Zyxel XS3900-48F [238/384] This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 59 this policy forwards class1 packets to port 8

This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3

Document conventions 4

Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4

Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4

Contents overview 7

Introduction 11 7

Reference a g 27 7

Reference h m 113 7

Reference n s 221 8

Appendices and index of commands 351 9

Reference t z 303 9

Introduction 11

Accessing the cli 13

Console port 13

Hapter 13

How to access and use the cli 13

Telnet 13

Logging in 14

The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 14

Using shortcuts and getting help 14

Logging out 15

Saving your configuration 15

You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 15

Hapter 17

Privilege level and command mode 17

Privilege levels 17

Privilege levels for commands 17

Privilege levels for login accounts 17

Privilege levels for sessions 18

Command modes 19

Command modes for privilege levels 0 12 19

Chapter 2 privilege level and command mode 20

Command modes for privilege levels 13 14 20

Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 20

Ethernet switch cli reference guide 20

If the session s privilege level is 13 14 the allowed commands are in one of several modes 20

Table 7 command modes for privilege levels 13 14 and the types of commands in each one 20

Table 8 changing between command modes for privilege levels 13 14 20

Listing available commands 21

Changing the administrator password 23

Changing the enable password 23

Hapter 23

Initial setup 23

Afterwards you have to use the new ip address to access the switch 24

Changing the management ip address 24

Changing the out of band management ip address 24

Prohibiting concurrent logins 24

Chapter 3 initial setup 25

Ethernet switch cli reference guide 25

Looking at basic system information 25

Looking at the operating configuration 25

See chapter 87 on page 339 for more information about these attributes 25

This is illustrated in the following example 25

Use this command to look at general system information about the switch 25

Use this command to look at the current operating configuration 25

Reference a g 27

Aaa commands 29

Command summary 29

Hapter 29

Chapter 4 aaa commands 30

Ethernet switch cli reference guide 30

Table 10 command summary aaa accounting continued 30

Table 11 aaa authorization command summary 30

Arp commands 31

Command examples 31

Command summary 31

Hapter 31

Chapter 5 arp commands 32

Ethernet switch cli reference guide 32

Table 13 show ip arp continued 32

Arp inspection commands 33

Command summary 33

Hapter 33

Chapter 6 arp inspection commands 34

Ethernet switch cli reference guide 34

Table 16 command summary arp inspection log 34

Table 17 command summary interface arp inspection 34

Table 18 command summary arp inspection vlan 34

Chapter 6 arp inspection commands 35

Command examples 35

Ethernet switch cli reference guide 35

Table 19 show arp inspection filter 35

The following table describes the labels in this screen 35

This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 35

This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 35

Chapter 6 arp inspection commands 36

Ethernet switch cli reference guide 36

Table 20 show arp inspection log 36

The following table describes the labels in this screen 36

This example displays whether ports are trusted or untrusted ports for arp inspection 36

Chapter 6 arp inspection commands 37

Ethernet switch cli reference guide 37

Table 21 show arp inspection interface port channel 37

The following table describes the labels in this screen 37

Arp learning commands 39

Command examples 39

Command summary 39

Hapter 39

Bandwidth commands 41

Command summary 41

Hapter 41

Chapter 8 bandwidth commands 42

Command examples ingress 42

Ethernet switch cli reference guide 42

Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 42

Table 24 command summary bandwidth control bandwidth limit 42

The following section lists the commands for this feature 42

This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 42

Chapter 8 bandwidth commands 43

Command examples cir pir 43

Ethernet switch cli reference guide 43

This example deactivates the outgoing bandwidth limit on port 1 43

This example displays the bandwidth limits configured on port 1 43

This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 43

Broadcast storm commands 45

Command summary 45

Hapter 45

128 broadcast packets per second 256 multicast packets per second 46

Chapter 9 broadcast storm commands 46

Command example bmstorm limit 46

Command example broadcast limit multicast limit dlf limit 46

Ethernet switch cli reference guide 46

Table 26 command summary storm control bmstorm limit and bstorm control continued 46

This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 46

This example enables broadcast storm control on the switch and configures port 1 to accept up to 46

64 dlf packets per second 47

Chapter 9 broadcast storm commands 47

Ethernet switch cli reference guide 47

Cfm commands 49

Cfm overview 49

Hapter 49

How cfm works 49

Cfm term definition 50

Chapter 10 cfm commands 51

Ethernet switch cli reference guide 51

Table 27 cfm term definitions 51

Table 28 cfm command user input values 51

This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 51

User input values 51

Chapter 10 cfm commands 52

Command summary 52

Ethernet switch cli reference guide 52

Table 29 cfm command summary 52

The following section lists the commands for this feature 52

Chapter 10 cfm commands 53

Ethernet switch cli reference guide 53

Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 53

Table 29 cfm command summary continued 53

Chapter 10 cfm commands 54

Ethernet switch cli reference guide 54

Table 29 cfm command summary continued 54

Command examples 55

Remember to save new settings using the write memory command 55

Chapter 10 cfm commands 56

Ethernet switch cli reference guide 56

Table 30 show cfm action mipccmdb 56

The following table describes the labels in this screen 56

This example displays all neighbors mep port information in the mip ccm databases 56

This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 56

This example starts a loopback test and displays the test result on the console 56

Chapter 10 cfm commands 57

Ethernet switch cli reference guide 57

This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 57

This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 57

This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 57

Classifier commands 59

Command summary 59

Hapter 59

Chapter 11 classifier commands 60

Command examples 60

Ethernet switch cli reference guide 60

In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 60

Table 32 common ethernet types and protocol number 60

Table 33 common ipv4protocol types and protocol numbers 60

The following table shows some other common ethernet types and the corresponding protocol number 60

This example creates a classifier for packets with a vlan id of 3 the resulting traffic flow is identified by the name vlan3 the policy command can use the name vlan3 to apply policy rules to this traffic flow see the policy example in chapter 54 on page 235 60

Cluster commands 63

Command summary 63

Hapter 63

Chapter 12 cluster commands 64

Command examples 64

Ethernet switch cli reference guide 64

Table 35 show cluster member 64

The following table describes the labels in this screen 64

This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 64

Chapter 12 cluster commands 65

Ethernet switch cli reference guide 65

Logs out of the member s cli and returns to the cli of the manager 65

Table 36 show cluster 65

The following table describes the labels in this screen 65

This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member 65

This example looks at the current status of the switch s cluster 65

Command summary 67

Date and time commands 67

Hapter 67

Chapter 13 date and time commands 68

Command examples 68

Ethernet switch cli reference guide 68

Table 38 time command summary continued 68

Table 39 timesync command summary 68

This example sets the current date current time time zone and daylight savings time 68

Chapter 13 date and time commands 69

Ethernet switch cli reference guide 69

Table 40 show timesync 69

The following table describes the labels in this screen 69

This example looks at the current time server settings 69

Data center bridging commands 71

Hapter 71

Overview 71

Pfc ets and dcbx standards 71

Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx 72

Chapter 14 data center bridging commands 72

Command summary 72

Ethernet switch cli reference guide 72

Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used 72

Table 41 dcb user input values 72

Table 42 priority flow control command summary 72

The following table describes user input values available in multiple commands for this feature 72

The following table lists the commands for this feature 72

This section shows the commands and examples for pfc ets application priority and dcbx 72

Chapter 14 data center bridging commands 73

Ethernet switch cli reference guide 73

In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a 73

In the following example switch a is not using switch b s configured priorities 73

In the following example switch a is using switch b s configured priorities 73

Pfc command examples 73

Table 42 priority flow control command summary continued 73

Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not 73

Chapter 14 data center bridging commands 75

Create and name traffic class ids with weights for the non sp traffic type 75

Ethernet switch cli reference guide 75

Ets command example 1 75

Table 43 ets command summary 75

Table 44 ets example traffic classes 75

Table 45 ets example traffic bandwidths 75

The following table lists the commands for this feature 75

The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps 75

This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each 75

Application priority 76

Chapter 14 data center bridging commands 76

Ethernet switch cli reference guide 76

Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class 76

Table 46 ets example priority traffic class id mapping 76

Table 47 application priority command summary 76

The following table lists the commands for this feature 76

This command shows traffic class 76

Use the application priority command to assign a priority to all fcoe traffic on a switch 76

Application priority can then be used in conjunction with ets and pfc as shown in the following examples 77

Application priority command examples 77

Chapter 14 data center bridging commands 77

Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 77

Ethernet switch cli reference guide 77

In the following example all fcoe traffic on the switch is assigned with priority 3 77

Table 48 ets example 2 traffic classes 77

This is an application priority command example with ets 77

This is an application priority command example with pfc 77

Chapter 14 data center bridging commands 78

Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx 78

Ethernet switch cli reference guide 78

In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information 78

See chapter 37 on page 179 for lldp command examples 78

See chapter 37 on page 179 for more information on lldp 78

Table 49 dcbx command summary 78

The following table lists the commands for this feature 78

This is a dcbx command example 78

Command summary 79

Dhcp commands 79

Hapter 79

Chapter 15 dhcp commands 80

Ethernet switch cli reference guide 80

Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 80

Table 51 dhcp relay command summary 80

Table 52 dhcp relay broadcast command summary 80

Table 53 dhcp server command summary 80

Chapter 15 dhcp commands 81

Command examples 81

Ethernet switch cli reference guide 81

Figure 3 example global dhcp relay 81

In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 81

In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 81

This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 81

Vlan1 vlan2 81

In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 82

This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 5 on page 82 it also provides the dhcp clients with the ip address of the default gateway and the dns server 82

This example shows how to configure these dhcp servers the vlans are already configured 82

Command summary 83

Dhcp snooping dhcp vlan commands 83

Hapter 83

Chapter 16 dhcp snooping dhcp vlan commands 84

Command examples 84

Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 84

Ethernet switch cli reference guide 84

Table 54 dhcp snooping command summary continued 84

Table 55 dhcp vlan command summary 84

The following table describes the dhcp vlan commands 84

This example 84

Chapter 16 dhcp snooping dhcp vlan commands 85

Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 85

Ethernet switch cli reference guide 85

Command summary 87

Diffserv commands 87

Hapter 87

Command summary 89

Display commands 89

Hapter 89

Command summary 91

Dvmrp commands 91

Dvmrp overview 91

Hapter 91

Chapter 19 dvmrp commands 92

Command examples 92

Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 92

Ethernet switch cli reference guide 92

Figure 6 dvmrp network example 92

In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 92

Table 58 command summary dvmrp continued 92

Cpu protection overview 93

Error disable and recovery commands 93

Error disable recovery overview 93

Hapter 93

User input values 93

Chapter 20 error disable and recovery commands 94

Command summary 94

Ethernet switch cli reference guide 94

Table 60 cpu protection command summary 94

Table 61 errdisable recovery command summary 94

The following section lists the commands for this feature 94

Chapter 20 error disable and recovery commands 95

Command examples 95

Ethernet switch cli reference guide 95

Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 95

Table 61 errdisable recovery command summary continued 95

This example shows you how to configure the following 95

Chapter 20 error disable and recovery commands 96

Ethernet switch cli reference guide 96

This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 96

Command summary 97

Ethernet oam commands 97

Hapter 97

Ieee 802 ah link layer ethernet oam implementation 97

Chapter 21 ethernet oam commands 98

Command examples 98

Ethernet switch cli reference guide 98

Table 62 ethernet oam command summary continued 98

This example enables ethernet oam on port 7 and sets the mode to active 98

Chapter 21 ethernet oam commands 99

Ethernet switch cli reference guide 99

Table 63 show ethernet oam discovery 99

The following table describes the labels in this screen 99

This example performs ethernet oam discovery from port 7 99

Chapter 21 ethernet oam commands 100

Ethernet switch cli reference guide 100

Table 63 show ethernet oam discovery continued 100

This example looks at the number of oam packets transferred on port 1 100

Chapter 21 ethernet oam commands 101

Ethernet switch cli reference guide 101

Table 64 show ethernet oam statistics 101

Table 65 show ethernet oam summary 101

The following table describes the labels in this screen 101

This example looks at the configuration of ports on which oam is enabled 101

Chapter 21 ethernet oam commands 102

Ethernet switch cli reference guide 102

Table 65 show ethernet oam summary continued 102

Command summary 103

External alarm commands 103

Hapter 103

Chapter 22 external alarm commands 104

Command examples 104

Ethernet switch cli reference guide 104

This example configures and shows the name and status of the external alarm s 104

Command summary 105

Garp commands 105

Garp overview 105

Hapter 105

Chapter 23 garp commands 106

Command examples 106

Ethernet switch cli reference guide 106

In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 106

Green ethernet commands 107

Green ethernet overview 107

Hapter 107

Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled 108

Chapter 24 green ethernet commands 108

Command summary 108

Ethernet switch cli reference guide 108

Green ethernet command example 108

In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters 108

Table 68 green ethernet command summary 108

The following section lists the commands for this feature 108

Auto power down 109

Chapter 24 green ethernet commands 109

Ethernet switch cli reference guide 109

Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled 109

Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled 109

Short reach 109

Chapter 24 green ethernet commands 110

Ethernet switch cli reference guide 110

The following example shows how to configure short reach if the switch supports short reach per port 110

The following example shows the display for short reach if the switch supports short reach per port and showing the status 110

Command examples 111

Command summary 111

Gvrp commands 111

Hapter 111

Reference h m 113

Command summary 115

Hapter 115

Https server commands 115

Chapter 26 https server commands 116

Command examples 116

Ethernet switch cli reference guide 116

Table 71 show https 116

The following table describes the labels in this screen 116

This example shows the current https settings statistics and sessions 116

Chapter 26 https server commands 117

Ethernet switch cli reference guide 117

Table 71 show https continued 117

Table 72 show https session 117

The following table describes the labels in this screen 117

This example shows the current https sessions 117

Chapter 26 https server commands 118

Ethernet switch cli reference guide 118

Table 72 show https session continued 118

Command summary 119

Guest vlan overview 119

Hapter 119

Ieee 802 x authentication commands 119

Chapter 27 ieee 802 x authentication commands 120

Command examples 120

Ethernet switch cli reference guide 120

Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 120

Table 73 port access authenticator command summary continued 120

This example configures the switch in the following ways 120

Command summary 123

Hapter 123

Igmp and multicasting commands 123

Igmp overview 123

Chapter 28 igmp and multicasting commands 124

Command examples 124

Ethernet switch cli reference guide 124

Sets the switch to flood unknown multicast frames sets the switch to non querier mode 124

Table 74 igmp command summary continued 124

Table 75 ipmc command summary 124

This example configures igmp on the switch with the following settings 124

Command summary 127

Hapter 127

Igmp snooping commands 127

Chapter 29 igmp snooping commands 128

Ethernet switch cli reference guide 128

Table 77 igmp snooping command summary continued 128

Chapter 29 igmp snooping commands 129

Ethernet switch cli reference guide 129

Table 77 igmp snooping command summary continued 129

Table 78 igmp snooping vlan command summary 129

Table 79 interface igmp command summary 129

Chapter 29 igmp snooping commands 130

Ethernet switch cli reference guide 130

Table 79 interface igmp command summary continued 130

Chapter 29 igmp snooping commands 131

Command examples 131

Ethernet switch cli reference guide 131

Host timeou 131

Table 79 interface igmp command summary continued 131

This example enables igmp snooping on the switch sets the 131

Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 131

Chapter 29 igmp snooping commands 132

Ethernet switch cli reference guide 132

Table 80 show multicast 132

The following table describes the labels in this screen 132

This example limits the number of multicast groups on port 1 to 5 132

This example shows the current multicast groups on the switch 132

This example shows the current multicast vlan on the switch 132

Chapter 29 igmp snooping commands 133

Ethernet switch cli reference guide 133

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 133

Command summary 135

Hapter 135

Igmp filtering commands 135

Chapter 30 igmp filtering commands 136

Command examples 136

Ethernet switch cli reference guide 136

This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 136

Command summary 137

Hapter 137

Interface commands 137

10000 or 4000 138

Chapter 31 interface commands 138

Ethernet switch cli reference guide 138

Table 82 interface command summary continued 138

Chapter 31 interface commands 139

Command examples 139

Ethernet switch cli reference guide 139

Table 83 show interfaces 139

The following table describes the labels in this screen 139

This example looks at the current status of port 1 139

Chapter 31 interface commands 140

Ethernet switch cli reference guide 140

Table 83 show interfaces continued 140

Chapter 31 interface commands 141

Ethernet switch cli reference guide 141

Sets the default port vid to 200 2 sets these ports to accept only tagged frames 141

Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 141

Table 83 show interfaces continued 141

This example configures ports 1 3 4 and 5 in the following ways 141

This example configures ports 1 5 in the following ways 141

Command examples 143

Command summary 143

Hapter 143

Interface route domain mode 143

Command summary 145

Hapter 145

Ip commands 145

Chapter 33 ip commands 146

Command examples 146

Ethernet switch cli reference guide 146

Table 86 tcp and udp command summary continued 146

Table 87 show ip tcp 146

The following table describes the labels in this screen 146

This example shows the tcp statistics and listener ports see rfc 1213 for more information 146

Chapter 33 ip commands 147

Ethernet switch cli reference guide 147

Table 87 show ip tcp continued 147

Chapter 33 ip commands 148

Ethernet switch cli reference guide 148

Table 87 show ip tcp continued 148

Table 88 show ip udp 148

The following table describes the labels in this screen 148

This example shows the udp statistics and listener ports see rfc 1213 for more information 148

Command examples 149

Command summary 149

Hapter 149

Ip source binding commands 149

Chapter 34 ip source binding commands 150

Ethernet switch cli reference guide 150

Table 90 show ip source binding 150

The following table describes the labels in this screen 150

Hapter 151

Ipv6 addressing 151

Ipv6 commands 151

Ipv6 overview 151

Ipv6 terms 152

A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 153

Chapter 35 ipv6 commands 153

Ethernet switch cli reference guide 153

Loopback 153

Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 153

Table 93 predefined multicast address 153

Table 94 reserved multicast address 153

The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 153

Eui 64 154

Chapter 35 ipv6 commands 158

Command summary 158

Ethernet switch cli reference guide 158

In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 158

Report 158

Table 95 ipv6 user input values 158

Table 96 ipv6 address command summary 158

The following section lists the commands for this feature 158

The following table describes user input values available in multiple commands for this feature 158

Chapter 35 ipv6 commands 159

Ethernet switch cli reference guide 159

Note make sure an ipv6 router is available in the vlan network before using this command on the switch 159

Table 96 ipv6 address command summary continued 159

Chapter 35 ipv6 commands 160

Ethernet switch cli reference guide 160

Table 96 ipv6 address command summary continued 160

Table 97 ipv6 dhcp relay command summary 160

Chapter 35 ipv6 commands 161

Ethernet switch cli reference guide 161

Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 161

Table 98 ipv6 icmp and ping6 command summary 161

Table 99 ipv6 mld snooping proxy command summary 161

Chapter 35 ipv6 commands 162

Ethernet switch cli reference guide 162

Table 99 ipv6 mld snooping proxy command summary continued 162

Chapter 35 ipv6 commands 163

Ethernet switch cli reference guide 163

Table 99 ipv6 mld snooping proxy command summary continued 163

Chapter 35 ipv6 commands 164

Ethernet switch cli reference guide 164

Table 99 ipv6 mld snooping proxy command summary continued 164

Chapter 35 ipv6 commands 165

Ethernet switch cli reference guide 165

Table 100 ipv6 nd command summary 165

Chapter 35 ipv6 commands 166

Ethernet switch cli reference guide 166

Table 100 ipv6 nd command summary continued 166

Table 101 ipv6 neighbor command summary 166

Chapter 35 ipv6 commands 167

Command examples 167

Ethernet switch cli reference guide 167

Table 101 ipv6 neighbor command summary continued 167

This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 167

This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 167

Chapter 35 ipv6 commands 168

Ethernet switch cli reference guide 168

There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 168

This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 168

Chapter 35 ipv6 commands 169

Ethernet switch cli reference guide 169

Table 102 show ipv6 neighbor 169

The following table describes the labels in this screen 169

This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 169

By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 170

Chapter 35 ipv6 commands 170

Ethernet switch cli reference guide 170

Example enabling ipv6 on windows xp 2003 170

This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 170

Example http accessing the switch using ipv6 171

How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 171

Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 171

It s recommended to use internet explorer 7 or firefox to access the switch s web gui 171

Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 171

This example shows you how to access the switch using http on windows xp 171

Command summary 175

Hapter 175

Layer 2 protocol tunnel l2pt commands 175

Chapter 36 layer 2 protocol tunnel l2pt commands 176

Command examples 176

Ethernet switch cli reference guide 176

Table 104 l2pt command summary continued 176

This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 176

Chapter 36 layer 2 protocol tunnel l2pt commands 177

Ethernet switch cli reference guide 177

This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 177

This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 177

This example sets l2pt mode to tunnel for port 4 177

Hapter 179

Link layer discovery protocol lldp commands 179

Lldp overview 179

Chapter 37 link layer discovery protocol lldp commands 180

Command summary 180

Ethernet switch cli reference guide 180

Table 105 lldp command summary 180

The following section lists the commands for this feature 180

Chapter 37 link layer discovery protocol lldp commands 181

Ethernet switch cli reference guide 181

Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 181

Table 105 lldp command summary continued 181

Chapter 37 link layer discovery protocol lldp commands 182

Command examples 182

Ethernet switch cli reference guide 182

See chapter 14 on page 71 for dcb configuration and examples 182

Table 105 lldp command summary continued 182

This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 182

Chapter 37 link layer discovery protocol lldp commands 183

Ethernet switch cli reference guide 183

Lldp settings on a port 183

Switch lldp settings 183

Table 106 183

Table 107 183

The following table describes the labels in this screen 183

This example shows global switch lldp settings 183

This example shows lldp settings on a port 183

Chapter 37 link layer discovery protocol lldp commands 184

Continued 184

Ethernet switch cli reference guide 184

Lldp settings on a por 184

Switch lldp statistics 184

Table 107 184

Table 108 184

The following table describes the labels in this screen 184

This example shows global switch lldp statistics 184

Chapter 37 link layer discovery protocol lldp commands 185

Ethernet switch cli reference guide 185

Lldp statistics on a port 185

Table 109 185

The following table describes the labels in this screen 185

This example shows lldp statistics on a port 185

This example shows local switch the switch you re accessing lldp information 185

Chapter 37 link layer discovery protocol lldp commands 186

Ethernet switch cli reference guide 186

Local lldp information 186

Table 110 186

The following table describes the labels in this screen 186

This example shows local switch the switch you re accessing lldp information on a port 186

Chapter 37 link layer discovery protocol lldp commands 187

Ethernet switch cli reference guide 187

Local switch lldp information on a port 187

Table 111 187

The following table describes the labels in this screen 187

This example shows remote switch the switch connected to the port on the switch you re accessing lldp information 187

Chapter 37 link layer discovery protocol lldp commands 188

Ethernet switch cli reference guide 188

Remote switch lldp information 188

Table 112 188

The following table describes the labels in this screen 188

Command summary 189

Hapter 189

Load sharing commands 189

Load sharing overview 189

Chapter 38 load sharing commands 190

Command examples 190

Ethernet switch cli reference guide 190

This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 190

Command examples 191

Command summary 191

Hapter 191

Logging commands 191

Command summary 193

Hapter 193

Login account commands 193

Password encryption 193

Chapter 40 login account commands 194

Command examples 194

Ethernet switch cli reference guide 194

This example creates a new user user2 with privilege 13 194

Command summary 195

Hapter 195

Loopguard commands 195

Chapter 41 loopguard commands 196

Command examples 196

Ethernet switch cli reference guide 196

Table 117 show loopguard 196

The following table describes the labels in this screen 196

This example enables loopguard on ports 1 3 196

Command summary 197

Hapter 197

Mac address commands 197

Chapter 42 mac address commands 198

Command examples 198

Ethernet switch cli reference guide 198

Table 118 mac mac aging time and mac flush command summary continued 198

Table 119 show mac address table 198

The following table describes the labels in this screen 198

This example shows the current mac address table 198

Command summary 199

Hapter 199

Mac authentication commands 199

Mac authentication overview 199

Chapter 43 mac authentication commands 200

Command examples 200

Ethernet switch cli reference guide 200

Table 120 mac authentication command summary continued 200

This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 200

Command summary 201

Hapter 201

Mac filter commands 201

Command example 202

Command example filter source 202

Command summary 203

Hapter 203

Mac forward commands 203

Command summary 205

Hapter 205

Mirror commands 205

Chapter 46 mirror commands 206

Command examples 206

Ethernet switch cli reference guide 206

Table 124 mirror command summary continued 206

Table 125 mirror filter command summary 206

This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 206

Chapter 46 mirror commands 207

Ethernet switch cli reference guide 207

This example displays the mirror settings of the switch after you configured in the example above 207

Command summary 209

Hapter 209

Mrstp commands 209

Mrstp overview 209

Chapter 47 mrstp commands 210

Command examples 210

Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 210

Ethernet switch cli reference guide 210

In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 210

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 210

Table 126 command summary mrstp 210

This example configures mrstp in the following way 210

Command summary 211

Hapter 211

Mstp commands 211

Chapter 48 mstp commands 212

Command examples 212

Ethernet switch cli reference guide 212

Table 128 mstp instance command summary 212

This example shows the current mstp configuration 212

Chapter 48 mstp commands 213

Ethernet switch cli reference guide 213

Table 129 show mstp 213

The following table describes the labels in this screen 213

This example shows the current cist configuration mstp instance 0 213

Chapter 48 mstp commands 214

Ethernet switch cli reference guide 214

Table 130 show mstp instance 214

The following table describes the labels in this screen 214

Command examples 217

Command summary 217

Hapter 217

Multiple login commands 217

Command summary 219

Hapter 219

Mvr commands 219

Command examples 220

Reference n s 221

Command summary 223

Hapter 223

Ospf commands 223

Ospf overview 223

Chapter 51 ospf commands 224

Ethernet switch cli reference guide 224

Table 134 ospf command summary continued 224

Chapter 51 ospf commands 225

Ethernet switch cli reference guide 225

Note you cannot set two routing protocols to have the same administrative distance 225

Table 134 ospf command summary continued 225

Chapter 51 ospf commands 226

Command examples 226

Ethernet switch cli reference guide 226

Figure 7 ospf network example 226

In this example the switch a is an area border router abr in an ospf network 226

Table 134 ospf command summary continued 226

In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 227

Is also set to 1 as this router should participate in router elections 227

This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 227

This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 227

Chapter 51 ospf commands 228

Ethernet switch cli reference guide 228

From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 228

This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 228

Command summary 229

Hapter 229

Password commands 229

Password encryption 229

Command examples 230

Command summary 231

Hapter 231

Poe commands 231

Chapter 53 poe commands 232

Command examples 232

Ethernet switch cli reference guide 232

This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 232

This example shows the current status and configuration of power over ethernet 232

Chapter 53 poe commands 233

Ethernet switch cli reference guide 233

Note if the management mode is set to consumption this field shows na 233

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 233

Table 137 show pwr 233

The following table describes the labels in this screen 233

Command summary 235

Hapter 235

Policy commands 235

Chapter 54 policy commands 236

Ethernet switch cli reference guide 236

Table 138 policy command summary 236

Chapter 54 policy commands 237

Command examples 237

Ethernet switch cli reference guide 237

Table 138 policy command summary 237

This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 59 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 237

Chapter 54 policy commands 238

Ethernet switch cli reference guide 238

This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 59 this policy forwards class1 packets to port 8 238

Command summary 239

Hapter 239

Policy route commands 239

9 it then shows the policy routing information 240

By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 240

Chapter 55 policy route commands 240

Command examples 240

Ethernet switch cli reference guide 240

To forward packets that match the layer 3 classifier to the gateway with ip address 240

Command summary 241

Hapter 241

Port security commands 241

Chapter 56 port security commands 242

Command examples 242

Ethernet switch cli reference guide 242

Table 140 port security command summary continued 242

This example enables port security on port 1 and limits the number of learned mac addresses to 5 242

Command examples 243

Command summary 243

Hapter 243

Port based vlan commands 243

Hapter 245

Port state 245

Pppoe ia commands 245

Pppoe intermediate agent overview 245

Chapter 58 pppoe ia commands 246

Command summary 246

Ethernet switch cli reference guide 246

Table 142 pppoe intermediate agent command summary 246

The following section lists the commands for this feature 246

The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 246

Chapter 58 pppoe ia commands 247

Ethernet switch cli reference guide 247

Table 142 pppoe intermediate agent command summary continued 247

Chapter 58 pppoe ia commands 248

Command examples 248

Ethernet switch cli reference guide 248

This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 248

This is an example of how to enable and configure pppoe ia for vlans 248

This is an example of how to enable and disable pppoe ia on the switch 248

This is an example of how to set a pppoe ia trust port 248

Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 249

Similarly we can let the circuit id carry the information which we configure 249

The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 249

This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 249

Vendor specific tag examples 249

Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 250

Chapter 58 pppoe ia commands 250

Ethernet switch cli reference guide 250

Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 250

Hapter 251

Legacy pvlan overview 251

Private vlan commands 251

Command examples 252

Legacy pvlan command summary 252

That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 252

The following section lists the commands for this feature 252

This example sets a private vlan rule 252

Command summary 253

Private vlan 253

That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the 253

The following section lists the commands for this feature 253

This example sets a private vlan rule 253

Chapter 59 private vlan commands 254

Command example 254

Ethernet switch cli reference guide 254

Table 144 private vlan command summary continued 254

This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 103 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch 254

Chapter 59 private vlan commands 255

Ethernet switch cli reference guide 255

Command summary 257

Hapter 257

Protocol based vlan commands 257

Protocol based vlan overview 257

Chapter 60 protocol based vlan commands 258

Command examples 258

Ethernet switch cli reference guide 258

Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 258

Table 145 protocol based vlan command summary continued 258

This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 258

Hapter 259

Queuing commands 259

Queuing overview 259

Chapter 61 queuing commands 260

Command summary port by port configuration 260

Ethernet switch cli reference guide 260

For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 260

Note some models only support 4 queues 260

Table 146 queuing command summary 260

The following section lists the commands for this feature 260

Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 260

Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 260

Chapter 61 queuing commands 261

Command examples port by port configuration 261

Ethernet switch cli reference guide 261

Table 146 queuing command summary continued 261

This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 261

Chapter 61 queuing commands 262

Command examples system wide 262

Command summary system wide configuration 262

Ethernet switch cli reference guide 262

Note some models only support 4 queues 262

Table 147 queueing command summary 262

The following section lists the commands for this feature 262

This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 262

This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 262

Command summary 263

Hapter 263

Radius commands 263

Chapter 62 radius commands 264

Command examples 264

Ethernet switch cli reference guide 264

Table 149 radius accounting command summary continued 264

This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 264

Command summary 265

Hapter 265

Remote management commands 265

Chapter 63 remote management commands 266

Command examples 266

Ethernet switch cli reference guide 266

Table 152 service control command summary continued 266

This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 266

This example disables all snmp and icmp access to the 266

Command summary 267

Hapter 267

Rip commands 267

Rip overview 267

Chapter 64 rip commands 268

Command examples 268

Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 268

Ethernet switch cli reference guide 268

Note you cannot set two routing protocols to have the same administrative distance 268

Table 153 rip command summary continued 268

This example 268

Hapter 269

Rmon overview 269

User input values 269

Chapter 65 rmon 270

Command summary 270

Ethernet switch cli reference guide 270

Table 156 rmon command summary 270

The following section lists the commands for this feature 270

Chapter 65 rmon 271

Ethernet switch cli reference guide 271

Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 271

Rmon alarm command example 271

Rmon event command example 271

Syntax 271

This example also shows how to display the setting results 271

This example shows how to configure the switch s action when an rmon event using the following settings 271

Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 65 on page 271 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 65 on page 271 who will handle this alarm operator 272

Chapter 65 rmon 272

Ethernet switch cli reference guide 272

This example shows you how to configure an alarm using the following settings 272

Chapter 65 rmon 273

Ethernet switch cli reference guide 273

Rmon statistics command example 273

The ethernet statistics table entry s index number 1 collecting data samples from which port 12 273

This example also shows how to display the data collection results 273

This example also shows how to display the setting results 273

This example shows how to configure the settings to display current network traffic statistics using the following settings 273

Chapter 65 rmon 274

Ethernet switch cli reference guide 274

Rmon history command example 274

The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 274

This example also shows how to display the data collection results 274

This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 274

Command summary 275

Hapter 275

Running configuration commands 275

Switch configuration file 275

Chapter 66 running configuration commands 276

Command examples 276

Ethernet switch cli reference guide 276

Table 158 running config command summary 276

The following section lists the commands for this feature 276

This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 276

This example resets the switch to the factory default settings 276

Command summary 277

Hapter 277

Sflow overview 277

Chapter 67 sflow 278

Command examples 278

Ethernet switch cli reference guide 278

Table 159 sflow command summary continued 278

This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 278

Hapter 279

Smart isolation commands 279

Smart isolation overview 279

Command summary 280

The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 280

Chapter 68 smart isolation commands 281

Command examples 281

Ethernet switch cli reference guide 281

Table 161 show smart isolation 281

The following table describes the labels in this screen 281

This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 281

Chapter 68 smart isolation commands 282

Ethernet switch cli reference guide 282

Table 161 show smart isolation continued 282

Command summary 283

Hapter 283

Snmp server commands 283

Chapter 69 snmp server commands 284

Ethernet switch cli reference guide 284

Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 284

Table 163 snmp server command summary continued 284

Table 164 snmp server trap destination enable traps command summary 284

Chapter 69 snmp server commands 285

Ethernet switch cli reference guide 285

Table 164 snmp server trap destination enable traps command summary continued 285

Chapter 69 snmp server commands 286

Command examples 286

Ethernet switch cli reference guide 286

This example shows you how to display all snmp user information on the switch 286

This example shows you how to display the snmp information on the switch 286

Command summary 287

Hapter 287

Stp and rstp commands 287

Chapter 70 stp and rstp commands 288

Command examples 288

Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 288

Ethernet switch cli reference guide 288

Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 288

Table 165 spanning tree command summary continued 288

This example configures stp in the following ways 288

Chapter 70 stp and rstp commands 289

Ethernet switch cli reference guide 289

Table 166 show spanning tree config 289

The following table describes the labels in this screen 289

This example shows the current stp settings 289

Chapter 70 stp and rstp commands 290

Ethernet switch cli reference guide 290

In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 290

Table 166 show spanning tree config continued 290

Command examples 291

Command summary 291

Hapter 291

Ssh commands 291

Chapter 71 ssh commands 292

Ethernet switch cli reference guide 292

Table 168 show ssh 292

The following table describes the labels in this screen 292

This example shows the general ssh settings 292

Command summary 293

Hapter 293

Static multicast commands 293

Command examples 294

Command summary 295

Hapter 295

Static route commands 295

Chapter 73 static route commands 296

Command examples 296

Ethernet switch cli reference guide 296

For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 296

Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 296

Table 171 show ip route 296

The following table describes the labels in this screen 296

This example shows the current routing table 296

You can create this static route if it is inactive however 296

Chapter 73 static route commands 297

Ethernet switch cli reference guide 297

You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 297

Command summary 299

Hapter 299

Subnet based vlan commands 299

Subnet based vlan overview 299

Chapter 74 subnet based vlan commands 300

Command examples 300

Ethernet switch cli reference guide 300

Table 172 subnet based vlan command summary continued 300

This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 300

Command summary 301

Hapter 301

Syslog commands 301

Reference t z 303

Command summary 305

Hapter 305

Tacacs commands 305

Command summary 307

Hapter 307

Tftp commands 307

Command summary 309

Hapter 309

Trunk commands 309

Chapter 78 trunk commands 310

Command examples 310

Ethernet switch cli reference guide 310

Table 181 lacp command summary 310

Table 182 show trunk 310

The following table describes the labels in this screen 310

This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 310

This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 310

This example looks at the current trunks 310

Chapter 78 trunk commands 311

Ethernet switch cli reference guide 311

Table 182 show trunk continued 311

Table 183 show lacp 311

The following table describes the labels in this screen 311

This example shows the current lacp settings 311

Command summary 313

Hapter 313

Trtcm commands 313

Trtcm overview 313

Chapter 79 trtcm commands 314

Command examples 314

Ethernet switch cli reference guide 314

Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 314

Table 184 trtcm command summary continued 314

This example activates trtcm on the switch with the following settings 314

Chapter 79 trtcm commands 315

Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example 315

Ethernet switch cli reference guide 315

This examples activates trtcm on the switch with the following settings 315

Hapter 317

Vlan commands 317

Vlan configuration overview 317

Vlan overview 317

Command summary 318

See chapter 31 on page 137 for interface port channel commands 318

The following section lists the commands for the ingress checking feature 318

The following section lists the commands for this feature 318

Vlan ingress checking implementation differs across switch models 318

Chapter 80 vlan commands 319

Command examples 319

Ethernet switch cli reference guide 319

Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 319

Table 186 vlan1q ingress check command summary 319

Table 187 ingress check command summary 319

This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 319

This example deletes entry 2 in the static vlan table 319

This example shows the vlan table 319

Chapter 80 vlan commands 320

Ethernet switch cli reference guide 320

Table 188 show vlan 320

The following table describes the labels in this screen 320

This example enables ingress checking on ports 1 5 320

Chapter 80 vlan commands 321

Ethernet switch cli reference guide 321

Table 189 show vlan counters 321

The following table describes the labels in this screen 321

This example displays concurrent incoming packet statistics for vlan 1 321

Chapter 80 vlan commands 322

Ethernet switch cli reference guide 322

Table 189 show vlan counters continued 322

Command summary 323

Hapter 323

Ip interfaces overview 323

Vlan ip commands 323

Chapter 81 vlan ip commands 324

Command examples 324

Ethernet switch cli reference guide 324

See section 3 on page 24 for an example of how to configure a vlan management ip address 324

Table 190 vlan ip address command summary continued 324

Command summary 325

Hapter 325

Vlan mapping commands 325

Chapter 82 vlan mapping commands 326

Command examples 326

Ethernet switch cli reference guide 326

This example enables vlan mapping on port 4 326

This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 326

Command summary 327

Hapter 327

Vlan port isolation commands 327

Command summary 329

Hapter 329

Vlan stacking commands 329

A 37 24 330

B 48 24 330

Chapter 84 vlan stacking commands 330

Command examples 330

Customer a customer a 330

Customer b customer b 330

Ethernet switch cli reference guide 330

Figure 10 example vlan stacking 330

In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 330

Table 193 vlan stacking command summary continued 330

Vlan 24 vlan 24 330

Chapter 84 vlan stacking commands 331

Ethernet switch cli reference guide 331

This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 331

Command summary 333

Hapter 333

Vlan trunking commands 333

Command summary 335

Hapter 335

Vrrp commands 335

Vrrp overview 335

Chapter 86 vrrp commands 336

Command examples 336

Ethernet 336

Ethernet switch cli reference guide 336

Figure 11 example vrrp 336

Table 195 vrrp command summary continued 336

The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 336

Chapter 86 vrrp commands 337

Ethernet switch cli reference guide 337

This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 336 337

Chapter 86 vrrp commands 338

Ethernet switch cli reference guide 338

This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 336 338

Additional commands 339

Command summary 339

Hapter 339

Chapter 87 additional commands 340

Ethernet switch cli reference guide 340

Table 197 command summary additional enable mode continued 340

Chapter 87 additional commands 341

Command examples 341

Ethernet switch cli reference guide 341

Table 197 command summary additional enable mode continued 341

Table 198 command summary additional configure mode 341

This example checks the cable pairs on port 7 341

Chapter 87 additional commands 342

Ethernet switch cli reference guide 342

Table 199 ping 342

Table 200 show alarm status 342

The following table describes the labels in this screen 342

This example sends ping requests to an ethernet device with ip address 172 6 7 54 342

This example shows the current status of the various alarms in the switch 342

Chapter 87 additional commands 343

Ethernet switch cli reference guide 343

Table 200 show alarm status continued 343

Table 201 show cpu utilization 343

The following table describes the labels in this screen 343

This example shows the current and recent cpu utilization 343

Chapter 87 additional commands 344

Ethernet switch cli reference guide 344

Table 202 show hardware monitor 344

The following table describes the labels in this screen 344

This example looks at the current sensor readings from various places in the hardware the display for your switch may be different 344

Chapter 87 additional commands 345

Ethernet switch cli reference guide 345

Table 202 show hardware monitor continued 345

This example displays multicast vlan configuration on the 345

Chapter 87 additional commands 346

Ethernet switch cli reference guide 346

Note if the management mode is set to consumption this field shows na 346

Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 346

Table 203 show multicast vlan 346

Table 204 show poe status 346

Table 205 show system information 346

The following table describes the labels in this screen 346

This example looks at general system information about the switch 346

This example shows the current status of power over ethernet 346

Chapter 87 additional commands 347

Ethernet switch cli reference guide 347

For temperature voltage transmission bias transmission and receiving power as shown 347

Table 205 show system information continued 347

This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 347

You can also see the alarm and warning threasholds 347

Chapter 87 additional commands 348

Ethernet switch cli reference guide 348

For temperature voltage transmission bias transmission and receiving power as shown 348

This example displays route information to an ethernet device with ip address 348

This example displays run time sfp small form facter pluggable parameters on port 21 on the 348

This example displays the firmware version the switch is currently using 348

This example runs an internal loopback test on ports 3 6 348

You can also see the alarm and warning threasholds 348

Appendices and index of commands 351

Default values 353

Ppendix 353

Certifications 355

Copyright 355

Legal information 355

Ppendix 355

Zyxel limited warranty 356

Index of commands 359

Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 359

Ethernet switch cli reference guide 360

Index of commands 360

Ethernet switch cli reference guide 361

Index of commands 361

Ethernet switch cli reference guide 362

Index of commands 362

Ethernet switch cli reference guide 363

Index of commands 363

Ethernet switch cli reference guide 364

Index of commands 364

Ethernet switch cli reference guide 365

Index of commands 365

Ethernet switch cli reference guide 366

Index of commands 366

Ethernet switch cli reference guide 367

Index of commands 367

Ethernet switch cli reference guide 368

Index of commands 368

Ethernet switch cli reference guide 369

Index of commands 369

Ethernet switch cli reference guide 370

Index of commands 370

Ethernet switch cli reference guide 371

Index of commands 371

Ethernet switch cli reference guide 372

Index of commands 372

Ethernet switch cli reference guide 373

Index of commands 373

Ethernet switch cli reference guide 374

Index of commands 374

Ethernet switch cli reference guide 375

Index of commands 375

Ethernet switch cli reference guide 376

Index of commands 376

Ethernet switch cli reference guide 377

Index of commands 377

Ethernet switch cli reference guide 378

Index of commands 378

Ethernet switch cli reference guide 379

Index of commands 379

Ethernet switch cli reference guide 380

Index of commands 380

Ethernet switch cli reference guide 381

Index of commands 381

Ethernet switch cli reference guide 382

Index of commands 382

Ethernet switch cli reference guide 383

Index of commands 383

Zyxel XS3900-48F [238/384] This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 59 this policy forwards class1 packets to port 8

Содержание

Похожие устройства