![Zyxel MGS-3712F [97/284] Command summary](/img/pdf.png)
Zyxel MGS-3712F [97/284] Command summary
![Zyxel MGS-3712F [97/284] Command summary](/views2/1169509/page97/bg61.png)
Ethernet Switch CLI Reference Guide
97
CHAPTER 21
IEEE 802.1x Authentication
Commands
Use these commands to configure IEEE 802.1x authentication.
" Do not forget to configure the authentication server.
21.1 Command Summary
The following section lists the commands for this feature.
21.2 Command Examples
This example configures the Switch in the following ways:
Table 59 port-access-authenticator Command Summary
COMMAND DESCRIPTION M P
show port-access-authenticator Displays all port authentication settings. E 3
show port-access-authenticator
<port-list>
Displays port authentication settings on the specified port(s). E 3
port-access-authenticator Enables 802.1x authentication on the Switch. C 13
no port-access-authenticator Disables port authentication on the Switch. C 13
port-access-authenticator
<port-list>
Enables 802.1x authentication on the specified port(s). C 13
no port-access-authenticator
<port-list>
Disables authentication on the listed ports. C 13
port-access-authenticator
<port-list> reauthenticate
Sets a subscriber to periodically re-enter his or her username
and password to stay connected to a specified port.
C13
no port-access-authenticator
<port-list> reauthenticate
Disables the re-authentication mechanism on the listed
port(s).
C13
port-access-authenticator
<port-list> reauth-period <1-
65535>
Specifies how often (in seconds) a client has to re-enter the
username and password to stay connected to the specified
port(s).
C13
Содержание
- Cli reference guide 1
- Default login 1
- Ethernet switch 1
- Www zyxel com 1
- About this cli reference guide 3
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
- Document conventions 4
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4
- Document conventions 6
- Ethernet switch cli reference guide 6
- Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device 6
- Icons used in figures 6
- Contents overview 7
- Introduction 11 7
- Reference a g 7 7
- Reference h m 1 7
- Reference n s 55 8
- Reference t z 09 8
- Appendices and index of commands 53 9
- Introduction 11
- Accessing the cli 13
- Console port 13
- Hapter 13
- How to access and use the cli 13
- Telnet 13
- Logging in 14
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 14
- Using shortcuts and getting help 14
- Logging out 15
- Saving your configuration 15
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 15
- Hapter 17
- Privilege level and command mode 17
- Privilege levels 17
- Privilege levels for commands 17
- Privilege levels for login accounts 17
- Privilege levels for sessions 18
- Chapter 2 privilege level and command mode 19
- Command modes 19
- Command modes for privilege levels 0 12 19
- Command modes for privilege levels 13 14 19
- Consists of 1 32 alphanumeric characters for example the following command sets the password for privilege level 13 to pswd13 see chapter 73 on page 243 for more information about this command 19
- Disable command 19
- Ethernet switch cli reference guide 19
- If the session s privilege level is 0 12 the user and all of the allowed commands are in user mode users do not have to change modes to run any allowed commands 19
- If the session s privilege level is 13 14 the allowed commands are in one of several modes 19
- Show privilege command 19
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 19
- The cli is divided into several modes if a user has enough privilege to run a particular command the user has to run the command in the correct mode the modes that are available depend on the session s privilege level 19
- This command displays the session s current privilege level this command is available in user mode or enable mode 19
- This command reduces the session s privilege level to 0 it also changes the session to user mode this command is available in enable mode 19
- Chapter 2 privilege level and command mode 20
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 20
- Ethernet switch cli reference guide 20
- Listing available commands 20
- Log into the cli this takes you to the enable mode 20
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 20
- Table 8 changing between command modes for privilege levels 13 14 20
- Use the help command to view the executable commands on the switch you must have the highest privilege level in order to view all the commands follow these steps to create a list of supported commands 20
- Changing the administrator password 23
- Changing the enable password 23
- Hapter 23
- Initial setup 23
- Afterwards you have to use the new ip address to access the switch 24
- Changing the management ip address 24
- Changing the out of band management ip address 24
- Prohibiting concurrent logins 24
- Chapter 3 initial setup 25
- Ethernet switch cli reference guide 25
- Looking at basic system information 25
- Looking at the operating configuration 25
- See chapter 73 on page 243 for more information about these attributes 25
- This is illustrated in the following example 25
- Use this command to look at general system information about the switch 25
- Use this command to look at the current operating configuration 25
- Reference a g 27
- Aaa commands 29
- Command summary 29
- Hapter 29
- Chapter 4 aaa commands 30
- Ethernet switch cli reference guide 30
- Table 10 command summary aaa accounting continued 30
- Table 11 aaa authorization command summary 30
- Arp commands 31
- Command examples 31
- Command summary 31
- Hapter 31
- Arp inspection commands 33
- Command summary 33
- Hapter 33
- Chapter 6 arp inspection commands 34
- Ethernet switch cli reference guide 34
- Table 16 command summary arp inspection log continued 34
- Table 17 command summary interface arp inspection 34
- Table 18 command summary arp inspection vlan 34
- Chapter 6 arp inspection commands 35
- Command examples 35
- Ethernet switch cli reference guide 35
- Table 19 show arp inspection filter 35
- The following table describes the labels in this screen 35
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 35
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 35
- Chapter 6 arp inspection commands 36
- Ethernet switch cli reference guide 36
- Table 20 show arp inspection log 36
- Table 21 show arp inspection interface port channel 36
- The following table describes the labels in this screen 36
- This example displays whether ports are trusted or untrusted ports for arp inspection 36
- Chapter 6 arp inspection commands 37
- Ethernet switch cli reference guide 37
- Table 21 show arp inspection interface port channel continued 37
- Bandwidth commands 39
- Command summary 39
- Hapter 39
- Chapter 7 bandwidth commands 40
- Command examples ingress 40
- Ethernet switch cli reference guide 40
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 40
- Table 23 command summary bandwidth control bandwidth limit 40
- The following section lists the commands for this feature 40
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 40
- Chapter 7 bandwidth commands 41
- Command examples cir pir 41
- Ethernet switch cli reference guide 41
- This example deactivates the outgoing bandwidth limit on port 1 41
- This example displays the bandwidth limits configured on port 1 41
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 41
- Broadcast storm commands 43
- Command summary 43
- Hapter 43
- 128 broadcast packets per second 256 multicast packets per second 44
- Chapter 8 broadcast storm commands 44
- Command example bmstorm limit 44
- Command example broadcast limit multicast limit dlf limit 44
- Ethernet switch cli reference guide 44
- Table 25 command summary storm control bmstorm limit and bstorm control continued 44
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 44
- This example enables broadcast storm control on the switch and configures port 1 to accept up to 44
- 64 dlf packets per second 45
- Chapter 8 broadcast storm commands 45
- Ethernet switch cli reference guide 45
- Cfm commands 47
- Cfm term definition 47
- Hapter 47
- Chapter 9 cfm commands 48
- Command summary 48
- Ethernet switch cli reference guide 48
- Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 48
- Table 27 cfm command user input values 48
- Table 28 cfm command summary 48
- The following section lists the commands for this feature 48
- This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 48
- User input values 48
- Chapter 9 cfm commands 49
- Ethernet switch cli reference guide 49
- Table 28 cfm command summary continued 49
- Chapter 9 cfm commands 50
- Ethernet switch cli reference guide 50
- Table 28 cfm command summary continued 50
- Command examples 51
- Remember to save new settings using the write memory command 51
- This example creates md1 with md index 1 and level 1 and ma2 with ma index 2 and vlan id 2 under md1 that defines a cfm domain 51
- This example deletes ma2 with ma index 2 from md1 with md index 1 51
- Chapter 9 cfm commands 52
- Ethernet switch cli reference guide 52
- This example creates ma3 with ma index 3 and vlan id 123 under md1 and associates port 1 as an mep port with mep id 301 in the specified cfm domain this also sets mhf mip half function to default to have the switch automatically create mips for this ma and on the ports belonging to this ma s vlan when there are no lower configured md levels or there is a mep at the next lower configured md level on the port this also sets a remote mep in ma3 52
- This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 52
- This example starts a loopback test and displays the test result on the console 52
- Chapter 9 cfm commands 53
- Ethernet switch cli reference guide 53
- Table 29 show cfm action mipccmdb 53
- The following table describes the labels in this screen 53
- This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 53
- This example displays all neighbors mep port information in the mip ccm databases 53
- Classifier commands 55
- Command summary 55
- Hapter 55
- Chapter 10 classifier commands 56
- Ethernet switch cli reference guide 56
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 56
- Some of the most common tcp and udp port numbers are 56
- Table 31 common ethernet types and protocol number 56
- Table 32 common ip protocol types and protocol numbers 56
- Table 33 common tcp and udp port numbers 56
- The following table shows some other common ethernet types and the corresponding protocol number 56
- Command examples 57
- Cluster commands 59
- Command summary 59
- Hapter 59
- Chapter 11 cluster commands 60
- Command examples 60
- Ethernet switch cli reference guide 60
- Table 35 show cluster member 60
- The following table describes the labels in this screen 60
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 60
- Chapter 11 cluster commands 61
- Ethernet switch cli reference guide 61
- Table 36 show cluster 61
- The following table describes the labels in this screen 61
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager 61
- This example looks at the current status of the switch s cluster 61
- Command summary 63
- Date and time commands 63
- Hapter 63
- Chapter 12 date and time commands 64
- Command examples 64
- Ethernet switch cli reference guide 64
- Table 38 time command summary continued 64
- Table 39 timesync command summary 64
- This example sets the current date current time time zone and daylight savings time 64
- Chapter 12 date and time commands 65
- Ethernet switch cli reference guide 65
- Table 40 show timesync 65
- The following table describes the labels in this screen 65
- This example looks at the current time server settings 65
- Command summary 67
- Dhcp commands 67
- Hapter 67
- Chapter 13 dhcp commands 68
- Ethernet switch cli reference guide 68
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 68
- Table 42 dhcp relay command summary 68
- Table 43 dhcp relay broadcast command summary 68
- Table 44 dhcp relay command summary 68
- Chapter 13 dhcp commands 69
- Command examples 69
- Ethernet switch cli reference guide 69
- Figure 1 example global dhcp relay 69
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 69
- Table 45 dhcp server command summary 69
- Vlan1 vlan2 69
- 6 0 00 70
- Chapter 13 dhcp commands 70
- Ethernet switch cli reference guide 70
- Figure 2 example dhcp relay for two vlans 70
- In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 70
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 70
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 70
- This example shows how to configure these dhcp servers the vlans are already configured 70
- This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 3 on page 71 it also provides the dhcp clients with the ip address of the default gateway and the dns server 71
- Command summary 73
- Dhcp snooping dhcp vlan commands 73
- Hapter 73
- Chapter 14 dhcp snooping dhcp vlan commands 74
- Command examples 74
- Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 74
- Ethernet switch cli reference guide 74
- Table 46 dhcp snooping command summary continued 74
- Table 47 dhcp vlan command summary 74
- The following table describes the dhcp vlan commands 74
- This example 74
- Chapter 14 dhcp snooping dhcp vlan commands 75
- Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 75
- Ethernet switch cli reference guide 75
- Command summary 77
- Diffserv commands 77
- Hapter 77
- Command summary 79
- Dvmrp commands 79
- Dvmrp overview 79
- Hapter 79
- Chapter 16 dvmrp commands 80
- Command examples 80
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 80
- Ethernet switch cli reference guide 80
- Figure 4 dvmrp network example 80
- In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 80
- Table 49 command summary dvmrp continued 80
- Command summary 81
- Ethernet oam commands 81
- Hapter 81
- Ieee 802 ah link layer ethernet oam implementation 81
- Chapter 17 ethernet oam commands 82
- Command examples 82
- Ethernet switch cli reference guide 82
- Table 50 ethernet oam command summary continued 82
- This example enables ethernet oam on port 7 and sets the mode to active 82
- Chapter 17 ethernet oam commands 83
- Ethernet switch cli reference guide 83
- Table 51 show ethernet oam discovery 83
- The following table describes the labels in this screen 83
- This example performs ethernet oam discovery from port 7 83
- Chapter 17 ethernet oam commands 84
- Ethernet switch cli reference guide 84
- Table 51 show ethernet oam discovery continued 84
- This example looks at the number of oam packets transferred on port 1 84
- Chapter 17 ethernet oam commands 85
- Ethernet switch cli reference guide 85
- Table 52 show ethernet oam statistics 85
- Table 53 show ethernet oam summary 85
- The following table describes the labels in this screen 85
- This example looks at the configuration of ports on which oam is enabled 85
- Chapter 17 ethernet oam commands 86
- Ethernet switch cli reference guide 86
- Table 53 show ethernet oam summary continued 86
- Command summary 87
- Garp commands 87
- Garp overview 87
- Hapter 87
- Chapter 18 garp commands 88
- Command examples 88
- Ethernet switch cli reference guide 88
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 88
- Command examples 89
- Command summary 89
- Gvrp commands 89
- Hapter 89
- Reference h m 91
- Command summary 93
- Hapter 93
- Https server commands 93
- Chapter 20 https server commands 94
- Command examples 94
- Ethernet switch cli reference guide 94
- Table 57 show https 94
- The following table describes the labels in this screen 94
- This example shows the current https settings statistics and sessions 94
- Chapter 20 https server commands 95
- Ethernet switch cli reference guide 95
- Table 57 show https continued 95
- Table 58 show https session 95
- The following table describes the labels in this screen 95
- This example shows the current https sessions 95
- Chapter 20 https server commands 96
- Ethernet switch cli reference guide 96
- Table 58 show https session continued 96
- Command examples 97
- Command summary 97
- Hapter 97
- Ieee 802 x authentication commands 97
- Command summary 99
- Hapter 99
- Igmp and multicasting commands 99
- Igmp overview 99
- Chapter 22 igmp and multicasting commands 100
- Command examples 100
- Ethernet switch cli reference guide 100
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode configures the ip interface 172 6 with subnet mask 255 55 55 to route igmp version 3 packets 100
- Table 60 igmp command summary continued 100
- Table 61 ipmc command summary 100
- This example configures igmp on the switch with the following settings 100
- Command summary 101
- Hapter 101
- Igmp snooping commands 101
- Chapter 23 igmp snooping commands 102
- Ethernet switch cli reference guide 102
- Table 63 igmp snooping command summary continued 102
- Chapter 23 igmp snooping commands 103
- Ethernet switch cli reference guide 103
- Table 64 igmp snooping vlan command summary 103
- Table 65 interface igmp command summary 103
- Chapter 23 igmp snooping commands 104
- Ethernet switch cli reference guide 104
- Table 65 interface igmp command summary continued 104
- Chapter 23 igmp snooping commands 105
- Command examples 105
- Ethernet switch cli reference guide 105
- Host timeou 105
- Table 65 interface igmp command summary continued 105
- This example enables igmp snooping on the switch sets the 105
- This example limits the number of multicast groups on port 1 to 5 105
- This example shows the current multicast groups on the switch 105
- Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 105
- Chapter 23 igmp snooping commands 106
- Ethernet switch cli reference guide 106
- Table 66 show multicast 106
- The following table describes the labels in this screen 106
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 106
- This example shows the current multicast vlan on the switch 106
- Command summary 107
- Hapter 107
- Igmp filtering commands 107
- Chapter 24 igmp filtering commands 108
- Command examples 108
- Ethernet switch cli reference guide 108
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 108
- Command summary 109
- Hapter 109
- Interface commands 109
- Chapter 25 interface commands 110
- Command examples 110
- Ethernet switch cli reference guide 110
- Table 68 interface command summary continued 110
- Table 69 show interfaces 110
- The following table describes the labels in this screen 110
- This example looks at the current status of port 1 110
- Chapter 25 interface commands 111
- Ethernet switch cli reference guide 111
- Table 69 show interfaces continued 111
- Chapter 25 interface commands 112
- Ethernet switch cli reference guide 112
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames 112
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 112
- Table 69 show interfaces continued 112
- This example configures ports 1 3 4 and 5 in the following ways 112
- This example configures ports 1 5 in the following ways 112
- Command examples 113
- Command summary 113
- Hapter 113
- Interface route domain mode 113
- Command summary 115
- Hapter 115
- Ip commands 115
- Chapter 27 ip commands 116
- Command examples 116
- Ethernet switch cli reference guide 116
- Table 72 tcp and udp command summary continued 116
- Table 73 show ip tcp 116
- The following table describes the labels in this screen 116
- This example shows the tcp statistics and listener ports see rfc 1213 for more information 116
- Chapter 27 ip commands 117
- Ethernet switch cli reference guide 117
- Table 73 show ip tcp continued 117
- Chapter 27 ip commands 118
- Ethernet switch cli reference guide 118
- Table 73 show ip tcp continued 118
- Table 74 show ip udp 118
- The following table describes the labels in this screen 118
- This example shows the udp statistics and listener ports see rfc 1213 for more information 118
- Command examples 119
- Command summary 119
- Hapter 119
- Ip source binding commands 119
- Chapter 28 ip source binding commands 120
- Ethernet switch cli reference guide 120
- Table 76 show ip source binding continued 120
- Command summary 121
- Hapter 121
- Layer 2 protocol tunnel l2pt commands 121
- Chapter 29 layer 2 protocol tunnel l2pt commands 122
- Command examples 122
- Ethernet switch cli reference guide 122
- Table 77 l2pt command summary continued 122
- This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 122
- Chapter 29 layer 2 protocol tunnel l2pt commands 123
- Ethernet switch cli reference guide 123
- This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 123
- This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 123
- This example sets l2pt mode to tunnel for port 4 123
- Hapter 125
- Link layer discovery protocol lldp commands 125
- Lldp overview 125
- Chapter 30 link layer discovery protocol lldp commands 126
- Command summary 126
- Ethernet switch cli reference guide 126
- Table 78 lldp command summary 126
- The following section lists the commands for this feature 126
- Chapter 30 link layer discovery protocol lldp commands 127
- Ethernet switch cli reference guide 127
- Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 127
- Table 78 lldp command summary continued 127
- Chapter 30 link layer discovery protocol lldp commands 128
- Command examples 128
- Ethernet switch cli reference guide 128
- Table 78 lldp command summary continued 128
- This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 128
- Command examples 129
- Command summary 129
- Hapter 129
- Logging commands 129
- Command examples 131
- Command summary 131
- Hapter 131
- Login account commands 131
- Command summary 133
- Hapter 133
- Loopguard commands 133
- Chapter 33 loopguard commands 134
- Command examples 134
- Ethernet switch cli reference guide 134
- Table 82 show loopguard 134
- The following table describes the labels in this screen 134
- This example enables loopguard on ports 1 3 134
- Command summary 135
- Hapter 135
- Mac address commands 135
- Chapter 34 mac address commands 136
- Command examples 136
- Ethernet switch cli reference guide 136
- Table 83 mac mac aging time and mac flush command summary continued 136
- Table 84 show mac address table 136
- The following table describes the labels in this screen 136
- This example shows the current mac address table 136
- Command summary 137
- Hapter 137
- Mac authentication commands 137
- Mac authentication overview 137
- Chapter 35 mac authentication commands 138
- Command examples 138
- Ethernet switch cli reference guide 138
- Table 85 mac authentication command summary continued 138
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 138
- Command summary 139
- Hapter 139
- Mac filter commands 139
- Command example 140
- Command example filter source 140
- Command summary 141
- Hapter 141
- Mac forward commands 141
- Command summary 143
- Hapter 143
- Mirror commands 143
- Chapter 38 mirror commands 144
- Command examples 144
- Ethernet switch cli reference guide 144
- Table 90 mirror filter command summary 144
- This example displays the mirror settings of the switch after you configured in the example above 144
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 144
- Command summary 145
- Hapter 145
- Mrstp commands 145
- Mrstp overview 145
- Chapter 39 mrstp commands 146
- Command examples 146
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 146
- Ethernet switch cli reference guide 146
- Table 91 command summary mrstp 146
- This example configures mrstp in the following way 146
- Command summary 147
- Hapter 147
- Mstp commands 147
- Chapter 40 mstp commands 148
- Command examples 148
- Ethernet switch cli reference guide 148
- Table 93 mstp instance command summary continued 148
- Table 94 show mstp 148
- The following table describes the labels in this screen 148
- This example shows the current mstp configuration 148
- Chapter 40 mstp commands 149
- Ethernet switch cli reference guide 149
- Table 94 show mstp continued 149
- Table 95 show mstp instance 149
- The following table describes the labels in this screen 149
- This example shows the current cist configuration mstp instance 0 149
- Chapter 40 mstp commands 150
- Ethernet switch cli reference guide 150
- Table 95 show mstp instance continued 150
- This example adds the switch to the mst region mstregionnorth mstregionnorth is on revision number 1 in mstregionnorth vlan 2 is in mst instance 1 and vlan 3 is in mst instance 2 150
- Command examples 151
- Command summary 151
- Hapter 151
- Multiple login commands 151
- Command summary 153
- Hapter 153
- Mvr commands 153
- Command examples 154
- Reference n s 155
- Command summary 157
- Hapter 157
- Ospf commands 157
- Ospf overview 157
- Chapter 43 ospf commands 158
- Ethernet switch cli reference guide 158
- Table 99 ospf command summary continued 158
- Chapter 43 ospf commands 159
- Command examples 159
- Ethernet switch cli reference guide 159
- Figure 5 ospf network example 159
- In this example the switch a is an area border router abr in an ospf network 159
- Table 99 ospf command summary continued 159
- Chapter 43 ospf commands 160
- Config if ip ospf authentication key abcd1234 160
- Config if ip ospf priority 1 160
- Ethernet switch cli reference guide 160
- Interface route domain 172 6 24 160
- Is also set to 1 as this router should participate in router elections 160
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 160
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 160
- Command examples 161
- Command summary 161
- Hapter 161
- Password commands 161
- Command examples 163
- Command summary 163
- Hapter 163
- Poe commands 163
- Chapter 45 poe commands 164
- Ethernet switch cli reference guide 164
- Table 102 show pwr 164
- The following table describes the labels in this screen 164
- This example shows the current status and configuration of power over ethernet 164
- Chapter 45 poe commands 165
- Ethernet switch cli reference guide 165
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 165
- Table 102 show pwr continued 165
- Command summary 167
- Hapter 167
- Policy commands 167
- Chapter 46 policy commands 168
- Ethernet switch cli reference guide 168
- Table 103 policy command summary 168
- Chapter 46 policy commands 169
- Command examples 169
- Ethernet switch cli reference guide 169
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 10 on page 55 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 169
- Command summary 171
- Hapter 171
- Port security commands 171
- Chapter 47 port security commands 172
- Command examples 172
- Ethernet switch cli reference guide 172
- Table 104 port security command summary continued 172
- This example enables port security on port 1 and limits the number of learned mac addresses to 5 172
- Command examples 173
- Command summary 173
- Hapter 173
- Port based vlan commands 173
- Command summary 175
- Hapter 175
- Protocol based vlan commands 175
- Protocol based vlan overview 175
- Chapter 49 protocol based vlan commands 176
- Command examples 176
- Ethernet switch cli reference guide 176
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 176
- Table 106 protocol based vlan command summary continued 176
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 176
- Hapter 177
- Queuing commands 177
- Queuing overview 177
- Chapter 50 queuing commands 178
- Command summary port by port configuration 178
- Ethernet switch cli reference guide 178
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 178
- Note some models only support 4 queues 178
- Table 107 queuing command summary 178
- The following section lists the commands for this feature 178
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 178
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 178
- Chapter 50 queuing commands 179
- Command examples port by port configuration 179
- Command summary system wide configuration 179
- Ethernet switch cli reference guide 179
- Note some models only support 4 queues 179
- Table 107 queuing command summary continued 179
- Table 108 queueing command summary 179
- The following section lists the commands for this feature 179
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 179
- Chapter 50 queuing commands 180
- Command examples system wide 180
- Ethernet switch cli reference guide 180
- Table 108 queueing command summary continued 180
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 180
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 180
- Command summary 181
- Hapter 181
- Radius commands 181
- Chapter 51 radius commands 182
- Command examples 182
- Ethernet switch cli reference guide 182
- Table 110 radius accounting command summary continued 182
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 182
- Command summary 183
- Hapter 183
- Remote management commands 183
- Chapter 52 remote management commands 184
- Command examples 184
- Ethernet switch cli reference guide 184
- Table 113 service control command summary continued 184
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 184
- This example disables all snmp and icmp access to the 184
- Command examples 185
- Command summary 185
- Hapter 185
- Rip commands 185
- Rip overview 185
- Command summary 187
- Hapter 187
- Running configuration commands 187
- Switch configuration file 187
- Chapter 54 running configuration commands 188
- Command examples 188
- Ethernet switch cli reference guide 188
- Table 116 running config command summary 188
- The following section lists the commands for this feature 188
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 188
- This example resets the switch to the factory default settings 188
- Command summary 189
- Hapter 189
- Snmp server commands 189
- Chapter 55 snmp server commands 190
- Ethernet switch cli reference guide 190
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 190
- Table 118 snmp server command summary continued 190
- Table 119 snmp server trap destination enable traps command summary 190
- Chapter 55 snmp server commands 191
- Ethernet switch cli reference guide 191
- Table 119 snmp server trap destination enable traps command summary continued 191
- Command summary 193
- Hapter 193
- Stp and rstp commands 193
- Chapter 56 stp and rstp commands 194
- Command examples 194
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 194
- Ethernet switch cli reference guide 194
- Table 120 spanning tree command summary continued 194
- This example configures stp in the following ways 194
- This example shows the current stp settings 194
- Chapter 56 stp and rstp commands 195
- Ethernet switch cli reference guide 195
- Table 121 show spanning tree config 195
- The following table describes the labels in this screen 195
- Command examples 197
- Command summary 197
- Hapter 197
- Ssh commands 197
- Chapter 57 ssh commands 198
- Ethernet switch cli reference guide 198
- Table 123 show ssh 198
- The following table describes the labels in this screen 198
- This example shows the general ssh settings 198
- Command summary 199
- Hapter 199
- Static multicast commands 199
- Command examples 200
- Command summary 201
- Hapter 201
- Static route commands 201
- Chapter 59 static route commands 202
- Command examples 202
- Ethernet switch cli reference guide 202
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 202
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 202
- Table 126 show ip route 202
- The following table describes the labels in this screen 202
- This example shows the current routing table 202
- You can create this static route if it is inactive however 202
- Chapter 59 static route commands 203
- Ethernet switch cli reference guide 203
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 203
- Command summary 205
- Hapter 205
- Subnet based vlan commands 205
- Subnet based vlan overview 205
- Chapter 60 subnet based vlan commands 206
- Command examples 206
- Ethernet switch cli reference guide 206
- Table 127 subnet based vlan command summary continued 206
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 206
- Command summary 207
- Hapter 207
- Syslog commands 207
- Reference t z 209
- Command summary 211
- Hapter 211
- Tacacs commands 211
- Command summary 213
- Hapter 213
- Tftp commands 213
- Command summary 215
- Hapter 215
- Trunk commands 215
- Chapter 64 trunk commands 216
- Command examples 216
- Ethernet switch cli reference guide 216
- Table 136 lacp command summary 216
- Table 137 show trunk 216
- The following table describes the labels in this screen 216
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 216
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 216
- This example looks at the current trunks 216
- Chapter 64 trunk commands 217
- Ethernet switch cli reference guide 217
- Table 137 show trunk continued 217
- Table 138 show lacp 217
- The following table describes the labels in this screen 217
- This example shows the current lacp settings 217
- Command summary 219
- Hapter 219
- Trtcm commands 219
- Trtcm overview 219
- Chapter 65 trtcm commands 220
- Command examples 220
- Ethernet switch cli reference guide 220
- Sets the switch to inspect the dscp value of the packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 220
- Table 139 trtcm command summary continued 220
- This example activates trtcm on the switch with the following settings 220
- Hapter 221
- Vlan commands 221
- Vlan configuration overview 221
- Vlan overview 221
- Command summary 222
- See chapter 25 on page 109 for interface port channel commands 222
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command 222
- The following section lists the commands for the ingress checking feature 222
- The following section lists the commands for this feature 222
- Vlan ingress checking implementation differs across switch models 222
- Chapter 66 vlan commands 223
- Command examples 223
- Ethernet switch cli reference guide 223
- Other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 223
- Table 141 vlan1q ingress check command summary 223
- Table 142 ingress check command summary 223
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 223
- This example deletes entry 2 in the static vlan table 223
- This example shows the vlan table 223
- Chapter 66 vlan commands 224
- Ethernet switch cli reference guide 224
- Table 143 show vlan 224
- The following table describes the labels in this screen 224
- This example enables ingress checking on ports 1 5 224
- Chapter 66 vlan commands 225
- Ethernet switch cli reference guide 225
- Table 144 show vlan counters 225
- The following table describes the labels in this screen 225
- This example displays concurrent incoming packet statistics for vlan 1 225
- Chapter 66 vlan commands 226
- Ethernet switch cli reference guide 226
- Table 144 show vlan counters continued 226
- Command summary 227
- Hapter 227
- Ip interfaces overview 227
- Vlan ip commands 227
- Chapter 67 vlan ip commands 228
- Command examples 228
- Ethernet switch cli reference guide 228
- See section 3 on page 24 228
- Table 145 vlan ip address command summary continued 228
- Command summary 229
- Hapter 229
- Vlan mapping commands 229
- Chapter 68 vlan mapping commands 230
- Command examples 230
- Ethernet switch cli reference guide 230
- This example enables vlan mapping on port 4 230
- This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 230
- Command summary 231
- Hapter 231
- Vlan port isolation commands 231
- Command summary 233
- Hapter 233
- Vlan stacking commands 233
- A 37 24 234
- B 48 24 234
- Chapter 70 vlan stacking commands 234
- Command examples 234
- Customer a customer a 234
- Customer b customer b 234
- Ethernet switch cli reference guide 234
- Figure 6 example vlan stacking 234
- In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network 234
- Note in order to support vlan stacking on a port the port must be able to allow frames of 1526 bytes 1522 bytes 4 bytes for the second tag to pass through it 234
- Table 148 vlan stacking command summary continued 234
- Vlan 24 vlan 24 234
- Chapter 70 vlan stacking commands 235
- Ethernet switch cli reference guide 235
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 235
- Command summary 237
- Hapter 237
- Vlan trunking commands 237
- Command summary 239
- Hapter 239
- Vrrp commands 239
- Vrrp overview 239
- Chapter 72 vrrp commands 240
- Command examples 240
- Ethernet 240
- Ethernet switch cli reference guide 240
- Figure 7 example vrrp 240
- Table 150 vrrp command summary continued 240
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 240
- Chapter 72 vrrp commands 241
- Ethernet switch cli reference guide 241
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 7 on page 240 241
- Chapter 72 vrrp commands 242
- Ethernet switch cli reference guide 242
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 7 on page 240 242
- Additional commands 243
- Command summary 243
- Hapter 243
- Chapter 73 additional commands 244
- Ethernet switch cli reference guide 244
- Table 152 command summary additional enable mode continued 244
- Chapter 73 additional commands 245
- Command examples 245
- Ethernet switch cli reference guide 245
- Table 152 command summary additional enable mode continued 245
- Table 153 command summary additional configure mode 245
- This example checks the cable pairs on port 7 245
- This example sends ping requests to an ethernet device with ip address 172 6 7 54 245
- Chapter 73 additional commands 246
- Ethernet switch cli reference guide 246
- Table 154 ping 246
- Table 155 show alarm status 246
- The following table describes the labels in this screen 246
- This example shows the current status of the various alarms in the switch 246
- Chapter 73 additional commands 247
- Ethernet switch cli reference guide 247
- Table 156 show cpu utilization 247
- The following table describes the labels in this screen 247
- This example looks at the current sensor readings from various places in the hardware 247
- This example shows the current and recent cpu utilization 247
- Chapter 73 additional commands 248
- Ethernet switch cli reference guide 248
- Table 157 show hardware monitor 248
- The following table describes the labels in this screen 248
- This example displays multicast vlan configuration on the 248
- Chapter 73 additional commands 249
- Ethernet switch cli reference guide 249
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 249
- Table 158 show multicast vlan 249
- Table 159 show poe status 249
- The following table describes the labels in this screen 249
- This example looks at general system information about the switch 249
- This example shows the current status of power over ethernet 249
- Chapter 73 additional commands 250
- Ethernet switch cli reference guide 250
- For temperature voltage transmission bias transmission and receiving power as shown 250
- Table 160 show system information 250
- The following table describes the labels in this screen 250
- This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 250
- This example runs an internal loopback test on ports 3 6 250
- You can also see the alarm and warning threasholds 250
- Chapter 73 additional commands 251
- Ethernet switch cli reference guide 251
- This example displays route information to an ethernet device with ip address 251
- Appendices and 253
- Appendices and index of commands 253
- Index of commands 253
- Default values 255
- Ppendix 255
- Certifications 257
- Copyright 257
- Legal information 257
- Ppendix 257
- Zyxel limited warranty 258
- Customer support 261
- Ppendix 261
- Index of commands 267
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 267
- Ethernet switch cli reference guide 268
- Index of commands 268
- Ethernet switch cli reference guide 269
- Index of commands 269
- Ethernet switch cli reference guide 270
- Index of commands 270
- Ethernet switch cli reference guide 271
- Index of commands 271
- Ethernet switch cli reference guide 272
- Index of commands 272
- Ethernet switch cli reference guide 273
- Index of commands 273
- Ethernet switch cli reference guide 274
- Index of commands 274
- Ethernet switch cli reference guide 275
- Index of commands 275
- Ethernet switch cli reference guide 276
- Index of commands 276
- Ethernet switch cli reference guide 277
- Index of commands 277
- Ethernet switch cli reference guide 278
- Index of commands 278
- Ethernet switch cli reference guide 279
- Index of commands 279
- Ethernet switch cli reference guide 280
- Index of commands 280
- Ethernet switch cli reference guide 281
- Index of commands 281
- Ethernet switch cli reference guide 282
- Index of commands 282
- Ethernet switch cli reference guide 283
- Index of commands 283
Похожие устройства
- Zyxel XGS-4728F Инструкция по эксплуатации
- Zyxel XGS-4728F Инструкция по установке
- Zyxel XGS-4728F Справочник командного интерфейса
- Zyxel XGS-4728F Технические характеристики
- Zyxel XGS4700-48F Инструкция по эксплуатации
- Zyxel XGS4700-48F Справочник командного интерфейса
- Zyxel XGS4700-48F Технические характеристики
- HP pavilion 17-f153nr, k1x74ea Инструкция по эксплуатации
- HP pavilion 17-f154nr, k1x75ea Инструкция по эксплуатации
- HP pavilion 17-f155nr, k1x76ea Инструкция по эксплуатации
- HP pavilion 17-f156nr, k1x77ea Инструкция по эксплуатации
- HP pavilion 17-f157nr, k1x78ea Инструкция по эксплуатации
- HP pavilion 17-f201ur, l1t85ea Инструкция по эксплуатации
- HP pavilion 17-f204ur, l1t88ea Инструкция по эксплуатации
- HP pavilion 17-f207ur, l1t91ea Инструкция по эксплуатации
- HP pavilion 17-f208ur, l1t92ea Инструкция по эксплуатации
- HP pavilion 17-f209ur, l1t94ea Инструкция по эксплуатации
- HP pavilion 17-f210ur, l1t96ea Инструкция по эксплуатации
- HP pavilion 17-f211ur, l1t98ea Инструкция по эксплуатации
- HP pavilion 17-f252ur, l2e35ea Инструкция по эксплуатации
Скачать
Случайные обсуждения