Home
Главная
Zyxel
Коммутаторы
ES-3124PWR
Справочник командного интерфейса Страница: 152

Zyxel ES-3124PWR [152/250] This example enables port security on port 1 and limits the number of learned mac addresses to 5

Chapter 44 Port Security Commands

Ethernet Switch CLI Reference Guide

152

44.2 Command Examples

This example enables port security on port 1 and limits the number of learned MAC addresses

to 5.

sysname# configure

sysname(config)# port-security

sysname(config)# port-security 1

sysname(config)# no port-security 1 learn inactive

sysname(config)# port-security 1 address-limit 5

sysname(config)# exit

sysname# show port-security 1

Port Security Active : YES

Port Active Address Learning Limited Number of Learned MAC Address

01 Y Y 5

Содержание

Cli reference guide 1
Default login 1
Ethernet switch 1
Www zyxel com 1
About this cli reference guide 3
This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
Document conventions 4
Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4
Document conventions 6
Ethernet switch cli reference guide 6
Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device 6
Icons used in figures 6
Contents overview 7
Introduction 7
Reference a g 5 7
Reference h m 1 7
Appendices and index of commands 23 8
Reference n s 35 8
Reference t z 87 8
Introduction 9
Accessing the cli 11
Console port 11
Hapter 11
How to access and use the cli 11
Telnet 11
Logging in 12
The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12
Using shortcuts and getting help 12
Logging out 13
Saving your configuration 13
You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13
Hapter 15
Privilege level and command mode 15
Privilege levels 15
Privilege levels for commands 15
Privilege levels for login accounts 15
Privilege levels for sessions 16
Chapter 2 privilege level and command mode 17
Command modes 17
Command modes for privilege levels 0 12 17
Command modes for privilege levels 13 14 17
Consists of 1 32 alphanumeric characters for example the following command sets the password for privilege level 13 to pswd13 see chapter 68 on page 215 for more information about this command 17
Disable command 17
Ethernet switch cli reference guide 17
If the session s privilege level is 0 12 the user and all of the allowed commands are in user mode users do not have to change modes to run any allowed commands 17
If the session s privilege level is 13 14 the allowed commands are in one of several modes 17
Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17
The cli is divided into several modes if a user has enough privilege to run a particular command the user has to run the command in the correct mode the modes that are available depend on the session s privilege level 17
This command reduces the session s privilege level to 0 it also changes the session to user mode this command is available in enable mode 17
Chapter 2 privilege level and command mode 18
Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 18
Ethernet switch cli reference guide 18
Listing available commands 18
Log into the cli this takes you to the enable mode 2 type help and press enter a list comes up which shows all the commands available in enable mode the example shown next has been edited for brevity s sake 18
Table 8 changing between command modes for privilege levels 13 14 18
Use the help command to view the executable commands on the switch you must have the highest privilege level in order to view all the commands follow these steps to create a list of supported commands 18
Changing the administrator password 21
Changing the enable password 21
Hapter 21
Initial setup 21
Afterwards you have to use the new ip address to access the switch 22
Changing the management ip address 22
Changing the out of band management ip address 22
Prohibiting concurrent logins 22
Chapter 3 initial setup 23
Ethernet switch cli reference guide 23
Looking at basic system information 23
Looking at the operating configuration 23
See chapter 68 on page 215 for more information about these attributes 23
This is illustrated in the following example 23
Use this command to look at general system information about the switch 23
Use this command to look at the current operating configuration 23
Reference a g 25
Aaa commands 27
Command summary 27
Hapter 27
Chapter 4 aaa commands 28
Ethernet switch cli reference guide 28
Table 10 command summary aaa accounting continued 28
Arp commands 29
Command examples 29
Command summary 29
Hapter 29
Arp inspection commands 31
Command summary 31
Hapter 31
Chapter 6 arp inspection commands 32
Ethernet switch cli reference guide 32
Table 15 command summary arp inspection log continued 32
Table 16 command summary interface arp inspection 32
Table 17 command summary arp inspection vlan 32
Chapter 6 arp inspection commands 33
Command examples 33
Ethernet switch cli reference guide 33
Table 18 show arp inspection filter 33
The following table describes the labels in this screen 33
This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 33
This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 33
Chapter 6 arp inspection commands 34
Ethernet switch cli reference guide 34
Table 19 show arp inspection log 34
Table 20 show arp inspection interface port channel 34
The following table describes the labels in this screen 34
This example displays whether ports are trusted or untrusted ports for arp inspection 34
Chapter 6 arp inspection commands 35
Ethernet switch cli reference guide 35
Table 20 show arp inspection interface port channel continued 35
Bandwidth commands 37
Command summary 37
Hapter 37
Chapter 7 bandwidth commands 38
Command examples ingress 38
Ethernet switch cli reference guide 38
Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 38
Table 22 command summary bandwidth control bandwidth limit 38
The following section lists the commands for this feature 38
This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 38
Chapter 7 bandwidth commands 39
Command examples cir pir 39
Ethernet switch cli reference guide 39
This example deactivates the outgoing bandwidth limit on port 1 39
This example displays the bandwidth limits configured on port 1 39
This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 39
Broadcast storm commands 41
Command summary 41
Hapter 41
128 broadcast packets per second 256 multicast packets per second 42
Chapter 8 broadcast storm commands 42
Command example bmstorm limit 42
Command example broadcast limit multicast limit dlf limit 42
Ethernet switch cli reference guide 42
Table 24 command summary storm control bmstorm limit and bstorm control continued 42
This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 42
This example enables broadcast storm control on the switch and configures port 1 to accept up to 42
64 dlf packets per second 43
Chapter 8 broadcast storm commands 43
Ethernet switch cli reference guide 43
Classifier commands 45
Command summary 45
Hapter 45
Chapter 9 classifier commands 46
Ethernet switch cli reference guide 46
In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 46
Some of the most common tcp and udp port numbers are 46
Table 26 common ethernet types and protocol number 46
Table 27 common ip protocol types and protocol numbers 46
Table 28 common tcp and udp port numbers 46
The following table shows some other common ethernet types and the corresponding protocol number 46
Command examples 47
Cluster commands 49
Command summary 49
Hapter 49
Chapter 10 cluster commands 50
Command examples 50
Ethernet switch cli reference guide 50
Table 30 show cluster member 50
The following table describes the labels in this screen 50
This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 50
Chapter 10 cluster commands 51
Ethernet switch cli reference guide 51
Table 31 show cluster 51
The following table describes the labels in this screen 51
This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager 51
This example looks at the current status of the switch s cluster 51
Command summary 53
Date and time commands 53
Hapter 53
Chapter 11 date and time commands 54
Command examples 54
Ethernet switch cli reference guide 54
Table 33 time command summary continued 54
Table 34 timesync command summary 54
This example sets the current date current time time zone and daylight savings time 54
Chapter 11 date and time commands 55
Ethernet switch cli reference guide 55
Table 35 show timesync 55
The following table describes the labels in this screen 55
This example looks at the current time server settings 55
Command summary 57
Dhcp commands 57
Hapter 57
Chapter 12 dhcp commands 58
Ethernet switch cli reference guide 58
Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 58
Table 37 dhcp relay command summary 58
Table 38 dhcp relay broadcast command summary 58
Table 39 dhcp relay command summary 58
Chapter 12 dhcp commands 59
Command examples 59
Ethernet switch cli reference guide 59
Figure 1 example global dhcp relay 59
In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 59
Table 40 dhcp server command summary 59
Vlan1 vlan2 59
6 0 00 60
Chapter 12 dhcp commands 60
Ethernet switch cli reference guide 60
Figure 2 example dhcp relay for two vlans 60
In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 60
In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 60
This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 60
This example shows how to configure these dhcp servers the vlans are already configured 60
This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 3 on page 61 it also provides the dhcp clients with the ip address of the default gateway and the dns server 61
Command summary 63
Dhcp snooping dhcp vlan commands 63
Hapter 63
Chapter 13 dhcp snooping dhcp vlan commands 64
Command examples 64
Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 64
Ethernet switch cli reference guide 64
Table 41 dhcp snooping command summary continued 64
Table 42 dhcp vlan command summary 64
The following table describes the dhcp vlan commands 64
This example 64
Chapter 13 dhcp snooping dhcp vlan commands 65
Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 65
Ethernet switch cli reference guide 65
Command summary 67
Diffserv commands 67
Hapter 67
Command summary 69
Dvmrp commands 69
Dvmrp overview 69
Hapter 69
Chapter 15 dvmrp commands 70
Command examples 70
Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 70
Ethernet switch cli reference guide 70
Figure 4 dvmrp network example 70
In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 70
Table 44 command summary dvmrp continued 70
Command summary 71
Ethernet oam commands 71
Hapter 71
Ieee 802 ah link layer ethernet oam implementation 71
Chapter 16 ethernet oam commands 72
Command examples 72
Ethernet switch cli reference guide 72
Table 45 ethernet oam command summary continued 72
This example enables ethernet oam on port 7 and sets the mode to active 72
This example performs ethernet oam discovery from port 7 72
Chapter 16 ethernet oam commands 73
Ethernet switch cli reference guide 73
Table 46 show ethernet oam discovery 73
The following table describes the labels in this screen 73
Chapter 16 ethernet oam commands 74
Ethernet switch cli reference guide 74
Table 46 show ethernet oam discovery continued 74
Table 47 show ethernet oam statistics 74
The following table describes the labels in this screen 74
This example looks at the number of oam packets transferred on port 1 74
Chapter 16 ethernet oam commands 75
Ethernet switch cli reference guide 75
Table 47 show ethernet oam statistics continued 75
Table 48 show ethernet oam summary 75
The following table describes the labels in this screen 75
This example looks at the configuration of ports on which oam is enabled 75
Chapter 16 ethernet oam commands 76
Ethernet switch cli reference guide 76
Table 48 show ethernet oam summary continued 76
Command summary 77
Garp commands 77
Garp overview 77
Hapter 77
Chapter 17 garp commands 78
Command examples 78
Ethernet switch cli reference guide 78
In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 78
Command examples 79
Command summary 79
Gvrp commands 79
Hapter 79
Reference h m 81
Command summary 83
Hapter 83
Https server commands 83
Chapter 19 https server commands 84
Command examples 84
Ethernet switch cli reference guide 84
Table 52 show https 84
The following table describes the labels in this screen 84
This example shows the current https settings statistics and sessions 84
Chapter 19 https server commands 85
Ethernet switch cli reference guide 85
Table 52 show https continued 85
Table 53 show https session 85
The following table describes the labels in this screen 85
This example shows the current https sessions 85
Chapter 19 https server commands 86
Ethernet switch cli reference guide 86
Table 53 show https session continued 86
Command examples 87
Command summary 87
Hapter 87
Ieee 802 x authentication commands 87
Command summary 89
Hapter 89
Igmp and multicasting commands 89
Igmp overview 89
Chapter 21 igmp and multicasting commands 90
Command examples 90
Ethernet switch cli reference guide 90
Sets the switch to flood unknown multicast frames sets the switch to non querier mode configures the ip interface 172 6 with subnet mask 255 55 55 to route igmp version 3 packets 90
Table 55 igmp command summary continued 90
Table 56 ipmc command summary 90
This example configures igmp on the switch with the following settings 90
Command summary 91
Hapter 91
Igmp snooping commands 91
Chapter 22 igmp snooping commands 92
Ethernet switch cli reference guide 92
Table 58 igmp snooping command summary continued 92
Table 59 igmp snooping vlan command summary 92
Table 60 interface igmp command summary 92
Chapter 22 igmp snooping commands 93
Command examples 93
Ethernet switch cli reference guide 93
Host timeout 93
Leave timeou 93
Table 60 interface igmp command summary continued 93
This example enables igmp snooping on the switch sets the 93
This example limits the number of multicast groups on port 1 to 5 93
This example shows the current multicast groups on the switch 93
Values to 30 seconds and sets the switch to drop packets from unknown multicast groups 93
Chapter 22 igmp snooping commands 94
Ethernet switch cli reference guide 94
Table 61 show multicast 94
The following table describes the labels in this screen 94
This example shows the current multicast vlan on the switch 94
Command summary 95
Hapter 95
Igmp filtering commands 95
Chapter 23 igmp filtering commands 96
Command examples 96
Ethernet switch cli reference guide 96
This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 96
Command summary 97
Hapter 97
Interface commands 97
Chapter 24 interface commands 98
Command examples 98
Ethernet switch cli reference guide 98
Table 63 interface command summary continued 98
Table 64 show interfaces 98
The following table describes the labels in this screen 98
This example looks at the current status of port 1 98
Chapter 24 interface commands 99
Ethernet switch cli reference guide 99
Table 64 show interfaces continued 99
Chapter 24 interface commands 100
Ethernet switch cli reference guide 100
Sets the default port vid to 200 2 sets these ports to accept only tagged frames 100
Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 100
Table 64 show interfaces continued 100
This example configures ports 1 3 4 and 5 in the following ways 100
This example configures ports 1 5 in the following ways 100
Command examples 101
Command summary 101
Hapter 101
Interface route domain mode 101
Command summary 103
Hapter 103
Ip commands 103
Chapter 26 ip commands 104
Command examples 104
Ethernet switch cli reference guide 104
Table 67 tcp and udp command summary continued 104
Table 68 show ip tcp 104
The following table describes the labels in this screen 104
This example shows the tcp statistics and listener ports see rfc 1213 for more information 104
Chapter 26 ip commands 105
Ethernet switch cli reference guide 105
Table 68 show ip tcp continued 105
Chapter 26 ip commands 106
Ethernet switch cli reference guide 106
Table 68 show ip tcp continued 106
Table 69 show ip udp 106
The following table describes the labels in this screen 106
This example shows the udp statistics and listener ports see rfc 1213 for more information 106
Command examples 107
Command summary 107
Hapter 107
Ip source binding commands 107
Chapter 27 ip source binding commands 108
Ethernet switch cli reference guide 108
Table 71 show ip source binding continued 108
Command examples 109
Command summary 109
Hapter 109
Logging commands 109
Command examples 111
Command summary 111
Hapter 111
Login account commands 111
Command summary 113
Hapter 113
Loopguard commands 113
Chapter 30 loopguard commands 114
Command examples 114
Ethernet switch cli reference guide 114
Table 75 show loopguard 114
The following table describes the labels in this screen 114
This example enables loopguard on ports 1 3 114
Command summary 115
Hapter 115
Mac address commands 115
Chapter 31 mac address commands 116
Command examples 116
Ethernet switch cli reference guide 116
Table 77 show mac address table 116
The following table describes the labels in this screen 116
This example shows the current mac address table 116
Command summary 117
Hapter 117
Mac authentication commands 117
Mac authentication overview 117
Chapter 32 mac authentication commands 118
Command examples 118
Ethernet switch cli reference guide 118
Table 78 mac authentication command summary continued 118
This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 118
Command summary 119
Hapter 119
Mac filter commands 119
Command example 120
Command example filter source 120
Command summary 121
Hapter 121
Mac forward commands 121
Command summary 123
Hapter 123
Mirror commands 123
Chapter 35 mirror commands 124
Command examples 124
Ethernet switch cli reference guide 124
Table 83 mirror filter command summary 124
This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 124
Command summary 125
Hapter 125
Mrstp commands 125
Mrstp overview 125
Chapter 36 mrstp commands 126
Command examples 126
Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 126
Ethernet switch cli reference guide 126
Table 84 command summary mrstp 126
This example configures mrstp in the following way 126
Command summary 127
Hapter 127
Mstp commands 127
Chapter 37 mstp commands 128
Command examples 128
Ethernet switch cli reference guide 128
Table 86 mstp instance command summary continued 128
Table 87 show mstp 128
The following table describes the labels in this screen 128
This example shows the current mstp configuration 128
Chapter 37 mstp commands 129
Ethernet switch cli reference guide 129
Table 87 show mstp continued 129
Table 88 show mstp instance 129
The following table describes the labels in this screen 129
This example shows the current cist configuration mstp instance 0 129
Chapter 37 mstp commands 130
Ethernet switch cli reference guide 130
Table 88 show mstp instance continued 130
This example adds the switch to the mst region mstregionnorth mstregionnorth is on revision number 1 in mstregionnorth vlan 2 is in mst instance 1 and vlan 3 is in mst instance 2 130
Command examples 131
Command summary 131
Hapter 131
Multiple login commands 131
Command summary 133
Hapter 133
Mvr commands 133
Command examples 134
Reference n s 135
Command summary 137
Hapter 137
Ospf commands 137
Ospf overview 137
Chapter 40 ospf commands 138
Ethernet switch cli reference guide 138
Table 92 ospf command summary continued 138
Chapter 40 ospf commands 139
Command examples 139
Ethernet switch cli reference guide 139
Figure 5 ospf network example 139
In this example the switch a is an area border router abr in an ospf network 139
Table 92 ospf command summary continued 139
Chapter 40 ospf commands 140
Config if ip ospf authentication key abcd1234 140
Config if ip ospf priority 1 140
Ethernet switch cli reference guide 140
Interface route domain 172 6 24 140
Is also set to 1 as this router should participate in router elections 140
This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 140
This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 140
Command examples 141
Command summary 141
Hapter 141
Password commands 141
Command examples 143
Command summary 143
Hapter 143
Poe commands 143
Chapter 42 poe commands 144
Ethernet switch cli reference guide 144
Table 95 show pwr 144
The following table describes the labels in this screen 144
This example shows the current status and configuration of power over ethernet 144
Chapter 42 poe commands 145
Ethernet switch cli reference guide 145
Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 145
Table 95 show pwr continued 145
Command summary 147
Hapter 147
Policy commands 147
Chapter 43 policy commands 148
Ethernet switch cli reference guide 148
Table 96 policy command summary 148
Chapter 43 policy commands 149
Command examples 149
Ethernet switch cli reference guide 149
This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 9 on page 45 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 149
Command summary 151
Hapter 151
Port security commands 151
Chapter 44 port security commands 152
Command examples 152
Ethernet switch cli reference guide 152
This example enables port security on port 1 and limits the number of learned mac addresses to 5 152
Command examples 153
Command summary 153
Hapter 153
Port based vlan commands 153
Command summary 155
Hapter 155
Protocol based vlan commands 155
Protocol based vlan overview 155
Chapter 46 protocol based vlan commands 156
Command examples 156
Ethernet switch cli reference guide 156
Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 156
Table 99 protocol based vlan command summary continued 156
This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 156
Hapter 157
Queuing commands 157
Queuing overview 157
Chapter 47 queuing commands 158
Command summary port by port configuration 158
Ethernet switch cli reference guide 158
For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 158
Note some models only support 4 queues 158
Table 100 queuing command summary 158
The following section lists the commands for this feature 158
Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 158
Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 158
Chapter 47 queuing commands 159
Command examples port by port configuration 159
Command summary system wide configuration 159
Ethernet switch cli reference guide 159
Note some models only support 4 queues 159
Table 100 queuing command summary continued 159
Table 101 queueing command summary 159
The following section lists the commands for this feature 159
This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 159
Chapter 47 queuing commands 160
Command examples system wide 160
Ethernet switch cli reference guide 160
Table 101 queueing command summary continued 160
This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 160
This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 160
Command summary 161
Hapter 161
Radius commands 161
Chapter 48 radius commands 162
Command examples 162
Ethernet switch cli reference guide 162
Table 103 radius accounting command summary continued 162
This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 162
Command summary 163
Hapter 163
Remote management commands 163
Chapter 49 remote management commands 164
Command examples 164
Ethernet switch cli reference guide 164
Table 106 service control command summary continued 164
This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 164
This example disables all snmp and icmp access to the 164
Command examples 165
Command summary 165
Hapter 165
Rip commands 165
Rip overview 165
Command summary 167
Hapter 167
Running configuration commands 167
Switch configuration file 167
Chapter 51 running configuration commands 168
Command examples 168
Ethernet switch cli reference guide 168
Table 109 running config command summary 168
The following section lists the commands for this feature 168
This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 168
This example resets the switch to the factory default settings 168
Command summary 169
Hapter 169
Snmp server commands 169
Chapter 52 snmp server commands 170
Ethernet switch cli reference guide 170
Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 170
Table 111 snmp server command summary continued 170
Table 112 snmp server trap destination enable traps command summary 170
Chapter 52 snmp server commands 171
Ethernet switch cli reference guide 171
Table 112 snmp server trap destination enable traps command summary continued 171
Command summary 173
Hapter 173
Stp and rstp commands 173
Chapter 53 stp and rstp commands 174
Command examples 174
Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 174
Ethernet switch cli reference guide 174
Table 113 spanning tree command summary continued 174
This example configures stp in the following ways 174
This example shows the current stp settings 174
Chapter 53 stp and rstp commands 175
Ethernet switch cli reference guide 175
Table 114 show spanning tree config 175
The following table describes the labels in this screen 175
Command examples 177
Command summary 177
Hapter 177
Ssh commands 177
Chapter 54 ssh commands 178
Ethernet switch cli reference guide 178
Table 116 show ssh 178
The following table describes the labels in this screen 178
This example shows the general ssh settings 178
Command summary 179
Hapter 179
Static route commands 179
Chapter 55 static route commands 180
Command examples 180
Ethernet switch cli reference guide 180
For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 180
Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 180
Table 118 show ip route 180
The following table describes the labels in this screen 180
This example shows the current routing table 180
You can create this static route if it is inactive however 180
Chapter 55 static route commands 181
Ethernet switch cli reference guide 181
You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 181
Command summary 183
Hapter 183
Subnet based vlan commands 183
Subnet based vlan overview 183
Chapter 56 subnet based vlan commands 184
Command examples 184
Ethernet switch cli reference guide 184
Table 119 subnet based vlan command summary continued 184
This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 184
Command summary 185
Hapter 185
Syslog commands 185
Reference t z 187
Command summary 189
Hapter 189
Tacacs commands 189
Command summary 191
Hapter 191
Tftp commands 191
Command summary 193
Hapter 193
Trunk commands 193
Chapter 60 trunk commands 194
Command examples 194
Ethernet switch cli reference guide 194
Table 129 show trunk 194
The following table describes the labels in this screen 194
This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 194
This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 194
This example looks at the current trunks 194
Chapter 60 trunk commands 195
Ethernet switch cli reference guide 195
Table 130 show lacp 195
The following table describes the labels in this screen 195
This example shows the current lacp settings 195
Command summary 197
Hapter 197
Trtcm commands 197
Trtcm overview 197
Chapter 61 trtcm commands 198
Command examples 198
Ethernet switch cli reference guide 198
Sets the switch to inspect the dscp value of the packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 198
Table 131 trtcm command summary continued 198
This example activates trtcm on the switch with the following settings 198
Hapter 199
Vlan commands 199
Vlan configuration overview 199
Vlan overview 199
Command summary 200
See chapter 24 on page 97 for interface port channel commands 200
Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command 200
The following section lists the commands for the ingress checking feature 200
The following section lists the commands for this feature 200
Vlan ingress checking implementation differs across switch models 200
Chapter 62 vlan commands 201
Command examples 201
Ethernet switch cli reference guide 201
Other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 201
Table 133 vlan1q ingress check command summary 201
Table 134 ingress check command summary 201
This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 201
This example deletes entry 2 in the static vlan table 201
This example shows the vlan table 201
Chapter 62 vlan commands 202
Ethernet switch cli reference guide 202
Table 135 show vlan 202
The following table describes the labels in this screen 202
This example enables ingress checking on ports 1 5 202
Command summary 203
Hapter 203
Ip interfaces overview 203
Vlan ip commands 203
Chapter 63 vlan ip commands 204
Command examples 204
Ethernet switch cli reference guide 204
See section 3 on page 22 204
Table 136 vlan ip address command summary continued 204
Command summary 205
Hapter 205
Vlan port isolation commands 205
Command examples 207
Command summary 207
Hapter 207
Vlan stacking commands 207
A 37 24 208
B 48 24 208
Chapter 65 vlan stacking commands 208
Customer a customer a 208
Customer b customer b 208
Customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network 208
Ethernet switch cli reference guide 208
Figure 6 example vlan stacking 208
This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 208
Vlan 24 vlan 24 208
Command summary 209
Hapter 209
Vlan trunking commands 209
Command summary 211
Hapter 211
Vrrp commands 211
Vrrp overview 211
Chapter 67 vrrp commands 212
Command examples 212
Ethernet 212
Ethernet switch cli reference guide 212
Figure 7 example vrrp 212
Table 140 vrrp command summary continued 212
The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 212
Chapter 67 vrrp commands 213
Ethernet switch cli reference guide 213
This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 7 on page 212 213
Chapter 67 vrrp commands 214
Ethernet switch cli reference guide 214
This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 7 on page 212 214
Additional commands 215
Command summary 215
Hapter 215
Chapter 68 additional commands 216
Ethernet switch cli reference guide 216
Table 142 command summary additional enable mode continued 216
Table 143 command summary additional configure mode 216
Chapter 68 additional commands 217
Command examples 217
Ethernet switch cli reference guide 217
Table 144 ping 217
The following table describes the labels in this screen 217
This example checks the cable pairs on port 7 217
This example sends ping requests to an ethernet device with ip address 172 6 7 54 217
Chapter 68 additional commands 218
Ethernet switch cli reference guide 218
Table 145 show alarm status 218
Table 146 show cpu utilization 218
The following table describes the labels in this screen 218
This example shows the current and recent cpu utilization 218
This example shows the current status of the various alarms in the switch 218
Chapter 68 additional commands 219
Ethernet switch cli reference guide 219
Table 147 show hardware monitor 219
The following table describes the labels in this screen 219
This example looks at the current sensor readings from various places in the hardware 219
Chapter 68 additional commands 220
Ethernet switch cli reference guide 220
Table 147 show hardware monitor continued 220
Table 148 show multicast vlan 220
Table 149 show poe status 220
The following table describes the labels in this screen 220
This example displays multicast vlan configuration on the 220
This example shows the current status of power over ethernet 220
Chapter 68 additional commands 221
Ethernet switch cli reference guide 221
Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 221
Table 149 show poe status continued 221
Table 150 show system information 221
The following table describes the labels in this screen 221
This example looks at general system information about the switch 221
Chapter 68 additional commands 222
Ethernet switch cli reference guide 222
This example displays route information to an ethernet device with ip address 222
This example runs an internal loopback test on ports 3 6 222
Appendices and 223
Appendices and index of commands 223
Index of commands 223
Default values 225
Ppendix 225
Certifications 227
Copyright 227
Legal information 227
Ppendix 227
Zyxel limited warranty 228
Customer support 231
Ppendix 231
Index of commands 237
Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 237
Ethernet switch cli reference guide 238
Index of commands 238
Ethernet switch cli reference guide 239
Index of commands 239
Ethernet switch cli reference guide 240
Index of commands 240
Ethernet switch cli reference guide 241
Index of commands 241
Ethernet switch cli reference guide 242
Index of commands 242
Ethernet switch cli reference guide 243
Index of commands 243
Ethernet switch cli reference guide 244
Index of commands 244
Ethernet switch cli reference guide 245
Index of commands 245
Ethernet switch cli reference guide 246
Index of commands 246
Ethernet switch cli reference guide 247
Index of commands 247
Ethernet switch cli reference guide 248
Index of commands 248
Ethernet switch cli reference guide 249
Index of commands 249
Ethernet switch cli reference guide 250
Index of commands 250

Zyxel ES-3124PWR [152/250] This example enables port security on port 1 and limits the number of learned mac addresses to 5

Содержание

Похожие устройства