Zyxel GS2210-48 [306/351] This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 305

This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3

Document conventions 4

Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4

Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4

Contents overview 6

Introduction 6

Reference a g 2 6

Reference h m 9 6

Reference n s 00 7

Appendices and index of commands 20 8

Reference t z 79 8

Introduction 9

Accessing the cli 11

Console port 11

Hapter 11

How to access and use the cli 11

Telnet 11

Logging in 12

The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12

Using shortcuts and getting help 12

Logging out 13

Saving your configuration 13

You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13

Hapter 14

Privilege level and command mode 14

Privilege levels 14

Privilege levels for commands 14

Privilege levels for login accounts 14

Privilege levels for sessions 15

Command modes 16

Command modes for privilege levels 0 12 16

Chapter 2 privilege level and command mode 17

Command modes for privilege levels 13 14 17

Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 17

Ethernet switch cli reference guide 17

If the session s privilege level is 13 14 the allowed commands are in one of several modes 17

Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17

Table 8 changing between command modes for privilege levels 13 14 17

Listing available commands 18

Changing the administrator password 19

Changing the enable password 19

Hapter 19

Initial setup 19

Afterwards you have to use the new ip address to access the switch 20

Changing the management ip address 20

Changing the out of band management ip address 20

Prohibiting concurrent logins 20

Chapter 3 initial setup 21

Ethernet switch cli reference guide 21

Looking at basic system information 21

Looking at the operating configuration 21

See chapter 88 on page 308 for more information about these attributes 21

This is illustrated in the following example 21

Use this command to look at general system information about the switch 21

Use this command to look at the current operating configuration 21

Reference a g 22

Aaa commands 24

Command summary 24

Hapter 24

Chapter 4 aaa commands 25

Ethernet switch cli reference guide 25

Table 10 command summary aaa accounting continued 25

Table 11 aaa authorization command summary 25

Chapter 4 aaa commands 26

Ethernet switch cli reference guide 26

Table 11 aaa authorization command summary continued 26

Arp commands 27

Command summary 27

Hapter 27

Chapter 5 arp commands 28

Command examples 28

Ethernet switch cli reference guide 28

Table 13 show ip arp 28

The following table describes the labels in this screen 28

This example creates a static arp entry and shows the arp tahle on the switch 28

Arp inspection commands 29

Command summary 29

Hapter 29

Chapter 6 arp inspection commands 30

Ethernet switch cli reference guide 30

Table 16 command summary arp inspection log 30

Table 17 command summary interface arp inspection 30

Table 18 command summary arp inspection vlan 30

Chapter 6 arp inspection commands 31

Command examples 31

Ethernet switch cli reference guide 31

Table 19 show arp inspection filter 31

The following table describes the labels in this screen 31

This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 31

This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 31

Chapter 6 arp inspection commands 32

Ethernet switch cli reference guide 32

Table 20 show arp inspection log 32

The following table describes the labels in this screen 32

This example displays whether ports are trusted or untrusted ports for arp inspection 32

Chapter 6 arp inspection commands 33

Ethernet switch cli reference guide 33

Table 21 show arp inspection interface port channel 33

The following table describes the labels in this screen 33

Arp learning commands 34

Command examples 34

Command summary 34

Hapter 34

Bandwidth commands 35

Command summary 35

Hapter 35

Chapter 8 bandwidth commands 36

Command examples ingress 36

Ethernet switch cli reference guide 36

Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 36

Table 24 command summary bandwidth control bandwidth limit 36

The following section lists the commands for this feature 36

This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 36

Chapter 8 bandwidth commands 37

Command examples cir pir 37

Ethernet switch cli reference guide 37

This example deactivates the outgoing bandwidth limit on port 1 37

This example displays the bandwidth limits configured on port 1 37

This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 37

Broadcast storm commands 38

Command summary 38

Hapter 38

128 broadcast packets per second 256 multicast packets per second 39

Chapter 9 broadcast storm commands 39

Command example bmstorm limit 39

Command example broadcast limit multicast limit dlf limit 39

Ethernet switch cli reference guide 39

Table 26 command summary storm control bmstorm limit and bstorm control continued 39

This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 39

This example enables broadcast storm control on the switch and configures port 1 to accept up to 39

64 dlf packets per second 40

Chapter 9 broadcast storm commands 40

Ethernet switch cli reference guide 40

Cfm commands 41

Cfm overview 41

Hapter 41

How cfm works 41

Cfm term definition 42

Chapter 10 cfm commands 43

Ethernet switch cli reference guide 43

Table 27 cfm term definitions 43

Table 28 cfm command user input values 43

This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 43

User input values 43

Chapter 10 cfm commands 44

Command summary 44

Ethernet switch cli reference guide 44

Table 29 cfm command summary 44

The following section lists the commands for this feature 44

Chapter 10 cfm commands 45

Ethernet switch cli reference guide 45

Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 45

Table 29 cfm command summary continued 45

Chapter 10 cfm commands 46

Ethernet switch cli reference guide 46

Table 29 cfm command summary continued 46

Command examples 47

Remember to save new settings using the write memory command 47

Chapter 10 cfm commands 48

Ethernet switch cli reference guide 48

Table 30 show cfm action mipccmdb 48

The following table describes the labels in this screen 48

This example displays all neighbors mep port information in the mip ccm databases 48

This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 48

This example starts a loopback test and displays the test result on the console 48

Chapter 10 cfm commands 49

Ethernet switch cli reference guide 49

This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 49

This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 49

This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 49

Classifier commands 50

Command summary 50

Hapter 50

Chapter 11 classifier commands 51

Ethernet switch cli reference guide 51

In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 51

In an ipv6 packet header the next header field identifies the next level protocol the following table shows some common ipv6 next header values 51

Table 32 common ethernet types and protocol number 51

Table 33 common ipv4 protocol types and protocol numbers 51

Table 34 common ipv6 next header values 51

The following table shows some other common ethernet types and the corresponding protocol number 51

Command examples 52

Cluster commands 53

Command summary 53

Hapter 53

Chapter 12 cluster commands 54

Command examples 54

Ethernet switch cli reference guide 54

Table 36 show cluster member 54

The following table describes the labels in this screen 54

This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 54

Chapter 12 cluster commands 55

Ethernet switch cli reference guide 55

Logs out of the member s cli and returns to the cli of the manager 55

Table 37 show cluster 55

The following table describes the labels in this screen 55

This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member 55

This example looks at the current status of the switch s cluster 55

Command summary 56

Date and time commands 56

Hapter 56

Chapter 13 date and time commands 57

Command examples 57

Ethernet switch cli reference guide 57

Table 39 time command summary continued 57

Table 40 timesync command summary 57

This example sets the current date current time time zone and daylight savings time 57

Chapter 13 date and time commands 58

Ethernet switch cli reference guide 58

Table 41 show timesync 58

The following table describes the labels in this screen 58

This example looks at the current time server settings 58

Data center bridging commands 59

Hapter 59

Overview 59

Pfc ets and dcbx standards 59

Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx 60

Chapter 14 data center bridging commands 60

Command summary 60

Ethernet switch cli reference guide 60

Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used 60

Table 42 dcb user input values 60

Table 43 priority flow control command summary 60

The following table describes user input values available in multiple commands for this feature 60

The following table lists the commands for this feature 60

This section shows the commands and examples for pfc ets application priority and dcbx 60

Chapter 14 data center bridging commands 61

Ethernet switch cli reference guide 61

In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a 61

In the following example switch a is not using switch b s configured priorities 61

In the following example switch a is using switch b s configured priorities 61

Pfc command examples 61

Table 43 priority flow control command summary continued 61

Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not 61

Chapter 14 data center bridging commands 63

Create and name traffic class ids with weights for the non sp traffic type 63

Ethernet switch cli reference guide 63

Ets command example 1 63

Table 44 ets command summary 63

Table 45 ets example traffic classes 63

Table 46 ets example traffic bandwidths 63

The following table lists the commands for this feature 63

The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps 63

This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each 63

Application priority 64

Chapter 14 data center bridging commands 64

Ethernet switch cli reference guide 64

Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class 64

Table 47 ets example priority traffic class id mapping 64

Table 48 application priority command summary 64

The following table lists the commands for this feature 64

This command shows traffic class 64

Use the application priority command to assign a priority to all fcoe traffic on a switch 64

Application priority can then be used in conjunction with ets and pfc as shown in the following examples 65

Application priority command examples 65

Chapter 14 data center bridging commands 65

Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 65

Ethernet switch cli reference guide 65

In the following example all fcoe traffic on the switch is assigned with priority 3 65

Table 49 ets example 2 traffic classes 65

This is an application priority command example with ets 65

This is an application priority command example with pfc 65

Chapter 14 data center bridging commands 66

Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx 66

Ethernet switch cli reference guide 66

In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information 66

See chapter 37 on page 158 for lldp command examples 66

See chapter 37 on page 158 for more information on lldp 66

Table 50 dcbx command summary 66

The following table lists the commands for this feature 66

This is a dcbx command example 66

Command summary 67

Dhcp commands 67

Hapter 67

Chapter 15 dhcp commands 68

Ethernet switch cli reference guide 68

Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 68

Note you have to disable dhcp relay before you can enable dhcp smart relay 68

Table 52 dhcp relay command summary continued 68

Table 53 dhcp relay broadcast command summary 68

Table 54 dhcp smart relay command summary 68

Chapter 15 dhcp commands 69

Command 69

Command examples 69

Ethernet switch cli reference guide 69

In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 69

Table 54 dhcp smart relay command summary continued 69

Table 55 dhcp server command summary 69

6 0 00 70

Chapter 15 dhcp commands 70

Ethernet switch cli reference guide 70

Figure 3 example global dhcp relay 70

Figure 4 example dhcp relay for two vlans 70

In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 70

This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 70

Vlan1 vlan2 70

Command summary 72

Dhcp snooping dhcp vlan commands 72

Hapter 72

Chapter 16 dhcp snooping dhcp vlan commands 73

Ethernet switch cli reference guide 73

Table 56 dhcp snooping command summary continued 73

Command examples 74

Chapter 16 dhcp snooping dhcp vlan commands 75

Displays dhcp snooping configuration details 75

Ethernet switch cli reference guide 75

Command summary 76

Diffserv commands 76

Hapter 76

Command summary 77

Display commands 77

Hapter 77

Command summary 78

Dvmrp commands 78

Dvmrp overview 78

Hapter 78

Chapter 19 dvmrp commands 79

Command examples 79

Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 79

Ethernet switch cli reference guide 79

Figure 6 dvmrp network example 79

In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 79

Table 60 command summary dvmrp continued 79

Cpu protection overview 80

Error disable and recovery commands 80

Error disable recovery overview 80

Hapter 80

User input values 80

Chapter 20 error disable and recovery commands 81

Command summary 81

Ethernet switch cli reference guide 81

Table 62 cpu protection command summary 81

Table 63 errdisable recovery command summary 81

The following section lists the commands for this feature 81

Chapter 20 error disable and recovery commands 82

Command examples 82

Ethernet switch cli reference guide 82

Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 82

Table 63 errdisable recovery command summary continued 82

This example shows you how to configure the following 82

Chapter 20 error disable and recovery commands 83

Ethernet switch cli reference guide 83

This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 83

Command summary 84

Ethernet oam commands 84

Hapter 84

Ieee 802 ah link layer ethernet oam implementation 84

Chapter 21 ethernet oam commands 85

Command examples 85

Ethernet switch cli reference guide 85

Table 64 ethernet oam command summary continued 85

This example enables ethernet oam on port 7 and sets the mode to active 85

Chapter 21 ethernet oam commands 86

Ethernet switch cli reference guide 86

Table 65 show ethernet oam discovery 86

The following table describes the labels in this screen 86

This example performs ethernet oam discovery from port 7 86

Chapter 21 ethernet oam commands 87

Ethernet switch cli reference guide 87

Table 65 show ethernet oam discovery continued 87

This example looks at the number of oam packets transferred on port 1 87

Chapter 21 ethernet oam commands 88

Ethernet switch cli reference guide 88

Table 66 show ethernet oam statistics 88

Table 67 show ethernet oam summary 88

The following table describes the labels in this screen 88

This example looks at the configuration of ports on which oam is enabled 88

Chapter 21 ethernet oam commands 89

Ethernet switch cli reference guide 89

Table 67 show ethernet oam summary continued 89

Command summary 90

External alarm commands 90

Hapter 90

Chapter 22 external alarm commands 91

Command examples 91

Ethernet switch cli reference guide 91

This example configures and shows the name and status of the external alarm s 91

Command summary 92

Garp commands 92

Garp overview 92

Hapter 92

Chapter 23 garp commands 93

Command examples 93

Ethernet switch cli reference guide 93

In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 93

Green ethernet commands 94

Green ethernet overview 94

Hapter 94

Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled 95

Chapter 24 green ethernet commands 95

Command summary 95

Ethernet switch cli reference guide 95

Green ethernet command example 95

In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters 95

Table 70 green ethernet command summary 95

The following section lists the commands for this feature 95

Auto power down 96

Chapter 24 green ethernet commands 96

Ethernet switch cli reference guide 96

Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled 96

Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled 96

Short reach 96

Chapter 24 green ethernet commands 97

Ethernet switch cli reference guide 97

The following example shows how to configure short reach if the switch supports short reach per port 97

The following example shows the display for short reach if the switch supports short reach per port and showing the status 97

Command examples 98

Command summary 98

Gvrp commands 98

Hapter 98

Reference h m 99

Command summary 101

Hapter 101

Https server commands 101

Chapter 26 https server commands 102

Command examples 102

Ethernet switch cli reference guide 102

Table 73 show https 102

The following table describes the labels in this screen 102

This example shows the current https settings statistics and sessions 102

Chapter 26 https server commands 103

Ethernet switch cli reference guide 103

Table 73 show https continued 103

Table 74 show https session 103

The following table describes the labels in this screen 103

This example shows the current https sessions 103

Chapter 26 https server commands 104

Ethernet switch cli reference guide 104

Table 74 show https session continued 104

Command summary 105

Guest vlan overview 105

Hapter 105

Ieee 802 x authentication commands 105

Chapter 27 ieee 802 x authentication commands 106

Command examples 106

Ethernet switch cli reference guide 106

Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 106

Table 75 port access authenticator command summary continued 106

This example configures the switch in the following ways 106

Command summary 108

Hapter 108

Igmp and multicasting commands 108

Igmp overview 108

Chapter 28 igmp and multicasting commands 109

Command examples 109

Ethernet switch cli reference guide 109

Sets the switch to flood unknown multicast frames sets the switch to non querier mode 109

Table 76 igmp command summary continued 109

Table 77 ipmc command summary 109

This example configures igmp on the switch with the following settings 109

Command summary 111

Hapter 111

Igmp snooping commands 111

Chapter 29 igmp snooping commands 112

Ethernet switch cli reference guide 112

Table 79 igmp snooping command summary continued 112

Chapter 29 igmp snooping commands 113

Ethernet switch cli reference guide 113

Table 79 igmp snooping command summary continued 113

Table 80 igmp snooping vlan command summary 113

Table 81 interface igmp command summary 113

Chapter 29 igmp snooping commands 114

Ethernet switch cli reference guide 114

Table 81 interface igmp command summary continued 114

Chapter 29 igmp snooping commands 115

Command examples 115

Ethernet switch cli reference guide 115

Host timeou 115

Table 81 interface igmp command summary continued 115

This example enables igmp snooping on the switch sets the 115

Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 115

Chapter 29 igmp snooping commands 116

Ethernet switch cli reference guide 116

Table 82 show multicast 116

The following table describes the labels in this screen 116

This example limits the number of multicast groups on port 1 to 5 116

This example shows the current multicast groups on the switch 116

This example shows the current multicast vlan on the switch 116

Chapter 29 igmp snooping commands 117

Ethernet switch cli reference guide 117

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 117

Command summary 118

Hapter 118

Igmp filtering commands 118

Chapter 30 igmp filtering commands 119

Command examples 119

Ethernet switch cli reference guide 119

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 119

Command summary 120

Hapter 120

Interface commands 120

10000 or 4000 121

Chapter 31 interface commands 121

Ethernet switch cli reference guide 121

Table 84 interface command summary continued 121

Chapter 31 interface commands 122

Command examples 122

Ethernet switch cli reference guide 122

Table 85 show interfaces 122

The following table describes the labels in this screen 122

This example looks at the current status of port 1 122

Chapter 31 interface commands 123

Ethernet switch cli reference guide 123

Table 85 show interfaces continued 123

Chapter 31 interface commands 124

Ethernet switch cli reference guide 124

Sets the default port vid to 200 2 sets these ports to accept only tagged frames 124

Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 124

Table 85 show interfaces continued 124

This example configures ports 1 3 4 and 5 in the following ways 124

This example configures ports 1 5 in the following ways 124

Command examples 125

Command summary 125

Hapter 125

Interface route domain mode 125

Command summary 126

Hapter 126

Ip commands 126

Chapter 33 ip commands 127

Command examples 127

Ethernet switch cli reference guide 127

Table 88 tcp and udp command summary continued 127

Table 89 show ip tcp 127

The following table describes the labels in this screen 127

This example shows the tcp statistics and listener ports see rfc 1213 for more information 127

Chapter 33 ip commands 128

Ethernet switch cli reference guide 128

Table 89 show ip tcp continued 128

Chapter 33 ip commands 129

Ethernet switch cli reference guide 129

Table 89 show ip tcp continued 129

Table 90 show ip udp 129

The following table describes the labels in this screen 129

This example shows the udp statistics and listener ports see rfc 1213 for more information 129

Command examples 130

Command summary 130

Hapter 130

Ip source binding commands 130

Chapter 34 ip source binding commands 131

Ethernet switch cli reference guide 131

Table 92 show ip source binding 131

The following table describes the labels in this screen 131

Hapter 132

Ipv6 addressing 132

Ipv6 commands 132

Ipv6 overview 132

Ipv6 terms 133

A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 134

Chapter 35 ipv6 commands 134

Ethernet switch cli reference guide 134

Loopback 134

Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 134

Table 95 predefined multicast address 134

Table 96 reserved multicast address 134

The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 134

Eui 64 135

Chapter 35 ipv6 commands 139

Command summary 139

Ethernet switch cli reference guide 139

In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 139

Report 139

Table 97 ipv6 user input values 139

Table 98 ipv6 address command summary 139

The following section lists the commands for this feature 139

The following table describes user input values available in multiple commands for this feature 139

Chapter 35 ipv6 commands 140

Ethernet switch cli reference guide 140

Note make sure an ipv6 router is available in the vlan network before using this command on the switch 140

Table 98 ipv6 address command summary continued 140

Chapter 35 ipv6 commands 141

Ethernet switch cli reference guide 141

Table 98 ipv6 address command summary continued 141

Table 99 ipv6 dhcp relay command summary 141

Chapter 35 ipv6 commands 142

Ethernet switch cli reference guide 142

Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 142

Table 100 ipv6 icmp and ping6 command summary 142

Table 101 ipv6 mld snooping proxy command summary 142

Chapter 35 ipv6 commands 143

Ethernet switch cli reference guide 143

Table 101 ipv6 mld snooping proxy command summary continued 143

Chapter 35 ipv6 commands 144

Ethernet switch cli reference guide 144

Table 101 ipv6 mld snooping proxy command summary continued 144

Chapter 35 ipv6 commands 145

Ethernet switch cli reference guide 145

Table 101 ipv6 mld snooping proxy command summary continued 145

Chapter 35 ipv6 commands 146

Ethernet switch cli reference guide 146

Table 102 ipv6 nd command summary 146

Chapter 35 ipv6 commands 147

Ethernet switch cli reference guide 147

Table 102 ipv6 nd command summary continued 147

Table 103 ipv6 neighbor command summary 147

Chapter 35 ipv6 commands 148

Command examples 148

Ethernet switch cli reference guide 148

Table 103 ipv6 neighbor command summary continued 148

This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 148

This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 148

Chapter 35 ipv6 commands 149

Ethernet switch cli reference guide 149

There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 149

This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 149

Chapter 35 ipv6 commands 150

Ethernet switch cli reference guide 150

Table 104 show ipv6 neighbor 150

The following table describes the labels in this screen 150

This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 150

By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 151

Chapter 35 ipv6 commands 151

Ethernet switch cli reference guide 151

Example enabling ipv6 on windows xp 2003 151

This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 151

Example http accessing the switch using ipv6 152

How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 152

Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 152

It s recommended to use internet explorer 7 or firefox to access the switch s web gui 152

Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 152

This example shows you how to access the switch using http on windows xp 152

Command summary 155

Hapter 155

Layer 2 protocol tunnel l2pt commands 155

Chapter 36 layer 2 protocol tunnel l2pt commands 156

Command examples 156

Ethernet switch cli reference guide 156

Table 106 l2pt command summary continued 156

This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 156

Chapter 36 layer 2 protocol tunnel l2pt commands 157

Ethernet switch cli reference guide 157

This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 157

This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 157

This example sets l2pt mode to tunnel for port 4 157

Hapter 158

Link layer discovery protocol lldp commands 158

Lldp overview 158

Chapter 37 link layer discovery protocol lldp commands 159

Command summary 159

Ethernet switch cli reference guide 159

Lldp med link layer discovery protocol for media endpoint devices is an enhanced extension to lldp especially for voice applications you can use lldp med to advertise location based information of emergency calls and or network policies for voice video streaming 159

Table 107 lldp command summary 159

The following section lists the commands for this feature 159

Chapter 37 link layer discovery protocol lldp commands 160

Ethernet switch cli reference guide 160

Table 107 lldp command summary continued 160

Chapter 37 link layer discovery protocol lldp commands 161

Ethernet switch cli reference guide 161

Table 107 lldp command summary continued 161

Chapter 37 link layer discovery protocol lldp commands 162

Ethernet switch cli reference guide 162

Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 162

Table 107 lldp command summary continued 162

Chapter 37 link layer discovery protocol lldp commands 163

Command examples 163

Ethernet switch cli reference guide 163

See chapter 14 on page 59 for dcb configuration and examples 163

This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 163

This example shows global switch lldp settings 163

Chapter 37 link layer discovery protocol lldp commands 164

Ethernet switch cli reference guide 164

Lldp settings on a port 164

Switch lldp settings 164

Table 108 164

Table 109 164

The following table describes the labels in this screen 164

This example shows lldp settings on a port 164

Chapter 37 link layer discovery protocol lldp commands 165

Continued 165

Ethernet switch cli reference guide 165

Lldp settings on a por 165

Switch lldp statistics 165

Table 109 165

Table 110 165

The following table describes the labels in this screen 165

This example shows global switch lldp statistics 165

This example shows lldp statistics on a port 165

Chapter 37 link layer discovery protocol lldp commands 166

Ethernet switch cli reference guide 166

Lldp statistics on a port 166

Local lldp information 166

Table 111 166

Table 112 166

The following table describes the labels in this screen 166

This example shows local switch the switch you re accessing lldp information 166

Chapter 37 link layer discovery protocol lldp commands 167

Ethernet switch cli reference guide 167

Local switch lldp information on a port 167

Table 113 167

The following table describes the labels in this screen 167

This example shows local switch the switch you re accessing lldp information on a port 167

Chapter 37 link layer discovery protocol lldp commands 168

Continued 168

Ethernet switch cli reference guide 168

Local switch lldp information on a por 168

Remote switch lldp information 168

Table 113 168

Table 114 168

The following table describes the labels in this screen 168

This example shows remote switch the switch connected to the port on the switch you re accessing lldp information 168

Chapter 37 link layer discovery protocol lldp commands 169

Continued 169

Ethernet switch cli reference guide 169

Remote switch lldp informatio 169

Table 114 169

Command summary 170

Hapter 170

Load sharing commands 170

Load sharing overview 170

Chapter 38 load sharing commands 171

Command examples 171

Ethernet switch cli reference guide 171

This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 171

Command examples 172

Command summary 172

Hapter 172

Logging commands 172

Command summary 173

Hapter 173

Login account commands 173

Password encryption 173

Chapter 40 login account commands 174

Command examples 174

Ethernet switch cli reference guide 174

This example creates a new user user2 with privilege 13 174

Command summary 175

Hapter 175

Loopguard commands 175

Chapter 41 loopguard commands 176

Command examples 176

Ethernet switch cli reference guide 176

Table 119 show loopguard 176

The following table describes the labels in this screen 176

This example enables loopguard on ports 1 3 176

Command summary 177

Hapter 177

Mac address commands 177

Chapter 42 mac address commands 178

Command examples 178

Ethernet switch cli reference guide 178

Table 120 mac mac aging time and mac flush command summary continued 178

Table 121 show mac address table 178

The following table describes the labels in this screen 178

This example shows the current mac address table 178

Command summary 179

Hapter 179

Mac authentication commands 179

Mac authentication overview 179

Chapter 43 mac authentication commands 180

Command examples 180

Ethernet switch cli reference guide 180

Table 122 mac authentication command summary continued 180

This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 180

Command summary 181

Hapter 181

Mac filter commands 181

Command example 182

Command example filter source 182

Command summary 183

Hapter 183

Mac forward commands 183

Command summary 184

Hapter 184

Mac pinning commands 184

Chapter 46 mac pinning commands 185

Command examples 185

Ethernet switch cli reference guide 185

This example enables mac pinning on the switch and port 3 it also shows the mac pinning status 185

Hapter 186

Mirror commands 186

Chapter 47 mirror commands 187

Command summary 187

Ethernet switch cli reference guide 187

Table 128 mirror command summary 187

Table 129 mirror filter command summary 187

The following section lists the commands for this feature 187

Chapter 47 mirror commands 188

Command examples 188

Ethernet switch cli reference guide 188

Table 130 rmirror command summary 188

This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 188

Chapter 47 mirror commands 189

Ethernet switch cli reference guide 189

This example creates an rmirror vlan with a vlan id of 200 on the switch sets port 6 as the reflector port and sets the priority of mirrored traffic to 3 in this rmirror vlan when the switch is the source device this example also specifies the ports 4 and 5 on which traffic will be mirrored and shows the rmirror vlan settings 189

This example displays the mirror settings of the switch after you configured in the example above 189

Command summary 190

Hapter 190

Mrstp commands 190

Mrstp overview 190

Chapter 48 mrstp commands 191

Command examples 191

Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 191

Ethernet switch cli reference guide 191

In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 191

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 191

Table 131 command summary mrstp 191

This example configures mrstp in the following way 191

Command summary 192

Hapter 192

Mstp commands 192

Chapter 49 mstp commands 193

Command examples 193

Ethernet switch cli reference guide 193

Table 133 mstp instance command summary 193

This example shows the current mstp configuration 193

Chapter 49 mstp commands 194

Ethernet switch cli reference guide 194

Table 134 show mstp 194

The following table describes the labels in this screen 194

This example shows the current cist configuration mstp instance 0 194

Chapter 49 mstp commands 195

Ethernet switch cli reference guide 195

Table 135 show mstp instance 195

The following table describes the labels in this screen 195

Command examples 197

Command summary 197

Hapter 197

Multiple login commands 197

Command summary 198

Hapter 198

Mvr commands 198

Command examples 199

Reference n s 200

Command summary 202

Hapter 202

Ospf commands 202

Ospf overview 202

Chapter 52 ospf commands 203

Ethernet switch cli reference guide 203

Table 139 ospf command summary continued 203

Chapter 52 ospf commands 204

Ethernet switch cli reference guide 204

Note you cannot set two routing protocols to have the same administrative distance 204

Table 139 ospf command summary continued 204

Chapter 52 ospf commands 205

Command examples 205

Ethernet switch cli reference guide 205

Figure 7 ospf network example 205

In this example the switch a is an area border router abr in an ospf network 205

Table 139 ospf command summary continued 205

In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 206

Is also set to 1 as this router should participate in router elections 206

This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 206

This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 206

Chapter 52 ospf commands 207

Ethernet switch cli reference guide 207

From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 207

This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 207

Command summary 208

Hapter 208

Password commands 208

Password encryption 208

Command examples 209

Command summary 210

Hapter 210

Poe commands 210

Chapter 54 poe commands 211

Command examples 211

Ethernet switch cli reference guide 211

Table 141 pwr command summary continued 211

This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 211

This example sets the maximum amount of power allowed for port 2 to 7500 mw 211

Chapter 54 poe commands 212

Ethernet switch cli reference guide 212

Table 142 show pwr 212

The following table describes the labels in this screen 212

This example shows the current status and configuration of power over ethernet 212

Chapter 54 poe commands 213

Ethernet switch cli reference guide 213

Note if the management mode is set to consumption this field shows na 213

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 213

Table 142 show pwr continued 213

Command summary 214

Hapter 214

Policy commands 214

Chapter 55 policy commands 215

Ethernet switch cli reference guide 215

Table 143 policy command summary 215

Chapter 55 policy commands 216

Command examples 216

Ethernet switch cli reference guide 216

Table 143 policy command summary 216

This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 50 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 216

Chapter 55 policy commands 217

Ethernet switch cli reference guide 217

This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 50 this policy forwards class1 packets to port 8 217

Command summary 218

Hapter 218

Policy route commands 218

9 it then shows the policy routing information 219

By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 219

Chapter 56 policy route commands 219

Command examples 219

Ethernet switch cli reference guide 219

To forward packets that match the layer 3 classifier to the gateway with ip address 219

Command summary 220

Hapter 220

Port security commands 220

Chapter 57 port security commands 221

Command examples 221

Ethernet switch cli reference guide 221

Table 145 port security command summary continued 221

This example enables port security on port 1 and limits the number of learned mac addresses to 5 221

Command examples 222

Command summary 222

Hapter 222

Port based vlan commands 222

Hapter 223

Port state 223

Pppoe ia commands 223

Pppoe intermediate agent overview 223

Chapter 59 pppoe ia commands 224

Command summary 224

Ethernet switch cli reference guide 224

Table 147 pppoe intermediate agent command summary 224

The following section lists the commands for this feature 224

The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 224

Chapter 59 pppoe ia commands 225

Ethernet switch cli reference guide 225

Table 147 pppoe intermediate agent command summary continued 225

Chapter 59 pppoe ia commands 226

Command examples 226

Ethernet switch cli reference guide 226

This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 226

This is an example of how to enable and configure pppoe ia for vlans 226

This is an example of how to enable and disable pppoe ia on the switch 226

This is an example of how to set a pppoe ia trust port 226

Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 227

Similarly we can let the circuit id carry the information which we configure 227

The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 227

This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 227

Vendor specific tag examples 227

Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 228

Chapter 59 pppoe ia commands 228

Ethernet switch cli reference guide 228

Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 228

Hapter 229

Legacy pvlan overview 229

Private vlan commands 229

Command examples 230

Legacy pvlan command summary 230

That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 230

The following section lists the commands for this feature 230

This example sets a private vlan rule 230

Command summary 231

Private vlan 231

That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the 231

The following section lists the commands for this feature 231

This example sets a private vlan rule 231

Chapter 60 private vlan commands 232

Command example 232

Ethernet switch cli reference guide 232

Table 149 private vlan command summary continued 232

This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 102 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch 232

Chapter 60 private vlan commands 233

Ethernet switch cli reference guide 233

Command summary 234

Hapter 234

Protocol based vlan commands 234

Protocol based vlan overview 234

Chapter 61 protocol based vlan commands 235

Command examples 235

Ethernet switch cli reference guide 235

Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 235

Table 150 protocol based vlan command summary continued 235

This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 235

Hapter 236

Queuing commands 236

Queuing overview 236

Chapter 62 queuing commands 237

Command summary port by port configuration 237

Ethernet switch cli reference guide 237

For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 237

Note some models only support 4 queues 237

Table 151 queuing command summary 237

The following section lists the commands for this feature 237

Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 237

Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 237

Chapter 62 queuing commands 238

Command examples port by port configuration 238

Ethernet switch cli reference guide 238

Table 151 queuing command summary continued 238

This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 238

Chapter 62 queuing commands 239

Command examples system wide 239

Command summary system wide configuration 239

Ethernet switch cli reference guide 239

Note some models only support 4 queues 239

Table 152 queueing command summary 239

The following section lists the commands for this feature 239

This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 239

This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 239

Command summary 240

Hapter 240

Radius commands 240

Chapter 63 radius commands 241

Command examples 241

Ethernet switch cli reference guide 241

Table 154 radius accounting command summary continued 241

This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 241

Command summary 242

Hapter 242

Remote management commands 242

Chapter 64 remote management commands 243

Command examples 243

Ethernet switch cli reference guide 243

Table 157 service control command summary continued 243

This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 243

Chapter 64 remote management commands 244

Ethernet switch cli reference guide 244

This example disables all snmp and icmp access to the 244

Command summary 245

Hapter 245

Rip commands 245

Rip overview 245

Chapter 65 rip commands 246

Command examples 246

Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 246

Ethernet switch cli reference guide 246

Note you cannot set two routing protocols to have the same administrative distance 246

Table 158 rip command summary continued 246

This example 246

Hapter 247

Rmon overview 247

User input values 247

Chapter 66 rmon 248

Command summary 248

Ethernet switch cli reference guide 248

Table 161 rmon command summary 248

The following section lists the commands for this feature 248

Chapter 66 rmon 249

Ethernet switch cli reference guide 249

Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 249

Rmon alarm command example 249

Rmon event command example 249

Syntax 249

This example also shows how to display the setting results 249

This example shows how to configure the switch s action when an rmon event using the following settings 249

Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 66 on page 249 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 66 on page 249 who will handle this alarm operator 250

Chapter 66 rmon 250

Ethernet switch cli reference guide 250

This example shows you how to configure an alarm using the following settings 250

Chapter 66 rmon 251

Ethernet switch cli reference guide 251

Rmon statistics command example 251

The ethernet statistics table entry s index number 1 collecting data samples from which port 12 251

This example also shows how to display the data collection results 251

This example also shows how to display the setting results 251

This example shows how to configure the settings to display current network traffic statistics using the following settings 251

Chapter 66 rmon 252

Ethernet switch cli reference guide 252

Rmon history command example 252

The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 252

This example also shows how to display the data collection results 252

This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 252

Command summary 253

Hapter 253

Running configuration commands 253

Switch configuration file 253

Chapter 67 running configuration commands 254

Command examples 254

Ethernet switch cli reference guide 254

Table 163 running config command summary 254

The following section lists the commands for this feature 254

This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 254

This example resets the switch to the factory default settings 254

Command summary 255

Hapter 255

Sflow overview 255

Chapter 68 sflow 256

Command examples 256

Ethernet switch cli reference guide 256

Table 164 sflow command summary continued 256

This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 256

Hapter 257

Smart isolation commands 257

Smart isolation overview 257

Command summary 258

The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 258

Chapter 69 smart isolation commands 259

Command examples 259

Ethernet switch cli reference guide 259

Table 166 show smart isolation 259

The following table describes the labels in this screen 259

This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 259

Chapter 69 smart isolation commands 260

Ethernet switch cli reference guide 260

Table 166 show smart isolation continued 260

Command summary 261

Hapter 261

Snmp server commands 261

Chapter 70 snmp server commands 262

Ethernet switch cli reference guide 262

Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 262

Table 168 snmp server command summary continued 262

Chapter 70 snmp server commands 263

Ethernet switch cli reference guide 263

Table 169 snmp server trap destination enable traps command summary 263

Chapter 70 snmp server commands 264

Command examples 264

Ethernet switch cli reference guide 264

Table 169 snmp server trap destination enable traps command summary continued 264

This example sets the switch to not send the linkup and linkdown traps received on port 3 to the snmp manager 264

This example shows you how to display all snmp user information on the switch 264

This example shows you how to display the snmp information on the switch 264

Command summary 265

Hapter 265

Stp and rstp commands 265

Chapter 71 stp and rstp commands 266

Command examples 266

Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 266

Ethernet switch cli reference guide 266

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 266

Table 170 spanning tree command summary continued 266

This example configures stp in the following ways 266

Chapter 71 stp and rstp commands 267

Ethernet switch cli reference guide 267

Table 171 show spanning tree config 267

The following table describes the labels in this screen 267

This example shows the current stp settings 267

Chapter 71 stp and rstp commands 268

Ethernet switch cli reference guide 268

In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 268

Table 171 show spanning tree config continued 268

Command examples 269

Command summary 269

Hapter 269

Ssh commands 269

Chapter 72 ssh commands 270

Ethernet switch cli reference guide 270

Table 173 show ssh 270

The following table describes the labels in this screen 270

This example shows the general ssh settings 270

Command summary 271

Hapter 271

Static multicast commands 271

Command examples 272

Command summary 273

Hapter 273

Static route commands 273

Chapter 74 static route commands 274

Command examples 274

Ethernet switch cli reference guide 274

For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 274

Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 274

Table 176 show ip route 274

The following table describes the labels in this screen 274

This example shows the current routing table 274

You can create this static route if it is inactive however 274

Chapter 74 static route commands 275

Ethernet switch cli reference guide 275

You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 275

Command summary 276

Hapter 276

Subnet based vlan commands 276

Subnet based vlan overview 276

Chapter 75 subnet based vlan commands 277

Command examples 277

Ethernet switch cli reference guide 277

Table 177 subnet based vlan command summary continued 277

This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 277

Command summary 278

Hapter 278

Syslog commands 278

Reference t z 279

Command summary 281

Hapter 281

Tacacs commands 281

Command summary 282

Hapter 282

Tftp commands 282

Command summary 283

Hapter 283

Trunk commands 283

Chapter 79 trunk commands 284

Command examples 284

Ethernet switch cli reference guide 284

Table 186 lacp command summary 284

Table 187 show trunk 284

The following table describes the labels in this screen 284

This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 284

This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 284

This example looks at the current trunks 284

Chapter 79 trunk commands 285

Ethernet switch cli reference guide 285

Table 187 show trunk continued 285

Table 188 show lacp 285

The following table describes the labels in this screen 285

This example shows the current lacp settings 285

Command summary 286

Hapter 286

Trtcm commands 286

Trtcm overview 286

Chapter 80 trtcm commands 287

Command examples 287

Ethernet switch cli reference guide 287

Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 287

Table 189 trtcm command summary continued 287

This example activates trtcm on the switch with the following settings 287

Chapter 80 trtcm commands 288

Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example 288

Ethernet switch cli reference guide 288

This examples activates trtcm on the switch with the following settings 288

Hapter 289

Vlan commands 289

Vlan configuration overview 289

Vlan overview 289

Command summary 290

See chapter 31 on page 120 for interface port channel commands 290

The following section lists the commands for the ingress checking feature 290

The following section lists the commands for this feature 290

Vlan ingress checking implementation differs across switch models 290

Chapter 81 vlan commands 291

Command examples 291

Ethernet switch cli reference guide 291

Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 291

Table 191 vlan1q ingress check command summary 291

Table 192 ingress check command summary 291

This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 291

This example deletes entry 2 in the static vlan table 291

This example shows the vlan table 291

Chapter 81 vlan commands 292

Ethernet switch cli reference guide 292

Table 193 show vlan 292

The following table describes the labels in this screen 292

This example enables ingress checking on ports 1 5 292

Chapter 81 vlan commands 293

Ethernet switch cli reference guide 293

Table 194 show vlan counters 293

The following table describes the labels in this screen 293

This example displays concurrent incoming packet statistics for vlan 1 293

Chapter 81 vlan commands 294

Ethernet switch cli reference guide 294

Table 194 show vlan counters continued 294

Command summary 295

Hapter 295

Ip interfaces overview 295

Vlan ip commands 295

Chapter 82 vlan ip commands 296

Command examples 296

Ethernet switch cli reference guide 296

See section 3 on page 20 for an example of how to configure a vlan management ip addressusing ipv4 see chapter 35 on page 139 for ipv6 vlan commands 296

Table 195 vlan ip address command summary continued 296

Command summary 297

Hapter 297

Vlan mapping commands 297

Chapter 83 vlan mapping commands 298

Command examples 298

Ethernet switch cli reference guide 298

This example enables vlan mapping on port 4 298

This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 298

Command summary 299

Hapter 299

Vlan port isolation commands 299

Command summary 300

Hapter 300

Vlan stacking commands 300

A 37 24 301

B 48 24 301

Chapter 85 vlan stacking commands 301

Command examples 301

Customer a customer a 301

Customer b customer b 301

Ethernet switch cli reference guide 301

Figure 10 example vlan stacking 301

In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 301

Table 198 vlan stacking command summary continued 301

Vlan 24 vlan 24 301

Chapter 85 vlan stacking commands 302

Ethernet switch cli reference guide 302

This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 302

Command summary 303

Hapter 303

Vlan trunking commands 303

Command summary 304

Hapter 304

Vrrp commands 304

Vrrp overview 304

Chapter 87 vrrp commands 305

Command examples 305

Ethernet 305

Ethernet switch cli reference guide 305

Figure 11 example vrrp 305

Table 200 vrrp command summary continued 305

The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 305

Chapter 87 vrrp commands 306

Ethernet switch cli reference guide 306

This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 305 306

Chapter 87 vrrp commands 307

Ethernet switch cli reference guide 307

This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 305 307

Additional commands 308

Command summary 308

Hapter 308

Chapter 88 additional commands 309

Ethernet switch cli reference guide 309

Table 202 command summary additional enable mode continued 309

Chapter 88 additional commands 310

Ethernet switch cli reference guide 310

Table 202 command summary additional enable mode continued 310

Table 203 command summary additional configure mode 310

Chapter 88 additional commands 311

Command examples 311

Ethernet switch cli reference guide 311

Table 204 cable diagnostics 311

The following table describes the labels in this screen 311

This example checks the cable pairs on ports 1 and 4 311

Chapter 88 additional commands 312

Ethernet switch cli reference guide 312

Table 205 ping 312

Table 206 show alarm status 312

The following table describes the labels in this screen 312

This example sends ping requests to an ethernet device with ip address 172 6 7 54 312

This example shows the current status of the various alarms in the switch 312

Chapter 88 additional commands 313

Ethernet switch cli reference guide 313

Table 206 show alarm status continued 313

Table 207 show cpu utilization 313

The following table describes the labels in this screen 313

This example shows the current and recent cpu utilization 313

Chapter 88 additional commands 314

Ethernet switch cli reference guide 314

Table 208 show hardware monitor 314

The following table describes the labels in this screen 314

This example looks at the current sensor readings from various places in the hardware the display for your switch may be different 314

Chapter 88 additional commands 315

Ethernet switch cli reference guide 315

Table 208 show hardware monitor continued 315

This example displays multicast vlan configuration on the 315

Chapter 88 additional commands 316

Ethernet switch cli reference guide 316

Note if the management mode is set to consumption this field shows na 316

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 316

Table 209 show multicast vlan 316

Table 210 show poe status 316

The following table describes the labels in this screen 316

This example shows the current status of power over ethernet 316

Chapter 88 additional commands 317

Ethernet switch cli reference guide 317

Table 211 show system information 317

The following table describes the labels in this screen 317

This example looks at general system information about the switch 317

Chapter 88 additional commands 318

Ethernet switch cli reference guide 318

For temperature voltage transmission bias transmission and receiving power as shown 318

This example displays run time sfp small form facter pluggable parameters on port 21 on the 318

This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 318

This example displays the firmware version the switch is currently using 318

You can also see the alarm and warning threasholds 318

Chapter 88 additional commands 319

Ethernet switch cli reference guide 319

This example displays route information to an ethernet device with ip address 319

This example runs an internal loopback test on ports 3 6 319

Appendices and index of commands 320

Default values 322

Ppendix 322

Certifications 323

Copyright 323

Legal information 323

Ppendix 323

Zyxel limited warranty 324

Index of commands 326

Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 326

Ethernet switch cli reference guide 327

Index of commands 327

Ethernet switch cli reference guide 328

Index of commands 328

Ethernet switch cli reference guide 329

Index of commands 329

Ethernet switch cli reference guide 330

Index of commands 330

Ethernet switch cli reference guide 331

Index of commands 331

Ethernet switch cli reference guide 332

Index of commands 332

Ethernet switch cli reference guide 333

Index of commands 333

Ethernet switch cli reference guide 334

Index of commands 334

Ethernet switch cli reference guide 335

Index of commands 335

Ethernet switch cli reference guide 336

Index of commands 336

Ethernet switch cli reference guide 337

Index of commands 337

Ethernet switch cli reference guide 338

Index of commands 338

Ethernet switch cli reference guide 339

Index of commands 339

Ethernet switch cli reference guide 340

Index of commands 340

Ethernet switch cli reference guide 341

Index of commands 341

Ethernet switch cli reference guide 342

Index of commands 342

Ethernet switch cli reference guide 343

Index of commands 343

Ethernet switch cli reference guide 344

Index of commands 344

Ethernet switch cli reference guide 345

Index of commands 345

Ethernet switch cli reference guide 346

Index of commands 346

Ethernet switch cli reference guide 347

Index of commands 347

Ethernet switch cli reference guide 348

Index of commands 348

Ethernet switch cli reference guide 349

Index of commands 349

Ethernet switch cli reference guide 350

Index of commands 350

Ethernet switch cli reference guide 351

Index of commands 351

Zyxel GS2210-48 [306/351] This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 305

Содержание

Похожие устройства