Zyxel GS2210-24HP [244/354] This example disables all snmp and icmp access to the

Содержание

• Cli reference guide p.1
• Default login details p.1
• Quick start guide p.1
• Ethernet switch series p.1
• Intelligent ethernet switches p.1
• It is recommended you use the web configurator to configure the switch p.2
• Important read carefully before use keep this guide for future reference p.2
• This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation p.3
• About this cli reference guide p.3
• Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings p.4
• Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations p.4
• Document conventions p.4
• Reference h m 9 p.6
• Reference a g 2 p.6
• Introduction p.6
• Contents overview p.6
• Reference n s 00 p.7
• Reference t z 79 p.8
• Appendices and index of commands 23 p.8
• Introduction p.9
• Telnet p.11
• How to access and use the cli p.11
• Accessing the cli p.11
• Hapter p.11
• Console port p.11
• Using shortcuts and getting help p.12
• The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again p.12
• Logging in p.12
• You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch p.13
• Saving your configuration p.13
• Logging out p.13
• Privilege level and command mode p.14
• Privilege levels for login accounts p.14
• Privilege levels for commands p.14
• Privilege levels p.14
• Hapter p.14
• Privilege levels for sessions p.15
• Command modes p.16
• Command modes for privilege levels 0 12 p.16
• Ethernet switch cli reference guide p.17
• Command modes for privilege levels 13 14 p.17
• Table 8 changing between command modes for privilege levels 13 14 p.17
• Table 7 command modes for privilege levels 13 14 and the types of commands in each one p.17
• If the session s privilege level is 13 14 the allowed commands are in one of several modes p.17
• Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another p.17
• Chapter 2 privilege level and command mode p.17
• Listing available commands p.18
• Initial setup p.19
• Hapter p.19
• Changing the enable password p.19
• Changing the administrator password p.19
• Changing the management ip address p.20
• Afterwards you have to use the new ip address to access the switch p.20
• Prohibiting concurrent logins p.20
• Changing the out of band management ip address p.20
• Ethernet switch cli reference guide p.21
• Chapter 3 initial setup p.21
• Use this command to look at the current operating configuration p.21
• Use this command to look at general system information about the switch p.21
• This is illustrated in the following example p.21
• See chapter 89 on page 311 for more information about these attributes p.21
• Looking at the operating configuration p.21
• Looking at basic system information p.21
• Reference a g p.22
• Aaa commands p.24
• Hapter p.24
• Command summary p.24
• Ethernet switch cli reference guide p.25
• Chapter 4 aaa commands p.25
• Table 11 aaa authorization command summary p.25
• Table 10 command summary aaa accounting continued p.25
• Ethernet switch cli reference guide p.26
• Table 11 aaa authorization command summary continued p.26
• Chapter 4 aaa commands p.26
• Hapter p.27
• Command summary p.27
• Arp commands p.27
• This example creates a static arp entry and shows the arp tahle on the switch p.28
• The following table describes the labels in this screen p.28
• Table 13 show ip arp p.28
• Ethernet switch cli reference guide p.28
• Command examples p.28
• Chapter 5 arp commands p.28
• Command summary p.29
• Arp inspection commands p.29
• Hapter p.29
• Table 18 command summary arp inspection vlan p.30
• Table 17 command summary interface arp inspection p.30
• Table 16 command summary arp inspection log p.30
• Ethernet switch cli reference guide p.30
• Chapter 6 arp inspection commands p.30
• This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet p.31
• This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet p.31
• The following table describes the labels in this screen p.31
• Table 19 show arp inspection filter p.31
• Ethernet switch cli reference guide p.31
• Command examples p.31
• Chapter 6 arp inspection commands p.31
• Table 20 show arp inspection log p.32
• Ethernet switch cli reference guide p.32
• Chapter 6 arp inspection commands p.32
• This example displays whether ports are trusted or untrusted ports for arp inspection p.32
• The following table describes the labels in this screen p.32
• The following table describes the labels in this screen p.33
• Table 21 show arp inspection interface port channel p.33
• Ethernet switch cli reference guide p.33
• Chapter 6 arp inspection commands p.33
• Hapter p.34
• Command summary p.34
• Command examples p.34
• Arp learning commands p.34
• Hapter p.35
• Command summary p.35
• Bandwidth commands p.35
• Ethernet switch cli reference guide p.36
• Command examples ingress p.36
• Chapter 8 bandwidth commands p.36
• This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 p.36
• The following section lists the commands for this feature p.36
• Table 24 command summary bandwidth control bandwidth limit p.36
• Note the sum of cirs cannot be greater than or equal to the uplink bandwidth p.36
• This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 p.37
• This example displays the bandwidth limits configured on port 1 p.37
• This example deactivates the outgoing bandwidth limit on port 1 p.37
• Ethernet switch cli reference guide p.37
• Command examples cir pir p.37
• Chapter 8 bandwidth commands p.37
• Hapter p.38
• Command summary p.38
• Broadcast storm commands p.38
• Command example bmstorm limit p.39
• Chapter 9 broadcast storm commands p.39
• 128 broadcast packets per second 256 multicast packets per second p.39
• This example enables broadcast storm control on the switch and configures port 1 to accept up to p.39
• This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps p.39
• Table 26 command summary storm control bmstorm limit and bstorm control continued p.39
• Ethernet switch cli reference guide p.39
• Command example broadcast limit multicast limit dlf limit p.39
• Ethernet switch cli reference guide p.40
• Chapter 9 broadcast storm commands p.40
• 64 dlf packets per second p.40
• How cfm works p.41
• Hapter p.41
• Cfm overview p.41
• Cfm commands p.41
• Cfm term definition p.42
• Table 27 cfm term definitions p.43
• Ethernet switch cli reference guide p.43
• Chapter 10 cfm commands p.43
• User input values p.43
• This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm p.43
• Table 28 cfm command user input values p.43
• The following section lists the commands for this feature p.44
• Table 29 cfm command summary p.44
• Ethernet switch cli reference guide p.44
• Command summary p.44
• Chapter 10 cfm commands p.44
• Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma p.45
• Table 29 cfm command summary continued p.45
• Ethernet switch cli reference guide p.45
• Chapter 10 cfm commands p.45
• Table 29 cfm command summary continued p.46
• Ethernet switch cli reference guide p.46
• Chapter 10 cfm commands p.46
• Command examples p.47
• Remember to save new settings using the write memory command p.47
• This example displays all neighbors mep port information in the mip ccm databases p.48
• This example starts a loopback test and displays the test result on the console p.48
• This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 p.48
• The following table describes the labels in this screen p.48
• Table 30 show cfm action mipccmdb p.48
• Ethernet switch cli reference guide p.48
• Chapter 10 cfm commands p.48
• This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets p.49
• This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets p.49
• This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs p.49
• Ethernet switch cli reference guide p.49
• Chapter 10 cfm commands p.49
• Hapter p.50
• Command summary p.50
• Classifier commands p.50
• The following table shows some other common ethernet types and the corresponding protocol number p.51
• Table 34 common ipv6 next header values p.51
• Table 33 common ipv4 protocol types and protocol numbers p.51
• Table 32 common ethernet types and protocol number p.51
• In an ipv6 packet header the next header field identifies the next level protocol the following table shows some common ipv6 next header values p.51
• In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list p.51
• Ethernet switch cli reference guide p.51
• Chapter 11 classifier commands p.51
• Command examples p.52
• Hapter p.53
• Command summary p.53
• Cluster commands p.53
• Table 36 show cluster member p.54
• Ethernet switch cli reference guide p.54
• Command examples p.54
• Chapter 12 cluster commands p.54
• This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster p.54
• The following table describes the labels in this screen p.54
• This example looks at the current status of the switch s cluster p.55
• This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member p.55
• The following table describes the labels in this screen p.55
• Table 37 show cluster p.55
• Logs out of the member s cli and returns to the cli of the manager p.55
• Ethernet switch cli reference guide p.55
• Chapter 12 cluster commands p.55
• Hapter p.56
• Date and time commands p.56
• Command summary p.56
• This example sets the current date current time time zone and daylight savings time p.57
• Table 39 time command summary continued p.57
• Ethernet switch cli reference guide p.57
• Command examples p.57
• Chapter 13 date and time commands p.57
• Table 40 timesync command summary p.57
• This example looks at the current time server settings p.58
• The following table describes the labels in this screen p.58
• Table 41 show timesync p.58
• Ethernet switch cli reference guide p.58
• Chapter 13 date and time commands p.58
• Pfc ets and dcbx standards p.59
• Overview p.59
• Hapter p.59
• Data center bridging commands p.59
• Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used p.60
• Ethernet switch cli reference guide p.60
• Command summary p.60
• Chapter 14 data center bridging commands p.60
• Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx p.60
• This section shows the commands and examples for pfc ets application priority and dcbx p.60
• The following table lists the commands for this feature p.60
• The following table describes user input values available in multiple commands for this feature p.60
• Table 43 priority flow control command summary p.60
• Table 42 dcb user input values p.60
• Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not p.61
• Table 43 priority flow control command summary continued p.61
• Pfc command examples p.61
• In the following example switch a is using switch b s configured priorities p.61
• In the following example switch a is not using switch b s configured priorities p.61
• In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a p.61
• Ethernet switch cli reference guide p.61
• Chapter 14 data center bridging commands p.61
• Ethernet switch cli reference guide p.63
• Create and name traffic class ids with weights for the non sp traffic type p.63
• Chapter 14 data center bridging commands p.63
• This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each p.63
• The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps p.63
• The following table lists the commands for this feature p.63
• Table 46 ets example traffic bandwidths p.63
• Table 45 ets example traffic classes p.63
• Table 44 ets command summary p.63
• Ets command example 1 p.63
• Use the application priority command to assign a priority to all fcoe traffic on a switch p.64
• This command shows traffic class p.64
• The following table lists the commands for this feature p.64
• Table 48 application priority command summary p.64
• Table 47 ets example priority traffic class id mapping p.64
• Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class p.64
• Ethernet switch cli reference guide p.64
• Chapter 14 data center bridging commands p.64
• Application priority p.64
• This is an application priority command example with pfc p.65
• This is an application priority command example with ets p.65
• Table 49 ets example 2 traffic classes p.65
• In the following example all fcoe traffic on the switch is assigned with priority 3 p.65
• Ethernet switch cli reference guide p.65
• Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 p.65
• Chapter 14 data center bridging commands p.65
• Application priority command examples p.65
• Application priority can then be used in conjunction with ets and pfc as shown in the following examples p.65
• Table 50 dcbx command summary p.66
• See chapter 37 on page 158 for more information on lldp p.66
• See chapter 37 on page 158 for lldp command examples p.66
• In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information p.66
• Ethernet switch cli reference guide p.66
• Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx p.66
• Chapter 14 data center bridging commands p.66
• This is a dcbx command example p.66
• The following table lists the commands for this feature p.66
• Hapter p.67
• Dhcp commands p.67
• Command summary p.67
• Table 54 dhcp smart relay command summary p.68
• Table 53 dhcp relay broadcast command summary p.68
• Table 52 dhcp relay command summary continued p.68
• Note you have to disable dhcp relay before you can enable dhcp smart relay p.68
• Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay p.68
• Ethernet switch cli reference guide p.68
• Chapter 15 dhcp commands p.68
• Ethernet switch cli reference guide p.69
• Command examples p.69
• Command p.69
• Chapter 15 dhcp commands p.69
• Table 55 dhcp server command summary p.69
• Table 54 dhcp smart relay command summary continued p.69
• In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains p.69
• Vlan1 vlan2 p.70
• This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled p.70
• In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 p.70
• Figure 4 example dhcp relay for two vlans p.70
• Figure 3 example global dhcp relay p.70
• Ethernet switch cli reference guide p.70
• Chapter 15 dhcp commands p.70
• 6 0 00 p.70
• Hapter p.72
• Dhcp snooping dhcp vlan commands p.72
• Command summary p.72
• Ethernet switch cli reference guide p.73
• Chapter 16 dhcp snooping dhcp vlan commands p.73
• Table 56 dhcp snooping command summary continued p.73
• Command examples p.74
• Ethernet switch cli reference guide p.75
• Displays dhcp snooping configuration details p.75
• Chapter 16 dhcp snooping dhcp vlan commands p.75
• Hapter p.76
• Diffserv commands p.76
• Command summary p.76
• Hapter p.77
• Display commands p.77
• Command summary p.77
• Hapter p.78
• Dvmrp overview p.78
• Dvmrp commands p.78
• Command summary p.78
• Chapter 19 dvmrp commands p.79
• Table 60 command summary dvmrp continued p.79
• In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b p.79
• Figure 6 dvmrp network example p.79
• Ethernet switch cli reference guide p.79
• Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch p.79
• Command examples p.79
• User input values p.80
• Hapter p.80
• Error disable recovery overview p.80
• Error disable and recovery commands p.80
• Cpu protection overview p.80
• Table 63 errdisable recovery command summary p.81
• Table 62 cpu protection command summary p.81
• Ethernet switch cli reference guide p.81
• Command summary p.81
• Chapter 20 error disable and recovery commands p.81
• The following section lists the commands for this feature p.81
• This example shows you how to configure the following p.82
• Table 63 errdisable recovery command summary continued p.82
• Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling p.82
• Ethernet switch cli reference guide p.82
• Command examples p.82
• Chapter 20 error disable and recovery commands p.82
• This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active p.83
• Ethernet switch cli reference guide p.83
• Chapter 20 error disable and recovery commands p.83
• Ieee 802 ah link layer ethernet oam implementation p.84
• Hapter p.84
• Ethernet oam commands p.84
• Command summary p.84
• Command examples p.85
• Chapter 21 ethernet oam commands p.85
• This example enables ethernet oam on port 7 and sets the mode to active p.85
• Table 64 ethernet oam command summary continued p.85
• Ethernet switch cli reference guide p.85
• This example performs ethernet oam discovery from port 7 p.86
• The following table describes the labels in this screen p.86
• Table 65 show ethernet oam discovery p.86
• Ethernet switch cli reference guide p.86
• Chapter 21 ethernet oam commands p.86
• This example looks at the number of oam packets transferred on port 1 p.87
• Table 65 show ethernet oam discovery continued p.87
• Ethernet switch cli reference guide p.87
• Chapter 21 ethernet oam commands p.87
• Table 67 show ethernet oam summary p.88
• Table 66 show ethernet oam statistics p.88
• Ethernet switch cli reference guide p.88
• Chapter 21 ethernet oam commands p.88
• This example looks at the configuration of ports on which oam is enabled p.88
• The following table describes the labels in this screen p.88
• Table 67 show ethernet oam summary continued p.89
• Ethernet switch cli reference guide p.89
• Chapter 21 ethernet oam commands p.89
• Hapter p.90
• External alarm commands p.90
• Command summary p.90
• This example configures and shows the name and status of the external alarm s p.91
• Ethernet switch cli reference guide p.91
• Command examples p.91
• Chapter 22 external alarm commands p.91
• Hapter p.92
• Garp overview p.92
• Garp commands p.92
• Command summary p.92
• In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds p.93
• Ethernet switch cli reference guide p.93
• Command examples p.93
• Chapter 23 garp commands p.93
• Hapter p.94
• Green ethernet overview p.94
• Green ethernet commands p.94
• The following section lists the commands for this feature p.95
• Table 70 green ethernet command summary p.95
• In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters p.95
• Green ethernet command example p.95
• Ethernet switch cli reference guide p.95
• Command summary p.95
• Chapter 24 green ethernet commands p.95
• Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled p.95
• Auto power down p.96
• Short reach p.96
• Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled p.96
• Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled p.96
• Ethernet switch cli reference guide p.96
• Chapter 24 green ethernet commands p.96
• The following example shows the display for short reach if the switch supports short reach per port and showing the status p.97
• The following example shows how to configure short reach if the switch supports short reach per port p.97
• Ethernet switch cli reference guide p.97
• Chapter 24 green ethernet commands p.97
• Hapter p.98
• Gvrp commands p.98
• Command summary p.98
• Command examples p.98
• Reference h m p.99
• Hapter p.101
• Command summary p.101
• Https server commands p.101
• This example shows the current https settings statistics and sessions p.102
• The following table describes the labels in this screen p.102
• Table 73 show https p.102
• Ethernet switch cli reference guide p.102
• Command examples p.102
• Chapter 26 https server commands p.102
• This example shows the current https sessions p.103
• The following table describes the labels in this screen p.103
• Table 74 show https session p.103
• Table 73 show https continued p.103
• Ethernet switch cli reference guide p.103
• Chapter 26 https server commands p.103
• Table 74 show https session continued p.104
• Ethernet switch cli reference guide p.104
• Chapter 26 https server commands p.104
• Ieee 802 x authentication commands p.105
• Hapter p.105
• Guest vlan overview p.105
• Command summary p.105
• This example configures the switch in the following ways p.106
• Table 75 port access authenticator command summary continued p.106
• Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch p.106
• Ethernet switch cli reference guide p.106
• Command examples p.106
• Chapter 27 ieee 802 x authentication commands p.106
• Igmp overview p.108
• Igmp and multicasting commands p.108
• Hapter p.108
• Command summary p.108
• Command examples p.109
• Chapter 28 igmp and multicasting commands p.109
• This example configures igmp on the switch with the following settings p.109
• Table 77 ipmc command summary p.109
• Table 76 igmp command summary continued p.109
• Sets the switch to flood unknown multicast frames sets the switch to non querier mode p.109
• Ethernet switch cli reference guide p.109
• Igmp snooping commands p.111
• Hapter p.111
• Command summary p.111
• Table 79 igmp snooping command summary continued p.112
• Ethernet switch cli reference guide p.112
• Chapter 29 igmp snooping commands p.112
• Table 81 interface igmp command summary p.113
• Table 80 igmp snooping vlan command summary p.113
• Table 79 igmp snooping command summary continued p.113
• Ethernet switch cli reference guide p.113
• Chapter 29 igmp snooping commands p.113
• Table 81 interface igmp command summary continued p.114
• Ethernet switch cli reference guide p.114
• Chapter 29 igmp snooping commands p.114
• Value to 30 seconds and sets the switch to drop packets from unknown multicast groups p.115
• This example enables igmp snooping on the switch sets the p.115
• Table 81 interface igmp command summary continued p.115
• Host timeou p.115
• Ethernet switch cli reference guide p.115
• Command examples p.115
• Chapter 29 igmp snooping commands p.115
• This example shows the current multicast groups on the switch p.116
• This example limits the number of multicast groups on port 1 to 5 p.116
• The following table describes the labels in this screen p.116
• Table 82 show multicast p.116
• Ethernet switch cli reference guide p.116
• Chapter 29 igmp snooping commands p.116
• This example shows the current multicast vlan on the switch p.116
• This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 p.117
• Ethernet switch cli reference guide p.117
• Chapter 29 igmp snooping commands p.117
• Igmp filtering commands p.118
• Hapter p.118
• Command summary p.118
• This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 p.119
• Ethernet switch cli reference guide p.119
• Command examples p.119
• Chapter 30 igmp filtering commands p.119
• Interface commands p.120
• Hapter p.120
• Command summary p.120
• Chapter 31 interface commands p.121
• 10000 or 4000 p.121
• Table 84 interface command summary continued p.121
• Ethernet switch cli reference guide p.121
• This example looks at the current status of port 1 p.122
• The following table describes the labels in this screen p.122
• Table 85 show interfaces p.122
• Ethernet switch cli reference guide p.122
• Command examples p.122
• Chapter 31 interface commands p.122
• Table 85 show interfaces continued p.123
• Ethernet switch cli reference guide p.123
• Chapter 31 interface commands p.123
• Table 85 show interfaces continued p.124
• Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode p.124
• Sets the default port vid to 200 2 sets these ports to accept only tagged frames p.124
• Ethernet switch cli reference guide p.124
• Chapter 31 interface commands p.124
• This example configures ports 1 5 in the following ways p.124
• This example configures ports 1 3 4 and 5 in the following ways p.124
• Interface route domain mode p.125
• Hapter p.125
• Command summary p.125
• Command examples p.125
• Ip commands p.126
• Hapter p.126
• Command summary p.126
• This example shows the tcp statistics and listener ports see rfc 1213 for more information p.127
• The following table describes the labels in this screen p.127
• Table 89 show ip tcp p.127
• Table 88 tcp and udp command summary continued p.127
• Ethernet switch cli reference guide p.127
• Command examples p.127
• Chapter 33 ip commands p.127
• Table 89 show ip tcp continued p.128
• Ethernet switch cli reference guide p.128
• Chapter 33 ip commands p.128
• This example shows the udp statistics and listener ports see rfc 1213 for more information p.129
• The following table describes the labels in this screen p.129
• Table 90 show ip udp p.129
• Table 89 show ip tcp continued p.129
• Ethernet switch cli reference guide p.129
• Chapter 33 ip commands p.129
• Ip source binding commands p.130
• Hapter p.130
• Command summary p.130
• Command examples p.130
• Table 92 show ip source binding p.131
• Ethernet switch cli reference guide p.131
• Chapter 34 ip source binding commands p.131
• The following table describes the labels in this screen p.131
• Ipv6 overview p.132
• Ipv6 commands p.132
• Ipv6 addressing p.132
• Hapter p.132
• Ipv6 terms p.133
• The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group p.134
• Table 96 reserved multicast address p.134
• Table 95 predefined multicast address p.134
• Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses p.134
• Loopback p.134
• Ethernet switch cli reference guide p.134
• Chapter 35 ipv6 commands p.134
• A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 p.134
• Eui 64 p.135
• Chapter 35 ipv6 commands p.139
• The following table describes user input values available in multiple commands for this feature p.139
• The following section lists the commands for this feature p.139
• Table 98 ipv6 address command summary p.139
• Table 97 ipv6 user input values p.139
• Report p.139
• In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports p.139
• Ethernet switch cli reference guide p.139
• Command summary p.139
• Table 98 ipv6 address command summary continued p.140
• Note make sure an ipv6 router is available in the vlan network before using this command on the switch p.140
• Ethernet switch cli reference guide p.140
• Chapter 35 ipv6 commands p.140
• Table 99 ipv6 dhcp relay command summary p.141
• Table 98 ipv6 address command summary continued p.141
• Ethernet switch cli reference guide p.141
• Chapter 35 ipv6 commands p.141
• Table 101 ipv6 mld snooping proxy command summary p.142
• Table 100 ipv6 icmp and ping6 command summary p.142
• Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds p.142
• Ethernet switch cli reference guide p.142
• Chapter 35 ipv6 commands p.142
• Table 101 ipv6 mld snooping proxy command summary continued p.143
• Ethernet switch cli reference guide p.143
• Chapter 35 ipv6 commands p.143
• Table 101 ipv6 mld snooping proxy command summary continued p.144
• Ethernet switch cli reference guide p.144
• Chapter 35 ipv6 commands p.144
• Table 101 ipv6 mld snooping proxy command summary continued p.145
• Ethernet switch cli reference guide p.145
• Chapter 35 ipv6 commands p.145
• Ethernet switch cli reference guide p.146
• Chapter 35 ipv6 commands p.146
• Table 102 ipv6 nd command summary p.146
• Table 103 ipv6 neighbor command summary p.147
• Table 102 ipv6 nd command summary continued p.147
• Ethernet switch cli reference guide p.147
• Chapter 35 ipv6 commands p.147
• This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface p.148
• This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan p.148
• Table 103 ipv6 neighbor command summary continued p.148
• Ethernet switch cli reference guide p.148
• Command examples p.148
• Chapter 35 ipv6 commands p.148
• This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch p.149
• There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command p.149
• Ethernet switch cli reference guide p.149
• Chapter 35 ipv6 commands p.149
• Chapter 35 ipv6 commands p.150
• This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings p.150
• The following table describes the labels in this screen p.150
• Table 104 show ipv6 neighbor p.150
• Ethernet switch cli reference guide p.150
• This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 p.151
• Example enabling ipv6 on windows xp 2003 p.151
• Ethernet switch cli reference guide p.151
• Chapter 35 ipv6 commands p.151
• By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses p.151
• This example shows you how to access the switch using http on windows xp p.152
• Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to p.152
• It s recommended to use internet explorer 7 or firefox to access the switch s web gui p.152
• Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer p.152
• How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access p.152
• Example http accessing the switch using ipv6 p.152
• Command summary p.155
• Layer 2 protocol tunnel l2pt commands p.155
• Hapter p.155
• This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port p.156
• Table 106 l2pt command summary continued p.156
• Ethernet switch cli reference guide p.156
• Command examples p.156
• Chapter 36 layer 2 protocol tunnel l2pt commands p.156
• This example sets l2pt mode to tunnel for port 4 p.157
• This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port p.157
• This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped p.157
• Ethernet switch cli reference guide p.157
• Chapter 36 layer 2 protocol tunnel l2pt commands p.157
• Lldp overview p.158
• Link layer discovery protocol lldp commands p.158
• Hapter p.158
• Chapter 37 link layer discovery protocol lldp commands p.159
• The following section lists the commands for this feature p.159
• Table 107 lldp command summary p.159
• Lldp med link layer discovery protocol for media endpoint devices is an enhanced extension to lldp especially for voice applications you can use lldp med to advertise location based information of emergency calls and or network policies for voice video streaming p.159
• Ethernet switch cli reference guide p.159
• Command summary p.159
• Table 107 lldp command summary continued p.160
• Ethernet switch cli reference guide p.160
• Chapter 37 link layer discovery protocol lldp commands p.160
• Table 107 lldp command summary continued p.161
• Ethernet switch cli reference guide p.161
• Chapter 37 link layer discovery protocol lldp commands p.161
• Table 107 lldp command summary continued p.162
• Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out p.162
• Ethernet switch cli reference guide p.162
• Chapter 37 link layer discovery protocol lldp commands p.162
• Chapter 37 link layer discovery protocol lldp commands p.163
• This example shows global switch lldp settings p.163
• This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch p.163
• See chapter 14 on page 59 for dcb configuration and examples p.163
• Ethernet switch cli reference guide p.163
• Command examples p.163
• This example shows lldp settings on a port p.164
• The following table describes the labels in this screen p.164
• Table 109 p.164
• Table 108 p.164
• Switch lldp settings p.164
• Lldp settings on a port p.164
• Ethernet switch cli reference guide p.164
• Chapter 37 link layer discovery protocol lldp commands p.164
• Ethernet switch cli reference guide p.165
• Continued p.165
• Chapter 37 link layer discovery protocol lldp commands p.165
• This example shows lldp statistics on a port p.165
• This example shows global switch lldp statistics p.165
• The following table describes the labels in this screen p.165
• Table 110 p.165
• Table 109 p.165
• Switch lldp statistics p.165
• Lldp settings on a por p.165
• This example shows local switch the switch you re accessing lldp information p.166
• The following table describes the labels in this screen p.166
• Table 112 p.166
• Table 111 p.166
• Local lldp information p.166
• Lldp statistics on a port p.166
• Ethernet switch cli reference guide p.166
• Chapter 37 link layer discovery protocol lldp commands p.166
• Chapter 37 link layer discovery protocol lldp commands p.167
• This example shows local switch the switch you re accessing lldp information on a port p.167
• The following table describes the labels in this screen p.167
• Table 113 p.167
• Local switch lldp information on a port p.167
• Ethernet switch cli reference guide p.167
• This example shows remote switch the switch connected to the port on the switch you re accessing lldp information p.168
• The following table describes the labels in this screen p.168
• Table 114 p.168
• Table 113 p.168
• Remote switch lldp information p.168
• Local switch lldp information on a por p.168
• Ethernet switch cli reference guide p.168
• Continued p.168
• Chapter 37 link layer discovery protocol lldp commands p.168
• Continued p.169
• Chapter 37 link layer discovery protocol lldp commands p.169
• Table 114 p.169
• Remote switch lldp informatio p.169
• Ethernet switch cli reference guide p.169
• Load sharing overview p.170
• Load sharing commands p.170
• Hapter p.170
• Command summary p.170
• This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet p.171
• Ethernet switch cli reference guide p.171
• Command examples p.171
• Chapter 38 load sharing commands p.171
• Logging commands p.172
• Hapter p.172
• Command summary p.172
• Command examples p.172
• Command summary p.173
• Password encryption p.173
• Login account commands p.173
• Hapter p.173
• This example creates a new user user2 with privilege 13 p.174
• Ethernet switch cli reference guide p.174
• Command examples p.174
• Chapter 40 login account commands p.174
• Loopguard commands p.175
• Hapter p.175
• Command summary p.175
• This example enables loopguard on ports 1 3 p.176
• The following table describes the labels in this screen p.176
• Table 118 show loopguard p.176
• Ethernet switch cli reference guide p.176
• Command examples p.176
• Chapter 41 loopguard commands p.176
• Mac address commands p.177
• Hapter p.177
• Command summary p.177
• This example shows the current mac address table p.178
• The following table describes the labels in this screen p.178
• Table 120 show mac address table p.178
• Table 119 mac mac aging time and mac flush command summary continued p.178
• Ethernet switch cli reference guide p.178
• Command examples p.178
• Chapter 42 mac address commands p.178
• Mac authentication overview p.179
• Mac authentication commands p.179
• Hapter p.179
• Command summary p.179
• Command examples p.180
• Chapter 43 mac authentication commands p.180
• This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed p.180
• Table 121 mac authentication command summary continued p.180
• Ethernet switch cli reference guide p.180
• Mac filter commands p.181
• Hapter p.181
• Command summary p.181
• Command example filter source p.182
• Command example p.182
• Mac forward commands p.183
• Hapter p.183
• Command summary p.183
• Mac pinning commands p.184
• Hapter p.184
• Command summary p.184
• Command examples p.185
• Chapter 46 mac pinning commands p.185
• This example enables mac pinning on the switch and port 3 it also shows the mac pinning status p.185
• Ethernet switch cli reference guide p.185
• Mirror commands p.186
• Hapter p.186
• The following section lists the commands for this feature p.187
• Table 128 mirror filter command summary p.187
• Table 127 mirror command summary p.187
• Ethernet switch cli reference guide p.187
• Command summary p.187
• Chapter 47 mirror commands p.187
• This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 p.188
• Table 129 rmirror command summary p.188
• Ethernet switch cli reference guide p.188
• Command examples p.188
• Chapter 47 mirror commands p.188
• Chapter 47 mirror commands p.189
• This example displays the mirror settings of the switch after you configured in the example above p.189
• This example creates an rmirror vlan with a vlan id of 200 on the switch sets port 6 as the reflector port and sets the priority of mirrored traffic to 3 in this rmirror vlan when the switch is the source device this example also specifies the ports 4 and 5 on which traffic will be mirrored and shows the rmirror vlan settings p.189
• Ethernet switch cli reference guide p.189
• Mrstp overview p.190
• Mrstp commands p.190
• Hapter p.190
• Command summary p.190
• This example configures mrstp in the following way p.191
• Table 130 command summary mrstp p.191
• Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu p.191
• In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch p.191
• Ethernet switch cli reference guide p.191
• Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 p.191
• Command examples p.191
• Chapter 48 mrstp commands p.191
• Command summary p.192
• Mstp commands p.192
• Hapter p.192
• This example shows the current mstp configuration p.193
• Table 132 mstp instance command summary p.193
• Ethernet switch cli reference guide p.193
• Command examples p.193
• Chapter 49 mstp commands p.193
• This example shows the current cist configuration mstp instance 0 p.194
• The following table describes the labels in this screen p.194
• Table 133 show mstp p.194
• Ethernet switch cli reference guide p.194
• Chapter 49 mstp commands p.194
• The following table describes the labels in this screen p.195
• Table 134 show mstp instance p.195
• Ethernet switch cli reference guide p.195
• Chapter 49 mstp commands p.195
• Multiple login commands p.197
• Hapter p.197
• Command summary p.197
• Command examples p.197
• Mvr commands p.198
• Hapter p.198
• Command summary p.198
• Command examples p.199
• Reference n s p.200
• Ospf overview p.202
• Ospf commands p.202
• Hapter p.202
• Command summary p.202
• Table 138 ospf command summary continued p.203
• Ethernet switch cli reference guide p.203
• Chapter 52 ospf commands p.203
• Table 138 ospf command summary continued p.204
• Note you cannot set two routing protocols to have the same administrative distance p.204
• Ethernet switch cli reference guide p.204
• Chapter 52 ospf commands p.204
• Table 138 ospf command summary continued p.205
• In this example the switch a is an area border router abr in an ospf network p.205
• Figure 7 ospf network example p.205
• Ethernet switch cli reference guide p.205
• Command examples p.205
• Chapter 52 ospf commands p.205
• This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication p.206
• This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the p.206
• Is also set to 1 as this router should participate in router elections p.206
• In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b p.206
• Ethernet switch cli reference guide p.207
• Chapter 52 ospf commands p.207
• This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries p.207
• From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries p.207
• Password encryption p.208
• Password commands p.208
• Hapter p.208
• Command summary p.208
• Command examples p.209
• Poe commands p.210
• Hapter p.210
• Command summary p.210
• This example sets the maximum amount of power allowed for port 2 to 7500 mw p.211
• This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 p.211
• Table 140 pwr command summary continued p.211
• Ethernet switch cli reference guide p.211
• Command examples p.211
• Chapter 54 poe commands p.211
• This example shows the current status and configuration of power over ethernet p.212
• The following table describes the labels in this screen p.212
• Table 141 show pwr p.212
• Ethernet switch cli reference guide p.212
• Chapter 54 poe commands p.212
• Table 141 show pwr continued p.213
• Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w p.213
• Note if the management mode is set to consumption this field shows na p.213
• Ethernet switch cli reference guide p.213
• Chapter 54 poe commands p.213
• Policy commands p.214
• Hapter p.214
• Command summary p.214
• Table 142 policy command summary p.215
• Ethernet switch cli reference guide p.215
• Chapter 55 policy commands p.215
• This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 50 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets p.216
• Table 142 policy command summary p.216
• Ethernet switch cli reference guide p.216
• Command examples p.216
• Chapter 55 policy commands p.216
• This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 50 this policy forwards class1 packets to port 8 p.217
• Ethernet switch cli reference guide p.217
• Chapter 55 policy commands p.217
• Policy route commands p.218
• Hapter p.218
• Command summary p.218
• Ethernet switch cli reference guide p.219
• Command examples p.219
• Chapter 56 policy route commands p.219
• By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the p.219
• 9 it then shows the policy routing information p.219
• To forward packets that match the layer 3 classifier to the gateway with ip address p.219
• Port security commands p.220
• Hapter p.220
• Command summary p.220
• This example enables port security on port 1 and limits the number of learned mac addresses to 5 p.221
• Table 144 port security command summary continued p.221
• Ethernet switch cli reference guide p.221
• Command examples p.221
• Chapter 57 port security commands p.221
• Port based vlan commands p.222
• Hapter p.222
• Command summary p.222
• Command examples p.222
• Pppoe ia commands p.223
• Port state p.223
• Hapter p.223
• Pppoe intermediate agent overview p.223
• The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port p.224
• The following section lists the commands for this feature p.224
• Table 146 pppoe intermediate agent command summary p.224
• Ethernet switch cli reference guide p.224
• Command summary p.224
• Chapter 59 pppoe ia commands p.224
• Table 146 pppoe intermediate agent command summary continued p.225
• Ethernet switch cli reference guide p.225
• Chapter 59 pppoe ia commands p.225
• This is an example of how to enable and disable pppoe ia on the switch p.226
• This is an example of how to enable and configure pppoe ia for vlans p.226
• This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried p.226
• Ethernet switch cli reference guide p.226
• Command examples p.226
• Chapter 59 pppoe ia commands p.226
• This is an example of how to set a pppoe ia trust port p.226
• Vendor specific tag examples p.227
• This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 p.227
• The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 p.227
• Similarly we can let the circuit id carry the information which we configure p.227
• Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio p.227
• Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default p.228
• Ethernet switch cli reference guide p.228
• Chapter 59 pppoe ia commands p.228
• Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting p.228
• Private vlan commands p.229
• Legacy pvlan overview p.229
• Hapter p.229
• That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the p.230
• Legacy pvlan command summary p.230
• Command examples p.230
• This example sets a private vlan rule p.230
• The following section lists the commands for this feature p.230
• This example sets a private vlan rule p.231
• The following section lists the commands for this feature p.231
• That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the p.231
• Private vlan p.231
• Command summary p.231
• This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 102 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch p.232
• Table 148 private vlan command summary continued p.232
• Ethernet switch cli reference guide p.232
• Command example p.232
• Chapter 60 private vlan commands p.232
• Ethernet switch cli reference guide p.233
• Chapter 60 private vlan commands p.233
• Hapter p.234
• Command summary p.234
• Protocol based vlan overview p.234
• Protocol based vlan commands p.234
• This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 p.235
• Table 149 protocol based vlan command summary continued p.235
• Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed p.235
• Ethernet switch cli reference guide p.235
• Command examples p.235
• Chapter 61 protocol based vlan commands p.235
• Queuing overview p.236
• Queuing commands p.236
• Hapter p.236
• Note some models only support 4 queues p.237
• For example using the default setting q0 on port 1 gets a guaranteed bandwidth of p.237
• Ethernet switch cli reference guide p.237
• Command summary port by port configuration p.237
• Chapter 62 queuing commands p.237
• Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues p.237
• Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows p.237
• The following section lists the commands for this feature p.237
• Table 150 queuing command summary p.237
• This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 p.238
• Table 150 queuing command summary continued p.238
• Ethernet switch cli reference guide p.238
• Command examples port by port configuration p.238
• Chapter 62 queuing commands p.238
• The following section lists the commands for this feature p.239
• Table 151 queueing command summary p.239
• Note some models only support 4 queues p.239
• Ethernet switch cli reference guide p.239
• Command summary system wide configuration p.239
• Command examples system wide p.239
• Chapter 62 queuing commands p.239
• This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 p.239
• This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 p.239
• Radius commands p.240
• Hapter p.240
• Command summary p.240
• This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server p.241
• Table 153 radius accounting command summary continued p.241
• Ethernet switch cli reference guide p.241
• Command examples p.241
• Chapter 63 radius commands p.241
• Remote management commands p.242
• Hapter p.242
• Command summary p.242
• Ethernet switch cli reference guide p.243
• Command examples p.243
• Chapter 64 remote management commands p.243
• This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all p.243
• Table 156 service control command summary continued p.243
• This example disables all snmp and icmp access to the p.244
• Ethernet switch cli reference guide p.244
• Chapter 64 remote management commands p.244
• Rip overview p.245
• Rip commands p.245
• Hapter p.245
• Command summary p.245
• This example p.246
• Table 157 rip command summary continued p.246
• Note you cannot set two routing protocols to have the same administrative distance p.246
• Ethernet switch cli reference guide p.246
• Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain p.246
• Command examples p.246
• Chapter 65 rip commands p.246
• User input values p.247
• Rmon overview p.247
• Hapter p.247
• The following section lists the commands for this feature p.248
• Table 160 rmon command summary p.248
• Ethernet switch cli reference guide p.248
• Command summary p.248
• Chapter 66 rmon p.248
• This example shows how to configure the switch s action when an rmon event using the following settings p.249
• This example also shows how to display the setting results p.249
• Syntax p.249
• Rmon event command example p.249
• Rmon alarm command example p.249
• Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test p.249
• Ethernet switch cli reference guide p.249
• Chapter 66 rmon p.249
• This example shows you how to configure an alarm using the following settings p.250
• Ethernet switch cli reference guide p.250
• Chapter 66 rmon p.250
• Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 66 on page 249 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 66 on page 249 who will handle this alarm operator p.250
• This example shows how to configure the settings to display current network traffic statistics using the following settings p.251
• This example also shows how to display the setting results p.251
• This example also shows how to display the data collection results p.251
• The ethernet statistics table entry s index number 1 collecting data samples from which port 12 p.251
• Rmon statistics command example p.251
• Ethernet switch cli reference guide p.251
• Chapter 66 rmon p.251
• This example also shows how to display the data collection results p.252
• The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 p.252
• Rmon history command example p.252
• Ethernet switch cli reference guide p.252
• Chapter 66 rmon p.252
• This example shows how to configure the settings to display historical network traffic statisticsusing the following settings p.252
• Switch configuration file p.253
• Running configuration commands p.253
• Hapter p.253
• Command summary p.253
• This example resets the switch to the factory default settings p.254
• This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 p.254
• The following section lists the commands for this feature p.254
• Table 162 running config command summary p.254
• Ethernet switch cli reference guide p.254
• Command examples p.254
• Chapter 67 running configuration commands p.254
• Sflow overview p.255
• Hapter p.255
• Command summary p.255
• Chapter 68 sflow p.256
• This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports p.256
• Table 163 sflow command summary continued p.256
• Ethernet switch cli reference guide p.256
• Command examples p.256
• Smart isolation overview p.257
• Smart isolation commands p.257
• Hapter p.257
• The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet p.258
• Command summary p.258
• This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled p.259
• The following table describes the labels in this screen p.259
• Table 165 show smart isolation p.259
• Ethernet switch cli reference guide p.259
• Command examples p.259
• Chapter 69 smart isolation commands p.259
• Chapter 69 smart isolation commands p.260
• Table 165 show smart isolation continued p.260
• Ethernet switch cli reference guide p.260
• Snmp server commands p.261
• Hapter p.261
• Command summary p.261
• Table 167 snmp server command summary continued p.262
• Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch p.262
• Ethernet switch cli reference guide p.262
• Chapter 70 snmp server commands p.262
• Table 168 snmp server trap destination enable traps command summary p.263
• Ethernet switch cli reference guide p.263
• Chapter 70 snmp server commands p.263
• Table 168 snmp server trap destination enable traps command summary continued p.264
• Ethernet switch cli reference guide p.264
• Command examples p.264
• Chapter 70 snmp server commands p.264
• This example shows you how to display the snmp information on the switch p.264
• This example shows you how to display all snmp user information on the switch p.264
• This example sets the switch to not send the linkup and linkdown traps received on port 3 to the snmp manager p.264
• Stp and rstp commands p.265
• Hapter p.265
• Command summary p.265
• This example configures stp in the following ways p.266
• Table 169 spanning tree command summary continued p.266
• Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu p.266
• Ethernet switch cli reference guide p.266
• Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 p.266
• Command examples p.266
• Chapter 71 stp and rstp commands p.266
• Table 170 show spanning tree config p.267
• Ethernet switch cli reference guide p.267
• Chapter 71 stp and rstp commands p.267
• This example shows the current stp settings p.267
• The following table describes the labels in this screen p.267
• Table 170 show spanning tree config continued p.268
• In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch p.268
• Ethernet switch cli reference guide p.268
• Chapter 71 stp and rstp commands p.268
• Ssh commands p.269
• Hapter p.269
• Command summary p.269
• Command examples p.269
• This example shows the general ssh settings p.270
• The following table describes the labels in this screen p.270
• Table 172 show ssh p.270
• Ethernet switch cli reference guide p.270
• Chapter 72 ssh commands p.270
• Command summary p.271
• Static multicast commands p.271
• Hapter p.271
• Command examples p.272
• Static route commands p.273
• Hapter p.273
• Command summary p.273
• You can create this static route if it is inactive however p.274
• This example shows the current routing table p.274
• The following table describes the labels in this screen p.274
• Table 175 show ip route p.274
• Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses p.274
• For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 p.274
• Ethernet switch cli reference guide p.274
• Command examples p.274
• Chapter 74 static route commands p.274
• Chapter 74 static route commands p.275
• You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 p.275
• Ethernet switch cli reference guide p.275
• Command summary p.276
• Subnet based vlan overview p.276
• Subnet based vlan commands p.276
• Hapter p.276
• This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 p.277
• Table 176 subnet based vlan command summary continued p.277
• Ethernet switch cli reference guide p.277
• Command examples p.277
• Chapter 75 subnet based vlan commands p.277
• Syslog commands p.278
• Hapter p.278
• Command summary p.278
• Reference t z p.279
• Command summary p.281
• Tacacs commands p.281
• Hapter p.281
• Tech support overview p.282
• Tech support commands p.282
• Hapter p.282
• Command summary p.282
• This example sets the mbuf threshold to 60 checks the mbuf threshold setting and generates the mbuf log report p.283
• Ethernet switch cli reference guide p.283
• Command examples p.283
• Chapter 78 tech support commands p.283
• This example sets the cpu threshold to 80 and time to 5 then uses the command show logging to see the log p.284
• Ethernet switch cli reference guide p.284
• Chapter 78 tech support commands p.284
• Tftp commands p.285
• Hapter p.285
• Command summary p.285
• Trunk commands p.286
• Hapter p.286
• Command summary p.286
• This example looks at the current trunks p.287
• This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 p.287
• This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation p.287
• The following table describes the labels in this screen p.287
• Table 187 show trunk p.287
• Table 186 lacp command summary p.287
• Ethernet switch cli reference guide p.287
• Command examples p.287
• Chapter 80 trunk commands p.287
• Table 188 show lacp p.288
• Table 187 show trunk continued p.288
• Ethernet switch cli reference guide p.288
• Chapter 80 trunk commands p.288
• This example shows the current lacp settings p.288
• The following table describes the labels in this screen p.288
• Trtcm overview p.289
• Trtcm commands p.289
• Hapter p.289
• Command summary p.289
• This example activates trtcm on the switch with the following settings p.290
• Table 189 trtcm command summary continued p.290
• Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets p.290
• Ethernet switch cli reference guide p.290
• Command examples p.290
• Chapter 81 trtcm commands p.290
• This examples activates trtcm on the switch with the following settings p.291
• Ethernet switch cli reference guide p.291
• Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example p.291
• Chapter 81 trtcm commands p.291
• Vlan overview p.292
• Vlan configuration overview p.292
• Vlan commands p.292
• Hapter p.292
• Vlan ingress checking implementation differs across switch models p.293
• The following section lists the commands for this feature p.293
• The following section lists the commands for the ingress checking feature p.293
• See chapter 31 on page 120 for interface port channel commands p.293
• Command summary p.293
• This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 p.294
• Table 192 ingress check command summary p.294
• Table 191 vlan1q ingress check command summary p.294
• Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode p.294
• Ethernet switch cli reference guide p.294
• Command examples p.294
• Chapter 82 vlan commands p.294
• This example shows the vlan table p.294
• This example deletes entry 2 in the static vlan table p.294
• Chapter 82 vlan commands p.295
• This example enables ingress checking on ports 1 5 p.295
• The following table describes the labels in this screen p.295
• Table 193 show vlan p.295
• Ethernet switch cli reference guide p.295
• This example displays concurrent incoming packet statistics for vlan 1 p.296
• The following table describes the labels in this screen p.296
• Table 194 show vlan counters p.296
• Ethernet switch cli reference guide p.296
• Chapter 82 vlan commands p.296
• Table 194 show vlan counters continued p.297
• Ethernet switch cli reference guide p.297
• Chapter 82 vlan commands p.297
• Command summary p.298
• Vlan ip commands p.298
• Ip interfaces overview p.298
• Hapter p.298
• Table 195 vlan ip address command summary continued p.299
• See section 3 on page 20 for an example of how to configure a vlan management ip addressusing ipv4 see chapter 35 on page 139 for ipv6 vlan commands p.299
• Ethernet switch cli reference guide p.299
• Command examples p.299
• Chapter 83 vlan ip commands p.299
• Vlan mapping commands p.300
• Hapter p.300
• Command summary p.300
• This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 p.301
• This example enables vlan mapping on port 4 p.301
• Ethernet switch cli reference guide p.301
• Command examples p.301
• Chapter 84 vlan mapping commands p.301
• Vlan port isolation commands p.302
• Hapter p.302
• Command summary p.302
• Vlan stacking commands p.303
• Hapter p.303
• Command summary p.303
• Table 198 vlan stacking command summary continued p.304
• In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network p.304
• Figure 10 example vlan stacking p.304
• Ethernet switch cli reference guide p.304
• Customer b customer b p.304
• Customer a customer a p.304
• Command examples p.304
• Chapter 86 vlan stacking commands p.304
• B 48 24 p.304
• A 37 24 p.304
• Vlan 24 vlan 24 p.304
• This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 p.305
• Ethernet switch cli reference guide p.305
• Chapter 86 vlan stacking commands p.305
• Vlan trunking commands p.306
• Hapter p.306
• Command summary p.306
• Vrrp overview p.307
• Vrrp commands p.307
• Hapter p.307
• Command summary p.307
• Figure 11 example vrrp p.308
• Ethernet switch cli reference guide p.308
• Ethernet p.308
• Command examples p.308
• Chapter 88 vrrp commands p.308
• The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router p.308
• Table 200 vrrp command summary continued p.308
• This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 308 p.309
• Ethernet switch cli reference guide p.309
• Chapter 88 vrrp commands p.309
• This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 308 p.310
• Ethernet switch cli reference guide p.310
• Chapter 88 vrrp commands p.310
• Hapter p.311
• Command summary p.311
• Additional commands p.311
• Table 202 command summary additional enable mode continued p.312
• Ethernet switch cli reference guide p.312
• Chapter 89 additional commands p.312
• Ethernet switch cli reference guide p.313
• Chapter 89 additional commands p.313
• Table 203 command summary additional configure mode p.313
• Table 202 command summary additional enable mode continued p.313
• This example checks the cable pairs on ports 1 and 4 p.314
• The following table describes the labels in this screen p.314
• Table 204 cable diagnostics p.314
• Ethernet switch cli reference guide p.314
• Command examples p.314
• Chapter 89 additional commands p.314
• This example shows the current status of the various alarms in the switch p.315
• This example sends ping requests to an ethernet device with ip address 172 6 7 54 p.315
• The following table describes the labels in this screen p.315
• Table 206 show alarm status p.315
• Table 205 ping p.315
• Ethernet switch cli reference guide p.315
• Chapter 89 additional commands p.315
• Chapter 89 additional commands p.316
• This example shows the current and recent cpu utilization p.316
• The following table describes the labels in this screen p.316
• Table 207 show cpu utilization p.316
• Table 206 show alarm status continued p.316
• Ethernet switch cli reference guide p.316
• This example looks at the current sensor readings from various places in the hardware the display for your switch may be different p.317
• The following table describes the labels in this screen p.317
• Table 208 show hardware monitor p.317
• Ethernet switch cli reference guide p.317
• Chapter 89 additional commands p.317
• This example displays multicast vlan configuration on the p.318
• Table 208 show hardware monitor continued p.318
• Ethernet switch cli reference guide p.318
• Chapter 89 additional commands p.318
• Ethernet switch cli reference guide p.319
• Chapter 89 additional commands p.319
• This example shows the current status of power over ethernet p.319
• The following table describes the labels in this screen p.319
• Table 210 show poe status p.319
• Table 209 show multicast vlan p.319
• Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w p.319
• Note if the management mode is set to consumption this field shows na p.319
• This example looks at general system information about the switch p.320
• The following table describes the labels in this screen p.320
• Table 211 show system information p.320
• Ethernet switch cli reference guide p.320
• Chapter 89 additional commands p.320
• This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the p.321
• This example displays run time sfp small form facter pluggable parameters on port 21 on the p.321
• For temperature voltage transmission bias transmission and receiving power as shown p.321
• Ethernet switch cli reference guide p.321
• Chapter 89 additional commands p.321
• You can also see the alarm and warning threasholds p.321
• This example displays the firmware version the switch is currently using p.321
• This example runs an internal loopback test on ports 3 6 p.322
• This example displays route information to an ethernet device with ip address p.322
• Ethernet switch cli reference guide p.322
• Chapter 89 additional commands p.322
• Appendices and index of commands p.323
• Ppendix p.325
• Default values p.325
• Ppendix p.326
• Legal information p.326
• Copyright p.326
• Certifications p.326
• Zyxel limited warranty p.327
• Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable p.329
• Index of commands p.329
• Index of commands p.330
• Ethernet switch cli reference guide p.330
• Index of commands p.331
• Ethernet switch cli reference guide p.331
• Index of commands p.332
• Ethernet switch cli reference guide p.332
• Index of commands p.333
• Ethernet switch cli reference guide p.333
• Index of commands p.334
• Ethernet switch cli reference guide p.334
• Index of commands p.335
• Ethernet switch cli reference guide p.335
• Index of commands p.336
• Ethernet switch cli reference guide p.336
• Index of commands p.337
• Ethernet switch cli reference guide p.337
• Index of commands p.338
• Ethernet switch cli reference guide p.338
• Index of commands p.339
• Ethernet switch cli reference guide p.339
• Index of commands p.340
• Ethernet switch cli reference guide p.340
• Index of commands p.341
• Ethernet switch cli reference guide p.341
• Index of commands p.342
• Ethernet switch cli reference guide p.342
• Index of commands p.343
• Ethernet switch cli reference guide p.343
• Index of commands p.344
• Ethernet switch cli reference guide p.344
• Index of commands p.345
• Ethernet switch cli reference guide p.345
• Index of commands p.346
• Ethernet switch cli reference guide p.346
• Index of commands p.347
• Ethernet switch cli reference guide p.347
• Index of commands p.348
• Ethernet switch cli reference guide p.348
• Index of commands p.349
• Ethernet switch cli reference guide p.349
• Index of commands p.350
• Ethernet switch cli reference guide p.350
• Index of commands p.351
• Ethernet switch cli reference guide p.351
• Index of commands p.352
• Ethernet switch cli reference guide p.352
• Index of commands p.353
• Ethernet switch cli reference guide p.353
• Index of commands p.354
• Ethernet switch cli reference guide p.354