D-Link xStack DGS-3600 Series Cli Manual
D-Link xStack DGS-3600 Series Cli Manual

D-Link xStack DGS-3600 Series Cli Manual

D-link xstack dgs-3600 series layer 3 gigabit ethernet managed switch
Hide thumbs Also See for xStack DGS-3600 Series:

Advertisement

CLI Manual
DGS-3600 Series
Product Model:
Layer 3 Gigabit Ethernet Managed Switch
Release 2.4
©Copyright 2008. All rights reserved.

Advertisement

Table of Contents
loading

Summary of Contents for D-Link xStack DGS-3600 Series

  • Page 1 CLI Manual DGS-3600 Series Product Model: Layer 3 Gigabit Ethernet Managed Switch Release 2.4 ©Copyright 2008. All rights reserved.
  • Page 2: Table Of Contents

    Table of Contents INTRODUCTION ................................1 USING THE CONSOLE CLI............................3 COMMAND SYNTAX ..............................7 BASIC SWITCH COMMANDS.............................9 SWITCH PORT COMMANDS ............................22 PORT SECURITY COMMANDS ..........................25 STACKING COMMANDS ............................28 NETWORK MANAGEMENT (SNMP) COMMANDS ....................32 SWITCH UTILITY COMMANDS (INCLUDING FILE SYSTEM COMMANDS) ............55 NETWORK MONITORING COMMANDS ........................71 MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .................86 FORWARDING DATABASE COMMANDS.......................98 BROADCAST STORM CONTROL COMMANDS ....................105...
  • Page 3 OSPF CONFIGURATION COMMANDS........................332 ROUTE PREFERENCE COMMANDS ........................349 MAC NOTIFICATION COMMANDS ........................352 WEB-BASED ACCESS CONTROL (WAC) COMMANDS..................356 ACCESS AUTHENTICATION CONTROL COMMANDS ..................363 SSH COMMANDS..............................383 SSL COMMANDS ..............................390 JUMBO FRAME COMMANDS ..........................395 LLDP COMMANDS..............................397 D-LINK SINGLE IP MANAGEMENT COMMANDS....................413 COMMAND HISTORY LIST.............................423 TECHNICAL SPECIFICATIONS..........................426...
  • Page 4: Introduction

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual INTRODUCTION The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
  • Page 5 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Figure 1-2. Boot screen The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
  • Page 6: Using The Console Cli

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual SING THE ONSOLE The Switch supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
  • Page 7 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands. Figure 2- 2. The ? Command When users enter a command without its required parameters, the CLI will prompt a Next possible completions: message.
  • Page 8 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Figure 2- 4. Using the Up Arrow to Re-enter a Command In the above example, the command config account was entered without the required parameter <username>, the CLI returned the Next possible completions: <username>...
  • Page 9 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Figure 2- 6. Next possible completions: Create command In the above example, all of the possible next parameters for the create command are displayed.
  • Page 10: Command Syntax

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OMMAND YNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual. The online help contained in the CLI and available through the console interface uses the same syntax.
  • Page 11 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual {braces} Purpose Encloses an optional value or set of optional arguments. Syntax reset {[config | system]} Description In the above syntax example, users have the option to specify config or system.
  • Page 12: Basic Switch Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ASIC WITCH OMMANDS The basic switch commands in the Command Line Interface (CLI) are listed (with the appropriate parameters) in the following table. Command Parameters create account [admin | operator | user] <username 15>...
  • Page 13 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create account to define the user account created here. Restrictions Only Administrator-level users can issue this command. Example usage: To create an administrator-level user account with the username “dlink”.
  • Page 14 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To configure the user password of “dlink” account: DGS-3627:5#config account dlink Command: config account dlink Enter a old password:**** Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success.
  • Page 15 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# show session Purpose Used to display a list of currently logged-in users. Syntax show session Description This command displays a list of all the users that are logged-in at the time the command is issued.
  • Page 16 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IGMP Snooping : Disabled MLD Snooping : Disabled : Disabled DVMRP : Disabled : Disabled OSPF : Disabled TELNET : Enabled (TCP 23) : Enabled (TCP 80) RMON : Disabled...
  • Page 17 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config serial_port baud_rate [9600 | 19200 | 38400 | 115200] − The serial bit rate that will be Parameters used to communicate with the management host. There are four options: 9600, 19200, 38400, and 115200.
  • Page 18 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable clipaging end of each page when the show command displays more than one screen of information. Syntax disable clipaging Description This command is used to disable the pausing of the console screen at the end of each page when the show command would display more than one screen of information.
  • Page 19 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable telnet Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To disable the Telnet protocol on the Switch: DGS-3627:5#disable telnet Command: disable telnet Success. DGS-3627:5#...
  • Page 20 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Success. DGS-3627:5# save Purpose Used to save changes in the Switch’s configuration to non-volatile RAM. Syntax save {[config {<drive_id>} <pathname 64> | log | all]} Description This command is used to enter the current switch configuration or log file into non-volatile RAM.
  • Page 21 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual reset Purpose Used to reset the Switch to the factory default settings. Syntax reset {[config |system]} {<string>} Description This command is used to restore the Switch’s configuration to the default settings assigned from the factory.
  • Page 22 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual logout Description This command terminates the current user’s session on the Switch’s console. None. Parameters Restrictions None. Example usage: To terminate the current user’s console session: DGS-3627:5#logout show device_status Purpose Used to display the current status of the hardware of the Switch.
  • Page 23 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config command_prompt command. Example usage: To configure the command prompt: DGS-3627:5#config command_prompt Tiberius Command: config command_prompt Tiberius Success. Tiberius# config greeting_message Purpose Used to configure the greeting message or banner for the opening screen of the Command Line Interface.
  • Page 24 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch. Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch.
  • Page 25: Switch Port Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual WITCH OMMANDS The switch port commands in the Command Line Interface (CLI) are listed (with the appropriate parameters) in the following table. Command Parameters config ports [<portlist> | all] {medium_type [fiber | copper]} {speed [auto | 10_half | 10_full |100_half | 100_full | 1000_full {master | slave]}] | flow_control [enable | disable] | learning [enable | disable] | state [enable | disable]} | description [<desc 32>...
  • Page 26 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ports Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To configure the speed of ports 1 to 3 to be 10 Mbps, full duplex, with learning and state enabled:...
  • Page 27 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display the configuration of all ports on the Switch, with description: DGS-3627:5#show ports description Command: show ports description Port Port Settings Connection Address State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl...
  • Page 28: Port Security Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ECURITY OMMANDS The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<portlist>...
  • Page 29 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Success. DGS-3627:5# delete port_security_entry vlan_name Purpose Used to delete a port security entry by MAC address, port number and VLAN ID.
  • Page 30 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To clear a port security entry by port: DGS-3627:5# clear port_security_entry port 6 Command: clear port_security_entry port 6 Success. DGS-3627:5# show port_security Purpose Used to display the current port security configuration.
  • Page 31: Stacking Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual TACKING OMMANDS The stacking configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config box_priority current_box_id <value 1-12> priority <value 1-63>...
  • Page 32 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config box_id • auto – Allows the box ID to be assigned automatically. Restrictions Only administrator-level and operator-level users can issue this command. Usage example: To change a box ID:...
  • Page 33 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stacking mode Purpose Used to configure the stacking mode. Syntax config stacking mode [disable | enable] {<string>} Description This command will enable or disable the stacking mode for the switch.
  • Page 34 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show stacking mode Command: show stacking mode Stacking mode : Enabled DGS-3627:5#...
  • Page 35: Network Management (Snmp) Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual (SNMP) C ETWORK ANAGEMENT OMMANDS The network management commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. The Switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. After enabling SNMP, users can specify which version of SNMP to use to monitor and control the Switch.
  • Page 36 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters enable snmp disable snmp enable snmp linkchange_traps disable snmp linkchange_traps [all|<portlist>][enable|disable] config snmp linkchange_traps ports show snmp engineID create snmp group <groupname 32> {v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]} {read_view <view_name 32>...
  • Page 37 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable snmp command. Example Usage: To enable SNMP: DGS-3627:5#enable snmp Command: enable snmp Success. DGS-3627:5# disable snmp Purpose Used to disable SNMP on the Switch. Syntax disable snmp Description...
  • Page 38 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# disable snmp linkchange_traps Used to disable SNMP link change traps on the Switch. Purpose Syntax disable snmp linkchange_traps Description This command is used, in conjunction with the enable snmp linkchange_traps command above, to enable and disable SNMP linkchange traps on the Switch.
  • Page 39 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command. Syntax create snmp user <user_name 32> <groupname 32> {encrypted [by_password auth [md5 <auth_password 8-16>...
  • Page 40 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create snmp user Restrictions Only administrator-level users can issue this command. Example usage: To create an SNMP user on the Switch: DGS-3627:5#create snmp user dlink default encrypted by_password auth md5...
  • Page 41 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show snmp user Command: show snmp user Username Group Name VerAuth-Priv ----------------------------------- ------------------------------------------ -------------------------- initial initial V3NoneNone Total Entries: 1 DGS-3627:5# create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access.
  • Page 42 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete snmp view Purpose Used to remove an SNMP view entry previously created on the Switch. Syntax delete snmp view <view_name 32> [all | <oid>] Description The delete snmp view command is used to remove an SNMP view previously created on the Switch.
  • Page 43 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Total Entries: 11 DGS-3627:5# create snmp community Purpose Used to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch.
  • Page 44 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete snmp community Purpose Used to remove a specific SNMP community string from the Switch. Syntax delete snmp community <community_string 32> Description The delete snmp community command is used to remove a previously defined SNMP community string from the Switch.
  • Page 45 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config snmp engineID Purpose Used to configure a name for the SNMP engine on the Switch. Syntax config snmp engineID <snmp_engineID> Description The config snmp engineID command configures a name for the SNMP engine on the Switch.
  • Page 46 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create snmp group the SNMP group with which the new SNMP user will be associated. v1 – Specifies that SNMP version 1 will be used. The Simple Network Management Protocol (SNMP), version 1, is a network management protocol that provides a means to monitor and control network devices.
  • Page 47 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete snmp group Purpose Used to remove an SNMP group from the Switch. Syntax delete snmp group <groupname 32> Description The delete snmp group command is used to remove an SNMP group from the Switch.
  • Page 48 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ReadView Name : CommunityView WriteView Name Notify View Name : CommunityView Security Model : SNMPv1 Security Level : NoAuthNoPriv Group Name : ReadGroup ReadView Name : CommunityView WriteView Name...
  • Page 49 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp host <ipaddr> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>]...
  • Page 50 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete snmp host <ipaddr> − The IP address of a remote SNMP manager that will Parameters receive SNMP traps generated by the Switch’s SNMP agent. Restrictions Only administrator-level users can issue this command.
  • Page 51 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show snmp v6host Purpose Used to display the IPv6 recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax show snmp v6host {<ipv6addr>} Description The show snmp v6host command is used to display the IPv6...
  • Page 52 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create trusted_host 10.48.74.121 Command: create trusted_host 10.48.74.121 Success. DGS-3627:5# show trusted_host Purpose Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above.
  • Page 53 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host command above. Syntax delete trusted host [ipaddr <ipaddr> | network <network_address> | all] Description This command is used to delete a trusted host entry made using the create trusted_host command above.
  • Page 54 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable snmp authenticate traps on the Switch. Parameters None. Restrictions Only administrator-level and operator-level users can issue this command. Example Usage: To turn on SNMP authentication trap support: DGS-3627:5#enable snmp authenticate traps Command: enable snmp authenticate traps Success.
  • Page 55 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Success. DGS-3627:5# disable snmp authenticate traps Purpose Used to disable SNMP authentication trap support. Syntax disable snmp authenticate traps Description This command is used to disable SNMP authentication support on the Switch.
  • Page 56 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config snmp system_location Description The config snmp system_location command is used to enter a description of the location of the Switch. A maximum of 255 characters can be used.
  • Page 57 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#enable rmon Command: enable rmon Success. DGS-3627:5# disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
  • Page 58: Switch Utility Commands (Including File System Commands)

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual WITCH TILITY OMMANDS NCLUDING YSTEM OMMANDS The download/upload commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters download [firmware_fromTFTP [<ipaddr>...
  • Page 59 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual download firmware_fromTFTP − Download and install new firmware on the Switch from a TFTP Parameters server. • <ipaddr> − The IP address of the TFTP server. • <ipv6addr> - The IPv6 address of the TFTP server.
  • Page 60 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual The download configuration command will initiate the loading of the various settings in the order listed in the configuration file. When the file has been successfully loaded the message “End of configuration file for DGS-3600” appears followed by the command prompt.
  • Page 61 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual upload • <path_filename 64> − The DOS path and filename of the log file to be uploaded on the TFTP server. For example, C:\3612.txt. firmware_toTFTP – Use this parameter to upload firmware to a TFTP server.
  • Page 62 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config firmware Purpose Used to configure a firmware file located in the flash memory as the boot up section. Syntax config firmware {{unit <unitid 1-12> } <drive_id>} <pathname 64>...
  • Page 63 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show config 1. Basic (serial port, Telnet and web 21. SNTP management status) 22. LACP 2. Storm control 23. IP 3. IP group management (Single 24. IGMP snooping 25. MLD Snooping 4.
  • Page 64 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry config configuration Purpose Used to configure the configuration file located on the flash memory as a boot up configuration, or as an active configuration.
  • Page 65 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#erase c:/ startup.cfg Command: erase c:/ startup.cfg Please wait, do not power off! Process ......Done. Success. DGS-3627:5# rename Purpose To rename a file. Syntax rename {{unit [<unitid 1-12>]} <drive_id>} <pathname 64> <...
  • Page 66 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To view the directory files on the internal flash drive: DGS-3627:5#dir c: Command: dir C:\ ------------------------------------------------------------------------------------------------------- Current Unit ID: 1 Current Directory: C:\ File Name Size(byte) Update time...
  • Page 67 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show boot_file Purpose Used to show the currently set boot files located on the Switch. Syntax show boot_file {[unit <unitid 1-12> | all]} Description This command is used to display the name and path of the firmware image and configuration file that have been previously set up by the user, as the boot up files.
  • Page 68 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To view the storage media accessory information: DGS-3627:5#show storage_media_info Command: show storage_media_info ----------------------------------------------------------------------------- Unit ID is 1 Drive Media_Type Size Label FS_Type Flash 15 MB FLASH-A FAT16...
  • Page 69 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To view the storage media accessory information: DGS-3627:5#config file_system_version 2 Command: config file_system_version 2 Are you sure you want to update the file system version? (y/n) n...
  • Page 70 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ping6 messages to be sent. The maximum value is 255. size <value 1-6000> - Use this parameter to set the datagram size of the packet, or in essence, the number of bytes in each ping packet.
  • Page 71 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#traceroute 172.18.212.109 Command: traceroute 172.18.212.109 10 ms 172.18.212.109 Trace complete. DGS-3627:5# enable autoconfig Purpose Used to activate the autoconfiguration function for the Switch. This will load a previously saved configuration file for current use.
  • Page 72 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual NOTE: If the autoconfig function fails, the user will be prompted with a warning message and the switch will not upload the configuration settings. Upon booting up the autoconfig process is initiated, the console screen will appear similar to the example below. The configuration settings will be loaded in normal order.
  • Page 73 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To stop the autoconfiguration function: DGS-3627:5#disable autoconfig Command: disable autoconfig Success. DGS-3627:5# show autoconfig Purpose Used to display the current autoconfig status of the Switch. Syntax show autoconfig Description This will list the current status of the autoconfiguration function.
  • Page 74: Network Monitoring Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ETWORK ONITORING OMMANDS The network monitoring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show packet ports <portlist>...
  • Page 75 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To display the packets analysis for port 2: DGS-3627:5#show packet ports 2 Command: show packet ports 2 Port number : 2 ================================================================ Frame Size/Type Frame Counts Frames/sec ----------------------- --------------------...
  • Page 76 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show utilization Used to display real-time port and cpu utilization statistics. Purpose Syntax show utilization [ports | cpu] Description This command will display the real-time port and CPU utilization statistics for the Switch.
  • Page 77 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual clear counters Used to clear the Switch’s statistics counters. Purpose Syntax clear counters ports <portlist> Description This command will clear the counters used by the Switch to compile statistics.
  • Page 78 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display the switch history log: DGS-3627:5#show log Command: show log Index Date Time Log Text ----- ------------- ------------------- ---------------------------------------------------- 2006-08-21 00:01:09 Successful login through Console (Username: Anonymous, IP:10.53.13.202, MAC: 00-0C-6E-6B-EB-0C)
  • Page 79 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual clear attack_log Purpose Used to clear the switch history of attack log files. Syntax clear attack_log {[unit <unit_id 1-12> | all]} Description This command will clear the contents of the attack log of the Switch.
  • Page 80 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To disable the syslog function on the Switch: DGS-3627:5#disable syslog Command: disable syslog Success. DGS-3627:5# show syslog Purpose Used to display the syslog protocol status as enabled or disabled.
  • Page 81 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create syslog host Debug: debug-level messages informational − Specifies that informational messages will be sent to the remote host. This corresponds to number 6 from the list above. warning − Specifies that warning messages will be sent to the remote host.
  • Page 82 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create syslog host syslog protocol will use to send messages to the remote host. ipaddress <ipaddr> − Specifies the IP address of the remote host where syslog messages will be sent.
  • Page 83 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config syslog host informational − Specifies that informational messages will be sent to the remote host. This corresponds to number 6 from the list above. warning − Specifies that warning messages will be sent to the remote host.
  • Page 84 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config syslog host local0 − Specifies that local use 0 messages will be sent to the remote host. This corresponds to number 16 from the list above. local1 − Specifies that local use 1 messages will be sent to the remote host.
  • Page 85 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config syslog host all facility local0 Command: config syslog host all facility local0 Success. DGS-3627:5# delete syslog host Purpose Used to remove a syslog host, that has been previously configured, from the Switch.
  • Page 86 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual 10.40.2.3 Local0 Disabled 10.21.13.1 Local0 Disabled Total Entries : 3 DGS-3627:5# config system_severity Purpose To configure severity level of an alert required for log entry or trap message. Syntax...
  • Page 87 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show system_severity Purpose To display the current severity settings set on the Switch. Syntax show system_severity Description This command is used to view the severity settings that have been implemented on the Switch using the config system_severity command.
  • Page 88 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show log_save_timing Purpose Used to display the method configured for saving log files to the switch’s flash memory. Syntax show log_save_timing Description The show log_save_timing command allows the user to view the time method configured for saving log files to the switch’s flash...
  • Page 89: Multiple Spanning Tree Protocol (Mstp) Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual (MSTP) C ULTIPLE PANNING ROTOCOL OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802.1d STP, 802.1w Rapid STP and 802.1s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network.
  • Page 90 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters show stp show stp ports {<portlist>} show stp instance_id {<value 0-15>} show stp mst_config id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch.
  • Page 91 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stp version Purpose Used to globally set the version of STP on the Switch. Syntax Config stp version [mstp | rstp | stp] Description This command allows the user to choose the version of the spanning tree to be implemented on the Switch.
  • Page 92 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stp functioning. A time between 1 and 10 seconds may be chosen, with a default setting of 2 seconds. In MSTP, the spanning tree is configured by port and therefore, the hellotime must be set using the configure stp ports command for switches utilizing the Multiple Spanning Tree Protocol.
  • Page 93 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stp ports Gigabit port = 20000. • <value 1-200000000> - Define a value between 1 and 200000000 to determine the external cost. The lower the number, the greater the probability the port will be chosen to forward packets.
  • Page 94 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create stp instance_id Purpose Used to create a STP instance ID for MSTP. Syntax create stp instance_id <value 1-15> Description This command allows the user to create a STP instance ID for the Multiple Spanning Tree Protocol.
  • Page 95 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config stp instance_id 2 add_vlan 10 Command : config stp instance_id 2 add_vlan 10 Success. DGS-3627:5# Example usage: To remove VID 10 from instance ID 2: DGS-3627:5#config stp instance_id 2 remove_vlan 10 Command : config stp instance_id 2 remove_vlan 10 Success.
  • Page 96 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stp priority the Switch. Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To set the priority value for instance_id 2 as 4096: DGS-3627:5#config stp priority 4096 instance_id 2 Command : config stp priority 4096 instance_id 2 Success.
  • Page 97 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config stp mst_ports interface to put into the forwarding state. Set a higher priority value for interfaces to be selected for forwarding first. In instances where the priority value is identical, the MSTP function will implement the lowest port number into the forwarding state and other interfaces will be blocked.
  • Page 98 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual STP Status : Enabled STP Version : STP Compatible Max Age : 20 Hello Time Forward Delay : 15 Max Hops : 20 TX Hold Count Forwarding BPDU : Enabled...
  • Page 99 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show stp ports <portlist> − Specifies a range of ports to be configured. The beginning Parameters and end of the port list range are separated by a dash. Restrictions...
  • Page 100 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Last Topology Change : 856 Topology Changes Count : 2987 CTRL+C ESC q Quit SPACE n Next Page Previous Page Refresh show stp mst_config_id Purpose Used to display the MSTP configuration identification.
  • Page 101: Forwarding Database Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ORWARDING ATABASE OMMANDS The layer 2 forwarding database commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32>...
  • Page 102 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create fdb default 00-00-00-00-01-02 port 5 Command: create fdb default 00-00-00-00-01-02 port 5 Success. DGS-3627:5# create multicast_fdb Purpose Used to create a static entry to the multicast MAC address...
  • Page 103 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config multicast_fdb default 01-00-00-00-00-01 add 1-5 Command: config multicast_fdb default 01-00-00-00-00-01 add 1-5 Success. DGS-3627:5# config fdb aging_time Purpose Used to set the aging time of the forwarding database.
  • Page 104 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#delete fdb default 00-00-00-00-01-02 Command: delete fdb default 00-00-00-00-01-02 Success. DGS-3627:5# Example usage: To delete a multicast FDB entry: DGS-3627:5#delete fdb default 01-00-00-00-01-02 Command: delete fdb default 01-00-00-00-01-02 Success.
  • Page 105 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show multicast_fdb Restrictions None. Example usage: To display multicast MAC address table: DGS-3627:5#show multicast_fdb vlan default Command: show multicast_fdb vlan default VLAN Name : default MAC Address : 01-00-5E-00-00-00...
  • Page 106 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show fdb Command: show fdb Unicast MAC Address Aging Time = 300 VID VLAN Name MAC Address Port Type ---- ---------------- ----------------- ------ ---------------- default 00-00-39-34-66-9A Dynamic default 00-00-51-43-70-00...
  • Page 107 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config multicast filtering_mode [forward_all_groups | forward_unregistered_groups | filter_unregistered_groups] Description This command will configure the multicast packet filtering mode for specified VLANs on the Switch. Parameters <vlan_name 32> - Specifies a VLAN by VLAN name to set. If no VLAN is...
  • Page 108: Broadcast Storm Control Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ROADCAST TORM ONTROL OMMANDS On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
  • Page 109 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config traffic control deny all incoming traffic to the port except STP BPDU packets, which are essential in keeping the Spanning Tree operational on the Switch. If the countdown timer has expired and yet the Packet Storm continues,...
  • Page 110 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config traffic control_recover Purpose Used to configure traffic control recover for any or all ports. Syntax config traffic control_recover [<portlist> | all] Description Configuring a port for traffic control recover will require an administrator to restart the specified ports if storm control shuts down the port or ports.
  • Page 111 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show traffic control Purpose Used to display current traffic control settings. Syntax show traffic control {<portlist>} Description This command displays the current storm traffic control configuration on the Switch.
  • Page 112: Qos Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OMMANDS The Switch supports 802.1p priority queuing. The Switch has seven configurable priority queues. These priority queues are numbered from 6 (Class 6) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
  • Page 113 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config bandwidth_control Purpose Used to configure bandwidth control on a port by-port basis. Syntax [<portlist>|all] {rx_rate [no_limit | <value 1-156249>] | tx_rate [no_limit | <value 1-156249>]} Description The config bandwidth_control command is used to configure bandwidth on a port by-port basis.
  • Page 114 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Port RX Rate (64Kbit/sec) TX_Rate (64Kbit/sec) ---- ------------------------ ---------------------- no_limit no_limit no_limit no_limit no_limit no_limit no_limit no_limit no_limit no_limit DGS-3627:5# config scheduling Purpose Used to configure the traffic scheduling mechanism for each COS queue.
  • Page 115 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config scheduling Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To configure the traffic scheduling mechanism for each queue: DGS-3627:5# config scheduling 0 max_packet 12 Command: config scheduling 0 max_packet 12 Success.
  • Page 116 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config 802.1p user_priority Lowest Mid-low Mid-high Mid-high Highest Highest. This mapping scheme is based upon recommendations contained in IEEE 802.1D. Change this mapping by specifying the 802.1p user priority to go to the <class_id 0-6>...
  • Page 117 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Priority-7 -> <Class-6> DGS-3627:5# config 802.1p default_priority Purpose Used to configure the 802.1p default priority settings on the Switch. If an untagged packet is received by the Switch, the priority configured with this command will be written to the packet’s priority field.
  • Page 118 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry config scheduling_mechanism Purpose Used to configure the scheduling mechanism for the QoS function Syntax config scheduling_mechanism [strict | weight_fair]...
  • Page 119 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# show scheduling_mechanism Purpose Used to display the current traffic scheduling mechanisms in use on the Switch. Syntax show scheduling_mechanism Description This command will display the current traffic scheduling mechanisms in use on the Switch.
  • Page 120 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable hol_prevention Purpose Used to disable HOL prevention. Syntax disable hol_prevention Description The disable hol_prevention command disables Head of Line prevention. Parameters None. Restrictions Only administrator-level and operator-level users can issue this command.
  • Page 121: Port Mirroring Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IRRORING OMMANDS The port mirroring commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config mirror port <port> {[add |delete] source ports <portlist> [rx|tx|both]}...
  • Page 122 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DGS-3627:5# Example usage: To delete the mirroring ports:...
  • Page 123 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To disable mirroring configurations: DGS-3627:5#disable mirror Command: disable mirror Success. DGS-3627:5# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command displays the current port mirroring configuration on the Switch.
  • Page 124: Vlan Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual VLAN C OMMANDS Along with normal VLAN configurations, this Switch now incorporate Double VLANs. Better known as Q-IN-Q VLANs, Double VLANs allow network providers to expand their VLAN configurations to place VLANs within a larger inclusive VLAN, which adds a new layer to the VLAN configuration.
  • Page 125 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create vlan <vlan_name 32> − The name of the VLAN to be created. Parameters tag <vlanid 2-4094> − The VLAN ID of the VLAN to be created. Allowed values = 2-4094 type –...
  • Page 126 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config vlan add Purpose Used to add additional ports to a previously configured VLAN. Syntax config vlan <vlan_name 32> {[add [ tagged | untagged | forbidden] <portlist> | advertisement [enable | disable]}...
  • Page 127 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1-4094>}...
  • Page 128 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#enable gvrp Command: enable gvrp Success. DGS-3627:5# disable gvrp Purpose Used to disable GVRP on the Switch. Syntax disable gvrp Description This command, along with enable gvrp above, is used to enable and disable GVRP on the Switch, without changing the GVRP configuration on the Switch.
  • Page 129 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display the Switch’s current VLAN settings: DGS-3627:5#show vlan Command: show vlan VLAN Name : default VLAN Type : Static Advertisement : Enabled Member ports : 1-12...
  • Page 130 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Disabled Enabled All Frames CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry enable double_vlan Purpose Used to enable the Double VLAN feature on the Switch. Syntax...
  • Page 131 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#disable double_vlan Command: disable double_vlan Current Double VLAN mode : Enabled Disable Double VLAN need to reset system config. Are you sure ?(y/n)y Success. DGS-3627:5# create double_vlan Purpose Used to create a Double VLAN on the Switch.
  • Page 132 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config double_vlan • access - Add this parameter to configure these ports as access ports. Access ports are for connecting Switch VLANs to customer VLANs. • portlist – Enter a list of ports to be added to this VLAN.
  • Page 133 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show double_vlan Drazen Command: show double_vlan Drazen Global Double VLAN : Enabled ==================================================== SPVID VLAN Name : Drazen TPID : 0x9200 Uplink Ports Access Ports : 4-8 Unknow Ports :...
  • Page 134 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#disable pvid auto_assign Command: disable pvid auto_assign Success. DGS-3627:5# show pvid auto_assign Purpose Used to display the PVID auto-assign status. Syntax show pvid auto_assign Description The show pvid auto_assign command displays the PVID auto assignment state.
  • Page 135: Protocol Vlan Group Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual VLAN G ROTOCOL ROUP OMMANDS For bridges that implement Port-and-Protocol-based VLAN classification, the VID associated with an Untagged or Priority-tagged Frame is determined based on the Port of arrival of the frame into the bridge and on the protocol identifier of the frame. If there is no protocol VLAN configured on the ingress port, all the untagged packets incoming on the port will be classified into PVID VLAN.
  • Page 136 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dot1v_protocol_group Purpose Used to configure the parameters for a protocol VLAN group. Syntax config dot1v_protocol_group group_id <id> [add | delete] protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value> Description This command will configure a protocol template for a group.
  • Page 137 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete dot1v_protocol_group Purpose Used to delete a protocol VLAN group. Syntax delete dot1v_protocol_group group_id <id> Description This command will delete a protocol VLAN group. Parameters group_id <id> - Enter an integer from 1 to 16 to identify the protocol VLAN group being deleted here.
  • Page 138 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config port dot1v Purpose Used to bind a VLAN with a protocol template on one or more ports. Syntax config port dot1v ports [<portlist> | all] [add protocol_group group_id <id>...
  • Page 139 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show port dot1v Purpose Used to display the bound protocol template on a specific port or ports. Syntax show port dot1v {ports <portlist>} Description This command will display the protocol VLAN group and VLAN for individual ports.
  • Page 140: Link Aggregation Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual GGREGATION OMMANDS The link aggregation commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1-32> {type [lacp | static]} delete link_aggregation group_id <value 1-32>...
  • Page 141 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete link_aggregation group_id Purpose Used to delete a previously created link aggregation group. Syntax delete link_aggregation group_id <value 1-32> Description This command is used to delete a previously configured link aggregation group.
  • Page 142 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm. Syntax config link_aggregation algorithm [mac_source | mac_destination | mac_source_dest | ip_source | ip_destination | ip_source_dest] Description This command configures the part of the packet examined by the Switch when selecting the egress port for transmitting load-sharing data.
  • Page 143 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Group ID Type : TRUNK Master Port Member Port : 8,9,10 Active Port Status : Disabled Flooding Port DGS-3627:5# config lacp_ports Purpose Used to configure settings for LACP compliant ports.
  • Page 144 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show lacp_port Restrictions None. Example usage: To display LACP port mode settings: DGS-3627:5#show lacp_port 1-10 Command: show lacp_port 1-10 Port Activity ------ -------- Active Active Active Active Active Active...
  • Page 145: Ip-Mac-Port Binding (Impb)

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IP-MAC-P (IMPB) INDING The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC-Port binding (IMPB) is to restrict the access to a switch to a number of authorized users.
  • Page 146 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all] | mode [arp | acl]} delete address_binding [ip-mac [ipaddress <ipaddr> mac_address <macaddr> |all] | blocked [all | vlan_name <vlan_name> mac_address <macaddr>]]...
  • Page 147 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00-00-04 mode acl Command: create address_binding ip_mac ipaddress 10.1.1.3 mac_address 00-00-00-00-00-04 mode acl Success. DGS-3627:5# config address_binding ip_mac ipaddress Purpose Used to configure an IP-MAC-Port binding entry.
  • Page 148 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config address_binding ip_mac ports Purpose Used to configure an IP-MAC state to enable or disable for specified ports. Syntax config address_binding ip_mac ports [<portlist> | all] state [enable |...
  • Page 149 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show address_binding ip_mac ipaddress 10.1.1.8 mac_address 00-00-00-00-00-12 Command: show address_binding ip_mac ipaddress 10.1.1.8 mac_address 00-00-00-00-00-12 ACL_mode : Enabled Trap/Log : Disabled Enabled ports: 2 IP Address MAC Address Status...
  • Page 150 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To delete an IP-MAC-Port binding on the Switch: DGS-3627:5#delete address-binding ip-mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-06 Command: delete address-binding ip-mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-06 Success. DGS-3627:5# enable address_binding acl_mode Purpose Used to enable the ACL mode for an IP-MAC-Port binding entry.
  • Page 151 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable address_binding acl_mode Purpose Used to disable the ACL mode for an IP-MAC-Port binding entry. Syntax disable address_binding acl_mode Description This command, along with the enable address_binding acl_mode will enable and disable the ACL mode for IP-MAC-Port binding on the Switch, without altering previously set configurations.
  • Page 152 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable address_binding trap_log Purpose Used to disable the trap log for the IP-MAC-Port binding function. Syntax disable address_binding trap_log Description This command, along with the enable address_binding trap_log will enable and disable the sending of trap log messages for IP- MAC-Port binding.
  • Page 153: Ip Commands (Including Ip Multinetting)

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IP C IP M OMMANDS NCLUDING ULTINETTING IP Multinetting is a function that allows multiple IP interfaces to be assigned to the same VLAN. This is beneficial to the administrator when the number of IPs on the original interface is insufficient and the network administrator wishes not to resize the interface.
  • Page 154 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create ipif above IP interface. secondary – Enter this parameter if this configured IP interface is to be a secondary IP interface of the VLAN previously specified. secondary interfaces can only be configured if a primary interface is first configured.
  • Page 155 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ipif of an IP address to the Switch’s System IP interface. If you are using the autoconfig feature, the Switch becomes a DHCP client automatically so it is not necessary to change the ipif settings. This...
  • Page 156 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# disable ipif Purpose Used to disable the configuration of an IP interface on the Switch. Syntax disable ipif [<ipif_name 12> | all] Description This command will disable an IP interface on the Switch, without altering its configuration values.
  • Page 157 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show ipif {<ipif_name 12>} Description This command will display the configuration of an IP interface on the Switch.
  • Page 158 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable ipif_ipv6_link_local_auto Purpose Used to disable the autoconfiguration of the IPv6 link local address. Syntax disable ipif_ipv6_link_local_auto [<ipif_name 12> | all] Description This command will disable the automatic creation of an IPv6 link local address for the Switch.
  • Page 159: Ipv6 Neighbor Detection Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual EIGHBOR ETECTION OMMANDS The following commands are used to detect IPv6 neighbors of the switch and to keep a running database about these neighbor devices. The IPv6 Neighbor Detection commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 160 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete ipv6 neighbor_cache Purpose Used to remove a static IPv6 neighbor. Syntax delete ipv6 neighbor_cache ipif [<ipif_name 12> | all] [<ipv6addr> | static | dynamic | all] Description This command is used to remove a static IPv6 neighbor from an existing IPv6 interface previously created on the switch.
  • Page 161 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display the IPv6 neighbors of a configured IP interface: DGS-3627:5# show ipv6 neighbor_cache ipif Zira all Command: show ipv6 neighbor_cache ipif Zira all Neighbor Link Layer Address Interface...
  • Page 162 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ipv6 nd ra ipif a default value of 64. managed_flag [enable | disable] – Used to enable or disable the Managed flag. When enabled, this will trigger the router to use a stateful autoconfiguration process to get both Global and link-local IPv6 addresses for the Switch.
  • Page 163 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ipv6 nd ra prefix_option ipif preferred_life_time <uint 0-4294967295> - This field states the time that this prefix is advertised as being preferred on the link local network, when using stateless address configuration.
  • Page 164 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To configure The IPv6 ND Neighbor Solicitation messages: DGS-3627:5# config ipv6 nd ns ipif Zira retrans_time 1000000 Command: config ipv6 nd ns ipif Zira retrans_time 1000000 Success.
  • Page 165: Igmp Commands (Including Igmp V3)

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IGMP C IGMP OMMANDS NCLUDING IGMP or Internet Group Management Protocol is a protocol implemented by systems utilizing IPv4 to collect the membership information needed by the multicast routing protocol through various query messages sent out from the router or switch. Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will become members of a multicast group.
  • Page 166 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config igmp that the Switch will wait for reports from members. robustness_variable <value 1-255> − This value states the permitted packet loss that guarantees IGMP. last_member_query_interval <value 1-25> − The Max Response Time...
  • Page 167 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show igmp group Purpose Used to display the Switch’s IGMP group table. Syntax show igmp group {group <group> | ipif <ipif_name 12>} Description This command will display the IGMP group configuration.
  • Page 168: Igmp Snooping Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IGMP S NOOPING OMMANDS The IGMP Snooping commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config igmp_snooping [vlan <vlan_name 32>...
  • Page 169 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config igmp_snooping host membership report. The default is 260 seconds. leave_timer <sec 1-16711450> − Specifies the amount of time a Multicast address will stay in the database before it is deleted, after it has sent out a leave group message.
  • Page 170 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config igmp_snooping querier • Other querier present interval—Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the querier. This interval is calculated as follows: (robustness variable x query interval) + (0.5 x query response interval).
  • Page 171 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config router_ports_forbidden Purpose Used to configure ports as forbidden multicast router ports. Syntax config router_ports_forbidden <vlan_name 32> [add | delete] <portlist> Description This command allows designation of a port or range of ports as being forbidden to multicast-enabled routers.
  • Page 172 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only} Description This command disables IGMP snooping on the Switch. IGMP snooping can be disabled only if IP multicast routing is not being used.
  • Page 173 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast router Only : Disabled VLAN Name : default Query Interval : 125 Max Response Time : 10 Robustness Value...
  • Page 174 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch. Syntax show igmp_snooping group {vlan <vlan_name 32>} Description This command will display the current IGMP snooping group configuration on the Switch.
  • Page 175 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show router_ports Command: show router_ports VLAN Name : default Static router port : 1-2, 10 Dynamic router port : Forbidden router port : Total Entries: 1 DGS-3627:5# show igmp_snooping forwarding...
  • Page 176 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create igmp_snooping multicast_vlan accounting 2 Command: create igmp_snooping multicast_vlan accounting 2 Success. DGS-3627:5# config igmp_snooping multicast_vlan Purpose Used to configure the settings for a previously created multicast VLAN. Syntax config igmp_snooping multicast_vlan <vlan_name 32>...
  • Page 177 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To delete a multicast VLAN called “accounting”: DGS-3627:5#delete igmp_snooping multicast_vlan accounting Command: delete igmp_snooping multicast_vlan accounting Success. DGS-3627:5# show igmp_snooping multicast_vlan Purpose Used to display the settings of a multicast VLAN on the Switch.
  • Page 178 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config igmp_snooping multicast_vlan_group from the selected multicast VLAN. Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To add a multicast range to a previously created multicast VLAN:...
  • Page 179: Mld Snooping Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual MLD S NOOPING OMMANDS Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data. Instead of flooding all ports on a selected VLAN with multicast traffic, MLD snooping will only forward multicast data to ports that wish to receive this data through the use of queries and reports produced by the requesting ports and the source of the multicast traffic.
  • Page 180 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Each command is listed, in detail, in the following sections. enable mld_snooping Purpose Used to enable MLD snooping globally on the switch. Syntax enable mld_snooping {forward_mcrouter_only} Description This command, in conjunction with the disable mld_snooping will enable and disable MLD snooping globally on the Switch without affecting configurations.
  • Page 181 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config mld_snooping vlan <vlan_name 32> − The name of the VLAN for which MLD snooping is to Parameters be configured. all – Entering this parameter will configure MLD snooping for all VLANs on the Switch.
  • Page 182 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To configure MLD snooping multicast router ports: DGS-3627:5#config mld_snooping mrouter_ports default add 1-10 Command : config mld_snooping mrouter_ports default add 1-10 Success. DGS-3627:5# config mld_snooping mrouter_ports_forbidden Purpose Used to configure ports on the Switch as forbidden router ports.
  • Page 183 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config mld_snooping querier loss on a subnet. The user may choose a value between 1 and 255 with a default setting of 2. If a subnet is expected to be lossy, the user may wish to increase this interval.
  • Page 184 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show mld_snooping Command: show mld_snooping MLD Snooping Global State : Disabled Multicast router Only : Disabled VLAN Name : default Query Interval : 125 Max Response Time : 10...
  • Page 185 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show mld_snooping group Command : show mld_snooping group VLAN Name : default Multicast Group : FF02 ::13 MAC Address : 33-33-00-00-00-13 Reports Listening Port : 1, 7 VLAN Name...
  • Page 186 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show mld_snooping mrouter_ports Commands : show mld_snooping mrouter_ports VLAN Name : default Static mrouter port : 1-10 Dynamic mrouter port Forbidden mrouter port : Total Entries : 1 DGS-3627:5#...
  • Page 187: Dhcp Relay

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DHCP R ELAY The DHCP relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1-16> | time <sec 0-65535>} config dhcp_relay add ipif <ipif_name 12>...
  • Page 188 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dhcp_relay add ipif be enabled. <ipaddr> The DHCP server IP address. Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To add an IP destination to the DHCP relay table: DGS-3627:5#config dhcp_relay add ipif System 10.58.44.6...
  • Page 189 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dhcp_relay option_82 state addresses that can be assigned to a single remote ID or circuit ID. The DHCP server will then echo the option 82 field in the DHCP reply. The DHCP server unicasts the reply to the back to the relay agent if the request was relayed to the server by the relay agent.
  • Page 190 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dhcp_relay option_82 policy Purpose Used to configure the reforwarding policy of relay agent information option 82 of the Switch. Syntax config dhcp_relay option_82 policy [replace | drop | keep]...
  • Page 191 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# Example usage: To show a single IP destination of the DHCP relay configuration: DGS-3627:5#show dhcp_relay ipif System Command: show dhcp_relay ipif System DHCP/Bootp Relay Status : Disabled DHCP/Bootp Hops Count Limit...
  • Page 192 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay Description This command is used to disable the DHCP/BOOTP relay function on the Switch.
  • Page 193: Dhcp Server Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DHCP S ERVER OMMANDS For this release, the Switch now has the capability to act as a DHCP server to devices within its locally attached network. DHCP, or Dynamic Host Configuration Protocol, allows the switch to delegate IP addresses, subnet masks, default gateways and other IP parameters to devices that request this information.
  • Page 194 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters delete dhcp excluded_address show dhcp excluded_address Each command is listed in detail in the following sections. create dhcp pool Purpose Used to create a DHCP pool. Syntax create dhcp pool <pool_name 12>...
  • Page 195 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create dhcp pool manual_binding Purpose Used to create a DHCP pool manual binding entry. Syntax create dhcp pool manual_binding <pool_name 12> <ipaddr> hardware_address <macaddr> {type [Ethernet | IEE802]} Description This command will create a DHCP manual pool binding entry for a previously created pool.
  • Page 196 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#delete dhcp pool manual_binding Floor2 10.10.10.1 Command: delete dhcp pool manual_binding Floor2 10.10.10.1 Success. DGS-3627:5# show dhcp pool manual_binding Purpose Used to display the manual binding settings for a DHCP pool.
  • Page 197 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show dhcp_binding Command:show dhcp_binding DHCP Binding Table Pool Name IP Address Hardware Address Type Status Life Time (secs) ---------------- --------------- -------------------------- --------- --------- ----------------------- engineering 192.168.0.1 01-22-b7-35-ce-99 Ethernet Manual 864000...
  • Page 198 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config dhcp ping_packets 2 Command: config dhcp ping_packets 2 Success. DGS-3627:5# config dhcp ping_timeout Purpose Used to set the time the Switch will wait before timing out a ping packet.
  • Page 199 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config dhcp pool default_router Purpose Used to configure the default router for the DHCP client. Syntax config dhcp pool default_router <pool_name 12> <ipaddr> {<ipaddr>} {<ipaddr>} Description This command is used to configure the default router for DHCP clients requesting DHCP information for the switch.
  • Page 200 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config dhcp pool domain_name Purpose Used to configure the domain name for the DHCP pool of the Switch. Syntax config dhcp pool domain_name<pool_name 12> <domain_name 64> Description This command is used to configure the domain name for the DHCP pool of the Switch.
  • Page 201 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config dhcp pool netbios_name_server Purpose Used to configure the IP address(es) for the Net BIOS name server, Syntax config dhcp pool netbios_name_server <pool_name 12> <ipaddr> {<ipaddr>} {<ipaddr>} Description This command is used to enter the IP address of a Net BIOS Name Server that will be available to a Microsoft DHCP Client.
  • Page 202 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config dhcp pool network_addr Purpose Used to configure the network address and corresponding subnet mask for the DHCP pool. Syntax config dhcp pool network_addr <pool_name 12> <network_address> Description This command will allow users to enter the IP address pool to be assigned to requesting DHCP Clients.
  • Page 203 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dhcp pool next_server Purpose Used to configure the IP address of the server that has the boot file for the DHCP pool. Syntax config dhcp pool next_server <pool_name 12> <ipaddr>...
  • Page 204 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable dhcp_server Purpose Used to enable the DHCP function on the switch. Syntax enable dhcp_server Description This command, along with the disable dhcp_server will enable and disable the DHCP server function without affecting configurations.
  • Page 205 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show dhcp_server Command:show dhcp_server DHCP Server Global State: Disable Ping Packet Number Ping Timeout : 500 ms DGS-3627:5# create dhcp excluded_address begin_address Purpose Used to configure IP addresses that will be excluded from the DHCP Server pool of addresses.
  • Page 206 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete dhcp excluded_address begin_address Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To display the multicast range accounting: DGS-3627:5#delete dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 Command: delete dhcp excluded_address begin_address 10.10.10.1...
  • Page 207: Limited Ip Multicast Address

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IP M IMITED ULTICAST DDRESS The Limited IP Multicast command allows the administrator to permit or deny access to a port or range of ports by specifying a range of multicast addresses.
  • Page 208 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual permit state enable Success. DGS-3627:5# delete limited multicast address Purpose Used to delete Limited IP multicast address range. Syntax delete limited multicast address [all | <portlist>] Description The delete limited multicast address command allows the user to delete all multicast address ranges or a selected range based on what port or ports the range has been assigned to.
  • Page 209 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Port State : Disabled Access : None Name From ---- -------------------------- -------------------- --------------------- Port State : Disabled Access : None Name From ---- -------------------------- -------------------- --------------------- DGS-3627:5# create multicast_range...
  • Page 210 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete multicast_range create multicast_range command. Parameters <range_name 32> - Enter a name of up to 32 alphanumeric characters that will be used to identify this multicast range to be deleted.
  • Page 211 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config limited_multicast_addr Description This command will perform three tasks for the multicast range. It may add switch ports to the range, delete ports from the multicast range and it may also give these multicast addresses access to the switch, or configure them to be restricted from accessing the Switch.
  • Page 212 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show limited_multicast_addr Purpose Used to display the limited multicast address range on a per port basis. Syntax show limited_muticast_addr {ports <portlist>} Description This command will display the limited multicast address range on a per port basis.
  • Page 213: Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual 802.1X C OMMANDS The Switch implements the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 214 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable 802.1x Purpose Used to enable the 802.1x server on the Switch. Syntax enable 802.1x Description The enable 802.1x command enables the 802.1x Network Access control server application on the Switch. To select between port-based or MAC- based, use the config 802.1x auth_mode command.
  • Page 215 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show 802.1x auth_configuration 802.1x Enabled / Disabled − Shows the current status of 802.1x functions on the Switch. Authentication Mode – Shows the authentication mode, whether it be by MAC address or by port.
  • Page 216 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry show 802.1x auth_state Purpose Used to display the current authentication state of the 802.1x server on the Switch.
  • Page 217 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To display the 802.1x auth state for MAC-based 802.1x: DGS-3627:5#show 802.1x auth_state Command: show 802.1x auth_state Port number : 1 Index MAC Address Auth PAE State Backend State Port Status...
  • Page 218 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config 802.1x capability ports Description The config 802.1x command has four capabilities that can be set for each port. Authenticator, Supplicant, Authenticator and Supplicant, and None. <portlist> − Specifies a port or range of ports to be configured. The Parameters beginning and end of the port list range are separated by a dash.
  • Page 219 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config 802.1x auth_parameter − • auto Allows the port’s status to reflect the outcome of the authentication process. force_unauth − Forces the Authenticator for the port to become •...
  • Page 220 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config 802.1x init command. Example usage: To initialize the authentication state machine of all ports: DGS-3627:5# config 802.1x init port_based ports all Command: config 802.1x init port_based ports all Success.
  • Page 221 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config radius add Description The config radius add command is used to configure the settings the Switch will use to communicate with a RADIUS server. <server_index 1-3> − Assigns a number to the current set of RADIUS Parameters server settings.
  • Page 222 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config radius Purpose Used to configure the Switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddress <server_ip> | key <passwd 32> | auth_port <udp_port_number 1-65535> | acct_port <udp_port_number 1-65535>} Description The config radius command is used to configure the Switch’s...
  • Page 223 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show radius Command: show radius Index IP Address Auth-Port Acct-Port Status Number Number ----- ------------------ --------- --------- ----------- ------------ 10.1.1.1 1812 1813 Active switch 20.1.1.1 1800 1813 Active dgs3627 30.1.1.1...
  • Page 224 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show auth_client Syntax show auth_client Description The show auth_client command is used to display the current RADIUS authentication client currently configured on the Switch. Parameters None. Restrictions Only administrator-level and operator-level users can issue this command.
  • Page 225 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated BackendResponses BackendAccessChallenges BackendOtherRequestsToSupplicant BackendNonNakResponsesFromSupplicant BackendAuthSuccesses BackendAuthFails CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry...
  • Page 226 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show auth_statistics Purpose Used to display the current authentication statistics. Syntax show auth_statistics {ports <portlist> | all]} Description The show auth_statistics command is used to display the current authentication statistics of the Switch on a per port basis.
  • Page 227 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show 802.1x user Purpose Used to display the 802.1x user accounts on the Switch. Syntax show 802.1x user Description The show 802.1x user command is used to display the 802.1x Port- based or MAC-based Network Access control local users currently configured on the Switch.
  • Page 228 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create 802.1x guest_vlan yet installed the necessary 802.1x software, yet would still like limited access rights on the Switch. Parameters <vlan_name 32> - Enter an alphanumeric string of no more than 32 characters to define a pre-existing VLAN as an 802.1x Guest VLAN.
  • Page 229 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show 802.1x guest_vlan Purpose Used to view the configurations for a 802.1x Guest VLAN. Syntax show 802.1x guest_vlan Description The show 802.1x guest_vlan command is used to display the settings for the VLAN that has been enabled as an 802.1x Guest VLAN.
  • Page 230: Access Control List (Acl) Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual (ACL) C CCESS ONTROL OMMANDS The Switch implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings and MAC address.
  • Page 231 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters disable]} | mirror | deny] | ip {vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value 0-65535>...
  • Page 232 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create access_profile (for Ethernet) Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet header. Masks entered can be combined with the values the Switch finds in the specified frame header fields.
  • Page 233 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile (for Ethernet) access profile that will be configured with this command. This value is assigned to the access profile when it is created with the create access_profile command. The lower the profile ID, the higher the priority the rule will be given.
  • Page 234 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile (for Ethernet) delete access_id <value 1-128> − Use this command to delete a specific rule from the Ethernet profile. Up to 128 rules may be specified for the Ethernet access profile.
  • Page 235 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create access_profile (IP) (TCP) field. • src_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the source port. • dst_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the destination port.
  • Page 236 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile (IP) add access_id <value 1-128> - Adds an additional rule to the above specified access profile. The value specifies the relative priority of the additional rule. Up to 128 different rules may be configured for the IP access profile.
  • Page 237 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile (IP) previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch.
  • Page 238 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create access_profile (packet content ) is divided up into four “chunks” where each chunk represents 4 bytes. Values within the packet header chunk to be identified are to be marked in hexadecimal form in the “mask”...
  • Page 239 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile profile_id (packet content) into 4 “chunks” where each chunk represents 4 bytes. Values within the packet header chunk to be identified are to be marked in hexadecimal form in the “mask” field. The following table will help you identify the bytes in the respective chunks.
  • Page 240 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command: config access_profile profile_id 3 add access_id 1 packet_content_mask offset_chunk_1 0x11111111 port 3 permit priority 2 replace_priority rx_rate no_limit counter enable Success. DGS-3627:5# create access_profile (ipv6) Purpose Used to create an access profile on the Switch by examining the IPv6 part of the packet header.
  • Page 241 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile profile_id (ipv6) destionation_ipv6 <ipv6addr>} port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]} | counter [enable | disable]} | mirror | deny} | {time_range <range_name 32>} delete access_id <value 1-128>]...
  • Page 242 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config access_profile profile_id (ipv6) {time_range <range_name 32>} – Choose this parameter and enter the name of the Time Range settings that has been previously configured using the config time_range command.
  • Page 243 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show access_profile command. Entering this command without the profile_id parameter will command the Switch to display all access profile entries. Restrictions None. Example usage: To display all of the currently configured access profiles on the Switch:...
  • Page 244 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create cpu access_profile • source_mac <macmask> - Specifies to examine the source MAC address mask. MAC address entries may be made in the following format: 000000000000-FFFFFFFFFFFF • destination_mac <macmask> - Specifies to examine the destination MAC address mask.
  • Page 245 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create cpu access_profile address. • destination_ipv6_mask <ipv6mask> - Specifies an IP address mask for the destination IPv6 address. Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To create a CPU access profile: DGS-3627:5# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0...
  • Page 246 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config cpu access_profile • vlan <vlan_name 32> − Specifies that the access profile will apply to only to this VLAN. • source_mac <macaddr> − Specifies that the access profile will apply to this source MAC address.
  • Page 247 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config cpu access_profile • offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63. • offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79.
  • Page 248 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete cpu access_profile Restrictions Only administrator-level and operator-level users can issue this command. Example usage: To delete the CPU access profile with a profile ID of 1: DGS-3627:5#delete cpu access_profile profile_id 1 Command: delete cpu access_profile profile_id 1 Success.
  • Page 249: Time Range Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ANGE OMMANDS The Time Range commands are used in conjunction with the Access Profile commands listed in the previous chapter to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the Switch.
  • Page 250 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To configure the time range time1 to be between 6:30 a.m. and 9:40 p.m., Monday to Friday: DGS-3627:5#config time_range time1 hours start_time 6:30:00 end_time 21:40:00 weekdays mon-fri...
  • Page 251: Acl Flow Metering Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual FLOW ETERING OMMANDS Before configuring the ACL Flow Meter, here is a list of acronyms and terms users will need to know. trTCM – Two Rate Three Color Marker. This, along with the srTCM, are two methods available on the switch for metering and marking packet flow.
  • Page 252 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters <value 1-14> access_id <value 1-128> [[tr_tcm cir <value 1-156249> {cbs <value 1-16384>} pir <value 1-156249> {pbs <value 1-16384>} | sr_tcm cir <value 1-156249> cbs <value 1-16384> ebs <value 1- config flow_meter profile_id 16384>...
  • Page 253 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config flow_meter profile_id • ebs <value 1-16384> - Excess Burst Size. Measured in bytes, the EBS is associated with the CIR and is used to identify packets that exceed the boundaries of the CBS packet size.
  • Page 254 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show flow_meter Purpose Used to display the ACL flow meter parameters set on the switch. Syntax show flow_meter {profile_id <value 1-14> {access_id <value 1- 128>}} Description This command will display the flow meter parameters set on the switch.
  • Page 255: Sflow

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual sFlow is a feature that allows users to monitor network traffic running through the switch to identify network problems through packet sampling and packet counter information of the Switch. The Switch itself is the sFlow agent where packet data is retrieved and sent to an sFlow Analyzer where it can be scrutinized and utilized to resolve the problem.
  • Page 256 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable sflow Purpose Used to enable the sFlow function on the switch. Syntax enable sflow Description This command, along with the disable sflow command, is used to enable the sFlow function on the switch without altering configurations.
  • Page 257 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create sflow analyzer_server that originate from the Switch. Users must have the proper sFlow software set on the Analyzer in order to receive datagrams from the switch to be analyzed, and to analyze these datagrams. Users may specify up to four unique analyzers to receive datagrams, yet the virtual port used must be unique to each entry.
  • Page 258 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config sflow analyzer_server timeout <sec 1-2000000> - Used to specify the timeout for the Analyzer server. When the server times out, all sFlow samples and counter polls associated with this server will be deleted. The user may set a time between 1 and 2000000 seconds with a default setting of 400 seconds.
  • Page 259 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show sflow analyzer_server Purpose Used to display the settings of the sFlow analyzer server set on the switch. Syntax show sflow analyzer_server Description This command will display the settings for a previously created sFlow analyzer server.
  • Page 260 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create sflow counter_poller ports command. Example usage: To create the sFlow counter poller: DGS-3627:5# create sflow counter_poller ports 1 analyzer_server_id 1 interval 20 Command: create sflow counter_poller ports 1 analyzer_server_id 1 interval 20 Success.
  • Page 261 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete sflow counter_poller ports Parameters <portlist> - Use this parameter to delete the ports that will be mined for sFlow information. all – Use this parameter to delete all ports to be mined for sFlow information.
  • Page 262 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create sflow flow_sampler ports Parameters <portlist> - Use this parameter to set the ports that will be mined for sFlow information. all – Use this parameter to set all ports to be mined for sFlow information.
  • Page 263 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config sflow flow_sampler ports maxheadersize <value 18-256> - This field will set the number of leading bytes of the sampled packet header. This sampled header will be encapsulated with the datagram to be forwarded to the Analyzer Server.
  • Page 264 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show sflow flow_sampler Purpose Used to display the sFlow sampler information for the sFlow function of the switch. Syntax show sflow flow_sampler Description This command will allow the user to display the Switch’s sFlow flow sampler information.
  • Page 265: Time And Sntp Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual SNTP C IME AND OMMANDS The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
  • Page 266 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DGS-3627:5# show sntp Purpose Used to display the SNTP information. Syntax...
  • Page 267 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#enable sntp Command: enable sntp Success. DGS-3627:5# disable sntp Purpose To disable SNTP server support. Syntax disable sntp Description This will disable SNTP support. SNTP service must be separately configured (see config sntp).
  • Page 268 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config time 30jun2003 16:30:30 Command: config time 30jun2003 16:30:30 Success. DGS-3627:5# config time_zone Purpose Used to determine the time zone used in order to adjust the system clock. Syntax config time_zone {operator [+ | -] | hour <gmt_hour 0-13>...
  • Page 269 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config dst Parameters disable - Disable the DST seasonal time adjustment for the Switch. repeating - Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula.
  • Page 270 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
  • Page 271: Policy Route Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OLICY OUTE OMMANDS Policy Based routing is a method used by the Switch to give specified devices a cleaner path to the Internet. Used in conjunction with the Access Profile feature, the Switch will identify traffic originating from a specified IP address and forward it on to a next hop router that has a less congested connection to the Internet than the normal routing scheme of your network.
  • Page 272 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create policy_route name manager Command: create policy_route name manager Success. DGS-3627:5# config policy_route Purpose Used to configure the parameters to set the policy route on the Switch. Syntax config policy_route name <policyroute_name 32> acl profile_id <value 1-14> | access_id <value 1-128>...
  • Page 273 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To delete the policy route name “manager”: DGS-3627:5#delete policy_route name manager Command: delete policy_route name manager Success. DGS-3627:5# show policy_route Purpose Used to display policy route settings.
  • Page 274: Safeguard Engine Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual AFEGUARD NGINE OMMANDS Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
  • Page 275 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config safeguard_engine state [enable | disable] – Select the running state of the Safeguard Engine Parameters function as enable or disable. utilization – Select this option to trigger the Safeguard Engine function to enable based on the following determinates: •...
  • Page 276 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show safeguard_engine Command: show safeguard_engine Safeguard engine state : Disabled Safeguard engine current status : normal mode ======================================================= CPU utilization information: Rising : 30% Falling : 20% Trap/Log state : Disabled...
  • Page 277: Traffic Segmentation Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual RAFFIC EGMENTATION OMMANDS Traffic segmentation allows users to further sub-divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN. The VLAN rules take precedence, and then the traffic segmentation rules are applied.
  • Page 278 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show traffic_segmentation dash. Non-contiguous portlist entries are separated by a comma. (ex: 1-3,7-9) Restrictions The port lists for segmentation and the forward list must be on the same Switch.
  • Page 279: Arp And Gratuitous Arp Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ARP C RATUITOUS OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr>...
  • Page 280 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete arpentry Purpose Used to delete a static entry into the ARP table. Syntax delete arpentry [<ipaddr> | all] Description This command is used to delete a static ARP entry, made using the create arpentry command above, by specifying either the IP address of the entry or all.
  • Page 281 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show arpentry Description This command is used to display the current contents of the Switch’s ARP table. ipif <ipif_name 12> − The name of the IP interface the end node or station Parameters for which the ARP table entry was made, resides on.
  • Page 282 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual clear arptable Purpose Used to remove all dynamic ARP table entries. Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch’s ARP table. Static ARP table entries are not affected.
  • Page 283 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config gratuitous_arp send ipif_status_up Purpose Used to enable/disable the sending of gratuitous ARP requests while the IP interface status comes up. Syntax config gratuitous_arp send ipif_status_up [enable | disable]...
  • Page 284 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Success. DGS-3627:5# config gratuitous_arp learning Purpose Used to enable/disable learning of ARP entries in the ARP cache based on the received gratuitous ARP packets. Syntax config gratuitous_arp learning [enable|disable]...
  • Page 285 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable gratuitous_arp trap & log Purpose Used to disable gratuitous ARP trap and log state. Syntax disable gratuitous_arp {ipif <ipif_name 12>} {trap |log } Description This command is used to disable gratuitous ARP trap and log state.
  • Page 286 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show gratuitous arp Used to display gratuitous ARP configuration. Purpose Syntax show gratuitous_arp {ipif <ipif_name>} Description This command is used to display gratuitous ARP configuration. <ipif_name 12> − The interface name of the Layer 3 device.
  • Page 287: Vrrp Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual VRRP C OMMANDS VRRP or Virtual Routing Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router that controls the IP address associated with a virtual router is called the Master, and will forward packets sent to this IP address.
  • Page 288 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#enable vrrp Command: enable vrrp Success. DGS-3627:5# Example usage: To enable the virtual IP address to be pinged: DGS-3627:5#enable vrrp ping Command: enable vrrp ping Success. DGS-3627:5# disable vrrp Purpose To disable the VRRP function on the Switch.
  • Page 289 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create vrrp vrid Purpose To create a VRRP router on the Switch. Syntax vrid <vrid 1-255> ipif <ipif_name 12> ipaddress <ipaddr> {state [enable | disable] | priority <int 1-254> | advertisement_interval <int 1-255>...
  • Page 290 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create vrrp vrid command. Example usage: To create a VRRP entry: DGS-3627:5#create vrrp vrid 1 ipif Tiberius ipaddress 11.1.1.1 state enable priority 200 advertisement_interval 1 preempt true critical_ip 10.53.13.224 critical_ip_state enable Command: create vrrp vrid 1 ipif Tiberius ipaddress 11.1.1.1 state enable...
  • Page 291 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config vrrp vrid router. A true entry, along with having the backup router’s priority set higher than the masters priority, will set the backup router as the Master router. A false entry will disable the backup router from becoming the Master router.
  • Page 292 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config vrrp ipif an alphanumeric authentication string of no more than 16 characters to generate a MD5 message digest for authentication in comparing VRRP messages received by the router. If the two values are inconsistent, the packet will be dropped.
  • Page 293 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# delete vrrp Purpose Used to delete a VRRP entry from the switch. Syntax delete vrrp {vrid <vrid 1-255> ipif <ipif_name 12>} Description This command is used to remove a VRRP router running on a local device.
  • Page 294: Routing Table Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OUTING ABLE OMMANDS The routing table commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create iproute [default | <network_address>] [null0| <ipaddr> {<metric 1-65535>} {[primary | backup | weight <value 1-4>]}]...
  • Page 295 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# To create a static route with Null interface as the next hop: DGS-3627:5#create iproute 10.48.74.121/255.0.0.0 Null0 Command: create iproute 10.48.74.121/8 Null0 Success. DGS-3627:5# delete iproute Purpose Used to delete an IP route entry from the Switch’s IP routing table.
  • Page 296 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show iproute the destination of the route. The address and mask information can be specified using the traditional format (for example, 10.1.2.3/255.0.0.0 or in CIDR format, 10.1.2.3/8). <ipaddr> − The gateway IP address for the next hop router to be displayed.
  • Page 297 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create ipv6route 1234::5D7F/32 2D30::AC21 Command:create ipv6route 1234::5D7F/32 2D30::AC21 Success. DGS-3627:5# delete ipv6route Purpose Used to delete an static IPv6 route entry from the Switch’s IP routing table. Syntax delete ipv6route [[default | <ipv6networkaddr>] [<ipif_name 12>...
  • Page 298 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# show ipv6route Command: show ipv6route IPv6 Prefix : ::/0 Protocol : Static Metric: 65535 Next Hop : 3003::30 IPIF : ip3 Backup : Backup Status : Active Total Entries : 1...
  • Page 299: Route Redistribution Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OUTE EDISTRIBUTION OMMANDS The route redistribution commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create route redistribute dst ospf src [static | rip | local] {mettype [1 | 2] | metric <value 0-16777214>}...
  • Page 300 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Allowed Metric Type combinations are mettype 1 or mettype 2. The metric value 0 above will be redistributed in OSPF as the metric Example usage: To add route redistribution settings:...
  • Page 301 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Entering the Type combination − Internal, ExtType_1, ExtType_2 is functionally equivalent to All. Entering the combination ExtType_1, ExtType_2 is functionally equivalent to External. Entering the combination Internal, External is functionally equivalent to All.
  • Page 302 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Allowed Metric Type combinations are mettype 1 or mettype 2. The metric value 0 above will be redistributed in OSPF as the metric Example usage: To configure route redistributions:...
  • Page 303 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# delete route redistribute Purpose Used to delete an existing route redistribute configuration on the Switch. Syntax delete route redistribute {dst [rip | ospf] src [rip | static | local | ospf]} Description This command will delete the route redistribution settings on this switch.
  • Page 304: Dns Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DNS C OMMANDS The DNS relay commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dnsr [[primary | secondary] nameserver <ipaddr> | [add | delete] static <domain_name 32>...
  • Page 305 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To delete an entry domain name dns1, IP address 10.43.21.12 from DNS static table. DGS-3627:5#config dnsr delete static dns1 10.43.21.12 Command: config dnsr delete static dns1 10.43.21.12 Success.
  • Page 306 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable dnsr Purpose Used to disable DNS relay on the Switch. Syntax disable dnsr {[cache | static]} Description This command is used, in combination with the enable dnsr command above, to enable and disable DNS Relay on the Switch.
  • Page 307 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To display DNS relay status: DGS-3627:5#show dnsr Command: show dnsr DNSR Status : Disabled Primary Name Server : 0.0.0.0 Secondary Name Server : 0.0.0.0 DNSR Cache Status : Disabled...
  • Page 308: Rip Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual RIP C OMMANDS The RIP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config rip [ipif <ipif_name 12> | all] {authentication [enable <password 16>...
  • Page 309 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To change the RIP receive mode for the IP interface System: DGS-3627:5#config rip ipif System rx_mode v1_only Command: config rip ipif System rx_mode v1_only Success. DGS-3627:5# enable rip Purpose Used to enable RIP.
  • Page 310 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show rip Purpose Used to display the RIP configuration and statistics for the Switch. Syntax show rip {ipif <ipif_name 12>} Description This command will display the RIP configuration and statistics for a given IP interface or for all IP interfaces.
  • Page 311: Dvmrp Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DVMRP C OMMANDS The DVMRP commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dvmrp [ipif <ipif_name 12> | all] {metric <value 1-31> | probe <sec 1-65535> | neighbor_timeout <sec 1-65535>...
  • Page 312 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config dvmrp ipif System neighbor_timeout 30 metric 1 probe 5 Command: config dvmrp ipif System neighbor_timeout 30 metric 1 probe 5 Success DGS-3627:5# enable dvmrp Purpose Used to enable DVMRP.
  • Page 313 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show dvmrp routing_table Description The command is used to display the current DVMRP routing table. ipaddress <network_address> − The IP address and netmask of the Parameters destination. The address and mask information can be specified using the traditional format (for example, 10.1.2.3/255.0.0.0 or in CIDR format,...
  • Page 314 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show dvmrp nexthop Purpose Used to display the current DVMRP routing next hop table. Syntax show dvmrp nexthop {ipaddress <network_address> | ipif <ipif_name 12>} Description This command will display the DVMRP routing next hop table.
  • Page 315 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show dvmrp Command: show dvmrp DVMRP Global State : Disabled Interface IP Address Neighbor Timeout Probe Metric State ------------ --------------- --------------- ----- ------ ------- System 10.90.90.90/8 Disabled Zira 12.1.1.1/8...
  • Page 316: Pim Commands

    PIM or Protocol Independent Multicast is a method of forwarding traffic to multicast groups over the network using any pre-existing unicast routing protocol, such as RIP or OSPF, set on routers within a multicast network. The xStack DGS-3600 Series supports three types of PIM, Dense Mode (PIM-DM), Sparse Mode (PIM-SM), and Sparse and Dense Mode (PIM-SM-DM).
  • Page 317 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Assert Messages At times on the PIM-SM enabled network, parallel paths are created from source to receiver, meaning some receivers will receive the same multicast packets twice. To improve this situation, Assert messages are sent from the receiving device to both multicast sources to determine which single router will send the receiver the necessary multicast data.
  • Page 318 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command Parameters delete pim register_checksum_include_data rp_address <ipaddr> show pim register_checksum_include_data_rp_list Each command is listed, in detail, in the following sections. enable pim Purpose Used to enable the PIM function on the Switch.
  • Page 319 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config pim Purpose Used to configure the parameters for the PIM protocol. Syntax config pim [[ipif <ipif_name 12> | all] {hello <sec 1-18724> | jp_interval <sec 1- 18724> | state [enable | disable] | mode [dm | sm| sm-dm] | dr_priority <unit 0 –...
  • Page 320 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create pim crp Purpose To enable the Switch to become a candidate to be the Rendezvous Point (RP). Syntax create pim crp group <network_address> rp <ipif_name 12> Description This command will set the parameters for the switch to become a candidate RP.
  • Page 321 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config pim crp Purpose To configure the Candidate RP settings that will determine the RP. Syntax config pim crp {holdtime <value 0-255> | priority <value 0-255> | wildcard_prefix_cnt [0 | 1]}...
  • Page 322 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To create the settings to determine a static RP: DGS-3627:5#create pim static_rp group 231.0.0.1/32 rp 11.1.1.1 Command: create pim static_rp group 231.0.0.1/32 rp 11.1.1.1 Success. DGS-3627:5# delete pim static_rp...
  • Page 323 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show pim static_rp Command: show pim static_rp PIM Static RP Table Group RP Address ------------------ --------------------- 24.0.0.0/4 11.1.1.254 239.0.0.1/32 31.1.1.1 239.0.0.2/32 31.1.1.12 239.0.0.3/32 31.1.1.123 Total entries: 4 DGS-3627:5# config pim last_hop_spt_switchover Purpose Used to choose the switchover mode on the last hop router.
  • Page 324 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To view the RP Set information: DGS-3627:5# show pim rpset Command: show pim rpset PIM RP-Set Table Bootstrap Router: 12.43.51.81 Group Address RP Address Holdtime Expired Time Type ---------------------...
  • Page 325 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config pim cbsr Parameters ipif <ipif_name 12> - Enter the ipif name of the interface to become the CBSR. priority [-1 | value 0-255>] - Used to state the Priority of this IP Interface to become the BSR.
  • Page 326 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show pim cbsr Purpose Used to display the Candidate BSR settings of the switch, along with CBSR parameters configured for the Switch. Syntax show pim cbsr {ipif <ipif_name12>} Description This command will display the settings for Candidate BSRs that are accessible to the switch.
  • Page 327 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# show pim Command: show pim PIM Global State : Enabled Last Hop SPT Switchover : Immediately Register Probe Time Register Suppression Time : 60 PIM Interface Table Designated...
  • Page 328 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show pim ipmroute Purpose Used to display the PIM IP Multicast Route Table on the Switch. Syntax show pim ipmroute Description This command will display the PIM IP Multicast Route Table on the Switch.
  • Page 329 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To create an RP to which the Switch will send Register packets to and create checksums to be included with the data in Registered packets: DGS-3627:5# create pim register_checksum_include_data rp_address 11.1.1.1 Command: create pim register_checksum_include_data rp_address 11.1.1.1...
  • Page 330 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show pim register_checksum_include_data_rp_list Command: show pim register_checksum_include_data_rp_list PIM Register Checksum Include Data RP Address ------------------------------------------- 11.1.1.1 Total Entries: 1 DGS-3627:5#...
  • Page 331: Ip Multicasting Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual IP M ULTICASTING OMMANDS The IP multicasting commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters show ipmc cache {group <group>} {ipaddress <network_address>}...
  • Page 332 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show ipmc • inactive – Specifying this parameter will display entries that are currently inactive. • dvmrp – Specifying this parameter will display only those entries that are related to the DVMRP protocol.
  • Page 333: Md5 Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual MD5 C OMMANDS The MD5 configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create md5 key <key_id 1-255>...
  • Page 334 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config md5 key 1 taboo Command: config md5 key 1 taboo Success. DGS-3627:5# delete md5 key Purpose Used to delete an entry in the MD5 key table. Syntax delete md5 key <key_id 1-255>...
  • Page 335: Ospf Configuration Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OSPF C ONFIGURATION OMMANDS The OSPF configuration commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ospf router_id <ipaddr>...
  • Page 336 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf router_id Purpose Used to configure the OSPF router ID. Syntax config ospf router_id <ipaddr> Description This command is used to configure the OSPF router ID. <ipaddr> − The IP address of the OSPF router.
  • Page 337 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#disable ospf Command: disable ospf Success. DGS-3627:5# show ospf Purpose Used to display the current OSPF state on the Switch. Syntax show ospf Description This command will display the current state of OSPF on the Switch,...
  • Page 338 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual 10.0.0.0 20.0.0.0 None DOWN 10.1.1.1 20.1.1.1 None DOWN Total Entries : 2 OSPF Area Aggregation Settings Area ID Aggregated LSDB Advertise Network Address Type --------------- ------------------ -------- --------- 244.0.0.6 11.0.0.0/8...
  • Page 339 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Usage example: To create an OSPF area: DGS-3627:5#create ospf area 10.48.74.122 type normal Command: create ospf area 10.48.74.122 type normal Success. DGS-3627:5# To create an OSPF NSSA area: DGS-3627:5#create ospf area 11.1.1.1 type nssa translate enable metric 5 stub_summary enable Command: create ospf area 11.1.1.1 type nssa translate enable metric 5 stub_summary enable...
  • Page 340 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf area configured here as a normal area. • stub – Choosing this parameter will define the OSPF area configured here as a stub area. • nssa – Choosing this parameter will define the OSPF area configured here as an NSSA (Not So Stubby Area) area.
  • Page 341 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create ospf host_route Purpose Used to configure OSPF host route settings. Syntax create ospf host_route <ipaddr> {area <area_id> | metric <value 1-65535>} Description This command is used to configure the OSPF host route settings.
  • Page 342 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf host_route Restrictions Only administrator-level and operator-level users can issue this command. Usage example To configure an OSPF host route: DGS-3627:5#config ospf host_route 10.48.74.122 area 10.1.1.1 metric 2 Command: config ospf host_route 10.48.74.122 area 10.1.1.1 metric 2...
  • Page 343 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create ospf aggregation are entering the OSPF area by redistribution. • advertise [enable | disable] − Allows for the advertisement trigger to be enabled or disabled. • nssa_ext – Choosing this LSDB type will summarize routes that are entering the OSPF NSSA from an external source.
  • Page 344 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf aggregation Description This command is used to configure the OSPF area aggregation settings. <area_id> − A 32-bit number in the form of an IP address Parameters (xxx.xxx.xxx.xxx) that uniquely identifies the OSPF area in the OSPF domain.
  • Page 345 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Total Entries: 2 DGS-3627:5# show ospf lsdb Purpose Used to display the OSPF Link State Database (LSDB). Syntax show ospf lsdb {area_id <area_id> | advertise_router <ipaddr> | type [rtrlink | netlink | summary | assummary | asextlink | nssa_ext]} Description This command will display the current OSPF Link State Database (LSDB).
  • Page 346 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To display the current OSPF neighbor router table: DGS-3627:5#show ospf neighbor Command: show ospf neighbor IP Address of Router ID of Neighbor Neighbor Neighbor Neighbor Priority State --------------- --------------...
  • Page 347 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf ipif A number between 0 and 255. hello_interval <sec 1-65535> − Allows the specification of the interval between the transmission of OSPF Hello packets, in seconds. Between 1 and 65535 seconds can be specified.
  • Page 348 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Usage example: To display the current OSPF interface settings, for a specific OSPF interface: DGS-3627:5#show ospf ipif ipif2 Command: show ospf ipif ipif2 Interface Name: ipif2 IP Address: 123.234.12.34/24 ((Link Up)
  • Page 349 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create ospf virtual_link Purpose Used to create an OSPF virtual interface. Syntax create ospf virtual_link <area_id> <neighbor_id> {hello_interval <sec 1-65535> | dead_interval <sec 1-65535> | authentication [none | simple <password 8> | md5 <key_id 1-255>]} Description This command is used to create an OSPF virtual interface.
  • Page 350 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ospf virtual_link that uniquely identifies the OSPF area in the OSPF domain. <neighbor_id> − The OSPF router ID for the remote area. This is a 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the remote area’s Area Border Router.
  • Page 351 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Command: delete ospf virtual_link 10.1.12 20.1.1.1 Success. DGS-3627:5# show ospf virtual_link Purpose Used to display the current OSPF virtual interface configuration. Syntax show ospf virtual_link {<area_id> <neighbor_id>} Description This command will display the current OSPF virtual interface configuration.
  • Page 352: Route Preference Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OUTE REFERENCE OMMANDS Route Preference is a way for routers to select the best path when there are two or more different routes to the same destination from two different routing protocols. The majority of routing protocols are not compatible when used in conjunction with each other. This Switch supports and may be configured for many routing protocols, as a stand alone switch or more importantly, in utilizing the stacking function and Single IP Management of the Switch.
  • Page 353 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config route preference Purpose Used to configure the route preference of each route type. Syntax config route preference [static | rip | ospfIntra | ospfInter | ospfExt1 | ospfExt2] <value 1-999>...
  • Page 354 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show route preference rip - Enter this parameter to view the route preference settings for the RIP route. ospfIntra - Enter this parameter to view the route preference settings for the Ospf Intra-area route.
  • Page 355: Mac Notification Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual MAC N OTIFICATION OMMANDS The MAC notification commands in the Command Line Interface (CLI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification...
  • Page 356 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#disable mac_notification Command: disable mac_notification Success. DGS-3627:5# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1-2147483647> | historysize <int 1-500>} Description MAC address notification is used to monitor MAC addresses learned and entered into the FDB.
  • Page 357 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config mac_notification ports 7 enable Command: config mac_notification ports 7 enable Success. DGS-3627:5# show mac_notification Purpose Used to display the Switch’s MAC address table notification global settings Syntax show mac_notification Description This command is used to display the Switch’s MAC address table...
  • Page 358 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled CTRL+C ESC q Quit SPACE n Next Page Enter Next Entry...
  • Page 359: Web-Based Access Control (Wac) Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual (WAC) C BASED CCESS ONTROL OMMANDS Web-based Access Control is another port based access control method implemented similarly to the 802.1x port based access control method previously stated. This function will allow user authentication through a RADIUS server or through the local username and password set on the Switch when a user is trying to access the network via the Switch, if the port connected to the user is enabled for this feature.
  • Page 360 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable wac Purpose Used to disable the Web-based Access Control on the Switch. Syntax disable wac Description This command is used to disable Web-based Access Control globally on the Switch.
  • Page 361 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config wac already been pre-assigned by the administrator using the config radius commands located in the 802.1x section. default_redirpath - Enter the URL of the website that authenticated users placed in the VLAN are directed to once authenticated. This path must be entered into this field before the Web-based Access Control can be enabled.
  • Page 362 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create wac user Purpose Used to create a Web-based Access Control user on the switch Syntax create wac user <username 15> {vlan <vlan_name 32>} Description This command is used to create a Web-based Access Control user on the Switch.
  • Page 363 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config wac user user on the Switch. Syntax config wac user <username 15> vlan <vlan_name 32> Description This command is used to configure a previously created Web-based Access Control user on the Switch.
  • Page 364 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show wac Purpose Used to display the parameters for the Web-based Access Control settings currently configured on the Switch. Syntax show wac {ports [<portlist> | all]} Description This command is used to display the parameters for the Web- based Access Control settings currently configured on the Switch.
  • Page 365 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual NOTE: A successful authentication should direct the client to the stated web page. If the client does not reach this web page, yet does not receive a Fail! message, the client will already be authenticated and therefore should refresh the current browser window or attempt to open a different web page.
  • Page 366: Access Authentication Control Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual CCESS UTHENTICATION ONTROL OMMANDS The TACACS / XTACACS / TACACS+ / RADIUS commands allow users to secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
  • Page 367 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual The Access Authentication Control commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable authen_policy disable authen_policy show authen_policy create authen_login method_list_name <string 15>...
  • Page 368 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the method list and choose a technique for user authentication upon login.
  • Page 369 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display the system access authentication policy: DGS-3627:5#show authen_policy Command: show authen_policy Authentication Policy: Enabled DGS-3627:5# create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for users logging on to the Switch.
  • Page 370 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config authen_login administrator level, the user must implement the enable admin command, followed by a previously configured password. (See the enable admin part of this section for more detailed information, concerning the enable admin command.)
  • Page 371 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To configure the user defined method list “DLee” with authentication methods TACACS, XTACACS and local, in that order. DGS-3627:5#config authen_login method_list_name DLee method tacacs xtacacs local Command: config authen_login method_list_name DLee method tacacs xtacacs local Success.
  • Page 372 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show authen_login all – Entering this parameter will display all the authentication login methods currently configured on the Switch. The window will display the following parameters: Method List Name – The name of a previously configured method list name.
  • Page 373 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#create authen_enable method_list_name Permit Command: show authen_login method_list_name Permit Success. DGS-3627:5# config authen_enable Purpose Used to configure a user-defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch.
  • Page 374 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config authen_enable defined by the user (create authen_enable). The user may add one, or a combination of up to four of the following authentication methods to this method list: tacacs –...
  • Page 375 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete authen_enable method_list_name Syntax delete authen_enable method_list_name <string 15> Description This command is used to delete a user-defined method list of authentication methods for promoting user level privileges to Administrator level privileges.
  • Page 376 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show authen_enable all Command: show authen_enable all Method List Name Priority Method Name Comment ---------------- -------- --------------- ------------------ Permit tacacs+ Built-in Group tacacs Built-in Group ctsnow User-defined Group local...
  • Page 377 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config authen application http login default Command: config authen application http login default Success. DGS-3627:5# show authen application Purpose Used to display authentication methods for the various applications on the Switch.
  • Page 378 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create authen server_host TACACS protocol. xtacacs - Enter this parameter if the server host utilizes the XTACACS protocol. tacacs+ - Enter this parameter if the server host utilizes the TACACS+ protocol.
  • Page 379 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config authen server_host Parameters server_host <ipaddr> - The IP address of the remote server host the user wishes to alter. protocol – The protocol used by the server host. The user may choose one of the following: tacacs –...
  • Page 380 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual delete authen server_host TACACS protocol. xtacacs - Enter this parameter if the server host utilizes the XTACACS protocol. tacacs+ - Enter this parameter if the server host utilizes the TACACS+ protocol.
  • Page 381 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual create authen server_group Purpose Used to create a user-defined authentication server group. Syntax create authen server_group <string 15> Description This command will create an authentication server group. A server...
  • Page 382 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config authen server_group add/delete – Enter the correct parameter to add or delete a server host from a server group. server_host <ipaddr> - Enter the IP address of the previously configured server host to add or delete.
  • Page 383 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show authen server_group Description This command will display authentication server groups currently configured on the Switch. This command will display the following fields: Group Name: The name of the server group currently configured on the Switch, including built in groups and user defined groups.
  • Page 384 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config authen parameter attempt Purpose Used to configure the maximum number of times the Switch will accept authentication attempts. Syntax config authen parameter attempt <int 1-255> Description This command will configure the maximum number of times the Switch will accept authentication attempts.
  • Page 385 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable admin Purpose Used to promote user level privileges to administrator level privileges Syntax enable admin Description This command is for users who have logged on to the Switch on the normal user level, to become promoted to the administrator level.
  • Page 386: Ssh Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual SSH C OMMANDS The steps required to use the Secure Shell (SSH) protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server), are as follows: Create a user account with admin-level access using the create account admin <username>...
  • Page 387 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#enable ssh Command: enable ssh Success. DGS-3627:5# disable ssh Purpose Used to disable SSH. Syntax disable ssh Description This command allows users to disable SSH on the Switch. Enabling SSH will disable the Telnet-manager on the Switch.
  • Page 388 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config ssh authmode password enable Command: config ssh authmode password enable Success. DGS-3627:5# show ssh authmode Purpose Used to display the SSH authentication mode setting. Syntax show ssh authmode...
  • Page 389 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To configure the SSH server: DGS-3627:5# config ssh server maxsession 2 contimeout 300 authfail 2 Command: config ssh server maxsession 2 contimeout 300 authfail 2 Success. DGS-3627:5# show ssh server Purpose Used to display the SSH server setting.
  • Page 390 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ssh user user. password – This parameter should be chosen if the user wishes to use an administrator defined password for authentication. Upon entry of this command, the Switch will prompt the user for a password, and then to retype the password for confirmation.
  • Page 391 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1 |...
  • Page 392 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show ssh algorithm Parameters None. Restrictions None. Usage Example: To display SSH algorithms currently set on the Switch: DGS-3627:5#show ssh algorithm Command: show ssh algorithm Encryption Algorithm ----------------------------------------- 3DES...
  • Page 393: Ssl Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite,...
  • Page 394 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch.
  • Page 395 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} Description This command will disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch.
  • Page 396 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config ssl cachetimeout timeout process. Parameters timeout <value 60-86400> - Enter a timeout value between 60 and 86400 seconds to specify the total time an SSL key exchange ID stays valid before the SSL module will require a new, full SSL negotiation for connection.
  • Page 397 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show ssl Command: show ssl SSL Status Disabled RSA_WITH_RC4_128_MD5 0x0004 Enabled RSA_WITH_3DES_EDE_CBC_SHA 0x000A Enabled DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_MD5 0x0003 Enabled DGS-3627:5# Example usage: To view certificate file information on the Switch:...
  • Page 398: Jumbo Frame Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual UMBO RAME OMMANDS Certain switches can support jumbo frames (frames larger than the Ethernet frame size of 1536 bytes). To transmit frames of up to 9K (and 9216 bytes tagged), the user can increase the maximum transmission unit (MTU) size from the default of 1536 by enabling the Jumbo Frame command.
  • Page 399 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#disable jumbo_frame Command: disable jumbo_frame Success. DGS-3627:5# show jumbo_frame Purpose Used to show the status of the jumbo frame function on the Switch. Syntax show jumbo_frame Description This command will show the status of the jumbo frame function on the Switch.
  • Page 400: Lldp Commands

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual LLDP C OMMANDS Command Parameters enable lldp disable lldp config lldp message_tx_interval <sec 5-32768> config lldp message_tx_hold_multiplier <int 2–10> config lldp tx_delay <sec 1-8192> config lldp reinit_delay <sec 1-10>...
  • Page 401 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable lldp Description This is a global control for the LLDP function. When this function is enabled, the switch can start to transmit LLDP packets and receive and process the LLDP packets. The specific function of each port will depend on the per port LLDP setting.
  • Page 402 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp message_tx_interval Purpose Used to change the packet transmission interval. Syntax config lldp message_tx_interval <sec 5 – 32768> Description This interval controls how often active ports retransmit advertisements to their neighbors.
  • Page 403 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp tx_delay Purpose Used to change the minimum time (delay-interval) LLDP ports will delay in advertising successive LLDP advertisements due to a change in LLDP MIB content. The tx_delay defines the minimum interval between sending of LLDP messages due to constantly change of MIB content.
  • Page 404 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp notification _interval Purpose Used to configure the timer of the notification interval for sending notification to configured SNMP trap receiver(s). Syntax config lldp notification_interval <sec 5 – 3600 >...
  • Page 405 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp ports admin_status Purpose Used to configure per-port transmit and receive modes. Syntax config lldp ports [<portlist>|all] admin_status [tx_only | rx_only | tx_and_rx | disable] Description These options enable the user to control which ports participate in LLDP traffic and whether the participating ports allow LLDP traffic in only one direction or in both directions.
  • Page 406 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config lldp ports 1:1-1:2 mgt_addr ipv4 192.168.254.10 enable Command: config lldp ports 1:1-1:2 mgt_addr ipv4 192.168.254.10 enable Success. DGS-3627:5# config lldp ports basic_tlvs Purpose Used to configure an individual port or group of ports to exclude one or more optional TLV data types from outbound LLDP advertisements.
  • Page 407 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp dot1_tlv_pvid Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 organization port VLAN ID TLV data types from outbound LLDP advertisements.
  • Page 408 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable Command: config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable Success. DGS-3627:5# config lldp dot1_tlv_vlan_name Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 organization VLAN name TLV data types from...
  • Page 409 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp dot1_tlv_protocol_identity Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE 802.1 organization protocol identity TLV data types from outbound LLDP advertisements.
  • Page 410 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual config lldp dot3_tlvs that LLDP agent should transmit 'MAC/PHY configuration/status TLV'. This type indicates it is possible for two ends of an IEEE 802.3 link to be configured with different and/or speed settings and still establish some limited network connectivity.
  • Page 411 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config lldp forward_message enable Command: config lldp forward_message enable Success. DGS-3627:5# show lldp Purpose This command displays the switch’s general LLDP configuration status. Syntax show lldp Description This command displays the switch’s general LLDP configuration status.
  • Page 412 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Example usage: To display management address information for port 1: DGS-3627:5# show lldp mgt_addr ipv4 192.168.254.10 Command: show lldp mgt_addr ipv4 192.168.254.10 Address 1 ------------------------------------------------------------------------------------------ Subtype : IPv4 Address : 192.168.254.10...
  • Page 413 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show lldp local_ports Purpose Used to display the per-port information currently available for populating outbound LLDP advertisements. Syntax show lldp local_ports {<portlist>} {mode [brief | normal | detailed]} Description This command displays the per-port information currently available for populating outbound LLDP advertisements.
  • Page 414 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show lldp remote_ports Purpose Used to display the information learned from the neighbor. Syntax show lldp remote_ports {<portlist>} {mode [brief | normal | detailed]} Description This command display the information learned from the neighbor parameters.
  • Page 415 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show lldp statistics Command: show lldp statistics Last Change Time : 1705 Number of Table Insert Number of Table Delete Number of Table Drop Number of Table Ageout : 0...
  • Page 416: D-Link Single Ip Management Commands

    6. The CaS can be configured through the CS to become a MS. After configuring one switch to operate as the CS of a SIM group, additional xStack DGS-3600 series switches may join the group by either an automatic method or by manually configuring the Switch to be a MS. The CS will then serve as the in band entry point for...
  • Page 417 CS, do not belong. The Upgrade to v1.6 To better improve SIM management, the xStack DGS-3600 Series switches have been upgraded to version 1.6 in this release. Many improvements have been made, including: The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction.
  • Page 418 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual enable sim Purpose Used to enable Single IP Management (SIM) on the Switch Syntax enable sim Description This command will enable SIM globally on the Switch. SIM features and functions will not function properly unless this function is enabled.
  • Page 419 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual show sim MAC Address - Displays the MAC Address of the Switch. Capabilities – Displays the type of switch, be it Layer 2 (L2) or Layer 3 (L3). Platform – Switch Description including name and model number.
  • Page 420 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show sim candidates Command: show sim candidates ID MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ----------------- ------------------------ ----- --------- ---------------- 00-55-55-00-55-00 DGS-3627 L3 Switch 2.40.B19...
  • Page 421 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Total Entries: 3 DGS-3627:5# reconfig Purpose Used to connect to a member switch, through the commander switch, using telnet. Syntax reconfig {member_id <value 1-32 | exit} Description This command is used to reconnect to a member switch using Telnet.
  • Page 422 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#config sim_group delete 1 Command: config sim_group delete 1 Please wait for ACK!!! SIM Config Success!!! Success. DGS-3627:5# config sim Purpose Used to configure role parameters for the SIM protocol on the Switch.
  • Page 423 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5# config sim hold_time 120 Command: config sim hold_time 120 Success. DGS-3627:5# To transfer the CS (commander) to be a CaS (candidate): DGS-3627:5# config sim candidate Command: config sim candidate Success.
  • Page 424 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual download sim_ms Restrictions Only administrator-level users can issue this command. Example usage: To download firmware: DGS-3627:5# download sim_ms firmware_from_tftp 10.53.13.94 c:/dgs3627.had all Command: download sim_ms firmware_from_tftp 10.53.13.94 c:/dgs3627.had all This device is updating firmware.
  • Page 425 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual upload sim_ms <mslist> - Enter a value, or values to specify which members of the SIM group will receive the switch configuration or log files. all – Add this parameter to specify all members of the SIM group will receive the switch configuration or log files.
  • Page 426: Command History List

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual OMMAND ISTORY The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters {<command>} config command_history <value 1-40>...
  • Page 427 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual To display the parameters for a specific command: DGS-3627:5#? config stp Command:? config stp Command: config stp Usage: {maxage <value 6-40> | maxhops <value1-20> | hellotime <value 1- 10> | forwarddelay <value 4-30> | txholdcount <value 1-10> | fbpdu [enable | disable] | lbd [enable | disable] | lbd_recover_timer [0 | <value 60-1000000>]}...
  • Page 428 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual DGS-3627:5#show command_history Command: show command_history ? show show vlan show command history DGS-3627:5#...
  • Page 429: Technical Specifications

    DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual ECHNICAL PECIFICATIONS General IEEE 802.3 10BASE-T Ethernet Protocols IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D Spanning Tree IEEE 802.1s Multiple Spanning Tree IEEE 802.1w Rapid Spanning Tree...
  • Page 430 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual 4 x 10/100/1000Mbps Combo Ports 3 available slots for optional 10GE modules DGS-3650: 48 x 10/100/1000 Mbps ports 4 x 1000Mbps Combo SFP Ports 2 available slots for optional 10GE modules...
  • Page 431 DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual Performance Store-and-forward Transmission Method Packet Buffer 2 MB per device Packet 14,881 pps (10M port) Filtering/Forwarding 148.810 pps (100M port) Rate 1,488,100 pps (1Gbps port) MAC Address Automatic update. Supports 16K MAC address.

Table of Contents