![Zyxel XS3900-48F [251/384] Legacy pvlan overview](/img/pdf.png)
Zyxel XS3900-48F [251/384] Legacy pvlan overview
![Zyxel XS3900-48F [251/384] Legacy pvlan overview](/views2/1168994/page251/bgfb.png)
Ethernet Switch CLI Reference Guide
251
CHAPTER 59
Private VLAN Commands
This chapter explains how to use commands to configure (legacy) Private VLANs (PVLAN)
on the Switch.
59.1 Legacy PVLAN Overview
Private VLAN allows you to do port isolation within a VLAN in a simple way. In private
VLAN, a promiscuous port can communicate with any port in the same VLAN. While an
isolated port can communicate with the promiscuous port(s) only.
Figure 9 Private VLAN Example
If you change the VLAN settings, make sure you keep at least one port in the
promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this
VLAN is blocked from the whole network.
Isolated ports: 2 ~ 6
Promiscuous port: 10
VLAN 123
2
6
10
Содержание
- Cli reference guide 1
- Default login details 1
- Ethernet switch series 1
- Intelligent ethernet switches 1
- Quick start guide 1
- Important read carefully before use keep this guide for future reference 2
- It is recommended you use the web configurator to configure the switch 2
- About this cli reference guide 3
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
- Document conventions 4
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4
- Contents overview 7
- Introduction 11 7
- Reference a g 27 7
- Reference h m 113 7
- Reference n s 221 8
- Appendices and index of commands 351 9
- Reference t z 303 9
- Introduction 11
- Accessing the cli 13
- Console port 13
- Hapter 13
- How to access and use the cli 13
- Telnet 13
- Logging in 14
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 14
- Using shortcuts and getting help 14
- Logging out 15
- Saving your configuration 15
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 15
- Hapter 17
- Privilege level and command mode 17
- Privilege levels 17
- Privilege levels for commands 17
- Privilege levels for login accounts 17
- Privilege levels for sessions 18
- Command modes 19
- Command modes for privilege levels 0 12 19
- Chapter 2 privilege level and command mode 20
- Command modes for privilege levels 13 14 20
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 20
- Ethernet switch cli reference guide 20
- If the session s privilege level is 13 14 the allowed commands are in one of several modes 20
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 20
- Table 8 changing between command modes for privilege levels 13 14 20
- Listing available commands 21
- Changing the administrator password 23
- Changing the enable password 23
- Hapter 23
- Initial setup 23
- Afterwards you have to use the new ip address to access the switch 24
- Changing the management ip address 24
- Changing the out of band management ip address 24
- Prohibiting concurrent logins 24
- Chapter 3 initial setup 25
- Ethernet switch cli reference guide 25
- Looking at basic system information 25
- Looking at the operating configuration 25
- See chapter 87 on page 339 for more information about these attributes 25
- This is illustrated in the following example 25
- Use this command to look at general system information about the switch 25
- Use this command to look at the current operating configuration 25
- Reference a g 27
- Aaa commands 29
- Command summary 29
- Hapter 29
- Chapter 4 aaa commands 30
- Ethernet switch cli reference guide 30
- Table 10 command summary aaa accounting continued 30
- Table 11 aaa authorization command summary 30
- Arp commands 31
- Command examples 31
- Command summary 31
- Hapter 31
- Chapter 5 arp commands 32
- Ethernet switch cli reference guide 32
- Table 13 show ip arp continued 32
- Arp inspection commands 33
- Command summary 33
- Hapter 33
- Chapter 6 arp inspection commands 34
- Ethernet switch cli reference guide 34
- Table 16 command summary arp inspection log 34
- Table 17 command summary interface arp inspection 34
- Table 18 command summary arp inspection vlan 34
- Chapter 6 arp inspection commands 35
- Command examples 35
- Ethernet switch cli reference guide 35
- Table 19 show arp inspection filter 35
- The following table describes the labels in this screen 35
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 35
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 35
- Chapter 6 arp inspection commands 36
- Ethernet switch cli reference guide 36
- Table 20 show arp inspection log 36
- The following table describes the labels in this screen 36
- This example displays whether ports are trusted or untrusted ports for arp inspection 36
- Chapter 6 arp inspection commands 37
- Ethernet switch cli reference guide 37
- Table 21 show arp inspection interface port channel 37
- The following table describes the labels in this screen 37
- Arp learning commands 39
- Command examples 39
- Command summary 39
- Hapter 39
- Bandwidth commands 41
- Command summary 41
- Hapter 41
- Chapter 8 bandwidth commands 42
- Command examples ingress 42
- Ethernet switch cli reference guide 42
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 42
- Table 24 command summary bandwidth control bandwidth limit 42
- The following section lists the commands for this feature 42
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 42
- Chapter 8 bandwidth commands 43
- Command examples cir pir 43
- Ethernet switch cli reference guide 43
- This example deactivates the outgoing bandwidth limit on port 1 43
- This example displays the bandwidth limits configured on port 1 43
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 43
- Broadcast storm commands 45
- Command summary 45
- Hapter 45
- 128 broadcast packets per second 256 multicast packets per second 46
- Chapter 9 broadcast storm commands 46
- Command example bmstorm limit 46
- Command example broadcast limit multicast limit dlf limit 46
- Ethernet switch cli reference guide 46
- Table 26 command summary storm control bmstorm limit and bstorm control continued 46
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 46
- This example enables broadcast storm control on the switch and configures port 1 to accept up to 46
- 64 dlf packets per second 47
- Chapter 9 broadcast storm commands 47
- Ethernet switch cli reference guide 47
- Cfm commands 49
- Cfm overview 49
- Hapter 49
- How cfm works 49
- Cfm term definition 50
- Chapter 10 cfm commands 51
- Ethernet switch cli reference guide 51
- Table 27 cfm term definitions 51
- Table 28 cfm command user input values 51
- This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 51
- User input values 51
- Chapter 10 cfm commands 52
- Command summary 52
- Ethernet switch cli reference guide 52
- Table 29 cfm command summary 52
- The following section lists the commands for this feature 52
- Chapter 10 cfm commands 53
- Ethernet switch cli reference guide 53
- Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 53
- Table 29 cfm command summary continued 53
- Chapter 10 cfm commands 54
- Ethernet switch cli reference guide 54
- Table 29 cfm command summary continued 54
- Command examples 55
- Remember to save new settings using the write memory command 55
- Chapter 10 cfm commands 56
- Ethernet switch cli reference guide 56
- Table 30 show cfm action mipccmdb 56
- The following table describes the labels in this screen 56
- This example displays all neighbors mep port information in the mip ccm databases 56
- This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 56
- This example starts a loopback test and displays the test result on the console 56
- Chapter 10 cfm commands 57
- Ethernet switch cli reference guide 57
- This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 57
- This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 57
- This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 57
- Classifier commands 59
- Command summary 59
- Hapter 59
- Chapter 11 classifier commands 60
- Command examples 60
- Ethernet switch cli reference guide 60
- In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 60
- Table 32 common ethernet types and protocol number 60
- Table 33 common ipv4protocol types and protocol numbers 60
- The following table shows some other common ethernet types and the corresponding protocol number 60
- This example creates a classifier for packets with a vlan id of 3 the resulting traffic flow is identified by the name vlan3 the policy command can use the name vlan3 to apply policy rules to this traffic flow see the policy example in chapter 54 on page 235 60
- Cluster commands 63
- Command summary 63
- Hapter 63
- Chapter 12 cluster commands 64
- Command examples 64
- Ethernet switch cli reference guide 64
- Table 35 show cluster member 64
- The following table describes the labels in this screen 64
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 64
- Chapter 12 cluster commands 65
- Ethernet switch cli reference guide 65
- Logs out of the member s cli and returns to the cli of the manager 65
- Table 36 show cluster 65
- The following table describes the labels in this screen 65
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member 65
- This example looks at the current status of the switch s cluster 65
- Command summary 67
- Date and time commands 67
- Hapter 67
- Chapter 13 date and time commands 68
- Command examples 68
- Ethernet switch cli reference guide 68
- Table 38 time command summary continued 68
- Table 39 timesync command summary 68
- This example sets the current date current time time zone and daylight savings time 68
- Chapter 13 date and time commands 69
- Ethernet switch cli reference guide 69
- Table 40 show timesync 69
- The following table describes the labels in this screen 69
- This example looks at the current time server settings 69
- Data center bridging commands 71
- Hapter 71
- Overview 71
- Pfc ets and dcbx standards 71
- Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx 72
- Chapter 14 data center bridging commands 72
- Command summary 72
- Ethernet switch cli reference guide 72
- Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used 72
- Table 41 dcb user input values 72
- Table 42 priority flow control command summary 72
- The following table describes user input values available in multiple commands for this feature 72
- The following table lists the commands for this feature 72
- This section shows the commands and examples for pfc ets application priority and dcbx 72
- Chapter 14 data center bridging commands 73
- Ethernet switch cli reference guide 73
- In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a 73
- In the following example switch a is not using switch b s configured priorities 73
- In the following example switch a is using switch b s configured priorities 73
- Pfc command examples 73
- Table 42 priority flow control command summary continued 73
- Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not 73
- Chapter 14 data center bridging commands 75
- Create and name traffic class ids with weights for the non sp traffic type 75
- Ethernet switch cli reference guide 75
- Ets command example 1 75
- Table 43 ets command summary 75
- Table 44 ets example traffic classes 75
- Table 45 ets example traffic bandwidths 75
- The following table lists the commands for this feature 75
- The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps 75
- This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each 75
- Application priority 76
- Chapter 14 data center bridging commands 76
- Ethernet switch cli reference guide 76
- Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class 76
- Table 46 ets example priority traffic class id mapping 76
- Table 47 application priority command summary 76
- The following table lists the commands for this feature 76
- This command shows traffic class 76
- Use the application priority command to assign a priority to all fcoe traffic on a switch 76
- Application priority can then be used in conjunction with ets and pfc as shown in the following examples 77
- Application priority command examples 77
- Chapter 14 data center bridging commands 77
- Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 77
- Ethernet switch cli reference guide 77
- In the following example all fcoe traffic on the switch is assigned with priority 3 77
- Table 48 ets example 2 traffic classes 77
- This is an application priority command example with ets 77
- This is an application priority command example with pfc 77
- Chapter 14 data center bridging commands 78
- Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx 78
- Ethernet switch cli reference guide 78
- In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information 78
- See chapter 37 on page 179 for lldp command examples 78
- See chapter 37 on page 179 for more information on lldp 78
- Table 49 dcbx command summary 78
- The following table lists the commands for this feature 78
- This is a dcbx command example 78
- Command summary 79
- Dhcp commands 79
- Hapter 79
- Chapter 15 dhcp commands 80
- Ethernet switch cli reference guide 80
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 80
- Table 51 dhcp relay command summary 80
- Table 52 dhcp relay broadcast command summary 80
- Table 53 dhcp server command summary 80
- Chapter 15 dhcp commands 81
- Command examples 81
- Ethernet switch cli reference guide 81
- Figure 3 example global dhcp relay 81
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 81
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 81
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 81
- Vlan1 vlan2 81
- In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 82
- This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 5 on page 82 it also provides the dhcp clients with the ip address of the default gateway and the dns server 82
- This example shows how to configure these dhcp servers the vlans are already configured 82
- Command summary 83
- Dhcp snooping dhcp vlan commands 83
- Hapter 83
- Chapter 16 dhcp snooping dhcp vlan commands 84
- Command examples 84
- Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 84
- Ethernet switch cli reference guide 84
- Table 54 dhcp snooping command summary continued 84
- Table 55 dhcp vlan command summary 84
- The following table describes the dhcp vlan commands 84
- This example 84
- Chapter 16 dhcp snooping dhcp vlan commands 85
- Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 85
- Ethernet switch cli reference guide 85
- Command summary 87
- Diffserv commands 87
- Hapter 87
- Command summary 89
- Display commands 89
- Hapter 89
- Command summary 91
- Dvmrp commands 91
- Dvmrp overview 91
- Hapter 91
- Chapter 19 dvmrp commands 92
- Command examples 92
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 92
- Ethernet switch cli reference guide 92
- Figure 6 dvmrp network example 92
- In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 92
- Table 58 command summary dvmrp continued 92
- Cpu protection overview 93
- Error disable and recovery commands 93
- Error disable recovery overview 93
- Hapter 93
- User input values 93
- Chapter 20 error disable and recovery commands 94
- Command summary 94
- Ethernet switch cli reference guide 94
- Table 60 cpu protection command summary 94
- Table 61 errdisable recovery command summary 94
- The following section lists the commands for this feature 94
- Chapter 20 error disable and recovery commands 95
- Command examples 95
- Ethernet switch cli reference guide 95
- Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 95
- Table 61 errdisable recovery command summary continued 95
- This example shows you how to configure the following 95
- Chapter 20 error disable and recovery commands 96
- Ethernet switch cli reference guide 96
- This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 96
- Command summary 97
- Ethernet oam commands 97
- Hapter 97
- Ieee 802 ah link layer ethernet oam implementation 97
- Chapter 21 ethernet oam commands 98
- Command examples 98
- Ethernet switch cli reference guide 98
- Table 62 ethernet oam command summary continued 98
- This example enables ethernet oam on port 7 and sets the mode to active 98
- Chapter 21 ethernet oam commands 99
- Ethernet switch cli reference guide 99
- Table 63 show ethernet oam discovery 99
- The following table describes the labels in this screen 99
- This example performs ethernet oam discovery from port 7 99
- Chapter 21 ethernet oam commands 100
- Ethernet switch cli reference guide 100
- Table 63 show ethernet oam discovery continued 100
- This example looks at the number of oam packets transferred on port 1 100
- Chapter 21 ethernet oam commands 101
- Ethernet switch cli reference guide 101
- Table 64 show ethernet oam statistics 101
- Table 65 show ethernet oam summary 101
- The following table describes the labels in this screen 101
- This example looks at the configuration of ports on which oam is enabled 101
- Chapter 21 ethernet oam commands 102
- Ethernet switch cli reference guide 102
- Table 65 show ethernet oam summary continued 102
- Command summary 103
- External alarm commands 103
- Hapter 103
- Chapter 22 external alarm commands 104
- Command examples 104
- Ethernet switch cli reference guide 104
- This example configures and shows the name and status of the external alarm s 104
- Command summary 105
- Garp commands 105
- Garp overview 105
- Hapter 105
- Chapter 23 garp commands 106
- Command examples 106
- Ethernet switch cli reference guide 106
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 106
- Green ethernet commands 107
- Green ethernet overview 107
- Hapter 107
- Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled 108
- Chapter 24 green ethernet commands 108
- Command summary 108
- Ethernet switch cli reference guide 108
- Green ethernet command example 108
- In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters 108
- Table 68 green ethernet command summary 108
- The following section lists the commands for this feature 108
- Auto power down 109
- Chapter 24 green ethernet commands 109
- Ethernet switch cli reference guide 109
- Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled 109
- Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled 109
- Short reach 109
- Chapter 24 green ethernet commands 110
- Ethernet switch cli reference guide 110
- The following example shows how to configure short reach if the switch supports short reach per port 110
- The following example shows the display for short reach if the switch supports short reach per port and showing the status 110
- Command examples 111
- Command summary 111
- Gvrp commands 111
- Hapter 111
- Reference h m 113
- Command summary 115
- Hapter 115
- Https server commands 115
- Chapter 26 https server commands 116
- Command examples 116
- Ethernet switch cli reference guide 116
- Table 71 show https 116
- The following table describes the labels in this screen 116
- This example shows the current https settings statistics and sessions 116
- Chapter 26 https server commands 117
- Ethernet switch cli reference guide 117
- Table 71 show https continued 117
- Table 72 show https session 117
- The following table describes the labels in this screen 117
- This example shows the current https sessions 117
- Chapter 26 https server commands 118
- Ethernet switch cli reference guide 118
- Table 72 show https session continued 118
- Command summary 119
- Guest vlan overview 119
- Hapter 119
- Ieee 802 x authentication commands 119
- Chapter 27 ieee 802 x authentication commands 120
- Command examples 120
- Ethernet switch cli reference guide 120
- Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 120
- Table 73 port access authenticator command summary continued 120
- This example configures the switch in the following ways 120
- Command summary 123
- Hapter 123
- Igmp and multicasting commands 123
- Igmp overview 123
- Chapter 28 igmp and multicasting commands 124
- Command examples 124
- Ethernet switch cli reference guide 124
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode 124
- Table 74 igmp command summary continued 124
- Table 75 ipmc command summary 124
- This example configures igmp on the switch with the following settings 124
- Command summary 127
- Hapter 127
- Igmp snooping commands 127
- Chapter 29 igmp snooping commands 128
- Ethernet switch cli reference guide 128
- Table 77 igmp snooping command summary continued 128
- Chapter 29 igmp snooping commands 129
- Ethernet switch cli reference guide 129
- Table 77 igmp snooping command summary continued 129
- Table 78 igmp snooping vlan command summary 129
- Table 79 interface igmp command summary 129
- Chapter 29 igmp snooping commands 130
- Ethernet switch cli reference guide 130
- Table 79 interface igmp command summary continued 130
- Chapter 29 igmp snooping commands 131
- Command examples 131
- Ethernet switch cli reference guide 131
- Host timeou 131
- Table 79 interface igmp command summary continued 131
- This example enables igmp snooping on the switch sets the 131
- Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 131
- Chapter 29 igmp snooping commands 132
- Ethernet switch cli reference guide 132
- Table 80 show multicast 132
- The following table describes the labels in this screen 132
- This example limits the number of multicast groups on port 1 to 5 132
- This example shows the current multicast groups on the switch 132
- This example shows the current multicast vlan on the switch 132
- Chapter 29 igmp snooping commands 133
- Ethernet switch cli reference guide 133
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 133
- Command summary 135
- Hapter 135
- Igmp filtering commands 135
- Chapter 30 igmp filtering commands 136
- Command examples 136
- Ethernet switch cli reference guide 136
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 136
- Command summary 137
- Hapter 137
- Interface commands 137
- 10000 or 4000 138
- Chapter 31 interface commands 138
- Ethernet switch cli reference guide 138
- Table 82 interface command summary continued 138
- Chapter 31 interface commands 139
- Command examples 139
- Ethernet switch cli reference guide 139
- Table 83 show interfaces 139
- The following table describes the labels in this screen 139
- This example looks at the current status of port 1 139
- Chapter 31 interface commands 140
- Ethernet switch cli reference guide 140
- Table 83 show interfaces continued 140
- Chapter 31 interface commands 141
- Ethernet switch cli reference guide 141
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames 141
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 141
- Table 83 show interfaces continued 141
- This example configures ports 1 3 4 and 5 in the following ways 141
- This example configures ports 1 5 in the following ways 141
- Command examples 143
- Command summary 143
- Hapter 143
- Interface route domain mode 143
- Command summary 145
- Hapter 145
- Ip commands 145
- Chapter 33 ip commands 146
- Command examples 146
- Ethernet switch cli reference guide 146
- Table 86 tcp and udp command summary continued 146
- Table 87 show ip tcp 146
- The following table describes the labels in this screen 146
- This example shows the tcp statistics and listener ports see rfc 1213 for more information 146
- Chapter 33 ip commands 147
- Ethernet switch cli reference guide 147
- Table 87 show ip tcp continued 147
- Chapter 33 ip commands 148
- Ethernet switch cli reference guide 148
- Table 87 show ip tcp continued 148
- Table 88 show ip udp 148
- The following table describes the labels in this screen 148
- This example shows the udp statistics and listener ports see rfc 1213 for more information 148
- Command examples 149
- Command summary 149
- Hapter 149
- Ip source binding commands 149
- Chapter 34 ip source binding commands 150
- Ethernet switch cli reference guide 150
- Table 90 show ip source binding 150
- The following table describes the labels in this screen 150
- Hapter 151
- Ipv6 addressing 151
- Ipv6 commands 151
- Ipv6 overview 151
- Ipv6 terms 152
- A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 153
- Chapter 35 ipv6 commands 153
- Ethernet switch cli reference guide 153
- Loopback 153
- Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 153
- Table 93 predefined multicast address 153
- Table 94 reserved multicast address 153
- The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 153
- Eui 64 154
- Chapter 35 ipv6 commands 158
- Command summary 158
- Ethernet switch cli reference guide 158
- In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 158
- Report 158
- Table 95 ipv6 user input values 158
- Table 96 ipv6 address command summary 158
- The following section lists the commands for this feature 158
- The following table describes user input values available in multiple commands for this feature 158
- Chapter 35 ipv6 commands 159
- Ethernet switch cli reference guide 159
- Note make sure an ipv6 router is available in the vlan network before using this command on the switch 159
- Table 96 ipv6 address command summary continued 159
- Chapter 35 ipv6 commands 160
- Ethernet switch cli reference guide 160
- Table 96 ipv6 address command summary continued 160
- Table 97 ipv6 dhcp relay command summary 160
- Chapter 35 ipv6 commands 161
- Ethernet switch cli reference guide 161
- Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 161
- Table 98 ipv6 icmp and ping6 command summary 161
- Table 99 ipv6 mld snooping proxy command summary 161
- Chapter 35 ipv6 commands 162
- Ethernet switch cli reference guide 162
- Table 99 ipv6 mld snooping proxy command summary continued 162
- Chapter 35 ipv6 commands 163
- Ethernet switch cli reference guide 163
- Table 99 ipv6 mld snooping proxy command summary continued 163
- Chapter 35 ipv6 commands 164
- Ethernet switch cli reference guide 164
- Table 99 ipv6 mld snooping proxy command summary continued 164
- Chapter 35 ipv6 commands 165
- Ethernet switch cli reference guide 165
- Table 100 ipv6 nd command summary 165
- Chapter 35 ipv6 commands 166
- Ethernet switch cli reference guide 166
- Table 100 ipv6 nd command summary continued 166
- Table 101 ipv6 neighbor command summary 166
- Chapter 35 ipv6 commands 167
- Command examples 167
- Ethernet switch cli reference guide 167
- Table 101 ipv6 neighbor command summary continued 167
- This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 167
- This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 167
- Chapter 35 ipv6 commands 168
- Ethernet switch cli reference guide 168
- There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 168
- This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 168
- Chapter 35 ipv6 commands 169
- Ethernet switch cli reference guide 169
- Table 102 show ipv6 neighbor 169
- The following table describes the labels in this screen 169
- This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 169
- By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 170
- Chapter 35 ipv6 commands 170
- Ethernet switch cli reference guide 170
- Example enabling ipv6 on windows xp 2003 170
- This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 170
- Example http accessing the switch using ipv6 171
- How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 171
- Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 171
- It s recommended to use internet explorer 7 or firefox to access the switch s web gui 171
- Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 171
- This example shows you how to access the switch using http on windows xp 171
- Command summary 175
- Hapter 175
- Layer 2 protocol tunnel l2pt commands 175
- Chapter 36 layer 2 protocol tunnel l2pt commands 176
- Command examples 176
- Ethernet switch cli reference guide 176
- Table 104 l2pt command summary continued 176
- This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 176
- Chapter 36 layer 2 protocol tunnel l2pt commands 177
- Ethernet switch cli reference guide 177
- This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 177
- This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 177
- This example sets l2pt mode to tunnel for port 4 177
- Hapter 179
- Link layer discovery protocol lldp commands 179
- Lldp overview 179
- Chapter 37 link layer discovery protocol lldp commands 180
- Command summary 180
- Ethernet switch cli reference guide 180
- Table 105 lldp command summary 180
- The following section lists the commands for this feature 180
- Chapter 37 link layer discovery protocol lldp commands 181
- Ethernet switch cli reference guide 181
- Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 181
- Table 105 lldp command summary continued 181
- Chapter 37 link layer discovery protocol lldp commands 182
- Command examples 182
- Ethernet switch cli reference guide 182
- See chapter 14 on page 71 for dcb configuration and examples 182
- Table 105 lldp command summary continued 182
- This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 182
- Chapter 37 link layer discovery protocol lldp commands 183
- Ethernet switch cli reference guide 183
- Lldp settings on a port 183
- Switch lldp settings 183
- Table 106 183
- Table 107 183
- The following table describes the labels in this screen 183
- This example shows global switch lldp settings 183
- This example shows lldp settings on a port 183
- Chapter 37 link layer discovery protocol lldp commands 184
- Continued 184
- Ethernet switch cli reference guide 184
- Lldp settings on a por 184
- Switch lldp statistics 184
- Table 107 184
- Table 108 184
- The following table describes the labels in this screen 184
- This example shows global switch lldp statistics 184
- Chapter 37 link layer discovery protocol lldp commands 185
- Ethernet switch cli reference guide 185
- Lldp statistics on a port 185
- Table 109 185
- The following table describes the labels in this screen 185
- This example shows lldp statistics on a port 185
- This example shows local switch the switch you re accessing lldp information 185
- Chapter 37 link layer discovery protocol lldp commands 186
- Ethernet switch cli reference guide 186
- Local lldp information 186
- Table 110 186
- The following table describes the labels in this screen 186
- This example shows local switch the switch you re accessing lldp information on a port 186
- Chapter 37 link layer discovery protocol lldp commands 187
- Ethernet switch cli reference guide 187
- Local switch lldp information on a port 187
- Table 111 187
- The following table describes the labels in this screen 187
- This example shows remote switch the switch connected to the port on the switch you re accessing lldp information 187
- Chapter 37 link layer discovery protocol lldp commands 188
- Ethernet switch cli reference guide 188
- Remote switch lldp information 188
- Table 112 188
- The following table describes the labels in this screen 188
- Command summary 189
- Hapter 189
- Load sharing commands 189
- Load sharing overview 189
- Chapter 38 load sharing commands 190
- Command examples 190
- Ethernet switch cli reference guide 190
- This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 190
- Command examples 191
- Command summary 191
- Hapter 191
- Logging commands 191
- Command summary 193
- Hapter 193
- Login account commands 193
- Password encryption 193
- Chapter 40 login account commands 194
- Command examples 194
- Ethernet switch cli reference guide 194
- This example creates a new user user2 with privilege 13 194
- Command summary 195
- Hapter 195
- Loopguard commands 195
- Chapter 41 loopguard commands 196
- Command examples 196
- Ethernet switch cli reference guide 196
- Table 117 show loopguard 196
- The following table describes the labels in this screen 196
- This example enables loopguard on ports 1 3 196
- Command summary 197
- Hapter 197
- Mac address commands 197
- Chapter 42 mac address commands 198
- Command examples 198
- Ethernet switch cli reference guide 198
- Table 118 mac mac aging time and mac flush command summary continued 198
- Table 119 show mac address table 198
- The following table describes the labels in this screen 198
- This example shows the current mac address table 198
- Command summary 199
- Hapter 199
- Mac authentication commands 199
- Mac authentication overview 199
- Chapter 43 mac authentication commands 200
- Command examples 200
- Ethernet switch cli reference guide 200
- Table 120 mac authentication command summary continued 200
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 200
- Command summary 201
- Hapter 201
- Mac filter commands 201
- Command example 202
- Command example filter source 202
- Command summary 203
- Hapter 203
- Mac forward commands 203
- Command summary 205
- Hapter 205
- Mirror commands 205
- Chapter 46 mirror commands 206
- Command examples 206
- Ethernet switch cli reference guide 206
- Table 124 mirror command summary continued 206
- Table 125 mirror filter command summary 206
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 206
- Chapter 46 mirror commands 207
- Ethernet switch cli reference guide 207
- This example displays the mirror settings of the switch after you configured in the example above 207
- Command summary 209
- Hapter 209
- Mrstp commands 209
- Mrstp overview 209
- Chapter 47 mrstp commands 210
- Command examples 210
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 210
- Ethernet switch cli reference guide 210
- In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 210
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 210
- Table 126 command summary mrstp 210
- This example configures mrstp in the following way 210
- Command summary 211
- Hapter 211
- Mstp commands 211
- Chapter 48 mstp commands 212
- Command examples 212
- Ethernet switch cli reference guide 212
- Table 128 mstp instance command summary 212
- This example shows the current mstp configuration 212
- Chapter 48 mstp commands 213
- Ethernet switch cli reference guide 213
- Table 129 show mstp 213
- The following table describes the labels in this screen 213
- This example shows the current cist configuration mstp instance 0 213
- Chapter 48 mstp commands 214
- Ethernet switch cli reference guide 214
- Table 130 show mstp instance 214
- The following table describes the labels in this screen 214
- Command examples 217
- Command summary 217
- Hapter 217
- Multiple login commands 217
- Command summary 219
- Hapter 219
- Mvr commands 219
- Command examples 220
- Reference n s 221
- Command summary 223
- Hapter 223
- Ospf commands 223
- Ospf overview 223
- Chapter 51 ospf commands 224
- Ethernet switch cli reference guide 224
- Table 134 ospf command summary continued 224
- Chapter 51 ospf commands 225
- Ethernet switch cli reference guide 225
- Note you cannot set two routing protocols to have the same administrative distance 225
- Table 134 ospf command summary continued 225
- Chapter 51 ospf commands 226
- Command examples 226
- Ethernet switch cli reference guide 226
- Figure 7 ospf network example 226
- In this example the switch a is an area border router abr in an ospf network 226
- Table 134 ospf command summary continued 226
- In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 227
- Is also set to 1 as this router should participate in router elections 227
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 227
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 227
- Chapter 51 ospf commands 228
- Ethernet switch cli reference guide 228
- From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 228
- This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 228
- Command summary 229
- Hapter 229
- Password commands 229
- Password encryption 229
- Command examples 230
- Command summary 231
- Hapter 231
- Poe commands 231
- Chapter 53 poe commands 232
- Command examples 232
- Ethernet switch cli reference guide 232
- This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 232
- This example shows the current status and configuration of power over ethernet 232
- Chapter 53 poe commands 233
- Ethernet switch cli reference guide 233
- Note if the management mode is set to consumption this field shows na 233
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 233
- Table 137 show pwr 233
- The following table describes the labels in this screen 233
- Command summary 235
- Hapter 235
- Policy commands 235
- Chapter 54 policy commands 236
- Ethernet switch cli reference guide 236
- Table 138 policy command summary 236
- Chapter 54 policy commands 237
- Command examples 237
- Ethernet switch cli reference guide 237
- Table 138 policy command summary 237
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 59 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 237
- Chapter 54 policy commands 238
- Ethernet switch cli reference guide 238
- This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 59 this policy forwards class1 packets to port 8 238
- Command summary 239
- Hapter 239
- Policy route commands 239
- 9 it then shows the policy routing information 240
- By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 240
- Chapter 55 policy route commands 240
- Command examples 240
- Ethernet switch cli reference guide 240
- To forward packets that match the layer 3 classifier to the gateway with ip address 240
- Command summary 241
- Hapter 241
- Port security commands 241
- Chapter 56 port security commands 242
- Command examples 242
- Ethernet switch cli reference guide 242
- Table 140 port security command summary continued 242
- This example enables port security on port 1 and limits the number of learned mac addresses to 5 242
- Command examples 243
- Command summary 243
- Hapter 243
- Port based vlan commands 243
- Hapter 245
- Port state 245
- Pppoe ia commands 245
- Pppoe intermediate agent overview 245
- Chapter 58 pppoe ia commands 246
- Command summary 246
- Ethernet switch cli reference guide 246
- Table 142 pppoe intermediate agent command summary 246
- The following section lists the commands for this feature 246
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 246
- Chapter 58 pppoe ia commands 247
- Ethernet switch cli reference guide 247
- Table 142 pppoe intermediate agent command summary continued 247
- Chapter 58 pppoe ia commands 248
- Command examples 248
- Ethernet switch cli reference guide 248
- This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 248
- This is an example of how to enable and configure pppoe ia for vlans 248
- This is an example of how to enable and disable pppoe ia on the switch 248
- This is an example of how to set a pppoe ia trust port 248
- Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 249
- Similarly we can let the circuit id carry the information which we configure 249
- The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 249
- This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 249
- Vendor specific tag examples 249
- Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 250
- Chapter 58 pppoe ia commands 250
- Ethernet switch cli reference guide 250
- Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 250
- Hapter 251
- Legacy pvlan overview 251
- Private vlan commands 251
- Command examples 252
- Legacy pvlan command summary 252
- That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 252
- The following section lists the commands for this feature 252
- This example sets a private vlan rule 252
- Command summary 253
- Private vlan 253
- That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the 253
- The following section lists the commands for this feature 253
- This example sets a private vlan rule 253
- Chapter 59 private vlan commands 254
- Command example 254
- Ethernet switch cli reference guide 254
- Table 144 private vlan command summary continued 254
- This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 103 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch 254
- Chapter 59 private vlan commands 255
- Ethernet switch cli reference guide 255
- Command summary 257
- Hapter 257
- Protocol based vlan commands 257
- Protocol based vlan overview 257
- Chapter 60 protocol based vlan commands 258
- Command examples 258
- Ethernet switch cli reference guide 258
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 258
- Table 145 protocol based vlan command summary continued 258
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 258
- Hapter 259
- Queuing commands 259
- Queuing overview 259
- Chapter 61 queuing commands 260
- Command summary port by port configuration 260
- Ethernet switch cli reference guide 260
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 260
- Note some models only support 4 queues 260
- Table 146 queuing command summary 260
- The following section lists the commands for this feature 260
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 260
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 260
- Chapter 61 queuing commands 261
- Command examples port by port configuration 261
- Ethernet switch cli reference guide 261
- Table 146 queuing command summary continued 261
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 261
- Chapter 61 queuing commands 262
- Command examples system wide 262
- Command summary system wide configuration 262
- Ethernet switch cli reference guide 262
- Note some models only support 4 queues 262
- Table 147 queueing command summary 262
- The following section lists the commands for this feature 262
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 262
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 262
- Command summary 263
- Hapter 263
- Radius commands 263
- Chapter 62 radius commands 264
- Command examples 264
- Ethernet switch cli reference guide 264
- Table 149 radius accounting command summary continued 264
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 264
- Command summary 265
- Hapter 265
- Remote management commands 265
- Chapter 63 remote management commands 266
- Command examples 266
- Ethernet switch cli reference guide 266
- Table 152 service control command summary continued 266
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 266
- This example disables all snmp and icmp access to the 266
- Command summary 267
- Hapter 267
- Rip commands 267
- Rip overview 267
- Chapter 64 rip commands 268
- Command examples 268
- Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 268
- Ethernet switch cli reference guide 268
- Note you cannot set two routing protocols to have the same administrative distance 268
- Table 153 rip command summary continued 268
- This example 268
- Hapter 269
- Rmon overview 269
- User input values 269
- Chapter 65 rmon 270
- Command summary 270
- Ethernet switch cli reference guide 270
- Table 156 rmon command summary 270
- The following section lists the commands for this feature 270
- Chapter 65 rmon 271
- Ethernet switch cli reference guide 271
- Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 271
- Rmon alarm command example 271
- Rmon event command example 271
- Syntax 271
- This example also shows how to display the setting results 271
- This example shows how to configure the switch s action when an rmon event using the following settings 271
- Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 65 on page 271 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 65 on page 271 who will handle this alarm operator 272
- Chapter 65 rmon 272
- Ethernet switch cli reference guide 272
- This example shows you how to configure an alarm using the following settings 272
- Chapter 65 rmon 273
- Ethernet switch cli reference guide 273
- Rmon statistics command example 273
- The ethernet statistics table entry s index number 1 collecting data samples from which port 12 273
- This example also shows how to display the data collection results 273
- This example also shows how to display the setting results 273
- This example shows how to configure the settings to display current network traffic statistics using the following settings 273
- Chapter 65 rmon 274
- Ethernet switch cli reference guide 274
- Rmon history command example 274
- The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 274
- This example also shows how to display the data collection results 274
- This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 274
- Command summary 275
- Hapter 275
- Running configuration commands 275
- Switch configuration file 275
- Chapter 66 running configuration commands 276
- Command examples 276
- Ethernet switch cli reference guide 276
- Table 158 running config command summary 276
- The following section lists the commands for this feature 276
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 276
- This example resets the switch to the factory default settings 276
- Command summary 277
- Hapter 277
- Sflow overview 277
- Chapter 67 sflow 278
- Command examples 278
- Ethernet switch cli reference guide 278
- Table 159 sflow command summary continued 278
- This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 278
- Hapter 279
- Smart isolation commands 279
- Smart isolation overview 279
- Command summary 280
- The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 280
- Chapter 68 smart isolation commands 281
- Command examples 281
- Ethernet switch cli reference guide 281
- Table 161 show smart isolation 281
- The following table describes the labels in this screen 281
- This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 281
- Chapter 68 smart isolation commands 282
- Ethernet switch cli reference guide 282
- Table 161 show smart isolation continued 282
- Command summary 283
- Hapter 283
- Snmp server commands 283
- Chapter 69 snmp server commands 284
- Ethernet switch cli reference guide 284
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 284
- Table 163 snmp server command summary continued 284
- Table 164 snmp server trap destination enable traps command summary 284
- Chapter 69 snmp server commands 285
- Ethernet switch cli reference guide 285
- Table 164 snmp server trap destination enable traps command summary continued 285
- Chapter 69 snmp server commands 286
- Command examples 286
- Ethernet switch cli reference guide 286
- This example shows you how to display all snmp user information on the switch 286
- This example shows you how to display the snmp information on the switch 286
- Command summary 287
- Hapter 287
- Stp and rstp commands 287
- Chapter 70 stp and rstp commands 288
- Command examples 288
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 288
- Ethernet switch cli reference guide 288
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 288
- Table 165 spanning tree command summary continued 288
- This example configures stp in the following ways 288
- Chapter 70 stp and rstp commands 289
- Ethernet switch cli reference guide 289
- Table 166 show spanning tree config 289
- The following table describes the labels in this screen 289
- This example shows the current stp settings 289
- Chapter 70 stp and rstp commands 290
- Ethernet switch cli reference guide 290
- In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 290
- Table 166 show spanning tree config continued 290
- Command examples 291
- Command summary 291
- Hapter 291
- Ssh commands 291
- Chapter 71 ssh commands 292
- Ethernet switch cli reference guide 292
- Table 168 show ssh 292
- The following table describes the labels in this screen 292
- This example shows the general ssh settings 292
- Command summary 293
- Hapter 293
- Static multicast commands 293
- Command examples 294
- Command summary 295
- Hapter 295
- Static route commands 295
- Chapter 73 static route commands 296
- Command examples 296
- Ethernet switch cli reference guide 296
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 296
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 296
- Table 171 show ip route 296
- The following table describes the labels in this screen 296
- This example shows the current routing table 296
- You can create this static route if it is inactive however 296
- Chapter 73 static route commands 297
- Ethernet switch cli reference guide 297
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 297
- Command summary 299
- Hapter 299
- Subnet based vlan commands 299
- Subnet based vlan overview 299
- Chapter 74 subnet based vlan commands 300
- Command examples 300
- Ethernet switch cli reference guide 300
- Table 172 subnet based vlan command summary continued 300
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 300
- Command summary 301
- Hapter 301
- Syslog commands 301
- Reference t z 303
- Command summary 305
- Hapter 305
- Tacacs commands 305
- Command summary 307
- Hapter 307
- Tftp commands 307
- Command summary 309
- Hapter 309
- Trunk commands 309
- Chapter 78 trunk commands 310
- Command examples 310
- Ethernet switch cli reference guide 310
- Table 181 lacp command summary 310
- Table 182 show trunk 310
- The following table describes the labels in this screen 310
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 310
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 310
- This example looks at the current trunks 310
- Chapter 78 trunk commands 311
- Ethernet switch cli reference guide 311
- Table 182 show trunk continued 311
- Table 183 show lacp 311
- The following table describes the labels in this screen 311
- This example shows the current lacp settings 311
- Command summary 313
- Hapter 313
- Trtcm commands 313
- Trtcm overview 313
- Chapter 79 trtcm commands 314
- Command examples 314
- Ethernet switch cli reference guide 314
- Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 314
- Table 184 trtcm command summary continued 314
- This example activates trtcm on the switch with the following settings 314
- Chapter 79 trtcm commands 315
- Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example 315
- Ethernet switch cli reference guide 315
- This examples activates trtcm on the switch with the following settings 315
- Hapter 317
- Vlan commands 317
- Vlan configuration overview 317
- Vlan overview 317
- Command summary 318
- See chapter 31 on page 137 for interface port channel commands 318
- The following section lists the commands for the ingress checking feature 318
- The following section lists the commands for this feature 318
- Vlan ingress checking implementation differs across switch models 318
- Chapter 80 vlan commands 319
- Command examples 319
- Ethernet switch cli reference guide 319
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 319
- Table 186 vlan1q ingress check command summary 319
- Table 187 ingress check command summary 319
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 319
- This example deletes entry 2 in the static vlan table 319
- This example shows the vlan table 319
- Chapter 80 vlan commands 320
- Ethernet switch cli reference guide 320
- Table 188 show vlan 320
- The following table describes the labels in this screen 320
- This example enables ingress checking on ports 1 5 320
- Chapter 80 vlan commands 321
- Ethernet switch cli reference guide 321
- Table 189 show vlan counters 321
- The following table describes the labels in this screen 321
- This example displays concurrent incoming packet statistics for vlan 1 321
- Chapter 80 vlan commands 322
- Ethernet switch cli reference guide 322
- Table 189 show vlan counters continued 322
- Command summary 323
- Hapter 323
- Ip interfaces overview 323
- Vlan ip commands 323
- Chapter 81 vlan ip commands 324
- Command examples 324
- Ethernet switch cli reference guide 324
- See section 3 on page 24 for an example of how to configure a vlan management ip address 324
- Table 190 vlan ip address command summary continued 324
- Command summary 325
- Hapter 325
- Vlan mapping commands 325
- Chapter 82 vlan mapping commands 326
- Command examples 326
- Ethernet switch cli reference guide 326
- This example enables vlan mapping on port 4 326
- This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 326
- Command summary 327
- Hapter 327
- Vlan port isolation commands 327
- Command summary 329
- Hapter 329
- Vlan stacking commands 329
- A 37 24 330
- B 48 24 330
- Chapter 84 vlan stacking commands 330
- Command examples 330
- Customer a customer a 330
- Customer b customer b 330
- Ethernet switch cli reference guide 330
- Figure 10 example vlan stacking 330
- In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 330
- Table 193 vlan stacking command summary continued 330
- Vlan 24 vlan 24 330
- Chapter 84 vlan stacking commands 331
- Ethernet switch cli reference guide 331
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 331
- Command summary 333
- Hapter 333
- Vlan trunking commands 333
- Command summary 335
- Hapter 335
- Vrrp commands 335
- Vrrp overview 335
- Chapter 86 vrrp commands 336
- Command examples 336
- Ethernet 336
- Ethernet switch cli reference guide 336
- Figure 11 example vrrp 336
- Table 195 vrrp command summary continued 336
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 336
- Chapter 86 vrrp commands 337
- Ethernet switch cli reference guide 337
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 336 337
- Chapter 86 vrrp commands 338
- Ethernet switch cli reference guide 338
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 336 338
- Additional commands 339
- Command summary 339
- Hapter 339
- Chapter 87 additional commands 340
- Ethernet switch cli reference guide 340
- Table 197 command summary additional enable mode continued 340
- Chapter 87 additional commands 341
- Command examples 341
- Ethernet switch cli reference guide 341
- Table 197 command summary additional enable mode continued 341
- Table 198 command summary additional configure mode 341
- This example checks the cable pairs on port 7 341
- Chapter 87 additional commands 342
- Ethernet switch cli reference guide 342
- Table 199 ping 342
- Table 200 show alarm status 342
- The following table describes the labels in this screen 342
- This example sends ping requests to an ethernet device with ip address 172 6 7 54 342
- This example shows the current status of the various alarms in the switch 342
- Chapter 87 additional commands 343
- Ethernet switch cli reference guide 343
- Table 200 show alarm status continued 343
- Table 201 show cpu utilization 343
- The following table describes the labels in this screen 343
- This example shows the current and recent cpu utilization 343
- Chapter 87 additional commands 344
- Ethernet switch cli reference guide 344
- Table 202 show hardware monitor 344
- The following table describes the labels in this screen 344
- This example looks at the current sensor readings from various places in the hardware the display for your switch may be different 344
- Chapter 87 additional commands 345
- Ethernet switch cli reference guide 345
- Table 202 show hardware monitor continued 345
- This example displays multicast vlan configuration on the 345
- Chapter 87 additional commands 346
- Ethernet switch cli reference guide 346
- Note if the management mode is set to consumption this field shows na 346
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 346
- Table 203 show multicast vlan 346
- Table 204 show poe status 346
- Table 205 show system information 346
- The following table describes the labels in this screen 346
- This example looks at general system information about the switch 346
- This example shows the current status of power over ethernet 346
- Chapter 87 additional commands 347
- Ethernet switch cli reference guide 347
- For temperature voltage transmission bias transmission and receiving power as shown 347
- Table 205 show system information continued 347
- This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 347
- You can also see the alarm and warning threasholds 347
- Chapter 87 additional commands 348
- Ethernet switch cli reference guide 348
- For temperature voltage transmission bias transmission and receiving power as shown 348
- This example displays route information to an ethernet device with ip address 348
- This example displays run time sfp small form facter pluggable parameters on port 21 on the 348
- This example displays the firmware version the switch is currently using 348
- This example runs an internal loopback test on ports 3 6 348
- You can also see the alarm and warning threasholds 348
- Appendices and index of commands 351
- Default values 353
- Ppendix 353
- Certifications 355
- Copyright 355
- Legal information 355
- Ppendix 355
- Zyxel limited warranty 356
- Index of commands 359
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 359
- Ethernet switch cli reference guide 360
- Index of commands 360
- Ethernet switch cli reference guide 361
- Index of commands 361
- Ethernet switch cli reference guide 362
- Index of commands 362
- Ethernet switch cli reference guide 363
- Index of commands 363
- Ethernet switch cli reference guide 364
- Index of commands 364
- Ethernet switch cli reference guide 365
- Index of commands 365
- Ethernet switch cli reference guide 366
- Index of commands 366
- Ethernet switch cli reference guide 367
- Index of commands 367
- Ethernet switch cli reference guide 368
- Index of commands 368
- Ethernet switch cli reference guide 369
- Index of commands 369
- Ethernet switch cli reference guide 370
- Index of commands 370
- Ethernet switch cli reference guide 371
- Index of commands 371
- Ethernet switch cli reference guide 372
- Index of commands 372
- Ethernet switch cli reference guide 373
- Index of commands 373
- Ethernet switch cli reference guide 374
- Index of commands 374
- Ethernet switch cli reference guide 375
- Index of commands 375
- Ethernet switch cli reference guide 376
- Index of commands 376
- Ethernet switch cli reference guide 377
- Index of commands 377
- Ethernet switch cli reference guide 378
- Index of commands 378
- Ethernet switch cli reference guide 379
- Index of commands 379
- Ethernet switch cli reference guide 380
- Index of commands 380
- Ethernet switch cli reference guide 381
- Index of commands 381
- Ethernet switch cli reference guide 382
- Index of commands 382
- Ethernet switch cli reference guide 383
- Index of commands 383
Похожие устройства
- HP scanjet enterprise 7000 s2 Инструкция по эксплуатации
- HP scanjet professional 3000 s2 Инструкция по эксплуатации
- Zyxel MC1000-SFP-FP Инструкция по эксплуатации
- Zyxel MC1000-SFP-FP Технические характеристики
- HP scanjet g4010 Инструкция по эксплуатации
- HP probook 6570b, c3c70es Инструкция по эксплуатации
- HP laserjet pro 500 m521dw Инструкция по эксплуатации
- Zyxel NXC2500 Инструкция по эксплуатации
- Zyxel NXC2500 Инструкция по установке
- Zyxel NXC2500 Технические характеристики
- Zyxel NXC2500 Справочник командного интерфейса
- HP laserjet pro 500 m521dn Инструкция по эксплуатации
- HP scanjet 300 Инструкция по эксплуатации
- HP scanjet 200 Инструкция по эксплуатации
- HP designjet t120 Инструкция по эксплуатации
- HP envy m6-1262er, d2g42ea Инструкция по эксплуатации
- Zyxel NXC5500 Инструкция по эксплуатации
- Zyxel NXC5500 Инструкция по установке
- Zyxel NXC5500 Технические характеристики
- Zyxel NXC5500 Справочник командного интерфейса