernet ports: TL-SL5428E(config)#show interface description show interface flowcontrol Description The show interface flowcontrol command is used to display the flow-control information of an Ethernet port.
Page 181: Show Interface Configuration
The list of Fast/Gigabit Ethernet ports. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the storm-control information of port Gigabit Ethernet port 25: TL-SL5428E(config)#show storm-control interface gigabitEthernet 1/0/25 Display the storm-control information of port Fast Ethernet ports 4,5,6,7:...
Page 182: Show Bandwidth
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#show storm-control interface range fastEthernet 1/0/4-7 show bandwidth Description The show bandwidth command is used to display the bandwidth-limit information of Ethernet port. Syntax show bandwidth [ interface { fastEthernet port | gigabitEthernet port | range...
Page 183: Chapter 25 Qos Commands
CoS value of the ingress port and the mapping relation between the CoS and TC in IEEE 802.1P. Example Configure the priority of port 5 as 3: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#qos 3 qos cos Description The qos cos command is used to enable the mapping relation between IEEE802.1P Priority and TC egress queue.
Page 184: Qos Dscp
Example Enable the mapping relation between IEEE 802.1P Priority and egress queue: TL-SL5428E(config)#qos cos qos dscp Description The qos dscp command is used to enable the mapping relation between DSCP Priority and TC egress queue.
Page 185: Qos Queue Cos-Map
Among the priority levels TC0-TC3, the bigger value, the higher priority. Example Map CoS 5 to TC 2.: TL-SL5428E(config)#qos queue cos-map 5 2 qos queue dscp-map Description The qos queue dscp-map command is used to configure the mapping relation between DSCP Priority and the TC egress queue. To return to the default configuration, please use no qos queue dscp-map command.
Page 186: Qos Queue Mode
Among the priority levels TC0-TC3, the bigger value, the higher priority. Example Map DSCP values 10-12 to TC 2: TL-SL5428E(config)#qos queue dscp-map 10-12 2 qos queue mode Description The qos queue mode command is used to configure the Schedule Mode. To return to the default configuration, please use no qos queue mode command.
Page 187: Show Qos Interface
Command Mode Global Configuration Mode Example Specify the Schedule Mode as Weight Round Robin Mode: TL-SL5428E(config)#qos queue mode wrr show qos interface Description The show qos interface command is used to display the configuration of QoS based on port priority.
Page 188: Show Qos Cos-Map
Display the configuration of QoS for Fast Ethernet port 5: TL-SL5428E#show qos interface fastEthernet 1/0/5 Display the configuration of QoS for Fast Ethernet ports 7 to 16: TL-SL5428E#show qos interface range fastEthernet 1/0/7-16 show qos cos-map Description The show qos cos-map command is used to display the configuration of IEEE802.1P Priority and the mapping relation between cos-id and tc-id.
Page 189: Show Qos Queue Mode
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the schedule rule of the egress queues: TL-SL5428E#show qos queue mode show qos status Description The show qos status command is used to display the status of IEEE 802.1P priority and DSCP priority.
Page 190: Chapter 26 Port Mirror Commands
—— The Fast/Gigabit Ethernet port number. Command Mode Global Configuration Mode Example Create monitor session 1 and configure Fast Ethernet port 1 as the monitoring port: TL-SL5428E(config)#monitor session 1 destination interface fastEthernet 1/0/1 Delete the monitor session 1: TL-SL5428E(config)#no monitor session 1...
Page 191: Monitor Session Source Interface
TL-SL5428E JetStream L2 Managed Switch CLI Guide monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To delete the corresponding monitored port, please use no monitor session source interface command. Syntax...
Page 192: Show Monitor Session
JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#monitor session 1 source interface fastEthernet 1/0/4-5,1/0/7 rx Delete the Fast Ethernet port 4 in monitor session 1 and its configuration: TL-SL5428E(config)#no monitor session 1 source interface fastEthernet 1/0/4 rx show monitor session Description The show monitor session command is used to display the configuration of port monitoring.
Page 193: Chapter 27 Port Isolation Commands
/ interface gigabitEthernet / interface range gigabitEthernet) Example Set Gigabit Ethernet ports 25-27 to the forward port list of Gigabit Ethernet 28: TL-SL5428E(config)#interface range gigabitEthernet 1/0/28 TL-SL5428E(config-if-range)#port isolation gi-forward-list 1/0/25-27 Set all the Ethernet ports to forward port list of Fast Ethernet port 2, namely...
Page 194: Show Port Isolation
The number of Ethernet port you want to show its forward port list, in the format of 1/0/2. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the forward-list of Fast Ethernet port 3: TL-SL5428E#show port isolation interface fastEthernet 1/0/3 Display the forward-list of all Ethernet ports: TL-SL5428E#show port isolation interface...
Page 195: Chapter 28 Loopback Detection Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 28 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the configuration.
Page 196: Loopback-Detection Recovery-Time
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Specify the interval-time as 50 seconds: TL-SL5428E(config)#loopback-detection interval 50 loopback-detection recovery-time Description The loopback-detection recovery-time command is used to configure the time after which the blocked port would automatically recover to normal status.
Page 197: Loopback-Detection Config
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Enable the loopback detection function of Gigabit Ethernet ports 25-27: TL-SL5428E(config)#interface range gigabitEthernet 1/0/25-27 TL-SL5428E(config-if-range)#loopback-detection loopback-detection config Description The loopback-detection config command is used to configure the process-mode and recovery-mode for the ports by which the switch copes with the detected loops.
Page 198: Loopback-Detection Recover
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Recover the blocked Gigabit Ethernet port 25 to normal status: TL-SL5428E(config)#interface gigabitEthernet 1/0/25 TL-SL5428E(config-if)#loopback-detection recover show loopback-detection global Description The show loopback-detection global command is used to display the global configuration of loopback detection function such as loopback detection global status, loopback detection interval and loopback detection recovery time.
Page 199: Show Loopback-Detection Interface
Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of loopback detection function and the status of Fast Ethernet port 5: TL-SL5428E#show loopback-detection interface fastEthernet 1/0/5 Display the configuration of loopback detection function and the status of all ports: TL-SL5428E#show loopback-detection interface...
Page 200: Chapter 29 Acl Commands
—— The Time-Range name, ranging from 1 to 16 characters. Command Mode Global Configuration Mode Example Add a time-range named tSeg1: TL-SL5428E(config)# time-range tSeg1 absolute Description The absolute command is used to configure a time-range into an Absoluteness Mode. To delete the corresponding absolute mode time-range, please use no absolute command.
Page 201: Periodic
Time-range Create Configuration Mode Example Configure the time-range tSeg1 with time from May 5, 2012 to Oct. 5, 2012: TL-SL5428E(config)# time-range tSeg1 TL-SL5428E(config-time-range)# absolute start 05/05/2012 end 10/05/2012 periodic Description The periodic command is used to configure the time-range into periodic mode.
Page 202: Holiday
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#time-range tSeg1 TL-SL5428E(config-time-range)#periodic week-date off-day time-slice1 08:30-12:00 holiday Description The holiday command is used to configure the time-range into Holiday Mode under Time-range Create Configuration Mode. To delete the corresponding Holiday Mode time-range, please use no holiday command.
Page 203: Access-List Create
Global Configuration Mode Example Define National Day, configuring the start date as October 1st, and the end date as October 3rd: TL-SL5428E(config)#holiday nationalday start-date 10/01 end-date 10/03 access-list create Description The access-list create command is used to create standard-IP ACL and extend-IP ACL.
Page 204: Access-List Standard
Command Mode Global Configuration Mode Example Create a MAC ACL whose ID is 23: TL-SL5428E(config)#mac access-list 23 access-list standard Description The access-list standard command is used to add Standard-IP ACL rule. To delete the corresponding rule, please use no access-list standard command.
Page 205: Access-List Extended
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: TL-SL5428E(config)#access-list create 120 TL-SL5428E(config)#access-list standard 120 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 tseg tSeg1 access-list extended Description The access-list extended command is used to add Extended-IP ACL rule.
Page 206: Rule
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: TL-SL5428E(config)#access-list create 220 TL-SL5428E(config)#access-list extended 220 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 tseg tSeg1 rule Description The rule command is used to configure MAC ACL rule.
Page 207 11:11:11:11:11:00, VLAN ID is 2, the user priority is 5, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: TL-SL5428E(config)#mac access-list 20 TL-SL5428E(config-mac-acl)#rule 10 permit smac 00:01:3F:48:16:23 smask 11:11:11:11:11:00 vid 2 pri 5 tseg tSeg1...
Page 208: Access-List Policy Name
Command Mode Global Configuration Mode Example Add a Policy named policy1: TL-SL5428E(config)#access-list policy name policy1 access-list policy action Description The access-list policy action command is used to add ACLs and create actions for the policy. To set the detailed configuration of actions for a policy, please use access-list policy action command to access Action Configuration Mode.
Page 209: Redirect Interface
Command Mode Global Configuration Mode Example Add ACL whose ID is 120 to policy1 and create an action for them: TL-SL5428E(config)#access-list policy action policy1 120 redirect interface Description The redirect interface command is used to configure Direction function of policy action for specified ports.
Page 210: S-Condition
Action Configuration Mode Example Edit the actions for policy1. Forward the data packets matching ACL 120 in the policy to Fast Ethernet VLAN 1: TL-SL5428E(config)#access-list policy action policy1 120 TL-SL5428E(config-action)#redirect vlan 1 s-condition Description The s-condition command is used to configure Stream Condition function of policy action.
Page 211: S-Mirror
Action Configuration Mode Example Edit the actions for policy1. Specify the mirror port as Fast Ethernet port 2 for the data packets matching ACL 120: TL-SL5428E(config)#access-list policy action policy1 120 TL-SL5428E(config-action)#s-mirror interface fastEthernet 1/0/2 qos-remark Description The qos-remark command is used to configure QoS Remark function of policy action.
Page 212: Access-List Bind(Interface)
Edit the actions for policy1. For the data packets matching ACL 120, specify the DSCP region as 30 and local priority 2: TL-SL5428E(config)#access-list policy action policy1 120 TL-SL5428E(config-action)# qos-remark dscp 30 priority 2 access-list bind(interface) Description The access-list bind command is used to bind a policy to a specified port. To cancel the bind relation, please use no access-list bind command.
Page 213: Show Time-Range
TL-SL5428E JetStream L2 Managed Switch CLI Guide Command Mode Interface VLAN Mode Example Bind policy1 to VLAN 2: TL-SL5428E(config)#interface vlan 2 TL-SL5428E(config-if)#access-list bind policy1 show time-range Description The show time-range command is used to display the configuration of time-range. Syntax...
Page 214: Show Access-List
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the information of a policy named policy1: TL-SL5428E#show access-list policy policy1 show access-list bind Description The show access-list bind command is used to display the configuration of Policy bind.
Page 215 TL-SL5428E JetStream L2 Managed Switch CLI Guide Syntax show access-list bind Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of Policy bind: TL-SL5428E#show access-list bind...
Page 216: Chapter 30 Mstp Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 30 MSTP Commands MSTP (Multiple Spanning Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths.
Page 217: Spanning-Tree Common-Config
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#spanning-tree spanning-tree common-config Description The spanning-tree common-config command is used to configure the parameters of the ports for comparison in the CIST and the common parameters of all instances. To return to the default configuration, please use no spanning-tree common-config command.
Page 218: Spanning-Tree Mode
/ interface gigabitEthernet / interface range gigabitEthernet) Example Enable the STP function of Fast Ethernet port 1, and configure the Port Priority as 64, ExtPath Cost as 100, IntPath Cost as 100, and then enable Edge Port: TL-SL5428E(config)#interface fastEthernet 1/0/1 TL-SL5428E(config-if)#spanning-tree common-config port-priority...
Page 219: Spanning-Tree Mst Configuration
Command Mode Global Configuration Mode Example Enter into the MST Configuration Mode: TL-SL5428E(config)#spanning-tree mst configuration TL-SL5428E(config-mst)# instance Description The instance command is used to configure the VLAN-Instance mapping. To remove the VLAN-instance mapping or disable the corresponding instance, please use no instance command.
Page 220: Name
TL-SL5428E(config)#spanning-tree mst configuration TL-SL5428E(config-mst)#no instance 1 Remove VLANs 1-50 in mapping VLANs 1-100 for Instance 1: TL-SL5428E(config)#spanning-tree mst configuration TL-SL5428E(config-mst)#no instance 1 vlan 1-50 name Description The name command is used to configure the region name of MST instance. Syntax...
Page 221: Spanning-Tree Mst Instance
By default, it is 32768. MSTI priority is an important criterion on determining if the switch will be chosen as the root bridge in the specific instance. Command Mode Global Configuration Mode Example Enable the MST Instance 1 and configure its priority as 4096: TL-SL5428E(config)#spanning-tree mst instance 1 priority 4096...
Page 222: Spanning-Tree Mst
Example Configure the priority of Fast Ethernet port 1 in MST Instance 1 as 64, and path cost as 2000: TL-SL5428E(config)#interface fastEthernet 1/0/1 TL-SL5428E(config-if)#spanning-tree mst instance 1 port-priority 64 cost 2000 spanning-tree priority Description The spanning-tree priority command is used to configure the bridge priority. To return to the default value of bridge priority, please use no spanning-tree priority command.
Page 223: Spanning-Tree Tc-Defend
—— TC Protect Cycle, ranging from 1 to 10 in seconds. By default, it is Command Mode Global Configuration Mode Example Configure TC Threshold as 30 packets and TC Protect Cycle as 10 seconds: TL-SL5428E(config)#spanning-tree tc-defend threshold 30 period 10...
Page 224: Spanning-Tree Timer
Global Configuration Mode Example Configure forward-time, hello-time and max-age for Spanning Tree as 16 seconds, 3 seconds and 22 seconds respectively: TL-SL5428E(config)#spanning-tree timer forward-time 16 hello-time 3 max-age 22 spanning-tree hold-count Description The spanning-tree hold-count command is used to configure the maximum number of BPDU packets transmitted per Hello Time interval.
Page 225: Spanning-Tree Max-Hops
Command Mode Global Configuration Mode Example Configure the hold-count of STP as 8pps: TL-SL5428E(config)#spanning-tree hold-count 8 spanning-tree max-hops Description The spanning-tree max-hops command is used to configure the maximum number of hops that occur in a specific region before the BPDU is discarded. To return to the default configurations, please use no spanning-tree max-hops command.
Page 226: Spanning-Tree Bpdufilter
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the BPDU filter function for Fast Ethernet port 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#spanning-tree bpdufilter spanning-tree bpduguard Description The spanning-tree bpduguard command is used to enable the BPDU protect function for a port.
Page 227: Spanning-Tree Guard Loop
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#spanning-tree bpduguard spanning-tree guard loop Description The spanning-tree guard loop command is used to enable the Loop Protect function for a port. Loop Protect is to prevent the loops in the network brought by recalculating STP because of link failures and network congestions.
Page 228: Spanning-Tree Guard Tc
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the Root Protect function for Fast Ethernet port 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#spanning-tree guard root spanning-tree guard tc Description The spanning-tree guard tc command is used to enable the TC Protect of Spanning Tree function for a port.
Page 229: Show Spanning-Tree Active
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable MCheck for Fast Ethernet port 2: TL-SL5428E(config)#interface fastEthernet 1/0/2 TL-SL5428E(config-if)#spanning-tree mcheck show spanning-tree active Description The show spanning-tree active command is used to display the active information of spanning-tree.
Page 230: Show Spanning-Tree Interface
Display the spanning-tree information of all ports: TL-SL5428E(config)#show spanning-tree interface Display the spanning-tree information of Gigabit Ethernet port 25: TL-SL5428E(config)#show spanning-tree interface gigabitEthernet 1/0/25 Display the spanning-tree mode information of Gigabit Ethernet port 25: TL-SL5428E(config)#show spanning-tree interface gigabitEthernet 1/0/25 mode...
Page 231: Show Spanning-Tree Mst
Display the protect information of Gigabit Ethernet port 25: TL-SL5428E(config)#show spanning-tree interface-security gigabitEthernet 1/0/25 Display the interface security bpdufilter information: TL-SL5428E(config)# show spanning-tree interface-security bpdufilter show spanning-tree mst Description The show spanning-tree mst command is used to display the related information of MST Instance.
Page 232 TL-SL5428E JetStream L2 Managed Switch CLI Guide Display all the ports information of MST Instance 1: TL-SL5428E(config)#show spanning-tree mst instance 1 interface...
Page 233: Chapter 31 Ethernet Oam Commands
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the Ethernet OAM function for Fast Ethernet port 2: TL-SL5428E(config)# interface fastEthernet 1/0/2 TL-SL5428E(config-if)#ethernet-oam ethernet-oam mode Description The ethernet-oam mode command is used to configure the OAM mode for the desired port.
Page 234: Ethernet-Oam Link-Monitor Symbol-Period
/ interface gigabitEthernet / interface range gigabitEthernet) Example Configure Ethernet OAM client to operate in passive mode for Fast Ethernet port 2: TL-SL5428E(config)# interface fastEthernet 1/0/2 TL-SL5428E(config-if)#ethernet-oam mode passive ethernet-oam link-monitor symbol-period Description The ethernet-oam link-monitor symbol-period command is used to configure the parameters about one of the link events, error symbol period event.
Page 235: Ethernet-Oam Link-Monitor Frame
/ interface gigabitEthernet / interface range gigabitEthernet) Example For error symbol-period event, configure the error threshold as 5 and the event detection interval as 3 seconds on Fast Ethernet port 2: TL-SL5428E(config)# interface fastEthernet 1/0/2 TL-SL5428E(config-if)# ethernet-oam link-monitor symbol-period...
Page 236: Ethernet-Oam Link-Monitor Frame-Period
Example For error frame event, configure the error threshold as 6 and the event detection interval as 9 seconds on Fast Ethernet port 3: TL-SL5428E(config)# interface fastEthernet 1/0/3 TL-SL5428E(config-if)# ethernet-oam link-monitor frame threshold 6 window 90 ethernet-oam link-monitor frame-period Description The ethernet-oam link-monitor frame-period command is used to configure the parameters about one of the link events, error frame period event.
Page 237: Ethernet-Oam Link-Monitor Frame-Seconds
For error frame period event, configure the error threshold as 6 and the event detection interval as 150000 frames on Fast Ethernet port 4: TL-SL5428E(config)# interface fastEthernet 1/0/4 TL-SL5428E(config-if)# ethernet-oam link-monitor frame-period threshold 6 window 150000 ethernet-oam link-monitor frame-seconds Description The ethernet-oam link-monitor frame-seconds command is used to configure the parameters about one of the link events, error frame seconds event.
Page 238: Ethernet-Oam Remote-Failure
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example For error frame seconds event, configure the error threshold as 8 and the event detection interval as 30 seconds on Fast Ethernet port 5: TL-SL5428E(config)# interface fastEthernet 1/0/5 TL-SL5428E(config-if)# ethernet-oam link-monitor frame-seconds...
Page 239: Ethernet-Oam Remote-Loopback Received-Remote- Loopback
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config-if)# ethernet-oam remote-failure dying-gasp notify disable ethernet-oam remote-loopback received-remote- loopback Description The ethernet-oam remote-loopback received-remote-loopback command is used to configure the client to process or to ignore the received remote loopback request. To return to the default configurations, please use no ethernet-oam remote-loopback received-remote-loopback command.
Page 240: Ethernet-Oam Remote-Loopback
/ interface gigabitEthernet / interface range gigabitEthernet) Example Request the remote peer to start the Ethernet OAM remote loopback mode on Fast Ethernet port 3: TL-SL5428E(config)# interface fastEthernet 1/0/3 TL-SL5428E(config-if)# ethernet-oam remote-loopback start clear ethernet-oam statistics Description The clear ethernet-oam statistics command is used to clear Ethernet OAM statistics.
Page 241: Clear Ethernet-Oam Event-Log
Command Mode Global Configuration Mode Example Clear Ethernet OAM statistics of Fast Ethernet port 3: TL-SL5428E(config)# clear ethernet-oam statistics interface fastEthernet 1/0/3 clear ethernet-oam event-log Description The clear ethernet-oam event-log command is used to clear the Ethernet OAM event log.
Page 242: Show Ethernet-Oam Configuration
TL-SL5428E JetStream L2 Managed Switch CLI Guide show ethernet-oam configuration Description The show ethernet-oam configuration command is used to display Ethernet OAM configuration information. Syntax show ethernet-oam configuration interface fastEthernet gigabitEthernet } port ] Parameter port —— The Fast/Gigabit Ethernet port number. By default, the Ethernet OAM configuration information of all ports is displayed.
Page 243: Show Ethernet-Oam Statistics
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display Ethernet OAM event log of Fast Ethernet port 2: TL-SL5428E(config)# show ethernet-oam event-log interface fastEthernet 1/0/2 show ethernet-oam statistics Description The show ethernet-oam statistics command is used to display the Ethernet OAM statistics.
Page 244 —— The Fast/Gigabit Ethernet port number. By default, the Ethernet OAM status of all ports is displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display Ethernet OAM status of Fast Ethernet port 2: TL-SL5428E(config)# show ethernet-oam status interface fastEthernet 1/0/2...
Page 245: Chapter 32 Dldp Commands
Command Mode Global Configuration Mode Example Enable the DLDP function globally: TL-SL5428E(config)# dldp dldp interval Description The dldp interval command is used to define the interval of sending advertisement packets on ports that are in the advertisement state.
Page 246: Dldp Shut-Mode
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Specify the interval of sending advertisement packets as 10 seconds: TL-SL5428E(config)# dldp interval 10 dldp shut-mode Description The dldp shut-mode command is used to configure the shutdown mode when a unidirectional link is detected.
Page 247: Dldp(Interface)
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable the DLDP function of ports 2-4: TL-SL5428E (config)# interface range fastEthernet 1/0/2-4 TL-SL5428E (config-if-range)# dldp dldp reset(interface) Description The dldp reset command is used to reset the specified port and restart the link detect process.
Page 248: Show Dldp
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E (config)# interface range fastEthernet 1/0/2-4 TL-SL5428E (config-if-range)# dldp reset show dldp Description The show dldp command is used to display the global configuration of DLDP function such as DLDP global state, DLDP interval and shut mode.
Page 249 TL-SL5428E JetStream L2 Managed Switch CLI Guide Display the configuration and state of port 5: TL-SL5428E# show dldp interface fastEthernet 1/0/5...
Page 250: Chapter 33 Igmp Snooping Commands
Command Mode Global Configuration Mode Example Enable IGMP Snooping function: TL-SL5428E(config)#ip igmp snooping ip igmp snooping(interface) Description The ip igmp snooping command is used to enable the IGMP Snooping function for the desired port. To disable the IGMP Snooping function, please use no ip igmp snooping command.
Page 251: Ip Igmp Snooping Immediate-Leave
/ interface gigabitEthernet / interface range gigabitEthernet) Example Enable the Fast Leave function for Fast Ethernet port 3: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#ip igmp snooping immediate-leave ip igmp snooping drop-unknown Description The ip igmp snooping drop-unknown command is used to process the unknown multicast as “discard”.
Page 252: Ip Igmp Snooping Vlan-Config
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Specify the operation of processing unknown multicast as “discard”: TL-SL5428E(config)#ip igmp snooping drop-unknown ip igmp snooping vlan-config Description The ip igmp snooping vlan-config command is used to enable VLAN IGMP Snooping function or to modify IGMP Snooping parameters, and to create static multicast IP entry.
Page 253: Ip Igmp Snooping Multi-Vlan-Config
Global Configuration Mode Example Enable the IGMP Snooping function and modify Member Port Time as 200 seconds for VLAN1-3: TL-SL5428E(config)#ip igmp snooping vlan-config 1-3 mtime 200 ip igmp snooping multi-vlan-config Description The ip igmp snooping multi-vlan-config command is used to create and configure a Multicast VLAN.
Page 254: Ip Igmp Snooping Filter Add-Id
Global Configuration Mode Example Enable Multicast VLAN 3, and configure Router Port Time as 100 seconds: TL-SL5428E(config)#ip igmp snooping multi-vlan-config 3 rtime 100 ip igmp snooping filter add-id Description The ip igmp snooping filter add-id command is used to configure the multicast IP-range desired to filter.
Page 255: Ip Igmp Snooping Filter(Global)
Global Configuration Mode Example Modify the multicast IP-range whose ID is 3 as 225.1.1.1–226.3.2.1: TL-SL5428E(config)#ip igmp snooping filter 3 225.1.1.1 226.3.2.1 ip igmp snooping filter(interface) Description The ip igmp snooping filter command is used to configure Port Filter. To return to the default configuration, please use no igmp snooping filter command.
Page 256: Ip Igmp Snooping Filter Maxgroup
Specify the maximum number of multicast groups for Fast Ethernet ports 2-5 to join in as 10: TL-SL5428E(config)#interface range fastEthernet 1/0/2-5 TL-SL5428E(config-if-range)#ip igmp snooping filter maxgroup 10 ip igmp snooping filter mode Description The ip igmp snooping filter mode command is used to configure the Action mode for the desired port.
Page 257: Ip Igmp Snooping Querier Vlan
Example Specify the Action Mode as “accept” for Fast Ethernet port 3: TL-SL5428E(config)#interface fastEthernet 1/0/3 TL-SL5428E(config-if)#ip igmp snooping filter mode accept ip igmp snooping querier vlan Description The ip igmp snooping querier vlan command is used to enable the IGMP Snooping Querier function of the VLAN(s).
Page 258: Ip Igmp Snooping Querier Vlan (General Query)
Querier. It should not be a multicast IP or a broadcast IP. By default, it is 192.168.0.1. Command Mode Global Configuration Mode Example For VLAN 2, specify its query-interval as 200 seconds, and the response-time as 20 seconds: TL-SL5428E(config)#ip igmp snooping querier vlan 2 query-interval 200 TL-SL5428E(config)#ip igmp snooping querier vlan 2 max-response-time...
Page 259: Ip Igmp Snooping Querier Vlan (Specific Query)
TL-SL5428E JetStream L2 Managed Switch CLI Guide ip igmp snooping querier vlan (specific query) Description The ip igmp snooping querier vlan command is used to configure the parameters for IGMP Snooping Querier to send a specific query frame. To return to the default configuration, please use no ip igmp snooping querier vlan command.
Page 260: Show Ip Igmp Snooping
| filter | packet-stat —— The related configuration information selected to display. port-list —— The list group of Ethernet ports. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the IGMP basic configuration of Fast Ethernet port 2: TL-SL5428E#show ip igmp snooping interface fastEthernet 1/0/2 basic-config...
Page 261: Show Ip Igmp Snooping Vlan
TL-SL5428E JetStream L2 Managed Switch CLI Guide Display the IGMP filter configuration of Fast Ethernet ports 2-4: TL-SL5428E#show ip igmp snooping interface fastEthernet 1/0/2-4 filter show ip igmp snooping vlan Description The show ip igmp snooping vlan command is used to display the VLAN configuration of IGMP.
Page 262: Show Ip Igmp Snooping Groups
Display all the multicast entries in VLAN 5: TL-SL5428E(config)#show ip igmp snooping groups vlan 5 Display the count of multicast entries in VLAN 5: TL-SL5428E(config)#show ip igmp snooping groups vlan 5 count show ip igmp snooping filter Description The show ip igmp snooping filter command is used to display the Multicast...
Page 263: Show Ip Igmp Snooping Querier Vlan
Privileged EXEC Mode and Any Configuration Mode Example Display the configurations of IGMP Snooping Querier of VLAN 2, 4 and 5: TL-SL5428E(config)# show ip igmp snooping querier vlan 2, 4-5 show ip igmp snooping querier Description The show ip igmp snooping querier vlan command is used to display the IGMP Snooping Querier configurations of all VLANs.
Page 264 TL-SL5428E JetStream L2 Managed Switch CLI Guide Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configurations of IGMP Snooping Querier of all VLANs TL-SL5428E(config)# show ip igmp snooping querier...
Page 265: Chapter 34 Mld Snooping Commands
Command Mode Global Configuration Mode Example Enable MLD Snooping: TL-SL5428E(config)# ipv6 mld snooping ipv6 mld snooping router-aging-time Description The ipv6 mld snooping router-aging-time command is used to specify router port aging time globally. The default aging time is 260 seconds. To restore the default timer, please use no ipv6 mld snooping router-aging-time command.
Page 266: Ipv6 Mld Snooping Member-Aging-Time
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Specify MLD Snooping router port aging time as 100 seconds globally: TL-SL5428E(config)# ipv6 mld snooping router-aging-time 100 ipv6 mld snooping member-aging-time Description The ipv6 mld snooping member-aging-time command is used to specify member port aging time globally.
Page 267: Ipv6 Mld Snooping Unknown-Filter
—— Specify the interval to send Specific Query Message in seconds, ranging from 1 to 5. Command Mode Global Configuration Mode Example Specify the interval of Specific Query Message to 3 seconds: TL-SL5428E(config)# ipv6 mld snooping last-listener query-inteval 3...
Page 268: Ipv6 Mld Snooping Last-Listener Query-Count
Command Mode Global Configuration Mode Example Specify the number of Specific Query Message to 3: TL-SL5428E(config)# ipv6 mld snooping last-listener query-count 3 ipv6 mld snooping multicast-vlan Description The ipv6 mld snooping multicast-vlan command is used to enable the multicast VLAN function. To disable this function, please use no ipv6 mld snooping multicast-vlan command.
Page 269: Ipv6 Mld Snooping Multicast-Vlan Vlan-Id
Command Mode Global Configuration Mode Example Specify multicast VLAN as VLAN 2: TL-SL5428E(config)# ipv6 mld snooping multicast-vlan vlan-id 2 ipv6 mld snooping vlan Description The ipv6 mld snooping vlan command is used to enable MLD Snooping function on a specified VLAN. To disable it, please use no ipv6 mld snooping vlan command.
Page 270: Ipv6 Mld Snooping Vlan Router-Aging-Time
Global Configuration Mode Example Specify the router port aging time as 100 seconds in VLAN 2: TL-SL5428E(config)# ipv6 mld snooping vlan 2 router-aging-time 100 ipv6 mld snooping vlan member-aging-time Description The ipv6 mld snooping vlan member-aging-time command is used to specify member port aging time for a specified VLAN.
Page 271: Ipv6 Mld Snooping Vlan Immediate-Leave
JetStream L2 Managed Switch CLI Guide Example Specify the member port aging time as 100 seconds in VLAN 2: TL-SL5428E(config)# ipv6 mld snooping vlan 2 member-aging-time 100 ipv6 mld snooping vlan immediate-leave Description The ipv6 mld snooping vlan immediate-leave command is used to enable the immediate leave function on a specified VLAN.
Page 272: Ipv6 Mld Snooping Vlan Static
Global Configuration Mode Example Configure the static multicast group ff80::1234 in VLAN 2 with the member port gigabitEthernet 1/0/2: TL-SL5428E(config)# ipv6 mld snooping vlan 2 static ff80::1234 interface gigabitEthernet 1/0/2 ipv6 mld snooping querier vlan Description The ipv6 mld snooping querier vlan command is used to enable the MLD Querier function.
Page 273: Ipv6 Mld Snooping Querier Vlan Max-Response-Time
—— The VLAN that enables the MLD Querier function, ranging from 1 to 4094. time —— Specify the time in seconds, ranging from 1 to 25. Command Mode Global Configuration Mode Example Specify the max response time as 10s on VLAN 2: TL-SL5428E(config)# ipv6 mld snooping querier vlan 2 max-response-time...
Page 274: Ipv6 Mld Snooping Querier Vlan Query-Interval
Global Configuration Mode Example Specify the interval to send the Query Message as 10s on VLAN 2: TL-SL5428E(config)# ipv6 mld snooping querier vlan 2 query-interval 10 ipv6 mld snooping querier vlan query-source Description The ipv6 mld snooping querier vlan query-source command is used to specify the source address which sends the Query message.
Page 275: Ipv6 Mld Snooping Filter(Global)
JetStream L2 Managed Switch CLI Guide Example Specify the source address which sends the Query message as fe80::1234 on VLAN 2: TL-SL5428E(config)# ipv6 mld snooping querier vlan 2 query-source fe80::1234 ipv6 mld snooping filter(global) Description The ipv6 mld snooping filter command is used to configure the multicast group filter entries in the format of ip-range.
Page 276: Ipv6 Mld Snooping Filter-Mode
Example Configure the filter mode as refuse on interface gigabitEthernet 1/0/2: TL-SL5428E(config)# interface gigabitEthernet 1/0/2 TL-SL5428E(config-if)# ipv6 mld snooping filter-mode refuse ipv6 mld snooping filter-id Description The ipv6 mld snooping filter-id command is used to specify the filter id on the interface.
Page 277: Ipv6 Mld Snooping Max-Group
Example Specify the filter id as 1 and 10 on interface gigabitEthernet 1/0/2: TL-SL5428E(config)# interface gigabitEthernet 1/0/2 TL-SL5428E(config-if)# ipv6 mld snooping filter-id 1,10 ipv6 mld snooping max-group Description The ipv6 mld snooping max-group command is used to specify the limit number of groups for a port to join in.
Page 278: Show Ipv6 Mld Snooping
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Clear the statistics of the MLD packets: TL-SL5428E(config)# clear ipv6 mld snooping statistics show ipv6 mld snooping Description The show ipv6 mld snooping command is used to display the global configuration of MLD Snooping.
Page 279: Show Ipv6 Mld Snooping Static-Mcast
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Display all of the VLAN information: TL-SL5428E(config)# show ipv6 mld snooping vlan show ipv6 mld snooping static-mcast Description The show ipv6 mld snooping static-mcast command is used to display the static multicast groups configured by users.
Page 280: Show Ipv6 Mld Snooping Filter
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the filter entries: TL-SL5428E(config)# show ipv6 mld snooping filter show ipv6 mld snooping interface Description The show ipv6 mld snooping interface command is used to display the interface information of MLD Snooping.
Page 281: Show Ipv6 Mld Snooping Querier
Privileged EXEC Mode and Any Configuration Mode Example Display all filter ids bounded to all interface: TL-SL5428E(config)# show ipv6 mld snooping interface filter show ipv6 mld snooping querier Description The show ipv6 mld snooping querier command is used to display the Querier configuration of VLAN.
Page 282 TL-SL5428E JetStream L2 Managed Switch CLI Guide Parameter port —— Specify the port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display statistics of MLD packets: TL-SL5428E(config)# show ipv6 mld snooping statistics...
Page 283: Chapter 35 Snmp Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 35 SNMP Commands SNMP (Simple Network Management Protocol) functions are used to manage the network devices for a smooth communication, which can facilitate the network administrators to monitor the network nodes and implement the proper operation.
Page 284: Snmp-Server Group
Example Add a View named view1, configuring the OID as 1.3.6.1.6.3.20, and this OID can be managed by the SNMP management station: TL-SL5428E(config)#snmp-server view view1 1.3.6.1.6.3.20 include snmp-server group Description The snmp-server group command is used to manage and configure the SNMP group.
Page 285: Snmp-Server User
TL-SL5428E(config)#snmp-server group group1 smode v3 slev authNoPriv read viewDefault write viewDefault notify viewDefault Delete Group group 1: TL-SL5428E(config)#no snmp-server group group1 smode v3 slev authNoPriv snmp-server user Description The snmp-server user command is used to add User. To delete the corresponding User, please use no snmp-server user command.
Page 286 TL-SL5428E JetStream L2 Managed Switch CLI Guide Syntax snmp-server user name { local | remote } group-name [smode { v1 | v2c | v3 }] [slev { noAuthNoPriv | authNoPriv | authPriv }] [cmode { none | MD5 | SHA }]...
Page 287: Snmp-Server Community
MD5, the Authentication Password as 11111, the Privacy Mode as DES, and the Privacy Password as 22222: TL-SL5428E(config)#snmp-server user admin local group2 smode v3 slev authPriv cmode MD5 cpwd 11111 emode DES epwd 22222 snmp-server community Description The snmp-server community command is used to add Community.
Page 288: Snmp-Server Host
TL-SL5428E JetStream L2 Managed Switch CLI Guide snmp-server host Description The snmp-server host command is used to add Notification. To delete the corresponding Notification, please use no snmp-server host command. With the Notification function enabled, the switch can initiatively report to the management station about the important events that occur on the Views, which allows the management station to monitor and process the events in time.
Page 289: Snmp-Server Engineid
Security Model of the management station as v2c, the type of the notifications as inform, the maximum time for the switch to wait as 1000 seconds, and the retries time as 100: TL-SL5428E(config)#snmp-server host 192.168.0.146 162 admin smode v2c type inform retries 100 timeout 1000 snmp-server engineID...
Page 290: Snmp-Server Traps Snmp
JetStream L2 Managed Switch CLI Guide Example Specify the local engineID as 1234567890, and the remote engineID as abcdef123456: TL-SL5428E(config)#snmp-server engineID local 1234567890 remote abcdef123456 snmp-server traps snmp Description The snmp-server traps snmp command is used to enable SNMP standard traps which include five types: linkup, linkdown, warmstart, coldstart, and auth-failure.
Page 291: Snmp-Server Traps Security
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Enable the linkup trap for the switch: TL-SL5428E(config)# snmp-server traps snmp linkup snmp-server traps security Description The snmp-server traps security command is used to enable SNMP security traps which include four types: dhcp-filter, ip-duplicate, ip-mac-binding, and port-access.
Page 292: Snmp-Server Traps Link-Status
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Enable the dhcp-filter trap for the switch: TL-SL5428E(config)# snmp-server traps security dhcp-filter snmp-server traps link-status Description The snmp-server traps link-status command is used to enable SNMP link status trap for the specified port. To disable the sending of SNMP link status trap, please use no snmp-server traps link-status command.
Page 293: Snmp-Server Traps Mac
—— Enable memory trap. It is sent when memory usage exceeds 80%. Command Mode Global Configuration Mode Example Enable SNMP extended bandwidth-control trap for the switch: TL-SL5428E(config)# snmp-server traps bandwidth-control snmp-server traps mac Description The snmp-server traps mac command is used to enable SNMP extended MAC-address-related...
Page 294: Snmp-Server Traps Vlan
Enable all SNMP extended MAC address-related traps for the switch: TL-SL5428E(config)# snmp-server traps mac Enable new MAC address trap only for the switch: TL-SL5428E(config)# snmp-server traps mac new snmp-server traps vlan Description The snmp-server traps vlan command is used to enable SNMP extended VLAN-related traps which include two types: create and delete.
Page 295: Rmon History
Enable all SNMP extended VLAN-related traps for the switch： TL-SL5428E(config)# snmp-server traps vlan Enable VLAN-created trap only for the switch: TL-SL5428E(config)# snmp-server traps vlan create rmon history Description The rmon history command is used to configure the history sample entry. To return to the default configuration, please use no rmon history command.
Page 296: Rmon Event
Global Configuration Mode Example Configure the sample port as 2 and the sample interval as 100 seconds for the entry 1-3: TL-SL5428E(config)#rmon history 1-3 interface fastEthernet 1/0/2 interval 100 owner owner1 rmon event Description The rmon event command is used to configure the entries of SNMP-RMON Event.
Page 297: Rmon Alarm
Configure the user name of entry 1, 2, 3 and 4 as user1, the description of the event as “description1”, the type of event as log and the owner of the event as “owner1”: TL-SL5428E(config)#rmon event 1-4 user user1 description description1 type log owner owner1 rmon alarm...
Page 298 TL-SL5428E JetStream L2 Managed Switch CLI Guide port — — String for the port on which the Alarm entry acts, format as module/slot/port, for example 1/0/24. alarm-variable —— The alarm variable. By default, the option is drop. s-type —— Sample Type, which is the sampling method for the selected variable and comparing the value against the thresholds.
Page 299: Show Snmp-Server
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#rmon alarm 1-3 interface fastEthernet 1/0/2 owner owner1 interval 100 show snmp-server Description The show snmp-server command is used to display SNMP configuration globally. Syntax show snmp-server Command Mode Privileged EXEC Mode and Any Configuration Mode...
Page 300: Show Snmp-Server User
JetStream L2 Managed Switch CLI Guide Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Group table: TL-SL5428E#show snmp-server group show snmp-server user Description The show snmp-server user command is used to display the User table. Syntax...
Page 301: Show Snmp-Server Host
Syntax show snmp-server host Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Host table: TL-SL5428E#show snmp-server host show snmp-server engineID Description The show snmp-server engineID command is used to display the engineID of the SNMP. Syntax...
Page 302: Show Rmon Event
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Event configuration of entry1-4: TL-SL5428E#show rmon event 1-4 show rmon alarm Description The show rmon alarm command is used to display the configuration of the Alarm Management entry.
Page 303 1 to 12, in the format of 1-3, 5. You can select more than one entry for each command. By default, the configuration of all Alarm Management entries is displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of the Alarm Management entry 1-2: TL-SL5428E#show rmon alarm 1-2...
Page 304: Chapter 36 Lldp Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 36 LLDP Commands LLDP function enables network devices to advertise their own device information periodically to neighbors on the same LAN. The information of the LLDP devices in the LAN can be stored by its neighbor in a standard MIB, so it is possible for the information to be accessed by a Network Management System (NMS) using SNMP.
Page 305: Lldp Timer
Command Mode Global Configuration Mode Example Specify Hold Multiplier as 5: TL-SL5428E(config)#lldp hold-multiplier 5 lldp timer Description The lldp timer command is used to configure the parameters about transmission. To return to the default configuration, please use no lldp timer command.
Page 306: Lldp Receive
Global Configuration Mode Example Specify the Transmit Interval of LLDPDU as 45 seconds and Trap message to NMS as 120 seconds: TL-SL5428E(config)#lldp timer tx-interval 45 TL-SL5428E(config)#lldp timer notify-interval 120 lldp receive Description The lldp receive command is used to enable the designated port to receive LLDPDU.
Page 307: Lldp Snmp-Trap
Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable Fast Ethernet port 1 to transmit LLDPDU: TL-SL5428E(config)# interface fastEthernet 1/0/1 TL-SL5428E(config-if)#lldp transmit lldp snmp-trap Description The lldp snmp-trap command is used to enable the port’s SNMP notification. If enabled, the port will notify the trap event to network management system.
Page 308: Lldp Tlv-Select
Example Exclude “management-address” and “port-vlan-id” TLVs in LLDPDU outgoing from Fast Ethernet port 1: TL-SL5428E(config)# interface fastEthernet 1/0/1 TL-SL5428E(config-if)# no lldp tlv-select management-address port-vlan show lldp Description The show lldp command is used to display the global configuration of LLDP.
Page 309: Show Lldp Interface
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the LLDP configuration of Fast Ethernet port 1: TL-SL5428E#show lldp interface fastEthernet 1/0/1 show lldp local-information interface Description The show lldp local-information interface command is used to display the LLDP information of the corresponding port.
Page 310: Show Lldp Neighbor-Information Interface
TL-SL5428E JetStream L2 Managed Switch CLI Guide Example Display the LLDP information of Fast Ethernet port 1: TL-SL5428E#show lldp local-information interface fastEthernet 1/0/1 show lldp neighbor-information interface Description The show lldp neighbor-information interface command is used to display the neighbor information of the corresponding port. By default, the neighbor information of all the ports will be displayed.
Page 311 TL-SL5428E JetStream L2 Managed Switch CLI Guide Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the LLDP statistic information of Fast Ethernet port 1: TL-SL5428E#show lldp traffic interface fastEthernet 1/0/1...
Page 312: Chapter 37 Cluster Commands
TL-SL5428E JetStream L2 Managed Switch CLI Guide Chapter 37 Cluster Commands Cluster Management function enables a network administrator to manage the scattered devices in the network via a management device. After a commander switch is configured, management and maintenance operations intended for the member devices in a cluster is implemented by the commander device.
Page 313: Cluster Ntdp
TL-SL5428E JetStream L2 Managed Switch CLI Guide TL-SL5428E(config)#cluster ndp TL-SL5428E(config)#cluster ndp timer hello 50 aging 120 cluster ntdp Description The cluster ntdp command is used to configure NTDP globally. To return to the default configuration, please use no cluster ntdp command. NTDP (Neighbor Topology Discovery Protocol) is used to collect the NDP information and neighboring connection information of each device in a specific network range.
Page 314: Cluster Explore
Example Enable NTDP function globally, and specify NTDP Hops as 5, NTDP Interval Time as 30 minutes: TL-SL5428E(config)#cluster ntdp TL-SL5428E(config)#cluster ntdp timer interval-timer 30 TL-SL5428E(config)#cluster ntdp hop 5 cluster explore Description The cluster explore command is used to enable the topology information collecting function manually.
Page 315: Cluster Ip Pool
JetStream L2 Managed Switch CLI Guide Example Enable NDP and NTDP function for Fast Ethernet port 5: TL-SL5428E(config)#interface fastEthernet 1/0/5 TL-SL5428E(config-if)#cluster ndp enable ntdp enable cluster ip pool Description The cluster ip pool command is used to create a new cluster. If no specified cluster name is set through cluster commander command, the newly created cluster will enjoy the system default name “tplink-cluster”.
Page 316: Cluster Manage
Command Mode Global Configuration Mode Example Specify the Hold Time and Interval Time of the cluster as 50 seconds: TL-SL5428E(config)#cluster manage holdtime 50 TL-SL5428E(config)#cluster manage timer 50 cluster member Description The cluster member command is used to add member switch. To delete the corresponding member, please use no cluster member command.
Page 317: Cluster Candidate
Command Mode Global Configuration Mode Example Add the switch whose MAC address is 0e-3f-4g-5e-6d-7b to the cluster: TL-SL5428E(config)#cluster member mac address 0e-3f-4g-5e-6d-7b cluster candidate Description The cluster candidate command is used to specify the current switch as candidate switch.
Page 318: Show Cluster Ndp
Display the global NDP information of the switch: TL-SL5428E(config)#show cluster ndp Display the NDP information of all the ports of the switch: TL-SL5428E(config)#show cluster ndp interface show cluster ntdp Description The show cluster ntdp command is used to display NTDP configuration information.
Page 319: Show Cluster
Privileged EXEC Mode and Any Configuration Mode Example Display the global information of NTDP: TL-SL5428E#show cluster ntdp Display the NTDP configuration of all Ethernet ports: TL-SL5428E#show cluster ntdp interface Display the device table of NTDP: TL-SL5428E#show cluster ntdp device-list show cluster Description When the current switch is Commander Switch, the show cluster command is used to display the global configuration of Cluster.
Page 320: Show Cluster Manage Role
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the role of the current switch: TL-SL5428E(config)#show cluster manage role show cluster neighbor Description The show cluster neighbor command is used to display the cluster’s neighbor information.

TP-Link JetStream TL-SL5428E Cli Reference Manual

Preface

Chapter 1 Using the CLI

Chapter 2 User Interface

Chapter 3 IEEE 802.1Q VLAN Commands

Chapter 4 MAC-Based VLAN Commands

Chapter 5 Protocol-Based VLAN Commands

Chapter 6 VLAN-VPN Commands

Chapter 7 Voice VLAN Commands

Chapter 8 Private VLAN Commands

Chapter 9 GVRP Commands

Chapter 10 Etherchannel Commands

Chapter 11 User Manage Commands

Chapter 12 Binding Table Commands

Chapter 13 ARP Inspection Commands

Chapter 14 IP Verify Source Commands

Chapter 15 Dos Defend Command

Chapter 16 IEEE 802.1X Commands

Chapter 17 Pppoe Circuit-ID Insertion Commands

Chapter 18 System Log Commands

Chapter 19 SSH Commands

Chapter 20 SSL Commands

Chapter 21 MAC Address Commands

Chapter 22 System Configuration Commands

Chapter 23 Ipv6 Address Configuration Commands

Chapter 24 Ethernet Configuration Commands

Chapter 25 Qos Commands

Chapter 26 Port Mirror Commands

Chapter 27 Port Isolation Commands

Chapter 28 Loopback Detection Commands

Chapter 29 ACL Commands

Quick Links

Need help?

Questions and answers

Related Manuals for TP-Link JetStream TL-SL5428E

Summary of Contents for TP-Link JetStream TL-SL5428E