Zyxel XS3700-24 [326/371] This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 324

This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3

Document conventions 4

Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4

Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4

Contents overview 6

Introduction 6

Reference a g 2 6

Reference h m 00 6

Reference n s 03 7

Appendices and index of commands 39 8

Reference t z 90 8

Introduction 9

Accessing the cli 11

Console port 11

Hapter 11

How to access and use the cli 11

Telnet 11

Logging in 12

The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12

Using shortcuts and getting help 12

Logging out 13

Saving your configuration 13

You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13

Hapter 14

Privilege level and command mode 14

Privilege levels 14

Privilege levels for commands 14

Privilege levels for login accounts 14

Privilege levels for sessions 15

Command modes 16

Command modes for privilege levels 0 12 16

Chapter 2 privilege level and command mode 17

Command modes for privilege levels 13 14 17

Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 17

Ethernet switch cli reference guide 17

If the session s privilege level is 13 14 the allowed commands are in one of several modes 17

Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17

Table 8 changing between command modes for privilege levels 13 14 17

Listing available commands 18

Changing the administrator password 19

Changing the enable password 19

Hapter 19

Initial setup 19

Afterwards you have to use the new ip address to access the switch 20

Changing the management ip address 20

Changing the out of band management ip address 20

Prohibiting concurrent logins 20

Chapter 3 initial setup 21

Ethernet switch cli reference guide 21

Looking at basic system information 21

Looking at the operating configuration 21

See chapter 93 on page 327 for more information about these attributes 21

This is illustrated in the following example 21

Use this command to look at general system information about the switch 21

Use this command to look at the current operating configuration 21

Reference a g 22

Aaa commands 24

Command summary 24

Hapter 24

Chapter 4 aaa commands 25

Ethernet switch cli reference guide 25

Table 10 command summary aaa accounting continued 25

Table 11 aaa authorization command summary 25

Chapter 4 aaa commands 26

Ethernet switch cli reference guide 26

Table 11 aaa authorization command summary continued 26

Arp commands 27

Command summary 27

Hapter 27

Chapter 5 arp commands 28

Command examples 28

Ethernet switch cli reference guide 28

Table 13 show ip arp 28

The following table describes the labels in this screen 28

This example creates a static arp entry and shows the arp tahle on the switch 28

Arp inspection commands 29

Command summary 29

Hapter 29

Chapter 6 arp inspection commands 30

Ethernet switch cli reference guide 30

Table 16 command summary arp inspection log 30

Table 17 command summary interface arp inspection 30

Table 18 command summary arp inspection vlan 30

Chapter 6 arp inspection commands 31

Command examples 31

Ethernet switch cli reference guide 31

Table 19 show arp inspection filter 31

The following table describes the labels in this screen 31

This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 31

This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 31

Chapter 6 arp inspection commands 32

Ethernet switch cli reference guide 32

Table 20 show arp inspection log 32

The following table describes the labels in this screen 32

This example displays whether ports are trusted or untrusted ports for arp inspection 32

Chapter 6 arp inspection commands 33

Ethernet switch cli reference guide 33

Table 21 show arp inspection interface port channel 33

The following table describes the labels in this screen 33

Arp learning commands 34

Command examples 34

Command summary 34

Hapter 34

Bandwidth commands 35

Command summary 35

Hapter 35

Chapter 8 bandwidth commands 36

Command examples ingress 36

Ethernet switch cli reference guide 36

Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 36

Table 24 command summary bandwidth control bandwidth limit 36

The following section lists the commands for this feature 36

This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 36

Chapter 8 bandwidth commands 37

Command examples cir pir 37

Ethernet switch cli reference guide 37

This example deactivates the outgoing bandwidth limit on port 1 37

This example displays the bandwidth limits configured on port 1 37

This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 37

Broadcast storm commands 38

Command summary 38

Hapter 38

128 broadcast packets per second 256 multicast packets per second 39

Chapter 9 broadcast storm commands 39

Command example bmstorm limit 39

Command example broadcast limit multicast limit dlf limit 39

Ethernet switch cli reference guide 39

Table 26 command summary storm control bmstorm limit and bstorm control continued 39

This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 39

This example enables broadcast storm control on the switch and configures port 1 to accept up to 39

64 dlf packets per second 40

Chapter 9 broadcast storm commands 40

Ethernet switch cli reference guide 40

Cfm commands 41

Cfm overview 41

Hapter 41

How cfm works 41

Cfm term definition 42

Chapter 10 cfm commands 43

Ethernet switch cli reference guide 43

Table 27 cfm term definitions 43

Table 28 cfm command user input values 43

This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 43

User input values 43

Chapter 10 cfm commands 44

Command summary 44

Ethernet switch cli reference guide 44

Table 29 cfm command summary 44

The following section lists the commands for this feature 44

Chapter 10 cfm commands 45

Ethernet switch cli reference guide 45

Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 45

Table 29 cfm command summary continued 45

Chapter 10 cfm commands 46

Ethernet switch cli reference guide 46

Table 29 cfm command summary continued 46

Command examples 47

Remember to save new settings using the write memory command 47

Chapter 10 cfm commands 48

Ethernet switch cli reference guide 48

Table 30 show cfm action mipccmdb 48

The following table describes the labels in this screen 48

This example displays all neighbors mep port information in the mip ccm databases 48

This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 48

This example starts a loopback test and displays the test result on the console 48

Chapter 10 cfm commands 49

Ethernet switch cli reference guide 49

This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 49

This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 49

This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 49

Classifier commands 50

Hapter 50

Chapter 11 classifier commands 51

Command summary 51

Ethernet switch cli reference guide 51

Table 31 command summary classifier 51

The following section lists the commands for this feature 51

Chapter 11 classifier commands 52

Command examples 52

Ethernet switch cli reference guide 52

In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 52

Table 32 common ethernet types and protocol number 52

Table 33 common ipv4protocol types and protocol numbers 52

The following table shows some other common ethernet types and the corresponding protocol number 52

This example creates a classifier for packets with a vlan id of 3 the resulting traffic flow is identified by the name vlan3 the policy command can use the name vlan3 to apply policy rules to this traffic flow see the policy example in chapter 56 on page 217 52

Cluster commands 54

Command summary 54

Hapter 54

Chapter 12 cluster commands 55

Command examples 55

Ethernet switch cli reference guide 55

Table 35 show cluster member 55

The following table describes the labels in this screen 55

This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 55

Chapter 12 cluster commands 56

Ethernet switch cli reference guide 56

Logs out of the member s cli and returns to the cli of the manager 56

Table 36 show cluster 56

The following table describes the labels in this screen 56

This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member 56

This example looks at the current status of the switch s cluster 56

Command summary 57

Date and time commands 57

Hapter 57

Chapter 13 date and time commands 58

Command examples 58

Ethernet switch cli reference guide 58

Table 38 time command summary continued 58

Table 39 timesync command summary 58

This example sets the current date current time time zone and daylight savings time 58

Chapter 13 date and time commands 59

Ethernet switch cli reference guide 59

Table 40 show timesync 59

The following table describes the labels in this screen 59

This example looks at the current time server settings 59

Data center bridging commands 60

Hapter 60

Overview 60

Pfc ets and dcbx standards 60

Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx 61

Chapter 14 data center bridging commands 61

Command summary 61

Ethernet switch cli reference guide 61

Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used 61

Table 41 dcb user input values 61

Table 42 priority flow control command summary 61

The following table describes user input values available in multiple commands for this feature 61

The following table lists the commands for this feature 61

This section shows the commands and examples for pfc ets application priority and dcbx 61

Chapter 14 data center bridging commands 62

Ethernet switch cli reference guide 62

In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a 62

In the following example switch a is not using switch b s configured priorities 62

In the following example switch a is using switch b s configured priorities 62

Pfc command examples 62

Table 42 priority flow control command summary continued 62

Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not 62

Chapter 14 data center bridging commands 64

Create and name traffic class ids with weights for the non sp traffic type 64

Ethernet switch cli reference guide 64

Ets command example 1 64

Table 43 ets command summary 64

Table 44 ets example traffic classes 64

Table 45 ets example traffic bandwidths 64

The following table lists the commands for this feature 64

The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps 64

This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each 64

Application priority 65

Chapter 14 data center bridging commands 65

Ethernet switch cli reference guide 65

Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class 65

Table 46 ets example priority traffic class id mapping 65

Table 47 application priority command summary 65

The following table lists the commands for this feature 65

This command shows traffic class 65

Use the application priority command to assign a priority to all fcoe traffic on a switch 65

Application priority can then be used in conjunction with ets and pfc as shown in the following examples 66

Application priority command examples 66

Chapter 14 data center bridging commands 66

Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 66

Ethernet switch cli reference guide 66

In the following example all fcoe traffic on the switch is assigned with priority 3 66

Table 48 ets example 2 traffic classes 66

This is an application priority command example with ets 66

This is an application priority command example with pfc 66

Chapter 14 data center bridging commands 67

Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx 67

Ethernet switch cli reference guide 67

In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information 67

See chapter 37 on page 159 for lldp command examples 67

See chapter 37 on page 159 for more information on lldp 67

Table 49 dcbx command summary 67

The following table lists the commands for this feature 67

This is a dcbx command example 67

Command summary 68

Dhcp commands 68

Hapter 68

Chapter 15 dhcp commands 69

Ethernet switch cli reference guide 69

Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 69

Note you have to disable dhcp relay before you can enable dhcp smart relay 69

Table 51 dhcp relay command summary continued 69

Table 52 dhcp relay broadcast command summary 69

Table 53 dhcp smart relay command summary 69

Chapter 15 dhcp commands 70

Command 70

Command examples 70

Ethernet switch cli reference guide 70

In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 70

Table 53 dhcp smart relay command summary continued 70

Table 54 dhcp server command summary 70

6 0 00 71

Chapter 15 dhcp commands 71

Ethernet switch cli reference guide 71

Figure 3 example global dhcp relay 71

Figure 4 example dhcp relay for two vlans 71

In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 71

This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 71

Vlan1 vlan2 71

Command summary 73

Dhcp snooping dhcp vlan commands 73

Hapter 73

Chapter 16 dhcp snooping dhcp vlan commands 74

Ethernet switch cli reference guide 74

Table 55 dhcp snooping command summary continued 74

Command examples 75

Chapter 16 dhcp snooping dhcp vlan commands 76

Displays dhcp snooping configuration details 76

Ethernet switch cli reference guide 76

Command summary 77

Diffserv commands 77

Hapter 77

Command summary 78

Display commands 78

Hapter 78

Command summary 79

Dvmrp commands 79

Dvmrp overview 79

Hapter 79

Chapter 19 dvmrp commands 80

Command examples 80

Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 80

Ethernet switch cli reference guide 80

Figure 6 dvmrp network example 80

In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 80

Table 59 command summary dvmrp continued 80

Cpu protection overview 81

Error disable and recovery commands 81

Error disable recovery overview 81

Hapter 81

User input values 81

Chapter 20 error disable and recovery commands 82

Command summary 82

Ethernet switch cli reference guide 82

Table 61 cpu protection command summary 82

Table 62 errdisable recovery command summary 82

The following section lists the commands for this feature 82

Chapter 20 error disable and recovery commands 83

Command examples 83

Ethernet switch cli reference guide 83

Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 83

Table 62 errdisable recovery command summary continued 83

This example shows you how to configure the following 83

Chapter 20 error disable and recovery commands 84

Ethernet switch cli reference guide 84

This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 84

Command summary 85

Ethernet oam commands 85

Hapter 85

Ieee 802 ah link layer ethernet oam implementation 85

Chapter 21 ethernet oam commands 86

Command examples 86

Ethernet switch cli reference guide 86

Table 63 ethernet oam command summary continued 86

This example enables ethernet oam on port 7 and sets the mode to active 86

Chapter 21 ethernet oam commands 87

Ethernet switch cli reference guide 87

Table 64 show ethernet oam discovery 87

The following table describes the labels in this screen 87

This example performs ethernet oam discovery from port 7 87

Chapter 21 ethernet oam commands 88

Ethernet switch cli reference guide 88

Table 64 show ethernet oam discovery continued 88

This example looks at the number of oam packets transferred on port 1 88

Chapter 21 ethernet oam commands 89

Ethernet switch cli reference guide 89

Table 65 show ethernet oam statistics 89

Table 66 show ethernet oam summary 89

The following table describes the labels in this screen 89

This example looks at the configuration of ports on which oam is enabled 89

Chapter 21 ethernet oam commands 90

Ethernet switch cli reference guide 90

Table 66 show ethernet oam summary continued 90

Command summary 91

External alarm commands 91

Hapter 91

Chapter 22 external alarm commands 92

Command examples 92

Ethernet switch cli reference guide 92

This example configures and shows the name and status of the external alarm s 92

Command summary 93

Garp commands 93

Garp overview 93

Hapter 93

Chapter 23 garp commands 94

Command examples 94

Ethernet switch cli reference guide 94

In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 94

Green ethernet commands 95

Green ethernet overview 95

Hapter 95

Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled 96

Chapter 24 green ethernet commands 96

Command summary 96

Ethernet switch cli reference guide 96

Green ethernet command example 96

In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters 96

Table 69 green ethernet command summary 96

The following section lists the commands for this feature 96

Auto power down 97

Chapter 24 green ethernet commands 97

Ethernet switch cli reference guide 97

Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled 97

Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled 97

Short reach 97

Chapter 24 green ethernet commands 98

Ethernet switch cli reference guide 98

The following example shows how to configure short reach if the switch supports short reach per port 98

The following example shows the display for short reach if the switch supports short reach per port and showing the status 98

Command examples 99

Command summary 99

Gvrp commands 99

Hapter 99

Reference h m 100

Command summary 102

Hapter 102

Https server commands 102

Chapter 26 https server commands 103

Command examples 103

Ethernet switch cli reference guide 103

Table 72 show https 103

The following table describes the labels in this screen 103

This example shows the current https settings statistics and sessions 103

Chapter 26 https server commands 104

Ethernet switch cli reference guide 104

Table 72 show https continued 104

Table 73 show https session 104

The following table describes the labels in this screen 104

This example shows the current https sessions 104

Chapter 26 https server commands 105

Ethernet switch cli reference guide 105

Table 73 show https session continued 105

Command summary 106

Guest vlan overview 106

Hapter 106

Ieee 802 x authentication commands 106

Chapter 27 ieee 802 x authentication commands 107

Command examples 107

Ethernet switch cli reference guide 107

Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 107

Table 74 port access authenticator command summary continued 107

This example configures the switch in the following ways 107

Command summary 109

Hapter 109

Igmp and multicasting commands 109

Igmp overview 109

Chapter 28 igmp and multicasting commands 110

Command examples 110

Ethernet switch cli reference guide 110

Sets the switch to flood unknown multicast frames sets the switch to non querier mode 110

Table 75 igmp command summary continued 110

Table 76 ipmc command summary 110

This example configures igmp on the switch with the following settings 110

Command summary 112

Hapter 112

Igmp snooping commands 112

Chapter 29 igmp snooping commands 113

Ethernet switch cli reference guide 113

Table 78 igmp snooping command summary continued 113

Chapter 29 igmp snooping commands 114

Ethernet switch cli reference guide 114

Table 78 igmp snooping command summary continued 114

Table 79 igmp snooping vlan command summary 114

Chapter 29 igmp snooping commands 115

Ethernet switch cli reference guide 115

Table 79 igmp snooping vlan command summary continued 115

Table 80 interface igmp command summary 115

Chapter 29 igmp snooping commands 116

Ethernet switch cli reference guide 116

Table 80 interface igmp command summary continued 116

Chapter 29 igmp snooping commands 117

Command examples 117

Ethernet switch cli reference guide 117

Host timeou 117

Table 80 interface igmp command summary continued 117

This example enables igmp snooping on the switch sets the 117

This example limits the number of multicast groups on port 1 to 5 117

This example shows the current multicast groups on the switch 117

Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 117

Chapter 29 igmp snooping commands 118

Ethernet switch cli reference guide 118

Table 81 show multicast 118

The following table describes the labels in this screen 118

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 118

This example shows the current multicast vlan on the switch 118

Command summary 119

Hapter 119

Igmp filtering commands 119

Chapter 30 igmp filtering commands 120

Command examples 120

Ethernet switch cli reference guide 120

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 120

Command summary 121

Hapter 121

Interface commands 121

10000 or 4000 122

Chapter 31 interface commands 122

Ethernet switch cli reference guide 122

Table 83 interface command summary continued 122

Chapter 31 interface commands 123

Command examples 123

Ethernet switch cli reference guide 123

Table 84 show interfaces 123

The following table describes the labels in this screen 123

This example looks at the current status of port 1 123

Chapter 31 interface commands 124

Ethernet switch cli reference guide 124

Table 84 show interfaces continued 124

Chapter 31 interface commands 125

Ethernet switch cli reference guide 125

Sets the default port vid to 200 2 sets these ports to accept only tagged frames 125

Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 125

Table 84 show interfaces continued 125

This example configures ports 1 3 4 and 5 in the following ways 125

This example configures ports 1 5 in the following ways 125

Command examples 126

Command summary 126

Hapter 126

Interface route domain mode 126

Command summary 127

Hapter 127

Ip commands 127

Chapter 33 ip commands 128

Command examples 128

Ethernet switch cli reference guide 128

Table 87 tcp and udp command summary continued 128

Table 88 show ip tcp 128

The following table describes the labels in this screen 128

This example shows the tcp statistics and listener ports see rfc 1213 for more information 128

Chapter 33 ip commands 129

Ethernet switch cli reference guide 129

Table 88 show ip tcp continued 129

Chapter 33 ip commands 130

Ethernet switch cli reference guide 130

Table 88 show ip tcp continued 130

Table 89 show ip udp 130

The following table describes the labels in this screen 130

This example shows the udp statistics and listener ports see rfc 1213 for more information 130

Command examples 131

Command summary 131

Hapter 131

Ip source binding commands 131

Chapter 34 ip source binding commands 132

Ethernet switch cli reference guide 132

Table 91 show ip source binding 132

The following table describes the labels in this screen 132

Hapter 133

Ipv6 addressing 133

Ipv6 commands 133

Ipv6 overview 133

Ipv6 terms 134

A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 135

Chapter 35 ipv6 commands 135

Ethernet switch cli reference guide 135

Loopback 135

Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 135

Table 94 predefined multicast address 135

Table 95 reserved multicast address 135

The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 135

Eui 64 136

Chapter 35 ipv6 commands 140

Command summary 140

Ethernet switch cli reference guide 140

In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 140

Report 140

Table 96 ipv6 user input values 140

Table 97 ipv6 address command summary 140

The following section lists the commands for this feature 140

The following table describes user input values available in multiple commands for this feature 140

Chapter 35 ipv6 commands 141

Ethernet switch cli reference guide 141

Note make sure an ipv6 router is available in the vlan network before using this command on the switch 141

Table 97 ipv6 address command summary continued 141

Chapter 35 ipv6 commands 142

Ethernet switch cli reference guide 142

Table 97 ipv6 address command summary continued 142

Table 98 ipv6 dhcp relay command summary 142

Chapter 35 ipv6 commands 143

Ethernet switch cli reference guide 143

Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 143

Table 100 ipv6 mld snooping proxy command summary 143

Table 99 ipv6 icmp and ping6 command summary 143

Chapter 35 ipv6 commands 144

Ethernet switch cli reference guide 144

Table 100 ipv6 mld snooping proxy command summary continued 144

Chapter 35 ipv6 commands 145

Ethernet switch cli reference guide 145

Table 100 ipv6 mld snooping proxy command summary continued 145

Chapter 35 ipv6 commands 146

Ethernet switch cli reference guide 146

Table 100 ipv6 mld snooping proxy command summary continued 146

Chapter 35 ipv6 commands 147

Ethernet switch cli reference guide 147

Table 101 ipv6 nd command summary 147

Chapter 35 ipv6 commands 148

Ethernet switch cli reference guide 148

Table 101 ipv6 nd command summary continued 148

Table 102 ipv6 neighbor command summary 148

Chapter 35 ipv6 commands 149

Command examples 149

Ethernet switch cli reference guide 149

Table 102 ipv6 neighbor command summary continued 149

This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 149

This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 149

Chapter 35 ipv6 commands 150

Ethernet switch cli reference guide 150

There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 150

This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 150

Chapter 35 ipv6 commands 151

Ethernet switch cli reference guide 151

Table 103 show ipv6 neighbor 151

The following table describes the labels in this screen 151

This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 151

By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 152

Chapter 35 ipv6 commands 152

Ethernet switch cli reference guide 152

Example enabling ipv6 on windows xp 2003 152

This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 152

Example http accessing the switch using ipv6 153

How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 153

Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 153

It s recommended to use internet explorer 7 or firefox to access the switch s web gui 153

Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 153

This example shows you how to access the switch using http on windows xp 153

Command summary 156

Hapter 156

Layer 2 protocol tunnel l2pt commands 156

Chapter 36 layer 2 protocol tunnel l2pt commands 157

Command examples 157

Ethernet switch cli reference guide 157

Table 105 l2pt command summary continued 157

This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 157

Chapter 36 layer 2 protocol tunnel l2pt commands 158

Ethernet switch cli reference guide 158

This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 158

This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 158

This example sets l2pt mode to tunnel for port 4 158

Hapter 159

Link layer discovery protocol lldp commands 159

Lldp overview 159

Chapter 37 link layer discovery protocol lldp commands 160

Command summary 160

Ethernet switch cli reference guide 160

Lldp med link layer discovery protocol for media endpoint devices is an enhanced extension to lldp especially for voice applications you can use lldp med to advertise location based information of emergency calls and or network policies for voice video streaming 160

Table 106 lldp command summary 160

The following section lists the commands for this feature 160

Chapter 37 link layer discovery protocol lldp commands 161

Ethernet switch cli reference guide 161

Table 106 lldp command summary continued 161

Chapter 37 link layer discovery protocol lldp commands 162

Ethernet switch cli reference guide 162

Table 106 lldp command summary continued 162

Chapter 37 link layer discovery protocol lldp commands 163

Ethernet switch cli reference guide 163

Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 163

Table 106 lldp command summary continued 163

Chapter 37 link layer discovery protocol lldp commands 164

Command examples 164

Ethernet switch cli reference guide 164

See chapter 14 on page 60 for dcb configuration and examples 164

This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 164

This example shows global switch lldp settings 164

Chapter 37 link layer discovery protocol lldp commands 165

Ethernet switch cli reference guide 165

Lldp settings on a port 165

Switch lldp settings 165

Table 107 165

Table 108 165

The following table describes the labels in this screen 165

This example shows lldp settings on a port 165

Chapter 37 link layer discovery protocol lldp commands 166

Continued 166

Ethernet switch cli reference guide 166

Lldp settings on a por 166

Switch lldp statistics 166

Table 108 166

Table 109 166

The following table describes the labels in this screen 166

This example shows global switch lldp statistics 166

This example shows lldp statistics on a port 166

Chapter 37 link layer discovery protocol lldp commands 167

Ethernet switch cli reference guide 167

Lldp statistics on a port 167

Local lldp information 167

Table 110 167

Table 111 167

The following table describes the labels in this screen 167

This example shows local switch the switch you re accessing lldp information 167

Chapter 37 link layer discovery protocol lldp commands 168

Ethernet switch cli reference guide 168

Local switch lldp information on a port 168

Table 112 168

The following table describes the labels in this screen 168

This example shows local switch the switch you re accessing lldp information on a port 168

Chapter 37 link layer discovery protocol lldp commands 169

Continued 169

Ethernet switch cli reference guide 169

Local switch lldp information on a por 169

Remote switch lldp information 169

Table 112 169

Table 113 169

The following table describes the labels in this screen 169

This example shows remote switch the switch connected to the port on the switch you re accessing lldp information 169

Chapter 37 link layer discovery protocol lldp commands 170

Continued 170

Ethernet switch cli reference guide 170

Remote switch lldp informatio 170

Table 113 170

Command summary 171

Hapter 171

Load sharing commands 171

Load sharing overview 171

Chapter 38 load sharing commands 172

Command examples 172

Ethernet switch cli reference guide 172

Table 114 load sharing command summary continued 172

This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 172

Command examples 173

Command summary 173

Hapter 173

Logging commands 173

Command examples 174

Command summary 174

Hapter 174

Login account commands 174

Password encryption 174

Command summary 176

Hapter 176

Loopguard commands 176

Chapter 41 loopguard commands 177

Command examples 177

Ethernet switch cli reference guide 177

Table 117 show loopguard 177

The following table describes the labels in this screen 177

This example enables loopguard on ports 1 3 177

Command summary 178

Hapter 178

Mac address commands 178

Chapter 42 mac address commands 179

Command examples 179

Ethernet switch cli reference guide 179

Table 118 mac mac aging time and mac flush command summary continued 179

Table 119 show mac address table 179

The following table describes the labels in this screen 179

This example shows the current mac address table 179

Command summary 180

Hapter 180

Mac authentication commands 180

Mac authentication overview 180

Chapter 43 mac authentication commands 181

Command examples 181

Ethernet switch cli reference guide 181

Table 120 mac authentication command summary continued 181

This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 181

Command summary 182

Hapter 182

Mac based vlan 182

Mac based vlan overview 182

Chapter 44 mac based vlan 183

Command example add source mac address 183

Command example remove source mac address 183

Ethernet switch cli reference guide 183

This example adds a binding source mac address to a mac based vlan with mac address 00 11 22 33 44 55 vlan id number 3 and priority level 6 183

This example deletes a binding source mac address to a mac based vlan with mac address 00 11 22 33 44 55 183

Command summary 184

Hapter 184

Mac filter commands 184

Command example 185

Command example filter source 185

Command summary 186

Hapter 186

Mac forward commands 186

Command summary 187

Hapter 187

Mac pinning commands 187

Chapter 47 mac pinning commands 188

Command examples 188

Ethernet switch cli reference guide 188

This example enables mac pinning on the switch and port 3 it also shows the mac pinning status 188

Hapter 189

Mirror commands 189

Chapter 48 mirror commands 190

Command summary 190

Ethernet switch cli reference guide 190

Table 127 mirror command summary 190

Table 128 mirror filter command summary 190

The following section lists the commands for this feature 190

Chapter 48 mirror commands 191

Command examples 191

Ethernet switch cli reference guide 191

Table 129 rmirror command summary 191

This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 191

Chapter 48 mirror commands 192

Ethernet switch cli reference guide 192

This example creates an rmirror vlan with a vlan id of 200 on the switch sets port 6 as the reflector port and sets the priority of mirrored traffic to 3 in this rmirror vlan when the switch is the source device this example also specifies the ports 4 and 5 on which traffic will be mirrored and shows the rmirror vlan settings 192

This example displays the mirror settings of the switch after you configured in the example above 192

Command summary 193

Hapter 193

Mrstp commands 193

Mrstp overview 193

Chapter 49 mrstp commands 194

Command examples 194

Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 194

Ethernet switch cli reference guide 194

In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 194

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 194

Table 130 command summary mrstp 194

This example configures mrstp in the following way 194

Command summary 195

Hapter 195

Mstp commands 195

Chapter 50 mstp commands 196

Command examples 196

Ethernet switch cli reference guide 196

Table 132 mstp instance command summary 196

This example shows the current mstp configuration 196

Chapter 50 mstp commands 197

Ethernet switch cli reference guide 197

Table 133 show mstp 197

The following table describes the labels in this screen 197

This example shows the current cist configuration mstp instance 0 197

Chapter 50 mstp commands 198

Ethernet switch cli reference guide 198

Table 134 show mstp instance 198

The following table describes the labels in this screen 198

Command examples 200

Command summary 200

Hapter 200

Multiple login commands 200

Command summary 201

Hapter 201

Mvr commands 201

Command examples 202

Reference n s 203

Command summary 205

Hapter 205

Ospf commands 205

Ospf overview 205

Chapter 53 ospf commands 206

Ethernet switch cli reference guide 206

Table 138 ospf command summary continued 206

Chapter 53 ospf commands 207

Ethernet switch cli reference guide 207

Note you cannot set two routing protocols to have the same administrative distance 207

Table 138 ospf command summary continued 207

Chapter 53 ospf commands 208

Command examples 208

Ethernet switch cli reference guide 208

Figure 7 ospf network example 208

In this example the switch a is an area border router abr in an ospf network 208

Table 138 ospf command summary continued 208

In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 209

Is also set to 1 as this router should participate in router elections 209

This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 209

This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 209

Chapter 53 ospf commands 210

Ethernet switch cli reference guide 210

From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 210

This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 210

Command summary 211

Hapter 211

Password commands 211

Password encryption 211

Command examples 212

Command summary 213

Hapter 213

Poe commands 213

Chapter 55 poe commands 214

Command examples 214

Ethernet switch cli reference guide 214

Table 140 pwr command summary continued 214

This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 214

This example sets the maximum amount of power allowed for port 2 to 7500 mw 214

Chapter 55 poe commands 215

Ethernet switch cli reference guide 215

Table 141 show pwr 215

The following table describes the labels in this screen 215

This example shows the current status and configuration of power over ethernet 215

Chapter 55 poe commands 216

Ethernet switch cli reference guide 216

Note if the management mode is set to consumption this field shows na 216

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 216

Table 141 show pwr continued 216

Command summary 217

Hapter 217

Policy commands 217

Chapter 56 policy commands 218

Ethernet switch cli reference guide 218

Table 142 policy command summary 218

Chapter 56 policy commands 219

Command examples 219

Ethernet switch cli reference guide 219

Table 142 policy command summary 219

This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 50 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 219

Chapter 56 policy commands 220

Ethernet switch cli reference guide 220

This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 50 this policy forwards class1 packets to port 8 220

Command summary 221

Hapter 221

Policy route commands 221

9 it then shows the policy routing information 222

By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 222

Chapter 57 policy route commands 222

Command examples 222

Ethernet switch cli reference guide 222

To forward packets that match the layer 3 classifier to the gateway with ip address 222

Command summary 223

Hapter 223

Port security commands 223

Chapter 58 port security commands 224

Command examples 224

Ethernet switch cli reference guide 224

Table 144 port security command summary continued 224

This example enables port security on port 1 and limits the number of learned mac addresses to 5 224

Command examples 225

Command summary 225

Hapter 225

Port based vlan commands 225

Hapter 226

Port state 226

Pppoe ia commands 226

Pppoe intermediate agent overview 226

Chapter 60 pppoe ia commands 227

Command summary 227

Ethernet switch cli reference guide 227

Table 146 pppoe intermediate agent command summary 227

The following section lists the commands for this feature 227

The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 227

Chapter 60 pppoe ia commands 228

Ethernet switch cli reference guide 228

Table 146 pppoe intermediate agent command summary continued 228

Chapter 60 pppoe ia commands 229

Command examples 229

Ethernet switch cli reference guide 229

This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 229

This is an example of how to enable and configure pppoe ia for vlans 229

This is an example of how to enable and disable pppoe ia on the switch 229

This is an example of how to set a pppoe ia trust port 229

Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 230

Similarly we can let the circuit id carry the information which we configure 230

The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 230

This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 230

Vendor specific tag examples 230

Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 231

Chapter 60 pppoe ia commands 231

Ethernet switch cli reference guide 231

Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 231

Hapter 232

Legacy pvlan overview 232

Private vlan commands 232

Command examples 233

Legacy pvlan command summary 233

That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 233

The following section lists the commands for this feature 233

This example sets a private vlan rule 233

Command summary 234

Private vlan 234

That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the 234

The following section lists the commands for this feature 234

This example sets a private vlan rule 234

Chapter 61 private vlan commands 235

Command example 235

Ethernet switch cli reference guide 235

Table 148 private vlan command summary continued 235

This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 102 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch 235

Chapter 61 private vlan commands 236

Ethernet switch cli reference guide 236

Command summary 237

Hapter 237

Protocol based vlan commands 237

Protocol based vlan overview 237

Chapter 62 protocol based vlan commands 238

Command examples 238

Ethernet switch cli reference guide 238

Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 238

Table 149 protocol based vlan command summary continued 238

This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 238

Hapter 239

Queuing commands 239

Queuing overview 239

Chapter 63 queuing commands 240

Command summary port by port configuration 240

Ethernet switch cli reference guide 240

For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 240

Note some models only support 4 queues 240

Table 150 queuing command summary 240

The following section lists the commands for this feature 240

Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 240

Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 240

Chapter 63 queuing commands 241

Command examples port by port configuration 241

Ethernet switch cli reference guide 241

Table 150 queuing command summary continued 241

This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 241

Chapter 63 queuing commands 242

Command examples system wide 242

Command summary system wide configuration 242

Ethernet switch cli reference guide 242

Note some models only support 4 queues 242

Table 151 queueing command summary 242

The following section lists the commands for this feature 242

This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 242

This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 242

Command summary 243

Hapter 243

Radius commands 243

Chapter 64 radius commands 244

Command examples 244

Ethernet switch cli reference guide 244

Table 153 radius accounting command summary continued 244

This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 244

Command summary 245

Hapter 245

Remote management commands 245

Chapter 65 remote management commands 246

Command examples 246

Ethernet switch cli reference guide 246

Table 156 service control command summary continued 246

This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 246

Chapter 65 remote management commands 247

Ethernet switch cli reference guide 247

This example disables all snmp and icmp access to the 247

Command summary 248

Hapter 248

Rip commands 248

Rip overview 248

Chapter 66 rip commands 249

Command examples 249

Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 249

Ethernet switch cli reference guide 249

Note you cannot set two routing protocols to have the same administrative distance 249

Table 157 rip command summary continued 249

This example 249

Hapter 250

Rmon overview 250

User input values 250

Chapter 67 rmon 251

Command summary 251

Ethernet switch cli reference guide 251

Table 160 rmon command summary 251

The following section lists the commands for this feature 251

Chapter 67 rmon 252

Ethernet switch cli reference guide 252

Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 252

Rmon alarm command example 252

Rmon event command example 252

Syntax 252

This example also shows how to display the setting results 252

This example shows how to configure the switch s action when an rmon event using the following settings 252

Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 67 on page 252 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 67 on page 252 who will handle this alarm operator 253

Chapter 67 rmon 253

Ethernet switch cli reference guide 253

This example shows you how to configure an alarm using the following settings 253

Chapter 67 rmon 254

Ethernet switch cli reference guide 254

Rmon statistics command example 254

The ethernet statistics table entry s index number 1 collecting data samples from which port 12 254

This example also shows how to display the data collection results 254

This example also shows how to display the setting results 254

This example shows how to configure the settings to display current network traffic statistics using the following settings 254

Chapter 67 rmon 255

Ethernet switch cli reference guide 255

Rmon history command example 255

The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 255

This example also shows how to display the data collection results 255

This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 255

Command summary 256

Hapter 256

Running configuration commands 256

Switch configuration file 256

Chapter 68 running configuration commands 257

Command examples 257

Ethernet switch cli reference guide 257

Table 162 running config command summary 257

The following section lists the commands for this feature 257

This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 257

This example resets the switch to the factory default settings 257

Command summary 258

Hapter 258

Sflow overview 258

Chapter 69 sflow 259

Command examples 259

Ethernet switch cli reference guide 259

Table 163 sflow command summary continued 259

This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 259

Hapter 260

Smart isolation commands 260

Smart isolation overview 260

Command summary 261

The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 261

Chapter 70 smart isolation commands 262

Command examples 262

Ethernet switch cli reference guide 262

Table 165 show smart isolation 262

The following table describes the labels in this screen 262

This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 262

Chapter 70 smart isolation commands 263

Ethernet switch cli reference guide 263

Table 165 show smart isolation continued 263

Command summary 264

Hapter 264

Snmp server commands 264

Chapter 71 snmp server commands 265

Ethernet switch cli reference guide 265

Table 167 snmp server command summary continued 265

Chapter 71 snmp server commands 266

Ethernet switch cli reference guide 266

Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 266

Table 167 snmp server command summary continued 266

Table 168 snmp server trap destination enable traps command summary 266

Chapter 71 snmp server commands 267

Ethernet switch cli reference guide 267

Table 168 snmp server trap destination enable traps command summary continued 267

Chapter 71 snmp server commands 268

Command examples 268

Ethernet switch cli reference guide 268

This example sets the switch to not send the linkup and linkdown traps received on port 3 to the snmp manager 268

This example shows you how to display all snmp user information on the switch 268

This example shows you how to display the snmp information on the switch 268

Hapter 269

Overview 269

Stacking commands 269

Command summary 270

If two or more switches have stacking force master enabled then the switch will use stacking priority to determine which is master if they have the same stacking priority then the switch with the longest up time is selected uptime is measured in increments of 10 minutes the switch with the higher number of increments is selected if they have the same uptime then the switch with the lowest mac address will be the master 270

Master election occurs when stacking standalone mode changes or when a stacking port is temporarily disconnected in stacking mode 270

Stacking force master 2 highest stacking priority 3 longest system up time 4 lowest mac address 270

Stacking will automatically choose a master switch in a stack but you can overwrite that by actively forcing a switch to become a master switch using the stacking force master command this master switch will have the highest priority over all other stacked switches even when they have same priority value 270

The following section lists the commands for this feature 270

Chapter 72 stacking commands 271

Command examples 271

Ethernet switch cli reference guide 271

Select a switch to be the master change its mode to stacking mode you will see a message asking you to confirm the change press y to confirm and the switch will reboot automatically using a new config01 2 after reboot completes the master led will turn on 3 force the switch to be master configure stacking priority to a high value such as 63 and set its slot id to 1 271

Table 170 stacking command summary continued 271

Use show system information to show current switch stacking mode 271

Chapter 72 stacking commands 273

Ethernet switch cli reference guide 273

Use these commands to then see the stacking status of the stack see details of the slots in the stack and see details of an individual slot 273

Chapter 72 stacking commands 274

Ethernet switch cli reference guide 274

Use these commands to see the stacking mode on a switch 274

Command summary 275

Hapter 275

Stp and rstp commands 275

Chapter 73 stp and rstp commands 276

Command examples 276

Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 276

Ethernet switch cli reference guide 276

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 276

Table 171 spanning tree command summary continued 276

This example configures stp in the following ways 276

Chapter 73 stp and rstp commands 277

Ethernet switch cli reference guide 277

Table 172 show spanning tree config 277

The following table describes the labels in this screen 277

This example shows the current stp settings 277

Chapter 73 stp and rstp commands 278

Ethernet switch cli reference guide 278

In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 278

Table 172 show spanning tree config continued 278

Command examples 279

Command summary 279

Hapter 279

Ssh commands 279

Chapter 74 ssh commands 280

Ethernet switch cli reference guide 280

Table 174 show ssh 280

The following table describes the labels in this screen 280

This example shows the general ssh settings 280

Command summary 281

Hapter 281

Static multicast commands 281

Command examples 282

Command summary 283

Hapter 283

Static route commands 283

Chapter 76 static route commands 284

Command examples 284

Ethernet switch cli reference guide 284

For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 284

Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 284

Table 177 show ip route 284

The following table describes the labels in this screen 284

This example shows the current routing table 284

You can create this static route if it is inactive however 284

Chapter 76 static route commands 285

Ethernet switch cli reference guide 285

You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 285

Command summary 286

Hapter 286

Subnet based vlan commands 286

Subnet based vlan overview 286

Chapter 77 subnet based vlan commands 287

Command examples 287

Ethernet switch cli reference guide 287

Table 178 subnet based vlan command summary continued 287

This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 287

Command summary 288

Hapter 288

Syslog commands 288

Chapter 78 syslog commands 289

Ethernet switch cli reference guide 289

Table 182 syslog type command summary continued 289

Reference t z 290

Command summary 292

Hapter 292

Tacacs commands 292

Command summary 293

Hapter 293

Tech support commands 293

Tech support overview 293

Chapter 80 tech support commands 294

Command examples 294

Ethernet switch cli reference guide 294

This example sets the mbuf threshold to 60 checks the mbuf threshold setting and generates the mbuf log report 294

Chapter 80 tech support commands 295

Ethernet switch cli reference guide 295

This example sets the cpu threshold to 80 and time to 5 then uses the command show logging to see the log 295

Command summary 296

Hapter 296

Tftp commands 296

About time range 297

Command summary 297

Hapter 297

Time range commands 297

Chapter 82 time range commands 298

Ethernet switch cli reference guide 298

The following are some examples of using the time range commands 298

Command summary 299

Hapter 299

Trunk commands 299

Chapter 83 trunk commands 300

Command examples 300

Ethernet switch cli reference guide 300

Table 189 lacp command summary 300

Table 190 show trunk 300

The following table describes the labels in this screen 300

This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 300

This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 300

This example looks at the current trunks 300

Chapter 83 trunk commands 301

Ethernet switch cli reference guide 301

Table 190 show trunk continued 301

Table 191 show lacp 301

The following table describes the labels in this screen 301

This example shows the current lacp settings 301

Command summary 302

Hapter 302

Trtcm commands 302

Trtcm overview 302

Chapter 84 trtcm commands 303

Command examples 303

Ethernet switch cli reference guide 303

Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 303

Table 192 trtcm command summary continued 303

This example activates trtcm on the switch with the following settings 303

Chapter 84 trtcm commands 304

Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example 304

Ethernet switch cli reference guide 304

This examples activates trtcm on the switch with the following settings 304

Hapter 305

Vlan commands 305

Vlan configuration overview 305

Vlan overview 305

Command summary 306

See chapter 31 on page 121 for interface port channel commands 306

The following section lists the commands for the ingress checking feature 306

The following section lists the commands for this feature 306

Vlan ingress checking implementation differs across switch models 306

Chapter 85 vlan commands 307

Command examples 307

Ethernet switch cli reference guide 307

Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 307

Table 194 vlan1q ingress check command summary 307

Table 195 ingress check command summary 307

This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 307

This example deletes entry 2 in the static vlan table 307

This example shows the vlan table 307

Chapter 85 vlan commands 308

Ethernet switch cli reference guide 308

Table 196 show vlan 308

The following table describes the labels in this screen 308

This example enables ingress checking on ports 1 5 308

Chapter 85 vlan commands 309

Ethernet switch cli reference guide 309

Table 197 show vlan counters 309

The following table describes the labels in this screen 309

This example displays concurrent incoming packet statistics for vlan 1 309

Chapter 85 vlan commands 310

Ethernet switch cli reference guide 310

Table 197 show vlan counters continued 310

Command summary 311

Hapter 311

Ip interfaces overview 311

Vlan ip commands 311

Chapter 86 vlan ip commands 312

Command examples 312

Ethernet switch cli reference guide 312

See section 3 on page 20 for an example of how to configure a vlan management ip address 312

Table 198 vlan ip address command summary continued 312

Command summary 313

Hapter 313

Vlan mapping commands 313

Chapter 87 vlan mapping commands 314

Command examples 314

Ethernet switch cli reference guide 314

This example enables vlan mapping on port 4 314

This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 314

Command summary 315

Hapter 315

Vlan port isolation commands 315

Command summary 316

Hapter 316

Vlan stacking commands 316

A 37 24 317

B 48 24 317

Chapter 89 vlan stacking commands 317

Command examples 317

Customer a customer a 317

Customer b customer b 317

Ethernet switch cli reference guide 317

Figure 10 example vlan stacking 317

In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 317

Table 201 vlan stacking command summary continued 317

Vlan 24 vlan 24 317

Chapter 89 vlan stacking commands 318

Ethernet switch cli reference guide 318

This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 318

Command summary 319

Hapter 319

Vlan trunking commands 319

Command summary 320

Hapter 320

Voice vlan commands 320

Voice vlan overview 320

Chapter 91 voice vlan commands 321

Command example 321

Ethernet switch cli reference guide 321

This example configures voice vlan to port number 5 priority level number 6 and displays voice vlan session 321

Chapter 91 voice vlan commands 322

Ethernet switch cli reference guide 322

This example sets the vlan ports for voice vlan as seen in the above example normal port is 5 to 10 fixed port is 11 to 20 and forbidden port is 21 to 28 port numbers can be higher if the switch model has 48 ports 322

Command summary 323

Hapter 323

Vrrp commands 323

Vrrp overview 323

Chapter 92 vrrp commands 324

Command examples 324

Ethernet 324

Ethernet switch cli reference guide 324

Figure 11 example vrrp 324

Table 204 vrrp command summary continued 324

The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 324

Chapter 92 vrrp commands 325

Ethernet switch cli reference guide 325

This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 324 325

Chapter 92 vrrp commands 326

Ethernet switch cli reference guide 326

This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 324 326

Additional commands 327

Command summary 327

Hapter 327

Chapter 93 additional commands 328

Ethernet switch cli reference guide 328

Table 206 command summary additional enable mode continued 328

Chapter 93 additional commands 329

Ethernet switch cli reference guide 329

Table 206 command summary additional enable mode continued 329

Table 207 command summary additional configure mode 329

Chapter 93 additional commands 330

Command examples 330

Ethernet switch cli reference guide 330

Table 208 cable diagnostics 330

The following table describes the labels in this screen 330

This example checks the cable pairs on ports 1 and 4 330

Chapter 93 additional commands 331

Ethernet switch cli reference guide 331

Table 209 ping 331

Table 210 show alarm status 331

The following table describes the labels in this screen 331

This example sends ping requests to an ethernet device with ip address 172 6 7 54 331

This example shows the current status of the various alarms in the switch 331

Chapter 93 additional commands 332

Ethernet switch cli reference guide 332

Table 210 show alarm status continued 332

Table 211 show cpu utilization 332

The following table describes the labels in this screen 332

This example shows the current and recent cpu utilization 332

Chapter 93 additional commands 333

Ethernet switch cli reference guide 333

Table 212 show hardware monitor 333

The following table describes the labels in this screen 333

This example looks at the current sensor readings from various places in the hardware the display for your switch may be different 333

Chapter 93 additional commands 334

Ethernet switch cli reference guide 334

Table 212 show hardware monitor continued 334

This example displays multicast vlan configuration on the 334

Chapter 93 additional commands 335

Ethernet switch cli reference guide 335

Note if the management mode is set to consumption this field shows na 335

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 335

Table 213 show multicast vlan 335

Table 214 show poe status 335

Table 215 show system information 335

The following table describes the labels in this screen 335

This example looks at general system information about the switch 335

This example shows the current status of power over ethernet 335

Chapter 93 additional commands 336

Ethernet switch cli reference guide 336

For temperature voltage transmission bias transmission and receiving power as shown 336

Table 215 show system information continued 336

This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 336

You can also see the alarm and warning threasholds 336

Chapter 93 additional commands 337

Ethernet switch cli reference guide 337

For temperature voltage transmission bias transmission and receiving power as shown 337

This example displays route information to an ethernet device with ip address 337

This example displays run time sfp small form facter pluggable parameters on port 21 on the 337

This example displays the firmware version the switch is currently using 337

This example runs an internal loopback test on ports 3 6 337

You can also see the alarm and warning threasholds 337

Appendices and index of commands 339

Default values 341

Ppendix 341

Certifications 342

Copyright 342

Legal information 342

Ppendix 342

Zyxel limited warranty 343

Index of commands 345

Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 345

Ethernet switch cli reference guide 346

Index of commands 346

Ethernet switch cli reference guide 347

Index of commands 347

Ethernet switch cli reference guide 348

Index of commands 348

Ethernet switch cli reference guide 349

Index of commands 349

Ethernet switch cli reference guide 350

Index of commands 350

Ethernet switch cli reference guide 351

Index of commands 351

Ethernet switch cli reference guide 352

Index of commands 352

Ethernet switch cli reference guide 353

Index of commands 353

Ethernet switch cli reference guide 354

Index of commands 354

Ethernet switch cli reference guide 355

Index of commands 355

Ethernet switch cli reference guide 356

Index of commands 356

Ethernet switch cli reference guide 357

Index of commands 357

Ethernet switch cli reference guide 358

Index of commands 358

Ethernet switch cli reference guide 359

Index of commands 359

Ethernet switch cli reference guide 360

Index of commands 360

Ethernet switch cli reference guide 361

Index of commands 361

Ethernet switch cli reference guide 362

Index of commands 362

Ethernet switch cli reference guide 363

Index of commands 363

Ethernet switch cli reference guide 364

Index of commands 364

Ethernet switch cli reference guide 365

Index of commands 365

Ethernet switch cli reference guide 366

Index of commands 366

Ethernet switch cli reference guide 367

Index of commands 367

Ethernet switch cli reference guide 368

Index of commands 368

Ethernet switch cli reference guide 369

Index of commands 369

Ethernet switch cli reference guide 370

Index of commands 370

Ethernet switch cli reference guide 371

Index of commands 371

Zyxel XS3700-24 [326/371] This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 324

Содержание

Похожие устройства