D-Link xStack DES-3200 Series Reference Manual
D-Link xStack DES-3200 Series Reference Manual

D-Link xStack DES-3200 Series Reference Manual

Layer 2 managed ethernet switch
Hide thumbs Also See for xStack DES-3200 Series:
Table of Contents

Advertisement

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
®
CLI Reference
Manual
DES-3200 Series
Product Model :
Layer 2 Managed Ethernet Switch
Release 1.21

Advertisement

Table of Contents
loading

Summary of Contents for D-Link xStack DES-3200 Series

  • Page 1 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ® CLI Reference Manual DES-3200 Series Product Model : Layer 2 Managed Ethernet Switch Release 1.21...
  • Page 2 © 2010 D-Link Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
  • Page 3: Table Of Contents

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Table of Contents INTRODUCTION .................................1 USING THE CONSOLE CLI ............................3 COMMAND SYNTAX ..............................7 BASIC SWITCH COMMANDS ..........................10 MODIFY BANNER AND PROMPT COMMANDS ....................30 SWITCH PORT COMMANDS ...........................33 PORT SECURITY COMMANDS ..........................37 NETWORK MANAGEMENT (SNMP) COMMANDS....................43...
  • Page 4 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ACCESS CONTROL LIST (ACL) COMMANDS .....................210 TIME RANGE COMMANDS ...........................227 SAFEGUARD ENGINE COMMANDS ........................229 TRAFFIC SEGMENTATION COMMANDS ......................231 TIME AND SNTP COMMANDS ..........................233 ARP COMMANDS..............................239 ROUTING TABLE COMMANDS..........................243 MAC NOTIFICATION COMMANDS ........................250 ACCESS AUTHENTICATION CONTROL COMMANDS..................255...
  • Page 5 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DOS PREVENTION COMMANDS...........................377 IP-MAC-PORT BINDING COMMANDS .........................383 LOOPBACK DETECTION COMMANDS........................395 PROTOCOL VLAN COMMANDS ...........................402 MAC-BASED VLAN COMMANDS ..........................408 FLOW METER COMMANDS..........................411 MAC-BASED ACCESS CONTROL COMMANDS....................414 ARP SPOOFING PREVENTION COMMANDS.......................431 TECHNICAL SUPPORT COMMANDS ........................434...
  • Page 6: Introduction

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual NTRODUCTION The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
  • Page 7 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings) window in the Configuration folder. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
  • Page 8: Using The Console Cli

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual SING THE ONSOLE The Switch supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 9 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual cable_diag ports clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear counters clear dos_prevention counters clear fdb clear igmp_snooping data_driven_group clear log clear mac_based_access_control auth_mac clear port_security_entry port config 802.1p default_priority config 802.1p user_priority...
  • Page 10 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config account Command: config account Next possible completions: <username> DES-3200-28:4#config account Command: config account Next possible completions: <username> DES-3200-28:4# Figure 2 - 4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned the...
  • Page 11 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show Command: show Next possible completions: 802.1p 802.1x access_profile account acct_client address_binding arp_spoofing_prevention auth_session_statistics auth_statistics authen authen_enable authen_login authen_policy authorization autoconfig bandwidth_control bpdu_tunnel command_history config cpu_access_profile dhcp_local_relay dhcp_relay dos_prevention...
  • Page 12: Command Syntax

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. Note: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted function that changes text case.
  • Page 13 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual {braces} Purpose Encloses an optional value or set of optional arguments. Syntax reset {[config | system]} {force_agree} Description In the first part of the above syntax example, users have the option to specify config or system.
  • Page 14 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Multiple Page Display Control Keys Space Displays the next page. CTRL+c Stops the display of remaining pages when multiple pages are to be displayed. Stops the display of remaining pages when multiple pages are to be displayed.
  • Page 15: Basic Switch Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ASIC WITCH OMMANDS The Basic Switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable password encryption...
  • Page 16 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable password encryption Purpose Used to enable password encryption on a user account. Syntax enable password encryption Description The user account configuration information will be stored in the configuration file, and can be applied to the system at a time in the future.
  • Page 17 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create account Purpose Used to create user accounts. Syntax create account [admin | user] <username 15> Description This command is used to create user accounts that consist of a username of 1 to 15 characters and a password of 0 to 15 characters.
  • Page 18 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config account Purpose Used to configure user accounts. Syntax config account <username> {encrypt [plain_text|sha_1] <password>} Description This command is used to configure a user account that has been created using the create account command.
  • Page 19 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show account Purpose Used to display user accounts. Syntax show account Description This command is used to display all user accounts created on the Switch. Up to eight user accounts can exist at one time.
  • Page 20 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show session Purpose Used to display a list of currently logged-in users. Syntax show session Description This command is used to display a list of all the users that are logged-in at the time the command is issued.
  • Page 21 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show switch Purpose Used to display general information about the Switch. Syntax show switch Description This command is used to display information about the Switch. Parameters None. Restrictions None.
  • Page 22 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show serial_port Purpose Used to display the current serial port settings. Syntax show serial_port Description This command is used to display the current serial port settings. Parameters None. Restrictions...
  • Page 23 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config serial_port Purpose Used to configure the serial port. Syntax config serial_port { baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes | 15_minutes] } (1) Description This command is used to configure the serial port’s baud rate and auto logout...
  • Page 24 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable clipaging Purpose Used to pause the scrolling of the console screen when a command displays more than one page. Syntax enable clipaging Description This command is used when issuing a command which causes the console screen to rapidly scroll through several pages.
  • Page 25 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable telnet Purpose Used to enable communication with and management of the Switch using the Telnet protocol. Syntax enable telnet {<tcp_port_number 1-65535>} Description This command is used to enable the Telnet protocol on the Switch.
  • Page 26 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual telnet Purpose Used to Telnet another device on the network. Syntax telnet <ipaddr> {tcp_port <value 0-65535>} Description This command is used to connect to another device’s management through Telnet.
  • Page 27 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable web Purpose Used to disable the HTTP-based management software on the Switch. Syntax disable web Description This command disables the Web-based management software on the Switch. Parameters None.
  • Page 28 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To save the Switch’s current log to non-volatile RAM: DES-3200-28:4#save log Command: save log Saving all log information to NV-RAM..Done. Success. DES-3200-28:4# To save the Switch’s the current configuration and log to non-volatile RAM:...
  • Page 29 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual reset Purpose Used to reset the Switch to the factory default settings. Syntax reset {[config | system]} {force_agree} Description This command is used to restore the Switch’s configuration to the default settings assigned from the factory.
  • Page 30 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To restore all of the Switch’s parameters to their default values and have the Switch save and reboot: DES-3200-28:4#reset system Command: reset system Are you sure you want to proceed with system reset, save and reboot?(y/n) Load Factory Default Configuration...
  • Page 31 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show config Purpose Used to collect and display all system configurations in a single CLI command. Syntax show config [current_config | config_in_nvram] Description This command is used to display all system configurations. The continuous displaying configuration can be aborted by the interrupt key, which may be a sequence of a keying process or a single key.
  • Page 32 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config terminal_line Purpose Used to configure the number of rows which can be displayed on a screen. Syntax config terminal_line [ default | <value 20-80>] Description This command is used to configure the number of rows which can be displayed on a screen.
  • Page 33 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable jumbo_frame Purpose Used to enable jumbo frame. Syntax enable jumbo_frame Description This command is used to configure the jumbo frame setting as enable. Parameters None. Restrictions Only Administrator-level users can issue this command.
  • Page 34 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show jumbo_frame Purpose Used to display the current configuration of jumbo frame. Syntax show jumbo_frame Description This command is used to display the current configuration of the jumbo frame setting.
  • Page 35: Modify Banner And Prompt Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ODIFY ANNER AND ROMPT OMMANDS The Modify Banner and Prompt commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command...
  • Page 36 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config greeting _message Purpose Used to configure the login banner (greeting message). Syntax config greeting _message {default} Description Users can use this command to modify the login banner (greeting message).
  • Page 37 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch. Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch.
  • Page 38: Switch Port Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual WITCH OMMANDS The Switch Port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config ports [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | state [enable | disable] | learning [enable | disable] | [description <desc 32>...
  • Page 39 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ports Purpose Used to configure the Switch’s Ethernet port settings. Syntax [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]}] | flow_control [enable | disable] | state [enable | disable] | learning [enable | disable] | [description <desc 32>...
  • Page 40 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config ports 25-28 speed 10_full state enable Command: config ports 25-28 speed 10_full state enable Warning: For combo ports, the configuration is set to medium_type copper Success. DES-3200-28:4# show ports Purpose Used to display the current configuration of a range of ports.
  • Page 41 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the configuration of all ports on a standalone switch, with description: DES-3200-28:4#show ports description Command: show ports description Port State/ Settings Connection Address Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl...
  • Page 42: Port Security Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ECURITY OMMANDS The Port Security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config port_security ports [<auth_portlist> | all] {admin_state [enable | disable] | max_learning_addr <max_lock_no 0-64>...
  • Page 43 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config port_security ports Purpose Used to configure port security settings. Syntax config port_security ports [<auth_portlist> | all ] {admin_state [enable | disable] | max_learning_addr <max_lock_no 0-64> | lock_address_mode [ DeleteOnTimeout |...
  • Page 44 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete port_security_entry Purpose Used to delete a port security entry by MAC address, port number and VLAN ID. Syntax delete port_security_entry vlan_name <vlan_name 32> mac_address <macaddr> port <auth_port> Description This command is used to delete a single, previously learned port security entry by port, VLAN name, and MAC address.
  • Page 45 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual clear port_security_entry Purpose Used to clear MAC address entries learned from a specified port for the port security function. Syntax clear port_security_entry ports <auth_portlist> Description This command is used to clear MAC address entries which were learned by the Switch by a specified port.
  • Page 46 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show port_security Purpose Used to display the current port security configuration. Syntax show port_security {ports <auth_portlist>} Description This command is used to display port security information of the Switch’s ports. The information displayed includes port security, admin state, maximum number of learning address and lock mode.
  • Page 47 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable port_security trap_log Purpose Used to enable the trap log for port security. Syntax enable port_security trap_log Description This command, along with the disable port_security trap_log, will enable the sending of log messages to the Switch’s log and SNMP agent when the port security of the Switch has been triggered.
  • Page 48: Network Management (Snmp) Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual (SNMP) C ETWORK ANAGEMENT OMMANDS The Switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. Users can specify which version of the SNMP users want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
  • Page 49 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Command Parameters create snmp [host <ipaddr> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] <auth_string 32> delete snmp [host <ipaddr>] show snmp host {<ipaddr>} create trusted_host [<ipaddr> | network<network_address>] delete trusted_host [ipaddr<ipaddr>...
  • Page 50 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command. Syntax create snmp user <SNMP_name 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8-16>...
  • Page 51 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To create an SNMP user on the Switch: DES-3200-28:4#create snmp user dlink default encrypted by_password auth md5 knickerbockers priv none Command: create snmp user dlink default encrypted by_password auth md5 knickerbockers priv none Success.
  • Page 52 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table. Syntax show snmp user Description This command is used to display information about each SNMP username in the SNMP group username table.
  • Page 53 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access. Syntax create snmp view <view_name 32> <oid> view_type [included |...
  • Page 54 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete snmp view Purpose Used to remove an SNMP view entry previously created on the Switch. Syntax delete snmp view <view_name 32> [all | <oid>] Description This command is used to remove an SNMP view previously created on the Switch.
  • Page 55 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display SNMP view configuration: DES-3200-28:4#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree View Type -------------------- ----------------------- ---------- restricted 1.3.6.1.2.1.1 Included restricted 1.3.6.1.2.1.11...
  • Page 56 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To create the SNMP community string “dlink”: DES-3200-28:4#create snmp community dlink view ReadView read_write Command: create snmp community dlink view ReadView read_write Success. DES-3200-28:4# delete snmp community Purpose Used to remove a specific SNMP community string from the Switch.
  • Page 57 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the currently entered SNMP community strings: DES-3200-28:4#show snmp community Command: show snmp community SNMP Community Table Community Name View Name Access Right ------------------ ------------------- ------------...
  • Page 58 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show snmp engineID Purpose Used to display the identification of the SNMP engine on the Switch. Syntax show snmp engineID Description This command is used to display the identification of the SNMP engine on the Switch.
  • Page 59 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create snmp group Purpose Used to create a new SNMP group, or a table that maps SNMP users to SNMP views. Syntax create snmp group <groupname 32> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] {read_view <view_name 32>...
  • Page 60 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To create an SNMP group named “sg1:” DES-3200-28:4#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Success.
  • Page 61 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the currently configured SNMP groups on the Switch: DES-3200-28:4#show snmp groups Command: show snmp groups Vacm Access Table Settings Group Name : Group3 ReadView Name...
  • Page 62 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp [host <ipaddr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>...
  • Page 63 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax delete snmp [host <ipaddr>] Description This command is used to delete a recipient of SNMP traps generated by the Switch’s SNMP agent.
  • Page 64 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create trusted_host Purpose Used to create a trusted host. Syntax create trusted_host [<ipaddr> | network <network_address>] Description This command is used to create a trusted host. The Switch allows users to specify up to ten IP addresses that are allowed to manage the Switch via in-band SNMP or Telnet-based management software.
  • Page 65 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To delete a trusted host with an IP address 10.48.74.121: DES-3200-28:4#delete trusted_host ipaddr 10.48.74.121 Command: delete trusted_host ipaddr 10.48.74.121 Success. DES-3200-28:4# To delete a trusted host network with a network address 10.62.0.0/16: DES-3200-28:4#delete trusted_host network 10.62.0.0/16...
  • Page 66 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example Usage: To display the list of trust hosts: DES-3200-28:4#show trusted_host Command: show trusted_host Management Stations IP Address/Netmask ----------------------- 10.53.13.94/32 Total Entries: 1 DES-3200-28:4# enable snmp Used to enable SNMP trap support.
  • Page 67 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable snmp Purpose Used to disable SNMP trap support on the Switch. Syntax disable snmp [authenticate_traps | linkchange_traps | traps] Description This command is used to disable SNMP trap support on the Switch.
  • Page 68 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config snmp linkchange_traps ports Purpose Used to configure the sending of linkchange traps and per port control for sending of change traps. Syntax config snmp linkchange_traps ports [all | <portlist>] [enable | disable]...
  • Page 69 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch. Syntax config snmp system_contact {<sw_contact>} Description This command is used to enter the name and/or other information to identify a contact person who is responsible for the Switch.
  • Page 70 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config snmp system_name Purpose Used to configure the name for the Switch. Syntax config snmp system_name {<sw_name>} Description This command is used to configure the name of the Switch.
  • Page 71 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
  • Page 72: Switch Utility Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual WITCH TILITY OMMANDS The Switch Utility commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters download [firmware_fromTFTP [<ipaddr> | <ipv6addr>] <path_filename 64>...
  • Page 73 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual download Purpose Used to download and install new firmware or a Switch configuration file from a TFTP server. Syntax download [firmware_fromTFTP [<ipaddr>| <ipv6addr>] <path_filename 64> image_id <value 1-2> | cfg_fromTFTP [<ipaddr>|<ipv6addr>] <path_filename 64>...
  • Page 74 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.48.74.121 c:\cfg\setting.txt Connecting to server....Done. Download configuration....Done. Success. DES-3200-28:4# DES-3200-28:4##------------------------------------------------------------------- DES-3200-28:4## DES-3200-28 Configuration DES-3200-28:4## DES-3200-28:4## Firmware: Build 1.10.B014 DES-3200-28:4## Copyright(C) 2009 D-Link Corporation. All rights reserved.
  • Page 75 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config firmware Purpose Used to configure the firmware section image as a boot up section, or to delete the firmware section Syntax config firmware image_id <value 1-2> [delete | boot_up] Description This command is used to configure the firmware section image.
  • Page 76 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show firmware information Purpose Used to display the firmware section information. Syntax show firmware information Description This command is used to display the firmware section information. Parameters None. Restrictions...
  • Page 77 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show config Purpose Used to display the current or saved version of the configuration settings of the switch. Syntax show config [current_config | config_in_nvram] Description This command is used to display all the configuration settings that are saved to NVRAM or display the configuration settings as they are currently configured.
  • Page 78 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To view the current configuration settings: DES-3200-28:4#show config current_config Command: show config current_config ------------------------------------------------------------------- DES-3200-28 Configuration Firmware: Build 1.10.B014 Copyright(C) 2009 D-Link Corporation. All rights reserved. #-------------------------------------------------------------------...
  • Page 79 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual upload Purpose Used to upload the current switch settings or the switch history log to a TFTP. Syntax upload [cfg_toTFTP | log_toTFTP] [<ipaddr>|<ipv6addr>] <path_filename 64> Description This command is used to upload either the Switch’s current settings or the Switch’s history log to a TFTP server.
  • Page 80 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable autoconfig Purpose Used to activate the auto configuration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 81 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28 Fast Ethernet Switch Command Line Interface Firmware: Build 1.10.B014 Copyright(C) 2009 D-Link Corporation. All rights reserved. DES-3200-28:4# DES-3200-28:4# DES-3200-28:4#download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Command: download cfg_fromTFTP 10.41.44.44 c:\cfg\setting.txt Connecting to server....Done.
  • Page 82 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable autoconfig Purpose Use this to deactivate auto configuration from DHCP. Syntax disable autoconfig Description This command is used to instruct the Switch not to accept auto configuration instruction from the DHCP server. This does not change the IP settings of the Switch.
  • Page 83 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ping Purpose Used to test the connectivity between network devices. Syntax ping <ipaddr> {times <value 0-255>} {size <value 1-60000>} {timeout <sec 1-99>} Description The command is used to send Internet Control Message Protocol (ICMP) echo messages to a remote IP address.
  • Page 84 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ping6 Purpose Used to diagnose the IPv6 network. Syntax ping6 <ipv6addr> {times <value 1-255>| size <value 1-6000> | timeout <value 1-10>} Description This command is used to diagnose the IPv6 network.
  • Page 85 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual traceroute Purpose Used to trace the routed path between the Switch and a destination endstation. Syntax traceroute <ipaddr> {ttl <value 1-60>} {port <value 30000-64900>} {timeout <sec 1-65535>} {probe <value 1-9>}...
  • Page 86 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config terminal line Purpose Used to configure the number of rows which can be displayed at a screen. Syntax config terminal_line [default | <value 20-80>] Description This command is used to configure the number of rows which can be displayed on a screen.
  • Page 87: Network Monitoring Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ETWORK ONITORING OMMANDS The Network Monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters show packet ports <portlist>...
  • Page 88 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show packet ports Purpose Used to display stats about packets sent and received by the Switch. Syntax show packet ports <portlist> Description This command is used to display statistics about packets sent and received by ports specified in the <portlist>.
  • Page 89 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show error ports Purpose Used to display the error statistics for a range of ports. Syntax show error ports <portlist> Description This command is used to display all of the packet error statistics collected and logged by the Switch for a given port list.
  • Page 90 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show utilization Purpose Used to display real-time utilization statistics. Syntax show utilization [ cpu | dram | flash | ports {<portlist>}] Description This command is used to display the real-time utilization statistics for the Switch.
  • Page 91 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display the current Flash memory utilization: DES-3200-28:4#show utilization flash Command: show utilization flash FLASH Memory Utilization : Total FLASH : 16,384 Used FLASH : 7,371 Utilization : 44%...
  • Page 92 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual clear counters Purpose Used to clear the Switch’s statistics counters. Syntax clear counters {ports <portlist>} Description This command is used to clear the counters used by the Switch to compile statistics.
  • Page 93 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show log Purpose Used to display the switch history log. Syntax show log {index <value_list X-Y>} Description This command is used to display the contents of the Switch’s history log.
  • Page 94 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable syslog Purpose Used to disable the system log to be sent to a remote host. Syntax disable syslog This command is used to disable the system log to be sent to a Description remote host.
  • Page 95 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1-4> {severity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
  • Page 96 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create syslog host kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages...
  • Page 97 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To create a syslog host: DES-3200-28:4#create syslog host 1 ipaddress 10.68.88.1 severity all facility local0 Command: create syslog host ipaddress 10.68.88.1 severity facility local0 Success. DES-3200-28:4# config syslog...
  • Page 98 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Numerical Facility Parameters Code kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon...
  • Page 99 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure a syslog host: DES-3200-28:4#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3200-28:4# To configure a syslog host for all hosts:...
  • Page 100 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show syslog host Purpose Used to display the syslog hosts currently configured on the Switch. Syntax show syslog host {<index 1-4>} Description This command is used to display the syslog hosts that are currently configured on the Switch.
  • Page 101 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config log_save_timing Purpose Used to configure the method of saving logs to the Switch’s Flash memory. Syntax config log_save_timing [time_interval <min 1-65535> | on_demand | log_trigger] Description This command is used to configure the method used in saving logs to the Switch’s Flash memory.
  • Page 102 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete ipif Purpose Used to delete an interface. Syntax delete ipif [System] [ipv6address <ipv6networkaddr>] Description This command is used to delete an interface. The System interface cannot be deleted. By using this command, an IPv6 address can be deleted from the ipif.
  • Page 103 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable ipif_ipv6_link_local_auto Purpose Used to disable the auto configuration of a link local address when no IPv6 address is configured. Syntax disable ipif_ipv6_link_local_auto [System] Description This command is used to disable the auto configuration of a link local address when no IPv6 address is explicitly configured.
  • Page 104: Multiple Spanning Tree Protocol (Mstp) Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1D STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 105 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual The Multiple Spanning Tree Protocol commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: enable stp disable stp config stp version...
  • Page 106 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description This command is used to globally enable the Spanning Tree Protocol on the Switch.
  • Page 107 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp version Purpose Used to globally set the version of STP on the Switch. Syntax config stp version [mstp | rstp | stp] Description This command is used to choose the version of the spanning tree to be implemented on the Switch.
  • Page 108 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp Purpose Used to set up STP, RSTP, and MSTP on the Switch. Syntax config stp {maxage <value 6-40> | maxhops <value 6-40> | hellotime <value 1-2> | forwarddelay <value 4-30>...
  • Page 109 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp ports Purpose Used to set up STP on the port level. Syntax config stp ports <portlist> {externalCost [ auto | <value 1-200000000> ] | hellotime <value 1-2>...
  • Page 110 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure STP with path cost auto, hellotime 2 seconds, migration enable, and state enable for ports 1 to 2: DES-3200-28:4#config stp ports 1-2 externalCost auto hellotime 2 migrate yes state enable...
  • Page 111 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp instance_id Purpose Used to add or delete an STP instance ID. Syntax config stp instance_id <value 1-8> [add_vlan | remove_vlan] <vidlist> Description This command is used to map VIDs (VLAN IDs) to previously configured STP instances on the Switch by creating an instance_id.
  • Page 112 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete stp instance_id Purpose Used to delete a STP instance ID from the Switch. delete stp instance_id <value 1-8> Syntax Description This command is used to delete a previously configured STP instance ID from the Switch.
  • Page 113 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp mst_config_id Purpose Used to update the MSTP configuration identification. Syntax config stp mst_config_id {revision_level <int 0-65535> | name <string>} Description This command is used to uniquely identify the MSTP configuration currently configured on the Switch.
  • Page 114 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config stp mst_ports Purpose Used to update the port configuration for a MSTP instance. Syntax config stp mst_ports <portlist> instance_id <value 0-8> {internalCost [auto | <value 1- 200000000>] | priority <value 0-240>} (1) Description This command is used to update the port configuration for a STP instance_id.
  • Page 115 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show stp Purpose Used to display the Switch’s current STP configuration. Syntax show stp Description This command is used to display the Switch’s current STP configuration. Parameters None Restrictions None.
  • Page 116 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Status 2 : STP enabled for RSTP DES-3200-28:4#show stp Command: show stp STP Bridge Global Settings -------------------------- STP Status : Enabled STP Version : RSTP Max Age : 20...
  • Page 117 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show stp ports Purpose Used to display the Switch’s current STP ports configuration. Syntax show stp ports {<portlist>} {instance <value 0-8>} Description This command is used to display the STP port settings for a specified port or group of ports.
  • Page 118 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show stp instance Purpose Used to display the Switch’s STP instance configuration Syntax show stp instance {<value 0-8>} Description This command is used to display the Switch’s current STP Instance Settings and the STP Instance Operational Status.
  • Page 119 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show stp mst_config_id Purpose Used to display the MSTP configuration identification. Syntax show stp mst_config_id Description This command is used to display the Switch’s current MSTP configuration identification. Parameters None.
  • Page 120: Forwarding Database Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ORWARDING ATABASE OMMANDS The Layer 2 Forwarding Database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create fdb <vlan_name 32>...
  • Page 121 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create fdb Purpose Used to create a static entry in the unicast MAC address forwarding table (database). Syntax create fdb <vlan_name 32> <macaddr> port <port> Description This command is used to make an entry in the Switch’s unicast MAC address forwarding database.
  • Page 122 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config multicast_fdb Purpose Used to configure the Switch’s multicast MAC address forwarding database. Syntax config multicast_fdb <vlan_name 32> <macaddr> [add | delete] <portlist> Description This command is used to configure the multicast MAC address forwarding table.
  • Page 123 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To set the fdb aging time: DES-3200-28:4#config fdb aging_time 300 Command: config fdb aging_time 300 Success. DES-3200-28:4# delete fdb Purpose Used to delete an entry to the Switch’s forwarding database.
  • Page 124 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual clear fdb Purpose Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. Syntax clear fdb [vlan <vlan_name 32> | port <port> | all] Description This command is used to clear dynamically learned entries to the Switch’s forwarding database.
  • Page 125 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the multicast MAC address table: DES-3200-28:4#show multicast_fdb vlan default Command: show multicast_fdb vlan default VLAN Name : default MAC Address : 01-00-5E-00-00-00 Egress Ports : 1-5...
  • Page 126 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display unicast MAC address table: DES-3200-28:4#show fdb Command: show fdb Unicast MAC Address Ageing Time = 300 VLAN Name MAC Address Port Type ---- ------------------------ ----------------- ---- --------...
  • Page 127 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show multicast port_filtering_mode Purpose Used to show the multicast packet filtering mode for ports. Syntax show multicast port_filtering_mode Description This command is used to display the current multicast packet filtering mode for ports on the Switch.
  • Page 128: Packet Storm Control Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ACKET TORM ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 129 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config traffic control Used to configure broadcast/multicast/unicast packet storm control. The software mechanism is Purpose provided to monitor the traffic rate in addition to the hardware storm control mechanism previously provided.
  • Page 130 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config traffic control Restrictions Only Administrator-level users can issue this command. Example usage: To configure traffic control and enable broadcast storm control for ports 1 to 12: DES-3200-28:4#config traffic control 1-12 broadcast enable action shutdown...
  • Page 131 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config traffic control_trap Purpose Used to configure traffic control trap. Syntax config traffic control_trap [none | storm_occurred | storm_cleared | both] Description This command is used to configure whether storm control notification will be generated or not when traffic storm events are detected by the SW traffic storm control mechanism.
  • Page 132: Qos Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OMMANDS The Switch supports 802.1p priority queuing. The Switch has four priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
  • Page 133 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config bandwidth_control Purpose Used to configure bandwidth control on a port by-port basis. Syntax config bandwidth_control [<portlist>] {rx_rate [no_limit | <value 64- 1024000>] | tx_rate [no_limit <value 64-1024000>]} (1) Description This command is used to configure bandwidth on a port by-port basis.
  • Page 134 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show bandwidth_control Purpose Used to display the bandwidth control table. Syntax show bandwidth_control {<portlist>} Description This command is used to display the current bandwidth control configuration on the Switch, on a port-by-port basis.
  • Page 135 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config scheduling Purpose Used to configure the traffic scheduling mechanism for each COS queue. Syntax config scheduling <class_id 0-3> weight <value 1-55> Description The Switch contains four hardware priority queues. Incoming packets must be mapped to one of these four queues.
  • Page 136 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show scheduling Purpose Used to display the currently configured traffic scheduling on the Switch. Syntax show scheduling Description This command is used to display the current traffic scheduling mechanisms in use on the Switch.
  • Page 137 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure the traffic scheduling mechanism for each QoS queue: DES-3200-28:4#config scheduling_mechanism strict Command: config scheduling_mechanism strict Success. DES-3200-28:4# show scheduling_mechanism Purpose Used to display the current traffic scheduling mechanisms in use on the Switch.
  • Page 138 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config 802.1p user_priority Purpose Used to map the 802.1p user priority of an incoming packet to one of the four hardware queues available on the Switch. Syntax config 802.1p user_priority <priority 0-7> <class_id 0-3>...
  • Page 139 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show 802.1p user_priority Purpose Used to display the current mapping between an incoming packet’s 802.1p priority value and one of the Switch’s four hardware priority queues. Syntax show 802.1p user_priority Description This command is used to display the current mapping of an incoming packet’s 802.1p...
  • Page 140 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the Switch. If an untagged packet is received by the Switch, the priority configured with this command will be written to the packet’s priority field.
  • Page 141 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show 802.1p default_priority Purpose Used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. Syntax show 802.1p default_priority {<portlist>}...
  • Page 142 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cos mapping Purpose Used to configure the CoS to port mapping method to be used on the switch. Syntax config cos mapping ports [<portlist> | all] [none | { ethernet [802.1p]...
  • Page 143 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show cos mapping Purpose Used to show CoS mapping. Syntax show cos mapping {port <portlist> } Description This command is used to display information regarding CoS mapping enabled ports and their mapping method.
  • Page 144 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cos tos value Purpose Used to map the ToS value in the IP header of incoming packets to one of the four hardware queues available on the Switch.
  • Page 145 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dscp_mapping Purpose Used to map the DSCP value in the IP header of incoming packet to one of the four hardware queues available on the Switch. Syntax config dscp_mapping dscp_value <value 0-63> [class <class_id 0- 3>]...
  • Page 146 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show dscp_mapping Purpose Used to show DSCP value map to traffic class. Syntax show dscp_mapping {dscp_value <value 0-63>} Description This command displays the information for DSCP mapping to traffic class.
  • Page 147: Port Mirroring Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IRRORING OMMANDS The Port Mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config mirror port <port> { [add | delete] source ports <portlist> [rx | tx | both] }...
  • Page 148 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-3200-28:4# Example usage: To delete the mirroring ports: DES-3200-28:4#config mirror port 1 delete source ports 2-4 both Command: config mirror 1 delete source ports 2-4 both Success.
  • Page 149 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To disable mirroring configurations: DES-3200-28:4#disable mirror Command: disable mirror Success. DES-3200-28:4# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
  • Page 150: Vlan Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual VLAN C OMMANDS The VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create vlan <vlan_name 32> tag <vlanid 1-4094> {advertisement} delete vlan <vlan_name 32>...
  • Page 151 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To create a VLAN v1, tag 2: DES-3200-28:4#create vlan v1 tag 2 Command: create vlan v1 tag 2 Success. DES-3200-28:4# delete vlan Purpose Used to delete a previously configured VLAN on the Switch.
  • Page 152 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config vlan Restrictions Only Administrator-level users can issue this command.
  • Page 153 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To add 4 through 8 as tagged ports to the VLAN v1: DES-3200-28:4#config vlan v1 add tagged 4-8 Command: config vlan v1 add tagged 4-8 Success. DES-3200-28:4#...
  • Page 154 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To delete a VLAN ID on the Switch: DES-3200-28:4#delete vlan vlanid 5 Command: delete vlan vlanid 5 Success DES-3200-28:4# config vlan vlanid Purpose Used to add additional ports to a previously configured VLAN.
  • Page 155 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable pvid auto_assign Used to enable auto-assignment of PVID. Purpose Syntax enable pvid auto_assign Description This command is used to enable auto-assignment of PVID. Parameters None. Restrictions Only Administrator-level users can issue this command.
  • Page 156 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the PVID auto-assignment state: DES-3200-28:4#show pvid auto_assign Command: show pvid auto_assign PVID Auto-assignment: Enabled DES-3200-28:4# config gvrp Purpose Used to configure GVRP on the Switch.
  • Page 157 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable gvrp Used to enable GVRP on the Switch. Purpose Syntax enable gvrp Description This command, along with disable gvrp below, is used to enable and disable GVRP on the Switch, without changing the GVRP configuration on the Switch.
  • Page 158 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show vlan VLAN. <vlan_name 32>  The VLAN name of the VLAN for which to Parameters display a summary of settings. vlanid <vidlist>  Specifies a range of multiple VLAN IDs to be displayed.
  • Page 159 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual...
  • Page 160 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display GVRP port status: DES-3200-28:4#show gvrp 1-10 Command: show gvrp 1-10 Global GVRP : Disabled Port PVID Reassigned GVRP Ingress Acceptable Frame Type PVID State Checking...
  • Page 161: Link Aggregation Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual GGREGATION OMMANDS The Link Aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create link_aggregation group_id <value> {type [lacp | static]} delete link_aggregation group_id <value>...
  • Page 162 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#create link_aggregation group_id 1 Command: create link_aggregation group_id 1 Success. DES-3200-28:4# delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group. Syntax delete link_aggregation group_id <value>...
  • Page 163 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config link_aggregation group_id 1 master_port 1 ports 1-4 Command: config link_aggregation group_id 1 master_port 1 ports 1-4 Success. DES-3200-28:4# config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm.
  • Page 164 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show link_aggregation by the algorithm in use by that Switch. Restrictions None.
  • Page 165 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display Link Aggregation configuration: DES-3200-28:4#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-source Group ID Type: : TRUNK Master Port Member Port Active Port Status...
  • Page 166 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show lacp_ports Purpose Used to display current LACP port mode settings. Syntax show lacp_ports {<portlist>} Description This command is used to display the LACP mode settings as they are currently configured.
  • Page 167: Basic Ip Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IP C ASIC OMMANDS The Basic IP interface commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config ipif [System] [ { ipaddress <network_address>...
  • Page 168 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ipif Purpose Used to configure the System IP interface. Syntax [System] [ { ipaddress <network_address> | vlan <vlan_name 32> | state [enable | disable] }(1) | bootp | dhcp | dhcp_option12 [ hostname <hostname 63> | clear_hostname | state [ enable | disable ] ] | ipv6 ipv6address <ipv6networkaddr>...
  • Page 169 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure an interface’sIPv4 network address: DES-3200-28F:4# config ipif System ipaddress 10.48.74.122/8 Command: config ipif System ipaddress 10.48.74.122/8 Success. DES-3200-28F:4# To configure an interface’s DHCP option12 host name:...
  • Page 170 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display IP interface settings: DES-3200-28F:4# show ipif Command: show ipif IP Interface Settings Interface Name : System IP Address : 192.168.1.66 (MANUAL) Subnet Mask : 255.0.0.0...
  • Page 171 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable autoconfig Purpose Used to activate the auto configuration function for the Switch. This will load a previously saved configuration file for current use. Syntax enable autoconfig Description When autoconfig is enabled on the Switch, the DHCP reply will contain a configuration file and path name.
  • Page 172 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To enable auto configuration on the Switch: DES-3200-28:4#disable autoconfig Command: disable autoconfig Success. DES-3200-28:4#...
  • Page 173: Igmp Snooping Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config igmp_snooping [vlan_name <vlan_name 32>...
  • Page 174 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config igmp_snooping fast_leave [enable | disable]  Enable or disable the IGMP snooping fast-leave function. If enabled, the membership is immediately removed when the system receives the IGMP leave message and the host that sends the leave message is the last host for the group.
  • Page 175 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config igmp_snooping querier value of the robustness variable. • By default, the robustness variable is set to 2. You might want to increase this value if you expect a subnet to be lossy.
  • Page 176 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config router_ports default add 1-10 Command: config router_ports default add 1-10 Success. DES-3200-28:4# config router_ports_forbidden Purpose Used to configure ports as forbidden router ports. Syntax config router_ports_forbidden [<vlan_name 32> | vlanid <vidlist>] [add | delete] <portlist>...
  • Page 177 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#enable igmp_snooping Command: enable igmp_snooping Success. DES-3200-28:4#...
  • Page 178 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only} Description This command is used to disable IGMP snooping on the Switch. If forward_mcrouter_only is specified, the Switch will learn the router port based on identification of the unicast routing protocol packet, the multicast routing protocol packet, and the IGMP control packet.
  • Page 179 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To show IGMP snooping: DES-3200-28:4#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast Router Only : Disabled Data Driven Learning Max Entries : 56...
  • Page 180 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the router ports. DES-3200-28:4#show router_ports Command: show router_ports VLAN Name : default Static Router Port : Dynamic Router Port: Forbidden Router Port: Total Entries: 1...
  • Page 181 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config igmp_snooping data_driven_learning Purpose Used to configure the data driven learning of an IGMP snooping group. Syntax config igmp_snooping data_driven_learning [ vlan_name <vlan_name> | vlanid <vidlist> | all] { aged_out [enable | disable]} (1)
  • Page 182 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure IGMP snooping data driven learning’s maximum learned entry value: DES-3200-28:4# config igmp_snooping data_driven_learning max_learned_entry Command: config igmp_snooping data_driven_learning max_learned_entry 1 Success. DES-3200-28:4# clear igmp_snooping data_driven_group Purpose Used to delete the IGMP snooping group learned by data driven.
  • Page 183 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show igmp_snooping host <ipaddr>  Specifies the IP address of a group to display the host information. Restrictions Only Administrator-level users can issue this command. Example usage: To display IGMP snooping fast leave hosts:...
  • Page 184 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To enable IGMP Access Control for all ports: DES-3200-28:4# config igmp access_authentication ports all state enable Command: config igmp access_authentication ports all state enable Success. DES-3200-28:4# show igmp access_authentication ports Purpose Used to display the current IGMP Access Control configuration.
  • Page 185: Dhcp Relay Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DHCP R ELAY OMMANDS The DHCP Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config dhcp_relay {hops <value 1-16>...
  • Page 186 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dhcp_relay add ipif Purpose Used to add an IP destination address to the switch's DHCP/BOOTP relay table. Syntax config dhcp_relay add ipif [System] <ipaddr> Description This command is used to add an IP address as a destination to forward (relay) DHCP/BOOTP relay packets to.
  • Page 187 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the Switch. config dhcp_relay option_82 state [enable | disable] Syntax Description This command is used to configure the state of DHCP relay agent information option 82 of the Switch.
  • Page 188 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dhcp_relay option_82 check Parameters enable – When the field is toggled to enable, the relay agent will check the validity of the packet’s option 82 field. If the switch receives a packet that contains the option 82 field from a DHCP client, the switch drops the packet because it is invalid.
  • Page 189 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dhcp_relay option_82 remote id Purpose Used to configure the processing of the DHCP 82 remote ID option for the DHCP relay function. Syntax config dhcp_relay option_82 remote_id [default | user_define <string 32>]...
  • Page 190 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual...
  • Page 191 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To show the DHCP relay configuration: DES-3200-28:4#show dhcp_relay Command: show dhcp_relay DHCP/BOOTP Relay Status : Disabled DHCP/BOOTP Hops Count Limit DHCP/BOOTP Relay Time Threshold : 0 DHCP Relay Agent Information Option 82 State...
  • Page 192 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable dhcp_relay Syntax disable dhcp_relay Description This command is used to disable the DHCP/BOOTP relay function on the Switch. Parameters None. Restrictions Only Administrator-level users can issue this command.
  • Page 193: Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual 802.1X C OMMANDS The Switch implements IEEE 802.1X Port-based and Host-based Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 194 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Command Parameters show acct_client create 802.1x user <username 15> delete 802.1x user <username 15> show 802.1x user Each command is listed, in detail, in the following sections: enable 802.1x Purpose Used to enable the 802.1X server on the Switch.
  • Page 195 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show 802.1x Purpose Used to display the current authentication state and authentication configuration of the 802.1X server on the Switch. show 802.1x [auth_state | auth_configuration] {ports <portlist>} Syntax Description This command is used to display the current configuration or authentication state of the 802.1X...
  • Page 196 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display the 802.1X authentication states: DES-3200-28:4#show 802.1x auth_configuration ports 1 Command: show 802.1x auth_configuration ports 1 802.1X : Enabled Authentication Mode : Port_based Authentication Protocol : Radius_EAP Port Number...
  • Page 197 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display the 802.1X authentication state for port-based 802.1X: DES-3200-28:4#show 802.1x auth_state Command: show 802.1x auth_state Port Auth PAE State Backend State Port Status ------ -------------- ------------- ------------ ForceAuth...
  • Page 198 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the 802.1X authentication state for host-based 802.1X: DES-3200-28:4#show 802.1x auth_state Command: show 802.1x auth_state Port Number : 1 Index MAC Address Auth PAE State Backend State...
  • Page 199 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config 802.1x capability ports Purpose Used to configure the 802.1X capability of a range of ports on the Switch. config 802.1x capability ports [<portlist> | all] [authenticator | none]...
  • Page 200 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config 802.1x auth_parameter ports Purpose Used to configure the 802.1X Authentication parameters on a range of ports. The default parameter will return all ports in the specified range to their default 802.1X settings.
  • Page 201 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure 802.1X authentication parameters for ports 1 to 20: DES-3200-28:4#config 802.1x auth_parameter ports 1–20 direction both Command: config 802.1x auth_parameter ports 1–20 direction both Success. DES-3200-28:4# config 802.1x auth_protocol...
  • Page 202 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To initialize the authentication state machine of all ports: DES-3200-28:4# config 802.1x init port_based ports all Command: config 802.1x init port_based ports all Success. DES-3200-28:4# config 802.1x reauth Purpose Used to configure the 802.1X re-authentication feature of the Switch.
  • Page 203 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1-3> [<server_ip>] key <passwd 32> [default | {auth_port <udp_port_number 1-65535>...
  • Page 204 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config radius delete Purpose Used to delete a previously entered RADIUS server configuration. Syntax config radius delete <server_index 1-3> Description This command is used to delete a previously entered RADIUS server configuration.
  • Page 205 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure the RADIUS settings: DES-3200-28:4#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-3200-28:4# config radius parameter Purpose Used to configure parameters for RADIUS servers.
  • Page 206 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display RADIUS settings on the Switch: DES-3200-28:4#show radius Command: show radius Timeout : 5 seconds Retransmit Index IP Address Auth-Port Acct-Port Status Number Number ----- ------------------...
  • Page 207 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config 802.1x guest_vlan ports Purpose Used to configure ports for a pre-existing 802.1X guest VLAN. config 802.1x guest_vlan ports [<portlist> | all] state [enable | disable] Syntax Description This command is used to configure ports to be enabled or disabled for the 802.1X guest VLAN.
  • Page 208 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure the configurations for a previously created 802.1X Guest VLAN: DES-3200-28:4#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Settings ----------------------------------------------------------- Guest VLAN : Tiberius Enable Guest VLAN Ports: 1-5 DES-3200-28:4# delete 802.1x guest_vlan...
  • Page 209 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show acct_client Purpose Used to display the current RADIUS accounting client. Syntax show acct_client Description This command is used to display the current RADIUS accounting client currently configured on the Switch.
  • Page 210 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show auth_client Purpose Used to display the current RADIUS authentication client. Syntax show auth_client Description This command is used to display the current RADIUS authentication client currently configured on the Switch.
  • Page 211 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show auth_diagnostics Purpose Used to display the current authentication diagnostics. Syntax show auth_diagnostics {ports [<portlist>} Description This command is used to display the current authentication diagnostics of the Switch on a per port basis.
  • Page 212 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show auth_session_statistics Purpose Used to display the current authentication session statistics. Syntax show auth_session_statistics {ports <portlist | all>} Description This command is used to display the current authentication session statistics of the Switch on a per port basis.
  • Page 213 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the current authentication statistics for port 1: DES-3200-28:4#show auth_statistics ports 1 Command: show auth_statistics ports 1 Port number : 1 MAC address: 00-00-07-5D-60-02 EapolFramesRx EapolFramesTx...
  • Page 214 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show 802.1x user Purpose Used to display the 802.1X user accounts on the Switch. Syntax show 802.1x user Description This command is used to display the 802.1X Port-based or Host-based Network Access control local users currently configured on the Switch.
  • Page 215: Access Control List (Acl) Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual (ACL) C CCESS ONTROL OMMANDS The Switch implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address.
  • Page 216 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Command Parameters enable cpu_interface_filtering disable cpu_interface_filtering create cpu <value 1-3> [ethernet {vlan | source_mac <macmask> | destination_mac <macmask> | access_profile 802.1p | ethernet_type} (1) | ip { vlan | source_ip_mask <netmask> | destination_ip_mask profile_id <netmask>...
  • Page 217 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Now that an access profile has been created, users must add the criteria the Switch will use to decide if a given frame should be forwarded or filtered. We will use the config access_profile command to create a new rule that defines the criteria we want. Let’s further specify in the new rule to deny access to a range of IP addresses through an individual port: Here, we want to filter any packets that have an IP source address between 10.42.73.0 and 10.42.73.255, and specify the port that will not be allowed:...
  • Page 218 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create access_profile source_ip_mask <netmask>  Specifies an IP address mask for the source IP address. destination_ip_mask <netmask>  Specifies an IP address mask for the destination IP address. dscp  Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in each frame’s header.
  • Page 219 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create access_profile offset can range from 0 up to 31. The offset reference can be either of the following: l2 – The offset will start counting from the byte after the end of the VLAN tags (start of ether type).
  • Page 220 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config access_profile Purpose Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create access_profile command will be combined, using a logical AND operational method, with the values the Switch finds in the specified frame header fields.
  • Page 221 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config access_profile 802.1p <value 0-7>  Specifies that the access profile will apply only to packets with this 802.1p priority value. ethernet_type <hex 0x0-0xffff>  Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
  • Page 222 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config access_profile source_ipv6_mask – Specifies an IPv6 source address. src_port_mask – Specifies an IPv6 L4 (TCP/UDP) source port submask. dst_port_mask – Specifies an IPv6 L4 (TCP/UDP) destination port submask.
  • Page 223 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config access_profile specified for all access profiles. Restrictions Only Administrator-level users can issue this command. Example usage: To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range between 10.42.73.0 to 10.42.73.255:...
  • Page 224 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show access_profile Command: show access_profile Access Profile Table ================================================================================ Profile ID: 101 Type: IPv4 Frame Filter - ICMP ================================================================================ Masks Option VLAN Source IP Dest. IP DSCP Prot ---------------- --------------- --------------- ---- ---- 0xFFF 20.0.0.0...
  • Page 225 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create cpu access_profile header. ip  Specifies that the Switch will examine the IP fields in each frame’s header. vlan  Specifies a VLAN mask. source_ip_mask <netmask>  Specifies an IP address mask for the source IP address.
  • Page 226 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create cpu access_profile address. profile_id <value 1-3>  Enter an integer between 1 and 3 that is used to identify the CPU access profile to be created with this command.
  • Page 227 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cpu access_profile <vlan_name 32> | source_mac <macaddr> | destination_mac <macaddr > | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} (1) | ip{vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr>...
  • Page 228 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cpu access_profile field within each packet. src_port <value 0-65535>  Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header.
  • Page 229 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure CPU access list entry: DES-3200-28:4#config access_profile profile_id access_id vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port all deny Command: config cpu access_profile profile_id 3 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port all deny...
  • Page 230 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show cpu_access_profile Command: show cpu_access_profile CPU Interface Filtering state: Enabled Access Profile Table ================================================================================ Profile ID: 1 Type: IPv4 Frame Filter - ICMP ================================================================================ Owner: ACL Masks Option VLAN Source IP Dest.
  • Page 231 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable cpu_interface_filtering Purpose Used to disable CPU interface filtering on the Switch. Syntax disable cpu_interface_filtering Description This command is used, in conjunction with the enable cpu_interface_filtering command above, to enable and disable CPU interface filtering on the Switch.
  • Page 232: Time Range Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ANGE OMMANDS The Time Range commands are used in conjunction with the Access Profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the Switch.
  • Page 233 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config time_range fri would mean Monday through Friday). To specify a list of days in a week, separate the daylist using a comma, with no spaces (mon,tue,fri would mean Monday, Tuesday and Friday).
  • Page 234: Safeguard Engine Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 235 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config safeguard_engine packets, until the storm has subsided. fuzzy  If selected, this function will instruct the Switch to minimize the IP and ARP traffic flow to the CPU by dynamically allotting an even bandwidth to all traffic flows.
  • Page 236: Traffic Segmentation Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied.
  • Page 237 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show traffic_segmentation Purpose Used to display the current traffic segmentation configuration on the Switch. show traffic_segmentation {<portlist>} Syntax Description This command is used to display the current traffic segmentation configuration on the Switch.
  • Page 238: Time And Sntp Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 239 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3200-28:4# show sntp Used to display the SNTP information. Purpose Syntax show sntp...
  • Page 240 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#enable sntp Command: enable sntp Success. DES-3200-28:4# disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This command is used to disable SNTP support. SNTP service must be separately configured (see config sntp).
  • Page 241 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To manually set system time and date settings: DES-3200-28:4#config time 30jun2003 16:30:30 Command: config time 30jun2003 16:30:30 Success. DES-3200-28:4# config time_zone Purpose Used to determine the time zone used in order to adjust the system clock.
  • Page 242 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dst disable  Disable the DST seasonal time adjustment for the Switch. repeating  Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula.
  • Page 243 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
  • Page 244: Arp Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr>...
  • Page 245 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config arpentry above. Restrictions Only Administrator-level users can issue this command. Example Usage: To configure a static ARP entry for the IP address 10.48.74.12 and MAC address 00:50:BA:00:07:36: DES-3200-28:4#config arpentry 10.48.74.12 00-50-BA-00-07-36 Command: config arpentry 10.48.74.12 00-50-BA-00-07-36...
  • Page 246 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config arp_aging time 30 Command: config arp_aging time 30 Success. DES-3200-28:4# show arpentry Purpose Used to display the ARP table. Syntax show arpentry {ipif [System] | ipaddress <ipaddr> | static} Description This command is used to display the current contents of the Switch’s ARP...
  • Page 247 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show arpentry Command: show arpentry ARP Aging Time : 20 Interface IP Address MAC Address Type ------------- --------------- ----------------- --------------- System 10.0.0.0 FF-FF-FF-FF-FF-FF Local/Broadcast System 10.6.51.15 00-1D-60-E7-B5-CD Dynamic System 10.22.8.50...
  • Page 248: Routing Table Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OUTING ABLE OMMANDS The Routing Table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default] <ipaddr> {<metric 1-65535>}...
  • Page 249 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete iproute Purpose Used to delete a default IP route entry from the Switch’s IP routing table. delete iproute [default] Syntax Description This command is used to delete an existing default entry from the Switch’s IP routing table.
  • Page 250 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create ipv6 neighbor_cache ipif Purpose Used to add a static neighbor to an IPv6 interface. Syntax create ipv6 neighbor_cache ipif <ipif_name 12> <ipv6addr> <macaddr> Description This command is used to add a static neighbor to an IPv6 interface.
  • Page 251 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ipv6 neighbor_cache ipif Purpose Used to display the IPv6 neighbor cache. Syntax show ipv6 neighbor_cache ipif [<ipif_name 12> | all] [ipv6address <ipv6addr> | static | dynamic | all]...
  • Page 252 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To add the default static address 10.48.74.121, with a metric setting of 1, to the routing table: DES-3200-28:4#create ipv6route default System 3FFC::1 Command: create ipv6route default System 3FFC::1 Success.
  • Page 253 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show ipv6 nd ipif System Command: show ipv6 nd ipif System Interface Name : System NS Retransmit Time : 0(ms) DES-3200-28:4# show ipv6route Purpose Used to display IPv6 routes.
  • Page 254 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config ipv6 nd ns ipif System retrans_time 10000 Command: config ipv6 nd ns ipif System retrans_time 10000 Success. DES-3200-28:4#...
  • Page 255: Mac Notification Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual MAC N OTIFICATION OMMANDS The MAC Notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification...
  • Page 256 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#disable mac_notification Command: disable mac_notification Success. DES-3200-28:4# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500>} (1) Description This command is used to monitor MAC addresses learned and entered into the FDB.
  • Page 257 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config mac_notification ports 7 enable Command: config mac_notification ports 7 enable Success. DES-3200-28:4#...
  • Page 258 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings. Syntax show mac_notification Description This command is used to display the Switch’s MAC address table notification global settings.
  • Page 259 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ------------------------------------ Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 260: Access Authentication Control Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 261 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual The Access Authentication Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login <string 15>...
  • Page 262 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Command Parameters enable admin config admin local_enable Each command is listed, in detail, in the following sections. enable authen_policy Purpose Used to enable system access authentication policy. enable authen_policy...
  • Page 263 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show authen_policy Purpose Used to display the system access authentication policy status on the Switch. Syntax show authen_policy Description This command will show the current status of the access authentication policy on the Switch.
  • Page 264 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen_login Purpose Used to configure a user-defined or default method list of authentication methods for user login. config authen_login [default | method_list_name <string 15>] method Syntax {tacacs | xtacacs | tacacs+ | radius | server_group <string 15> | local |...
  • Page 265 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen_login the Switch. method_list_name – Enter a previously implemented method list name defined by the user. The user may add one, or a combination of up to four of the following authentication methods to this method list: tacacs –...
  • Page 266 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete authen_login method_list_name Description This command is used to delete a list for authentication methods for user login. <string 15>  Enter an alphanumeric string of up to 15 characters to Parameters define the given method list to delete.
  • Page 267 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show authen_login method_list_name Zira Command: show authen_login method_list_name Zira Method List Name Priority Method Name Comment ---------------- --------- --------------- --------- Zira tacacs+ Built-in Group tacacs Built-in Group ctsnow User-defined Group...
  • Page 268 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen_enable Administrator. A maximum of eight enable method lists can be implemented simultaneously on the Switch. The sequence of methods implemented in this command will affect the authentication result. For example, if a user enters a sequence of methods like tacacs –...
  • Page 269 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen_enable server_group <string 15>  Adding this parameter will require the user to be authenticated using a user-defined server group previously configured on the Switch. local_enable  Adding this parameter will require the user to be authenticated using the local user account database on the Switch.
  • Page 270 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#delete authen_enable method_list_name Permit Command: delete authen_enable method_list_name Permit Success. DES-3200-28:4# show authen_enable Used to display the method list of authentication methods for promoting Purpose normal user level privileges to Administrator level privileges on the Switch.
  • Page 271 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show authen_enable all Command: show authen_enable all Method List Name Priority Method Name Comment ---------------- -------- ------------- ------------------ Permit tacacs+ Built-in Group tacacs Built-in Group ctsnow User-defined Group local_enable...
  • Page 272 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen application Restrictions Only Administrator-level users can issue this command. Example usage: To configure the default method list for the Web interface: DES-3200-28:4#config authen application http login default Command: config authen application http login default Success.
  • Page 273 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create authen server_host TACACS/XTACACS/TACACS+/RADIUS server host on a remote host. The TACACS/XTACACS/TACACS+/RADIUS server host will then verify or deny the request and return the appropriate message to the Switch.
  • Page 274 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen server_host tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255> | retransmit < 1-255>} (1) Description This command is used to configure a user-defined authentication server host for the TACACS/XTACACS/TACACS+/RADIUS security protocols on the Switch.
  • Page 275 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout 12 retransmit 4 Command: config authen server_host 10.1.1.121 protocol tacacs+ port 4321 timeout 12 retransmit 4 Success. DES-3200-28:4# delete authen server_host Purpose Used to delete a user-defined authentication server host.
  • Page 276 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show authen server_host IP Address – The IP address of the authentication server host. Protocol – The protocol used by the server host. Possible results will include TACACS, XTACACS, TACACS+ or RADIUS.
  • Page 277 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#create authen server_group group_1 Command: create authen server_group group_1 Success. DES-3200-28:4# config authen server_group Purpose Used to configure a user-defined authentication server group. Syntax config authen server_group [tacacs | xtacacs | tacacs+ | radius | <string 15>] [add | delete] server_host <ipaddr>...
  • Page 278 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen server_group Restrictions Only Administrator-level users can issue this command. Example usage: To add an authentication host to server group “group_1”: DES-3200-28:4# config authen server_group group_1 server_host 10.1.1.121 protocol tacacs+ Command: config authen server_group group_1 add server_host 10.1.1.121...
  • Page 279 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show authen server_group Restrictions None. Example usage: To view authentication server groups currently set on the Switch. DES-3200-28:4#show authen server_group Command: show authen server_group Group Name IP Address Protocol...
  • Page 280 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config authen parameter attempt Description This command is used to configure the maximum number of times the Switch will accept authentication attempts. Users failing to be authenticated after the set amount of attempts will be denied access to the Switch and will be locked out of further authentication attempts.
  • Page 281 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable admin Purpose Used to promote user level privileges to administrator level privileges. Syntax enable admin Description This command is for users who have logged on to the Switch on the normal user level to become promoted to the administrator level.
  • Page 282 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config admin local_enable Command: config admin local_enable Enter the old password: Enter the case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3200-28:4#...
  • Page 283: Ssh Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 284 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To enable SSH: DES-3200-28:4#enable ssh Command: enable ssh Success. DES-3200-28:4# disable ssh Used to disable SSH. Purpose Syntax disable ssh Description This command is used to disable SSH on the Switch.
  • Page 285 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config ssh authmode password enable Command: config ssh authmode password enable Success. DES-3200-28:4# show ssh authmode Purpose Used to display the SSH authentication mode setting. Syntax show ssh authmode...
  • Page 286 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ssh server Switch to attempt another login. rekey [10min | 30min | 60min | never]  Sets the time period that the Switch will change the security shell encryptions.
  • Page 287 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ssh user identify the SSH user. authmode – Specifies the authentication mode of the SSH user wishing to log on to the Switch. The administrator may choose between: hostbased –...
  • Page 288 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show ssh user authmode Command: show ssh user authmode Current Accounts: Username AuthMode HostName HostIP ---------- --------- ------------------------- --------------- Zira Password Total Entries : 1 DES-3200-28:4# Note: To configure the SSH user, the administrator must create a user account on the Switch.
  • Page 289 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ssh algorithm DSA  This parameter will enable or disable the Digital Signature Algorithm encryption. [enable | disable] – This allows the user to enable or disable algorithms entered in this command, on the Switch.
  • Page 290 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show ssh algorithm Command: show ssh algorithm Encryption Algorithm -------------------------- 3DES : Enabled AES128 : Enabled AES192 : Enabled AES256 : Enabled arcfour : Enabled blowfish : Enabled cast128...
  • Page 291: Ssl Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a...
  • Page 292 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
  • Page 293 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual...
  • Page 294 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
  • Page 295 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ssl cachetimeout timeout Used to configure the SSL cache timeout. Purpose Syntax config ssl cachetimeout timeout <value 60-86400> Description This command is used to set the time between a new key exchange between a client and a host using the SSL function.
  • Page 296 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ssl Description This command is used to view the SSL status on the Switch. Parameters None. Restrictions None. Example usage: To view the SSL status on the Switch:...
  • Page 297 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual download ssl certificate use of the SSL function. The Switch only supports certificate files with .der file extensions. <ipaddr>  Enter the IP address of the TFTP server. Parameters certfilename <path_filename 64>...
  • Page 298: D-Link Single Ip Management Commands

    OMMANDS Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. Switches using D-Link Single IP Management (labeled here as SIM) must conform to the following rules: SIM is an optional feature on the Switch and can easily be enabled or disabled.
  • Page 299 NOTE: For more details regarding improvements made in SIMv1.6, please refer to the White Paper located on the D-Link website. The D-Link Single IP Management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table:...
  • Page 300 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable sim Purpose Used to enable Single IP Management (SIM) on the Switch. Syntax enable sim Description This command is used to enable SIM globally on the Switch. SIM features and functions will not function properly unless this function is enabled.
  • Page 301 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show sim Purpose Used to view the current information regarding the SIM group on the Switch. Syntax show sim {[candidates {<candidate_id 1-100>} | members {<member_id 1-32>} | group {commander_mac <macaddr>} | neighbor]}...
  • Page 302 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To show the SIM information in detail: DES-3200-28:4#show sim Command: show sim SIM Version : VER-1.6.07 Firmware Version : 1.00.B015 Device Name MAC Address : 00-19-5B-EF-78-B5 Capabilities...
  • Page 303 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To show other groups information in summary: DES-3200-28:4#show sim group Command: show sim group SIM Group Name : default MAC Address Platform / Hold Firmware Device Name Capability Time...
  • Page 304 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual reconfig Purpose Used to connect to a member switch, through the commander switch, using Telnet. Syntax reconfig [member_id <value 1-32> | exit] Description This command is used to reconnect to a member switch using Telnet and to exit from managing the member switch and return to managing the commander switch.
  • Page 305 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To add a member: DES-3200-28:4#config sim_group add 1 Command: config sim_group add 1 Please wait for ACK !!! SIM Config Success !!! Success. DES-3200-28:4# To delete a member:...
  • Page 306 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config sim dp_interval 30 Command: config sim dp_interval 30 Success. DES-3200-28:4# To change the hold time: DES-3200-28:4# config sim hold_time 120 Command: config sim hold_time 120 Success. DES-3200-28:4#...
  • Page 307 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual download sim Purpose Used to download firmware or configuration file to an indicated device. Syntax download sim_ms [firmware_from_tftp | configuration_from_tftp] <ipaddr> <path_filename> [members <mslist 1-32> | all] Description This command is used to download a firmware file or configuration file to a specified device from a TFTP server.
  • Page 308 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To download configuration files: DES-3200-28:4#download sim_ms configuration_from_tftp 10.53.13.94 c:/des3200.txt all Command: download sim_ms firmware_from_tftp 10.53.13.94 c:/des3200.txt all This device is updating configuration. Please wait several minutes... Download Status :...
  • Page 309 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To upload configuration files to a TFTP server: DES-3200-28:4#upload sim_ms configuration_to_tftp 10.55.47.1 D:\configuration.txt members 1 Command: upload sim_ms configuration 10.55.47.1 D:\configuration.txt members 1 This device is upload configuration.
  • Page 310: Smtp Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual SMTP C OMMANDS SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered using the commands below. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the Switch, place the appropriate information into an e-mail and deliver it to recipients configured on the Switch.
  • Page 311 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual The maximum attempts for delivering mail to recipients is three. Mail message delivery attempts will be tried every five minutes until the maximum number of attempts is reached. Once reached and the message has not been successfully delivered, the message will be dropped and not received by the mail recipient.
  • Page 312 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To disable SMTP on the Switch: DES-3200-28:4#disable smtp Command: disable smtp Success. DES-3200-28:4# config smtp Purpose Used to configure necessary information in setting up the Switch as an SMTP client.
  • Page 313 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show smtp Purpose Used to view configured parameters for the SMTP function on the Switch. Syntax show smtp Description This command is used to display parameters configured for SMTP on the Switch, including server information, mail recipients and the current running status of SMTP on the Switch.
  • Page 314 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To send a test mail message to all configured mail recipients: DES-3200-28:4# smtp send_testmsg Command: smtp send_testmsg Subject: This is a SMTP test. Content: Hello everybody!! Sending mail, please wait…...
  • Page 315: Cable Diagnostics Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ABLE IAGNOSTICS OMMANDS The Cable Diagnostics commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports [<portlist> | all] Each command is listed, in detail, in the following sections.
  • Page 316 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#cable_diag ports 25-28 Command: cable_diag ports 25-28 Perform Cable Diagnostics ... Port Type Link Status Test Result Cable Length (M) ---- ------- -------------- -------------------------- ----------------- Link Up Link Down...
  • Page 317: Dhcp Local Relay Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DHCP L OCAL ELAY OMMANDS The DHCP Local Relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_local _relay vlan[<vlan_name 32>...
  • Page 318 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable dhcp_local_relay Restrictions Only Administrator-level users can issue this command. Example usage: To enable the DHCP local relay function: DES-3200-28:4#enable dhcp_local_relay Command: enable dhcp_local_relay Success. DES-3200-28:4# disable dhcp_local_relay Purpose Used to disable the DHCP local relay function on the Switch.
  • Page 319: Gratuitous Arp Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ARP C RATUITOUS OMMANDS The Gratuitous ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config gratuitous_arp send...
  • Page 320 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config gratuitous_arp send duplicate_ip_detected Purpose Used to enable or disable the sending of gratuitous ARP requests while duplicate IP addresses are detected Syntax config gratuitous_arp send duplicate_ip_detected [enable | disable]...
  • Page 321 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config gratuitous_arp learning enable Command: config gratuitous_arp learning enable Success. DES-3200-28:4# config gratuitous_arp_send periodically Purpose Used to configure the interval for periodical sending of gratuitous ARP request packets.
  • Page 322 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#enable gratuitous_arp ipif System trap log Command: enable gratuitous_arp ipif System trap log Success. DES-3200-28:4# disable gratuitous_arp Purpose Used to disable the gratuitous ARP trap and log. Syntax disable gratuitous_arp {ipif <ipif_name 12>} {trap | log} (1) Description The command is used to disable the gratuitous ARP trap and log states.
  • Page 323 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show gratuitous_arp Command: show gratuitous_arp Send on IPIF status up : Enabled Send on Duplicate_IP_Detected : Disabled Gratuitous ARP Learning : Enabled IP Interface Name : System Gratuitous ARP Trap...
  • Page 324: Vlan Trunking Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual VLAN T RUNKING OMMANDS The VLAN Trunking commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable vlan_trunk...
  • Page 325 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#disable vlan_trunk Command: disable vlan_trunk Success. DES-3200-28:4# config vlan_trunk Purpose Used to configure a port as a VLAN trunk port. Syntax config vlan_trunk ports [<portlist>|all] | state [enable|disable] Description This command is used to configure a port as a VLAN trunk port.
  • Page 326 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config vlan_trunk ports 6-7 state enable Command: config vlan_trunk ports 6-7 state enable Can not operate the member ports of any trunk. DES-3200-28:4# config vlan_trunk ports 7 state disable Command: config vlan_trunk ports 7 state disable Success.
  • Page 327 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show vlan_trunk Purpose Used to display VLAN trunk configuration. Syntax show vlan_trunk Description This command is used to display VLAN trunk information. Parameters None. Restrictions None. Example usage: To display VLAN Trunk information:...
  • Page 328: Q-In-Q Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual -Q C OMMANDS The Q-in-Q commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable qinq disable qinq...
  • Page 329 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable qinq Purpose This command is used to enable the Q-in-Q mode. Syntax enable qinq Description This command is used to enable Q-in-Q mode. When Q-in-Q is enabled, all network port roles will be NNI port and their outer TPID will be set to 88a8.
  • Page 330 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show qinq Purpose Used to show global Q-in-Q Syntax show qinq Description This command is used to show the global Q-in-Q status. Parameters None. Restrictions None. Example usage: To show global Q-in-Q status:...
  • Page 331 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config qinq ports Purpose Used to configure Q-in-Q ports. Syntax config qinq ports [<portlist> | all] {role [nni | uni] | outer_tpid <hex 0x1 - 0xffff> | trust_cvid [enable | disable] | vlan_translation [enable | disable]}...
  • Page 332 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#create vlan_translation add cvid 1-10 svid 100 Command: create vlan_translation add cvid 1-10 svid 100 Success. DES-3200-28:4# delete vlan_translation cvid Purpose Used to delete VLAN translation rules. Syntax delete vlan_translation cvid [<vidlist> | all] Description This command is used to delete VLAN translation rules.
  • Page 333 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To show VLAN translation rules for C-VID 10 to C-VID 40: DES-3200-28:4#show vlan_translation cvid 10-40 Command: show vlan_translation cvid 10-40 CVID SVID Action ---- ---- ------ Replace...
  • Page 334 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show bpdu_tunnel Purpose Used to show the BPDU Tunneling global state, tunnel destination MAC address, and port state. Syntax show bpdu_tunnel Description This command is used to show the BPDU Tunneling global state, tunnel destination MAC address, and port state.
  • Page 335 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable bpdu_tunnel Description The command is used to disable the BPDU tunneling function. Parameters None. Restrictions Only Administrator-level users can issue this command. Example usage: To disable BPDU tunneling:...
  • Page 336: Asymmetric Vlan Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual VLAN C SYMMETRIC OMMANDS The Asymmetric VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable asymmetric_vlan...
  • Page 337 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#disable asymmetric_vlan Command: disable asymmetric_vlan Success. DES-3200-28:4# show asymmetric_vlan Purpose Used to view the asymmetric VLAN state on the Switch. Syntax show asymmetric_vlan Description This command is used to display the asymmetric VLAN state on the...
  • Page 338: Mld Snooping Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual MLD S NOOPING OMMANDS The MLD Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mld_snooping [vlan <vlan_name 32>...
  • Page 339 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To configure the MLD snooping to the default VLAN with the state enabled: DES-3200-28:4#config mld_snooping vlan default state enable Command: config mld_snooping vlan default state enable Success. DES-3200-28:4# config mld_snooping querier...
  • Page 340 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mld_snooping querier version <value 1-2> - Specifies the version of MLD packet that will be sent by this port. Restrictions Only Administrator-level users can issue this command. Example usage:...
  • Page 341 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mld_snooping mrouter_ports_forbidden Parameters <vlan_name 32> - The name of the VLAN on which the forbidden router port resides. [add | delete] - Specifies to add or delete the forbidden router ports.
  • Page 342 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# disable mld_snooping Command: disable mld_snooping Success. DES-3200-28:4# show mld_snooping Used to display the current configuration of MLD snooping on the Purpose Switch. Syntax show mld_snooping {vlan <vlan_name 32> | vlanid <vidlist>}...
  • Page 343 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show mld_snooping group Purpose Used to display the current MLD snooping group configuration on the Switch. Syntax show mld_snooping group {[vlan <vlan_name 32> | vlanid <vidlist>]} Description This command is used to display the current MLD snooping group configuration on the Switch.
  • Page 344 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show mld_snooping mrouter_ports <vidlist>  The VIDs of the configured routers to view information for. static  Displays router ports that have been statically configured. dynamic  Displays router ports that have been dynamically configured.
  • Page 345: Igmp Snooping Multicast Vlan Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IGMP S VLAN C NOOPING ULTICAST OMMANDS The IGMP Snooping Multicast VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table:...
  • Page 346 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create igmp_snooping multicast_vlan when remap priority is set. Restrictions Only Administrator-level users can issue this command. Example usage: To create an IGMP snooping multicast VLAN with the VLAN name “mv1” and a VLAN ID of 2:...
  • Page 347 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config igmp_snooping multicast_vlan with the data traffic to be forwarded on the multicast VLAN. If none is specified, the packet’s original priority will be used. The default setting is none.
  • Page 348 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config igmp_snooping multicast_vlan_group v1 add 225.1.1.1 Command: config igmp_snooping multicast_vlan_group v1 add 225.1.1.1 Success. DES-3200-28:4#...
  • Page 349 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show igmp_snooping multicast_vlan_group Purpose Used to display the multicast groups configured for the specified multicast VLAN. show igmp_snooping multicast_vlan_group {<vlan_name 32>} Syntax Description This command is used to display the multicast groups configured for the specified multicast VLAN.
  • Page 350 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable igmp_snooping multicast_vlan Purpose Used to enable the multicast VLAN function. Syntax enable igmp_snooping multicast_vlan Description This command is used to control the multicast VLAN function. The ISM VLAN will take effect when IGMP snooping multicast VLAN is enabled.
  • Page 351 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display IGMP snooping multicast VLAN information: DES-3200-28:4# show igmp_snooping multicast_vlan Command: show igmp_snooping multicast_vlan Multicast VLAN Global State : Enabled : 4001 VLAN Name: 4001 Member Ports...
  • Page 352: Limited Ip Multicast Address Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IP M IMITED ULTICAST DDRESS OMMANDS The Limited IP Multicast Address commands allows the administrator to permit or deny access to a port or range of ports by specifying a range of multicast addresses. The limited IP multicast address commands in the Command Line Interface (CLI) are...
  • Page 353 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mcast_filter_profile Purpose Used to add or delete a range of multicast addresses to the profile. Syntax config mcast_filter_profile [profile_id < value 1-24>| profile_name <name 1-32> ] {profile_name <name 1-32> | [add | delete ] <mcast_address_list>} (1)
  • Page 354 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# delete mcast_filter_profile profile_id 3 Command: delete mcast_filter_profile profile_id 3 Success. DES-3200-28:4# delete mcast_filter_profile Purpose Used to delete a multicast address profile. Syntax delete mcast_filter_profile profile_name <name 1-32> Description This command is used to delete a multicast address profile.
  • Page 355 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show mcast_filter_profile Command: show mcast_filter_profile Mcast Filter Profile: Profile ID Name Multicast Addresses ---------- -------------------------------- ------------------------------- 234.1.1.1-234.1.1.10 , 234.2.1.1-234.2.1.100 Profile ID Name Multicast Addresses ---------- -------------------------------- ------------------------------- 239.1.10.1-239.1.10.5 Total Profile Count:...
  • Page 356 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#config limited_multicast_addr ports 1,3 add profile_id 2 Command: config limited_multicast_addr ports 1,3 add profile_id 2 Success. DES-3200-28:4# show limited_multicast_addr Purpose Used to show the per-port Limited IP multicast address range.
  • Page 357 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config max_mcast_group Syntax config max_mcast_group ports <portlist> max_group <value 1- 1024> This command is used to configure the maximum number of Description multicast groups that a port can join.
  • Page 358 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show max_mcast_group ports 1 Command: show max_mcast_group ports 1 Max Multicast Filter Group: Port MaxMcastGroup ---- ------------- 1024 DES-3200-28:4#...
  • Page 359: Lldp Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual LLDP C OMMANDS The LLDP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters enable lldp disable lldp config lldp <sec 5 - 32768 >...
  • Page 360 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Command Parameters show lldp statistics show lldp statistics ports {<portlist>} Each command is listed, in detail, in the following sections: enable lldp Purpose Used to enable LLDP operations on the Switch.
  • Page 361 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# disable lldp Command: disable lldp Success. DES-3200-28:4#...
  • Page 362 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp message_tx_interval Purpose Used to change the packet transmission interval. config lldp message_tx_interval <sec 5-32768> Syntax Description This command is used to control how often active ports retransmit advertisements to their neighbors.
  • Page 363 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp tx_delay Purpose Used to change the minimum time (delay-interval) of any LLDP port. It will delay advertising successive LLDP advertisements due to a change in LLDP MIB content. The Tx delay defines the minimum interval between the sending of LLDP messages due to constant changes of MIB content.
  • Page 364 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp notification_interval Purpose Used to configure the timer of the notification interval used to send notifications to configured SNMP trap receiver(s). Syntax config lldp notification_interval <sec 5 - 3600>...
  • Page 365 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp ports admin_status Purpose Used to configure per-port transmit and receive modes. config lldp ports [<portlist>|all] admin_status [tx_only | rx_only | tx_and_rx Syntax | disable] Description These options enable the Switch to control which ports participate in LLDP traffic and whether the participating ports allow LLDP traffic in only one direction or in both directions.
  • Page 366 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable Command: config lldp ports 1-2 mgt_addr ipv4 192.168.254.10 enable Success DES-3200-28:4# config lldp ports basic_tvls Purpose Used to configure an individual port or group of ports to exclude one or more of the optional TLV data types from outbound LLDP advertisements.
  • Page 367 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config lldp ports all basic_tlvs system_name enable Command: config lldp ports all basic_tlvs system_name enable Success. DES-3200-28:4# config lldp ports dot1_tlv_pvid Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 Organizationally port vlan ID TLV data types come...
  • Page 368 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp ports dot1_tlv_protocol_vid dot1_tlv_protocol_vid - This TLV optional data type determines whether the IEEE 802.1 organizationally defined port VLAN ID TLV transmission is allowed on a given LLDP transmission capable port. The default state is disabled.
  • Page 369 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp ports dot1_tlv_protocol_identity Syntax config lldp ports [<portlist>|all] dot1_tlv_ protocol_identity [all | {eapol | lacp | gvrp | stp }] [enable | disable] This TLV optional data type indicates whether the corresponding Local Description System's Protocol Identity instance will be transmitted on the port.
  • Page 370 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config lldp ports dot3_tlvs includes whether the port support the auto-negotiation function, whether the function is enabled, the auto-negotiated advertised capability, and the operational MAU type. The default state is disabled.
  • Page 371 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# config lldp forward_ message enable Command: config lldp forward_ message enable Success. DES-3200-28:4# show lldp Purpose This command displays the Switch’s general LLDP configuration status. Syntax show lldp Description This command is used to display the Switch’s general LLDP...
  • Page 372 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display the management address information: DES-3200-28:4# show lldp mgt_addr ipv4 192.168.254.10 Command: show lldp mgt_addr ipv4 192.168.254.10 Total Address:1 DES-3200-28:4# show lldp ports Purpose Used to display the LLDP per port configuration for advertisement options.
  • Page 373 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp ports 1 Command: show lldp ports 1 Port ID --------------------------------------------------------------------- Admin Status : TX_and_RX Notification Status : Disable Advertised TLVs Option Port Description Disable System Name...
  • Page 374 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp local_ports 1 mode detailed Command: show lldp local_ports 1 mode detailed Port ID : 1 -------------------------------------------------------------------- Port ID Subtype : Local Port ID : 1/1 Port Description...
  • Page 375 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp local_ports 1 mode brief Command: show lldp local_ports 1 mode brief Port ID : 1 --------------------------------------------------------- Port ID Subtype : Local Port ID : 1/1 Port Description...
  • Page 376 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp remote_ports 1-2 brief Command: show lldp remote_ports 1-2 brief Port ID: 1 ----------------------------------------------------------- Remote Entities Count : 3 Entity 1 Chassis ID Subtype : MAC Address...
  • Page 377 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display remote table entries in normal mode: DES-3200-28:4# show lldp remote_ports ports 1 normal Command: show lldp remote_ports ports 1 normal Port ID : 1 ----------------------------------------------------------- Remote Entities Count : 2...
  • Page 378 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display remote table entries in detailed mode:...
  • Page 379 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp remote_ports 1 mode detailed Command: show lldp remote_ports 1 mode detailed Port ID : 1 ---------------------------------------------------------------------- Remote Entities count : 1 Entity 1 Chassis Id Subtype...
  • Page 380 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Maximum Frame Size : 1536 Unknown TLVs count (None.) DES-3200-28:4# show lldp statistics Purpose Used to display the system LLDP statistics information. Syntax show lldp statistics Description This command is used to display an overview of neighbor detection activity on the Switch.
  • Page 381 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4# show lldp statistics ports 1 Command: show lldp statistics ports 1 Port ID: 1 ----------------------------------------------------------- lldpStatsTxPortFramesTotal : 27 lldpStatsRxPortFramesDiscardedTotal lldpStatsRxPortFramesErrors lldpStatsRxPortFramesTotal : 27 lldpStatsRxPortTLVsDiscardedTotal lldpStatsRxPortTLVsUnrecognizedTotal : 0 lldpStatsRxPortAgeoutsTotal...
  • Page 382: Dos Prevention Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual REVENTION OMMANDS The DoS Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config dos_prevention [ {land_attack | blat_attack | smurf_attack | tcp_null_scan |...
  • Page 383 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config dos_prevention dos_type Purpose This command is used to discard the L3 control packets sent to CPU from specific ports. Syntax config dos_prevention dos_type [ {land_attack | blat_attack | smurf_attack | tcp_null_scan | tcp_xmascan | tcp_synfin | tcp_syn_srcport_less_1024} (1) | all] {action [ drop | mirror <port>...
  • Page 384 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable dos_prevention trap_log Purpose Used to enable a DoS prevention trap/log. Syntax enable dos_prevention trap_log Description This command is used to send traps and logs when a DoS attack event occurs.
  • Page 385 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show dos_prevention Purpose Used to display DoS prevention information. Syntax show dos_prevention { land_attack | blat_attack | smurf_attack | tcp_null_scan | tcp_xmascan | tcp_synfin | tcp_syn_srcport_less_1024 } Description This command is used to display DoS prevention information, including the type of DoS attack, the prevention state, the corresponding action if the prevention is enabled, and the counter information of the DoS packet.
  • Page 386 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display DoS prevention information for Land Attack: DES-3200-28:4# show dos_prevention land_attack Command: show dos_prevention land_attack DoS Type: Land Attack State: Enabled Action: Mirror Port: 7 Priority: 5 Rx Rate(Kbit/sec): 1024...
  • Page 387 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To clear all counters of the prevention of each DoS attack: DES-3200-28:4# clear dos_prevention counters Command: clear dos_prevention counters Success. DES-3200-28:4#...
  • Page 388: Ip-Mac-Port Binding Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual IP-MAC-P INDING OMMANDS The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC-port binding is to restrict the access to a switch to a number of authorized users.
  • Page 389 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create address_binding ip_mac ipaddress Purpose Used to create an IP-MAC-port binding entry. Syntax create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} Description This command is used to create an IP-MAC-port binding entry.
  • Page 390 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure address binding on the Switch: DES-3200-28:4#config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00- 00-00-00-00-05 Command: config address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00- 00-00-00-05 Success. DES-3200-28:4# config address_binding ip_mac ports Used to configure an IP-MAC-port binding state to enable or disable for specified ports.
  • Page 391 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure address binding on the Switch: DES-3200-28:4#config address_binding ip_mac ports 2 state enable Command: config address_binding ip_mac ports 2 state enable Success. DES-3200-28:4# show address_binding Purpose Used to display IP-MAC-port binding entries.
  • Page 392 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show address_binding ip_mac all Command: show address_binding ip_mac all IP Address MAC Address Mode ACL Status Ports --------------- ----------------- --------------- --------- ---------- 10.1.1.1 00-00-00-00-00-11 Static Active 1,3,5,7,8 10.1.1.2 00-00-00-00-00-12...
  • Page 393 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete address_binding Purpose Used to delete IP-MAC-port binding entries. Syntax delete address_binding [ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} | all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]] Description This command is used to delete IP-MAC-port binding entries. Two different kinds of information can be deleted.
  • Page 394 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable address_binding trap_log Purpose Used to enable the trap log for the IP-MAC-port binding function. Syntax enable address_binding trap_log Description This command, along with the disable address_binding trap_log will enable and disable the sending of trap log messages for IP-MAC- port binding.
  • Page 395 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show address_binding dhcp_snoop Purpose To show address binding entries created by DHCP packet. Syntax show address_binding dhcp_snoop {[max_entry {ports <portlist>} | binding_entry {port <port>}]} Description This command is used to show address binding DHCP snooping information.
  • Page 396 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display address binding DHCP snooping maximum entry: DES-3200-28:4#show address_binding dhcp_snoop max_entry Command: show address_binding dhcp_snoop max_entry Port Max entry ---- --------- CTRL+C ESC q Quit SPACE n Next Page ENTER Next Page A All...
  • Page 397 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To enable address binding DHCP snooping: DES-3200-28:4#enable address_binding dhcp_snoop Command: enable address_binding dhcp_snoop Success. DES-3200-28:4# disable address_binding dhcp_snoop Purpose Used to disable the address binding auto mode.
  • Page 398 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config address_binding dhcp_snoop max_entry Purpose Used to specify the maximum number of entries which can be learned by the specified ports. Syntax config address_binding dhcp_snoop max_entry ports [<portlist> | all] limit [<value 1-10>...
  • Page 399 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable address_binding arp_inspection Purpose Used to enable ARP inspection. Syntax enable address_binding arp_inspection Description This command is used to filter ARP packets which have unauthorized sender MAC, IP address, and ingress port. ARP inspection is only active on IP-MAC-Port Binding enabled ports.
  • Page 400: Loopback Detection Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OOPBACK ETECTION OMMANDS The Loopback Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config loopdetect { recover_timer [ 0 | <value 60-1000000> ] | interval < value 1-32767> | mode [ port-based |...
  • Page 401 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config loopdetect Purpose Used to configure the loopback detection function on the Switch. Syntax config loopdetect { recover_timer [ 0 | <value 60-1000000> ] | interval < value 1-32767> | mode...
  • Page 402 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config loopdetect ports Purpose Used to configure the loopback detection function for the port on the Switch. Syntax config loopdetect ports [ <portlist> | all ] state [ enable | disable ]...
  • Page 403 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable loopdetect Purpose Used to globally enable the loop-detect function on the Switch. Syntax enable loopdetect Description This command is used to allow the loop detection function to be globally enabled on the Switch.
  • Page 404 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show loopdetect Purpose Used to display the Switch’s current loopback detection configuration. show loopdetect Syntax Description This command is used to display the Switch’s current loopback detection configuration. Parameters None.
  • Page 405 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show loopdetect ports Purpose Used to display the loopback detection configuration per port on the Switch. Syntax show loopdetect ports [ <portlist> | all ] Description This command will display the Switch’s current per-port loop-detect configuration and status.
  • Page 406 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config loopdetect trap Purpose Used to configure loopback detection traps. config loopdetect trap [ none | loop_detected | loop_cleared | both ] Syntax Description This command is used to specify the trap modes for loop detection.
  • Page 407: Protocol Vlan Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual VLAN C ROTOCOL OMMANDS The Protocol VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create group_id <int 1-16> {group_name <name 32>}...
  • Page 408 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create dot1v_protocol_group Purpose Used to create a protocol group for the protocol VLAN function. Syntax create dot1v_protocol_group group_id <int 1-16> {group_name <name 32>} Description This command is used to create a protocol group for the protocol VLAN function.
  • Page 409 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To add a protocol IPv6 to protocol group 1: DES-3200-28:4#config dot1v_protocol_group group_id protocol Ethernet_2 0x86DD Command: config dot1v_protocol_group group_id 1 add protocol Ethernet_2 0x86DD The protocol value configured to add will take effect on both frame types ethernet_2 and ieee802.3_snap.
  • Page 410 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show dot1v_protocol_group Purpose Used to display the protocols defined in a protocol group. Syntax show dot1v_protocol_group {[group_id <int 1-16> | group_name <name 32>]} Description This command is used to display the protocols defined in protocol groups.
  • Page 411 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config port dot1v ports Purpose Used to assign the VLAN for untagged packets that ingress from the portlist based on the protocol group configured. Syntax config port dot1v ports [all] [add protocol_group [group_id <int 1-16> | group_name <name 32>][vlan <vlan_name 32>...
  • Page 412 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show port dot1v Purpose Used to display the VLAN to be associated with untagged packets ingressed from a port based on the protocol group. Syntax show port dot1v {ports <portlist> }...
  • Page 413: Mac-Based Vlan Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual MAC- VLAN C BASED OMMANDS The MAC-based VLAN commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters create mac_based_vlan mac_address <macaddr>...
  • Page 414 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create mac_based_vlan Purpose Used to create a static MAC-based VLAN entry. Syntax create mac_based_vlan mac_address <macaddr> vlan <vlan_name 32> Description This command is used to create a static MAC-based VLAN entry.
  • Page 415 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show mac_based_vlan Purpose Used to display a static mac-based vlan entry. Syntax show mac_based_vlan {mac <macaddr> | vlan <vlan_name 32>} Description This command is used to display a static MAC-Based VLAN entry.
  • Page 416: Flow Meter Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ETER OMMANDS The Flow Meter commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config flow_meter <value 1-512> access_id < access_id >[[ rate <value 64- profile_id 1024000>...
  • Page 417 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config flow_meter profile_id Purpose Used to configure packet flow-based metering based on an access profile and rule. Syntax config flow_meter profile_id <value 1-512> access_id < access_id >[[ rate <value 64- 1024000>...
  • Page 418 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show flow_meter Purpose Used to display the flow-based metering configuration. Syntax show flow_meter {profile_id <value 1-512> {access_id <access_id>}} Description This command displays the flow meter configuration. Parameters profile_id – Specifies the profile ID.
  • Page 419: Mac-Based Access Control Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual MAC- BASED CCESS ONTROL OMMANDS The MAC-based Access Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters...
  • Page 420 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control log [enable | disable] state Each command is listed, in detail, in the following sections:...
  • Page 421 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable mac_based_access_control Purpose Used to enable MAC-based access control. Syntax enable mac_based_access_control Description This command enables MAC-based access control on the Switch. By default this is not enabled. Parameters None.
  • Page 422 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control password Purpose Used to configure the password of the MAC-based access control. Syntax config mac_based_access_control password <passwd 16> Description This command will set the password that will be used for authentication via RADIUS server.
  • Page 423 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control auth_failover Purpose Used to configure MAC-based access control authentication failover. config mac_based_access_control auth_failover [enable | disable] Syntax Description When the authentication failover is disabled, if RADIUS servers are unreachable, the authentication will fail.
  • Page 424 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control ports Purpose Used to configure the parameters of the MAC-based access control. Syntax config mac_based_access_control ports [<portlist> | all] {state [enable | disable] | mode [port_based | host_based] aging_time [infinite | <min 1-1440>] | hold_time [infinite | <sec 1- 300>...
  • Page 425 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create mac_based_access_control Purpose Used to assign the guest VLAN. Syntax create mac_based_access_control [guest_vlan <vlan_name 32>| guest_vlanid <vlanid 1-4094>] Description This command is used to assign the guest VLAN. Parameters guest_vlan –...
  • Page 426 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual clear mac_based_access_control auth_mac Purpose Used to reset the current state of a user. The re-authentication will be started after the user traffic is received again. clear mac_based_access_control auth_mac [ports [all | <portlist>] | Syntax mac_addr <macaddr>]...
  • Page 427 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control_local mac Purpose Used to configure a MAC-based access control local database entry. Syntax config mac_based_access_control_local mac <macaddr> [vlan <vlan_name 32> | vlanid <vlanid 1-4094> | clear_vlan ]...
  • Page 428 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#delete mac_based_access_control_local vlan default Command: delete mac_based_access_control_local vlan default Success. DES-3200-28:4# show mac_based_access_control Purpose Used to display the MAC-based access control setting. Syntax show mac_based_access_control {ports {<portlist> } } Description This command is used to display the MAC-based access control setting.
  • Page 429 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show mac_based_access_control_local Used to display MAC-based access control local databases. Purpose Syntax show mac_based_access_control_local {[mac<macaddr> | [vlan <vlan_name 32> | vlanid <vlanid 1-4094>]} Description This command is used to display MAC-based access control local databases.
  • Page 430 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To display MAC-based access control local databases by VLAN: DES-3200-28:4#show mac_based_access_control_local vlan default Command: show mac_based_access_control_local vlan default MAC Address VLAN Name ----------------- ---------------------- ------ 00-00-00-00-00-01 default 00-00-00-00-00-04 default...
  • Page 431 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control max_users Purpose Used to configure the maximum number of authorized clients. Syntax config mac_based_access_control max_users [no_limit | <value 1- 128>] Description This command is used to specify the maximum user limit per counter.
  • Page 432 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control authorization attributes Purpose Used to enable or disable local or RADIUS authorization to accept an authorized configuration. Syntax config mac_based_access_control authorization attributes { radius [ enable | disable ] | local...
  • Page 433 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable authorization attributes Purpose The enable authorization command globally enables the authorization for attributes function. enable authorization attributes Syntax Description Used to enable authorization attributes. When enabled, authorized attributes (for example VLAN, 802.1p default priority, and ACL) assigned by the RADUIS server or local database.
  • Page 434 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show authorization Purpose Used to display authorization for attributes status. Syntax show authorization Description Used this to view authorization for attributes status. Parameters None. Restrictions None. Example usage: This example displays authorization status:...
  • Page 435 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config mac_based_access_control log state Purpose Used to enable or disable generating of MAC-based access control logs. Syntax config mac_based_access_control log state [enable | disable] Description When MAC-based access control log state is enabled, The log of MAC-based access control will be generated.
  • Page 436: Arp Spoofing Prevention Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ARP S POOFING REVENTION OMMANDS The ARP Spoofing Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config [add gateway_ip <ipaddr>...
  • Page 437 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config arp_spoofing_prevention Purpose Used to configure the prevention of ARP spoofing attacks. Syntax config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports [<portlist>|all] | delete gateway_ip <ipaddr>] Description This command is used to configure the prevention of ARP spoofing attacks.
  • Page 438 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show arp_spoofing_prevention Purpose Used to display ARP spoofing prevention entries. show arp_spoofing_prevention Syntax Description This command is used to display ARP spoofing prevention entries. Parameters None. None. Restrictions Example usage:...
  • Page 439: Technical Support Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ECHNICAL UPPORT OMMANDS The Technical Support commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters show tech_support upload <ipaddr>...
  • Page 440 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#show tech_support Command: show tech_support DES-3200-28 Fast Ethernet Switch Technical Information Report ============================================================================= [CPU Utilization 8292070ms] CPU Utilization : ------------------------------------------------------------------------------- Five Seconds - One Minute - Five Minutes -...
  • Page 441 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual...
  • Page 442 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual upload tech_support_toTFTP Purpose Used to upload information for assistance from technical support. upload tech_support_toTFTP <ipaddr> <path_filename 64> Syntax Description This command is used to upload information for assistance from technical support to a TFTP server.
  • Page 443: Command History Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OMMAND ISTORY OMMANDS The Command History commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config command_history <value 1-40>...
  • Page 444 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28:4#? cable_diag ports clear clear address_binding dhcp_snoop binding_entry ports clear arptable clear counters clear dos_prevention counters clear fdb clear igmp_snooping data_driven_group clear log Clear mac_based_access_control auth_mac clear port_security_entry port config 802.1p default_priority...
  • Page 445 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Purpose Used to display all commands in the Command Line Interface (CLI). Syntax Description This command is used to display all of the commands available through the Command Line Interface (CLI).
  • Page 446 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config command_history Purpose Used to configure the command history. Syntax config command_history <value 1-40> Description This command is used to configure the command history. <value 1-40>  The number of previously executed commands Parameters maintained in the buffer.
  • Page 447: Connectivity Fault Management Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ONNECTIVITY AULT ANAGEMENT OMMANDS Connectivity Fault Management (CFM) or Ethernet Connectivity Fault Management is an end-to-end Ethernet layer OAM protocol. CFM is defined by IEEE 802.1ag and includes connectivity monitoring, fault notification and means of isolating faults on large Ethernet metropolitan-area networks (MANs) and WANs.
  • Page 448 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual forwards all CFM frames at a higher level regardless of the origin of the frame, Inward or Outward. If the port on which the inward MEP is configured is blocked by Spanning-Tree Protocol, the MEP can no longer transmit or receive CFM messages.
  • Page 449 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual The Connectivity Fault Management (CFM) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create cfm md <string 22> level <int 0-7>...
  • Page 450 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create cfm md Purpose Used to create a maintenance domain for CFM. Syntax create cfm md <string 22> level <int 0-7> Description Use this command to create a CFM maintenance domain and set the level for that domain.
  • Page 451 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To configure the maintenance domain called “op_domain” and specify the explicit option for creating MIPs: DES-3200-28F:4# config cfm md op_domain mip explicit Command: config cfm md op_domain mip explicit Success.
  • Page 452 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cfm ma Purpose This command is used to configure the parameters of a previously created CFM maintenance association. Syntax config cfm ma <string 22> md <string 22> { vlanid <vlanid 1-4094> | mip [none | auto | explicit | defer] | sender_id [none | chassis | manage | chassis_manage | defer] | ccm_interval [10ms | 100ms | 1sec | 10sec | 1min | 10min ] | mepid_list [add | delete] <mepid_list>...
  • Page 453 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To configure parameters for MA “op1”: DES-3200-28F:4# config cfm ma op1 md op_domain vlan 1 ccm_interval 1sec Command: config cfm ma op1 md op_domain vlan 1 ccm_interval 1sec Success.
  • Page 454 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28F:4# create cfm mep mep1 mepid 1 md op_domain ma op1 direction inward port Command: create cfm mep mep1 mepid 1 md op_domain ma op1 direction inward port 2 Success.
  • Page 455 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cfm mep Purpose This command is used to configure the parameters of a previously created CFM MEP. Syntax config cfm mep [ mepname <string 32> | mepid <int 1-8191> md <string 22> ma <string 22>] {state [enable | disable] | ccm [enable | disable] | pdu_priority <int 0-7>...
  • Page 456 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure parameters for MEP “mep1”: DES-3200-28F:4# config cfm mep mep1 state enable ccm enable Command: config cfm mep mep1 state enable ccm enable Success. DES-3200-28F:4# delete cfm mep Purpose This command is used to delete a previously created MEP.
  • Page 457 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete cfm ma Purpose This command is used to delete a previously created maintenance association. Syntax delete cfm ma <string 22> md <string 22> Description All MEPs created in the maintenance association will be deleted automatically.
  • Page 458 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable cfm Purpose This command is used to enable the CFM globally. enable cfm Syntax Description This command is used to enable the CFM globally. Parameters None. Only Administrator-level users can issue this command.
  • Page 459 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config cfm ports Purpose This command is used to enable or disable the CFM function on a per-port basis. config cfm ports <portlist> state [ enable | disable] Syntax Description By default, the CFM function is disabled on all ports.
  • Page 460 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To view CFM settings for ports 3-6: DES-3200-28F:4# show cfm ports 3-6 Command: show cfm ports 3-6 Port State ----- --------- Enabled Enabled Enabled Disabled DES-3200-28F:4# show cfm Purpose This command is used to show the CFM configuration.
  • Page 461 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To view CFM settings for MD “op_domain” MA “op1”: DES-3200-28F:4# show cfm md op_domain ma op1 Command: show cfm md op_domain ma op1 MA VID MIP Creation : none...
  • Page 462 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To view CFM settings for MEP “mep1”: DES-3200-28F:4# show cfm mepname mep1 Command: show cfm mepname mep1 Name : mep1 MEPID Port Direction : inward CFM Port State : enabled...
  • Page 463 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show cfm fault Purpose This command is used to show the MEPs that have faults. Syntax show cfm fault { md <string 22> { ma <string 22> } }...
  • Page 464 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display CFM configuration for port 1: DES-3200-28F:4# show cfm port1 Command: show cfm port1 MAC Address: 00-05-78-82-32-01 MD Name MA Name MEPID Level Direction VID ----------- ----------- ----- ----- --------- ----...
  • Page 465 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To initiate a loopback test from MEP “mep1”: DES-3200-28F:4# cfm loopback 00-01-02-03-04-05 mep mep1 Command: cfm loopback 00-01-02-03-04-05 mep mep1 Request timed out. Request timed out. Reply from MPID 52: bytes=xxx time=xxxms Request timed out.
  • Page 466 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show cfm linktrace Purpose This command is used to show the link trace responses. Syntax show cfm linktrace [ mepname <string 32> | mepid <int 1-8191> md <string 22> ma <string 22>] { trans_id <uint>}...
  • Page 467 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To view link trace results for trace of MEP “mep1” transaction “tras_id 26”: DES-3200-28F:4# show cfm linktrace mep mep1 trans_id 26 Command: show cfm linktrace mep mep1 trans_id 26...
  • Page 468 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete cfm linktrace Purpose This command is used to delete received link trace responses. delete cfm linktrace { [ md <string 22> { ma <string 22> { mepid <int 1-8191> } } | mepname Syntax <string 32>...
  • Page 469 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show cfm mipccm Purpose This command is used to display the MIP CCM database entries. Syntax show cfm mipccm Description All entries in the MIP CCM database will be shown. A MIP CCM entry is similar to a FDB which keeps the forwarding port information of a MAC entry.
  • Page 470 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To enable all MPs to reply to LTM: DES-3200-28F:4# config cfm mp_ltr_all enable Command: config cfm mp_ltr_all enable Success. DES-3200-28F:4# show cfm mp_ltr_all Purpose This command is used to show the current configuration of the "all MPs reply LTRs" function.
  • Page 471 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To view remote MEP information for remote MEP ID “2”: DES-3200-28F:4# show cfm remote_mep mepname mep1 remote_mepid 2 Command: show cfm remote_mep mepname mep1 remote_mepid 2 Remote MEPID MAC Address...
  • Page 472 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual --------------------------- Port VidDrop OpcoDrop ----- ---------- ---------- CFM TX Statistics ----------------------------------------------------------------------- Port AllPkt ----- ---------- ---------- ---------- ---------- ---------- ---------- 6358 6358 DES-3200-28:4#...
  • Page 473 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display the CFM packet CCM counters: DES-3200-28:4# show cfm pkt_cnt ccm Command: show cfm pkt_cnt ccm CCM RX counters: XCON = Cross-connect CCMs Error = Error CCMs...
  • Page 474: Ethernet Oam Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual OAM C THERNET OMMANDS Ethernet OAM (Operations, Administration, and Maintenance) is a data link layer protocol which provides network administrators the ability to monitor the health of the network and quickly determine the location of failing links or fault conditions on point-to- point and emulated point-to-point Ethernet link.
  • Page 475 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (mode) Purpose Used to configure Ethernet OAM mode for ports. Syntax config ethernet_oam ports [ <portlist> | all ] mode [ active | passive ] Description The command is used to configure Ethernet OAM for ports to operate in active or passive mode.
  • Page 476 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (state) Purpose Used to enable or disable Ethernet OAM per port. Syntax config ethernet_oam ports [<portlist> | all ] state [ enable | disable ] Description The command is used to enable or disable Ethernet OAM function on a per port basis.
  • Page 477 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DES-3200-28F:4# config ethernet_oam ports 1 link_monitor error_symbol threshold 2 window 1000 notify_state enable Commands: config ethernet_oam ports link_monitor error_symbol threshold window 1000 notify_state enable Success DES-3200-28F:4# config ethernet_oam ports (link monitor error frame) Purpose Used to configure Ethernet OAM link monitoring error frame configuration for ports.
  • Page 478 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (link monitor error frame seconds) Purpose Used to configure Ethernet OAM link monitoring error frame seconds configuration for ports. config ethernet_oam ports [<portlist> | all ] link_monitor error_frame_seconds Syntax { threshold <number>...
  • Page 479 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (link monitor error frame period) Purpose Used to configure Ethernet OAM link monitoring error frame period for ports. Syntax config ethernet_oam ports [<portlist> | all ] link_monitor error_frame_period { threshold <number>...
  • Page 480 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (critical link event) Purpose Used to configure Ethernet OAM critical link event for ports. Syntax config ethernet_oam ports [ <portlist> | all ] critical_link_event { dying_gasp | critical_event }...
  • Page 481 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (remote loopback) Purpose Used to start or stop Ethernet OAM remote loopback mode for the remote peer of the port. Syntax config ethernet_oam ports [<portlist> | all ] remote_loopback [ start | stop ]...
  • Page 482 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config ethernet_oam ports (received remote loopback) Purpose Used to configure the method to process the received Ethernet OAM remote loopback command. Syntax config ethernet_oam ports [ <portlist> | all ] received_remote_loopback [ process | ignore ]...
  • Page 483 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ethernet_oam ports (status)  ActiveSendLocal: The port is active and is sending local information  SendLocalAndRemote: The local port has discovered the peer but has not yet accepted or rejected the configuration of the peer.
  • Page 484 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage To show OAM control and status information on port 1-2: DES-3200-28F:4# show ethernet_oam ports 1-2 status Commands: show ethernet_oam ports 1-2 status Port 1 ------------------- Local Client OAM...
  • Page 485 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ethernet_oam ports (configuration) Purpose Used to display Ethernet OAM configuration per port. show ethernet_oam ports {<portlist>} configuration Syntax Description Use this to view Ethernet OAM configurations for ports.
  • Page 486 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To show Ethernet OAM configuration on port 1-2: DES-3200-28F:4# show ethernet_oam ports 1-2 configuration Commands: show ethernet_oam ports 1-2 configuration Port 1 --------------------------------------------------- : Enabled Mode : Active...
  • Page 487 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ethernet_oam ports (statistics) Purpose Used to display Ethernet OAM statistics for ports. Syntax show ethernet_oam ports {<portlist>} statistics Description Use this command to display Ethernet OAM ports statistics information.
  • Page 488 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show ethernet_oam ports (event log) Purpose Used to display Ethernet OAM event log show ethernet_oam { <portlist>} event_log { index <value_list>} Syntax Description Use this command to view ports Ethernet OAM event log information. The Switch can buffer 1000 event logs.
  • Page 489 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual clear ethernet_oam ports (statistics) Purpose Used to clear Ethernet OAM port statistics. Syntax clear ethernet_oam ports [ <portlist> | all ] statistics Description Use this command to clear Ethernet OAM ports statistics information.
  • Page 490: Bpdu Attack Protection Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual BPDU A TTACK ROTECTION OMMANDS The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config bpdu_protection ports [<portlist>...
  • Page 491 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config bpdu_protection ports Purpose Used to configure the BPDU Attack Protection state and mode of a port. Syntax config bpdu_protection ports[<portlist> | all ] {state [enable | disable] | mode [ drop | block |...
  • Page 492 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To set the BPDU attack protection port state to enable and drop mode: DES-3200-28F:4# config bpdu_protection ports 1 state enable mode drop Commands: config bpdu_protection ports 1 state enable mode drop Success.
  • Page 493 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config bpdu_protection trap/log Purpose Used to configure trap and log settings for BPDU attack protection events. Syntax config bpdu_protection [ trap | log ] [ none | attack_detected | attack_cleared | both ]...
  • Page 494 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable bpdu_protection Purpose Used to globally enable BPDU attack protection on the Switch. Syntax enable bpdu_protection Description Use this to enable BPDU attack protection. NOTE: The BPDU Attack Protection function and Spanning Tree Protocol for ports are mutually exclusive.
  • Page 495 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual disable bpdu_protection Purpose Used to disable BPDU attack protection on the Switch. disable bpdu_protection Syntax Description Use this to disable BPDU attack protection on the entire Switch. Note that if BPDU attack protection is disabled globally, it will also be disabled for ports regardless of the config bpdu_protection ports settings.
  • Page 496 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display BPDU protection settings for ports: DES-3200-28F:4# show bpdu_protection ports 1-12 Commands: show bpdu_protection ports 1-12 Port State Mode Status ------ ------------ ----------- ---------- Enabled shutdown...
  • Page 497: Per-Queue Bandwidth Control Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual UEUE ANDWIDTH ONTROL OMMANDS The Per-Queue Bandwidth Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table: Command Parameters config per_queue bandwidth_control { ports [ <portlist>...
  • Page 498 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config per_queue bandwidth_control Purpose Used to configure bandwidth control applied to a specific hardware priority queue on a per port basis. Syntax config per_queue bandwidth_control { ports [ <portlist> | all ] } <cos_id_list>...
  • Page 499 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show per_queue bandwidth_control Purpose Used to display the configuration settings for per-queue bandwidth control. Syntax show per_queue bandwidth_control {<portlist>} Description Use this command to view the per-queue bandwidth limits set for each port.
  • Page 500: Erps Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ERPS C OMMANDS The Ethernet Ring Protection Switching (ERPS) defined in ITU-T G.8032 is intended to provide a protection switching and recovery process, and to prevent loops forming for Ethernet in a ring topology. The ERPS commands in the Command Line...
  • Page 501 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual enable erps Purpose Used to enable the global ERPS function on the Switch. Syntax enable erps Description This command is used to enable the global ERPS function on the Switch. For each...
  • Page 502 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create erps VLAN Purpose Used to define an existing VLAN as an R-APS VLAN on the Switch. Syntax create erps raps_vlan <vlanid> Description Use this command to create a special R-APS VLAN that is used for transferring R-APS control messages.
  • Page 503 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps ring_mel Purpose Used to configure the MEL (maintenance entity group level) value. config erps raps_vlan <vlanid> ring_mel <value 0-7> Syntax Description This command is used to configure the ring MEL for an R-APS VLAN. The ring MEL is one field in the R-APS PDU.
  • Page 504 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps ring_port Purpose Used to configure the ports of the ERPS ring for a specific R-APS VLAN. Syntax config erps raps_vlan <vlanid> ring_port [west <port> | east <port>] Description This command is used to configure the port that participates in the ERPS ring.
  • Page 505 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps rpl Purpose Used to define the RPL port or the RPL owner status for a specific R-APS VLAN. Syntax config erps raps_vlan <vlanid> [ rpl_port [west | east | none] | rpl_owner [enable |...
  • Page 506 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps protected VLAN Purpose Used to configure the protected VLAN for a specific R-APS VLAN. Syntax config erps raps_vlan <vlanid> protected_vlan [add | delete] vlanid <vidlist> Description This command is used to designate VLANs that are protected by the ERPS function.
  • Page 507 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps timer Purpose Used to configure ERPS timers for an R-APS VLAN. Syntax <vlanid> timer { holdoff_time <millisecond 0-10000> | guard_time <millisecond 10- 2000 > | wtr_time <min 5-12>} (1)
  • Page 508 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config erps log Purpose Used to configure the status of the ERPS log function. Syntax config erps log [enable | disable] Description This command is used to enable or disable logging of ERPS events.
  • Page 509 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To display current ERPS information: DES-3200-28F:4# show erps Command: show erps ERPS Information --------------------------- ERPS Status : Enabled R-APS VLAN West Port : 25 (Blocking) East Port...
  • Page 510: Network Load Balancing (Nlb) Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual (NLB) C ETWORK ALANCING OMMANDS The Network Load Balancing (NLB) commands are used to configure the Switch to support Network Load Balancing Service, a proprietary Microsoft implementation of server clustering and load balancing, suitable for various stateless applications such as FTP, VPN and Web servers.
  • Page 511 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create nlb unicast_fdb Purpose Used to create an entry for the NLB unicast FDB. Syntax create nlb unicast_fdb <macaddr> Description For NLB, the Switch uses a FDB that is separate from and independent of the Layer 2 unicast FDB.
  • Page 512 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete nlb unicast_fdb Purpose Used to remove a previously created MAC address entry from the NLB unicast FDB. Syntax delete nlb unicast_fdb Description The delete nlb unicast_fdb command is used to remove an entry from the NLB FDB.
  • Page 513 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual create nlb multicast_fdb Purpose Used to create an entry for the NLB multicast FDB. Syntax create nlb multicast_fdb [ <vlan_name 32> | vlanid <vlanid 1-4094>] <macaddr> Description The multicast NLB FDB is needed in order to match the multicast MAC address and the egress ports.
  • Page 514 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual delete nlb multicast_fdb Purpose Used to remove a previously created MAC address entry from the NLB multicast FDB. delete nlb multicast_fdb [<vlan_name 32> | vlanid <vlanid 1-4094>] <macaddr> Syntax Description The delete nlb multicast_fdb command is used to delete the NLB multicast FDB entry.
  • Page 515 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Example usage: To configure a NLB multicast MAC forwarding database entry: DES-3200-28F:4# config nlb multicast_fdb default 03-bf-01-01-01-01 add 1-5 Command: config nlb multicast_fdb default 03-bf-01-01-01-01 add 1-5 Success. DES-3200-28F:4#...
  • Page 516: Pppoe Circuit Id Insertion Commands

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual ID I IRCUIT NSERTION OMMANDS PPPoE Circuit ID Insertion is used to produce the unique subscriber mapping capability that is possible on ATM networks between ATM-DSL local loop and the PPPoE server. The PPPoE server will use the inserted Circuit Identifier sub-tag of the received packet to provide AAA services (Authentication, Authorization and Accounting).
  • Page 517 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config pppoe circuit_id_insertion state Purpose Used to enable or disable the PPPoE circuit identifier insertion. Syntax config pppoe circuit_id_insertion state [enable | disable] Description When PPPoE circuit identifier insertion is enabled, the system will insert the circuit ID...
  • Page 518 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config pppoe circuit_id_insertion ports Purpose Used to enable and disable PPPoE circuit identifier insertion on a per port basis and specify how to encode the circuit ID option. Syntax config pppoe circuit_id_insertion ports <portlist>...
  • Page 519 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To view the global PPPoE ID insertion state: DES-3200-28F:4# show pppoe circuit_id_insertion Command: show pppoe circuit_id_insertion Status: Disabled DES-3200-28F:4# show pppoe circuit_id_insertion ports Purpose Used to display the PPPoE ID insertion configuration on a per port basis.
  • Page 520: Dhcp Server Screening Settings

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual DHCP S ERVER CREENING ETTINGS Due to this function allow you not only to restrict all DHCP Server packets but also to receive any specified DHCP server packet by any specified DHCP client, it is useful when one or more than one DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients.
  • Page 521 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config filter dhcp_server Purpose DHCP server packets except those that have been IP/client MAC bound will be filtered. This command is used to configure the state of the function for filtering of DHCP server packet and to add/delete the DHCP server/client binding entry.
  • Page 522 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual show filter dhcp_server Purpose Used to display current DHCP server/client filter list created on the switch. Syntax show filter dhcp_server Description This command is used to display DHCP server/client filter list created on the switch.
  • Page 523 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual config filter dhcp_server trap / log Purpose Used to enable or disable the trap and log functions for DHCP server screening. Syntax config filter dhcp_server [ trap | log ] [ enable | disable ] Description This command will enable or disable traps and logs for DHCP server screening.
  • Page 524: Appendix A -Technical Specifications

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual A -T PPENDIX ECHNICAL PECIFICATIONS General Protocols IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D Spanning Tree IEEE 802.1w Rapid Spanning Tree Protocol...
  • Page 525 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual Physical and Environmental Power Consumption DES-3200-10: 12.7W DES-3200-18: 13.2W DES-3200-26: 13.8W DES-3200-28: 18.4W DES-3200-28F: 46.7W Internal Power Supply DES-3200-10/DES-3200-18: 34W AC Input: 100~240 VAC, 12V/2A, 5V/2A, 50~60Hz DES-3200-26: 24W AC Input: 100~240 VAC, 12V/2A, 50~60Hz DES-3200-28: 40W AC Input: 100~240 VAC, 12V/3.3A, 50~60Hz...
  • Page 526: Led Indicators

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual LED Indicators Location LED Indicative Color Status Description Solid Light Power on. Power Green Light off Power off. Per Device Solid Light Console on. Console Green Blinking POST is in progress/POST is failure.
  • Page 527: Appendixb - Password Recovery Procedure

    This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords. Complete these steps to reset the password: For security reasons, the Password Recovery feature requires the user to physically access the device.
  • Page 528 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual In the “Password Recovery Mode” only the following commands can be used. Command Parameters reset config The reset config command resets the whole configuration will be back to the default value...
  • Page 529: Appendix C - Radius Attributes Assignment

    DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual C - RADIUS A PPENDIX TTRIBUTES SSIGNMENT The RADIUS Attributes Assignment on the DES-3200 is used in the following modules: 802.1X (Port-based and Host-based), and MAC-based Access Control. The description that follows explains the following RADIUS Attributes Assignment types: ...
  • Page 530 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual To assign 802.1p default priority by RADIUS Server, the proper parameters should be configured on the RADIUS Server. The tables below show the parameters for 802.1p default priority. The parameters of the Vendor-Specific attributes are:...
  • Page 531 DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual If the user has configured the VLAN attribute of the RADIUS server (for example, VID 3) and the 802.1X, or MAC-based Access Control authentication is successful, the port will be added to VLAN 3. However, if the user does not configure the VLAN attribute and authenticates successfully, the port will be kept in its original VLAN.

This manual is also suitable for:

Xstack des-3200-28

Table of Contents