![Zyxel MES3500-10 — port Security Commands for Ethernet Switch Configuration Guide [228/364]](/icons/site-icon-64.png){kind=icon}
Zyxel MES3500-10 — port Security Commands for Ethernet Switch Configuration Guide [228/364]
Превью страниц
Страница 228 /
364
![Zyxel MES3500-10 [228/364] Table 125 port security command summary continued](/views2/1169485/page228/bge4.png)
Chapter 54 Port Security Commands
Ethernet Switch CLI Reference Guide
228
54.2 Command Examples
This example enables port security on port 1 and limits the number of learned MAC addresses
to 5.
no port-security <port-list>
vlan <vlan-id> address-limit
Removes the specified VLAN MAC address limit. C 13
port-security <port-list> vlan
<vlan-id> address-limit <number>
inactive
Disables the specified VLAN MAC address limit. C 13
no port-security <port-list>
vlan <vlan-id> address-limit
inactive
Enables the specified VLAN MAC address limit. C 13
Table 125 port-security Command Summary (continued)
COMMAND DESCRIPTION M P
sysname# configure
sysname(config)# port-security
sysname(config)# port-security 1
sysname(config)# no port-security 1 learn inactive
sysname(config)# port-security 1 address-limit 5
sysname(config)# exit
sysname# show port-security 1
Port Security Active : YES
Port Active Address Learning Limited Number of Learned MAC Address
01 Y Y 5
Содержание
1264- Default login details
- Cli reference guide
- Ethernet switch
- Firmware version 3 9 3 0 3 0 and 4 0 edition 2 08 2011
- Www zyxel com
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation
- About this cli reference guide
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations
- Document conventions
- Ethernet switch cli reference guide
- Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device
- Document conventions
- Icons used in figures
- Introduction 11
- Reference h m 101
- Reference a g 27
- Contents overview
- Reference n s 207
- Appendices and index of commands 333
- Reference t z 287
- Introduction
- Console port
- Telnet
- How to access and use the cli
- Hapter
- Accessing the cli
- Logging in
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again
- Using shortcuts and getting help
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch
- Saving your configuration
- Logging out
- Privilege levels
- Privilege levels for login accounts
- Privilege levels for commands
- Privilege level and command mode
- Hapter
- Privilege levels for sessions
- Command modes
- Command modes for privilege levels 0 12
- Ethernet switch cli reference guide
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another
- Command modes for privilege levels 13 14
- Chapter 2 privilege level and command mode
- Table 8 changing between command modes for privilege levels 13 14
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one
- If the session s privilege level is 13 14 the allowed commands are in one of several modes
- Listing available commands
- Initial setup
- Hapter
- Changing the enable password
- Changing the administrator password
- Prohibiting concurrent logins
- Changing the out of band management ip address
- Changing the management ip address
- Afterwards you have to use the new ip address to access the switch
- Looking at the operating configuration
- Looking at basic system information
- Ethernet switch cli reference guide
- Chapter 3 initial setup
- Use this command to look at the current operating configuration
- Use this command to look at general system information about the switch
- This is illustrated in the following example
- See chapter 85 on page 323 for more information about these attributes
- Reference a g
- Aaa commands
- Hapter
- Command summary
- Table 11 aaa authorization command summary
- Table 10 command summary aaa accounting continued
- Ethernet switch cli reference guide
- Chapter 4 aaa commands
- Command summary
- Command examples
- Hapter
- Arp commands
- Table 13 show ip arp continued
- Ethernet switch cli reference guide
- Chapter 5 arp commands
- Hapter
- Command summary
- Arp inspection commands
- Table 18 command summary arp inspection vlan
- Table 17 command summary interface arp inspection
- Table 16 command summary arp inspection log
- Ethernet switch cli reference guide
- Chapter 6 arp inspection commands
- Ethernet switch cli reference guide
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet
- The following table describes the labels in this screen
- Table 19 show arp inspection filter
- Command examples
- Chapter 6 arp inspection commands
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet
- This example displays whether ports are trusted or untrusted ports for arp inspection
- The following table describes the labels in this screen
- Table 20 show arp inspection log
- Ethernet switch cli reference guide
- Chapter 6 arp inspection commands
- The following table describes the labels in this screen
- Table 21 show arp inspection interface port channel
- Ethernet switch cli reference guide
- Chapter 6 arp inspection commands
- Hapter
- Command summary
- Command examples
- Arp learning commands
- Bandwidth commands
- Hapter
- The following table describes user input values available in multiple commands for this feature
- The following section lists the commands for this feature
- Table 24 command summary bandwidth control bandwidth limit
- Table 23 user input values running config
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth
- Ethernet switch cli reference guide
- Command summary
- Chapter 8 bandwidth commands
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1
- This example displays the bandwidth limits configured on port 1
- This example deactivates the outgoing bandwidth limit on port 1
- Ethernet switch cli reference guide
- Command examples ingress
- Command examples cir pir
- Chapter 8 bandwidth commands
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1
- Hapter
- Command summary
- Broadcast storm commands
- This example enables broadcast storm control on the switch and configures port 1 to accept up to
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps
- Table 26 command summary storm control bmstorm limit and bstorm control continued
- Ethernet switch cli reference guide
- Command example broadcast limit multicast limit dlf limit
- Command example bmstorm limit
- Chapter 9 broadcast storm commands
- 128 broadcast packets per second 256 multicast packets per second
- Ethernet switch cli reference guide
- Chapter 9 broadcast storm commands
- 64 dlf packets per second
- Cfm commands
- How cfm works
- Hapter
- Cfm overview
- Cfm term definition
- User input values
- This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm
- Table 28 cfm command user input values
- Table 27 cfm term definitions
- Ethernet switch cli reference guide
- Chapter 10 cfm commands
- The following section lists the commands for this feature
- Table 29 cfm command summary
- Ethernet switch cli reference guide
- Command summary
- Chapter 10 cfm commands
- Chapter 10 cfm commands
- Table 29 cfm command summary continued
- Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma
- Ethernet switch cli reference guide
- Table 29 cfm command summary continued
- Ethernet switch cli reference guide
- Chapter 10 cfm commands
- Remember to save new settings using the write memory command
- Command examples
- This example starts a loopback test and displays the test result on the console
- This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1
- This example displays all neighbors mep port information in the mip ccm databases
- The following table describes the labels in this screen
- Table 30 show cfm action mipccmdb
- Ethernet switch cli reference guide
- Chapter 10 cfm commands
- Chapter 10 cfm commands
- This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets
- This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets
- This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs
- Ethernet switch cli reference guide
- Hapter
- Command summary
- Classifier commands
- The following table shows some other common ethernet types and the corresponding protocol number
- Table 34 common ipv6 next header values
- Table 33 common ipv4 protocol types and protocol numbers
- Table 32 common ethernet types and protocol number
- In an ipv6 packet header the next header field identifies the next level protocol the following table shows some common ipv6 next header values
- In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list
- Ethernet switch cli reference guide
- Chapter 11 classifier commands
- Command examples
- Hapter
- Command summary
- Cluster commands
- Table 36 show cluster member
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster
- The following table describes the labels in this screen
- Ethernet switch cli reference guide
- Command examples
- Chapter 12 cluster commands
- This example looks at the current status of the switch s cluster
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager
- The following table describes the labels in this screen
- Table 37 show cluster
- Ethernet switch cli reference guide
- Chapter 12 cluster commands
- Command summary
- Hapter
- Date and time commands
- This example sets the current date current time time zone and daylight savings time
- Table 40 timesync command summary
- Table 39 time command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 13 date and time commands
- This example looks at the current time server settings
- The following table describes the labels in this screen
- Table 41 show timesync
- Ethernet switch cli reference guide
- Chapter 13 date and time commands
- Hapter
- Dhcp commands
- Command summary
- Table 45 dhcp server command summary
- Table 44 dhcp relay broadcast command summary
- Table 43 dhcp relay command summary
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay
- Ethernet switch cli reference guide
- Chapter 14 dhcp commands
- Vlan1 vlan2
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains
- Figure 3 example global dhcp relay
- Ethernet switch cli reference guide
- Command examples
- Chapter 14 dhcp commands
- This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 5 on page 74 it also provides the dhcp clients with the ip address of the default gateway and the dns server
- In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30
- This example shows how to configure these dhcp servers the vlans are already configured
- Hapter
- Dhcp snooping dhcp vlan commands
- Command summary
- This example
- The following table describes the dhcp vlan commands
- Table 47 dhcp vlan command summary
- Table 46 dhcp snooping command summary continued
- Ethernet switch cli reference guide
- Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7
- Command examples
- Chapter 15 dhcp snooping dhcp vlan commands
- Ethernet switch cli reference guide
- Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details
- Chapter 15 dhcp snooping dhcp vlan commands
- Command summary
- Hapter
- Diffserv commands
- Hapter
- Display commands
- Command summary
- Hapter
- Dvmrp overview
- Dvmrp commands
- Command summary
- Table 50 command summary dvmrp continued
- Figure 6 dvmrp network example
- Ethernet switch cli reference guide
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch
- Command examples
- Chapter 18 dvmrp commands
- User input values
- Hapter
- Error disable recovery overview
- Error disable and recovery commands
- Cpu protection overview
- The following section lists the commands for this feature
- Table 53 errdisable recovery command summary
- Table 52 cpu protection command summary
- Ethernet switch cli reference guide
- Command summary
- Chapter 19 error disable and recovery commands
- Table 53 errdisable recovery command summary continued
- Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling
- Ethernet switch cli reference guide
- Command examples
- Chapter 19 error disable and recovery commands
- This example shows you how to configure the following
- This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active
- Ethernet switch cli reference guide
- Chapter 19 error disable and recovery commands
- Ethernet oam commands
- Ieee 802 ah link layer ethernet oam implementation
- Hapter
- Command summary
- This example enables ethernet oam on port 7 and sets the mode to active
- Table 54 ethernet oam command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 20 ethernet oam commands
- Table 55 show ethernet oam discovery
- Ethernet switch cli reference guide
- Chapter 20 ethernet oam commands
- This example performs ethernet oam discovery from port 7
- The following table describes the labels in this screen
- This example looks at the number of oam packets transferred on port 1
- Table 55 show ethernet oam discovery continued
- Ethernet switch cli reference guide
- Chapter 20 ethernet oam commands
- This example looks at the configuration of ports on which oam is enabled
- The following table describes the labels in this screen
- Table 57 show ethernet oam summary
- Table 56 show ethernet oam statistics
- Ethernet switch cli reference guide
- Chapter 20 ethernet oam commands
- Table 57 show ethernet oam summary continued
- Ethernet switch cli reference guide
- Chapter 20 ethernet oam commands
- Command summary
- Hapter
- External alarm commands
- This example configures and shows the name and status of the external alarm s
- Ethernet switch cli reference guide
- Command examples
- Chapter 21 external alarm commands
- Hapter
- Garp overview
- Garp commands
- Command summary
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds
- Ethernet switch cli reference guide
- Command examples
- Chapter 22 garp commands
- Command summary
- Command examples
- Hapter
- Gvrp commands
- Reference h m
- Https server commands
- Hapter
- Command summary
- This example shows the current https settings statistics and sessions
- The following table describes the labels in this screen
- Table 62 show https
- Ethernet switch cli reference guide
- Command examples
- Chapter 24 https server commands
- Table 63 show https session
- Table 62 show https continued
- Ethernet switch cli reference guide
- Chapter 24 https server commands
- This example shows the current https sessions
- The following table describes the labels in this screen
- Table 63 show https session continued
- Ethernet switch cli reference guide
- Chapter 24 https server commands
- Ieee 802 x authentication commands
- Hapter
- Guest vlan overview
- Command summary
- This example configures the switch in the following ways
- Table 64 port access authenticator command summary continued
- Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 4 enables port authentication on ports 4 to 8
- Ethernet switch cli reference guide
- Command examples
- Chapter 25 ieee 802 x authentication commands
- Command summary
- Igmp overview
- Igmp and multicasting commands
- Hapter
- This example configures igmp on the switch with the following settings
- Table 66 ipmc command summary
- Table 65 igmp command summary continued
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode
- Ethernet switch cli reference guide
- Command examples
- Chapter 26 igmp and multicasting commands
- Igmp snooping commands
- Hapter
- Command summary
- Table 68 igmp snooping command summary continued
- Ethernet switch cli reference guide
- Chapter 27 igmp snooping commands
- Table 70 interface igmp command summary
- Table 69 igmp snooping vlan command summary
- Table 68 igmp snooping command summary continued
- Ethernet switch cli reference guide
- Chapter 27 igmp snooping commands
- Table 70 interface igmp command summary continued
- Ethernet switch cli reference guide
- Chapter 27 igmp snooping commands
- Value to 30 seconds and sets the switch to drop packets from unknown multicast groups
- This example enables igmp snooping on the switch sets the
- Table 70 interface igmp command summary continued
- Host timeou
- Ethernet switch cli reference guide
- Command examples
- Chapter 27 igmp snooping commands
- Chapter 27 igmp snooping commands
- This example shows the current multicast vlan on the switch
- This example shows the current multicast groups on the switch
- This example limits the number of multicast groups on port 1 to 5
- The following table describes the labels in this screen
- Table 71 show multicast
- Ethernet switch cli reference guide
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55
- Ethernet switch cli reference guide
- Chapter 27 igmp snooping commands
- Igmp filtering commands
- Hapter
- Command summary
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55
- Ethernet switch cli reference guide
- Command examples
- Chapter 28 igmp filtering commands
- Interface commands
- Hapter
- Command summary
- Table 73 interface command summary continued
- Ethernet switch cli reference guide
- Chapter 29 interface commands
- This example looks at the current status of port 1
- The following table describes the labels in this screen
- Table 74 show interfaces
- Ethernet switch cli reference guide
- Command examples
- Chapter 29 interface commands
- Table 74 show interfaces continued
- Ethernet switch cli reference guide
- Chapter 29 interface commands
- Chapter 29 interface commands
- This example configures ports 1 5 in the following ways
- This example configures ports 1 3 4 and 5 in the following ways
- Table 74 show interfaces continued
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames
- Ethernet switch cli reference guide
- Interface route domain mode
- Hapter
- Command summary
- Command examples
- Ip commands
- Hapter
- Command summary
- Ethernet switch cli reference guide
- Command examples
- Chapter 31 ip commands
- This example shows the tcp statistics and listener ports see rfc 1213 for more information
- The following table describes the labels in this screen
- Table 78 show ip tcp
- Table 77 tcp and udp command summary continued
- Table 78 show ip tcp continued
- Ethernet switch cli reference guide
- Chapter 31 ip commands
- This example shows the udp statistics and listener ports see rfc 1213 for more information
- The following table describes the labels in this screen
- Table 79 show ip udp
- Table 78 show ip tcp continued
- Ethernet switch cli reference guide
- Chapter 31 ip commands
- Hapter
- Command summary
- Command examples
- Ip source binding commands
- Table 81 show ip source binding continued
- Ethernet switch cli reference guide
- Chapter 32 ip source binding commands
- Ipv6 overview
- Ipv6 commands
- Ipv6 addressing
- Hapter
- Ipv6 terms
- Table 85 reserved multicast address
- Table 84 predefined multicast address
- Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses
- Loopback
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4
- The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group
- Eui 64
- The following table describes user input values available in multiple commands for this feature
- The following section lists the commands for this feature
- Table 87 ipv6 address command summary
- Table 86 ipv6 user input values
- Report
- In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports
- Ethernet switch cli reference guide
- Command summary
- Chapter 33 ipv6 commands
- Table 87 ipv6 address command summary continued
- Note make sure an ipv6 router is available in the vlan network before using this command on the switch
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Chapter 33 ipv6 commands
- Table 88 ipv6 dhcp relay command summary
- Table 87 ipv6 address command summary continued
- Ethernet switch cli reference guide
- Table 90 ipv6 mld snooping proxy command summary
- Table 89 ipv6 icmp and ping6 command summary
- Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Table 90 ipv6 mld snooping proxy command summary continued
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Table 90 ipv6 mld snooping proxy command summary continued
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Table 90 ipv6 mld snooping proxy command summary continued
- Table 91 ipv6 nd command summary
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Table 92 ipv6 neighbor command summary
- Table 91 ipv6 nd command summary continued
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated for the vlan
- The following table describes the labels in the show ipv6 command output
- Table 93 show ipv6
- Table 92 ipv6 neighbor command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 33 ipv6 commands
- Chapter 33 ipv6 commands
- This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface
- This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan
- Table 93 show ipv6 continued
- Ethernet switch cli reference guide
- There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch
- The following table describes the labels in this screen
- Table 94 show ipv6 neighbor
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings
- Table 94 show ipv6 neighbor continued
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1
- Example enabling ipv6 on windows xp 2003
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses
- This example shows you how to access the switch using http on windows xp
- Make sure you have enabled ipv6 on your computer see section 33 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to
- It s recommended to use internet explorer 7 or firefox to access the switch s web gui
- Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer
- How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access
- Example http accessing the switch using ipv6
- In windows xp 2003 vista use the ipconfig command in the command prompt to check the ipv6 address on your computer each ipv6 address is appended with a percentage and the ethernet interface s interface identifier of the ethernet interface with which the address associates this is an example to show you how to ping from a windows xp computer to the switch
- Example ipv6 ping on windows xp 2003 vista
- Ethernet switch cli reference guide
- Check the switch ipv6 address es to which you want to ping in this example there are two ipv6 addresses in vlan 1 one is a link local address fe80 219 cbff fe00 1 64 and the other one is a global address 2001 1234 64
- Chapter 33 ipv6 commands
- Make sure you have enabled ipv6 on your computer see section 33 on page 160 use the ipconfig command in the command prompt to check this in this example the address fe80 2d0 59ff feb8 103c is used to ping the switch so the 4 of the ethernet interface identifier will be used later to ping
- Ping to the switch s link local address when you ping a link local address from a windows xp computer you have to append the interface identifier of the ethernet interface from which you want to ping
- Ping to the switch s global address when you ping a global address on a windows xp computer you just need to enter an ipv6 destination address
- Ethernet switch cli reference guide
- Chapter 33 ipv6 commands
- Layer 2 protocol tunnel l2pt commands
- Hapter
- Command summary
- This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port
- Table 96 l2pt command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 34 layer 2 protocol tunnel l2pt commands
- This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped
- Ethernet switch cli reference guide
- Chapter 34 layer 2 protocol tunnel l2pt commands
- This example sets l2pt mode to tunnel for port 4
- This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port
- Lldp overview
- Link layer discovery protocol lldp commands
- Hapter
- The following section lists the commands for this feature
- Table 97 lldp command summary
- Ethernet switch cli reference guide
- Command summary
- Chapter 35 link layer discovery protocol lldp commands
- Table 97 lldp command summary continued
- Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out
- Ethernet switch cli reference guide
- Chapter 35 link layer discovery protocol lldp commands
- Command examples
- Chapter 35 link layer discovery protocol lldp commands
- This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch
- Table 97 lldp command summary continued
- Ethernet switch cli reference guide
- Load sharing overview
- Load sharing commands
- Hapter
- Command summary
- This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet
- Ethernet switch cli reference guide
- Command examples
- Chapter 36 load sharing commands
- Logging commands
- Hapter
- Command summary
- Command examples
- Command summary
- Password encryption
- Login account commands
- Hapter
- This example creates a new user user2 with privilege 13
- Ethernet switch cli reference guide
- Command examples
- Chapter 38 login account commands
- Loopguard commands
- Hapter
- Command summary
- This example enables loopguard on ports 1 3
- The following table describes the labels in this screen
- Table 102 show loopguard
- Ethernet switch cli reference guide
- Command examples
- Chapter 39 loopguard commands
- Mac address commands
- Hapter
- Command summary
- This example shows the current mac address table
- The following table describes the labels in this screen
- Table 104 show mac address table
- Table 103 mac mac aging time and mac flush command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 40 mac address commands
- Mac authentication overview
- Mac authentication commands
- Hapter
- Command summary
- Command examples
- Chapter 41 mac authentication commands
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed
- Table 105 mac authentication command summary continued
- Ethernet switch cli reference guide
- Mac filter commands
- Hapter
- Command summary
- Command example filter source
- Command example
- Mac forward commands
- Hapter
- Command summary
- Mirror commands
- Hapter
- Command summary
- Command examples
- Chapter 44 mirror commands
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3
- Table 110 mirror filter command summary
- Table 109 mirror command summary continued
- Ethernet switch cli reference guide
- This example displays the mirror settings of the switch after you configured in the example above
- Ethernet switch cli reference guide
- Chapter 44 mirror commands
- Mrstp overview
- Mrstp commands
- Hapter
- Command summary
- In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch
- Ethernet switch cli reference guide
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1
- Command examples
- Chapter 45 mrstp commands
- This example configures mrstp in the following way
- Table 111 command summary mrstp
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu
- Mstp commands
- Hapter
- Command summary
- This example shows the current mstp configuration
- Table 113 mstp instance command summary
- Ethernet switch cli reference guide
- Command examples
- Chapter 46 mstp commands
- This example shows the current cist configuration mstp instance 0
- The following table describes the labels in this screen
- Table 114 show mstp
- Ethernet switch cli reference guide
- Chapter 46 mstp commands
- The following table describes the labels in this screen
- Table 115 show mstp instance
- Ethernet switch cli reference guide
- Chapter 46 mstp commands
- Multiple login commands
- Hapter
- Command summary
- Command examples
- Mvr commands
- Hapter
- Command summary
- Command examples
- Reference n s
- Ospf commands
- Hapter
- Command summary
- Ospf overview
- Table 119 ospf command summary continued
- Ethernet switch cli reference guide
- Chapter 49 ospf commands
- Table 119 ospf command summary continued
- Note you cannot set two routing protocols to have the same administrative distance
- Ethernet switch cli reference guide
- Chapter 49 ospf commands
- Table 119 ospf command summary continued
- In this example the switch a is an area border router abr in an ospf network
- Figure 7 ospf network example
- Ethernet switch cli reference guide
- Command examples
- Chapter 49 ospf commands
- Is also set to 1 as this router should participate in router elections
- In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the
- This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries
- From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries
- Ethernet switch cli reference guide
- Chapter 49 ospf commands
- Password encryption
- Password commands
- Hapter
- Command summary
- Command examples
- Poe commands
- Hapter
- Command summary
- Command examples
- Chapter 51 poe commands
- This example shows the current status and configuration of power over ethernet
- This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25
- Ethernet switch cli reference guide
- The following table describes the labels in this screen
- Table 122 show pwr
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w
- Note if the management mode is set to consumption this field shows na
- Ethernet switch cli reference guide
- Chapter 51 poe commands
- Policy commands
- Hapter
- Command summary
- Table 123 policy command summary
- Ethernet switch cli reference guide
- Chapter 52 policy commands
- Chapter 52 policy commands
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 59 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets
- Table 123 policy command summary
- Ethernet switch cli reference guide
- Command examples
- This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 59 this policy forwards class1 packets to port 8
- Ethernet switch cli reference guide
- Chapter 52 policy commands
- Policy route commands
- Hapter
- Command summary
- To forward packets that match the layer 3 classifier to the gateway with ip address
- Ethernet switch cli reference guide
- Command examples
- Chapter 53 policy route commands
- By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the
- 9 it then shows the policy routing information
- Port security commands
- Hapter
- Command summary
- This example enables port security on port 1 and limits the number of learned mac addresses to 5
- Table 125 port security command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 54 port security commands
- Port based vlan commands
- Hapter
- Command summary
- Command examples
- Pppoe intermediate agent overview
- Pppoe ia commands
- Port state
- Hapter
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port
- The following section lists the commands for this feature
- Table 127 pppoe intermediate agent command summary
- Ethernet switch cli reference guide
- Command summary
- Chapter 56 pppoe ia commands
- Table 127 pppoe intermediate agent command summary continued
- Ethernet switch cli reference guide
- Chapter 56 pppoe ia commands
- This is an example of how to set a pppoe ia trust port
- This is an example of how to enable and disable pppoe ia on the switch
- This is an example of how to enable and configure pppoe ia for vlans
- This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried
- Ethernet switch cli reference guide
- Command examples
- Chapter 56 pppoe ia commands
- Vendor specific tag examples
- This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5
- The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5
- Similarly we can let the circuit id carry the information which we configure
- Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio
- Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default
- Ethernet switch cli reference guide
- Chapter 56 pppoe ia commands
- Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting
- Private vlan overview
- Private vlan commands
- Hapter
- Ethernet switch cli reference guide
- Command summary
- Command examples
- Chapter 57 private vlan commands
- This example sets a private vlan rule
- The following section lists the commands for this feature
- That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the
- Table 128 private vlan command summary
- This example sets a private vlan rule
- That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the
- Ethernet switch cli reference guide
- Chapter 57 private vlan commands
- Protocol based vlan overview
- Protocol based vlan commands
- Hapter
- Command summary
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed
- Ethernet switch cli reference guide
- Command examples
- Chapter 58 protocol based vlan commands
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6
- Table 129 protocol based vlan command summary continued
- Queuing overview
- Queuing commands
- Hapter
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows
- The following section lists the commands for this feature
- Table 130 queuing command summary
- Note some models only support 4 queues
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of
- Ethernet switch cli reference guide
- Command summary port by port configuration
- Chapter 59 queuing commands
- Command examples port by port configuration
- Chapter 59 queuing commands
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8
- Table 130 queuing command summary continued
- Ethernet switch cli reference guide
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7
- The following section lists the commands for this feature
- Table 131 queueing command summary
- Note some models only support 4 queues
- Ethernet switch cli reference guide
- Command summary system wide configuration
- Command examples system wide
- Chapter 59 queuing commands
- Radius commands
- Hapter
- Command summary
- Chapter 60 radius commands
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server
- Table 133 radius accounting command summary continued
- Ethernet switch cli reference guide
- Command examples
- Remote management commands
- Hapter
- Command summary
- This example disables all snmp and icmp access to the
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all
- Table 136 service control command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 61 remote management commands
- Rip commands
- Hapter
- Command summary
- Rip overview
- This example
- Table 137 rip command summary continued
- Note you cannot set two routing protocols to have the same administrative distance
- Ethernet switch cli reference guide
- Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain
- Command examples
- Chapter 62 rip commands
- User input values
- Rmon overview
- Hapter
- The following section lists the commands for this feature
- Table 140 rmon command summary
- Ethernet switch cli reference guide
- Command summary
- Chapter 63 rmon
- This example shows how to configure the switch s action when an rmon event using the following settings
- This example also shows how to display the setting results
- Syntax
- Rmon event command example
- Rmon alarm command example
- Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test
- Ethernet switch cli reference guide
- Chapter 63 rmon
- This example shows you how to configure an alarm using the following settings
- Ethernet switch cli reference guide
- Chapter 63 rmon
- Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 63 on page 255 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 63 on page 255 who will handle this alarm operator
- The ethernet statistics table entry s index number 1 collecting data samples from which port 12
- Rmon statistics command example
- Ethernet switch cli reference guide
- Chapter 63 rmon
- This example shows how to configure the settings to display current network traffic statistics using the following settings
- This example also shows how to display the setting results
- This example also shows how to display the data collection results
- This example shows how to configure the settings to display historical network traffic statisticsusing the following settings
- This example also shows how to display the data collection results
- The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12
- Rmon history command example
- Ethernet switch cli reference guide
- Chapter 63 rmon
- Switch configuration file
- Running configuration commands
- Hapter
- Command summary
- Ethernet switch cli reference guide
- Command examples
- Chapter 64 running configuration commands
- This example resets the switch to the factory default settings
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8
- The following section lists the commands for this feature
- Table 142 running config command summary
- Sflow overview
- Hapter
- Command summary
- This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports
- Table 143 sflow command summary continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 65 sflow
- Smart isolation overview
- Smart isolation commands
- Hapter
- Command summary
- The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet
- This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled
- The following table describes the labels in this screen
- Table 145 show smart isolation
- Ethernet switch cli reference guide
- Command examples
- Chapter 66 smart isolation commands
- Table 145 show smart isolation continued
- Ethernet switch cli reference guide
- Chapter 66 smart isolation commands
- Snmp server commands
- Hapter
- Command summary
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch
- Ethernet switch cli reference guide
- Chapter 67 snmp server commands
- Table 148 snmp server trap destination enable traps command summary
- Table 147 snmp server command summary continued
- Table 148 snmp server trap destination enable traps command summary continued
- Ethernet switch cli reference guide
- Chapter 67 snmp server commands
- This example shows you how to display the snmp information on the switch
- This example shows you how to display all snmp user information on the switch
- Ethernet switch cli reference guide
- Command examples
- Chapter 67 snmp server commands
- Stp and rstp commands
- Hapter
- Command summary
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20
- Command examples
- Chapter 68 stp and rstp commands
- This example configures stp in the following ways
- Table 149 spanning tree command summary continued
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu
- Ethernet switch cli reference guide
- This example shows the current stp settings
- The following table describes the labels in this screen
- Table 150 show spanning tree config
- Ethernet switch cli reference guide
- Chapter 68 stp and rstp commands
- Table 150 show spanning tree config continued
- In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch
- Ethernet switch cli reference guide
- Chapter 68 stp and rstp commands
- Hapter
- Command summary
- Command examples
- Ssh commands
- This example shows the general ssh settings
- The following table describes the labels in this screen
- Table 152 show ssh
- Ethernet switch cli reference guide
- Chapter 69 ssh commands
- Static multicast commands
- Hapter
- Command summary
- Command examples
- Static route commands
- Hapter
- Command summary
- Ethernet switch cli reference guide
- Command examples
- Chapter 71 static route commands
- You can create this static route if it is inactive however
- This example shows the current routing table
- The following table describes the labels in this screen
- Table 155 show ip route
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54
- Ethernet switch cli reference guide
- Chapter 71 static route commands
- Subnet based vlan overview
- Subnet based vlan commands
- Hapter
- Command summary
- Ethernet switch cli reference guide
- Command examples
- Chapter 72 subnet based vlan commands
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24
- Table 156 subnet based vlan command summary continued
- Syslog commands
- Hapter
- Command summary
- Reference t z
- Tacacs commands
- Hapter
- Command summary
- Tftp commands
- Hapter
- Command summary
- Trunk commands
- Hapter
- Command summary
- Chapter 76 trunk commands
- This example looks at the current trunks
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation
- The following table describes the labels in this screen
- Table 166 show trunk
- Table 165 lacp command summary
- Ethernet switch cli reference guide
- Command examples
- This example shows the current lacp settings
- The following table describes the labels in this screen
- Table 167 show lacp
- Table 166 show trunk continued
- Ethernet switch cli reference guide
- Chapter 76 trunk commands
- Hapter
- Command summary
- Trtcm overview
- Trtcm commands
- This example activates trtcm on the switch with the following settings
- Table 168 trtcm command summary continued
- Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets
- Ethernet switch cli reference guide
- Command examples
- Chapter 77 trtcm commands
- This examples activates trtcm on the switch with the following settings
- Ethernet switch cli reference guide
- Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example
- Chapter 77 trtcm commands
- Vlan overview
- Vlan configuration overview
- Vlan commands
- Hapter
- See chapter 29 on page 125 for interface port channel commands
- Vlan ingress checking implementation differs across switch models
- The following section lists the commands for this feature
- The following section lists the commands for the ingress checking feature
- Command summary
- This example shows the vlan table
- This example deletes entry 2 in the static vlan table
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000
- Table 171 ingress check command summary
- Table 170 vlan1q ingress check command summary
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode
- Ethernet switch cli reference guide
- Command examples
- Chapter 78 vlan commands
- Ethernet switch cli reference guide
- Chapter 78 vlan commands
- This example enables ingress checking on ports 1 5
- The following table describes the labels in this screen
- Table 172 show vlan
- This example displays concurrent incoming packet statistics for vlan 1
- The following table describes the labels in this screen
- Table 173 show vlan counters
- Ethernet switch cli reference guide
- Chapter 78 vlan commands
- Table 173 show vlan counters continued
- Ethernet switch cli reference guide
- Chapter 78 vlan commands
- Vlan ip commands
- Ip interfaces overview
- Hapter
- Command summary
- Chapter 79 vlan ip commands
- Table 174 vlan ip address command summary continued
- See section 3 on page 24 for an example of how to configure a vlan management ip address using ipv4 see chapter 33 on page 146 for ipv6 vlan commands
- Ethernet switch cli reference guide
- Command examples
- Vlan mapping commands
- Hapter
- Command summary
- This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4
- This example enables vlan mapping on port 4
- Ethernet switch cli reference guide
- Command examples
- Chapter 80 vlan mapping commands
- Vlan port isolation commands
- Hapter
- Command summary
- Command summary
- Vlan stacking commands
- Hapter
- Vlan 24 vlan 24
- Table 177 vlan stacking command summary continued
- In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network
- Figure 10 example vlan stacking
- Ethernet switch cli reference guide
- Customer b customer b
- Customer a customer a
- Command examples
- Chapter 82 vlan stacking commands
- B 48 24
- A 37 24
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3
- Ethernet switch cli reference guide
- Chapter 82 vlan stacking commands
- Vlan trunking commands
- Hapter
- Command summary
- Vrrp overview
- Vrrp commands
- Hapter
- Command summary
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router
- Table 179 vrrp command summary continued
- Figure 11 example vrrp
- Ethernet switch cli reference guide
- Ethernet
- Command examples
- Chapter 84 vrrp commands
- Ethernet switch cli reference guide
- Chapter 84 vrrp commands
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 320
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 320
- Ethernet switch cli reference guide
- Chapter 84 vrrp commands
- Hapter
- Command summary
- Additional commands
- Table 181 command summary additional enable mode continued
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- This example checks the cable pairs on port 7
- Table 182 command summary additional configure mode
- Table 181 command summary additional enable mode continued
- Ethernet switch cli reference guide
- Command examples
- Chapter 85 additional commands
- This example shows the current status of the various alarms in the switch
- This example sends ping requests to an ethernet device with ip address 172 6 7 54
- The following table describes the labels in this screen
- Table 184 show alarm status
- Table 183 ping
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- This example shows the current and recent cpu utilization
- The following table describes the labels in this screen
- Table 185 show cpu utilization
- Table 184 show alarm status continued
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- Table 186 show hardware monitor
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- This example looks at the current sensor readings from various places in the hardware
- The following table describes the labels in this screen
- This example shows the current status of power over ethernet
- This example displays multicast vlan configuration on the
- The following table describes the labels in this screen
- Table 188 show poe status
- Table 187 show multicast vlan
- Table 186 show hardware monitor continued
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- Table 189 show system information
- Table 188 show poe status continued
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w
- Note if the management mode is set to consumption this field shows na
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- This example looks at general system information about the switch
- The following table describes the labels in this screen
- You can also see the alarm and warning threasholds
- This example displays the firmware version the switch is currently using
- This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the
- This example displays run time sfp small form facter pluggable parameters on port 21 on the
- For temperature voltage transmission bias transmission and receiving power as shown
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- This example runs an internal loopback test on ports 3 6
- This example displays the firmware versions of the dual firmware images
- This example displays route information to an ethernet device with ip address
- Ethernet switch cli reference guide
- Chapter 85 additional commands
- Appendices and index of commands
- Default values
- Ppendix
- Ppendix
- Legal information
- Copyright
- Certifications
- Zyxel limited warranty
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable
- Index of commands
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
- Index of commands
- Ethernet switch cli reference guide
Похожие устройства
-
Zyxel XGS4600-52FОфициальные технические данные -
Zyxel XGS4600-32FТехнические характеристики
-
Zyxel XGS4600-32Техническое описание
-
Zyxel XGS1210-12Краткая инструкция -
Zyxel XS3700-24Технический обзор -
Zyxel GS2210-8HPПодробное техническое описание
-
Zyxel GS2210-24HPТехническая спецификация
-
Zyxel GS2210-48HPТехническое описание
-
Zyxel GS2210-8Техническая спецификация
-
Zyxel GS2210-24Технический паспорт устройства
-
Zyxel GS2210-48Техническая спецификация
-
Zyxel XGS2210-28HPТехническая спецификация
Explore essential port security commands for Ethernet switches. Learn how to enable security, set MAC address limits, and manage VLAN configurations effectively.