D-Link xStack DGS-3400 Cli Manual

D-Link xStack DGS-3400 Cli Manual

Xstack dgs-3400 series layer 2+ gigabit ethernet managed switch
Hide thumbs Also See for xStack DGS-3400:
Table of Contents

Advertisement

®
CLI Manual
®
DGS-3400 Series
Product Model :
xStack
Layer 2+ Gigabit Ethernet Managed Switch
Release 2.6
.

Advertisement

Table of Contents
loading

Summary of Contents for D-Link xStack DGS-3400

  • Page 1 ® CLI Manual ® DGS-3400 Series Product Model : xStack Layer 2+ Gigabit Ethernet Managed Switch Release 2.6...
  • Page 2 July 2009 651GS3400095G RECYCLABLE...
  • Page 3: Table Of Contents

    Table of Contents   INTRODUCTION ................................1   USING THE CONSOLE CLI............................3   COMMAND SYNTAX ..............................7   BASIC SWITCH COMMANDS.............................9   SWITCH PORT COMMANDS ............................23   PORT SECURITY COMMANDS ..........................27   STACKING COMMANDS ............................31   NETWORK MANAGEMENT (SNMP) COMMANDS ....................35   SWITCH UTILITY COMMANDS ..........................55  ...
  • Page 4: Table Of Contents

      D–LINK SINGLE IP MANAGEMENT (SIM) COMMANDS ..................296   POE COMMANDS..............................306   COMMAND HISTORY LIST.............................312   MODIFY BANNER AND PROMPT COMMANDS ....................315   JWAC COMMANDS..............................318   CABLE DIAGNOSTICS COMMANDS........................338   MAC-BASED VLAN COMMANDS ..........................339   LOOP-BACK DETECTION (LBD) GLOBAL COMMANDS ..................341  ...
  • Page 5: Introduction

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual NTRODUCTION ® ® ® The xStack DGS–3400 Series is a member of the D–Link xStack switch family. xStack is a complete family of stackable ® switches that range from edge 10/100Mbps switches to core Gigabit switches. xStack provides unsurpassed performance, fault tolerance, scalable flexibility, robust security, standard–based interoperability and an impressive support for 10–Gigabit technology to future–proof departmental and enterprise network deployments with an easy migration path.
  • Page 6 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual B oo t P ro c e du r e 1. 00 – B 13 – – – –– – –– –– – – –– – –– –– – – –– – –– –– – – –– – –– –– – – -- - -- -- - - -- - -- -- - - -- - –– –– – – –– – –– –– – – –– – – P ow e r On S el f T es t .
  • Page 7 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual SING THE ONSOLE The Switch supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 8 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual c a b le _ di ag p or t s c l e ar c l e ar ad dr e s s_ b in di n g d h cp _s n o op bi nd i n g_ e nt ry p or t s c l e ar ar pt a b le c l e ar at ta c k _l o g c l e ar co un t e rs...
  • Page 9 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig a c c ou n t C o m ma n d: c o n fi f a cc o u nt N e x t p os si b l e c om pl e t io n s: <...
  • Page 10 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w C o m ma n d: s h o w N e x t p os si b l e c om pl e t io n s: 8 0 2 .1 p 8 02 .
  • Page 11 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax. Note: All commands are case–sensitive.
  • Page 12 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (parentheses) Purpose Indicates at least one or more of the values or arguments in the preceding syntax enclosed by braces must be specified. Syntax config dhcp_relay {hops <value 1-16> | time <sec 0-65535>}(1) Description In the above syntax example, users have the option to specify hops or time or both of them.
  • Page 13: Basic Switch Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ASIC WITCH OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create account [admin | operator | user] <username 15> config account <username>...
  • Page 14 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Each command is listed, in detail, in the following sections. create account Purpose Used to create user accounts. Syntax create account [admin | operator | user] <username 15> Description This command is used to create user accounts that consist of a case sensitive username of 1 to 15 characters and a case sensitive password of 0 to 15 characters.
  • Page 15 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To configure the user password of “dlink” account: D G S –3 4 26 :5 # c on f ig a c c ou n t dl i n k C o m ma n d: c o n fi g a cc o u nt dl in k E n t er a ol d pa s sw or d : ** * * E n t er a ca s e -s e ns it i v e n ew p a s sw o rd :* * * *...
  • Page 16 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable password encryption Purpose Used to enable password encryption. Syntax enable password encryption Description The user account configuration information will be stored in the configuration file, and can be applied to the system later. If the password encryption is enabled, the password will be in encrypted form.
  • Page 17 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show module_info Purpose Used to display information about installed modules. Syntax show module_info Description Displays information about optional modules that may be installed on the Switch. Parameters None. Restrictions None.
  • Page 18 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show session Purpose Used to display a list of currently logged–in users. Syntax show session Description This command displays a list of all the users that are logged–in at the time the command is issued.
  • Page 19 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s wi t c h C o m ma n d: s h o w s wi tc h D e v ic e T yp e : D GS –...
  • Page 20 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 27 :4 # s ho w s er i a l_ p or t C o m ma n d: s h o w s er ia l _ po r t B a u d R at e : 1 15 2 0 0 D a t a B it s...
  • Page 21 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le c l i pa g in g C o m ma n d: e n a bl e c li p a gi n g S u c ce s s.
  • Page 22 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable telnet Purpose Used to enable communication with and management of the Switch using the Telnet protocol. Syntax enable telnet <tcp_port_number 1–65535> Description This command is used to enable the Telnet protocol on the Switch. The user can specify the TCP or UDP port number the Switch will use to listen for Telnet requests.
  • Page 23 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le w e b 8 0 C o m ma n d: e n a bl e w eb 8 0 N o t e: SS L w i ll be d i s ab l ed i f we b i s e n ab l ed .
  • Page 24 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual reboot Purpose Used to restart the Switch. Syntax reboot {<string>} Description This command is used to restart the Switch. Parameters <string> – This parameter is used to perform the command without prompt if a user enters /y for yes or /n for no.
  • Page 25 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual login Purpose Used to log in a user to the Switch’s console. Syntax login Description This command is used to initiate the login procedure. The user will be prompted for a Username and Password.
  • Page 26 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # s ho w t ru s t ed _ ho st C o m ma n d: s h o w t ru st e d _h o st M a n ag e me nt S ta t io ns I P Ad d re ss - - - -- - -- -- - - -- -...
  • Page 27: Switch Port Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual WITCH OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [ <portlist> | all ] {medium_type [fiber | copper]} {speed [auto {capability_advertised {10_half | 10_full | 100_half | 100_full | 1000_full} (1) } | 10_half | 10_full | 100_half | 100_full | 1000_full { [master | slave]}] | auto_negotiation restart_an | flow_control [enable | disable] | learning [enable | disable ] | state [enable | disable] | [description <desc 1-32>...
  • Page 28 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config ports auto_negotiation restart_an - Restart the auto-negotiation process. flow_control [enable | disable] – Enable or disable flow control for the specified ports. learning [enable | disable] − Enables or disables the MAC address learning on the specified range of ports.
  • Page 29 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w p or t s C o m ma n d: s h o w p or ts P o r t P o rt Se t t in g s C on n ec ti o n...
  • Page 30 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w p or t s d e sc ri p t io n C o m ma n d: s h o w p or ts d es c ri pt i o n P o r t P o rt Se t t in g s...
  • Page 31: Port Security Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ECURITY OMMANDS The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<portlist>...
  • Page 32 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig p o r t_ s ec ur i t y p or ts 1 :1 – 1: 5 a d mi n _s ta t e e n ab le m a x _l e ar ni n g _a d dr 5 l oc k _a dd r e ss _ mo de D el e te On R e se t C o m ma n d: c o n fi g p or t _ se c ur it y po r ts 1 : 1 –1 : 5 ad m i n_ s ta te e na b le m a x _l e ar ni n g _a d dr 5 l oc k _a dd r e ss _ mo de D el e te On R e se t...
  • Page 33 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual clear port_security_entry Purpose Used to clear MAC address entries learned from a specified port for the port security function. Syntax clear port_security_entry port <portlist> Description This command is used to clear MAC address entries which were learned by the Switch by a specified port.
  • Page 34 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w p or t _ se c ur it y po r ts 1 : 1 –1 : 5 C o m ma n d: s h o w p or t_ s e cu r it y p o rt s 1 :1 –...
  • Page 35: Command Parameters

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual TACKING OMMANDS The stacking configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config box_priority current_box_id <value 1–12> priority <value 1–63> config box_id current_box_id <value 1–12>...
  • Page 36 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Usage example: To change a box ID: D G S –3 4 26 :5 # c on f ig b o x _i d c ur r e nt _ bo x_ i d 1 ne w_ b o x_ i d 2 C o m ma n d: c o n fi g b ox _ i d c ur re n t _b o x_ id 1 n e w_ bo x _ id 2 S u c ce s s.
  • Page 37 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config stacking mode Purpose Used to configure the stacking mode. Syntax config stacking mode [disable | enable] {<string>} Description This command will enable or disable the stacking mode for the switch. When enabled, the 10G ports on the rear of the switch will be enabled for stacking.
  • Page 38 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Usage example: To display the stacking devices: D G S –3 4 26 :5 # s ho w s ta c k _d e vi ce C o m ma n d: s h o w s ta ck _ d ev i ce B o x I D Bo x Ty p e H / W Ve r s io n...
  • Page 39 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (SNMP) C ETWORK ANAGEMENT OMMANDS The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. ® The xStack DGS–3400 Series supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3.
  • Page 40 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters delete snmp group <groupname 32> show snmp groups create snmp [host <ipaddr> | v6host <ipv6addr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] <auth_string 32> delete snmp [host <ipaddr>...
  • Page 41 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable snmp Purpose Used to disable SNMP on the Switch. Syntax disable snmp Description This command is used to disable the Simple Network Management Protocol (SNMP) on the Switch. Parameters None.
  • Page 42 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config snmp linkchange_traps Purpose Used to configure SNMP linkchange traps on the Switch. Syntax config snmp linkchange_traps ports [all|<portlist>][enable|disable] Description This command is used to configure SNMP linkchange traps on the Switch. all −...
  • Page 43 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command. Syntax create snmp user <username 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8–16>...
  • Page 44 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te s n mp us e r d l ink d ef a ult e nc r ypt e d b y _pa s s wo r d a u t h m d 5...
  • Page 45 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access. Syntax create snmp view <view_name 32> <oid> view_type [included | excluded] Description This command is used to assign views to community strings to limit which MIB objects an SNMP manager can access.
  • Page 46 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show snmp view Purpose Used to display an SNMP view previously created on the Switch. Syntax show snmp view {<view_name 32>} Description This command is used to display an SNMP view previously created on the Switch. <view_name 32>...
  • Page 47 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create snmp community Purpose Used to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch.
  • Page 48 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te s n m p c om mu n i ty dl in k C o m ma n d: d e l et e s nm p co m mu ni t y d l in k S u c ce s s.
  • Page 49 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show snmp engineID Purpose Used to display the identification of the SNMP engine on the Switch. Syntax show snmp engineID Description This command displays the identification of the SNMP engine on the Switch. Parameters None.
  • Page 50 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create snmp group Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To create an SNMP group named “sg1:” D G S –3 4 26 :5 # c re a te s n m p g ro up s g1 v3 n o a ut h _n op r i v r ea d_ v i ew v1 w r i te _ vi ew v 1 n o t if y _v ie w v1 C o m ma n d: c r e at e s nm p gr o up s g 1 v 3 n oa u t h_ n op ri v re a d_ vi e w v 1 w ri t e _v i ew v 1 n o t if y _v ie w v1...
  • Page 51 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual N o t if y V ie w Na m e : r es t r ic t ed S e c ur i ty M o d el : S NM P v 3 S e c ur i ty L e v el : N oA u t hN o Pr iv...
  • Page 52 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp [host <ipaddr> | v6host <ipv6addr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>] Description This command creates a recipient of SNMP traps generated by the Switch’s SNMP...
  • Page 53 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax delete snmp [host <ipaddr> | v6host <ipv6addr>] Description This command is used to delete a recipient of SNMP traps generated by the Switch’s SNMP agent.
  • Page 54 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s nm p ho s t C o m ma n d: s h o w s nm p h o st S N M P H os t T a bl e H o s t I P Ad d r es s S N MP Ve rs i o n...
  • Page 55 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le s n m p t ra ps C o m ma n d: e n a bl e s nm p tr a ps S u c ce s s.
  • Page 56 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable snmp traps Purpose Used to disable SNMP trap support on the Switch. Syntax disable snmp traps Description This command is used to disable SNMP trap support on the Switch. Parameters None.
  • Page 57 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig s n m p s ys te m _ co n ta ct M IS De pa r t me n t II C o m ma n d: c o n fi g s nm p sy s te m_ c o nt a ct M I S D e pa rt m e nt II S u c ce s s.
  • Page 58 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To enable RMON: D G S –3 4 26 :5 # e na b le r m o n C o m ma n d: e n a bl e r mo n S u c ce s s.
  • Page 59: Switch Utility Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual WITCH TILITY OMMANDS The switch utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [ firmware_fromTFTP [<ipaddr> |<ipv6addr>] <path_filename 64> {image_id<int 1- 2>} {unit [all|<unitid 1-12>]} | cfg_fromTFTP [<ipaddr>...
  • Page 60 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual download • config − Download a new configuration on the switch from a TFTP server. • <ipaddr> − The IPv4 address of the TFTP server. • <ipv6addr> − The IPv6 address of the TFTP server. •...
  • Page 61 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config configuration Purpose Used to designate a stored configuration file section ID as a boot up configuration, active configuration or to delete the configuration file. Syntax config configuration <config_id 1–2> [boot_up | delete | active] Description This command is used to configure the section ID index of a stored configuration as the boot up or active configuration, or to delete the contents of the specified configuration...
  • Page 62 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # c on f ig f i r mw a re i m a ge _ id 1 b oo t _u p C o m ma n d: c o n fi g f ir m w ar e i ma g e _i d 1 b o o t_ u p S u c ce s s.
  • Page 63 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show config Purpose Used to display the current or saved version of the configuration settings of the switch. Syntax show config [current_config | config_in_nvram <config_id 1–2> | information] Description Use this command to display all the configuration settings that are saved to NV RAM or display the configuration settings as they are currently configured.
  • Page 64 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w c on f i g c ur re n t _c o nf ig C o m ma n d: s h o w c on fi g cu r re nt _ c on f ig # –...
  • Page 65 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual upload Purpose Used to upload switch settings or the switch history log to a TFTP server. Syntax upload [cfg_toTFTP [<ipaddr> | <ipv6addr>] <path_filename 64> {<config_id 1–2>} | log_toTFTP [<ipaddr> | <ipv6addr>] <path_filename 64>] | attack_log_toTFTP [<ipaddr>...
  • Page 66 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # u pl o ad a t t ac k _l og _ t oT F TP 1 0 . 53 . 13 .2 3 c: \ at ta c k lo g 1 un i t 1 C o m ma n d: u p l oa d a tt a c k_ l og _t o T FT P 1 0.
  • Page 67 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # enable autoconfig Purpose Used to activate the auto-configuration function for the Switch. This will load a configuration from the TFTP server specified in the reply. Syntax enable autoconfig Description...
  • Page 68 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # cr e at e i p ro u te d e f au l t 17 2 . 18 . 21 2. 2 5 3 1 C o m ma n d: c r e at e i pr o u te de fa u l t 1 72 .1 8 .
  • Page 69 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut o c on f ig C o m ma n d: s h o w a ut oc o n fi g A u t oc o nf ig S ta t e: D i s ab l ed .
  • Page 70 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To ping the IPv6 address 2009::280:C8FF:FE3C:5C8A four times: D G S –3 4 26 :5 # p in g 6 20 0 9 :: 2 80 :C 8 F F: F E3 C: 5 C 8A ti me s 4 t im eo u t 1 0 C o m ma n d: p i n g6 20 09 : : 28 0 :C 8F F : FE 3 C: 5C 8 A t i me s 4 ti m eo ut 1 0 R e p ly fr om 2 00 9 :: 28 0 : C8 F F: FE 3 C :5 C 8A , b y te s =1 00 t im e <1 0 m s R e p ly fr om 2 00 9 :: 28 0 : C8 F F: FE 3 C :5 C 8A , b y te s =1 00 t im e <1 0 m s...
  • Page 71: Network Monitoring Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
  • Page 72 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display the packets analysis for port 7 of switch 1: D G S –3 4 26 :5 # s ho w p ac k e t p or ts 1 :7 C o m ma n d: s h o w p ac ke t po r ts 1 : 7 P o r t n um be r : 1 :7 = = == = == == = = == = == == = = == = == == = = == = == == = = == = == == = = == = == == = = == = == ==...
  • Page 73 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w e rr o r p o rt s 1 : 3 C o m ma n d: s h o w e rr or p or t s 1: 3 P o r t n um be r : 1 :3 R X F ra me s T X F r am e s...
  • Page 74 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w u ti l i za t io n p o rt s C o m ma n d: s h o w u ti li z a ti o n po r t s P o r t T X / se c R X/ s ec...
  • Page 75 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports<portlist>} Description This command will clear the counters used by the Switch to compile statistics. ports <portlist> − Specifies a port or range of ports to be displayed. The port list is Parameters specified by listing the lowest switch number and the beginning port number on that switch, separated by a colon.
  • Page 76 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display the switch history log: D G S –3 4 26 :5 # s ho w l og i nd e x 1– 5 C o m ma n d: s h o w l og i n d ex 1– 5 I n d ex D at e Ti m e...
  • Page 77 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1–4> {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
  • Page 78 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create syslog host local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6) local use 7 (local7) local0 − Specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from the list above.
  • Page 79 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config syslog host Switch. Numerical Severity Code Emergency: system is unusable Alert: action must be taken immediately Critical: critical conditions Error: error conditions Warning: warning conditions Notice: normal but significant condition Informational: informational messages Debug: debug–level messages informational −...
  • Page 80 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config syslog host local5 − Specifies that local use 5 messages will be sent to the remote host. This corresponds to number 21 from the list above. local6 − Specifies that local use 6 messages will be sent to the remote host. This corresponds to number 22 from the list above.
  • Page 81 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config syslog host all Code Emergency: system is unusable Alert: action must be taken immediately Critical: critical conditions Error: error conditions Warning: warning conditions Notice: normal but significant condition Informational: informational messages Debug: debug–level messages informational −...
  • Page 82 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config syslog host all local6 − Specifies that local use 6 messages will be sent to the remote host. This corresponds to number 22 from the list above. local7 − Specifies that local use 7 messages will be sent to the remote host. This corresponds to number 23 from the list above.
  • Page 83 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te s y s lo g h os t 4 C o m ma n d: d e l et e s ys l o g h os t 4 S u c ce s s.
  • Page 84 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config system_severity Purpose To configure severity level of an alert required for log entry or trap message. Syntax config system_severity [trap | log | all] [critical | warning | information] Description This command is used to configure the system severity levels on the Switch.
  • Page 85 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config log_save_timing Purpose Used to configure the method of saving log files to the switch’s flash memory. Syntax config log_save_timing [time_interval <min 1–65535> | on_demand | log_trigger] Description This command allows the user to configure the time method used in saving log files to the switch’s flash memory.
  • Page 86 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1d STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 87 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters show stp mst_config_id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description This command allows the Spanning Tree Protocol to be globally enabled on the Switch.
  • Page 88 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config stp version Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To set the Switch globally for the Multiple Spanning Tree Protocol (MSTP): D G S –3 4 26 :5 # c on f ig s t p v e rs io n ms t p C o m ma n d: c o n fi g s tp v er s io n m s tp S u c ce s s.
  • Page 89 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config stp loopback has been detected. After the timer has expired the Switch checks for an STP loopback, if no loopback detected, STP will be resumed. Entering 0 will disable LBD recovery. nni_bpdu_addr [dot1d | dot1ad] –...
  • Page 90 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config stp ports loops, however an edge port can lose edge port status if a topology change creates a potential for a loop. An edge port normally should not receive BPDU packets. If a BPDU packet is received it automatically loses edge port status.
  • Page 91 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te s t p i n st an c e _i d 2 C o m ma n d: c r e at e s tp i ns t an ce _ i d 2 S u c ce s s.
  • Page 92 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete stp instance_id Purpose Used to delete a STP instance ID from the Switch. Syntax delete stp instance_id <value 1–15> Description This command allows the user to delete a previously configured STP instance ID from the Switch.
  • Page 93 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config stp mst_config_id Parameters revision_level <int 0–65535>– Enter a number between 0 and 65535 to identify the MSTP region. This value, along with the name will identify the MSTP region configured on the Switch.
  • Page 94: Show Stp

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To designate ports 1 to 2 on module 1, with instance ID 0, to have an auto internalCost and a priority of 0: D G S –3 4 26 :5 # c on f ig s t p ms t _po r t s 1 : 1– 1 : 2 in s tan c e _i d 0 i n t er n al Co s t au t o p r i or i ty C o m ma n d: c o n fi g s tp m st _ po rt s 1: 1 –1 :2 i ns t an ce _ i d 0 i nt e r na l Co st a ut o p ri o r it y 0 S u c ce s s.
  • Page 95 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Status 3 : STP enabled for MSTP D G S – 3 4 2 6 : 5 # s h o w s t p C o m m a n d : s h o w s t p S T P B r i d g e G l o b a l S e t t i n g s –...
  • Page 96 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show stp instance Purpose Used to display the Switch’s STP instance configuration Syntax show stp instance <value 0–15> Description This command is used to display the Switch’s current STP Instance Settings and the STP Instance Operational Status.
  • Page 97 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s tp m st _ co nf i g _i d C o m ma n d: s h o w s tp m s t _c o nf ig _ i d C u rr e nt M S T C o nf ig u r at i on I d e nt i fi ca t i on –...
  • Page 98: Forwarding Database Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32>...
  • Page 99 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table (database) Syntax create multicast_fdb <vlan_name 32> <macaddr> Description This command is used to make an entry in the Switch’s multicast MAC address forwarding database.
  • Page 100 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10–1000000> Description The aging time affects the learning process of the Switch. Dynamic forwarding table entries, which are made up of the source MAC addresses and their associated port numbers, are deleted from the table if they are not accessed within the aging time.
  • Page 101 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te f d b d e fa ul t 01 – 00 –0 0 – 00 – 01 –0 2 C o m ma n d: d e l et e f db d ef a ul t 0 1 –0 0 –0 0–...
  • Page 102 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w m ul t i ca s t_ fd b vl a n de f a ul t C o m ma n d: s h o w m ul ti c a st _ fd b v l an de fa u l t V L A N N am e : de f a ul t M A C A d dr es s...
  • Page 103 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w f db C o m ma n d: s h o w f db U n i ca s t MA C Ad d re ss A gi n g Ti m e = 30 0 V I D VL AN N am e M AC A dd r es s...
  • Page 104 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show multicast filtering_mode Purpose Used to show the multicast packet filtering mode as configured for the VLANs. Syntax show multicast filtering_mode {vlan <vlan_name 32>} Description This command is used to display the current multicast packet filtering mode for specified VLANs or all VLANs on the Switch.
  • Page 105 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w i pf d b C o m ma n d: s h o w i pf db I n t er f ac e IP A d d re s s P o rt Le a rn ed...
  • Page 106 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual RAFFIC ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 107 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config traffic control Purpose Used to configure broadcast/multicast/dlf traffic control. Syntax config traffic control [<portlist> | all] broadcast [enable | disable] | multicast [enable | disable] | dlf [enable | disable] | action [drop | shutdown] | threshold <value 0– 255000>...
  • Page 108 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure traffic control and enable broadcast storm control system wide: D G S –3 4 26 :5 # c on f ig t r a ff i c co n t ro l a ll b ro a dc as t en a bl e C o m ma n d: c o n fi g t ra f f ic co nt r o l a ll b r o ad c as t e n ab l e S u c ce s s.
  • Page 109 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure traffic control and enable broadcast storm control system wide: D G S –3 4 26 :5 # c on f ig t r a ff i c tr a p s t or m_ o c cu r re d C o m ma n d: c o n fi g t ra f f ic tr ap s to r m_ oc c u rr e d S u c ce s s.
  • Page 110 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OMMANDS ® The xStack DGS–3400 Series supports 802.1p priority queuing. The Switch has eight priority queues, one of which is internal and not configurable. These priority queues are numbered from 6 (Class 6) — the highest priority queue — to 0 (Class 0) — the lowest priority queue.
  • Page 111 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config bandwidth_control Purpose Used to configure bandwidth control on a port–by–port basis. Syntax config bandwidth_control [ <portlist>| all ]{rx_rate [ no_limit | <value 64-10000000>] | tx_rate [ no_limit | <value 64-10000000>]} (1) Description This command is used to configure bandwidth on a port–by–port basis.
  • Page 112 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show bandwidth_control Purpose Used to display the bandwidth control table. Syntax show bandwidth_control {<portlist>} Description This command is used to display the current bandwidth control configuration on the Switch, on a port–by–port basis. <portlist>...
  • Page 113 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config scheduling Purpose Used to configure the traffic scheduling mechanism for each QoS queue. Syntax config scheduling <class_id 0–6> {max_packet <value 0–15>} (1) Description The Switch contains eight hardware priority queues, one of which is internal and not configurable.
  • Page 114 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s ch e d ul i ng C o m ma n d: s h o w s ch ed u l in g Q O S O u tp ut S ch e du li n g C l a ss ID MA X.
  • Page 115 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show 802.1p user_priority Purpose Used to display the current mapping between an incoming packet’s 802.1p priority value and one of the Switch’s seven hardware priority queues. Syntax show 802.1p user_priority Description This command is used to display the current mapping of an incoming packet’s 802.1p priority value to one of the Switch’s seven hardware priority queues.
  • Page 116 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure 802.1p default priority on the Switch: D G S –3 4 26 :5 # c on f ig 8 0 2 .1 p d ef a u lt _ pr io r i ty al l 5 C o m ma n d: c o n fi g 8 02 .
  • Page 117 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config scheduling_mechanism Purpose Used to configure the scheduling mechanism for the QoS function Syntax config scheduling_mechanism [strict | weight_fair] Description This command is used to to select between a weight fair and a Strict mechanism for emptying the priority classes of service of the QoS function.
  • Page 118 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s ch e d ul i ng _m e c ha n is m C o m ma n d: s h o w s ch ed u l in g _m ec h a ni s m Q O S s c he du l i ng _ me ch a n is m C L A SS ID Me c ha ni s m...
  • Page 119 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show hol_prevention Purpose Used to show HOL prevention. Syntax show hol_prevention Description This command is used to display the Head of Line prevention state. Parameters None. Restrictions None. Example usage: To view the HOL prevention status: D G S –3 4 26 :5 # s ho w h ol _ p re v en ti o n C o m ma n d: s h o w h ol _p r e ve n ti on...
  • Page 120: Port Mirroring Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port> [add | delete] source ports <portlist> [rx | tx | both] enable mirror disable mirror show mirror...
  • Page 121 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To add the mirroring ports: D G S –3 4 26 :5 # co n fi g m i rr o r po r t 1 : 1 ad d so u rc e p o rt s 1 :2 – 1 :7 bo th C o m ma n d: c o n fi g m ir r o r p or t 1 : 1 a dd s o u rc e p or t s 1 : 2–...
  • Page 122 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e m i rr o r C o m ma n d: d i s ab l e mi r r or S u c ce s s.
  • Page 123: Vlan Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual VLAN C OMMANDS Along with normal VLAN configurations, this Switch now incorporate Q-in-Q VLANs. Also known as Double VLANs, Q-in-Q VLANs allow network providers to expand their VLAN configurations to place VLANs within a larger inclusive VLAN, which adds a new layer to the VLAN configuration.
  • Page 124 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create vlan Purpose Used to create a VLAN on the Switch. Syntax create vlan <vlan_name 32> {tag <vlanid 2-4094> | type 1q_vlan | advertisement} Description This command is used to create VLANs on the Switch. <vlan_name 32>...
  • Page 125 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config vlan Purpose Used to add additional ports to a previously configured VLAN. Syntax config vlan <vlan_name 32> {[add [tagged | untagged | forbidden] | delete] <portlist> | advertisement [enable | disable]} (1) Description This command is used to add ports to the port list of a previously configured VLAN.
  • Page 126 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1–4094>} (1) Description This command is used to configure the Group VLAN Registration Protocol on the Switch.
  • Page 127 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le g v r p C o m ma n d: e n a bl e g vr p S u c ce s s.
  • Page 128 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # s ho w v la n C o m ma n d: s h o w v la n V I D V LA N N am e : d e f au l t V L A N T yp e...
  • Page 129 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w g vr p C o m ma n d: s h o w g vr p G l o ba l G VR P : D is ab l e d P o r t P V I D GV RP...
  • Page 130 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable double_vlan Purpose Used to disable the Q-in-Q VLAN feature on the Switch. Syntax disable double_vlan Description This command, along with the enable double_vlan command, enables and disables the Q-in-Q Tag VLAN.
  • Page 131 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config double_vlan Purpose Used to config the parameters for a previously created Q-in-Q VLAN (Double VLAN) on the Switch. Syntax config double_vlan <vlan_name> {[[add [access | uplink] | delete] <portlist> | tpid <hex 0x0–0xffff>]} (1) Description This command is used to configure a Q-in-Q VLAN (service provider VLAN) on the...
  • Page 132 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig d o u bl e _v la n Ti b er iu s de l et e 1 : 4– 1 :8 C o m ma n d: c o n fi g d ou b l e_ v la n T i be r iu s d e le t e 1: 4 –...
  • Page 133 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le p v i d a ut o_ a s si g n C o m ma n d: e n a bl e p vi d au t o_ as s i gn S u c ce s s.
  • Page 134: Ism Vlan Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ISM VLAN C OMMANDS The ISM VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create igmp_snooping multicast_vlan <vlan_name 32>...
  • Page 135 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te i g m p_ s no op i n g m ul ti c a st _ vl an t es t C o m ma n d: d e l et e i gm p _ sn o op in g mu l ti ca s t _v l an t e s t S u c ce s s.
  • Page 136 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig v l a n d ef au l t d e le te 1 0– 2 0 C o m ma n d: c o n fi g v la n de f au lt d el e te 1 0 –...
  • Page 137 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig i g m p_ s no op i n g m ul ti c a st _ vl an _ g ro u p te s t a d d 22 5 . 1. 1 .1 – 2 2 5 .1 .
  • Page 138: Link Aggregation Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1–32> {type [lacp | static]} delete link_aggregation group_id <value 1–32>...
  • Page 139 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value 1–32> Description This command is used to delete a previously configured link aggregation group. <value 1–32>...
  • Page 140 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig l i n k_ a gg re g a ti o n gr o u p_ i d 1 m a st e r_ po r t 1 : 5 po r t s 1 :5 –1 : 7 ,1 : 9 C o m ma n d: c o n fi g l in k _ ag g re ga t i on gr ou p _ id 1 ma s t er _ po rt 1 :5 po rt s 1: 5 –1 :7 , 1 :9 S u c ce s s.
  • Page 141 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w l in k _ ag g re ga t i on C o m ma n d: s h o w l in k_ a g gr e ga ti o n L i n k A gg re g a ti o n Al g o ri t hm = M AC –...
  • Page 142 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show lacp_port Purpose Used to display current LACP port mode settings. Syntax show lacp_port {<portlist>} Description This command is used to display the LACP mode settings as they are currently configured.
  • Page 143 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual IP–MAC-P (IMPB) C INDING OMMANDS The IP network layer uses a four–byte IP address. The Ethernet link layer uses a six–byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP–MAC-Port Binding is to restrict the access to a switch to a number of authorized users.
  • Page 144 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [ <portlist> | all]} config address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [ <portlist> | all]} config address_binding ip_mac ports [ <portlist>| all ] {state [enable {[strict | loose]} | disable] |allow_zeroip [enable | disable] |forward_dhcppkt [enable | disable] |mode [arp | acl] |stop_learning_threshold <value 0-500>}...
  • Page 145 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te a d d re s s_ bi n d in g ip_ m a c i p add r e ss 1 0.1 . 1 .3 m ac_ a d dr e ss 0 0 – 00 – 0 0 –...
  • Page 146 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config address_binding ip_mac ipaddress Purpose Used to configure an IP–MAC-Port Binding entry. Syntax config address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} Description This command is used to configure an IP–MAC-Port Binding entry. Parameters <ipaddr>...
  • Page 147 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config address_binding ip_mac ports port with its IMPB entries. If the IP-MAC pair in the packet matches the IMPB entry, the MAC address will be unblocked and subsequent packets sent from this client will be forwarded.
  • Page 148 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig a d d re s s_ bi n d in g i p_ m a c p or ts 1 :2 st at e en a bl e C o m ma n d: c o n fi g a dd r e ss _ bi nd i n g i p_ ma c po r ts 1 : 2 s t at e e n ab l e S u c ce s s.
  • Page 149 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete address_binding Purpose Used to delete IP–MAC-Port Binding entries. Syntax delete address_binding [ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} | all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]] Description This command is used to delete IP–MAC-Port Binding entries. Two different kinds of information can be deleted.
  • Page 150 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable address_binding trap_log Purpose Used to disable the trap/log for the IP–MAC-Port Binding function. Syntax disable address_binding trap_log Description This command, along with the enable address_binding trap_log, will enable and disable the sending of trap/log messages for IMPB.
  • Page 151 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To disable IMPB debugging on the Switch: D G S –3 4 26 :5 # n o d eb ug a dd r es s_ b i nd i ng C o m ma n d: n o de b ug a d d re s s_ bi n d in g S u c ce s s.
  • Page 152 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable address_binding dhcp_snoop Purpose To disable the DHCP snooping option for IMPB. Syntax disable address_binding dhcp_snoop Description When the DHCP snoop function is disabled, all of the auto-learned binding entries will be removed.
  • Page 153 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5#show address_binding dhcp_snoop Command: show address_binding dhcp_snoop DHCP_Snoop : Enabled DGS–3426:5# To display an address binding DHCP snoop binding entry: Note: “Inactive” indicated that the entry is currently inactive due to port link down. DGS–3426:5#show address_binding dhcp_snoop binding_entry Command: show address_binding dhcp_snoop binding_entry IP Address...
  • Page 154 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config address_binding dhcp_snoop max_entry ports Purpose Specifies the maximum number of entries which can be dynamically learned (DHCP snooped) by the specified ports. Syntax config address_binding dhcp_snoop max_entry ports [<portlist> | all] limit [<value 1-50>...
  • Page 155 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual IP C OMMANDS NCLUDING The IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create ipif <ipif_name 12>...
  • Page 156 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te i p i f p 1 10 . 1 .1 . 1/ 8 T i be r iu s s t at e e na b l e C o m ma n d: c r e at e i pi f p1 10 .1 .
  • Page 157 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig i p i f T ib er i u s i pv 6 i p v6 a dd re s s 3 f fe :5 0 1 :f f ff :1 0 0 :: 1 /6 4 C o m ma n d: c o n fi g i pi f Ti b er iu s ip v 6 ip v 6 ad d re ss 3 ff e :5 01 : f ff f :1 00 : : 1/ 6 4 S u c ce s s.
  • Page 158 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le i p i f s 2 C o m ma n d: e n a bl e i pi f s2 S u c ce s s.
  • Page 159 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable autoconfig Purpose Used to activate the auto-configuration function for the Switch. This will load a configuration file for current use. Syntax enable autoconfig Description When auto-configuration is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 160 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show autoconfig Purpose Used to display the auto-configuration status. Syntax show autoconfig Description The command is used to display the auto-configuration status. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To display the auto-configuration status: D G S –3 4 26 :5 # s ho w a ut o c on f ig...
  • Page 161 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable ipif_ipv6_link_local_auto Purpose Disables the auto configuration of link local addresses when no IPv6 addresses are configured. Syntax disable ipif_ipv6_link_local_auto [<ipif_name 12> | all ] Description This command is used to disable the auto-configuration of link local addresses when no IPv6 address is explicitly configured.
  • Page 162: Ipv6 Neighbor Discovery Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual EIGHBOR ISCOVERY OMMANDS The following commands are used to detect IPv6 neighbors of the switch and to keep a running database about these neighbor devices. The IPv6 Neighbor Discovery commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 163 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete ipv6 neighbor_cache ipif Purpose Used to remove a static IPv6 neighbor. Syntax delete ipv6 neighbor_cache ipif [<ipif_name 12> | all][<ipv6addr> |static |dynamic | all] Description This command is used to remove a static IPv6 neighbor from an existing IPv6 interface previously created on the switch.
  • Page 164 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config ipv6 nd ra ipif Purpose Used to configure the parameters for router advertisement packets being sent from the switch. Syntax config ipv6 nd ra ipif <ipif_name 12> {state [enable | disable] | life_time <value 0– 9000>...
  • Page 165 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig i p v 6 n d ra i pi f t ri t o n s ta te e na b le l i f e_ t im e 1 0 00 r e a ch a bl e_ t i me 10 00 0 re t ra ns _ t im e 5 00 0 0 h o p_ li m i t 1 0 ma n a ge d _f la g en a bl e o t h er _ co nf i g _f l ag e n a bl e m in _ r tr _ ad v_ i n te r va l 5 0 m a x_ rt r _ ad v _i nt e r va l 1 00 C o m ma n d: c o n fi g i pv 6 nd ra i p i f t ri to n st a te e n a bl e l if e _ ti m e 10 0 0...
  • Page 166 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config ipv6 nd ns ipif Purpose Used to configure the parameters for Neighbor solicitation messages to be sent from the switch. Syntax config ipv6 nd ns ipif <ipif_name 12> retrans_time <uint 0–4294967295> Description This command is used to configure the parameters for Neighbor Solicitation messages sent from the switch.
  • Page 167 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display the neighbor detection parameters for IPv6: D G S –3 4 26 :5 # s ho w i pv 6 nd C o m ma n d: s h o w i pv 6 n d I n t er f ac e N a me : S ys te m H o p L i mi t...
  • Page 168: Igmp Snooping Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [ vlan <vlan_name 32>...
  • Page 169 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config igmp_snooping Purpose Used to configure IGMP snooping on the Switch. Syntax config igmp_snooping [ vlan <vlan_name 32> |all] { host_timeout <sec 1-16711450> | router_timeout <sec 1-16711450> | leave_timer <sec 1-16711450> | state [enable|disable] |fast_leave [enable|disable] | report_suppression [enable | disable]} (1) Description...
  • Page 170 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config igmp_snooping querier Purpose Used to configure the IGMP snooping querier. Syntax config igmp_snooping querier [ vlan <vlan_name 32> |all] { query_interval <sec 1- 65535> | max_response_time <sec 1-25> | robustness_variable <value 1-255> | last_member_query_interval <sec 1-25>...
  • Page 171 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create igmp_snooping static_group Purpose Used to create IGMP snooping static group information on the Switch. Syntax create igmp_snooping static_group [ vlan <vlan_name 32> | vlanid <vidlist> ] <ipaddr> Description This command allows the creation of an IGMP snooping static group.
  • Page 172 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig i g m p_ s no op i n g s ta ti c _ gr o up v l a ni d 1 2 2 6 .1 . 1. 1 a d d 5 C o m ma n d: c o n fi g i gm p _ sn o op in g st a ti c_ g r ou p v la n i d 1 2 26 .
  • Page 173 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w i gm p _ sn o op in g st a ti c_ g r ou p C o m ma n d: s h o w i gm p_ s n oo p in g s t at i c_ gr o u p V L A N I D/ Na m e I P A dd r e ss St a ti c M e mb e r Po r t s...
  • Page 174 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config router_ports_forbidden Purpose Used to configure ports as forbidden multicast router ports. Syntax config router_ports_forbidden <vlan_name 32> [add | delete] <portlist> Description This command is used to designate a port or range of ports as being forbidden to multicast–enabled routers.
  • Page 175 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only} Description This command is used to disable IGMP snooping on the Switch. IGMP snooping can be disabled only if IP multicast routing is not being used.
  • Page 176 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w i gm p _ sn o op in g C o m ma n d: s h o w i gm p_ s n oo p in g I G M P S no op i n g G lo ba l St a te : E na b le d M u lt i ca st r ou t er O n l y : En a bl ed...
  • Page 177 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch. Syntax show igmp_snooping group {vlan <vlan_name 32>} Description This command is used to display the current IGMP Snooping Group configuration setup currently configured on the Switch.
  • Page 178: Mld Snooping Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual MLD S NOOPING OMMANDS Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data. Instead of flooding all ports on a selected VLAN with multicast traffic, MLD snooping will only forward multicast data to ports that wish to receive this data through the use of queries and reports produced by the requesting ports and the source of the multicast traffic.
  • Page 179 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable mld_snooping Purpose Used to enable MLD snooping globally on the switch. Syntax enable mld_snooping {forward_mcrouter_only} Description This command, in conjunction with the disable mld_snooping will enable and disable MLD snooping globally on the Switch without affecting configurations.
  • Page 180 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config mld_snooping Purpose Used to configure MLD snooping on the Switch. Syntax config mld_snooping [vlan <vlan_name 32> | all] {node_timeout <sec 1–16711450> | router_timeout <sec 1–16711450> | done_timer <sec 1–16711450> | state [enable | disable] | fast_done [enable | disable]} (1) Description This command is used to configure MLD snooping on the Switch.
  • Page 181 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config mld_snooping mrouter_ports Purpose Used to configure ports as static router ports on the Switch. Syntax config mld_snooping mrouter_ports <vlan_name 32> [add | delete] <portlist> Description This command is used to designate a range of ports as being connected to a multicast– enabled router.
  • Page 182 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig m l d _s n oo pi n g m r ou te r _ po r ts _f o r bi d de n d e fa u lt a d d 1 : 11 –1 : 2 0 C o m ma n d : c o nf i g ml d _ sn o op in g mr o ut er _ p or t s_ fo r b id d en d e f au l t ad d 1: 1 1–...
  • Page 183 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual NOTE: The robustness variable of the MLD snooping querier is used in creating the following MLD message intervals: Group Listener Interval – This is the amount of time that must pass before a multicast router decides that there are no more listeners present of a group on a network.
  • Page 184 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show mld_snooping group Purpose Used to display MLD snooping group configurations on the Switch. Syntax show mld_snooping group {vlan <vlan_name 32>} Description This command is used to display MLD snooping group configurations on the Switch. vlan <vlan_name 32>...
  • Page 185 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To display the MLD snooping multicast router port settings: D G S –3 4 26 :5 # s ho w m ld _ s no o pi ng m ro u te r_ p o rt s C o m ma n ds : s h ow ml d_ s n oo p in g m r ou t er _p o r ts V L A N N am e : d ef a u lt...
  • Page 186: Limited Ip Multicast Address (Igmp Filtering)

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual IP M (IGMP F IMITED ULTICAST DDRESS ILTERING The Limited IP Multicast Address (IGMP Filtering) commands allow users to specify which multicast address(es) reports are to be received on specified ports on the switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the switch.
  • Page 187 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete limited multicast address Purpose Used to delete Limited IP multicast address range. Syntax delete limited multicast address [all | <portlist>] Description This command is used to delete all multicast address ranges or a selected range based on which port or ports the range has been assigned.
  • Page 188 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w l im i t ed mu lt i c as t a dd r e ss 1: 1– 1 : 3 C o m ma n d: s h o w l im it e d m u lt ic a s t a dd re s s 1 : 1–...
  • Page 189: X Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual 802.1X C OMMANDS ® The xStack DGS–3400 implements the server–side of the IEEE 802.1X Port–based and MAC–based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 190 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters create 802.1x guest_vlan <vlan_name 32> config 802.1x guest_vlan ports [<portlist> | all] state [enable | disable] delete 802.1x guest_vlan {<vlan_name 32>} show 802.1x guest_vlan config 802.1x auth_failover [enable | disable] config 802.1x fwd_pdu system [enable | disable]...
  • Page 191 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e 8 0 2. 1 x C o m ma n d: d i s ab l e 80 2 . 1x S u c ce s s.
  • Page 192 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show 802.1x auth_configuration ports Purpose Used to display the current configuration of the 802.1X server on the Switch. Syntax show 802.1x auth_configuration ports <portlist> Description This command is used to display the 802.1X Port–based or MAC–based Network Access control local users currently configured on the Switch.
  • Page 193 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w 8 02 . 1 x a ut h_ c o nf i gu ra t i on po rt s 1: 1 C o m ma n d: s h o w 8 02 .1 x au t h_ co n f ig u ra ti o n p o rt s 1 : 1 P o r t n um be r : 1 : 1...
  • Page 194 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual MAC 00-00-00-00-00-20 attempts to start authentication, MAC address is followed by “(P)” to indicate the port-based mode authentication. MAC 00-00-00-00-00-21 failed to pass authentication, MAC address is followed by “(P)” to indicate the port- based mode authentication.
  • Page 195 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x capability ports Purpose Used to configure the 802.1X capability of a range of ports on the Switch. Syntax config 802.1x capability ports [<portlist> | all] [authenticator | none] Description This command has four capabilities that can be set for each port.
  • Page 196 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x auth_parameter ports Purpose Used to configure the 802.1X Authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1X settings. Syntax config 802.1x auth_parameter ports [<portlist>...
  • Page 197 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig 8 0 2 .1 x a ut h _ pa r am et e r p o rt s 1 : 1– 1 :2 0 d i re c ti on b ot h C o m ma n d: c o n fi g 8 02 .
  • Page 198 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x reauth Purpose Used to configure the 802.1X re–authentication feature of the Switch. Syntax config 802.1x reauth {port_based ports [<portlist> | all] | mac_based [ports] [<portlist> | all] {mac_address <macaddr>}] Description This command is used to re–authenticate a previously authenticated device based on port number.
  • Page 199 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1–3> <server_ip> key <passwd 32> [default | {auth_port <udp_port_number 1–65535>...
  • Page 200 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig r a d iu s d el e t e 1 C o m ma n d: c o n fi g r ad i u s d el et e 1 S u c ce s s.
  • Page 201 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To display RADIUS settings on the Switch: D G S –3 4 26 :5 # s ho w r ad i u s C o m ma n d: s h o w r ad iu s I n d ex I P A d dr e ss Au th –...
  • Page 202 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # s ho w 8 02 . 1 x u se r C o m ma n d: s h o w 8 02 .1 x us e r C u rr e nt A c c ou n ts : U s er n am e P a s sw o rd...
  • Page 203 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show acct_client Purpose Used to display the current RADIUS accounting client. Syntax show acct_client Description This command is used to display the current RADIUS accounting client currently configured on the Switch. Parameters None.
  • Page 204 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h _ cl i en t C o m ma n d: s h o w a ut h_ c l ie n t r a d iu s Au th C l ie n t == >...
  • Page 205 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h _ di a gn os t i cs po rt s 1: 1 6 C o m ma n d: s h o w a ut h_ d i ag n os ti c s p o rt s 1 : 16 P o rt nu mb e r : 1: 16 E n te r sC on n e ct i ng E a pL o go ff s W hi l eC on n e ct i ng...
  • Page 206 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h _ se s si on _ s ta t is ti c s p o rt s 1 : 16 C o m ma n d: s h o w a ut h_ s e ss i on _s t a ti s ti cs p or t s 1: 1 6 P o rt nu mb e r : 1: 16 S e ss i on Oc t e ts R x...
  • Page 207 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create 802.1x guest_vlan Purpose Used to configure a pre–existing VLAN as a 802.1X Guest VLAN. Syntax create 802.1x guest_vlan <vlan_name 32> Description This command is used to configure a pre–defined VLAN as a 802.1X Guest VLAN. Guest 802.1X VLAN clients are those who have not been authorized for 802.1X or they haven’t yet installed the necessary 802.1X software, yet would still like limited access rights on the Switch.
  • Page 208 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig 8 0 2 .1 x g ue s t _v l an p o r ts 1: 1– 1 : 5 s ta te e na b le C o m ma n d: c o n fi g 8 02 .
  • Page 209 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x auth_failover Purpose Used to configure 802.1X authentication failover. Syntax config 802.1x auth_failover [enable | disable] Description When the authentication failover is disabled, if the RADIUS servers are unreachable, the authentication will fail.
  • Page 210 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x fwd_pdu ports Purpose Used to configure the forwarding of EAPOL PDU. Syntax config 802.1x fwd_pdu ports [<portlilst>| all] [enable | disable] Description This command is a per port setting used to control the forwarding of EAPOL PDU. When 802.1X functionality is disabled globally or disabled for a specific port, and 802.1X forward PDU is enabled both globally and for the port, a received EAPOL packet on the port will be flooded in the same VLAN to those ports.
  • Page 211 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config 802.1x max_users Purpose Used to configure the max number of users that can be learned via 802.1X authentication. Syntax config 802.1x max_users [<value 1 –4000> | no_limit] Description The setting is a global limitation on the maximum number of users that can be learned via 802.1X authentication.
  • Page 212 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show accounting service Restrictions None. Example usage: To display the accounting service: D G S –3 4 26 :5 # s ho w a cc o u nt i ng s e r vi c e C o m ma n d: s h o w a cc ou n t in g s er v i ce A c c ou n ti ng S ta t e - - - -- - -- -- - - -- - -- --...
  • Page 213 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (ACL) C CCESS ONTROL OMMANDS ® The xStack DGS–3400 implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address. Access profiles allows establishment of a criteria to determine whether or not the Switch will forward packets based on the information contained in each packet’s header.
  • Page 214 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters {src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]} (1) port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]} |replace_dscp <value 0-63>| counter [enable | disable]} | mirror | deny] | packet_content {offset_chunk_1 <hex0x0-0xffffffff>...
  • Page 215 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create access_profile (for Ethernet) Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet header. Masks entered can be combined with the values the Switch finds in the specified frame header fields.
  • Page 216 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (for Ethernet) access profile when it is created with the create access_profile command. The lower the profile ID, the higher the priority the rule will be given. add access_id <value 1–128>...
  • Page 217 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (for Ethernet) target port must be set. deny – Specifies that packets that match the access profile are not permitted to be forwarded by the Switch and will be filtered. {time_range <range_name 32>} –...
  • Page 218 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create access_profile (IP) • type − Specifies that the Switch will examine each frame’s IGMP Type field. Parameters tcp − Specifies that the Switch will examine each frames Transport Control Protocol •...
  • Page 219 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (IP) Parameters profile_id <value 1–6> – Enter an integer between 1 and 6 that is used to identify the access profile that will be configured with this command. This value is assigned to the access profile when it is created with the create access_profile command.
  • Page 220 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (IP) permit – Specifies that packets that match the access profile are permitted to be forwarded by the Switch. priority <value 0–7> − This parameter is specified if you want to re–write the 802.1p •...
  • Page 221 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create access_profile (packet content ) Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet header. Packet content masks entered will specify certain bytes of the packet header to be identified by the Switch.
  • Page 222 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (packet content) Description This command is used to set the rule for a previously configured access profile setting based on packet content mask. These rules will determine if the Switch will forward or filter the identified packets, based on user configuration specified in this command.
  • Page 223 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (packet content) deny – Specifies that packets that match the access profile are not permitted to be forwarded by the Switch and will be filtered. {time_range <range_name 32>} – Choose this parameter and enter the name of the Time Range settings that has been previously configured using the config time_range command.
  • Page 224 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te a c c es s _p ro f i le pr of i l e_ i d 4 i p v6 cl as s fl o wl ab e l C o m ma n d: c r e at e a cc e s s_ p ro fi l e p r of il e _ id 4 ip v 6 c l as s f l ow l ab el S u c ce s s.
  • Page 225 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config access_profile profile_id (ipv6) priority <value 0–7> − This parameter is specified to re–write the 802.1p default • priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded to.
  • Page 226 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete access_profile Purpose Used to delete a previously created access profile. Syntax delete access_profile {profile_id <value 1–6> | all} Description This command is used to delete a previously created access profile on the Switch. profile_id <value 1–6>...
  • Page 227 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a cc e s s_ p ro fi l e C o m ma n d: s h o w a cc es s _ pr o fi le A c c es s P ro f i le Ta bl e A c c es s P ro f i le ID : 1 T Y PE : E th e rn et...
  • Page 228 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create cpu access_profile 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset 64–79 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0– 0xffffffff>} (1) ipv6 {[class | flowlabel] (1) | source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>]} (1) profile_id <value 1–5>...
  • Page 229 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create cpu access_profile • offset_0–15 – Enter a value in hex form to mask the packet from byte 0 to byte 15. • offset_16–31 – Enter a value in hex form to mask the packet from byte 16 to byte •...
  • Page 230 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te c p u a c ce ss _ p ro f il e p r of i le _i d 1 C o m ma n d: d e l et e c pu a cc e ss _p r o fi l e pr o f il e _i d 1 S u c ce s s.
  • Page 231 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config cpu access_profile profile_id • source_ip <ipaddr> − Specifies that the access profile will apply to only packets with this source IP address. • destination_ip <ipaddr> − Specifies that the access profile will apply to only packets with this destination IP address.
  • Page 232 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config cpu access_profile profile_id address. destination_ipv6 <ipv6addr> − Specifies an IPv6 address mask for the destination • IPv6 address. <portlist>| all – Enter the port or ports to which this access profile applies. The port list is specified by listing the lowest switch number and the beginning port number on that switch, separated by a colon.
  • Page 233 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w c pu a cc e ss _p r o fi l e C o m ma n d: s h o w c pu a c c es s _p ro f i le C P U I n te rf a c e F il te r i ng St at e : D i sa bl e d C P U I n te rf a c e A cc es s Pr o fi le T ab l e A c c es s P ro f i le ID : 1...
  • Page 234: Time Range Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ANGE OMMANDS The Time Range commands are used in conjunction with the Access Profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the Switch.
  • Page 235 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig t i m e_ r an ge t im e 1 ho u r s s ta rt _ t im e 6 :3 0 : 00 en d_ t i me 21 :4 0 : 00 w e e kd a ys m o n –f r i C o m ma n d: c o n fi g t im e _ ra n ge t i m e1 ho ur s st a rt _t i m e 6 :3 0: 0 0 e n d_ ti m e 2 1 :4 0: 0 0 w e e kd a ys m o n –f r i...
  • Page 236: Safeguard Engine Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 237 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config safeguard_engine Purpose To config ARP storm control for system. Syntax config safeguard_engine {state [enable | disable] | utilization {rising <value 20– 100> | falling <value 20–100>} | trap_log [enable | disable] | mode [strict | fuzzy]} Description Use this command to configure Safeguard Engine to minimize the effects of an ARP storm.
  • Page 238 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s af e g ua r d_ en g i ne C o m ma n d: s h o w s af eg u a rd _ en gi n e S a f eg u ar d e n gi n e st a t e D i s ab l ed S a f eg u ar d e n gi n e cu r r en t s ta t u s...
  • Page 239 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows you to further sub–divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied. Command Parameters config traffic_segmentation...
  • Page 240 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show traffic_segmentation Purpose Used to display the current traffic segmentation configuration on the Switch. Syntax show traffic_segmentation {<portlist>} Description This command is used to display the current traffic segmentation configuration on the Switch.
  • Page 241 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config sntp...
  • Page 242 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show sntp Purpose Used to display the SNTP information. Syntax show sntp Description This command is used to display SNTP settings information including the source IP address, time and poll interval. Parameters None.
  • Page 243 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To disable SNTP: D G S –3 4 26 :5 # d is a bl e s n tp C o m ma n d: d i s ab l e sn t p S u c ce s s.
  • Page 244 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig t i m e_ z on e o p er a to r + ho u r 2 m i n 3 0 C o m ma n d: c o n fi g t im e _ zo n e op e r at o r + h o ur 2 mi n 30 S u c ce s s.
  • Page 245 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dst Parameters e_date – Configure the specific date (day of the month) to begin DST. • <end_date 1–31> – The end date is expressed numerically. offset [30 | 60 | 90 | 120] – Indicates number of minutes to add or to subtract during the summertime.
  • Page 246: Dhcp Relay Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual DHCP R ELAY OMMANDS The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1–16>...
  • Page 247 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 $ 00 :4 # c on f ig d h c p_ r el ay h op s 2 t i m e 2 3 C o m ma n d: c o n fi g d hc p _ re l ay h o p s 2 t im e 23 S u c ce s s.
  • Page 248 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the switch. Syntax config dhcp_relay option_82 state [enable | disable] Description This command is used to configure the state of DHCP relay agent information option 82 of the switch.
  • Page 249 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig d h c p_ r el ay o pt i on _8 2 ch e ck e n a bl e C o m ma n d: c o n fi g d hc p _ re l ay o p t io n _8 2 c h ec k e na b l e S u c ce s s.
  • Page 250 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w d hc p _ re l ay C o m ma n d: s h o w d hc p_ r e la y D H C P/ B OO TP R el a y St a t us : E n ab le d D H C P/ B OO TP H op s C ou n t L i mi t...
  • Page 251 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay Description This command is used to disable the DHCP/BOOTP relay function on the Switch. Parameters None.
  • Page 252 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp_relay option_60 add Purpose This command is used to add an entry for DHCP relay option 60 Syntax config dhcp_relay option_60 add string <mutiword 255> relay <ipaddr> [exact- match|partial-match] Description This command is used to configure the option 60 relay rules.
  • Page 253 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp_relay option_60 delete Purpose This command is used to delete dhcp_relay option_60 entry. Syntax config dhcp_relay option_60 delete [string <mutiword 255> {relay <ipaddr>} |ipaddress <ipaddr>| all |default {<ipaddr>}] Description This command is used to delete the entry specifed by a user.
  • Page 254 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w d hc p _ re l ay o p t io n _6 0 C o m ma n d: s h o w d hc p_ r e la y o pt i o n_ 6 0 D e f au l t Pr o c es s in g M o de : D ro p D e f au l t Se r v er s : M a t ch i ng R u l es :...
  • Page 255 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp_relay option_61 add Purpose This command is used to add a rule for DHCP relay option 61. Syntax config dhcp_relay option_61 add [mac_address <macaddr> |string <desc 255>] [relay <ipaddr>| drop] Description This command is used to add a rule to determine the relay server based on option 61.
  • Page 256 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp_relay option_61 delete Purpose This command is used to delete an option 61 rule. Syntax config dhcp_relay option_61 delete [mac_address <macaddr> | string <desc 255>|all] Description This command is used to delete an option 61 rule. Parameters mac_address –...
  • Page 257: Routing Table Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OUTING ABLE OMMANDS The Switch supports only static routing for IPv4 and IPv6 formatted addressing. Users can create up to 128 static route entries for IPv4 and IPv6 combined. Manually configured static and the local route can route IP packets. For each device that is a part of the DGS–3400 network, users may only configure one IP address as a primary or backup route.
  • Page 258 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # c re a te i p r ou t e 10 . 4 8. 7 4. 12 1 / 8 1 0. 1. 1 . 25 5 p ri m a ry C o m ma n d: c r e at e i pr o u te 10 .4 8 .
  • Page 259 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 P: 5 # sh o w ip r o ut e s ta t i c C o m ma n d: s h o w i pr ou t e s t at ic R o u ti n g Ta b l e I P Ad d re ss / N et m as k G at e wa y...
  • Page 260 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete ipv6route Purpose Used to delete an static IPv6 route entry from the Switch’s IP routing table. Syntax delete ipv6route [[default |<ipv6networkaddr>] [<ipif_name 12> <ipv6addr> | <ipv6addr> ] |all] Description This command is used to delete an existing static IPv6 entry from the Switch’s IP routing table.
  • Page 261 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # sh o w ip v 6 ro u te C o m ma n d: s h o w i pv 6r o u te R o u ti n g Ta b l e I P v 6 P re fi x : 1 2 34 :: / 3 2 P r ot o co l: S ta t ic...
  • Page 262: Mac Notification Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interval <int 1–2147483647>...
  • Page 263 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e m a c_ n ot if i c at i on C o m ma n d: d i s ab l e ma c _ no t if ic a t io n S u c ce s s.
  • Page 264 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig m a c _n o ti fi c a ti o n po r t s 1 :7 e n a bl e C o m ma n d: c o n fi g m ac _ n ot i fi ca t i on po rt s 1: 7 e na b l e S u c ce s s.
  • Page 265 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w m ac _ n ot i fi ca t i on po rt s C o m ma n d: s h o w m ac _n o t if i ca ti o n p o rt s P o r t # MA C Ad d re ss T ab l e No t i fi c at io n St a te –...
  • Page 266: Access Authentication Control Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows users secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 267 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login method_list_name <string 15> config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local | none} (1) delete authen_login method_list_name <string 15>...
  • Page 268 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command is used to enable an administrator–defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 269 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h e n_ p ol ic y C o m ma n d: s h o w a ut he n _ po l ic y A u t he n ti ca t i on Po li c y : E na bl e d D G S –3 4 26 :5 # create authen_login method_list_name...
  • Page 270 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authen_login Parameters the TACACS protocol from the remote TACACS server hosts of the TACACS server group list. xtacacs – Adding this parameter will require the user to be authenticated using the XTACACS protocol from the remote XTACACS server hosts of the XTACACS server group list.
  • Page 271 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig a u t he n _l og i n d e fa ul t me t ho d x t ac a cs t a c ac s + lo c a l C o m ma n d: c o n fi g a ut h e n_ l og in d ef a ul t m e th o d xt a c ac s t ac a c s+ lo ca l S u c ce s s.
  • Page 272 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To view the authentication login method list named Tiberius: D G S –3 4 26 :5 # s ho w a ut h e n_ l og in m et h od _l i s t_ n am e T i be r iu s C o m ma n d: s h o w a ut he n _ lo g in m e t ho d _l is t _ na m e Ti b e ri u s M e t ho d L is t Na m e P r io r it y...
  • Page 273 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authen_enable that point, the Switch will restart the same sequence with the following protocol listed, xtacacs. If no authentication takes place using the xtacacs list, the local_enable password set in the Switch is used to authenticate the user.
  • Page 274 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig a u t he n _e na b l e m et ho d _ li s t_ na m e T i be ri u s m e th od t ac a cs x t a ca c s l o c al C o m ma n d: c o n fi g a ut h e n_ e na bl e me t ho d_ l i st _ na me T ib e ri us m et h od t a c ac s x ta c a cs l o c al...
  • Page 275 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show authen_enable Purpose Used to display the method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch. Syntax show authen_enable [default | method_list_name <string 15> | all] Description This command is used to delete a user–defined method list of authentication methods for promoting user level privileges to Administrator level privileges.
  • Page 276 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authen application Purpose Used to configure various applications on the Switch for authentication using a previously configured method list. Syntax config authen application [console | telnet | ssh | http | all] [login | enable] [default | method_list_name <string 15>] Description This command is used to configure Switch configuration applications (console, Telnet,...
  • Page 277 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h e n a pp li c a ti o n C o m ma n d: s h o w a ut he n ap p li ca t i on A p p li c at io n Lo gi n Me t ho d L i st En a b le Me th o d L i st...
  • Page 278 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te a u t he n s er v e r_ h os t 1 0 .1 . 1. 12 1 pr o to co l ta c ac s+ p or t 1 23 4 t i m eo u t 10 r et r an sm i t 5 C o m ma n d: c r e at e a ut h e n s er ve r _ ho s t 10 .
  • Page 279 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete authen server_host Purpose Used to delete a user–defined authentication server host. Syntax delete authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] Description This command is used to delete a user–defined authentication server host previously created on the Switch.
  • Page 280 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w a ut h e n s er ve r _ ho s t C o m ma n d: s h o w a ut he n se r ve r_ h o st I P Ad d re ss P ro to c o l Po r t...
  • Page 281 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authen server_group Purpose Used to configure a user–defined authentication server group. Syntax config authen server_group [tacacs | xtacacs | tacacs+ | radius | <string 15>] [add | delete] server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] Description This command is used to configure an authentication server group.
  • Page 282 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete authen server_group Purpose Used to delete a user–defined authentication server group. Syntax delete authen server_group <string 15> Description This command is used to delete an authentication server group. Parameters <string 15>...
  • Page 283 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authen parameter response_timeout Purpose Used to configure the amount of time the Switch will wait for a user to enter authentication before timing out. Syntax config authen parameter response_timeout <int 0–255> Description This command is used to set the time the Switch will wait for a response of authentication from the user.
  • Page 284 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show authen parameter Purpose Used to display the authentication parameters currently configured on the Switch. Syntax show authen parameter Description This command is used to display the authentication parameters currently configured on the Switch, including the response timeout and user authentication attempts.
  • Page 285 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config admin local_enable Purpose Used to configure the local enable password for administrator level privileges. Syntax config admin local_enable Description This command is used to configure the locally enabled password for the enable admin command.
  • Page 286: Ssh Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: •...
  • Page 287 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le s s h C o m ma n d: e n a bl e s sh T E L NE T w il l be di sa b l ed wh en e na b le S S H . S u c ce s s.
  • Page 288 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig s s h a u th mo d e p a ss wo r d e n ab le C o m ma n d: c o n fi g s sh a ut h mo de p as s wo rd e na b le S u c ce s s.
  • Page 289 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 P: 5 # co n fi g s s h s er ve r ma x se ss i o n 3 c on t i me o ut 3 0 0 a u th fa i l 2 po rt 1 r e k ey 10 mi n C o m ma n d: c o n fi g s sh s er v er m a x se s si on 3 c o nt im e o ut 30 0 a u th f ai l 2 po r t 1 r e ke y 1 0 m in...
  • Page 290 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the SSH user: D G S –3 4 26 :5 # co n fi g s s h u se r R u bi o a ut h m od e P as s w or d C o m ma n d: c o n fi g s sh u se r R ub i o a u th mo d e P a ss wo r d S u c ce s s.
  • Page 291 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1 | RSA | DSA] [enable | disable] Description This command is used to configure the desired type of SSH algorithm used for...
  • Page 292 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s sh a lg o ri th m C o m ma n d: s h o w s sh a l g or i th m E n c ry p ti on A lg o ri th m –...
  • Page 293: Ssl Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: 1.
  • Page 294 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
  • Page 295 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
  • Page 296 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To set the SSL cachetimeout for 7200 seconds: D G S –3 4 26 :5 # c on f ig s s l c a ch et i m eo u t ti m e ou t 7 20 0 C o m ma n d: c o n fi g s sl c ac h et im e o ut ti me o u t 7 20 0 S u c ce s s.
  • Page 297 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s sl c er t if ic a t e C o m ma n d: s h o w s sl c e r ti f ic at e L o a de d w it h RS A C er t i fi c at e! D G S –3 4 26 :5 # download SSL certificate...
  • Page 298: Jumbo Frame Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual UMBO RAME OMMANDS Certain switches can support jumbo frames (frames larger than 1536 bytes). To transmit frames of up to 9K (and 9220 Bytes tagged), the user can increase the maximum transmission unit (MTU) size from the default of 1536 by enabling the Jumbo Frame command.
  • Page 299 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e j u mb o _f ra m e C o m ma n d: d i s ab l e ju m b o_ f ra me S u c ce s s.
  • Page 300 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D–L IP M (SIM) C INGLE ANAGEMENT OMMANDS Simply put, D–Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using D–Link Single IP Management (labeled here as SIM) must conform to the following rules: •...
  • Page 301 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual With SIM enabled, the applications in the CS will redirect the packet instead of executing the packets. The applications will decode the packet from the administrator, modify some data, then send it to the MS. After execution, the CS may receive a response packet from the MS, which it will encode and send back to the administrator.
  • Page 302 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le s i m C o m ma n d: e n a bl e s im S u c ce s s. D G S –3 4 26 :5 # disable sim Purpose...
  • Page 303 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show sim Purpose Used to view the current information regarding the SIM group on the Switch. Syntax show sim {[candidates {<candidate_id 1–100>} | members {<member_id 1–32>} | group {commander_mac <macaddr>}] | neighbor]} Description This command is used to display the current information regarding the SIM group on the Switch, including the following:...
  • Page 304 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s im C o m ma n d: s h o w s im S I M V e rs io n : VE R –1 .6 1 F i r mw a re V e r si o n : 2.
  • Page 305 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w s im g ro u p C o m ma n d: s h o w s im g r o up S I M G r ou p N a me : de f a ul t M A C Ad d r es s P la tf o r m /...
  • Page 306 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config sim_group Purpose Used to add candidates and delete members from the SIM group. Syntax config sim_group [add <candidate_id 1–100> {<password>} | delete <member_id 1– 32>] Description This command is used to add candidates and delete members from the SIM group by ID number.
  • Page 307 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [[commander {group_name <groupname 64> | candidate] | dp_interval <sec 30–90> | hold_time <sec 100–255>] Description This command is used to configure parameters of switches of the SIM.
  • Page 308 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # co n fi g s i m c om ma n d er C o m ma n d: c o n fi g s im c om m an de r S u c ce s s.
  • Page 309 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To download configuration files: D G S –3 4 26 :5 # d o wn lo a d s im c o n fi g ur at i o n_ f ro m_ t f tp 1 0.
  • Page 310: Poe Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OMMANDS ® The xStack DGS–3426P supports Power over Ethernet (PoE) as defined by the IEEE 802.3af specification. Ports 1–24 supply 48 ® VDC power to PDs over Category 5 or Category 3 UTP Ethernet cables. The xStack DGS–3426P follows the standard PSE ®...
  • Page 311 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config poe system Used to configure the parameters for the whole PoE system. Purpose config poe system {units [<unitlist> | all]} {power_limit <value 37–370> | Syntax power_disconnect_method [deny_next_port | deny_low_priority_port] management_mode [power_limit | auto]} (1) This command is used to configure the parameters for the whole PoE system.
  • Page 312 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config poe ports Used to configure the PoE port settings. Purpose config poe ports [all | <portlist>] {state [enable | disable] | priority [critical | high | Syntax low] | power_limit [class_0 | class_1 | class_2 | class_3 | user_define <value 1000– 16800>]} (1) This command is used to configure the PoE port settings.
  • Page 313 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 P: 5 # co n fi g p o e p or ts 1 :1 – 1: 3 s t at e e na b l e p ri or i t y c ri ti c a l p ow er _ l im i t c l a ss _ 0 C o m ma n d: c o n fi g p oe p or t s 1: 1 –...
  • Page 314 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 P: 5 # sh o w po e po r ts C o m ma n d: s h o w p oe p o r ts P o r t S t a te Pr i o ri t y...
  • Page 315 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 P: 5 # sh o w po e sy s te m C o m ma n d: s h o w p oe s y s te m U n i t 1 P o E S ys te m In f or ma t i on –...
  • Page 316 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OMMAND ISTORY The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config command_history <value 1–40> show command_history Each command is listed, in detail, in the following sections.
  • Page 317 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To display the parameters for a specific command: D G S –3 4 26 :5 # ? c on fi g st p C o m ma n d: ? c o nf i g st p C o m ma n d: c o n fi g s tp U s a ge : { ma x a ge <v al u e 6 –...
  • Page 318 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w c om m a nd _ hi st o r y C o m ma n d: s h o w c om ma n d _h i st or y ? s ho w s h o w v la n s h o w c om ma n d h i st or y...
  • Page 319 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ODIFY ANNER AND ROMPT OMMANDS Administrator and Operator level users can modify the login banner (greeting message) and command prompt by using the commands described below. Command Parameters config greeting_message {default} config command_prompt [<string 16>...
  • Page 320 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # co n fi g g r ee t in g_ m e ss a ge C o m ma n d: c o n fi g g re e t in g _m es s a ge G r e et i ng M e s sa g es E d i to r = = = == = == == = = == = == == = = == = == == = = == = == == = = == = == == = = == = == == = = == = == == D G S–...
  • Page 321 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config command prompt Purpose Used to configure the command prompt. Syntax config command_prompt [<string 16> | username | default] Description This command is used to change the command prompt. Parameters string 16 –...
  • Page 322: Jwac Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual JWAC C OMMANDS The Switch’s Japanese Web-based Access Control (JWAC) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable jwac disable jwac...
  • Page 323 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters show jwac auth_state ports <portlist> show jwac ports <portlist> config jwac auth_failover [enable | disable] config jwac authorization network {radius [enable| disable]| local [enable| disable]} (1) config jwac authenticate_page <...
  • Page 324 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e j w ac C o m ma n d: d i s ab l e jw a c S u c ce s s.
  • Page 325 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable jwac forcible_logout Purpose Used to enable the JWAC forcible logout function. Syntax enable jwac forcible_logout Description When forcible logout is enabled, a PING packet from an authenticated host to the JWAC Switch with TTL=1 will be regarded as a logout request, and the host will be moved back to the unauthenticated state.
  • Page 326 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le j w a c u dp _f i l te r in g C o m ma n d: e n a bl e j wa c ud p _f il t e ri n g S u c ce s s.
  • Page 327 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable jwac quarantine_server_monitor Purpose Used to disable the JWAC quarantine server monitor. Syntax disable jwac quarantine_server_monitor function Description This command is used to disable the JWAC quarantine server monitor. Parameters None.
  • Page 328 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac redirect Purpose Used to configure redirect destination and delay time before an unauthenticated host is redirected to the Quarantine Server or the JWAC login Web page. Syntax config jwac redirect {destination [quarantine_server | jwac_login_page] | delay_time <sec 0–10>} Description...
  • Page 329 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig j w a c v ir tu a l _i p 1 .1 . 1 .1 C o m ma n d: c o n fi g j wa c vi r tu al _ i p 1 .1 .1 . 1 S u c ce s s.
  • Page 330 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig j w a c c le ar _ q ua r an ti n e _s e rv er _ u rl C o m ma n d: c o n fi g j wa c cl e ar _q u a ra n ti ne _ s er v er _u r l S u c ce s s.
  • Page 331 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac switch_http_port Purpose Used to configure the TCP port which the JWAC Switch listens to. Syntax config jwac switch_http_port <tcp_port_number 1–65535> {[http | https]} Description This command is used to configure the TCP port which the JWAC Switch listens to. This port number is used in the second stage of the authentication.
  • Page 332 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac ports Purpose Used to configure the JWAC port state. Syntax config jwac ports [<portlist> | all] {state [enable | disable] | max_authenticating_host <value 0–50> | aging_time [infinite | <min 1–1440>] | idle_time [infinite | <min 1–1440>] | block_time [<sec 0–300>] | auth_mode [host_based | port_based] }(1) Description...
  • Page 333 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac radius_protocol Purpose Used to configure radius protocol used by JWAC. Syntax config jwac radius_protocol [local | pap | chap | ms_chap | ms_chapv2 | eap_md5] Description This command is used to specify the RADIUS protocol used by JWAC to complete RADIUS authentication.
  • Page 334 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c re a te j w a c u se r 1 1 22 3 3 C o m ma n d: c r e at e j wa c us e r 11 2 2 33 E n t er a ca s e –s e ns it i v e n ew p a s sw o rd :* * * E n t er th e n e w p as sw o r d a ga in f or co nf i r ma t io n: * * * S u c ce s s.
  • Page 335 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # de l et e j w ac us er 1 12 2 33 C o m ma n d: d e l et e j wa c us e r 11 2 2 33 S u c ce s s.
  • Page 336 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # cl e ar j w a c a ut h_ s t at e p or t s a l l bl o c ke d C o m ma n d: c l e ar jw ac a ut h _s ta t e p o rt s a l l b lo ck e d S u c ce s s.
  • Page 337 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show jwac auth_state ports Purpose Used to display JWAC client host information. Syntax show jwac auth_state ports {<portlist>} Description This command is used to display the information for JWAC client hosts. If port 1 is in host-based mode: (1) mac 00-00-00-00-00-01 is authenticated without VLAN assigned (may be the specified target VLAN does not exist or the target VLAN has not been specified), the ID...
  • Page 338 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # s ho w j wa c au t h_ st a t e p or ts 1 -3 C o m ma n d: s h o w j wa c a u th _ st at e po r ts 1 - 3 P o r t M A C A d d re s s S t a te V I D...
  • Page 339 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac authentication_page element Purpose Used to customize the authentication page. Syntax config jwac authentication_page element [japanese|english] [default|page_title <desc 128> |login_window_title <desc 32>|user_name_title <desc 16>|password_title <desc 16>| logout_window_title <desc 32>] Description This command is used by administrator to customize the JWAC authentication page.
  • Page 340 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config jwac authorization network Purpose Used to enable or disable the accepting of an authorized configuration. Syntax config jwac authorization network {radius [enable| disable]| local[enable| disable]} Description This command is used by administrators to configure an authorization network for JWAC. When the authorization is enabled for JWAC’s RADIUS, the authorized data assigned by the RADUIS server will be accepted if the global authorization network is enabled.
  • Page 341 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show jwac authenticate _page element Purpose Used to show the element mapping of the customize authenticate page. Syntax show jwac authenticate_page element Description This command is used to disaplay the elements of the customize authenticate page. Parameters None Restrictions...
  • Page 342: Cable Diagnostics Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ABLE IAGNOSTICS OMMANDS The cable diagnostics commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports |all] [<portlist>...
  • Page 343: Mac-Based Vlan Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual MAC- BASED OMMANDS The MAC-based VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create mac_based_vlan <macaddr> vlan <vlan_name 32> mac_address delete mac_based_vlan {mac_address <macaddr>...
  • Page 344 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d el e te m a c _b a se d_ v l an ma c_ a d dr e ss 0 0 – 00 – 00 –0 0 – 00 – 01 v l a n d ef au l t C o m ma n d: d e l et e m ac _ b as e d_ vl a n m a c ma c _ ad d re ss 0 0–...
  • Page 345: Loop-Back Detection (Lbd) Global Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (LBD) G BACK ETECTION LOBAL OMMANDS The Loop-back Detection (LBD) Global commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config loopdetect...
  • Page 346 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config loopdetect ports Purpose Used to configure loop–back detection function for the port on the switch. Syntax config loopdetect ports [<portlist>| all] state [enable | disable ] Description This command is used to enable the loop–back detection function on specific ports. Parameters portlist –...
  • Page 347 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # d is a bl e l o op d et ec t C o m ma n d: d i s ab l e lo o p de t ec t S u c ce s s.
  • Page 348 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # sh o w lo o p de t ec t p or t s 1– 8 C o m ma n d: s h o w l oo pd e t ec t po r t s 1 –8 P o r t L oo p d et e ct S t a te...
  • Page 349 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 P: 5 # co n fi g l o op d et ec t tr a p lo o p _d e te ct e d C o m ma n d: c o n fi g l oo p d et e ct t r a p l oo p_ d e te c te d S u c ce s s.
  • Page 350: Serial Number Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ERIAL UMBER OMMANDS The Serial Number commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show switch show stack_device Each command is listed, in detail, in the following sections.
  • Page 351 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Clipaging : Enabled MAC Notification : Disabled Port Mirror : Disabled SNTP : Disabled HOL Prevention State : Enabled Syslog Global State : Disabled Single IP Management : Disabled Dual Image : Supported Password Encryption Status : Disabled...
  • Page 352 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show stack_device Purpose Used to display the information for devices in the stack. Syntax show stack_device Description This command is used to display stack device information. Parameters None. Restrictions None.
  • Page 353 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual 802.1Q VLAN C OMMANDS The 802.1Q VLAN Function commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32 >...
  • Page 354 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete vlan Purpose Used to delete a previously configured VLAN on the switch. Syntax delete vlan <vlan_name> This command is used to delete a previously configured VLAN on the Switch. Description Parameters vlan_name –...
  • Page 355 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config vlan delete ports Purpose Used to delete one or more ports from a previously configured VLAN. Syntax config vlan <vlan_name> delete <portlist> Description This command is used to delete one or more ports from a previously configured VLAN. If based on VLAN ID to configure VLAN, multiple VLANs can be configured at a time.
  • Page 356 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # e na b le g v r p C o m ma n d: e n a bl e g vr p S u c ce s s.
  • Page 357 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w v la n C o m ma n d: s h o w v la n V I D V LA N N am e : d ef a ul t V L A N T YP E...
  • Page 358 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # sh o w gv r p C o m ma n d: s h o w g vr p l o b al GV RP : D i sa bl e d P o r t P V I D GV RP...
  • Page 359: Mac-Based Access Control (Mac) Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual MAC- (MAC) C BASED CCESS ONTROL OMMANDS The MAC-based Access Control (MAC) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable mac_based_access_control...
  • Page 360 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To enable MAC-based access control: D G S –3 4 26 :5 # en a bl e m a c_ b as ed _ a cc e ss _c o n tr o l C o m ma n d: e n a bl e m ac _ b as e d_ ac c e ss _ co nt r o l S u c ce s s.
  • Page 361 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config mac_based_access_control method Purpose Used to configure the MAC-based access control authenticating method. Syntax config mac_based_access_control method [local | radius] Description This command is used to specify to authenticate via local database or via RADIUS server.
  • Page 362 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config mac_based_access_control ports Purpose Used to configure the parameters of MAC–based access control. Syntax config mac_based_access_control ports [<portlist> | all] {state [enable | disable] | mode [port_based | host_based] | aging_time [infinite | <min 1–1440>] | block_time [infinite|<sec 1-300>] | max_users [no_limit | <value 1 - 4000>]} (1) Description This command is used to configure the MAC-based access control setting.
  • Page 363 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig m a c _b a se d_ a c ce s s_ co n t ro l p or t s 1 – 8 mo d e p o rt _b a s ed C o m ma n d: c o n fi g m ac _ b as e d_ ac c e ss _ co nt r o l p or ts 1 –...
  • Page 364 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual clear mac_based_access_control auth_state Purpose Used to reset the current state of a user. The re–authentication will be started after the user traffic is received again. Syntax clear mac_based_access_control auth_state [ports [all | portlist] | mac_addr <macaddr>] Description This command is used to clear the authentication state of a user (or port).
  • Page 365 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config mac_based_access_control_local mac Purpose Used to configure the local database entry. Syntax config mac_based_access_control_local mac <macaddr> [vlan <vlan_name 32>| vlanid <vlanid 1–4094>] Description This command is used to modify a database entry. Parameters mac –...
  • Page 366 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show mac_based_access_control Purpose Used to display the MAC-based access control global and port settings. Syntax show mac_based_access_control {ports {<portlist> }} Description This command is used to display the MAC-based access control global and port settings. Parameters ports –...
  • Page 367 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show mac_based_access_control_local Purpose Used to display a MAC-based access control local database. Syntax show mac_based_access_control_local {[mac<macaddr> | [vlan <vlan_name 32>|vlanid <vlanid 1–4094>]]} Description This command is used to display the MAC-based access control local database. Parameters mac –...
  • Page 368 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # s ho w m ac _ b as e d_ ac c e ss _ co nt r o l_ l oc al v la n d ef a u lt C o m ma n d: s h o w m ac _b a s ed _ ac ce s s _c o nt ro l _ lo c al v l a n d ef au l t M A C A d dr es s V I D...
  • Page 369 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To configure the MAC-based access control authentication failover: D G S –3 4 26 :5 # c on f ig m a c _b a se d_ a c ce s s_ co n t ro l a ut h _ fa i lo ve r en a bl e C o m ma n d: c o n fi g m ac _ b as e d_ ac c e ss _ co nt r o l a ut h_ f a il o ve r e n ab l e S u c ce s s.
  • Page 370 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig m a c _b a se d_ a c ce s s_ co n t ro l m ax _ u se r s 12 6 C o m ma n d: c o n fi g m ac _ b as e d_ ac c e ss _ co nt r o l m ax _u s e rs 12 6 S u c ce s s.
  • Page 371: Q-In-Q Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual -Q C OMMANDS The Q-in-Q commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable qinq disable qinq show qinq config qinq ports [<portlist>|all] {role [nni | uni] | missdrop [enable | disable] | tpid <hex 0x1 -...
  • Page 372 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable qinq Purpose Used to disable the Q-in-Q mode. Syntax disable qinq Description This command is used to disable the Q-in-Q mode. All dynamically learned L2 address will be cleared. All dynamically registered VLAN entries will be cleared.
  • Page 373 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config qinq ports Purpose Used to configure a Q-in-Q port. Syntax config qinq ports [<portlist>|all] {role [nni | uni] | missdrop [enable | disable] | tpid <hex 0x1–0xffff>} (1) Description The command is used to configure the Q-in-Q VLAN mode for ports, include: port role in Q-in-Q mode, enable/disable SP-VLAN assignment miss drop, and port TPID.
  • Page 374 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :4 # s ho w q in q po r t 1: 1 - 1: 4 C o m ma n ds : s h ow qi nq p or t s 1: 1 - 1: 4 P o r t R ol e Mi s s D r op...
  • Page 375 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete vlan_translation ports Purpose Used to delete pre-created VLAN translation rules. Syntax delete vlan_translation ports [<portlist> | all] {cvid <vidlist>} Description The command is used to delete pre-created VLAN translation rules. ports −...
  • Page 376: Lldp Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual LLDP C OMMANDS The Link Layer Discovery Protocol (LLDP) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable lldp disable lldp config lldp...
  • Page 377 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable lldp Purpose Used to enable LLDP operation on the Switch. Syntax enable lldp Description This command is used as a global control for the LLDP function. When this function is enabled, the switch can start to transmit LLDP packets and receive and process the LLDP packets.
  • Page 378 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig l l d p m es sa g e _t x _i nt e r va l 3 0 C o m ma n d: c o n fi g l ld p me s sa ge _ t x_ i nt er v a l 3 0 S u c ce s s.
  • Page 379 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config lldp reinit_delay Purpose Change the minimum time of the reinitialization delay interval. Syntax config lldp reinit_delay <sec 1-10> Description An re-enabled LLDP port will wait for reinit_delay after last disable command before reinitializing.
  • Page 380 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config lldp ports notification Purpose Used to configure each port for sending notification to configured SNMP trap receiver(s). Syntax config lldp ports [<portlist> | all] notification [enable | disable] Description This command is used to enable or disable each port for sending changes notification to configured SNMP trap receiver(s) if an LLDP data change is detected in an...
  • Page 381 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config lldp ports mgt_addr Purpose Used to enable or disable port(s) specified for advertising indicated management address instance. Syntax config lldp ports [<portlist> | all] mgt_addr [ipv4 <ipaddr> | ipv6 <ipv6addr>] [enable | disable] Description This command is used to specify whether the system’s IP address needs to be advertised...
  • Page 382 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig l l d p p or ts a ll ba si c _ tl v s sy s t em _ na me e na b le C o m ma n d: c o n fi g l ld p po r ts a l l b a si c_ t l vs sy st e m _n a me e n a bl e S u c ce s s.
  • Page 383 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S –3 4 26 :5 # c on f ig l l d p p or ts a ll do t1 _ t lv _ pr ot o c ol _ vi d v l an i d 1- 3 en a bl e C o m ma n d: c o n fi g l ld p po r ts a l l d o t1 _t l v _p r ot oc o l _v i d vl a n id 1- 3 e n ab l e S u c ce s s.
  • Page 384 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config lldp dot1_tlv_protocol_identity GVRP, STP(including MSTP), and LACP protocol identity is enabled on this port and it is enabled to be advertised, then this protocol identity will be advertised. The default state is disabled.
  • Page 385 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config lldp forward_message Purpose Used to configure the forwarding of LLDPDU packets when LLDP is disabled. Syntax config lldp forward_message [enable | disable] Description When LLDP is disabled and LLDP forward_message is enabled, the received LLDPDU packets will be forwarded.
  • Page 386 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show lldp mgt_addr Purpose Used to display the LLDP management address information. Syntax show lldp mgt_addr {[ipv4 <ipaddr> | ipv6 <ipv6addr>]} Description This command is used to displays the LLDP management address information. Parameters ipv4 –...
  • Page 387 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Enabled VLAN Name (None) Enabled Protocol_Identity (None) MAC/PHY Configuration/Status Disabled Power Via MDI Disabled Link Aggregation Disabled Maximum Frame Size Disabled C T R L+ C E SC q Q u it S P A CE n Ne x t P a ge...
  • Page 388 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show lldp remote_ports Purpose Used to display the information learned from the neighbor. Syntax show lldp remote_ports {<portlist>} {mode [brief | normal | detailed]} Description This command is used to display the information learned from the neighbor parameters. Due to a memory limitation, only 32 VLAN Name entries and 10 Management Address entries can be received.
  • Page 389 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show lldp statistics ports Purpose Used to display the ports LLDP statistics information. Syntax show lldp statistics ports {<portlist>} Description This command is used to display per-port LLDP statistics. Parameters <portlist>...
  • Page 390: Sflow

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual sFlow is a feature that allows users to monitor network traffic running through the switch to identify network problems through packet sampling and packet counter information of the Switch. The Switch itself is the sFlow agent where packet data is retrieved and sent to an sFlow Analyzer where it can be scrutinized and utilized to resolve the problem.
  • Page 391 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable sflow Purpose Used to enable the sFlow function on the switch. Syntax enable sflow Description This command, along with the disable sflow command, is used to enable the sFlow function on the switch without altering configurations.
  • Page 392 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create sflow analyzer_server timeout <sec 1-2000000> − Used to specify the timeout for the Analyzer server. When the server times out, all sFlow samples and counter polls associated with this server will be deleted.
  • Page 393 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the sFlow server: D G S -3 4 26 :5 # c on f ig s f l ow an al y z er _ se rv e r 1 co ll e c to r ad dr e s s 1 0. 90 . 9 0. 9 C o m ma n d: c o n fi g s fl o w a n al yz e r _s e rv er 1 c o ll ec t o ra d dr es s 10 .
  • Page 394 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # create sflow counter_poller ports Purpose Used to create the counter poller for the sFlow function of the switch. Syntax create sflow counter_poller ports [<portlist> | all] analyzer_server_id <value 1-4> {interval [disable | <sec 20-120>]} Description This command is used to configure the settings for the Switch’s counter poller.
  • Page 395 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # c on f ig s f l ow co un t e r_ p ol le r po r ts 1 i nt e rv al 5 0 C o m ma n d: c r e at e s fl o w c o un te r _ po l le r p o rt s 1 i n t er v al 5 0 S u c ce s s.
  • Page 396 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create sflow flow_sampler ports Purpose Used to configure the flow sampler settings for the sFlow function. Syntax create sflow flow_sampler ports [<portlist> | all] analyzer_server_id <value 1-4> {rate <value 0-65535> | maxheadersize <value 18-256>} Description This command is used to configure the Switch’s settings for taking sample packets from the network, including the sampling rate and the amount of the packet header to be...
  • Page 397 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config sflow flow_sampler ports Purpose Used to configure the flow sampler settings for the sFlow function. Syntax config sflow flow_sampler ports [<portlist> | all] {rate <value 0-65535> | maxheadersize <value 18-256>} (1) Description This command is used to configure the Switch’s settings for taking sample packets from the network, including the sampling rate and the amount of the packet header to be...
  • Page 398 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show sflow flow_sampler Purpose Used to display the sFlow sampler information for the sFlow function of the switch. Syntax show sflow flow_sampler Description This command is used to display the Switch’s sFlow flow sampler information. Parameters None.
  • Page 399 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual DHCP S ERVER OMMANDS For this release, the Switch now has the capability to act as a DHCP server to devices within its locally attached network. DHCP, or Dynamic Host Configuration Protocol, allows the switch to delegate IP addresses, subnet masks, default gateways and other IP parameters to devices that request this information.
  • Page 400 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Command Parameters show dhcp excluded_address show dhcp pool { <pool_name 12>} Each command is listed in detail in the following sections. create dhcp pool Purpose Used to create a DHCP pool. Syntax create dhcp pool <pool_name 12>...
  • Page 401 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create dhcp pool manual_binding Purpose Used to create a DHCP pool manual binding entry. Syntax create dhcp pool manual_binding <pool_name 12> <ipaddr> hardware_address <macaddr> {type [Ethernet | IEEE802]} Description This command is used to create a DHCP manual pool binding entry for a previously created pool.
  • Page 402 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show dhcp pool manual_binding Purpose Used to display the manual binding settings for a DHCP pool. Syntax show dhcp pool manual_binding {<pool_name 12>} Description This command is used to display the manual binding entries for the selected DHCP pool. <pool_name 12>...
  • Page 403 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual clear dhcp_binding Purpose Used to clear the DHCP binding information. Syntax clear dhcp_binding {<pool_name 12>} Description This command is used to clear the DHCP binding settings for a particular created DHCP pool.
  • Page 404 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the Ping timeout: D G S -3 4 26 :5 # c on f ig d h c p p in g_ t i me o ut 5 0 0 C o m ma n d: c o n fi g d hc p pi n g_ ti m e ou t 5 00 S u c ce s s.
  • Page 405 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp pool dns_server_address Purpose Used to configure the IP addresses of DNS servers for a specific DHCP pool. Syntax config dhcp pool dns_server_address <pool_name 12> <ipaddr> {<ipaddr>} {<ipaddr>} Description This command is used to configure the DNS server IP addresses for a specific DHCP pool for the switch.
  • Page 406 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp pool lease Purpose Used to configure the lease time of DCHP clients within a DHCP pool. Syntax config dhcp pool lease<pool_name 12> [<day 0-365> <hour 0-23> <minute 0-59> | infinite] Description This command is used to specify the lease time for the DHCP client.
  • Page 407 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp pool netbios_node_type Purpose Used to set the Net BIOS node type for the DHCP server. Syntax config dhcp pool netbios_node_type <pool_name 12> [broadcast | peer_to_peer | mixed | hybrid] Description This command is used to allow users to set the type of node server for the previously configured Net BIOS Name server.
  • Page 408 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dhcp pool next_server Purpose Used to configure the IP address of the server that has the boot file for the DHCP pool. Syntax config dhcp pool next_server <pool_name 12> <ipaddr> Description This command is used to configure the IP address of the server that has the boot file for the DHCP pool.
  • Page 409 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual DGS-3426:5#disable dhcp_server Command: disable dhcp_server Success. DGS-3426:5# show dhcp_server Purpose Used to display the DHCP server settings. Syntax show dhcp_server Description This command is used to display the DHCP server settings for its Global state, Ping packet count and Ping timeout.
  • Page 410 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete dhcp excluded_address Purpose Used to delete IP addresses that have been configured as excluded from the DHCP Server pool of addresses. Syntax delete dhcp excluded_address [begin_address <ipaddr> end_address <ipaddr> | all] Description This command is used to delete a previously set IP address, or a range of IP addresses...
  • Page 411 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show dhcp pool Purpose Used to show the DHCP pool information. Syntax show dhcp pool {<pool_name 12>} Description This command is used to display the DHCP pool information. Entering the command without the pool name will display all DHCP pool information on the switch.
  • Page 412: Dhcp Server Screening Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual DHCP S ERVER CREENING OMMANDS The DHCP Server Screening Commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. The DHCP Server Screening commands allow you not only to restrict all DHCP server packets but also to receive any specified DHCP server packets by any specified DHCP client, it is useful when one or more than one DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients.
  • Page 413 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To add an entry from the DHCP server/client filter list in the switch’s database: D G S -3 4 26 :5 # c on f ig f i l te r dhc p _ se r ve r a d d p erm i t se r ver _ i p 1 0 .1. 1 . 1 c l ien t _ ma c 0 0 - 00 - 00 -0 0 - 00 - 01 p o r ts 1: 1- 1 : 3 C o m ma n d: c o n fi g f il t e r d hc p_ s e rv e r ad d pe r mi t s e rv e r_ ip 1 0.
  • Page 414 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config filter dhcp_server trap_log Purpose Used to configure the trap and log related to the DHCP server screening. Syntax config filter dhcp_server trap_log [enable | disable] Description This command is used to enable or disable trap/log related to DHCP server filter. Parameters None.
  • Page 415: Rspan Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual RSPAN C OMMANDS The Remote Switched Port Analyzer (RSPAN) function commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable rspan disable rspan...
  • Page 416 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable rspan Purpose Used to disable RSPAN Syntax disable rspan Description This command is used to disable the RSPAN function. Parameters None. Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To disable RSPAN: D G S -3 4 26 :5 # disable rspan...
  • Page 417 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete rspan vlan Purpose Used to delete an RSPAN VLAN. Syntax delete rspan vlan [vlan_name <vlan_name> | vlan_id <value 1-4094>] Description This command is used to delete an RSPAN VLAN. Parameters vlan_name –...
  • Page 418 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual NOTE: If the ACL function has been used to implement per flow RSPAN, the source needs to be set otherwise the per port RSPAN will not work. Example usage: To config RSPAN VLAN by VLAN name: D G S -3 4 26 :5 # c on f ig r s p an vl an v la n _n am e vl a n2 s o u rc e a dd p or t s 2- 5 rx C o m ma n d: c o n fi g r sp a n v l an v l a n_ n am e v l an 2 s ou r c e a dd p o r ts 1: 2- 1 : 5 r x...
  • Page 419 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual To configure RSPAN redirect: D G S -3 4 26 :5 # c on f ig r s p an vl an v la n _i d 2 re d ir ec t ad d p or t 1: 1 8 C o m ma n d: c o n fi g r sp a n v l an v l a n_ i d 2 r e di r ec t a d d p or t 1 : 18 D G S -3 4 26 :5 # show rspan...
  • Page 420 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual FLOW ETERING OMMANDS ACL Flow Metering is used to configure per-flow Bandwidth Control. Before configuring the ACL Flow Meter, here is a list of acronyms and terms users will need to know. trTCM –...
  • Page 421 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config flow_meter profile_id Purpose Used to configure the flow metering function for ACL.. Syntax <value 1-6> access_id <value 1-128>[ [ tr_tcm cir <value 1-156249> {cbs <value 1- 16384>} pir <value 1-156249> {pbs <value 1-16384>} | sr_tcm cir <value 1-156249> cbs <value 1-16384>...
  • Page 422 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config flow_meter profile_id • permit – Enter this parameter to allow packet flows that are in the yellow flow. • replace_dscp <value 0-63> − Packets that are in the yellow flow may have their DSCP field rewritten using this parameter and entering the DSCP value to replace.
  • Page 423 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display ACL flow metering: D G S -3 4 26 :5 # s ho w f lo w _ me t er p r o fi l e_ id 1 a c ce ss _ i d 1 C o m ma n d: s h o w f lo w_ m e te r p ro f i le _ id 1 a cc e ss _i d 1 P r o fi l e ID : 1 Ac c es s I D : 1...
  • Page 424 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (L2PT) C AYER ROTOCOL UNNELING OMMANDS Users at different sites connected across a service-provider network need to use various Layer 2 protocols to scale their topologies to include all remote sites, as well as the local sites. STP must run properly, and every VLAN should build a proper spanning tree that includes the local site and all remote sites across the service-provider network.
  • Page 425 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show bpdu_tunnel Purpose Used to display the L2PT global state, tunnel destination MAC address, and port state. Syntax show bpdu_tunnel Description This command is used to display L2PT global state, tunnel destination MAC address, and port state.
  • Page 426 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # d is a bl e b p du _ tu nn e l C o m ma n d: d i s ab l e bp d u _t u nn el S u c ce s s.
  • Page 427 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual ARP C RATUITOUS OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr> delete arpentry [<ipaddr>...
  • Page 428 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete arpentry Purpose Used to delete a static entry into the ARP table. Syntax delete arpentry [<ipaddr> | all] Description This command is used to delete a static ARP entry, made using the create arpentry command above, by specifying either the IP address of the entry or all.
  • Page 429 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display the ARP table: D G S -3 4 26 :5 # s ho w a rp e n tr y C o m ma n d: s h o w a rp en t r y A R P A g in g T i me : 20 I n t er f ac e IP A d d re s s...
  • Page 430 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure a static ARP entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: D G S -3 4 26 :5 # c on f ig a r p en t ry 1 0 . 48 . 74 .1 2 00 - 50 -B A - 00 - 07 -3 6 C o m ma n d: c o n fi g a rp e n tr y 1 0.
  • Page 431 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example Usage: To enable send a gratuitous ARP request when a duplicate IP is detected: D G S -3 4 26 :5 # c on f ig g r a tu i to us _ a rp se nd d up l ic at e _ ip _ de te c t ed en ab l e C o m ma n d: c o n fi g g ra t u it o us _a r p s e nd d u p li c at e_ i p _d e te ct e d e n ab le S u c ce s s.
  • Page 432 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual disable gratuitous_arp Purpose Used to disable gratuitous ARP trap and log state. Syntax disable gratuitous_arp {ipif <ipif_name 12>} {trap |log} (1) Description This command is used to disable gratuitous ARP trap and log state. When the trap and log are disabled, the switch won’t trap and log IP conflict events to inform the administrator.
  • Page 433 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display gratuitous ARP log and trap state: D G S -3 4 26 :5 # s ho w g ra t u it o us _a r p C o m ma n d: s h o w g ra tu i t ou s _a rp S e n d o n IP I F s t at us u p : D is ab l e d...
  • Page 434: Compound Authentication Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual OMPOUND UTHENTICATION OMMANDS The Compound Authentication commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create authentication [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] guest_vlan delete authentication [vlan <vlan_name 32>...
  • Page 435 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual delete authentication guest_vlan Purpose Used to delete a configured authentication guest VLAN. Syntax delete authentication guest_vlan [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] Description This command is used to delete the guest VLAN settings, but will not delete the static VLAN.
  • Page 436 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config authentication ports Purpose This command is used to configure security ports. Syntax config authentication ports [<portlist>| all] {auth_mode [port_based | host_based] | multi_authen_methods [none | any | dot1x_impb | impb_jwac |]} (1) Description This command is used to configure the authorization mode and authentication method on ports.
  • Page 437 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show authentication guest_vlan Purpose This command is used to display the guest VLAN settings. Syntax show authentication guest_vlan Description This command is used to show the information of the guest VLAN. Parameters None.
  • Page 438 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual enable authorization network Purpose To enable authorization on the Switch. Syntax enable authorization network Description This command is used to enable authorization of the network. When the authorization for network is enabled, whether the authorized data assigned by the RADUIS server will be accepted will depend on the individual module’s setting.
  • Page 439 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To display authorization: D G S -3 4 26 :5 # s ho w a ut h o ri z at io n C o m ma n d: s h o w a ut ho r i za t io n A u t ho r iz at i o n f or N e t wo r k: E n a bl e d D G S -3 4 26 :5 #...
  • Page 440: Web-Based Access Control (Wac) Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual (WAC) C BASED CCESS ONTROL OMMANDS The Web-based Access Control (WAC) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable wac...
  • Page 441 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # e na b le w a c C o m ma n d: e n a bl e w ac S u c ce s s. D G S -3 4 26 :5 # disable wac Purpose...
  • Page 442 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config wac method Purpose Used to configure the global parameter of the web authentication. Syntax config wac method [local | radius] Description This command is used to configure the global parameter for Web authentication. Parameters method –...
  • Page 443 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config wac default_redirpath Restrictions Only Administrator and Operator-level users can issue this command. Example usage: To configure the WAC default redirect path: D G S -3 4 26 :5 # c on f ig w a c d e fa ul t _ re d ir pa t h h t tp :/ / 2 .3 . 2. 3 C o m ma n d: c o n fi g w ac d ef a ul t_ r e di r pa th h tt p :/ /2 .
  • Page 444 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the WAC virtual IP: D G S -3 4 26 :5 # c on f ig w a c v i rt ua l _ ip 1. 1. 1 . 1 C o m ma n d: c o n fi g w ac v ir t ua l_ i p 1 .
  • Page 445 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual create wac user Purpose Used to create a user account for Web-based Access control. Syntax create wac user <username 15> {[vlan <vlan_name 32> | vlanid <vlanid 1-4094>]} Description This command is used to create accounts for Web-based access control. This user account is independent from the login user account.
  • Page 446 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config wac user Purpose Used to configure the VLAN ID of the user account. Syntax config wac user <username 15> [vlan <vlan_name 32> | vlanid <vlanid 1-4094> | clear_vlan] Description This command is used to change the VLAN associated with a user.
  • Page 447 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show wac Purpose Used to display the Web authentication global settings. Syntax show wac Description This command is used to display the WAC global settings. Parameters None. Restrictions None. Example usage: To display WAC: DGS-3426:5#show wac...
  • Page 448 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show wac user Purpose Used to display the Web Authentication user. Syntax show wac user Description This command is used to display the Web Authentication account. Parameters None. Restrictions None.
  • Page 449 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual D G S -3 4 26 :5 # sh o w wa c au t h_ st a t e p or ts 1 -3 C o m ma n d: s h o w w ac a u t h_ s ta te p or t s 1: 1 - 1: 3 P o r t M AC A d d re s s S t at e V ID...
  • Page 450 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To clear WAC authentication state: D G S -3 4 26 :5 # c le a r wa c au t h_ st a t e p or ts 1 -5 C o m ma n d: c l e ar wa c a u th _ st at e po r ts 1 : 1 -1 : 5 S u c ce s s.
  • Page 451: Protocol Vlan Group Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual VLAN G ROTOCOL ROUP OMMANDS For bridges that implement Port-and-Protocol-based VLAN classification, the VID associated with an Untagged or Priority-tagged Frame is determined based on the Port of arrival of the frame into the bridge and on the protocol identifier of the frame. If there is no protocol VLAN configured on the ingress port, all the untagged packets incoming on the port will be classified into PVID VLAN.
  • Page 452 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config dot1v_protocol_group Purpose Used to configure the parameters for a protocol VLAN group. Syntax config dot1v_protocol_group group_id <id> [add | delete] protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value> Description This command is used to configure a protocol template for a group.
  • Page 453 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To delete a protocol VLAN group: D G S -3 4 26 :5 # d el e te d o t 1v _ pr ot o c ol _ gr ou p gr o up _i d 1 C o m ma n d: d e l et e d ot 1 v _p r ot oc o l _g r ou p g r ou p _i d 1 S u c ce s s.
  • Page 454 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config port dot1v Purpose Used to bind a VLAN with a protocol template on one or more ports. Syntax config port dot1v ports [<portlist> | all] [add protocol_group group_id <id> [vlan< vlan_name 32>...
  • Page 455 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the ports for a protocol VLAN group: D G S -3 4 26 :5 # s ho w p or t do t 1v p o r ts 1: 6- 1 : 8 C o m ma n d: s h o w p or t d o t1 v p or t s 1 : 6- 1: 8 P o r t: 1: 6 P r o to c ol G r o up ID...
  • Page 456: Multicast Vlan Replication Commands

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual VLAN R ULTICAST EPLICATION OMMANDS The Multicast VLAN Replication commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable ipmc_vlan_replication disable ipmc_vlan_replication config ipmc_vlan_replication...
  • Page 457 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To disable the static IP multicast VLAN replication: D G S -3 4 26 :5 # d is a bl e i p mc _ vl an _ r ep l ic at i o n C o m ma n d: d i s ab l e ip m c _v l an _r e p li c at io n S u c ce s s.
  • Page 458 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To create an IP multicast VLAN replication entry: D G S -3 4 26 :5 # c re a te i p m c_ v la n_ r e pl i ca ti o n _e n tr y r g 1 C o m ma n d: c r e at e i pm c _ vl a n_ re p l ic a ti on _ e nt r y rg 1 S u c ce s s.
  • Page 459 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual config ipmc_vlan_replication_entry destination Purpose Used to configure the destination of an IP multicast VLAN replication entry. Syntax config ipmc_vlan_replication_entry destination <name 16> [add|delete] [vlan <vlan_name 32> | vlanid <vidlist>] ports <portlist> Description For the traffic that matches an IPMC VLAN replication entry, it will be replicated based on the destination settings.
  • Page 460 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual show ipmc_vlan_replication Purpose Used to display the IP multicast VLAN replication global settings. Syntax show ipmc_vlan_replication Description This command is used to display the IP multicast VLAN replication global settings. Parameters None.
  • Page 461: Technical Specifications

    ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Appendix A ECHNICAL PECIFICATIONS ® Specifications listed here apply to all Switches in the xStack DGS–3400 Series except where otherwise noted. General Standards IEEE 802.3 10BASE–T Ethernet IEEE 802.3u 100BASE–TX Fast Ethernet IEEE 802.3ab 1000BASE–T Gigabit Ethernet IEEE 802.3z 1000BASE–T (SFP “Mini GBIC”) IEEE 802.3ae (10G Optional Modules)
  • Page 462 ® xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual Physical and Environmental Internal power supply AC Input: 100 – 240 VAC, 50–60 Hz Redundant power supply Power Consumption DGS–3400 Series Switch Module Inserts DGS–3426 (78.2 Watts) DEM–410CX (0.015 Watts) DGS–3426P (517.0 Watts) DEM–410X (6.16 Watts) DGS–3427 (86.68 Watts)

This manual is also suitable for:

Xstack dgs–3426

Table of Contents