![Zyxel ES-3124PWR [87/250] Ieee 802 x authentication commands](/img/pdf.png)
Zyxel ES-3124PWR [87/250] Ieee 802 x authentication commands
![Zyxel ES-3124PWR [87/250] Ieee 802 x authentication commands](/views2/1168512/page87/bg57.png)
Ethernet Switch CLI Reference Guide
87
CHAPTER 20
IEEE 802.1x Authentication
Commands
Use these commands to configure IEEE 802.1x authentication.
" Do not forget to configure the authentication server.
20.1 Command Summary
The following section lists the commands for this feature.
20.2 Command Examples
This example configures the Switch in the following ways:
Table 54 port-access-authenticator Command Summary
COMMAND DESCRIPTION M P
show port-access-authenticator Displays all port authentication settings. E 3
show port-access-authenticator
<port-list>
Displays port authentication settings on the specified port(s). E 3
port-access-authenticator Enables 802.1x authentication on the Switch. C 13
no port-access-authenticator Disables port authentication on the Switch. C 13
port-access-authenticator
<port-list>
Enables 802.1x authentication on the specified port(s). C 13
no port-access-authenticator
<port-list>
Disables authentication on the listed ports. C 13
port-access-authenticator
<port-list> reauthenticate
Sets a subscriber to periodically re-enter his or her username
and password to stay connected to a specified port.
C13
no port-access-authenticator
<port-list> reauthenticate
Disables the re-authentication mechanism on the listed
port(s).
C13
port-access-authenticator
<port-list> reauth-period <1-
65535>
Specifies how often (in seconds) a client has to re-enter the
username and password to stay connected to the specified
port(s).
C13
Содержание
- Cli reference guide 1
- Default login 1
- Ethernet switch 1
- Www zyxel com 1
- About this cli reference guide 3
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
- Document conventions 4
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4
- Document conventions 6
- Ethernet switch cli reference guide 6
- Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device 6
- Icons used in figures 6
- Contents overview 7
- Introduction 7
- Reference a g 5 7
- Reference h m 1 7
- Appendices and index of commands 23 8
- Reference n s 35 8
- Reference t z 87 8
- Introduction 9
- Accessing the cli 11
- Console port 11
- Hapter 11
- How to access and use the cli 11
- Telnet 11
- Logging in 12
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12
- Using shortcuts and getting help 12
- Logging out 13
- Saving your configuration 13
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13
- Hapter 15
- Privilege level and command mode 15
- Privilege levels 15
- Privilege levels for commands 15
- Privilege levels for login accounts 15
- Privilege levels for sessions 16
- Chapter 2 privilege level and command mode 17
- Command modes 17
- Command modes for privilege levels 0 12 17
- Command modes for privilege levels 13 14 17
- Consists of 1 32 alphanumeric characters for example the following command sets the password for privilege level 13 to pswd13 see chapter 68 on page 215 for more information about this command 17
- Disable command 17
- Ethernet switch cli reference guide 17
- If the session s privilege level is 0 12 the user and all of the allowed commands are in user mode users do not have to change modes to run any allowed commands 17
- If the session s privilege level is 13 14 the allowed commands are in one of several modes 17
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17
- The cli is divided into several modes if a user has enough privilege to run a particular command the user has to run the command in the correct mode the modes that are available depend on the session s privilege level 17
- This command reduces the session s privilege level to 0 it also changes the session to user mode this command is available in enable mode 17
- Chapter 2 privilege level and command mode 18
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 18
- Ethernet switch cli reference guide 18
- Listing available commands 18
- Log into the cli this takes you to the enable mode 2 type help and press enter a list comes up which shows all the commands available in enable mode the example shown next has been edited for brevity s sake 18
- Table 8 changing between command modes for privilege levels 13 14 18
- Use the help command to view the executable commands on the switch you must have the highest privilege level in order to view all the commands follow these steps to create a list of supported commands 18
- Changing the administrator password 21
- Changing the enable password 21
- Hapter 21
- Initial setup 21
- Afterwards you have to use the new ip address to access the switch 22
- Changing the management ip address 22
- Changing the out of band management ip address 22
- Prohibiting concurrent logins 22
- Chapter 3 initial setup 23
- Ethernet switch cli reference guide 23
- Looking at basic system information 23
- Looking at the operating configuration 23
- See chapter 68 on page 215 for more information about these attributes 23
- This is illustrated in the following example 23
- Use this command to look at general system information about the switch 23
- Use this command to look at the current operating configuration 23
- Reference a g 25
- Aaa commands 27
- Command summary 27
- Hapter 27
- Chapter 4 aaa commands 28
- Ethernet switch cli reference guide 28
- Table 10 command summary aaa accounting continued 28
- Arp commands 29
- Command examples 29
- Command summary 29
- Hapter 29
- Arp inspection commands 31
- Command summary 31
- Hapter 31
- Chapter 6 arp inspection commands 32
- Ethernet switch cli reference guide 32
- Table 15 command summary arp inspection log continued 32
- Table 16 command summary interface arp inspection 32
- Table 17 command summary arp inspection vlan 32
- Chapter 6 arp inspection commands 33
- Command examples 33
- Ethernet switch cli reference guide 33
- Table 18 show arp inspection filter 33
- The following table describes the labels in this screen 33
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 33
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 33
- Chapter 6 arp inspection commands 34
- Ethernet switch cli reference guide 34
- Table 19 show arp inspection log 34
- Table 20 show arp inspection interface port channel 34
- The following table describes the labels in this screen 34
- This example displays whether ports are trusted or untrusted ports for arp inspection 34
- Chapter 6 arp inspection commands 35
- Ethernet switch cli reference guide 35
- Table 20 show arp inspection interface port channel continued 35
- Bandwidth commands 37
- Command summary 37
- Hapter 37
- Chapter 7 bandwidth commands 38
- Command examples ingress 38
- Ethernet switch cli reference guide 38
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 38
- Table 22 command summary bandwidth control bandwidth limit 38
- The following section lists the commands for this feature 38
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 38
- Chapter 7 bandwidth commands 39
- Command examples cir pir 39
- Ethernet switch cli reference guide 39
- This example deactivates the outgoing bandwidth limit on port 1 39
- This example displays the bandwidth limits configured on port 1 39
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 39
- Broadcast storm commands 41
- Command summary 41
- Hapter 41
- 128 broadcast packets per second 256 multicast packets per second 42
- Chapter 8 broadcast storm commands 42
- Command example bmstorm limit 42
- Command example broadcast limit multicast limit dlf limit 42
- Ethernet switch cli reference guide 42
- Table 24 command summary storm control bmstorm limit and bstorm control continued 42
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 42
- This example enables broadcast storm control on the switch and configures port 1 to accept up to 42
- 64 dlf packets per second 43
- Chapter 8 broadcast storm commands 43
- Ethernet switch cli reference guide 43
- Classifier commands 45
- Command summary 45
- Hapter 45
- Chapter 9 classifier commands 46
- Ethernet switch cli reference guide 46
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 46
- Some of the most common tcp and udp port numbers are 46
- Table 26 common ethernet types and protocol number 46
- Table 27 common ip protocol types and protocol numbers 46
- Table 28 common tcp and udp port numbers 46
- The following table shows some other common ethernet types and the corresponding protocol number 46
- Command examples 47
- Cluster commands 49
- Command summary 49
- Hapter 49
- Chapter 10 cluster commands 50
- Command examples 50
- Ethernet switch cli reference guide 50
- Table 30 show cluster member 50
- The following table describes the labels in this screen 50
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 50
- Chapter 10 cluster commands 51
- Ethernet switch cli reference guide 51
- Table 31 show cluster 51
- The following table describes the labels in this screen 51
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager 51
- This example looks at the current status of the switch s cluster 51
- Command summary 53
- Date and time commands 53
- Hapter 53
- Chapter 11 date and time commands 54
- Command examples 54
- Ethernet switch cli reference guide 54
- Table 33 time command summary continued 54
- Table 34 timesync command summary 54
- This example sets the current date current time time zone and daylight savings time 54
- Chapter 11 date and time commands 55
- Ethernet switch cli reference guide 55
- Table 35 show timesync 55
- The following table describes the labels in this screen 55
- This example looks at the current time server settings 55
- Command summary 57
- Dhcp commands 57
- Hapter 57
- Chapter 12 dhcp commands 58
- Ethernet switch cli reference guide 58
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 58
- Table 37 dhcp relay command summary 58
- Table 38 dhcp relay broadcast command summary 58
- Table 39 dhcp relay command summary 58
- Chapter 12 dhcp commands 59
- Command examples 59
- Ethernet switch cli reference guide 59
- Figure 1 example global dhcp relay 59
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 59
- Table 40 dhcp server command summary 59
- Vlan1 vlan2 59
- 6 0 00 60
- Chapter 12 dhcp commands 60
- Ethernet switch cli reference guide 60
- Figure 2 example dhcp relay for two vlans 60
- In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 60
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 60
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 60
- This example shows how to configure these dhcp servers the vlans are already configured 60
- This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 3 on page 61 it also provides the dhcp clients with the ip address of the default gateway and the dns server 61
- Command summary 63
- Dhcp snooping dhcp vlan commands 63
- Hapter 63
- Chapter 13 dhcp snooping dhcp vlan commands 64
- Command examples 64
- Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 64
- Ethernet switch cli reference guide 64
- Table 41 dhcp snooping command summary continued 64
- Table 42 dhcp vlan command summary 64
- The following table describes the dhcp vlan commands 64
- This example 64
- Chapter 13 dhcp snooping dhcp vlan commands 65
- Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 65
- Ethernet switch cli reference guide 65
- Command summary 67
- Diffserv commands 67
- Hapter 67
- Command summary 69
- Dvmrp commands 69
- Dvmrp overview 69
- Hapter 69
- Chapter 15 dvmrp commands 70
- Command examples 70
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 70
- Ethernet switch cli reference guide 70
- Figure 4 dvmrp network example 70
- In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 70
- Table 44 command summary dvmrp continued 70
- Command summary 71
- Ethernet oam commands 71
- Hapter 71
- Ieee 802 ah link layer ethernet oam implementation 71
- Chapter 16 ethernet oam commands 72
- Command examples 72
- Ethernet switch cli reference guide 72
- Table 45 ethernet oam command summary continued 72
- This example enables ethernet oam on port 7 and sets the mode to active 72
- This example performs ethernet oam discovery from port 7 72
- Chapter 16 ethernet oam commands 73
- Ethernet switch cli reference guide 73
- Table 46 show ethernet oam discovery 73
- The following table describes the labels in this screen 73
- Chapter 16 ethernet oam commands 74
- Ethernet switch cli reference guide 74
- Table 46 show ethernet oam discovery continued 74
- Table 47 show ethernet oam statistics 74
- The following table describes the labels in this screen 74
- This example looks at the number of oam packets transferred on port 1 74
- Chapter 16 ethernet oam commands 75
- Ethernet switch cli reference guide 75
- Table 47 show ethernet oam statistics continued 75
- Table 48 show ethernet oam summary 75
- The following table describes the labels in this screen 75
- This example looks at the configuration of ports on which oam is enabled 75
- Chapter 16 ethernet oam commands 76
- Ethernet switch cli reference guide 76
- Table 48 show ethernet oam summary continued 76
- Command summary 77
- Garp commands 77
- Garp overview 77
- Hapter 77
- Chapter 17 garp commands 78
- Command examples 78
- Ethernet switch cli reference guide 78
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 78
- Command examples 79
- Command summary 79
- Gvrp commands 79
- Hapter 79
- Reference h m 81
- Command summary 83
- Hapter 83
- Https server commands 83
- Chapter 19 https server commands 84
- Command examples 84
- Ethernet switch cli reference guide 84
- Table 52 show https 84
- The following table describes the labels in this screen 84
- This example shows the current https settings statistics and sessions 84
- Chapter 19 https server commands 85
- Ethernet switch cli reference guide 85
- Table 52 show https continued 85
- Table 53 show https session 85
- The following table describes the labels in this screen 85
- This example shows the current https sessions 85
- Chapter 19 https server commands 86
- Ethernet switch cli reference guide 86
- Table 53 show https session continued 86
- Command examples 87
- Command summary 87
- Hapter 87
- Ieee 802 x authentication commands 87
- Command summary 89
- Hapter 89
- Igmp and multicasting commands 89
- Igmp overview 89
- Chapter 21 igmp and multicasting commands 90
- Command examples 90
- Ethernet switch cli reference guide 90
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode configures the ip interface 172 6 with subnet mask 255 55 55 to route igmp version 3 packets 90
- Table 55 igmp command summary continued 90
- Table 56 ipmc command summary 90
- This example configures igmp on the switch with the following settings 90
- Command summary 91
- Hapter 91
- Igmp snooping commands 91
- Chapter 22 igmp snooping commands 92
- Ethernet switch cli reference guide 92
- Table 58 igmp snooping command summary continued 92
- Table 59 igmp snooping vlan command summary 92
- Table 60 interface igmp command summary 92
- Chapter 22 igmp snooping commands 93
- Command examples 93
- Ethernet switch cli reference guide 93
- Host timeout 93
- Leave timeou 93
- Table 60 interface igmp command summary continued 93
- This example enables igmp snooping on the switch sets the 93
- This example limits the number of multicast groups on port 1 to 5 93
- This example shows the current multicast groups on the switch 93
- Values to 30 seconds and sets the switch to drop packets from unknown multicast groups 93
- Chapter 22 igmp snooping commands 94
- Ethernet switch cli reference guide 94
- Table 61 show multicast 94
- The following table describes the labels in this screen 94
- This example shows the current multicast vlan on the switch 94
- Command summary 95
- Hapter 95
- Igmp filtering commands 95
- Chapter 23 igmp filtering commands 96
- Command examples 96
- Ethernet switch cli reference guide 96
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 96
- Command summary 97
- Hapter 97
- Interface commands 97
- Chapter 24 interface commands 98
- Command examples 98
- Ethernet switch cli reference guide 98
- Table 63 interface command summary continued 98
- Table 64 show interfaces 98
- The following table describes the labels in this screen 98
- This example looks at the current status of port 1 98
- Chapter 24 interface commands 99
- Ethernet switch cli reference guide 99
- Table 64 show interfaces continued 99
- Chapter 24 interface commands 100
- Ethernet switch cli reference guide 100
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames 100
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 100
- Table 64 show interfaces continued 100
- This example configures ports 1 3 4 and 5 in the following ways 100
- This example configures ports 1 5 in the following ways 100
- Command examples 101
- Command summary 101
- Hapter 101
- Interface route domain mode 101
- Command summary 103
- Hapter 103
- Ip commands 103
- Chapter 26 ip commands 104
- Command examples 104
- Ethernet switch cli reference guide 104
- Table 67 tcp and udp command summary continued 104
- Table 68 show ip tcp 104
- The following table describes the labels in this screen 104
- This example shows the tcp statistics and listener ports see rfc 1213 for more information 104
- Chapter 26 ip commands 105
- Ethernet switch cli reference guide 105
- Table 68 show ip tcp continued 105
- Chapter 26 ip commands 106
- Ethernet switch cli reference guide 106
- Table 68 show ip tcp continued 106
- Table 69 show ip udp 106
- The following table describes the labels in this screen 106
- This example shows the udp statistics and listener ports see rfc 1213 for more information 106
- Command examples 107
- Command summary 107
- Hapter 107
- Ip source binding commands 107
- Chapter 27 ip source binding commands 108
- Ethernet switch cli reference guide 108
- Table 71 show ip source binding continued 108
- Command examples 109
- Command summary 109
- Hapter 109
- Logging commands 109
- Command examples 111
- Command summary 111
- Hapter 111
- Login account commands 111
- Command summary 113
- Hapter 113
- Loopguard commands 113
- Chapter 30 loopguard commands 114
- Command examples 114
- Ethernet switch cli reference guide 114
- Table 75 show loopguard 114
- The following table describes the labels in this screen 114
- This example enables loopguard on ports 1 3 114
- Command summary 115
- Hapter 115
- Mac address commands 115
- Chapter 31 mac address commands 116
- Command examples 116
- Ethernet switch cli reference guide 116
- Table 77 show mac address table 116
- The following table describes the labels in this screen 116
- This example shows the current mac address table 116
- Command summary 117
- Hapter 117
- Mac authentication commands 117
- Mac authentication overview 117
- Chapter 32 mac authentication commands 118
- Command examples 118
- Ethernet switch cli reference guide 118
- Table 78 mac authentication command summary continued 118
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 118
- Command summary 119
- Hapter 119
- Mac filter commands 119
- Command example 120
- Command example filter source 120
- Command summary 121
- Hapter 121
- Mac forward commands 121
- Command summary 123
- Hapter 123
- Mirror commands 123
- Chapter 35 mirror commands 124
- Command examples 124
- Ethernet switch cli reference guide 124
- Table 83 mirror filter command summary 124
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 124
- Command summary 125
- Hapter 125
- Mrstp commands 125
- Mrstp overview 125
- Chapter 36 mrstp commands 126
- Command examples 126
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 126
- Ethernet switch cli reference guide 126
- Table 84 command summary mrstp 126
- This example configures mrstp in the following way 126
- Command summary 127
- Hapter 127
- Mstp commands 127
- Chapter 37 mstp commands 128
- Command examples 128
- Ethernet switch cli reference guide 128
- Table 86 mstp instance command summary continued 128
- Table 87 show mstp 128
- The following table describes the labels in this screen 128
- This example shows the current mstp configuration 128
- Chapter 37 mstp commands 129
- Ethernet switch cli reference guide 129
- Table 87 show mstp continued 129
- Table 88 show mstp instance 129
- The following table describes the labels in this screen 129
- This example shows the current cist configuration mstp instance 0 129
- Chapter 37 mstp commands 130
- Ethernet switch cli reference guide 130
- Table 88 show mstp instance continued 130
- This example adds the switch to the mst region mstregionnorth mstregionnorth is on revision number 1 in mstregionnorth vlan 2 is in mst instance 1 and vlan 3 is in mst instance 2 130
- Command examples 131
- Command summary 131
- Hapter 131
- Multiple login commands 131
- Command summary 133
- Hapter 133
- Mvr commands 133
- Command examples 134
- Reference n s 135
- Command summary 137
- Hapter 137
- Ospf commands 137
- Ospf overview 137
- Chapter 40 ospf commands 138
- Ethernet switch cli reference guide 138
- Table 92 ospf command summary continued 138
- Chapter 40 ospf commands 139
- Command examples 139
- Ethernet switch cli reference guide 139
- Figure 5 ospf network example 139
- In this example the switch a is an area border router abr in an ospf network 139
- Table 92 ospf command summary continued 139
- Chapter 40 ospf commands 140
- Config if ip ospf authentication key abcd1234 140
- Config if ip ospf priority 1 140
- Ethernet switch cli reference guide 140
- Interface route domain 172 6 24 140
- Is also set to 1 as this router should participate in router elections 140
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 140
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 140
- Command examples 141
- Command summary 141
- Hapter 141
- Password commands 141
- Command examples 143
- Command summary 143
- Hapter 143
- Poe commands 143
- Chapter 42 poe commands 144
- Ethernet switch cli reference guide 144
- Table 95 show pwr 144
- The following table describes the labels in this screen 144
- This example shows the current status and configuration of power over ethernet 144
- Chapter 42 poe commands 145
- Ethernet switch cli reference guide 145
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 145
- Table 95 show pwr continued 145
- Command summary 147
- Hapter 147
- Policy commands 147
- Chapter 43 policy commands 148
- Ethernet switch cli reference guide 148
- Table 96 policy command summary 148
- Chapter 43 policy commands 149
- Command examples 149
- Ethernet switch cli reference guide 149
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 9 on page 45 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 149
- Command summary 151
- Hapter 151
- Port security commands 151
- Chapter 44 port security commands 152
- Command examples 152
- Ethernet switch cli reference guide 152
- This example enables port security on port 1 and limits the number of learned mac addresses to 5 152
- Command examples 153
- Command summary 153
- Hapter 153
- Port based vlan commands 153
- Command summary 155
- Hapter 155
- Protocol based vlan commands 155
- Protocol based vlan overview 155
- Chapter 46 protocol based vlan commands 156
- Command examples 156
- Ethernet switch cli reference guide 156
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 156
- Table 99 protocol based vlan command summary continued 156
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 156
- Hapter 157
- Queuing commands 157
- Queuing overview 157
- Chapter 47 queuing commands 158
- Command summary port by port configuration 158
- Ethernet switch cli reference guide 158
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 158
- Note some models only support 4 queues 158
- Table 100 queuing command summary 158
- The following section lists the commands for this feature 158
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 158
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 158
- Chapter 47 queuing commands 159
- Command examples port by port configuration 159
- Command summary system wide configuration 159
- Ethernet switch cli reference guide 159
- Note some models only support 4 queues 159
- Table 100 queuing command summary continued 159
- Table 101 queueing command summary 159
- The following section lists the commands for this feature 159
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 159
- Chapter 47 queuing commands 160
- Command examples system wide 160
- Ethernet switch cli reference guide 160
- Table 101 queueing command summary continued 160
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 160
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 160
- Command summary 161
- Hapter 161
- Radius commands 161
- Chapter 48 radius commands 162
- Command examples 162
- Ethernet switch cli reference guide 162
- Table 103 radius accounting command summary continued 162
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 162
- Command summary 163
- Hapter 163
- Remote management commands 163
- Chapter 49 remote management commands 164
- Command examples 164
- Ethernet switch cli reference guide 164
- Table 106 service control command summary continued 164
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 164
- This example disables all snmp and icmp access to the 164
- Command examples 165
- Command summary 165
- Hapter 165
- Rip commands 165
- Rip overview 165
- Command summary 167
- Hapter 167
- Running configuration commands 167
- Switch configuration file 167
- Chapter 51 running configuration commands 168
- Command examples 168
- Ethernet switch cli reference guide 168
- Table 109 running config command summary 168
- The following section lists the commands for this feature 168
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 168
- This example resets the switch to the factory default settings 168
- Command summary 169
- Hapter 169
- Snmp server commands 169
- Chapter 52 snmp server commands 170
- Ethernet switch cli reference guide 170
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 170
- Table 111 snmp server command summary continued 170
- Table 112 snmp server trap destination enable traps command summary 170
- Chapter 52 snmp server commands 171
- Ethernet switch cli reference guide 171
- Table 112 snmp server trap destination enable traps command summary continued 171
- Command summary 173
- Hapter 173
- Stp and rstp commands 173
- Chapter 53 stp and rstp commands 174
- Command examples 174
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 174
- Ethernet switch cli reference guide 174
- Table 113 spanning tree command summary continued 174
- This example configures stp in the following ways 174
- This example shows the current stp settings 174
- Chapter 53 stp and rstp commands 175
- Ethernet switch cli reference guide 175
- Table 114 show spanning tree config 175
- The following table describes the labels in this screen 175
- Command examples 177
- Command summary 177
- Hapter 177
- Ssh commands 177
- Chapter 54 ssh commands 178
- Ethernet switch cli reference guide 178
- Table 116 show ssh 178
- The following table describes the labels in this screen 178
- This example shows the general ssh settings 178
- Command summary 179
- Hapter 179
- Static route commands 179
- Chapter 55 static route commands 180
- Command examples 180
- Ethernet switch cli reference guide 180
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 180
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 180
- Table 118 show ip route 180
- The following table describes the labels in this screen 180
- This example shows the current routing table 180
- You can create this static route if it is inactive however 180
- Chapter 55 static route commands 181
- Ethernet switch cli reference guide 181
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 181
- Command summary 183
- Hapter 183
- Subnet based vlan commands 183
- Subnet based vlan overview 183
- Chapter 56 subnet based vlan commands 184
- Command examples 184
- Ethernet switch cli reference guide 184
- Table 119 subnet based vlan command summary continued 184
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 184
- Command summary 185
- Hapter 185
- Syslog commands 185
- Reference t z 187
- Command summary 189
- Hapter 189
- Tacacs commands 189
- Command summary 191
- Hapter 191
- Tftp commands 191
- Command summary 193
- Hapter 193
- Trunk commands 193
- Chapter 60 trunk commands 194
- Command examples 194
- Ethernet switch cli reference guide 194
- Table 129 show trunk 194
- The following table describes the labels in this screen 194
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 194
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 194
- This example looks at the current trunks 194
- Chapter 60 trunk commands 195
- Ethernet switch cli reference guide 195
- Table 130 show lacp 195
- The following table describes the labels in this screen 195
- This example shows the current lacp settings 195
- Command summary 197
- Hapter 197
- Trtcm commands 197
- Trtcm overview 197
- Chapter 61 trtcm commands 198
- Command examples 198
- Ethernet switch cli reference guide 198
- Sets the switch to inspect the dscp value of the packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 198
- Table 131 trtcm command summary continued 198
- This example activates trtcm on the switch with the following settings 198
- Hapter 199
- Vlan commands 199
- Vlan configuration overview 199
- Vlan overview 199
- Command summary 200
- See chapter 24 on page 97 for interface port channel commands 200
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command 200
- The following section lists the commands for the ingress checking feature 200
- The following section lists the commands for this feature 200
- Vlan ingress checking implementation differs across switch models 200
- Chapter 62 vlan commands 201
- Command examples 201
- Ethernet switch cli reference guide 201
- Other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 201
- Table 133 vlan1q ingress check command summary 201
- Table 134 ingress check command summary 201
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 201
- This example deletes entry 2 in the static vlan table 201
- This example shows the vlan table 201
- Chapter 62 vlan commands 202
- Ethernet switch cli reference guide 202
- Table 135 show vlan 202
- The following table describes the labels in this screen 202
- This example enables ingress checking on ports 1 5 202
- Command summary 203
- Hapter 203
- Ip interfaces overview 203
- Vlan ip commands 203
- Chapter 63 vlan ip commands 204
- Command examples 204
- Ethernet switch cli reference guide 204
- See section 3 on page 22 204
- Table 136 vlan ip address command summary continued 204
- Command summary 205
- Hapter 205
- Vlan port isolation commands 205
- Command examples 207
- Command summary 207
- Hapter 207
- Vlan stacking commands 207
- A 37 24 208
- B 48 24 208
- Chapter 65 vlan stacking commands 208
- Customer a customer a 208
- Customer b customer b 208
- Customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network 208
- Ethernet switch cli reference guide 208
- Figure 6 example vlan stacking 208
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 208
- Vlan 24 vlan 24 208
- Command summary 209
- Hapter 209
- Vlan trunking commands 209
- Command summary 211
- Hapter 211
- Vrrp commands 211
- Vrrp overview 211
- Chapter 67 vrrp commands 212
- Command examples 212
- Ethernet 212
- Ethernet switch cli reference guide 212
- Figure 7 example vrrp 212
- Table 140 vrrp command summary continued 212
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 212
- Chapter 67 vrrp commands 213
- Ethernet switch cli reference guide 213
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 7 on page 212 213
- Chapter 67 vrrp commands 214
- Ethernet switch cli reference guide 214
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 7 on page 212 214
- Additional commands 215
- Command summary 215
- Hapter 215
- Chapter 68 additional commands 216
- Ethernet switch cli reference guide 216
- Table 142 command summary additional enable mode continued 216
- Table 143 command summary additional configure mode 216
- Chapter 68 additional commands 217
- Command examples 217
- Ethernet switch cli reference guide 217
- Table 144 ping 217
- The following table describes the labels in this screen 217
- This example checks the cable pairs on port 7 217
- This example sends ping requests to an ethernet device with ip address 172 6 7 54 217
- Chapter 68 additional commands 218
- Ethernet switch cli reference guide 218
- Table 145 show alarm status 218
- Table 146 show cpu utilization 218
- The following table describes the labels in this screen 218
- This example shows the current and recent cpu utilization 218
- This example shows the current status of the various alarms in the switch 218
- Chapter 68 additional commands 219
- Ethernet switch cli reference guide 219
- Table 147 show hardware monitor 219
- The following table describes the labels in this screen 219
- This example looks at the current sensor readings from various places in the hardware 219
- Chapter 68 additional commands 220
- Ethernet switch cli reference guide 220
- Table 147 show hardware monitor continued 220
- Table 148 show multicast vlan 220
- Table 149 show poe status 220
- The following table describes the labels in this screen 220
- This example displays multicast vlan configuration on the 220
- This example shows the current status of power over ethernet 220
- Chapter 68 additional commands 221
- Ethernet switch cli reference guide 221
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 221
- Table 149 show poe status continued 221
- Table 150 show system information 221
- The following table describes the labels in this screen 221
- This example looks at general system information about the switch 221
- Chapter 68 additional commands 222
- Ethernet switch cli reference guide 222
- This example displays route information to an ethernet device with ip address 222
- This example runs an internal loopback test on ports 3 6 222
- Appendices and 223
- Appendices and index of commands 223
- Index of commands 223
- Default values 225
- Ppendix 225
- Certifications 227
- Copyright 227
- Legal information 227
- Ppendix 227
- Zyxel limited warranty 228
- Customer support 231
- Ppendix 231
- Index of commands 237
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 237
- Ethernet switch cli reference guide 238
- Index of commands 238
- Ethernet switch cli reference guide 239
- Index of commands 239
- Ethernet switch cli reference guide 240
- Index of commands 240
- Ethernet switch cli reference guide 241
- Index of commands 241
- Ethernet switch cli reference guide 242
- Index of commands 242
- Ethernet switch cli reference guide 243
- Index of commands 243
- Ethernet switch cli reference guide 244
- Index of commands 244
- Ethernet switch cli reference guide 245
- Index of commands 245
- Ethernet switch cli reference guide 246
- Index of commands 246
- Ethernet switch cli reference guide 247
- Index of commands 247
- Ethernet switch cli reference guide 248
- Index of commands 248
- Ethernet switch cli reference guide 249
- Index of commands 249
- Ethernet switch cli reference guide 250
- Index of commands 250
Похожие устройства
- Zyxel ES-3124PWR Технические характеристики
- Zyxel ES-3124PWR Сводная таблица функций управляемых коммутаторов
- Zyxel ES-3124F Инструкция по эксплуатации
- Zyxel ES-3124F Справочник командного интерфейса
- Zyxel ES-3124F Технические характеристики
- Zyxel ES-3124F Сводная таблица функций управляемых коммутаторов
- Gainward GT630, GT630, 2048МБ, GDDR3, Retail Инструкция по эксплуатации
- Zyxel ES-3148 Инструкция по эксплуатации
- Gals et-190t 220v/12v 250вт Инструкция по эксплуатации
- Zyxel ES-3148 Справочник командного интерфейса
- Zyxel ES-3148 Технические характеристики
- Zyxel ES-3148 Сводная таблица функций управляемых коммутаторов
- Gals et-190l 220v/12v 150вт Инструкция по эксплуатации
- Gals et-190k 220v/12v 105вт Инструкция по эксплуатации
- Gals et-190e 220v/12v 60вт Инструкция по эксплуатации
- Gametrix kw-908 jet seat turbojet Инструкция по эксплуатации
- Gametrix kw-901 air Инструкция по эксплуатации
- Gardena powermax 42 e Инструкция по эксплуатации
- Gardena easycut 42 (08870-20.000.00) Инструкция по эксплуатации
- Gardena powermax 34 e Инструкция по эксплуатации