Zyxel ES-3124-4F [60/250] In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30

This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3

Document conventions 4

Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4

Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4

Document conventions 6

Ethernet switch cli reference guide 6

Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device 6

Icons used in figures 6

Contents overview 7

Introduction 7

Reference a g 5 7

Reference h m 1 7

Appendices and index of commands 23 8

Reference n s 35 8

Reference t z 87 8

Introduction 9

Accessing the cli 11

Console port 11

Hapter 11

How to access and use the cli 11

Telnet 11

Logging in 12

The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12

Using shortcuts and getting help 12

Logging out 13

Saving your configuration 13

You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13

Hapter 15

Privilege level and command mode 15

Privilege levels 15

Privilege levels for commands 15

Privilege levels for login accounts 15

Privilege levels for sessions 16

Chapter 2 privilege level and command mode 17

Command modes 17

Command modes for privilege levels 0 12 17

Command modes for privilege levels 13 14 17

Consists of 1 32 alphanumeric characters for example the following command sets the password for privilege level 13 to pswd13 see chapter 68 on page 215 for more information about this command 17

Disable command 17

Ethernet switch cli reference guide 17

If the session s privilege level is 0 12 the user and all of the allowed commands are in user mode users do not have to change modes to run any allowed commands 17

If the session s privilege level is 13 14 the allowed commands are in one of several modes 17

Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17

The cli is divided into several modes if a user has enough privilege to run a particular command the user has to run the command in the correct mode the modes that are available depend on the session s privilege level 17

This command reduces the session s privilege level to 0 it also changes the session to user mode this command is available in enable mode 17

Chapter 2 privilege level and command mode 18

Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 18

Ethernet switch cli reference guide 18

Listing available commands 18

Log into the cli this takes you to the enable mode 2 type help and press enter a list comes up which shows all the commands available in enable mode the example shown next has been edited for brevity s sake 18

Table 8 changing between command modes for privilege levels 13 14 18

Use the help command to view the executable commands on the switch you must have the highest privilege level in order to view all the commands follow these steps to create a list of supported commands 18

Changing the administrator password 21

Changing the enable password 21

Hapter 21

Initial setup 21

Afterwards you have to use the new ip address to access the switch 22

Changing the management ip address 22

Changing the out of band management ip address 22

Prohibiting concurrent logins 22

Chapter 3 initial setup 23

Ethernet switch cli reference guide 23

Looking at basic system information 23

Looking at the operating configuration 23

See chapter 68 on page 215 for more information about these attributes 23

This is illustrated in the following example 23

Use this command to look at general system information about the switch 23

Use this command to look at the current operating configuration 23

Reference a g 25

Aaa commands 27

Command summary 27

Hapter 27

Chapter 4 aaa commands 28

Ethernet switch cli reference guide 28

Table 10 command summary aaa accounting continued 28

Arp commands 29

Command examples 29

Command summary 29

Hapter 29

Arp inspection commands 31

Command summary 31

Hapter 31

Chapter 6 arp inspection commands 32

Ethernet switch cli reference guide 32

Table 15 command summary arp inspection log continued 32

Table 16 command summary interface arp inspection 32

Table 17 command summary arp inspection vlan 32

Chapter 6 arp inspection commands 33

Command examples 33

Ethernet switch cli reference guide 33

Table 18 show arp inspection filter 33

The following table describes the labels in this screen 33

This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 33

This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 33

Chapter 6 arp inspection commands 34

Ethernet switch cli reference guide 34

Table 19 show arp inspection log 34

Table 20 show arp inspection interface port channel 34

The following table describes the labels in this screen 34

This example displays whether ports are trusted or untrusted ports for arp inspection 34

Chapter 6 arp inspection commands 35

Ethernet switch cli reference guide 35

Table 20 show arp inspection interface port channel continued 35

Bandwidth commands 37

Command summary 37

Hapter 37

Chapter 7 bandwidth commands 38

Command examples ingress 38

Ethernet switch cli reference guide 38

Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 38

Table 22 command summary bandwidth control bandwidth limit 38

The following section lists the commands for this feature 38

This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 38

Chapter 7 bandwidth commands 39

Command examples cir pir 39

Ethernet switch cli reference guide 39

This example deactivates the outgoing bandwidth limit on port 1 39

This example displays the bandwidth limits configured on port 1 39

This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 39

Broadcast storm commands 41

Command summary 41

Hapter 41

128 broadcast packets per second 256 multicast packets per second 42

Chapter 8 broadcast storm commands 42

Command example bmstorm limit 42

Command example broadcast limit multicast limit dlf limit 42

Ethernet switch cli reference guide 42

Table 24 command summary storm control bmstorm limit and bstorm control continued 42

This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 42

This example enables broadcast storm control on the switch and configures port 1 to accept up to 42

64 dlf packets per second 43

Chapter 8 broadcast storm commands 43

Ethernet switch cli reference guide 43

Classifier commands 45

Command summary 45

Hapter 45

Chapter 9 classifier commands 46

Ethernet switch cli reference guide 46

In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 46

Some of the most common tcp and udp port numbers are 46

Table 26 common ethernet types and protocol number 46

Table 27 common ip protocol types and protocol numbers 46

Table 28 common tcp and udp port numbers 46

The following table shows some other common ethernet types and the corresponding protocol number 46

Command examples 47

Cluster commands 49

Command summary 49

Hapter 49

Chapter 10 cluster commands 50

Command examples 50

Ethernet switch cli reference guide 50

Table 30 show cluster member 50

The following table describes the labels in this screen 50

This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 50

Chapter 10 cluster commands 51

Ethernet switch cli reference guide 51

Table 31 show cluster 51

The following table describes the labels in this screen 51

This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager 51

This example looks at the current status of the switch s cluster 51

Command summary 53

Date and time commands 53

Hapter 53

Chapter 11 date and time commands 54

Command examples 54

Ethernet switch cli reference guide 54

Table 33 time command summary continued 54

Table 34 timesync command summary 54

This example sets the current date current time time zone and daylight savings time 54

Chapter 11 date and time commands 55

Ethernet switch cli reference guide 55

Table 35 show timesync 55

The following table describes the labels in this screen 55

This example looks at the current time server settings 55

Command summary 57

Dhcp commands 57

Hapter 57

Chapter 12 dhcp commands 58

Ethernet switch cli reference guide 58

Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 58

Table 37 dhcp relay command summary 58

Table 38 dhcp relay broadcast command summary 58

Table 39 dhcp relay command summary 58

Chapter 12 dhcp commands 59

Command examples 59

Ethernet switch cli reference guide 59

Figure 1 example global dhcp relay 59

In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 59

Table 40 dhcp server command summary 59

Vlan1 vlan2 59

6 0 00 60

Chapter 12 dhcp commands 60

Ethernet switch cli reference guide 60

Figure 2 example dhcp relay for two vlans 60

In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 60

In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 60

This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 60

This example shows how to configure these dhcp servers the vlans are already configured 60

This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 3 on page 61 it also provides the dhcp clients with the ip address of the default gateway and the dns server 61

Command summary 63

Dhcp snooping dhcp vlan commands 63

Hapter 63

Chapter 13 dhcp snooping dhcp vlan commands 64

Command examples 64

Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 64

Ethernet switch cli reference guide 64

Table 41 dhcp snooping command summary continued 64

Table 42 dhcp vlan command summary 64

The following table describes the dhcp vlan commands 64

This example 64

Chapter 13 dhcp snooping dhcp vlan commands 65

Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 65

Ethernet switch cli reference guide 65

Command summary 67

Diffserv commands 67

Hapter 67

Command summary 69

Dvmrp commands 69

Dvmrp overview 69

Hapter 69

Chapter 15 dvmrp commands 70

Command examples 70

Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 70

Ethernet switch cli reference guide 70

Figure 4 dvmrp network example 70

In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 70

Table 44 command summary dvmrp continued 70

Command summary 71

Ethernet oam commands 71

Hapter 71

Ieee 802 ah link layer ethernet oam implementation 71

Chapter 16 ethernet oam commands 72

Command examples 72

Ethernet switch cli reference guide 72

Table 45 ethernet oam command summary continued 72

This example enables ethernet oam on port 7 and sets the mode to active 72

This example performs ethernet oam discovery from port 7 72

Chapter 16 ethernet oam commands 73

Ethernet switch cli reference guide 73

Table 46 show ethernet oam discovery 73

The following table describes the labels in this screen 73

Chapter 16 ethernet oam commands 74

Ethernet switch cli reference guide 74

Table 46 show ethernet oam discovery continued 74

Table 47 show ethernet oam statistics 74

The following table describes the labels in this screen 74

This example looks at the number of oam packets transferred on port 1 74

Chapter 16 ethernet oam commands 75

Ethernet switch cli reference guide 75

Table 47 show ethernet oam statistics continued 75

Table 48 show ethernet oam summary 75

The following table describes the labels in this screen 75

This example looks at the configuration of ports on which oam is enabled 75

Chapter 16 ethernet oam commands 76

Ethernet switch cli reference guide 76

Table 48 show ethernet oam summary continued 76

Command summary 77

Garp commands 77

Garp overview 77

Hapter 77

Chapter 17 garp commands 78

Command examples 78

Ethernet switch cli reference guide 78

In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 78

Command examples 79

Command summary 79

Gvrp commands 79

Hapter 79

Reference h m 81

Command summary 83

Hapter 83

Https server commands 83

Chapter 19 https server commands 84

Command examples 84

Ethernet switch cli reference guide 84

Table 52 show https 84

The following table describes the labels in this screen 84

This example shows the current https settings statistics and sessions 84

Chapter 19 https server commands 85

Ethernet switch cli reference guide 85

Table 52 show https continued 85

Table 53 show https session 85

The following table describes the labels in this screen 85

This example shows the current https sessions 85

Chapter 19 https server commands 86

Ethernet switch cli reference guide 86

Table 53 show https session continued 86

Command examples 87

Command summary 87

Hapter 87

Ieee 802 x authentication commands 87

Command summary 89

Hapter 89

Igmp and multicasting commands 89

Igmp overview 89

Chapter 21 igmp and multicasting commands 90

Command examples 90

Ethernet switch cli reference guide 90

Sets the switch to flood unknown multicast frames sets the switch to non querier mode configures the ip interface 172 6 with subnet mask 255 55 55 to route igmp version 3 packets 90

Table 55 igmp command summary continued 90

Table 56 ipmc command summary 90

This example configures igmp on the switch with the following settings 90

Command summary 91

Hapter 91

Igmp snooping commands 91

Chapter 22 igmp snooping commands 92

Ethernet switch cli reference guide 92

Table 58 igmp snooping command summary continued 92

Table 59 igmp snooping vlan command summary 92

Table 60 interface igmp command summary 92

Chapter 22 igmp snooping commands 93

Command examples 93

Ethernet switch cli reference guide 93

Host timeout 93

Leave timeou 93

Table 60 interface igmp command summary continued 93

This example enables igmp snooping on the switch sets the 93

This example limits the number of multicast groups on port 1 to 5 93

This example shows the current multicast groups on the switch 93

Values to 30 seconds and sets the switch to drop packets from unknown multicast groups 93

Chapter 22 igmp snooping commands 94

Ethernet switch cli reference guide 94

Table 61 show multicast 94

The following table describes the labels in this screen 94

This example shows the current multicast vlan on the switch 94

Command summary 95

Hapter 95

Igmp filtering commands 95

Chapter 23 igmp filtering commands 96

Command examples 96

Ethernet switch cli reference guide 96

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 96

Command summary 97

Hapter 97

Interface commands 97

Chapter 24 interface commands 98

Command examples 98

Ethernet switch cli reference guide 98

Table 63 interface command summary continued 98

Table 64 show interfaces 98

The following table describes the labels in this screen 98

This example looks at the current status of port 1 98

Chapter 24 interface commands 99

Ethernet switch cli reference guide 99

Table 64 show interfaces continued 99

Chapter 24 interface commands 100

Ethernet switch cli reference guide 100

Sets the default port vid to 200 2 sets these ports to accept only tagged frames 100

Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 100

Table 64 show interfaces continued 100

This example configures ports 1 3 4 and 5 in the following ways 100

This example configures ports 1 5 in the following ways 100

Command examples 101

Command summary 101

Hapter 101

Interface route domain mode 101

Command summary 103

Hapter 103

Ip commands 103

Chapter 26 ip commands 104

Command examples 104

Ethernet switch cli reference guide 104

Table 67 tcp and udp command summary continued 104

Table 68 show ip tcp 104

The following table describes the labels in this screen 104

This example shows the tcp statistics and listener ports see rfc 1213 for more information 104

Chapter 26 ip commands 105

Ethernet switch cli reference guide 105

Table 68 show ip tcp continued 105

Chapter 26 ip commands 106

Ethernet switch cli reference guide 106

Table 68 show ip tcp continued 106

Table 69 show ip udp 106

The following table describes the labels in this screen 106

This example shows the udp statistics and listener ports see rfc 1213 for more information 106

Command examples 107

Command summary 107

Hapter 107

Ip source binding commands 107

Chapter 27 ip source binding commands 108

Ethernet switch cli reference guide 108

Table 71 show ip source binding continued 108

Command examples 109

Command summary 109

Hapter 109

Logging commands 109

Command examples 111

Command summary 111

Hapter 111

Login account commands 111

Command summary 113

Hapter 113

Loopguard commands 113

Chapter 30 loopguard commands 114

Command examples 114

Ethernet switch cli reference guide 114

Table 75 show loopguard 114

The following table describes the labels in this screen 114

This example enables loopguard on ports 1 3 114

Command summary 115

Hapter 115

Mac address commands 115

Chapter 31 mac address commands 116

Command examples 116

Ethernet switch cli reference guide 116

Table 77 show mac address table 116

The following table describes the labels in this screen 116

This example shows the current mac address table 116

Command summary 117

Hapter 117

Mac authentication commands 117

Mac authentication overview 117

Chapter 32 mac authentication commands 118

Command examples 118

Ethernet switch cli reference guide 118

Table 78 mac authentication command summary continued 118

This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 118

Command summary 119

Hapter 119

Mac filter commands 119

Command example 120

Command example filter source 120

Command summary 121

Hapter 121

Mac forward commands 121

Command summary 123

Hapter 123

Mirror commands 123

Chapter 35 mirror commands 124

Command examples 124

Ethernet switch cli reference guide 124

Table 83 mirror filter command summary 124

This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 124

Command summary 125

Hapter 125

Mrstp commands 125

Mrstp overview 125

Chapter 36 mrstp commands 126

Command examples 126

Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 126

Ethernet switch cli reference guide 126

Table 84 command summary mrstp 126

This example configures mrstp in the following way 126

Command summary 127

Hapter 127

Mstp commands 127

Chapter 37 mstp commands 128

Command examples 128

Ethernet switch cli reference guide 128

Table 86 mstp instance command summary continued 128

Table 87 show mstp 128

The following table describes the labels in this screen 128

This example shows the current mstp configuration 128

Chapter 37 mstp commands 129

Ethernet switch cli reference guide 129

Table 87 show mstp continued 129

Table 88 show mstp instance 129

The following table describes the labels in this screen 129

This example shows the current cist configuration mstp instance 0 129

Chapter 37 mstp commands 130

Ethernet switch cli reference guide 130

Table 88 show mstp instance continued 130

This example adds the switch to the mst region mstregionnorth mstregionnorth is on revision number 1 in mstregionnorth vlan 2 is in mst instance 1 and vlan 3 is in mst instance 2 130

Command examples 131

Command summary 131

Hapter 131

Multiple login commands 131

Command summary 133

Hapter 133

Mvr commands 133

Command examples 134

Reference n s 135

Command summary 137

Hapter 137

Ospf commands 137

Ospf overview 137

Chapter 40 ospf commands 138

Ethernet switch cli reference guide 138

Table 92 ospf command summary continued 138

Chapter 40 ospf commands 139

Command examples 139

Ethernet switch cli reference guide 139

Figure 5 ospf network example 139

In this example the switch a is an area border router abr in an ospf network 139

Table 92 ospf command summary continued 139

Chapter 40 ospf commands 140

Config if ip ospf authentication key abcd1234 140

Config if ip ospf priority 1 140

Ethernet switch cli reference guide 140

Interface route domain 172 6 24 140

Is also set to 1 as this router should participate in router elections 140

This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 140

This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 140

Command examples 141

Command summary 141

Hapter 141

Password commands 141

Command examples 143

Command summary 143

Hapter 143

Poe commands 143

Chapter 42 poe commands 144

Ethernet switch cli reference guide 144

Table 95 show pwr 144

The following table describes the labels in this screen 144

This example shows the current status and configuration of power over ethernet 144

Chapter 42 poe commands 145

Ethernet switch cli reference guide 145

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 145

Table 95 show pwr continued 145

Command summary 147

Hapter 147

Policy commands 147

Chapter 43 policy commands 148

Ethernet switch cli reference guide 148

Table 96 policy command summary 148

Chapter 43 policy commands 149

Command examples 149

Ethernet switch cli reference guide 149

This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 9 on page 45 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 149

Command summary 151

Hapter 151

Port security commands 151

Chapter 44 port security commands 152

Command examples 152

Ethernet switch cli reference guide 152

This example enables port security on port 1 and limits the number of learned mac addresses to 5 152

Command examples 153

Command summary 153

Hapter 153

Port based vlan commands 153

Command summary 155

Hapter 155

Protocol based vlan commands 155

Protocol based vlan overview 155

Chapter 46 protocol based vlan commands 156

Command examples 156

Ethernet switch cli reference guide 156

Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 156

Table 99 protocol based vlan command summary continued 156

This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 156

Hapter 157

Queuing commands 157

Queuing overview 157

Chapter 47 queuing commands 158

Command summary port by port configuration 158

Ethernet switch cli reference guide 158

For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 158

Note some models only support 4 queues 158

Table 100 queuing command summary 158

The following section lists the commands for this feature 158

Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 158

Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 158

Chapter 47 queuing commands 159

Command examples port by port configuration 159

Command summary system wide configuration 159

Ethernet switch cli reference guide 159

Note some models only support 4 queues 159

Table 100 queuing command summary continued 159

Table 101 queueing command summary 159

The following section lists the commands for this feature 159

This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 159

Chapter 47 queuing commands 160

Command examples system wide 160

Ethernet switch cli reference guide 160

Table 101 queueing command summary continued 160

This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 160

This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 160

Command summary 161

Hapter 161

Radius commands 161

Chapter 48 radius commands 162

Command examples 162

Ethernet switch cli reference guide 162

Table 103 radius accounting command summary continued 162

This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 162

Command summary 163

Hapter 163

Remote management commands 163

Chapter 49 remote management commands 164

Command examples 164

Ethernet switch cli reference guide 164

Table 106 service control command summary continued 164

This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 164

This example disables all snmp and icmp access to the 164

Command examples 165

Command summary 165

Hapter 165

Rip commands 165

Rip overview 165

Command summary 167

Hapter 167

Running configuration commands 167

Switch configuration file 167

Chapter 51 running configuration commands 168

Command examples 168

Ethernet switch cli reference guide 168

Table 109 running config command summary 168

The following section lists the commands for this feature 168

This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 168

This example resets the switch to the factory default settings 168

Command summary 169

Hapter 169

Snmp server commands 169

Chapter 52 snmp server commands 170

Ethernet switch cli reference guide 170

Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 170

Table 111 snmp server command summary continued 170

Table 112 snmp server trap destination enable traps command summary 170

Chapter 52 snmp server commands 171

Ethernet switch cli reference guide 171

Table 112 snmp server trap destination enable traps command summary continued 171

Command summary 173

Hapter 173

Stp and rstp commands 173

Chapter 53 stp and rstp commands 174

Command examples 174

Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 174

Ethernet switch cli reference guide 174

Table 113 spanning tree command summary continued 174

This example configures stp in the following ways 174

This example shows the current stp settings 174

Chapter 53 stp and rstp commands 175

Ethernet switch cli reference guide 175

Table 114 show spanning tree config 175

The following table describes the labels in this screen 175

Command examples 177

Command summary 177

Hapter 177

Ssh commands 177

Chapter 54 ssh commands 178

Ethernet switch cli reference guide 178

Table 116 show ssh 178

The following table describes the labels in this screen 178

This example shows the general ssh settings 178

Command summary 179

Hapter 179

Static route commands 179

Chapter 55 static route commands 180

Command examples 180

Ethernet switch cli reference guide 180

For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 180

Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 180

Table 118 show ip route 180

The following table describes the labels in this screen 180

This example shows the current routing table 180

You can create this static route if it is inactive however 180

Chapter 55 static route commands 181

Ethernet switch cli reference guide 181

You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 181

Command summary 183

Hapter 183

Subnet based vlan commands 183

Subnet based vlan overview 183

Chapter 56 subnet based vlan commands 184

Command examples 184

Ethernet switch cli reference guide 184

Table 119 subnet based vlan command summary continued 184

This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 184

Command summary 185

Hapter 185

Syslog commands 185

Reference t z 187

Command summary 189

Hapter 189

Tacacs commands 189

Command summary 191

Hapter 191

Tftp commands 191

Command summary 193

Hapter 193

Trunk commands 193

Chapter 60 trunk commands 194

Command examples 194

Ethernet switch cli reference guide 194

Table 129 show trunk 194

The following table describes the labels in this screen 194

This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 194

This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 194

This example looks at the current trunks 194

Chapter 60 trunk commands 195

Ethernet switch cli reference guide 195

Table 130 show lacp 195

The following table describes the labels in this screen 195

This example shows the current lacp settings 195

Command summary 197

Hapter 197

Trtcm commands 197

Trtcm overview 197

Chapter 61 trtcm commands 198

Command examples 198

Ethernet switch cli reference guide 198

Sets the switch to inspect the dscp value of the packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 198

Table 131 trtcm command summary continued 198

This example activates trtcm on the switch with the following settings 198

Hapter 199

Vlan commands 199

Vlan configuration overview 199

Vlan overview 199

Command summary 200

See chapter 24 on page 97 for interface port channel commands 200

Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command 200

The following section lists the commands for the ingress checking feature 200

The following section lists the commands for this feature 200

Vlan ingress checking implementation differs across switch models 200

Chapter 62 vlan commands 201

Command examples 201

Ethernet switch cli reference guide 201

Other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 201

Table 133 vlan1q ingress check command summary 201

Table 134 ingress check command summary 201

This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 201

This example deletes entry 2 in the static vlan table 201

This example shows the vlan table 201

Chapter 62 vlan commands 202

Ethernet switch cli reference guide 202

Table 135 show vlan 202

The following table describes the labels in this screen 202

This example enables ingress checking on ports 1 5 202

Command summary 203

Hapter 203

Ip interfaces overview 203

Vlan ip commands 203

Chapter 63 vlan ip commands 204

Command examples 204

Ethernet switch cli reference guide 204

See section 3 on page 22 204

Table 136 vlan ip address command summary continued 204

Command summary 205

Hapter 205

Vlan port isolation commands 205

Command examples 207

Command summary 207

Hapter 207

Vlan stacking commands 207

A 37 24 208

B 48 24 208

Chapter 65 vlan stacking commands 208

Customer a customer a 208

Customer b customer b 208

Customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network 208

Ethernet switch cli reference guide 208

Figure 6 example vlan stacking 208

This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 208

Vlan 24 vlan 24 208

Command summary 209

Hapter 209

Vlan trunking commands 209

Command summary 211

Hapter 211

Vrrp commands 211

Vrrp overview 211

Chapter 67 vrrp commands 212

Command examples 212

Ethernet 212

Ethernet switch cli reference guide 212

Figure 7 example vrrp 212

Table 140 vrrp command summary continued 212

The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 212

Chapter 67 vrrp commands 213

Ethernet switch cli reference guide 213

This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 7 on page 212 213

Chapter 67 vrrp commands 214

Ethernet switch cli reference guide 214

This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 7 on page 212 214

Additional commands 215

Command summary 215

Hapter 215

Chapter 68 additional commands 216

Ethernet switch cli reference guide 216

Table 142 command summary additional enable mode continued 216

Table 143 command summary additional configure mode 216

Chapter 68 additional commands 217

Command examples 217

Ethernet switch cli reference guide 217

Table 144 ping 217

The following table describes the labels in this screen 217

This example checks the cable pairs on port 7 217

This example sends ping requests to an ethernet device with ip address 172 6 7 54 217

Chapter 68 additional commands 218

Ethernet switch cli reference guide 218

Table 145 show alarm status 218

Table 146 show cpu utilization 218

The following table describes the labels in this screen 218

This example shows the current and recent cpu utilization 218

This example shows the current status of the various alarms in the switch 218

Chapter 68 additional commands 219

Ethernet switch cli reference guide 219

Table 147 show hardware monitor 219

The following table describes the labels in this screen 219

This example looks at the current sensor readings from various places in the hardware 219

Chapter 68 additional commands 220

Ethernet switch cli reference guide 220

Table 147 show hardware monitor continued 220

Table 148 show multicast vlan 220

Table 149 show poe status 220

The following table describes the labels in this screen 220

This example displays multicast vlan configuration on the 220

This example shows the current status of power over ethernet 220

Chapter 68 additional commands 221

Ethernet switch cli reference guide 221

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 221

Table 149 show poe status continued 221

Table 150 show system information 221

The following table describes the labels in this screen 221

This example looks at general system information about the switch 221

Chapter 68 additional commands 222

Ethernet switch cli reference guide 222

This example displays route information to an ethernet device with ip address 222

This example runs an internal loopback test on ports 3 6 222

Appendices and 223

Appendices and index of commands 223

Index of commands 223

Default values 225

Ppendix 225

Certifications 227

Copyright 227

Legal information 227

Ppendix 227

Zyxel limited warranty 228

Customer support 231

Ppendix 231

Index of commands 237

Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 237

Ethernet switch cli reference guide 238

Index of commands 238

Ethernet switch cli reference guide 239

Index of commands 239

Ethernet switch cli reference guide 240

Index of commands 240

Ethernet switch cli reference guide 241

Index of commands 241

Ethernet switch cli reference guide 242

Index of commands 242

Ethernet switch cli reference guide 243

Index of commands 243

Ethernet switch cli reference guide 244

Index of commands 244

Ethernet switch cli reference guide 245

Index of commands 245

Ethernet switch cli reference guide 246

Index of commands 246

Ethernet switch cli reference guide 247

Index of commands 247

Ethernet switch cli reference guide 248

Index of commands 248

Ethernet switch cli reference guide 249

Index of commands 249

Ethernet switch cli reference guide 250

Index of commands 250

Zyxel ES-3124-4F [60/250] In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30

Содержание

Похожие устройства